[Docs] Document token analytics and task recovery

apps/docs/cost-analytics.mdx

@@ -5,9 +5,9 @@ description: Review Roomote inference spend by type, source, environment, provid
 ---
 
 Cost Analytics helps deployment teams understand how Roomote uses inference
-across tasks, Fast sessions, and automations. It reports the cost of
-recorded model usage in US dollars, so you can spot the environments, models,
-and work types that drive spend.
+across tasks, Fast sessions, and automations. It reports the cost of recorded
+model usage in US dollars alongside reported token usage, so you can spot the
+environments, models, and work types that drive spend and volume.
 
 Any signed-in deployment user can open **Analytics** from the dashboard. The
 page opens to **Costs** by default.
@@ -21,6 +21,7 @@ recorded inference usage. Use it to answer questions such as:
 - how much Session orchestration and Memory contribute to spend
 - which product features or runtime sources account for inference spend
 - whether a particular environment or model is driving costs
+- which providers and models account for the most tokens
 - how usage differs between people and automations
 - how a provider's cost changes over time
 
@@ -34,6 +35,12 @@ model and provider. The source also appears in the detail drilldown. Choose a
 time range before comparing periods so the chart and breakdown use the same
 window.
 
+The chart plots cost and token usage together on separate axes. Hover over a
+time bucket to compare both values, or select a cost or token segment to open
+its detail rows. The provider and model breakdown also shows total tokens and
+average tokens per task. Token-only activity can appear even when its reported
+cost is zero.
+
 Analytics date presets and daily chart buckets use the web server's timezone,
 including daylight-saving transitions. Costs, Tasks, and PR analytics use the
 same calendar-day boundaries; these are not based on each viewer's browser
@@ -43,7 +50,8 @@ timezone or the deployment's automation scheduling timezone.
 
 Select **Download data** to export the currently filtered detail rows as a CSV
 file. Apply the time range and filters first so the export contains the slice
-you intend to share or analyze elsewhere.
+you intend to share or analyze elsewhere. Cost exports include both the USD
+cost and token count for each row.
 
 ## Reading the results
 
@@ -52,6 +60,8 @@ providers. It is separate from [Anonymous Analytics](/anonymous-analytics):
 cost data stays inside your deployment for your team to review, while anonymous
 analytics is optional product telemetry sent to the Roomote team.
 
-If a provider does not report pricing or usage for a request, that request
-cannot contribute a cost to the view. Use provider and model filters to narrow
-an investigation when totals do not match an external provider invoice.
+Cost and token totals depend on the usage metadata reported by each provider.
+If a provider does not report pricing, a request can contribute tokens while
+its cost remains zero. Missing token usage appears as zero. Use provider and
+model filters to narrow an investigation when totals do not match an external
+provider invoice.

apps/docs/fast-sessions.mdx

@@ -117,8 +117,11 @@ workspace** for terminal, logs, diff, and preview tools.
 
 To stop just one active coding task, select **Stop** on its Session card. This
 requires execution access and stops the displayed task run without stopping the
-parent Session or sibling tasks. Cancellation errors appear on the card; check
-the resulting task status rather than assuming the request succeeded.
+parent Session or sibling tasks. Stop preserves the task's sandbox, work, and
+artifacts so a later message can resume it. Ask Fast to cancel the task instead
+when you want to permanently end the current run. Stop or cancellation errors
+appear on the card; check the resulting task status rather than assuming the
+request succeeded.
 
 On desktop, you can keep several task workspaces open beside the Session,
 resize them, and switch between the conversation and task panels without losing

apps/docs/integrations/snowflake.mdx

@@ -20,6 +20,10 @@ identifier, username, role, and PKCS8 PEM-encoded private key. Add the matching
 public key to the Snowflake user first. Supply the private-key passphrase too
 when the key is encrypted.
 
+Roomote supports Snowflake key-pair authentication only. Password and
+programmatic access token authentication are not supported; rotate an existing
+password- or token-based connection to an RSA key pair before using it again.
+
 Generate a dedicated encrypted RSA key on a secure operator machine. Keep the
 private key out of shell arguments, repositories, chat, and logs. For example,
 run `umask 077`, then use `openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:3072 -aes-256-cbc -out roomote_snowflake_key.p8` and enter the passphrase interactively. Export only the public key with `openssl pkey -in roomote_snowflake_key.p8 -pubout -out roomote_snowflake_key.pub`.