@h-ai/feedback 0.1.0-alpha.70 → 0.1.0-alpha.72

package/dist/client/index.js

@@ -1,9 +1,50 @@
-import { HaiFeedbackError, feedbackM, redactFeedbackText } from '../chunk-DYEK2FNM.js';
-import { FeedbackEvidenceInputSchema, FeedbackReportSchema, FeedbackSubmitInputSchema } from '@h-ai/api-contract/feedback';
-import { core, ok, err } from '@h-ai/core';
+import { feedbackM, HaiFeedbackError, redactFeedbackText } from '../chunk-PYKGS35A.js';
+import { ok, core, err } from '@h-ai/core';
+import { resolveFeedbackBudget, FeedbackSubmitInputSchema, FeedbackBudgetSchema, FeedbackEvidenceInputSchema, FeedbackReportSchema } from '@h-ai/api-contract/feedback';
+
+var nativeSaver;
+function configureFeedbackSaving(saver) {
+  nativeSaver = saver;
+}
+function feedbackDataBytes(data) {
+  return Uint8Array.from(atob(data.dataBase64), (value) => value.charCodeAt(0));
+}
+async function saveFeedbackFile(bytes, filename, contentType = "application/zip", signal) {
+  const name = [...filename].map((character) => character.charCodeAt(0) < 32 || /[\\/:*?"<>|]/.test(character) ? "_" : character).join("").slice(0, 200) || "feedback.zip";
+  try {
+    if (signal?.aborted)
+      return ok({ status: "cancelled" });
+    if (typeof window === "undefined")
+      throw new Error("Browser required");
+    const capacitor = Reflect.get(window, "Capacitor");
+    const isNative = Reflect.get(window, "__TAURI_INTERNALS__") || capacitor && typeof capacitor === "object" && "isNativePlatform" in capacitor && typeof capacitor.isNativePlatform === "function" && capacitor.isNativePlatform();
+    if (isNative) {
+      if (!nativeSaver)
+        throw new Error("Feedback platform saving adapter is not configured");
+      return ok(await nativeSaver(bytes, name, contentType, signal));
+    }
+    const url = URL.createObjectURL(new Blob([new Uint8Array(bytes).buffer], { type: contentType }));
+    const link = document.createElement("a");
+    try {
+      link.href = url;
+      link.download = name;
+      document.body.append(link);
+      link.click();
+    } finally {
+      link.remove();
+      setTimeout(() => URL.revokeObjectURL(url), 6e4);
+    }
+    return ok({ status: "saved" });
+  } catch (cause) {
+    const error = core.error.toPublic({ ...HaiFeedbackError.OPERATION_FAILED, message: feedbackM("feedback_operationFailed") });
+    core.logger.error("Feedback file save failed", { traceId: error.traceId, error: cause });
+    return err(error);
+  }
+}
 
 // src/client/feedback-client-image.ts
-var PRIVATE_SELECTOR = 'input,textarea,select,[contenteditable]:not([contenteditable="false"]),[data-feedback-private],.rr-block,.rr-mask';
+var PRIVATE_SELECTOR = 'input[type="password"],[data-feedback-private],.rr-block,.rr-mask';
+var CONTROL_SELECTOR = 'input,textarea,select,[contenteditable]:not([contenteditable="false"])';
 async function captureFeedbackScreenshot() {
   if (document.fonts) {
     let timeout;
@@ -15,13 +56,15 @@ async function captureFeedbackScreenshot() {
   }
   const { default: html2canvas } = await import('html2canvas');
   const canvas = await html2canvas(document.body, {
-    width: Math.min(window.innerWidth, 1920),
-    height: Math.min(window.innerHeight, 1200),
-    scale: 1,
+    width: window.innerWidth,
+    height: window.innerHeight,
+    scale: Math.min(1, 1920 / window.innerWidth, 1200 / window.innerHeight),
     // 原生 SVG foreignObject 保留 CSS mask 图标与字体基线，避免 CanvasRenderer 裁切文本。
     foreignObjectRendering: true,
-    scrollX: -window.scrollX,
-    scrollY: -window.scrollY,
+    x: window.scrollX,
+    y: window.scrollY,
+    scrollX: window.scrollX,
+    scrollY: window.scrollY,
     useCORS: false,
     allowTaint: false,
     logging: false,
@@ -53,10 +96,28 @@ async function captureFeedbackScreenshot() {
           }
         }
       }
-      for (const element of clone.querySelectorAll(PRIVATE_SELECTOR)) {
+      for (const element of clone.querySelectorAll(`${PRIVATE_SELECTOR},${CONTROL_SELECTOR}`)) {
+        if (!clone.documentElement.contains(element))
+          continue;
         const bounds = element.getBoundingClientRect();
         const replacement = clone.createElement("div");
-        replacement.style.cssText = `width:${bounds.width}px;height:${bounds.height}px;background:#111;color:transparent;overflow:hidden`;
+        const computed = clone.defaultView?.getComputedStyle(element);
+        if (computed) {
+          for (const property of Array.from(computed))
+            replacement.style.setProperty(property, computed.getPropertyValue(property), "important");
+        }
+        replacement.style.setProperty("width", `${bounds.width}px`, "important");
+        replacement.style.setProperty("height", `${bounds.height}px`, "important");
+        replacement.style.setProperty("box-sizing", "border-box", "important");
+        replacement.style.setProperty("overflow", "hidden", "important");
+        if (element.matches(PRIVATE_SELECTOR)) {
+          replacement.style.setProperty("background", "#111", "important");
+          replacement.style.setProperty("color", "transparent", "important");
+        } else {
+          const control = element;
+          const value = "value" in control ? control.value : element.textContent;
+          replacement.textContent = value ? "\u2022\u2022\u2022\u2022" : element.getAttribute("placeholder") ?? "";
+        }
         replacement.setAttribute("aria-hidden", "true");
         element.replaceWith(replacement);
       }
@@ -78,6 +139,11 @@ async function annotateFeedbackImage(bytes, annotation) {
   try {
     image.src = imageUrl;
     await image.decode();
+    if (annotation.coordinateSpace === "ratio") {
+      if ([annotation.x, annotation.y, annotation.width, annotation.height].some((value) => value < 0 || value > 1))
+        throw new Error("Invalid annotation ratio");
+      annotation = { ...annotation, x: annotation.x * image.naturalWidth, y: annotation.y * image.naturalHeight, width: annotation.width * image.naturalWidth, height: annotation.height * image.naturalHeight };
+    }
     canvas.width = image.naturalWidth;
     canvas.height = image.naturalHeight;
     const context = canvas.getContext("2d");
@@ -86,7 +152,9 @@ async function annotateFeedbackImage(bytes, annotation) {
     context.drawImage(image, 0, 0);
     if (annotation.mode === "mask") {
       context.fillStyle = "#111";
-      context.fillRect(annotation.x, annotation.y, annotation.width, annotation.height);
+      const left = Math.floor(annotation.x);
+      const top = Math.floor(annotation.y);
+      context.fillRect(left, top, Math.ceil(annotation.x + annotation.width) - left, Math.ceil(annotation.y + annotation.height) - top);
     } else {
       context.strokeStyle = "#e11d48";
       context.lineWidth = 3;
@@ -153,14 +221,14 @@ function sanitizeFeedbackReplay(value) {
       if (key === "attributes" && item && typeof item === "object") {
         const attributes = {};
         for (const [attribute, content] of Object.entries(item)) {
-          if (/^on|^(?:srcdoc|action|formaction|href|srcset)$/i.test(attribute) || CREDENTIAL_NAME.test(attribute))
+          if (/^on|^(?:srcdoc|action|formaction|href|srcset|rr_src)$/i.test(attribute) || CREDENTIAL_NAME.test(attribute))
             continue;
           if (attribute === "src" && typeof content === "string" && !/^data:image\/(?:png|jpeg|webp|gif);base64,/i.test(content)) {
             attributes["data-feedback-missing-resource"] = true;
             continue;
           }
-          if (attribute === "style" && typeof content === "string" && /url\s*\(/i.test(content)) {
-            attributes.style = sanitizeFeedbackText(content).replace(/url\s*\([^)]*\)/gi, "");
+          if ((attribute === "style" || attribute === "_cssText") && typeof content === "string") {
+            attributes[attribute] = sanitizeFeedbackText(content).replace(/(?:url|@import)\s*\([^)]*\)|@import\s+["'][^"']+["']/gi, "");
             attributes["data-feedback-missing-resource"] = true;
           } else {
             attributes[attribute] = visit(content, depth + 1);
@@ -246,10 +314,65 @@ async function restoreFeedbackCheckpoint(key) {
 }
 
 // src/client/feedback-client-main.ts
+function feedbackFileContentType(file) {
+  const type = file.type.split(";", 1)[0]?.trim().toLowerCase() ?? "";
+  const extensions = /* @__PURE__ */ new Map([
+    ["png", "image/png"],
+    ["jpg", "image/jpeg"],
+    ["jpeg", "image/jpeg"],
+    ["webp", "image/webp"],
+    ["webm", "video/webm"],
+    ["mp4", "video/mp4"],
+    ["txt", "text/plain"],
+    ["log", "text/plain"],
+    ["json", "application/json"],
+    ["pdf", "application/pdf"]
+  ]);
+  if (!type || type === "application/octet-stream")
+    return extensions.get(file.name.split(".").at(-1)?.toLowerCase() ?? "");
+  const aliases = /* @__PURE__ */ new Map([
+    ["image/x-png", "image/png"],
+    ["image/jpg", "image/jpeg"],
+    ["image/pjpeg", "image/jpeg"],
+    ["text/json", "application/json"],
+    ["text/x-log", "text/plain"],
+    ["application/x-pdf", "application/pdf"]
+  ]);
+  const normalized = aliases.get(type) ?? type;
+  return [...extensions.values()].includes(normalized) ? normalized : void 0;
+}
 function createFeedbackClient() {
   let config;
-  let initializing = false;
   let draft;
+  let sessionVersion = 0;
+  let policyVerified = false;
+  let preparedPage = "";
+  let budget = resolveFeedbackBudget();
+  const previews = /* @__PURE__ */ new Map();
+  let discardOnClose = false;
+  let saveController = new AbortController();
+  function releasePreviews() {
+    for (const preview of previews.values()) URL.revokeObjectURL(preview.url);
+    previews.clear();
+  }
+  function getView() {
+    const files = draft?.attachments ?? [];
+    for (const [id, preview] of previews) {
+      if (!files.some((file) => file.id === id && file.checksum === preview.checksum)) {
+        URL.revokeObjectURL(preview.url);
+        previews.delete(id);
+      }
+    }
+    return { attachments: files.map((file) => {
+      let preview = previews.get(file.id);
+      if (!preview) {
+        preview = { checksum: file.checksum, url: URL.createObjectURL(new Blob([new Uint8Array(file.bytes).buffer], { type: file.contentType })) };
+        previews.set(file.id, preview);
+      }
+      return { id: file.id, name: file.name, size: file.size, mimeType: file.contentType, url: preview.url };
+    }), evidence: draft?.evidence ?? [], missing: draft?.missing ?? [], budget: { ...budget } };
+  }
+  let initializing = false;
   let sequence = 0;
   let buffer = [];
   let bufferBytes = 0;
@@ -265,6 +388,7 @@ function createFeedbackClient() {
   let persistTimer;
   let flushTimer;
   let stopReplay;
+  let screenshotCaptures = 0;
   let unsubscribeLogger;
   let source = "";
   let keyScreenshots = [];
@@ -279,12 +403,15 @@ function createFeedbackClient() {
   const cleanups = [];
   const missing = /* @__PURE__ */ new Set();
   let replayChunks = [];
-  function failure(code = "OPERATION_FAILED", cause) {
+  function failure(code = "OPERATION_FAILED", cause, message) {
     const key = code === "NOT_INITIALIZED" ? "feedback_notInitialized" : code === "LIMIT_EXCEEDED" ? "feedback_limitExceeded" : code === "INVALID_INPUT" ? "feedback_invalidInput" : "feedback_operationFailed";
-    return err(HaiFeedbackError[code], feedbackM(key), cause);
+    const traceId = core.context.get().traceId ?? core.context.get().requestId ?? core.id.uuid();
+    const error = { ...HaiFeedbackError[code], traceId, message: message ?? feedbackM(key), cause };
+    core.logger[cause === void 0 ? "warn" : "error"]("Feedback client operation failed", { module: "feedback", traceId, error });
+    return err({ ...error, message: core.error.formatMessage(error) });
   }
   function limits() {
-    return { events: config?.maxEvents ?? 1e3, bytes: config?.maxBytes ?? 2 * 1024 * 1024, age: config?.maxAgeMs ?? 3e5, before: config?.beforeCount ?? 100, after: config?.afterCount ?? 100 };
+    return { events: Math.min(config?.maxEvents ?? 1e3, budget.maxEvidenceCount), bytes: Math.min(config?.maxBytes ?? 2 * 1024 * 1024, budget.maxEvidenceBytes), age: config?.maxAgeMs ?? 3e5, before: config?.beforeCount ?? 100, after: config?.afterCount ?? 100 };
   }
   function schedulePersist() {
     if (!config?.persistDraft || persistTimer)
@@ -350,6 +477,10 @@ function createFeedbackClient() {
       missing.add("browser-error-windows-truncated");
     }
     schedulePersist();
+    appendToDraft(item, size);
+  }
+  function appendToDraft(item, size) {
+    const bounds = limits();
     if (draft && !collectionFinished && !collectionSealed && (Date.now() <= deadline && afterCount < bounds.after || item.kind === "environment") && draft.evidence.length < bounds.events && draftBytes + size <= bounds.bytes) {
       draft.evidence.push(item);
       draftBytes += size;
@@ -374,7 +505,18 @@ function createFeedbackClient() {
       const numeric = [input.maxEvents, input.maxBytes, input.maxAgeMs, input.beforeCount, input.afterCount, input.afterTimeoutMs, input.screenshotTimeoutMs, input.maxKeyScreenshots, input.keyScreenshotThrottleMs];
       if (numeric.some((value) => value !== void 0 && (!Number.isSafeInteger(value) || value < 0)) || input.persistDraft && !input.persistenceKey)
         return failure("INVALID_INPUT");
+      if (!FeedbackSubmitInputSchema.pick({ appId: true, appVersion: true, buildId: true, commit: true }).safeParse({ appId: input.appId, appVersion: input.appVersion, buildId: input.buildId, commit: input.commit }).success)
+        return failure("INVALID_INPUT");
+      const initVersion = sessionVersion;
+      const policy = input.actions.policy ? await input.actions.policy().catch(() => failure("OPERATION_FAILED")) : ok(input.budget ?? resolveFeedbackBudget());
+      if (initVersion !== sessionVersion)
+        return failure("NOT_INITIALIZED");
+      policyVerified = policy.success;
+      budget = FeedbackBudgetSchema.parse(policy.success ? policy.data : input.budget ?? resolveFeedbackBudget());
+      if (!policy.success)
+        missing.add("server-policy-unavailable");
       config = input;
+      saveController = new AbortController();
       closing = false;
       source = `browser:${core.id.uuid()}`;
       storageKey = `${input.appId}:${input.persistenceKey ?? ""}`;
@@ -412,7 +554,7 @@ function createFeedbackClient() {
       unsubscribeLogger = core.logger.observe((entry) => {
         if (entry.context.module === "feedback" || entry.context.feedback === true)
           return;
-        record({ kind: ["error", "fatal"].includes(entry.level) ? "error" : "log", requestId: typeof entry.context.requestId === "string" ? entry.context.requestId : void 0, data: { level: entry.level, message: entry.message, context: entry.context } });
+        record({ kind: ["error", "fatal"].includes(entry.level) ? "error" : "log", requestId: typeof entry.context.requestId === "string" ? entry.context.requestId : typeof entry.context.traceId === "string" ? entry.context.traceId : void 0, data: { level: entry.level, message: entry.message, context: entry.context } });
       });
       listen("error", (event) => record({ kind: "error", data: { message: event.message, stack: event.error instanceof Error ? event.error.stack : void 0, filename: feedbackPageUrl(event.filename || location.href), line: event.lineno, column: event.colno } }));
       listen("unhandledrejection", (event) => record({ kind: "error", data: { reason: event.reason } }));
@@ -469,19 +611,22 @@ function createFeedbackClient() {
   async function startReplay(activeConfig) {
     try {
       const { record: start } = await import('@rrweb/record');
-      if (closing || config !== activeConfig)
+      if (closing || config !== activeConfig || screenshotCaptures || stopReplay)
         return;
+      let firstEvent = true;
       stopReplay = start({
         maskAllInputs: true,
         maskTextSelector: "[data-feedback-private],.rr-mask",
         blockSelector: "[data-feedback-ignore],[data-feedback-private],.rr-block,iframe,canvas,video",
-        inlineImages: true,
+        // rrweb 内联跨域图像会修改原 img 的 crossOrigin，可能破坏带凭据的头像等资源。
+        inlineImages: false,
         inlineStylesheet: true,
         collectFonts: false,
         checkoutEveryNms: 3e4,
         emit: (event, isCheckout) => {
-          if (isCheckout || replayChunks.length === 0)
+          if (firstEvent || isCheckout || replayChunks.length === 0)
             replayChunks.push([]);
+          firstEvent = false;
           let payload;
           try {
             payload = sanitizeFeedbackReplay(event);
@@ -493,6 +638,7 @@ function createFeedbackClient() {
           if (!safe.success)
             return;
           replayChunks.at(-1)?.push(safe.data);
+          appendToDraft(safe.data, new TextEncoder().encode(JSON.stringify(safe.data)).byteLength);
           while (replayChunks.length > 2)
             replayChunks.shift();
           const count = replayChunks.reduce((total, chunk) => total + chunk.length, 0);
@@ -515,10 +661,10 @@ function createFeedbackClient() {
     lastKeyScreenshot = Date.now();
     keyScreenshotPromise = (async () => {
       try {
-        const bytes = await bounded(activeConfig.captureScreenshot?.() ?? captureFeedbackScreenshot(), activeConfig.screenshotTimeoutMs ?? 3e3);
+        const bytes = await takeScreenshot(activeConfig);
         if (closing || config !== activeConfig)
           return;
-        if (bytes.byteLength > 5 * 1024 * 1024) {
+        if (bytes.byteLength > budget.maxAttachmentBytes) {
           missing.add("key-screenshot-size-limit-exceeded");
           return;
         }
@@ -536,6 +682,21 @@ function createFeedbackClient() {
     });
     return keyScreenshotPromise;
   }
+  function takeScreenshot(activeConfig) {
+    screenshotCaptures++;
+    stopReplay?.();
+    stopReplay = void 0;
+    const captured = (async () => {
+      try {
+        return await (activeConfig.captureScreenshot?.() ?? captureFeedbackScreenshot());
+      } finally {
+        screenshotCaptures--;
+        if (!screenshotCaptures && !closing && config === activeConfig && activeConfig.replay)
+          await startReplay(activeConfig);
+      }
+    })();
+    return bounded(captured, activeConfig.screenshotTimeoutMs ?? 3e3);
+  }
   async function doPrepare() {
     if (!config || closing)
       return failure("NOT_INITIALIZED");
@@ -550,8 +711,14 @@ function createFeedbackClient() {
       if (closing || config !== activeConfig)
         return failure("NOT_INITIALIZED");
     }
-    if (draft && !collectionFinished)
+    if (draft && !collectionFinished) {
+      if (!draft.submission && config.screenshot !== false && preparedPage !== pageIdentity()) {
+        const captured = await captureScreenshot();
+        if (!captured.success)
+          return captured;
+      }
       return ok(draft);
+    }
     collectionFinished = false;
     collectionSealed = false;
     initialIds.clear();
@@ -578,7 +745,7 @@ function createFeedbackClient() {
     if (closing || config !== activeConfig)
       return failure("NOT_INITIALIZED");
     keyScreenshots = keyScreenshots.filter((item) => item.timestamp >= now - limits().age);
-    draft = { submissionId: core.id.uuid(), anchorTime: anchor?.timestamp ?? now, anchorKind: anchor ? "error" : "feedback", errorId: anchor?.errorId, evidence: [...selected, ...other, ...replayChunks.flat()].sort((a, b) => a.sequence - b.sequence), attachments: keyScreenshots.map((item) => item.attachment), missing: [...missing], expiresAt: now + 864e5 };
+    draft = { submissionId: core.id.uuid(), anchorTime: anchor?.timestamp ?? now, anchorKind: anchor ? "error" : "feedback", errorId: anchor?.errorId, evidence: [...selected, ...other, ...replayChunks.flat()].sort((a, b) => a.sequence - b.sequence), attachments: [], missing: [...missing], expiresAt: now + 864e5 };
     while (draft.evidence.length > limits().events || new TextEncoder().encode(JSON.stringify(draft.evidence)).byteLength > limits().bytes) {
       draft.evidence.shift();
       missing.add("browser-draft-truncated");
@@ -588,30 +755,24 @@ function createFeedbackClient() {
       draft.missing.push(`browser-buffer-truncated:${dropped}`);
     afterCount = frozenWindow?.after ?? (anchor ? Math.max(0, logs.length - anchorIndex - 1) : 0);
     deadline = (anchor?.timestamp ?? now) + (config.afterTimeoutMs ?? 3e4);
-    record({ kind: "environment", data: { appId: config.appId, appVersion: config.appVersion, buildId: config.buildId, commit: config.commit, url: feedbackPageUrl(location.href), browser: navigator.userAgent, language: navigator.language, timezone: new Intl.DateTimeFormat().resolvedOptions().timeZone, viewport: { width: innerWidth, height: innerHeight, pixelRatio: devicePixelRatio }, online: navigator.onLine, cookies: collectFeedbackCookies(document.cookie, config.cookieAllowlist ?? []) } });
+    recordEnvironment();
     if (config.screenshot !== false) {
       const current = draft;
-      try {
-        const bytes = await bounded(config.captureScreenshot?.() ?? captureFeedbackScreenshot(), config.screenshotTimeoutMs ?? 3e3);
-        if (closing || config !== activeConfig || draft !== current)
-          return failure("NOT_INITIALIZED");
-        if (bytes.byteLength > 5 * 1024 * 1024) {
-          current.missing.push("screenshot-size-limit-exceeded");
-        } else {
-          const image = await attachment("screenshot.png", "image/png", bytes);
-          if (closing || config !== activeConfig || draft !== current)
-            return failure("NOT_INITIALIZED");
-          current.attachments.push(image);
-        }
-      } catch (cause) {
-        if (closing || config !== activeConfig || draft !== current)
-          return failure("NOT_INITIALIZED");
-        current.missing.push("screenshot-unavailable");
-        if (cause instanceof Error)
-          current.missing.push(`screenshot-error:${String(sanitizeFeedbackData({ message: cause.message }).message).slice(0, 300)}`);
+      const captured = await captureScreenshot(void 0, "screenshot.png");
+      if (closing || config !== activeConfig || draft !== current)
+        return failure("NOT_INITIALIZED");
+      if (!captured.success) {
+        current.missing.push(captured.error.code === HaiFeedbackError.LIMIT_EXCEEDED.code ? "screenshot-size-limit-exceeded" : "screenshot-unavailable");
+        current.missing.push(`screenshot-error:${captured.error.message.slice(0, 300)}`);
       }
     }
+    for (const { attachment: image } of keyScreenshots) {
+      if (image.size > budget.maxAttachmentBytes || draft.attachments.length >= budget.maxAttachmentCount || draft.attachments.reduce((sum, file) => sum + file.size, image.size) > budget.maxAttachmentsBytes)
+        draft.missing.push("key-screenshot-budget-exceeded");
+      else draft.attachments.push(image);
+    }
     schedulePersist();
+    preparedPage = pageIdentity();
     return ok(draft);
   }
   function prepare() {
@@ -620,6 +781,52 @@ function createFeedbackClient() {
     });
     return preparePromise;
   }
+  function recordEnvironment() {
+    if (!config)
+      return;
+    record({ kind: "environment", data: { appId: config.appId, appVersion: config.appVersion, buildId: config.buildId, commit: config.commit, url: feedbackPageUrl(location.href), browser: navigator.userAgent, language: navigator.language, timezone: new Intl.DateTimeFormat().resolvedOptions().timeZone, viewport: { width: innerWidth, height: innerHeight, pixelRatio: devicePixelRatio }, online: navigator.onLine, cookies: collectFeedbackCookies(document.cookie, config.cookieAllowlist ?? []) } });
+  }
+  function pageIdentity() {
+    return `${location.origin}${location.pathname}${location.hash.startsWith("#/") ? location.hash.split("?")[0] : ""}`;
+  }
+  async function captureScreenshot(attachmentId, name) {
+    if (!config || !draft || closing)
+      return failure("NOT_INITIALIZED");
+    const current = draft;
+    const activeConfig = config;
+    const previous = attachmentId ? current.attachments.find((item) => item.id === attachmentId) : void 0;
+    const previousChecksum = previous?.checksum;
+    if (current.submission)
+      return err(HaiFeedbackError.CONFLICT, feedbackM("feedback_conflict"));
+    if (attachmentId && (!previous || !previous.contentType.startsWith("image/")))
+      return failure("INVALID_INPUT");
+    if (!previous && current.attachments.length >= budget.maxAttachmentCount)
+      return failure("LIMIT_EXCEEDED");
+    try {
+      const bytes = await takeScreenshot(activeConfig);
+      if (bytes.byteLength > budget.maxAttachmentBytes)
+        return failure("LIMIT_EXCEEDED");
+      const previousName = previous && (/\.[^.]+$/.test(previous.name) ? previous.name.replace(/\.[^.]+$/, ".png") : `${previous.name}.png`);
+      const image = await attachment(name ?? previousName ?? `screenshot-${core.id.uuid()}.png`, "image/png", bytes);
+      if (closing || config !== activeConfig || draft !== current || current.submission || previous && (!current.attachments.includes(previous) || previous.checksum !== previousChecksum))
+        return err(HaiFeedbackError.CONFLICT, feedbackM("feedback_conflict"));
+      if (current.attachments.reduce((total, item) => total + (item === previous ? 0 : item.size), image.size) > budget.maxAttachmentsBytes)
+        return failure("LIMIT_EXCEEDED");
+      if (previous)
+        current.attachments = current.attachments.map((item) => item === previous ? { ...image, id: previous.id } : item);
+      else if (current.attachments.length < budget.maxAttachmentCount)
+        current.attachments.unshift(image);
+      else
+        return failure("LIMIT_EXCEEDED");
+      if (!name)
+        recordEnvironment();
+      preparedPage = pageIdentity();
+      schedulePersist();
+      return ok(void 0);
+    } catch (cause) {
+      return failure("OPERATION_FAILED", cause);
+    }
+  }
   async function submit(input = {}) {
     if (!config || closing)
       return failure("NOT_INITIALIZED");
@@ -629,6 +836,23 @@ function createFeedbackClient() {
       return prepared;
     const current = prepared.data;
     try {
+      if (!policyVerified && activeConfig.actions.policy) {
+        const policy = await activeConfig.actions.policy();
+        if (closing || config !== activeConfig || draft !== current)
+          return failure("NOT_INITIALIZED");
+        if (!policy.success)
+          return policy;
+        budget = FeedbackBudgetSchema.parse(policy.data);
+        policyVerified = true;
+        missing.delete("server-policy-unavailable");
+        current.missing = current.missing.filter((reason) => reason !== "server-policy-unavailable");
+        while (current.evidence.length && (current.evidence.length > limits().events || new TextEncoder().encode(JSON.stringify(current.evidence)).byteLength > limits().bytes)) {
+          current.evidence.shift();
+          if (!current.missing.includes("browser-draft-truncated"))
+            current.missing.push("browser-draft-truncated");
+        }
+        draftBytes = new TextEncoder().encode(JSON.stringify(current.evidence)).byteLength;
+      }
       const fingerprint = await digestHex(new TextEncoder().encode(JSON.stringify({ description: sanitizeFeedbackData({ text: input.description ?? "" }).text, category: input.category ?? "", contact: sanitizeFeedbackData({ text: input.contact ?? "" }).text, files: (input.files ?? []).map((item) => ({ name: item.name, size: item.size, lastModified: item.lastModified })), removed: [...input.removedAttachmentIds ?? []].sort() })));
       if (closing || config !== activeConfig || draft !== current)
         return failure("NOT_INITIALIZED");
@@ -689,7 +913,7 @@ function createFeedbackClient() {
         if (pending.some((item) => !initialIds.has(item.id)))
           return failure();
         drainPasses++;
-        if (drainPasses >= 20)
+        if (drainPasses >= budget.maxAttachmentCount)
           return ok(void 0);
       }
       if (collectionSealed) {
@@ -727,6 +951,8 @@ function createFeedbackClient() {
       const bytes = await annotateFeedbackImage(originalBytes, mark);
       const name = /\.[^.]+$/.test(item.name) ? item.name.replace(/\.[^.]+$/, ".png") : `${item.name}.png`;
       const updated = await attachment(name, "image/png", bytes);
+      if (updated.size > budget.maxAttachmentBytes || current.attachments.reduce((sum, file) => sum + (file === item ? 0 : file.size), updated.size) > budget.maxAttachmentsBytes)
+        return failure("LIMIT_EXCEEDED");
       if (closing || draft !== current || current.submission || !current.attachments.includes(item) || item.bytes !== originalBytes)
         return err(HaiFeedbackError.CONFLICT, feedbackM("feedback_conflict"));
       Object.assign(item, updated, { id });
@@ -736,45 +962,46 @@ function createFeedbackClient() {
       return failure("OPERATION_FAILED", cause);
     }
   }
-  async function addFiles(files) {
+  async function addFiles(files, removedAttachmentIds = []) {
     if (!draft)
       return failure("NOT_INITIALIZED");
-    if (draft.submission && files.length)
+    if (draft.submission && (files.length || removedAttachmentIds.length))
       return err(HaiFeedbackError.CONFLICT, feedbackM("feedback_retryInputChanged"));
     const current = draft;
     const items = [];
     const newMissing = [];
     try {
       for (const file of files) {
-        if (items.length >= 20 || file.size > 5 * 1024 * 1024)
+        if (items.length >= budget.maxAttachmentCount || file.size > budget.maxAttachmentBytes)
           return failure("LIMIT_EXCEEDED");
-        if (!["image/png", "image/jpeg", "image/webp", "text/plain", "application/json"].includes(file.type))
-          return failure("INVALID_INPUT");
+        const contentType = feedbackFileContentType(file);
+        if (!contentType)
+          return failure("INVALID_INPUT", void 0, feedbackM("feedback_unsupportedAttachmentType"));
         let bytes;
-        if (file.type.startsWith("text/") || file.type === "application/json") {
+        if (contentType.startsWith("text/") || contentType === "application/json") {
           const raw = await file.text();
-          if (file.type === "application/json" && raw.length > 8192)
+          if (contentType === "application/json" && raw.length > 8192)
             newMissing.push(`attachment-text-truncated:${String(sanitizeFeedbackData({ text: file.name }).text).slice(0, 100)}`);
-          bytes = file.type === "application/json" ? new TextEncoder().encode(JSON.stringify(sanitizeFeedbackData(JSON.parse(raw)))) : new TextEncoder().encode(sanitizeFeedbackText(raw));
+          bytes = contentType === "application/json" ? new TextEncoder().encode(JSON.stringify(sanitizeFeedbackData(JSON.parse(raw)))) : new TextEncoder().encode(sanitizeFeedbackText(raw));
         } else {
           bytes = new Uint8Array(await file.arrayBuffer());
         }
-        if (bytes.byteLength > 5 * 1024 * 1024)
+        if (bytes.byteLength > budget.maxAttachmentBytes)
           return failure("LIMIT_EXCEEDED");
-        const item = await attachment(file.name, file.type, bytes);
+        const item = await attachment(file.name, contentType, bytes);
         if (!items.some((existing) => existing.name === item.name && existing.checksum === item.checksum))
           items.push(item);
       }
       if (draft !== current || closing)
         return err(HaiFeedbackError.CONFLICT, feedbackM("feedback_conflict"));
-      if (current.submission && files.length)
+      if (current.submission && (files.length || removedAttachmentIds.length))
         return err(HaiFeedbackError.CONFLICT, feedbackM("feedback_retryInputChanged"));
-      const merged = [...current.attachments];
+      const merged = current.attachments.filter((file) => !removedAttachmentIds.includes(file.id));
       for (const item of items) {
         if (!merged.some((existing) => existing.name === item.name && existing.checksum === item.checksum))
           merged.push(item);
       }
-      if (merged.length > 20)
+      if (merged.length > budget.maxAttachmentCount || merged.reduce((total, item) => total + item.size, 0) > budget.maxAttachmentsBytes)
         return failure("LIMIT_EXCEEDED");
       current.attachments = merged;
       current.missing.push(...newMissing);
@@ -797,24 +1024,27 @@ function createFeedbackClient() {
         attachments.splice(0, attachments.length, ...draft.attachments);
       } else {
         for (const file of input.files ?? []) {
-          if (attachments.length >= 20 || file.size > 5 * 1024 * 1024)
+          if (attachments.length >= budget.maxAttachmentCount || file.size > budget.maxAttachmentBytes)
             return failure("LIMIT_EXCEEDED");
-          if (!["image/png", "image/jpeg", "image/webp", "text/plain", "application/json"].includes(file.type))
-            return failure("INVALID_INPUT");
-          const bytes = file.type === "application/json" ? new TextEncoder().encode(JSON.stringify(sanitizeFeedbackData(JSON.parse(await file.text())))) : file.type.startsWith("text/") ? new TextEncoder().encode(sanitizeFeedbackText(await file.text())) : new Uint8Array(await file.arrayBuffer());
-          if (bytes.byteLength > 5 * 1024 * 1024)
+          const contentType = feedbackFileContentType(file);
+          if (!contentType)
+            return failure("INVALID_INPUT", void 0, feedbackM("feedback_unsupportedAttachmentType"));
+          const bytes = contentType === "application/json" ? new TextEncoder().encode(JSON.stringify(sanitizeFeedbackData(JSON.parse(await file.text())))) : contentType.startsWith("text/") ? new TextEncoder().encode(sanitizeFeedbackText(await file.text())) : new Uint8Array(await file.arrayBuffer());
+          if (bytes.byteLength > budget.maxAttachmentBytes)
             return failure("LIMIT_EXCEEDED");
-          const item = await attachment(file.name, file.type, bytes);
+          const item = await attachment(file.name, contentType, bytes);
           if (!attachments.some((existing) => existing.name === item.name && existing.checksum === item.checksum))
             attachments.push(item);
         }
       }
-      return createFeedbackBundle({ report: { ...draft.report ?? { id: draft.submissionId, appId: config?.appId, anchor: { kind: draft.anchorKind, timestamp: draft.anchorTime }, evidenceRevision: 1 }, ...sanitizeFeedbackData({ description: input.description ?? draft.report?.description ?? "", category: input.category, contact: input.contact }) }, evidence: draft.evidence, attachments: attachments.filter((item) => !input.removedAttachmentIds?.includes(item.id)), missing: [.../* @__PURE__ */ new Set([...draft.missing, ...missing, ...!draft.report ? ["server-evidence-not-obtained", "feedback-not-yet-accepted"] : []])] });
+      return createFeedbackBundle({ maxBytes: budget.maxTotalBytes, report: { ...draft.report ?? { id: draft.submissionId, appId: config?.appId, appVersion: config?.appVersion, buildId: config?.buildId, commit: config?.commit, url: draft.evidence.filter((item) => item.kind === "environment").at(-1)?.data.url, anchor: { kind: draft.anchorKind, timestamp: draft.anchorTime }, evidenceRevision: 1 }, ...sanitizeFeedbackData({ description: input.description ?? draft.report?.description ?? "", category: input.category, contact: input.contact }) }, evidence: draft.evidence, attachments: attachments.filter((item) => !input.removedAttachmentIds?.includes(item.id)), missing: [.../* @__PURE__ */ new Set([...draft.missing, ...missing, ...!draft.report ? ["server-evidence-not-obtained", "feedback-not-yet-accepted"] : []])] });
     } catch (cause) {
       return failure("OPERATION_FAILED", cause);
     }
   }
-  function close() {
+  function close(options = {}) {
+    sessionVersion++;
+    discardOnClose ||= options.discard === true;
     closePromise ??= doClose().finally(() => {
       closePromise = void 0;
     });
@@ -822,6 +1052,7 @@ function createFeedbackClient() {
   }
   async function doClose() {
     closing = true;
+    saveController.abort();
     unsubscribeLogger?.();
     unsubscribeLogger = void 0;
     stopReplay?.();
@@ -838,9 +1069,14 @@ function createFeedbackClient() {
     await keyScreenshotPromise;
     if (draft?.report)
       await flush();
-    if (config?.persistDraft && draft && !collectionFinished)
+    if (discardOnClose && storageKey)
+      await deleteFeedbackDraft(storageKey).catch(() => void 0);
+    else if (config?.persistDraft && draft && !collectionFinished)
       await saveFeedbackDraft(storageKey, draft).catch(() => void 0);
+    releasePreviews();
+    discardOnClose = false;
     config = void 0;
+    preparedPage = "";
     buffer = [];
     bufferBytes = 0;
     draft = void 0;
@@ -856,7 +1092,17 @@ function createFeedbackClient() {
     collectionFinished = false;
     collectionSealed = false;
   }
-  return { init, prepare, submit, flush, record, getDraft: () => draft, annotate, addFiles, exportDraft, close };
+  return { init, prepare, captureScreenshot, submit, flush, record, getDraft: () => draft, getView, releasePreviews, annotate, addFiles, exportDraft, async saveDraft(input) {
+    const session = config;
+    const exported = await exportDraft(input);
+    if (!exported.success)
+      return exported;
+    if (closing || !session || session !== config)
+      return failure("NOT_INITIALIZED");
+    return saveFeedbackFile(exported.data, `feedback-${draft?.submissionId ?? "local"}.zip`, "application/zip", saveController.signal);
+  }, close, get budget() {
+    return { ...budget };
+  } };
 }
 var feedbackClient = createFeedbackClient();
 async function bounded(promise, ms) {
@@ -883,7 +1129,75 @@ function base64(bytes) {
     value += String.fromCharCode(...bytes.subarray(offset, offset + 32768));
   return btoa(value);
 }
+function createFeedbackReview(actions) {
+  let controller = new AbortController();
+  const failed = () => err(HaiFeedbackError.OPERATION_FAILED, feedbackM("feedback_operationFailed"));
+  return {
+    close() {
+      controller.abort();
+      controller = new AbortController();
+    },
+    async loadReplay(id) {
+      const signal = controller.signal;
+      const events = [];
+      try {
+        for (let page = 1; page <= 100; page++) {
+          const result = await actions.getEvidence({ id, kind: "replay", page, pageSize: 100 });
+          if (signal.aborted)
+            return failed();
+          if (!result.success)
+            return result;
+          events.push(...result.data.items);
+          if (events.length >= result.data.total || !result.data.items.length)
+            return ok(events);
+        }
+      } catch {
+        return failed();
+      }
+      return failed();
+    },
+    async exportReport(id) {
+      const signal = controller.signal;
+      try {
+        const started = await actions.export({ id });
+        if (!started.success)
+          return started;
+        for (let attempt = 0; attempt < 120; attempt++) {
+          if (signal.aborted)
+            return failed();
+          const detail = await actions.get({ id });
+          if (!detail.success)
+            return detail;
+          if (signal.aborted)
+            return failed();
+          const job = detail.data.jobs.find((job2) => job2.id === started.data.id);
+          if (!job || job.status === "failed")
+            return failed();
+          if (job.status === "succeeded") {
+            const file = await actions.getExport({ id, jobId: job.id });
+            if (signal.aborted)
+              return failed();
+            return file.success ? saveFeedbackFile(feedbackDataBytes(file.data), file.data.name, file.data.contentType, signal) : file;
+          }
+          await new Promise((resolve) => {
+            let timer;
+            const done = () => {
+              clearTimeout(timer);
+              signal.removeEventListener("abort", done);
+              resolve();
+            };
+            timer = setTimeout(done, 500);
+            signal.addEventListener("abort", done, { once: true });
+          });
+        }
+      } catch {
+        return failed();
+      }
+      return failed();
+    }
+  };
+}
 
-export { createFeedbackClient, feedbackClient };
+export { configureFeedbackSaving, createFeedbackClient, createFeedbackReview, feedbackClient, feedbackDataBytes, saveFeedbackFile };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map