@h-ai/feedback 0.1.0-alpha.70 → 0.1.0-alpha.72

package/dist/feedback-client-files-B88nCOo_.d.ts

@@ -0,0 +1,54 @@
+import { FeedbackAttachmentData } from '@h-ai/api-contract/feedback';
+import { HaiResult } from '@h-ai/core';
+
+/** Web 下载、Tauri 保存对话框、Capacitor 原生分享的统一入口。原生插件按平台懒加载。 */
+
+/**
+ * 保存取消是正常用户操作，不应提示成功或失败。
+ * @example
+ * ```ts
+ * import type { FeedbackSaveResult } from '@h-ai/feedback/client'
+ * const cancelled: FeedbackSaveResult = { status: 'cancelled' }
+ * ```
+ */
+interface FeedbackSaveResult {
+    status: 'saved' | 'shared' | 'cancelled';
+}
+/**
+ * 由平台入口提供的保存器；Web 不导入原生插件。
+ * @example
+ * ```ts
+ * import type { FeedbackFileSaver } from '@h-ai/feedback/client'
+ * const save: FeedbackFileSaver = async () => ({ status: 'cancelled' })
+ * ```
+ */
+type FeedbackFileSaver = (bytes: Uint8Array, filename: string, contentType: string, signal?: AbortSignal) => Promise<FeedbackSaveResult>;
+/**
+ * 原生入口一次性配置；生成工程自动调用。传 undefined 可解除自定义平台适配。
+ * @example
+ * ```ts
+ * import { configureFeedbackSaving } from '@h-ai/feedback/client'
+ * configureFeedbackSaving(undefined)
+ * ```
+ */
+declare function configureFeedbackSaving(saver: FeedbackFileSaver | undefined): void;
+/**
+ * 解码受权附件或导出结果，网络与权限仍由 typed API 负责。
+ * @example
+ * ```ts
+ * import { feedbackDataBytes } from '@h-ai/feedback/client'
+ * const bytes = feedbackDataBytes({ name: 'data.txt', contentType: 'text/plain', dataBase64: 'YQ==' })
+ * ```
+ */
+declare function feedbackDataBytes(data: FeedbackAttachmentData): Uint8Array;
+/**
+ * 保存反馈文件。Tauri 只写用户选择的路径；Capacitor 只写临时缓存，分享结束后删除。
+ * @example
+ * ```ts
+ * import { saveFeedbackFile } from '@h-ai/feedback/client'
+ * const result = await saveFeedbackFile(new Uint8Array([1]), 'feedback.zip')
+ * ```
+ */
+declare function saveFeedbackFile(bytes: Uint8Array, filename: string, contentType?: string, signal?: AbortSignal): Promise<HaiResult<FeedbackSaveResult>>;
+
+export { type FeedbackFileSaver as F, type FeedbackSaveResult as a, configureFeedbackSaving as c, feedbackDataBytes as f, saveFeedbackFile as s };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 import * as _h_ai_core from '@h-ai/core';
 import { HaiResult, PaginatedResult } from '@h-ai/core';
-import { FeedbackSubmitInput, FeedbackReport, FeedbackListInput, FeedbackDetail, FeedbackEvidenceQuery, FeedbackEvidence, FeedbackSetStatusInput, FeedbackAppendEvidenceInput, FeedbackCompleteInput, FeedbackUploadInput, FeedbackAttachment, FeedbackAttachmentData, FeedbackRetryInput, FeedbackExportInput, FeedbackJob } from '@h-ai/api-contract/feedback';
+import { FeedbackBudget, FeedbackSubmitInput, FeedbackReport, FeedbackListInput, FeedbackDetail, FeedbackEvidenceQuery, FeedbackEvidence, FeedbackSetStatusInput, FeedbackAppendEvidenceInput, FeedbackCompleteInput, FeedbackUploadInput, FeedbackAttachment, FeedbackAttachmentData, FeedbackRetryInput, FeedbackExportInput, FeedbackJob } from '@h-ai/api-contract/feedback';
 export { FeedbackAppendEvidenceInput, FeedbackAttachment, FeedbackAttachmentData, FeedbackCompleteInput, FeedbackDetail, FeedbackEvidence, FeedbackEvidenceQuery, FeedbackExportInput, FeedbackJob, FeedbackListInput, FeedbackReport, FeedbackRetryInput, FeedbackSetStatusInput, FeedbackSubmitInput, FeedbackUploadInput } from '@h-ai/api-contract/feedback';
 
 /**
@@ -18,15 +18,21 @@ declare const FeedbackConfigSchema: z.ZodObject<{
     appVersion: z.ZodOptional<z.ZodString>;
     buildId: z.ZodOptional<z.ZodString>;
     commit: z.ZodOptional<z.ZodString>;
-    recipients: z.ZodArray<z.ZodEmail>;
+    notificationMode: z.ZodDefault<z.ZodEnum<{
+        disabled: "disabled";
+        console: "console";
+        reach: "reach";
+    }>>;
+    recipients: z.ZodDefault<z.ZodArray<z.ZodString>>;
     notificationProvider: z.ZodDefault<z.ZodString>;
-    adminUrl: z.ZodURL;
+    adminUrl: z.ZodOptional<z.ZodURL>;
     collectionTimeoutMs: z.ZodDefault<z.ZodNumber>;
     workerIntervalMs: z.ZodDefault<z.ZodNumber>;
     leaseMs: z.ZodDefault<z.ZodNumber>;
     maxAttempts: z.ZodDefault<z.ZodNumber>;
     retentionDays: z.ZodDefault<z.ZodNumber>;
     envAllowlist: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    maxTotalBytes: z.ZodDefault<z.ZodNumber>;
     maxAttachmentBytes: z.ZodDefault<z.ZodNumber>;
     maxEvidenceBytes: z.ZodDefault<z.ZodNumber>;
     maxEvidenceCount: z.ZodDefault<z.ZodNumber>;
@@ -104,6 +110,7 @@ interface FeedbackFunctions {
     close: () => Promise<HaiResult<void>>;
     readonly isInitialized: boolean;
     readonly config: FeedbackConfig | null;
+    readonly budget: FeedbackBudget;
     submit: (input: FeedbackSubmitInput, context: FeedbackContext) => Promise<HaiResult<FeedbackReport>>;
     list: (input: FeedbackListInput, context: FeedbackContext) => Promise<HaiResult<PaginatedResult<FeedbackReport>>>;
     get: (id: string, context: FeedbackContext) => Promise<HaiResult<FeedbackDetail>>;

package/dist/index.js

@@ -1,16 +1,15 @@
-import { HaiFeedbackError, feedbackM, redactFeedbackText } from './chunk-DYEK2FNM.js';
-export { HaiFeedbackError } from './chunk-DYEK2FNM.js';
-import { createFeedbackBundle } from './chunk-43AOXE4W.js';
+import { HaiFeedbackError, feedbackM, redactFeedbackText } from './chunk-PYKGS35A.js';
+export { HaiFeedbackError } from './chunk-PYKGS35A.js';
+import { createFeedbackBundle } from './chunk-5QWKURWU.js';
 import { z } from 'zod';
+import { resolveFeedbackBudget, FeedbackReportSchema, FeedbackEvidenceInputSchema, FeedbackExportInputSchema, FeedbackCompleteInputSchema, FeedbackAppendEvidenceInputSchema, FeedbackSetStatusInputSchema, FeedbackEvidenceQuerySchema, FeedbackEvidenceSchema, FeedbackListInputSchema, FeedbackSubmitInputSchema, FeedbackJobSchema, FeedbackHistorySchema, FeedbackAttachmentSchema, FeedbackUploadInputSchema } from '@h-ai/api-contract/feedback';
 import { core, ok, err } from '@h-ai/core';
-import { reach } from '@h-ai/reach';
 import { reldb, BaseReldbCrudRepository } from '@h-ai/reldb';
 import { storage } from '@h-ai/storage';
 import { Buffer } from 'buffer';
 import { randomUUID, createHash } from 'crypto';
 import { totalmem, arch, release, platform } from 'os';
 import process from 'process';
-import { FeedbackReportSchema, FeedbackEvidenceInputSchema, FeedbackExportInputSchema, FeedbackCompleteInputSchema, FeedbackAppendEvidenceInputSchema, FeedbackSetStatusInputSchema, FeedbackEvidenceQuerySchema, FeedbackEvidenceSchema, FeedbackListInputSchema, FeedbackSubmitInputSchema, FeedbackJobSchema, FeedbackHistorySchema, FeedbackAttachmentSchema, FeedbackUploadInputSchema } from '@h-ai/api-contract/feedback';
 
 var FeedbackConfigSchema = z.strictObject({
   /** 反馈所属应用标识；应与浏览器及 API 入口配置一致。 */
@@ -21,12 +20,14 @@ var FeedbackConfigSchema = z.strictObject({
   buildId: z.string().max(128).optional(),
   /** 源码提交标识，帮助定位对应代码。 */
   commit: z.string().max(128).optional(),
-  /** 接收待处理反馈通知的管理员邮件地址。 */
-  recipients: z.array(z.email()).min(1).max(20),
-  /** 已初始化 Reach 邮件 Provider 的唯一名称。 */
+  /** disabled 不通知，console 输出安全摘要，reach 使用已有通知通道。 */
+  notificationMode: z.enum(["disabled", "console", "reach"]).default("reach"),
+  /** Reach 接收方，由实际 Provider 校验邮箱、手机号或业务目的地。 */
+  recipients: z.array(z.string().min(1).max(320)).max(20).default([]),
+  /** 已初始化 Reach Provider 的唯一名称，不限制为邮件。 */
   notificationProvider: z.string().min(1).default("email"),
   /** 管理员通知中的反馈管理页面地址。 */
-  adminUrl: z.url().refine((value) => ["http:", "https:"].includes(new URL(value).protocol)),
+  adminUrl: z.url().refine((value) => ["http:", "https:"].includes(new URL(value).protocol)).optional(),
   /** 补充材料收集超时，单位毫秒；超时后冻结为完整或部分材料。 */
   collectionTimeoutMs: z.number().int().min(0).max(3e5).default(6e4),
   /** 持久任务扫描间隔，单位毫秒；零值由宿主手动运行任务。 */
@@ -39,12 +40,17 @@ var FeedbackConfigSchema = z.strictObject({
   retentionDays: z.number().int().min(1).max(3650).default(30),
   /** 允许采集的服务端环境变量名；凭据类名称仍按敏感信息策略排除。 */
   envAllowlist: z.array(z.string().min(1).max(128)).max(100).default([]),
-  /** 单个附件允许的最大字节数。 */
+  /** 未压缩导出总预算；客户端、附件总量和传输预算由此派生。 */
+  maxTotalBytes: z.number().int().min(4 * 1024 * 1024).max(40 * 1024 * 1024).default(32 * 1024 * 1024),
+  /** 单个附件允许的最大字节数；同时受总预算约束。 */
   maxAttachmentBytes: z.number().int().min(1).max(5 * 1024 * 1024).default(5 * 1024 * 1024),
   /** 单份反馈累计证据允许的最大字节数。 */
-  maxEvidenceBytes: z.number().int().min(1024).max(32 * 1024 * 1024).default(4 * 1024 * 1024),
+  maxEvidenceBytes: z.number().int().min(1024).max(4 * 1024 * 1024).default(4 * 1024 * 1024),
   /** 单份反馈累计证据允许的最大条数。 */
   maxEvidenceCount: z.number().int().min(1).max(1e4).default(2e3)
+}).superRefine((config, context) => {
+  if (config.notificationMode === "reach" && !config.recipients.length)
+    context.addIssue({ code: "custom", path: ["recipients"], message: "Reach recipients are required" });
 });
 var REPORTS = "hai_feedback_reports";
 var EVIDENCE = "hai_feedback_evidence";
@@ -484,6 +490,7 @@ function escapeHtml(value) {
   return value.replace(/[&<>"']/g, (character) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[character] ?? character);
 }
 function createFeedbackOperations(repo, config, capture) {
+  const budget = resolveFeedbackBudget(config);
   const table = repo.tables;
   const clock = feedbackClockSql();
   let stopped = false;
@@ -557,12 +564,12 @@ function createFeedbackOperations(repo, config, capture) {
     const revision = Number(row.revision) + 1;
     const params = [additions.length, bytes, revision, Date.now()];
     const identity = `${feedbackTextEquals("id", row.id, params)} AND ${feedbackTextEquals("scope_id", row.scope_id, params)}`;
-    params.push(row.revision, additions.length, config.maxEvidenceCount, bytes, config.maxEvidenceBytes);
+    params.push(row.revision, additions.length, budget.maxEvidenceCount, bytes, budget.maxEvidenceBytes);
     const changed = await tx.execute(`UPDATE ${table.reports} SET evidence_count = evidence_count + ?, evidence_bytes = evidence_bytes + ?, revision = ?, updated_at = ? WHERE ${identity} AND revision = ? AND deleting = 0 AND evidence_count + ? <= ? AND evidence_bytes + ? <= ?`, params);
     if (!changed.success)
       return changed;
     if (!changed.data.changes)
-      return Number(row.evidence_count) + additions.length > config.maxEvidenceCount || Number(row.evidence_bytes) + bytes > config.maxEvidenceBytes ? limited() : conflict();
+      return Number(row.evidence_count) + additions.length > budget.maxEvidenceCount || Number(row.evidence_bytes) + bytes > budget.maxEvidenceBytes ? limited() : conflict();
     for (const { key, event, bytes: itemBytes } of additions) {
       const inserted = await tx.execute(`INSERT INTO ${table.evidence} (id, report_id, scope_id, user_id, app_id, source, sequence, kind, timestamp, request_id, error_id, revision, bytes, expires_at, payload) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [key, row.id, row.scope_id, row.user_id, row.app_id, event.source, event.sequence, event.kind, event.timestamp, event.requestId ?? null, event.errorId ?? null, revision, itemBytes, row.expires_at, JSON.stringify(event)]);
       if (!inserted.success)
@@ -595,11 +602,14 @@ function createFeedbackOperations(repo, config, capture) {
     });
   }
   async function notificationSummary(id) {
+    if (config.notificationMode === "disabled")
+      return reldb.sql.execute(`UPDATE ${table.reports} SET notification_status = 'disabled' WHERE id = ?`, [id]);
     return reldb.sql.execute(`UPDATE ${table.reports} SET notification_status = CASE
       WHEN EXISTS (SELECT 1 FROM ${table.jobs} WHERE report_id = ? AND kind = 'notify' AND (status = 'failed' OR last_error IS NOT NULL)) THEN 'failed'
       WHEN NOT EXISTS (SELECT 1 FROM ${table.jobs} WHERE report_id = ? AND kind = 'notify' AND status <> 'succeeded') THEN 'sent'
       WHEN EXISTS (SELECT 1 FROM ${table.jobs} WHERE report_id = ? AND kind = 'notify' AND status = 'running') THEN 'sending'
-      ELSE 'pending' END WHERE id = ?`, [id, id, id, id]);
+      WHEN EXISTS (SELECT 1 FROM ${table.jobs} WHERE report_id = ? AND kind = 'notify' AND status = 'pending' AND result IS NOT NULL) THEN 'deferred'
+      ELSE 'pending' END WHERE id = ?`, [id, id, id, id, id]);
   }
   async function history(id, sql = reldb.sql) {
     const result = await sql.query(`SELECT payload FROM ${table.history} WHERE report_id = ? ORDER BY id`, [id]);
@@ -673,13 +683,13 @@ function createFeedbackOperations(repo, config, capture) {
         commit: sanitized.commit ?? config.commit,
         status: "pending",
         collectionStatus: "collecting",
-        notificationStatus: "pending",
+        notificationStatus: config.notificationMode === "disabled" ? "disabled" : "pending",
         createdAt: now,
         updatedAt: now,
         version: 1,
         evidenceRevision: 1
       };
-      const row = { id, scope_id: actor.scopeId, user_id: actor.userId, app_id: config.appId, number: report.number, app_version: report.appVersion ?? null, summary: report.summary ?? "", submission_key: submissionKey, submission_hash: digest, status: "pending", collection_status: "collecting", notification_status: "pending", created_at: now, updated_at: now, version: 1, revision: 1, evidence_count: 0, evidence_bytes: 0, collect_deadline: now + config.collectionTimeoutMs, expires_at: now + config.retentionDays * 864e5, payload: report, deleting: 0 };
+      const row = { id, scope_id: actor.scopeId, user_id: actor.userId, app_id: config.appId, number: report.number, app_version: report.appVersion ?? null, summary: report.summary ?? "", submission_key: submissionKey, submission_hash: digest, status: "pending", collection_status: "collecting", notification_status: report.notificationStatus, created_at: now, updated_at: now, version: 1, revision: 1, evidence_count: 0, evidence_bytes: 0, collect_deadline: now + config.collectionTimeoutMs, expires_at: now + config.retentionDays * 864e5, payload: report, deleting: 0 };
       const result = await repo.transaction(async (tx) => {
         const inserted = await repo.create({ ...row }, tx);
         if (!inserted.success)
@@ -687,8 +697,10 @@ function createFeedbackOperations(repo, config, capture) {
         const initial = await appendInside(tx, row, sanitized.evidence ?? []);
         if (!initial.success)
           return initial;
+        if ((sanitized.attachments ?? []).reduce((total, file) => total + file.size, 0) > budget.maxAttachmentsBytes)
+          return limited();
         for (const attachment of sanitized.attachments ?? []) {
-          if (attachment.size > config.maxAttachmentBytes || !allowedContentType(attachment.contentType))
+          if (attachment.size > budget.maxAttachmentBytes || !allowedContentType(attachment.contentType))
             return invalid();
           const attachmentId = hash(`${id}:${attachment.id}`);
           const data = { ...attachment, feedbackId: id, status: "pending" };
@@ -696,7 +708,7 @@ function createFeedbackOperations(repo, config, capture) {
           if (!saved.success)
             return saved;
         }
-        for (const recipient of config.recipients) {
+        for (const recipient of config.notificationMode === "disabled" ? [] : config.notificationMode === "console" ? ["console"] : config.recipients) {
           const saved = await insertJob(tx, report, "notify", recipient, { recipient }, row.collect_deadline);
           if (!saved.success)
             return saved;
@@ -854,6 +866,11 @@ function createFeedbackOperations(repo, config, capture) {
         if (!updated.data.changes)
           return conflict();
         const change = { id: randomUUID(), feedbackId: input.id, userId: actor.userId, from: repo.report(row.data).status, to: parsed.data.status, timestamp: now, note: parsed.data.note ? redactFeedbackText(parsed.data.note) : void 0 };
+        const previousHistory = await history(input.id, tx);
+        if (!previousHistory.success)
+          return previousHistory;
+        if (Buffer.byteLength(JSON.stringify([...previousHistory.data, change])) > 256 * 1024)
+          return limited();
         const saved = await tx.execute(`INSERT INTO ${table.history} (id, report_id, payload) VALUES (?, ?, ?)`, [change.id, input.id, JSON.stringify(change)]);
         return saved.success ? ok({ ...repo.report(row.data), status: parsed.data.status, version: parsed.data.expectedVersion + 1, updatedAt: now }) : saved;
       });
@@ -1027,7 +1044,7 @@ function createFeedbackOperations(repo, config, capture) {
     const attachment = found.data;
     const metadata = attachmentData(attachment);
     const bytes = Buffer.from(parsed.data.dataBase64, "base64");
-    if (bytes.length !== Number(attachment.size) || bytes.length > config.maxAttachmentBytes || !matchesContentType(bytes, metadata.contentType))
+    if (bytes.length !== Number(attachment.size) || bytes.length > budget.maxAttachmentBytes || !matchesContentType(bytes, metadata.contentType))
       return invalid();
     if (hash(bytes) !== attachment.checksum)
       return err(HaiFeedbackError.CHECKSUM_MISMATCH, feedbackM("feedback_checksumMismatch"));
@@ -1098,7 +1115,7 @@ function createFeedbackOperations(repo, config, capture) {
         const pendingReceipt = result.success && !!result.data && typeof result.data === "object" && "pending" in result.data && result.data.pending === true;
         const purged = result.success && !!result.data && typeof result.data === "object" && "purged" in result.data && result.data.purged === true;
         const status = result.success ? pendingReceipt ? "pending" : "succeeded" : job.kind !== "cleanup" && Number(job.attempts) + 1 >= config.maxAttempts ? "failed" : "pending";
-        const saved = purged ? await reldb.sql.execute(`DELETE FROM ${table.jobs} WHERE id = ? AND token = ? AND status = 'running' AND lease_until > ${clock}`, [job.id, token]) : await reldb.sql.execute(`UPDATE ${table.jobs} SET status = ?, token = NULL, lease_until = 0, next_run_at = ${clock} + ?, updated_at = ${clock}, last_error = ?, result = CASE WHEN ? = 1 THEN ? ELSE result END WHERE id = ? AND token = ? AND status = 'running' AND lease_until > ${clock}`, [status, Math.min(6e4, 1e3 * 2 ** Math.min(Number(job.attempts), 6)), result.success ? null : result.error.code, result.success ? 1 : 0, result.success ? JSON.stringify(result.data) : null, job.id, token]);
+        const saved = purged ? await reldb.sql.execute(`DELETE FROM ${table.jobs} WHERE id = ? AND token = ? AND status = 'running' AND lease_until > ${clock}`, [job.id, token]) : await reldb.sql.execute(`UPDATE ${table.jobs} SET status = ?, attempts = attempts - ?, token = NULL, lease_until = 0, next_run_at = ${clock} + ?, updated_at = ${clock}, last_error = ?, result = CASE WHEN ? = 1 THEN ? ELSE result END WHERE id = ? AND token = ? AND status = 'running' AND lease_until > ${clock}`, [status, pendingReceipt ? 1 : 0, Math.min(6e4, 1e3 * 2 ** Math.min(Number(job.attempts), 6)), result.success ? null : result.error.code, result.success ? 1 : 0, result.success ? JSON.stringify(result.data) : null, job.id, token]);
         if (!saved.success)
           return saved;
         if (saved.data.changes && status === "failed" && job.kind === "collect") {
@@ -1168,24 +1185,34 @@ function createFeedbackOperations(repo, config, capture) {
       return updated.success ? ok({ collected: captured.length }) : updated;
     }
     if (job.kind === "notify") {
+      if (config.notificationMode === "disabled")
+        return ok({ disabled: true });
       const recipient = "recipient" in payload && typeof payload.recipient === "string" ? payload.recipient : "";
-      if (!config.recipients.includes(recipient))
+      if (config.notificationMode === "reach" && !config.recipients.includes(recipient))
         return invalid();
-      if (reach.config?.dnd?.enabled)
-        return err(HaiFeedbackError.CONFIG_ERROR, feedbackM("feedback_configError"));
       const live = await withLease(job, (tx) => access(report.id, actor, void 0, tx));
       if (!live.success)
         return live;
       const current2 = repo.report(live.data);
+      if (config.notificationMode === "console") {
+        core.logger.info("Feedback notification", { module: "feedback", number: current2.number, appId: current2.appId, summary: current2.summary, collectionStatus: current2.collectionStatus });
+        return ok({ channel: "console" });
+      }
+      const { HaiReachError, reach } = await import('@h-ai/reach');
       const materialStatus = {
         collecting: feedbackM("feedback_materialCollecting"),
         complete: feedbackM("feedback_materialComplete"),
         partial: feedbackM("feedback_materialPartial"),
         failed: feedbackM("feedback_materialFailed")
       }[current2.collectionStatus];
-      const detailUrl = new URL(config.adminUrl);
-      detailUrl.searchParams.set("feedback", report.id);
-      const sent = await reach.send({ provider: config.notificationProvider, to: recipient, subject: `${feedbackM("feedback_received")} ${current2.number}`, body: `<p>${escapeHtml(current2.number)}</p><p>${escapeHtml(current2.appId)} ${escapeHtml(current2.appVersion ?? "")}</p><p>${escapeHtml(feedbackM("feedback_submittedAt"))}: ${escapeHtml(new Date(current2.createdAt).toISOString())}</p><p>${escapeHtml(feedbackM("feedback_materialStatus"))}: ${escapeHtml(materialStatus)}</p><p>${escapeHtml(current2.summary ?? "")}</p><p><a href="${escapeHtml(detailUrl.href)}">${escapeHtml(current2.number)}</a></p>`, idempotencyKey: job.id });
+      const detailUrl = config.adminUrl ? new URL(config.adminUrl) : void 0;
+      detailUrl?.searchParams.set("feedback", report.id);
+      const facts = [current2.number, `${current2.appId} ${current2.appVersion ?? ""}`, `${feedbackM("feedback_submittedAt")}: ${new Date(current2.createdAt).toISOString()}`, `${feedbackM("feedback_materialStatus")}: ${materialStatus}`, current2.summary ?? "", ...detailUrl ? [detailUrl.href] : []];
+      const isEmail = reach.config?.providers.find((provider) => provider.name === config.notificationProvider)?.type === "smtp";
+      const body = isEmail ? facts.map((value) => `<p>${escapeHtml(value)}</p>`).join("") : facts.join("\n");
+      const sent = await reach.send({ provider: config.notificationProvider, to: recipient, subject: `${feedbackM("feedback_received")} ${current2.number}`, body, idempotencyKey: job.id, deferPolicy: "reject" });
+      if (!sent.success && sent.error.code === HaiReachError.DND_BLOCKED.code)
+        return ok({ pending: true, deferred: true });
       if (!sent.success)
         return sent;
       if (!sent.data.success)
@@ -1218,7 +1245,7 @@ function createFeedbackOperations(repo, config, capture) {
         const info = attachmentData(file);
         files.push({ id: info.id, name: info.name, contentType: info.contentType, checksum: info.checksum, bytes: stored2.data });
       }
-      const bundle = await createFeedbackBundle({ report: fixed.report, evidence: fixed.evidence, history: fixed.history, attachments: files, missing: unavailable2 });
+      const bundle = await createFeedbackBundle({ maxBytes: budget.maxTotalBytes, report: fixed.report, evidence: fixed.evidence, history: fixed.history, attachments: files, missing: unavailable2 });
       if (!bundle.success)
         return bundle;
       const key = `feedback/${hash(report.scopeId).slice(0, 16)}/${report.id}/exports/${job.id}-${job.token}.zip`;
@@ -1268,7 +1295,7 @@ function createFeedbackOperations(repo, config, capture) {
   return operations;
 }
 function allowedContentType(type) {
-  return ["image/png", "image/jpeg", "image/webp", "text/plain", "application/json", "application/pdf"].includes(type);
+  return ["image/png", "image/jpeg", "image/webp", "video/webm", "video/mp4", "text/plain", "application/json", "application/pdf"].includes(type);
 }
 function matchesContentType(bytes, type) {
   if (type === "image/png")
@@ -1279,6 +1306,10 @@ function matchesContentType(bytes, type) {
     return bytes.subarray(0, 4).toString() === "RIFF" && bytes.subarray(8, 12).toString() === "WEBP";
   if (type === "application/pdf")
     return bytes.subarray(0, 5).toString() === "%PDF-";
+  if (type === "video/webm")
+    return bytes.length >= 12 && bytes.subarray(0, 4).equals(Buffer.from([26, 69, 223, 163]));
+  if (type === "video/mp4")
+    return bytes.length >= 12 && bytes.subarray(4, 8).toString() === "ftyp";
   if (type === "application/json") {
     try {
       JSON.parse(bytes.toString("utf8"));
@@ -1306,12 +1337,20 @@ var feedback = {
     let candidateCapture;
     try {
       const parsed = FeedbackConfigSchema.safeParse(config);
-      if (!parsed.success || !reldb.isInitialized || !storage.isInitialized || !reach.isInitialized)
-        return err(HaiFeedbackError.CONFIG_ERROR, feedbackM("feedback_configError"));
-      if (reach.config?.dnd?.enabled)
-        return err(HaiFeedbackError.CONFIG_ERROR, feedbackM("feedback_configError"));
-      if (!reach.config?.providers.some((provider) => provider.name === parsed.data.notificationProvider))
-        return err(HaiFeedbackError.CONFIG_ERROR, feedbackM("feedback_configError"));
+      if (!parsed.success)
+        return configFailure(parsed.error.issues.map((issue) => issue.path.join(".")));
+      if (!reldb.isInitialized || !storage.isInitialized)
+        return configFailure([!reldb.isInitialized ? "reldb" : "storage"]);
+      if (parsed.data.notificationMode === "reach") {
+        const provider = await import('@h-ai/reach').catch(() => void 0);
+        if (!provider)
+          return configFailure(["reach"]);
+        const { reach } = provider;
+        if (!reach.isInitialized)
+          return configFailure(["reach"]);
+        if (!reach.config?.providers.some((provider2) => provider2.name === parsed.data.notificationProvider))
+          return configFailure(["notificationProvider"]);
+      }
       if (current) {
         const previous = current;
         current = null;
@@ -1365,6 +1404,9 @@ var feedback = {
   get config() {
     return current ? { ...current.config, recipients: [...current.config.recipients], envAllowlist: [...current.config.envAllowlist] } : null;
   },
+  get budget() {
+    return resolveFeedbackBudget(current?.config);
+  },
   submit: (input, actor) => guarded(() => (current?.operations ?? unavailable).submit(input, actor)),
   list: (input, actor) => guarded(() => (current?.operations ?? unavailable).list(input, actor)),
   get: (id, actor) => guarded(() => (current?.operations ?? unavailable).get(id, actor)),
@@ -1379,6 +1421,9 @@ var feedback = {
   getExport: (input, actor) => guarded(() => (current?.operations ?? unavailable).getExport(input, actor)),
   runJobs: () => guarded(() => (current?.operations ?? unavailable).runJobs())
 };
+function configFailure(fields) {
+  return { success: false, error: { ...HaiFeedbackError.CONFIG_ERROR, message: feedbackM("feedback_configError"), ext: { module: "feedback", fields } } };
+}
 async function guarded(work) {
   const promise = core.context.run({ suppressLogObservers: true }, work);
   inFlight.add(promise);