From dbdb753ab6c4d651e847699377945f42b04bb309 Mon Sep 17 00:00:00 2001
From: AI Dev <ai@openipc.org>
Date: Sun, 11 Oct 2026 18:42:33 +0000
Subject: [PATCH 1/2] A flash dump read with a programmer earns 3 stars;
 ipctool's backup keeps 10
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A maintainer in the user group: a dump uploaded as a file, read with a
programmer or over the console and TFTP, is worth about a quarter of one ipctool
makes (#458). ipctool reads the chip on the running camera and says with it
what the camera is; a programmer's image is the bytes alone. Both earned 10.

- reports.Points pays StarsPerRawDump (3) for a programmer's image, a dump new
  to the catalogue; ipctool's backup still earns StarsPerDump (10), and a
  known dump nothing. The two are told apart by the name the server gives a
  backup (RawDumpName, flash.bin; ipctool's is backup.bin), which the sender
  never chooses. ipctool's report joining the image later does not raise it.
- Nothing already paid changes: on production no programmer image had been
  paid any stars (two are stored, 0 net); the six ipctool backups keep theirs.
- The site says so: "How stars work" lists the two, the send form's dump
  button reads +3–10 ★, and the new-camera form's lede and dump hint give the
  programmer's 3 (en, ru, zh).

Closes #458
---
 data/locales/boards.en.yml                    |  5 ++--
 data/locales/boards.ru.yml                    |  5 ++--
 data/locales/boards.zh.yml                    |  5 ++--
 .../apps/site/src/components/club/Club.tsx    |  2 +-
 .../src/components/club/NewCameraForm.tsx     |  4 +--
 .../src/components/club/SendForm.test.tsx     |  6 +++++
 .../site/src/components/club/SendForm.tsx     |  3 ++-
 frontend/apps/site/src/i18n/boards.en.json    |  5 ++--
 frontend/apps/site/src/i18n/boards.ru.json    |  5 ++--
 frontend/apps/site/src/i18n/boards.zh.json    |  5 ++--
 frontend/apps/site/src/lib/club.ts            |  3 ++-
 service/internal/club/api_test.go             | 14 +++++-----
 service/internal/club/edit_test.go            |  9 +++++--
 service/internal/club/newcamera_test.go       |  9 ++++---
 service/internal/reports/club.go              | 26 ++++++++++++++-----
 service/internal/reports/edit.go              |  2 +-
 service/internal/reports/handler.go           |  2 +-
 17 files changed, 72 insertions(+), 38 deletions(-)

diff --git a/data/locales/boards.en.yml b/data/locales/boards.en.yml
index 5709c699..e976047a 100644
--- a/data/locales/boards.en.yml
+++ b/data/locales/boards.en.yml
@@ -517,7 +517,7 @@ en:
       kind_yaml: 'ipctool report'
       no_board: 'No board named'
       new_link: 'Add a camera that is not in the catalogue'
-      new_lede: 'Name the maker and the board, and add photos of it: the board''s front and back, and the label. A maintainer adds it to the catalogue when they publish your report; each photo and file earns {n} ★, and a whole-flash dump nobody sent before {dump} ★.'
+      new_lede: 'Name the maker and the board, and add photos of it: the board''s front and back, and the label. A maintainer adds it to the catalogue when they publish your report; each photo and file earns {n} ★, and a whole-flash dump nobody sent before {dump} ★ from ipctool, or {raw} ★ read with a programmer.'
       new_dump_hint: 'Optional. Read the chip with a programmer when ipctool cannot run on the camera, for example behind a U-Boot password; a dump nobody sent before earns {n} ★.'
       code_get: 'Send ipctool''s report from a camera'
       code_add_ipctool: 'Add ipctool''s report from this camera'
@@ -542,7 +542,8 @@ en:
       proposed: 'New: {board}'
       rules_title: 'How stars work'
       rules_item: 'Boot log, U-Boot console, photo, pinout, ipctool report'
-      rules_dump: 'Full flash dump the catalogue doesn''t have'
+      rules_dump: 'Full flash dump the catalogue doesn''t have, taken by ipctool'
+      rules_raw_dump: 'Full flash dump the catalogue doesn''t have, read with a programmer or over TFTP'
       rules_none: 'A dump the catalogue already holds, or anything not accepted'
       rules_note: 'Reports earn stars when a maintainer accepts them, never on upload. Cameras earn theirs once a night, from the days they kept sending pictures; stars for a camera found to be fake are taken back.'
       send_kinds_label: 'What you are sending'
diff --git a/data/locales/boards.ru.yml b/data/locales/boards.ru.yml
index ad70b71e..a7782252 100644
--- a/data/locales/boards.ru.yml
+++ b/data/locales/boards.ru.yml
@@ -568,7 +568,7 @@ ru:
       kind_yaml: 'Отчёт ipctool'
       no_board: 'Плата не указана'
       new_link: 'Добавить камеру, которой нет в каталоге'
-      new_lede: 'Укажите производителя и плату и приложите фото: плату с обеих сторон и наклейку. Мейнтейнер добавит её в каталог, когда опубликует ваш отчёт; каждое фото и файл приносят {n} ★, а полный дамп флеша, которого у нас ещё нет, — {dump} ★.'
+      new_lede: 'Укажите производителя и плату и приложите фото: плату с обеих сторон и наклейку. Мейнтейнер добавит её в каталог, когда опубликует ваш отчёт; каждое фото и файл приносят {n} ★, а полный дамп флеша, которого у нас ещё нет, — {dump} ★ от ipctool или {raw} ★, снятый программатором.'
       new_dump_hint: 'Необязательно. Снимите флеш программатором, если ipctool на камере не запустить, например когда U-Boot закрыт паролем; дамп, которого у нас ещё нет, приносит {n} ★.'
       code_get: 'Отправить отчёт ipctool с камеры'
       code_add_ipctool: 'Добавить отчёт ipctool с этой камеры'
@@ -593,7 +593,8 @@ ru:
       proposed: 'Новая: {board}'
       rules_title: 'Как начисляются звёзды'
       rules_item: 'Лог загрузки, консоль U-Boot, фото, распиновка, отчёт ipctool'
-      rules_dump: 'Полный дамп флеш-памяти, которого нет в каталоге'
+      rules_dump: 'Полный дамп флеш-памяти, которого нет в каталоге, снятый ipctool'
+      rules_raw_dump: 'Полный дамп флеш-памяти, которого нет в каталоге, снятый программатором или по TFTP'
       rules_none: 'Дамп, который уже есть в каталоге, или непринятый материал'
       rules_note: 'Отчёты приносят звёзды, когда мейнтейнер их принимает, а не при загрузке. Камеры получают свои раз в сутки — за дни, в которые присылали снимки; звёзды камеры, оказавшейся поддельной, списываются.'
       send_kinds_label: 'Что вы присылаете'
diff --git a/data/locales/boards.zh.yml b/data/locales/boards.zh.yml
index 9ef61233..cedb4d8f 100644
--- a/data/locales/boards.zh.yml
+++ b/data/locales/boards.zh.yml
@@ -512,7 +512,7 @@ zh:
       kind_yaml: 'ipctool 报告'
       no_board: '未指定电路板'
       new_link: '添加目录中没有的摄像头'
-      new_lede: '填写厂商和电路板，并附上照片：电路板正反面和标签。维护者发布你的报告时会把它加入目录；每张照片和每个文件可获得 {n} ★，我们还没有的完整闪存转储可获得 {dump} ★。'
+      new_lede: '填写厂商和电路板，并附上照片：电路板正反面和标签。维护者发布你的报告时会把它加入目录；每张照片和每个文件可获得 {n} ★，我们还没有的完整闪存转储：由 ipctool 制作可获得 {dump} ★，用编程器读取可获得 {raw} ★。'
       new_dump_hint: '可选。如果摄像头上无法运行 ipctool（例如 U-Boot 设有密码），可以用编程器读取闪存芯片；我们还没有的转储可获得 {n} ★。'
       code_get: '从摄像头发送 ipctool 报告'
       code_add_ipctool: '添加这台摄像头的 ipctool 报告'
@@ -537,7 +537,8 @@ zh:
       proposed: '新：{board}'
       rules_title: '星星如何计算'
       rules_item: '启动日志、U-Boot 控制台、照片、引脚图、ipctool 报告'
-      rules_dump: '目录中没有的完整闪存转储'
+      rules_dump: '目录中没有的完整闪存转储，由 ipctool 制作'
+      rules_raw_dump: '目录中没有的完整闪存转储，用编程器或通过 TFTP 读取'
       rules_none: '目录中已有的转储，或未通过的内容'
       rules_note: '报告在维护者通过时计星，上传时不计。摄像头每晚结算一次，按其持续发送画面的天数计星；被认定为伪造的摄像头，其星星会被收回。'
       send_kinds_label: '提交内容类型'
diff --git a/frontend/apps/site/src/components/club/Club.tsx b/frontend/apps/site/src/components/club/Club.tsx
index 8339269c..083ae6de 100644
--- a/frontend/apps/site/src/components/club/Club.tsx
+++ b/frontend/apps/site/src/components/club/Club.tsx
@@ -422,7 +422,7 @@ function Rules({ t }: { t: BoardsT }) {
       <table class="w-full border-collapse">
         <tbody>
           {([
-            ['rules_item', `+${STARS.item} ★`], ['rules_dump', `+${STARS.dump} ★`],
+            ['rules_item', `+${STARS.item} ★`], ['rules_dump', `+${STARS.dump} ★`], ['rules_raw_dump', `+${STARS.rawDump} ★`],
             ['rules_join', `+${STARS.join} ★`], ['rules_month', `+${STARS.month} ★`], ['rules_rare', `+${STARS.rare} ★`],
             ['rules_none', '0'],
           ] as const).map(([k, v]) => (
diff --git a/frontend/apps/site/src/components/club/NewCameraForm.tsx b/frontend/apps/site/src/components/club/NewCameraForm.tsx
index d676fda0..890c737b 100644
--- a/frontend/apps/site/src/components/club/NewCameraForm.tsx
+++ b/frontend/apps/site/src/components/club/NewCameraForm.tsx
@@ -82,7 +82,7 @@ export default function NewCameraForm({ locale }: { locale: Locale }) {
 
   return (
     <form class="grid gap-3 rounded-lg border-[1.5px] border-dashed border-[#e8c58f] bg-white p-4 text-sm" onSubmit={submit}>
-      <p class="m-0 text-body-secondary">{t('club.new_lede', { n: STARS.item, dump: STARS.dump })}</p>
+      <p class="m-0 text-body-secondary">{t('club.new_lede', { n: STARS.item, dump: STARS.dump, raw: STARS.rawDump })}</p>
       <div class="grid gap-3 sm:grid-cols-[1fr_1fr_10rem]">
         <label class="grid gap-1 text-[12.5px] text-body-secondary">{t('club.new_maker')}
           <input required value={maker} maxLength={80} placeholder={t('club.new_maker_hint')}
@@ -105,7 +105,7 @@ export default function NewCameraForm({ locale }: { locale: Locale }) {
         <label class="grid gap-1 text-[12.5px] text-body-secondary">{t('club.send_dump')}
           <input type="file" onChange={(e) => setDump((e.target as HTMLInputElement).files?.[0] ?? null)} class="text-sm text-body" />
         </label>
-        <p class="m-0 text-[12px] text-body-secondary">{t('club.new_dump_hint', { n: STARS.dump })}</p>
+        <p class="m-0 text-[12px] text-body-secondary">{t('club.new_dump_hint', { n: STARS.rawDump })}</p>
         {dump && (
           <label class="flex items-start gap-2 text-[12.5px] text-body-secondary">
             <input type="checkbox" checked={publicDump} onChange={(e) => setPublicDump((e.target as HTMLInputElement).checked)} class="mt-0.5" />
diff --git a/frontend/apps/site/src/components/club/SendForm.test.tsx b/frontend/apps/site/src/components/club/SendForm.test.tsx
index 07351eee..320bc2f3 100644
--- a/frontend/apps/site/src/components/club/SendForm.test.tsx
+++ b/frontend/apps/site/src/components/club/SendForm.test.tsx
@@ -53,6 +53,12 @@ describe('the send form', () => {
     expect(queryByText(/from power-on to the login prompt/)).toBeNull();
   });
 
+  test('a dump is offered for 3 to 10 stars: a programmer read earns 3, ipctool 10', () => {
+    const { getByRole } = render(<SendForm model="anjoy-ms-j10" kind="photo" locale="en" t={t} />);
+    expect(getByRole('button', { name: /Full flash dump/ }).textContent).toContain('+3–10 ★');
+    expect(getByRole('button', { name: /Photos/ }).textContent).toContain('+1 ★');
+  });
+
   test('a dump is private unless its owner ticks the box', async () => {
     const sent = capture();
     const { container, getByText } = render(<SendForm model="anjoy-ms-j10" kind="backup" locale="en" t={t} />);
diff --git a/frontend/apps/site/src/components/club/SendForm.tsx b/frontend/apps/site/src/components/club/SendForm.tsx
index 3dbb8f4f..a5052cce 100644
--- a/frontend/apps/site/src/components/club/SendForm.tsx
+++ b/frontend/apps/site/src/components/club/SendForm.tsx
@@ -76,7 +76,8 @@ export default function SendForm({ model, kind, locale, t, note }: {
     );
   }
 
-  const reward = (k: SendKind) => t('club.reward', { n: k === 'backup' ? STARS.dump : STARS.item });
+  // A dump earns 10 from ipctool, 3 from a programmer (#458): which this is shows only once it is read.
+  const reward = (k: SendKind) => t('club.reward', { n: k === 'backup' ? `${STARS.rawDump}–${STARS.dump}` : STARS.item });
   return (
     <form class="grid gap-2.5 rounded-lg border-[1.5px] border-dashed border-[#e8c58f] bg-white p-3.5 text-sm" onSubmit={submit}>
       <div class="flex flex-wrap gap-1.5" role="group" aria-label={t('club.send_kinds_label')}>
diff --git a/frontend/apps/site/src/i18n/boards.en.json b/frontend/apps/site/src/i18n/boards.en.json
index 103d6499..cb0d7369 100644
--- a/frontend/apps/site/src/i18n/boards.en.json
+++ b/frontend/apps/site/src/i18n/boards.en.json
@@ -121,7 +121,7 @@
       "new_boot_log_hint": "Either one: the whole boot from power-on to the login prompt, or U-Boot's console — autoboot stopped with Ctrl+C, then help, printenv and version.",
       "new_dump_hint": "Optional. Read the chip with a programmer when ipctool cannot run on the camera, for example behind a U-Boot password; a dump nobody sent before earns {n} ★.",
       "new_ipctool": "ipctool's output",
-      "new_lede": "Name the maker and the board, and add photos of it: the board's front and back, and the label. A maintainer adds it to the catalogue when they publish your report; each photo and file earns {n} ★, and a whole-flash dump nobody sent before {dump} ★.",
+      "new_lede": "Name the maker and the board, and add photos of it: the board's front and back, and the label. A maintainer adds it to the catalogue when they publish your report; each photo and file earns {n} ★, and a whole-flash dump nobody sent before {dump} ★ from ipctool, or {raw} ★ read with a programmer.",
       "new_link": "Add a camera that is not in the catalogue",
       "new_maker": "Maker",
       "new_maker_hint": "Xiongmai, Jooan, Hikvision…",
@@ -171,13 +171,14 @@
       "review_proposal": "Proposed by the sender",
       "review_title": "Review queue",
       "reward": "+{n} ★",
-      "rules_dump": "Full flash dump the catalogue doesn't have",
+      "rules_dump": "Full flash dump the catalogue doesn't have, taken by ipctool",
       "rules_item": "Boot log, U-Boot console, photo, pinout, ipctool report",
       "rules_join": "A camera you linked has sent pictures for 30 days since, real ones on 20 separate days",
       "rules_month": "Every further 30 days that camera keeps sending real pictures",
       "rules_none": "A dump the catalogue already holds, or anything not accepted",
       "rules_note": "Reports earn stars when a maintainer accepts them, never on upload. Cameras earn theirs once a night, from the days they kept sending pictures; stars for a camera found to be fake are taken back.",
       "rules_rare": "The first camera on the wall with its chip or its sensor",
+      "rules_raw_dump": "Full flash dump the catalogue doesn't have, read with a programmer or over TFTP",
       "rules_title": "How stars work",
       "send_another": "Send something else",
       "send_button": "Send to the catalogue",
diff --git a/frontend/apps/site/src/i18n/boards.ru.json b/frontend/apps/site/src/i18n/boards.ru.json
index a79a022c..9628460c 100644
--- a/frontend/apps/site/src/i18n/boards.ru.json
+++ b/frontend/apps/site/src/i18n/boards.ru.json
@@ -123,7 +123,7 @@
       "new_boot_log_hint": "Подойдёт любой: вся загрузка от включения до приглашения входа или консоль U-Boot — автозагрузка остановлена Ctrl+C, затем help, printenv и version.",
       "new_dump_hint": "Необязательно. Снимите флеш программатором, если ipctool на камере не запустить, например когда U-Boot закрыт паролем; дамп, которого у нас ещё нет, приносит {n} ★.",
       "new_ipctool": "Вывод ipctool",
-      "new_lede": "Укажите производителя и плату и приложите фото: плату с обеих сторон и наклейку. Мейнтейнер добавит её в каталог, когда опубликует ваш отчёт; каждое фото и файл приносят {n} ★, а полный дамп флеша, которого у нас ещё нет, — {dump} ★.",
+      "new_lede": "Укажите производителя и плату и приложите фото: плату с обеих сторон и наклейку. Мейнтейнер добавит её в каталог, когда опубликует ваш отчёт; каждое фото и файл приносят {n} ★, а полный дамп флеша, которого у нас ещё нет, — {dump} ★ от ipctool или {raw} ★, снятый программатором.",
       "new_link": "Добавить камеру, которой нет в каталоге",
       "new_maker": "Производитель",
       "new_maker_hint": "Xiongmai, Jooan, Hikvision…",
@@ -173,13 +173,14 @@
       "review_proposal": "Предложено отправителем",
       "review_title": "Очередь проверки",
       "reward": "+{n} ★",
-      "rules_dump": "Полный дамп флеш-памяти, которого нет в каталоге",
+      "rules_dump": "Полный дамп флеш-памяти, которого нет в каталоге, снятый ipctool",
       "rules_item": "Лог загрузки, консоль U-Boot, фото, распиновка, отчёт ipctool",
       "rules_join": "Привязанная вами камера присылает снимки 30 дней, настоящие — в 20 разных днях",
       "rules_month": "Каждые следующие 30 дней, в которые камера присылает настоящие снимки",
       "rules_none": "Дамп, который уже есть в каталоге, или непринятый материал",
       "rules_note": "Отчёты приносят звёзды, когда мейнтейнер их принимает, а не при загрузке. Камеры получают свои раз в сутки — за дни, в которые присылали снимки; звёзды камеры, оказавшейся поддельной, списываются.",
       "rules_rare": "Первая камера на стене с таким чипом или сенсором",
+      "rules_raw_dump": "Полный дамп флеш-памяти, которого нет в каталоге, снятый программатором или по TFTP",
       "rules_title": "Как начисляются звёзды",
       "send_another": "Прислать что-то ещё",
       "send_button": "Отправить в каталог",
diff --git a/frontend/apps/site/src/i18n/boards.zh.json b/frontend/apps/site/src/i18n/boards.zh.json
index c063af25..5dcfdd73 100644
--- a/frontend/apps/site/src/i18n/boards.zh.json
+++ b/frontend/apps/site/src/i18n/boards.zh.json
@@ -120,7 +120,7 @@
       "new_boot_log_hint": "两者皆可：从上电到登录提示符的完整启动过程，或 U-Boot 控制台——按 Ctrl+C 中断自动启动后执行 help、printenv 和 version。",
       "new_dump_hint": "可选。如果摄像头上无法运行 ipctool（例如 U-Boot 设有密码），可以用编程器读取闪存芯片；我们还没有的转储可获得 {n} ★。",
       "new_ipctool": "ipctool 输出",
-      "new_lede": "填写厂商和电路板，并附上照片：电路板正反面和标签。维护者发布你的报告时会把它加入目录；每张照片和每个文件可获得 {n} ★，我们还没有的完整闪存转储可获得 {dump} ★。",
+      "new_lede": "填写厂商和电路板，并附上照片：电路板正反面和标签。维护者发布你的报告时会把它加入目录；每张照片和每个文件可获得 {n} ★，我们还没有的完整闪存转储：由 ipctool 制作可获得 {dump} ★，用编程器读取可获得 {raw} ★。",
       "new_link": "添加目录中没有的摄像头",
       "new_maker": "厂商",
       "new_maker_hint": "Xiongmai、Jooan、Hikvision…",
@@ -170,13 +170,14 @@
       "review_proposal": "发送者提议",
       "review_title": "审核队列",
       "reward": "+{n} ★",
-      "rules_dump": "目录中没有的完整闪存转储",
+      "rules_dump": "目录中没有的完整闪存转储，由 ipctool 制作",
       "rules_item": "启动日志、U-Boot 控制台、照片、引脚图、ipctool 报告",
       "rules_join": "你绑定的摄像头此后持续发送画面 30 天，且在 20 个不同的日子里有真实画面",
       "rules_month": "此后该摄像头每持续发送真实画面 30 天",
       "rules_none": "目录中已有的转储，或未通过的内容",
       "rules_note": "报告在维护者通过时计星，上传时不计。摄像头每晚结算一次，按其持续发送画面的天数计星；被认定为伪造的摄像头，其星星会被收回。",
       "rules_rare": "墙上第一台使用该芯片或传感器的摄像头",
+      "rules_raw_dump": "目录中没有的完整闪存转储，用编程器或通过 TFTP 读取",
       "rules_title": "星星如何计算",
       "send_another": "再提交其他内容",
       "send_button": "提交到目录",
diff --git a/frontend/apps/site/src/lib/club.ts b/frontend/apps/site/src/lib/club.ts
index c2bcddd6..8f0fad0e 100644
--- a/frontend/apps/site/src/lib/club.ts
+++ b/frontend/apps/site/src/lib/club.ts
@@ -222,7 +222,8 @@ export async function sendReport(form: FormData): Promise<Sent> {
  * What one accepted thing earns, as the service counts it: reports.Points
  * for reports, wallstars.JoinStars/MonthStars/RareStars for cameras.
  */
-export const STARS = { item: 1, dump: 10, join: 5, month: 1, rare: 2 } as const;
+// dump: ipctool's backup; rawDump: a chip read with a programmer or over TFTP (#458).
+export const STARS = { item: 1, dump: 10, rawDump: 3, join: 5, month: 1, rare: 2 } as const;
 
 /** A camera of the member's on the Open Wall (service/internal/wallstars). */
 export interface Camera {
diff --git a/service/internal/club/api_test.go b/service/internal/club/api_test.go
index 886c122b..e19f1877 100644
--- a/service/internal/club/api_test.go
+++ b/service/internal/club/api_test.go
@@ -585,7 +585,7 @@ func TestWhatAMemberSendsIsTheirsAndEarnsStarsWhenAccepted(t *testing.T) {
 	_, mine := ivan.json(t, "GET", "/api/v1/club/reports", nil)
 	list := mine["reports"].([]any)
 	r := list[0].(map[string]any)
-	if len(list) != 1 || r["id"] != id || r["status"] != "pending" || r["pending"].(float64) != 11 ||
+	if len(list) != 1 || r["id"] != id || r["status"] != "pending" || r["pending"].(float64) != 4 ||
 		r["board"].(map[string]any)["id"] != "anjoy-ms-j10" {
 		t.Fatalf("mine: %v", r)
 	}
@@ -615,20 +615,20 @@ func TestWhatAMemberSendsIsTheirsAndEarnsStarsWhenAccepted(t *testing.T) {
 	maint.do(t, "GET", "/api/v1/club/github/callback?code=maint&state="+loc.Query().Get("state"), nil, "")
 	_, q := maint.json(t, "GET", "/api/v1/club/review", nil)
 	queued := q["reports"].([]any)
-	if len(queued) != 1 || queued[0].(map[string]any)["member"] != "Ivan" || queued[0].(map[string]any)["potential"].(float64) != 11 {
+	if len(queued) != 1 || queued[0].(map[string]any)["member"] != "Ivan" || queued[0].(map[string]any)["potential"].(float64) != 4 {
 		t.Fatalf("queue: %v", queued)
 	}
 	if rec := maint.do(t, "GET", backup["url"].(string), nil, ""); rec.Code != 200 {
 		t.Errorf("maintainer download: %d", rec.Code)
 	}
 	code, d := maint.json(t, "POST", "/api/v1/club/review/"+id, map[string]any{"decision": "publish"})
-	if code != 200 || d["points"].(float64) != 11 || d["total"].(float64) != 11 {
+	if code != 200 || d["points"].(float64) != 4 || d["total"].(float64) != 4 {
 		t.Fatalf("publish: %d %v", code, d)
 	}
-	if text, _ := e.tg.last(t); !strings.Contains(text, "+11 ★") {
+	if text, _ := e.tg.last(t); !strings.Contains(text, "+4 ★") {
 		t.Errorf("Ivan was told %q", text)
 	}
-	if m := ivan.me(t); m["stars"].(float64) != 11 || m["pending"].(float64) != 0 {
+	if m := ivan.me(t); m["stars"].(float64) != 4 || m["pending"].(float64) != 0 {
 		t.Errorf("Ivan's stars: %v", m)
 	}
 	// Published on the board its sender named, without the review naming it.
@@ -656,13 +656,13 @@ func TestWhatAMemberSendsIsTheirsAndEarnsStarsWhenAccepted(t *testing.T) {
 
 	// Rejected afterwards: Ivan's stars are taken back, and the ledger says so.
 	_, d = maint.json(t, "POST", "/api/v1/club/review/"+id, map[string]any{"decision": "reject", "note": "wrong board"})
-	if d["points"].(float64) != -11 || ivan.me(t)["stars"].(float64) != 0 {
+	if d["points"].(float64) != -4 || ivan.me(t)["stars"].(float64) != 0 {
 		t.Errorf("reject: %v, stars %v", d, ivan.me(t)["stars"])
 	}
 	// Published again, Ivan's report is whole again: he sent the dump first,
 	// and Petr's later copy does not take it from him.
 	_, d = maint.json(t, "POST", "/api/v1/club/review/"+id, map[string]any{"decision": "publish"})
-	if d["points"].(float64) != 11 || ivan.me(t)["stars"].(float64) != 11 {
+	if d["points"].(float64) != 4 || ivan.me(t)["stars"].(float64) != 4 {
 		t.Errorf("published again: %v, stars %v", d, ivan.me(t)["stars"])
 	}
 	if _, err := e.pool.Exec(ctx, `UPDATE report_stars SET points = 100`); err == nil {
diff --git a/service/internal/club/edit_test.go b/service/internal/club/edit_test.go
index cae9d262..17e865b5 100644
--- a/service/internal/club/edit_test.go
+++ b/service/internal/club/edit_test.go
@@ -230,7 +230,7 @@ func TestAnEditAddsAFlashDumpToAReportWithoutOne(t *testing.T) {
 	}
 
 	// The chip, public: the report goes back for review, and is paid for
-	// the dump when it is published again.
+	// the dump when it is published again -- a programmer's, 3 stars.
 	code, d := ivan.edit(t, id, map[string]string{"consent": "public"}, map[string][]byte{"backup": chip})
 	if code != 200 || d["status"] != "pending" || d["rereview"] != true {
 		t.Fatalf("adding the chip: %d %v", code, d)
@@ -240,7 +240,7 @@ func TestAnEditAddsAFlashDumpToAReportWithoutOne(t *testing.T) {
 	if consent != "public" || name != "flash.bin" {
 		t.Errorf("the dump: consent %q, name %q", consent, name)
 	}
-	if code, d := maint.json(t, "POST", "/api/v1/club/review/"+id, map[string]any{"decision": "publish"}); code != 200 || d["points"].(float64) != 10 {
+	if code, d := maint.json(t, "POST", "/api/v1/club/review/"+id, map[string]any{"decision": "publish"}); code != 200 || d["points"].(float64) != 3 {
 		t.Errorf("publishing it again: %d %v", code, d)
 	}
 	// A second one is refused: the first stays as it was sent.
@@ -266,4 +266,9 @@ func TestAnEditAddsAFlashDumpToAReportWithoutOne(t *testing.T) {
 	if consent != "private" || name != "backup.bin" {
 		t.Errorf("the ipctool backup: consent %q, name %q", consent, name)
 	}
+	// ipctool's backup earns a dump's 10 stars, ipctool's output its one
+	// (a programmer's above earned 3, #458).
+	if code, d := maint.json(t, "POST", "/api/v1/club/review/"+withYAML, map[string]any{"decision": "publish", "models": []string{"anjoy-ms-j10"}}); code != 200 || d["points"].(float64) != 11 {
+		t.Errorf("publishing ipctool's report with its backup: %d %v", code, d)
+	}
 }
diff --git a/service/internal/club/newcamera_test.go b/service/internal/club/newcamera_test.go
index 1461b52a..c78dad44 100644
--- a/service/internal/club/newcamera_test.go
+++ b/service/internal/club/newcamera_test.go
@@ -216,8 +216,9 @@ func TestRejectingLinksNothing(t *testing.T) {
 }
 
 // A camera ipctool could not run on: its photos and the whole chip read
-// with a programmer. The dump earns what a dump earns, stays private to its
-// sender and the maintainers, and only the photo goes onto the new board.
+// with a programmer. The dump earns what a programmer's dump earns (3 stars,
+// #458), stays private to its sender and the maintainers, and only the photo
+// goes onto the new board.
 func TestANewCameraComesWithAProgrammersDump(t *testing.T) {
 	e := newEnv(t)
 	ctx := context.Background()
@@ -233,7 +234,7 @@ func TestANewCameraComesWithAProgrammersDump(t *testing.T) {
 	maint := e.maintainer(t)
 	_, q := maint.json(t, "GET", "/api/v1/club/review", nil)
 	queued := q["reports"].([]any)[0].(map[string]any)
-	if queued["potential"].(float64) != 11 {
+	if queued["potential"].(float64) != 4 {
 		t.Fatalf("potential: %v", queued["potential"])
 	}
 	var dumpURL string
@@ -249,7 +250,7 @@ func TestANewCameraComesWithAProgrammersDump(t *testing.T) {
 		t.Fatalf("no dump in %v", queued["file_list"])
 	}
 	code, d := maint.json(t, "POST", "/api/v1/club/review/"+id, map[string]any{"decision": "publish", "new_board": queued["new_board"]})
-	if code != 200 || d["points"].(float64) != 11 || d["board"] != "jooan-q9-v2" {
+	if code != 200 || d["points"].(float64) != 4 || d["board"] != "jooan-q9-v2" {
 		t.Fatalf("publish: %d %v", code, d)
 	}
 	if rec := ivan.do(t, "GET", dumpURL, nil, ""); rec.Code != 200 {
diff --git a/service/internal/reports/club.go b/service/internal/reports/club.go
index 5e871ad6..87d8c25e 100644
--- a/service/internal/reports/club.go
+++ b/service/internal/reports/club.go
@@ -24,19 +24,33 @@ import (
 // before this one -- earns nothing. The first sender of a dump keeps it: a
 // later copy published meanwhile does not take it from them if their own
 // report is rejected and published again.
+//
+// A dump read with a programmer, or over U-Boot's console and TFTP, earns
+// less than ipctool's backup (#458): it is the bytes alone, while ipctool
+// reads the chip on the running camera and says with it what the camera
+// is. ipctool's report joining it later does not raise it.
 const (
-	StarsPerItem = 1
-	StarsPerDump = 10
+	StarsPerItem    = 1
+	StarsPerDump    = 10
+	StarsPerRawDump = 3
 )
 
+// RawDumpName is the name a whole chip read with a programmer is stored
+// under, and ipctool's backup never is (that is backup.bin): the sender
+// does not name a backup, the server does, so the name tells the two apart.
+const RawDumpName = "flash.bin"
+
 // Points is what one accepted thing earns: a file of kind, or ipctool's
-// output (kind "yaml").
+// output (kind "yaml"). A programmer's dump is kind "raw_backup" here.
 func Points(kind string, known bool) int {
 	switch kind {
-	case "backup":
+	case "backup", "raw_backup":
 		if known {
 			return 0
 		}
+		if kind == "raw_backup" {
+			return StarsPerRawDump
+		}
 		return StarsPerDump
 	case "yaml", "photo", "boot_log", "uboot_env", "note", "document":
 		return StarsPerItem
@@ -224,14 +238,14 @@ func (s *Store) potential(ctx context.Context, q rowsQuerier, id string, hasYAML
 		out[0] = Points("yaml", false)
 	}
 	rows, err := q.Query(ctx, `
-		SELECT f.position, f.kind,
+		SELECT f.position, CASE WHEN f.kind = 'backup' AND f.name = $2 THEN 'raw_backup' ELSE f.kind END,
 		  f.kind = 'backup' AND (
 		    EXISTS (SELECT 1 FROM report_files o JOIN reports ro ON ro.id = o.report_id
 		            WHERE o.sha256 = f.sha256 AND o.report_id <> f.report_id
 		              AND ro.received_at < (SELECT received_at FROM reports WHERE id = f.report_id)
 		              AND (SELECT decision FROM report_reviews rv WHERE rv.report_id = o.report_id ORDER BY rv.id DESC LIMIT 1) = 'publish')
 		    OR EXISTS (SELECT 1 FROM board_artifacts a WHERE a.sha256 = f.sha256))
-		FROM report_files f WHERE f.report_id = $1`, id)
+		FROM report_files f WHERE f.report_id = $1`, id, RawDumpName)
 	if err != nil {
 		return nil, err
 	}
diff --git a/service/internal/reports/edit.go b/service/internal/reports/edit.go
index dbe6d1ed..96564074 100644
--- a/service/internal/reports/edit.go
+++ b/service/internal/reports/edit.go
@@ -400,7 +400,7 @@ func (a *API) Edit(w http.ResponseWriter, r *http.Request, member, by, id string
 			return false
 		case err == nil:
 		case flashImage(in.backup.Bytes):
-			name = "flash.bin"
+			name = RawDumpName
 		default:
 			a.refuse(w, http.StatusBadRequest, "backup: "+err.Error())
 			return false
diff --git a/service/internal/reports/handler.go b/service/internal/reports/handler.go
index 2efb9957..c34b1ff9 100644
--- a/service/internal/reports/handler.go
+++ b/service/internal/reports/handler.go
@@ -259,7 +259,7 @@ func (a *API) Submit(w http.ResponseWriter, r *http.Request, member string) {
 	if in.backup != nil {
 		name := "backup.bin"
 		if raw {
-			name = "flash.bin"
+			name = RawDumpName
 		}
 		all = append([]part{{kind: "backup", name: name, mime: "application/octet-stream", in: in.backup}}, all...)
 	}

From b0bf77ec49fff9991ce64a5f6952dee1be040ecd Mon Sep 17 00:00:00 2001
From: AI Dev <ai@openipc.org>
Date: Sun, 11 Oct 2026 18:49:44 +0000
Subject: [PATCH 2/2] The new-camera form says ipctool's report sent later
 leaves a programmer dump's stars

Qodo on #462: the forms gave 3 and 10 but not that a joining ipctool report
does not raise the dump's 3 (en, ru, zh).
---
 data/locales/boards.en.yml                 | 2 +-
 data/locales/boards.ru.yml                 | 2 +-
 data/locales/boards.zh.yml                 | 2 +-
 frontend/apps/site/src/i18n/boards.en.json | 2 +-
 frontend/apps/site/src/i18n/boards.ru.json | 2 +-
 frontend/apps/site/src/i18n/boards.zh.json | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/data/locales/boards.en.yml b/data/locales/boards.en.yml
index e976047a..3d04f0db 100644
--- a/data/locales/boards.en.yml
+++ b/data/locales/boards.en.yml
@@ -518,7 +518,7 @@ en:
       no_board: 'No board named'
       new_link: 'Add a camera that is not in the catalogue'
       new_lede: 'Name the maker and the board, and add photos of it: the board''s front and back, and the label. A maintainer adds it to the catalogue when they publish your report; each photo and file earns {n} ★, and a whole-flash dump nobody sent before {dump} ★ from ipctool, or {raw} ★ read with a programmer.'
-      new_dump_hint: 'Optional. Read the chip with a programmer when ipctool cannot run on the camera, for example behind a U-Boot password; a dump nobody sent before earns {n} ★.'
+      new_dump_hint: 'Optional. Read the chip with a programmer when ipctool cannot run on the camera, for example behind a U-Boot password; a dump nobody sent before earns {n} ★. ipctool''s report sent for it later earns its own star and leaves the dump''s as they are.'
       code_get: 'Send ipctool''s report from a camera'
       code_add_ipctool: 'Add ipctool''s report from this camera'
       code_own: 'Run this on the camera within a day. The report becomes yours and earns stars once a maintainer accepts it.'
diff --git a/data/locales/boards.ru.yml b/data/locales/boards.ru.yml
index a7782252..5b904f3d 100644
--- a/data/locales/boards.ru.yml
+++ b/data/locales/boards.ru.yml
@@ -569,7 +569,7 @@ ru:
       no_board: 'Плата не указана'
       new_link: 'Добавить камеру, которой нет в каталоге'
       new_lede: 'Укажите производителя и плату и приложите фото: плату с обеих сторон и наклейку. Мейнтейнер добавит её в каталог, когда опубликует ваш отчёт; каждое фото и файл приносят {n} ★, а полный дамп флеша, которого у нас ещё нет, — {dump} ★ от ipctool или {raw} ★, снятый программатором.'
-      new_dump_hint: 'Необязательно. Снимите флеш программатором, если ipctool на камере не запустить, например когда U-Boot закрыт паролем; дамп, которого у нас ещё нет, приносит {n} ★.'
+      new_dump_hint: 'Необязательно. Снимите флеш программатором, если ipctool на камере не запустить, например когда U-Boot закрыт паролем; дамп, которого у нас ещё нет, приносит {n} ★. Отчёт ipctool, присланный к нему позже, приносит свою звезду, а за дамп остаётся столько же.'
       code_get: 'Отправить отчёт ipctool с камеры'
       code_add_ipctool: 'Добавить отчёт ipctool с этой камеры'
       code_own: 'Выполните это на камере в течение суток. Отчёт станет вашим и принесёт звёзды, когда мейнтейнер его примет.'
diff --git a/data/locales/boards.zh.yml b/data/locales/boards.zh.yml
index cedb4d8f..93cd889e 100644
--- a/data/locales/boards.zh.yml
+++ b/data/locales/boards.zh.yml
@@ -513,7 +513,7 @@ zh:
       no_board: '未指定电路板'
       new_link: '添加目录中没有的摄像头'
       new_lede: '填写厂商和电路板，并附上照片：电路板正反面和标签。维护者发布你的报告时会把它加入目录；每张照片和每个文件可获得 {n} ★，我们还没有的完整闪存转储：由 ipctool 制作可获得 {dump} ★，用编程器读取可获得 {raw} ★。'
-      new_dump_hint: '可选。如果摄像头上无法运行 ipctool（例如 U-Boot 设有密码），可以用编程器读取闪存芯片；我们还没有的转储可获得 {n} ★。'
+      new_dump_hint: '可选。如果摄像头上无法运行 ipctool（例如 U-Boot 设有密码），可以用编程器读取闪存芯片；我们还没有的转储可获得 {n} ★。之后为它补发的 ipctool 报告另得自己的星，转储的星数不变。'
       code_get: '从摄像头发送 ipctool 报告'
       code_add_ipctool: '添加这台摄像头的 ipctool 报告'
       code_own: '请在一天内在摄像头上运行此命令。维护者接受后，报告归你所有并获得星星。'
diff --git a/frontend/apps/site/src/i18n/boards.en.json b/frontend/apps/site/src/i18n/boards.en.json
index cb0d7369..820e903b 100644
--- a/frontend/apps/site/src/i18n/boards.en.json
+++ b/frontend/apps/site/src/i18n/boards.en.json
@@ -119,7 +119,7 @@
       "new_board_hint": "What is printed on the board, or the model on the box",
       "new_boot_log": "Boot log or U-Boot console",
       "new_boot_log_hint": "Either one: the whole boot from power-on to the login prompt, or U-Boot's console — autoboot stopped with Ctrl+C, then help, printenv and version.",
-      "new_dump_hint": "Optional. Read the chip with a programmer when ipctool cannot run on the camera, for example behind a U-Boot password; a dump nobody sent before earns {n} ★.",
+      "new_dump_hint": "Optional. Read the chip with a programmer when ipctool cannot run on the camera, for example behind a U-Boot password; a dump nobody sent before earns {n} ★. ipctool's report sent for it later earns its own star and leaves the dump's as they are.",
       "new_ipctool": "ipctool's output",
       "new_lede": "Name the maker and the board, and add photos of it: the board's front and back, and the label. A maintainer adds it to the catalogue when they publish your report; each photo and file earns {n} ★, and a whole-flash dump nobody sent before {dump} ★ from ipctool, or {raw} ★ read with a programmer.",
       "new_link": "Add a camera that is not in the catalogue",
diff --git a/frontend/apps/site/src/i18n/boards.ru.json b/frontend/apps/site/src/i18n/boards.ru.json
index 9628460c..73638d57 100644
--- a/frontend/apps/site/src/i18n/boards.ru.json
+++ b/frontend/apps/site/src/i18n/boards.ru.json
@@ -121,7 +121,7 @@
       "new_board_hint": "Что напечатано на плате или модель на коробке",
       "new_boot_log": "Лог загрузки или консоль U-Boot",
       "new_boot_log_hint": "Подойдёт любой: вся загрузка от включения до приглашения входа или консоль U-Boot — автозагрузка остановлена Ctrl+C, затем help, printenv и version.",
-      "new_dump_hint": "Необязательно. Снимите флеш программатором, если ipctool на камере не запустить, например когда U-Boot закрыт паролем; дамп, которого у нас ещё нет, приносит {n} ★.",
+      "new_dump_hint": "Необязательно. Снимите флеш программатором, если ipctool на камере не запустить, например когда U-Boot закрыт паролем; дамп, которого у нас ещё нет, приносит {n} ★. Отчёт ipctool, присланный к нему позже, приносит свою звезду, а за дамп остаётся столько же.",
       "new_ipctool": "Вывод ipctool",
       "new_lede": "Укажите производителя и плату и приложите фото: плату с обеих сторон и наклейку. Мейнтейнер добавит её в каталог, когда опубликует ваш отчёт; каждое фото и файл приносят {n} ★, а полный дамп флеша, которого у нас ещё нет, — {dump} ★ от ipctool или {raw} ★, снятый программатором.",
       "new_link": "Добавить камеру, которой нет в каталоге",
diff --git a/frontend/apps/site/src/i18n/boards.zh.json b/frontend/apps/site/src/i18n/boards.zh.json
index 5dcfdd73..f53c1982 100644
--- a/frontend/apps/site/src/i18n/boards.zh.json
+++ b/frontend/apps/site/src/i18n/boards.zh.json
@@ -118,7 +118,7 @@
       "new_board_hint": "电路板上印的文字，或包装盒上的型号",
       "new_boot_log": "启动日志或 U-Boot 控制台",
       "new_boot_log_hint": "两者皆可：从上电到登录提示符的完整启动过程，或 U-Boot 控制台——按 Ctrl+C 中断自动启动后执行 help、printenv 和 version。",
-      "new_dump_hint": "可选。如果摄像头上无法运行 ipctool（例如 U-Boot 设有密码），可以用编程器读取闪存芯片；我们还没有的转储可获得 {n} ★。",
+      "new_dump_hint": "可选。如果摄像头上无法运行 ipctool（例如 U-Boot 设有密码），可以用编程器读取闪存芯片；我们还没有的转储可获得 {n} ★。之后为它补发的 ipctool 报告另得自己的星，转储的星数不变。",
       "new_ipctool": "ipctool 输出",
       "new_lede": "填写厂商和电路板，并附上照片：电路板正反面和标签。维护者发布你的报告时会把它加入目录；每张照片和每个文件可获得 {n} ★，我们还没有的完整闪存转储：由 ipctool 制作可获得 {dump} ★，用编程器读取可获得 {raw} ★。",
       "new_link": "添加目录中没有的摄像头",