@h-ai/feedback 1.0.0-beta.18 → 1.0.0-beta.19

package/dist/index.js

@@ -1,6 +1,6 @@
 import { HaiFeedbackError, feedbackM, redactFeedbackText } from './chunk-7W47WZXY.js';
 export { HaiFeedbackError } from './chunk-7W47WZXY.js';
-import { createFeedbackBundle } from './chunk-KGMLTOMM.js';
+import { createFeedbackBundle } from './chunk-IFJHL5VK.js';
 import { z } from 'zod';
 import { resolveFeedbackBudget, FeedbackReportSchema, FeedbackEvidenceInputSchema, FeedbackExportInputSchema, FeedbackRetryInputSchema, FeedbackCompleteInputSchema, FeedbackAppendEvidenceInputSchema, FeedbackSetStatusInputSchema, FeedbackEvidenceQuerySchema, FeedbackEvidenceSchema, FeedbackListInputSchema, FeedbackSubmitInputSchema, FeedbackJobSchema, FeedbackHistorySchema, FeedbackAttachmentSchema, FeedbackUploadInputSchema, FeedbackAttachmentInputSchema } from '@h-ai/api-contract/feedback';
 import { core, ok, err } from '@h-ai/core';
@@ -76,8 +76,13 @@ var FeedbackConfigSchema = z.strictObject({
   /** 单份反馈累计证据允许的最大条数。 */
   maxEvidenceCount: z.number().int().min(1).max(1e4).default(2e3)
 }).superRefine((config, context) => {
-  if (config.notificationMode === "reach" && !config.recipients.length)
-    context.addIssue({ code: "custom", path: ["recipients"], message: "Reach recipients are required" });
+  if (config.notificationMode === "reach" && !config.recipients.length) {
+    context.addIssue({
+      code: "custom",
+      path: ["recipients"],
+      message: "Reach recipients are required"
+    });
+  }
 });
 var REPORTS = "hai_feedback_reports";
 var EVIDENCE = "hai_feedback_evidence";
@@ -85,7 +90,17 @@ var ATTACHMENTS = "hai_feedback_attachments";
 var HISTORY = "hai_feedback_history";
 var JOBS = "hai_feedback_jobs";
 var QUOTAS = "hai_feedback_quotas";
-var identityColumns = ["id", "report_id", "scope_id", "app_id", "user_id", "source", "request_id", "error_id", "client_id"];
+var identityColumns = [
+  "id",
+  "report_id",
+  "scope_id",
+  "app_id",
+  "user_id",
+  "source",
+  "request_id",
+  "error_id",
+  "client_id"
+];
 function feedbackTextEquals(column, value, params) {
   if (!identityColumns.includes(column))
     throw new Error("Invalid feedback identity column");
@@ -123,11 +138,25 @@ function readFeedbackJson(value) {
   return typeof value === "string" ? JSON.parse(value) : value;
 }
 var FeedbackReportRepository = class extends BaseReldbCrudRepository {
-  tables = { reports: REPORTS, evidence: EVIDENCE, attachments: ATTACHMENTS, history: HISTORY, jobs: JOBS, quotas: QUOTAS };
+  tables = {
+    reports: REPORTS,
+    evidence: EVIDENCE,
+    attachments: ATTACHMENTS,
+    history: HISTORY,
+    jobs: JOBS,
+    quotas: QUOTAS
+  };
   constructor() {
     super(reldb, {
       table: REPORTS,
-      fields: Object.entries(reportDef).map(([name, def]) => ({ fieldName: name, columnName: name, def, select: true, create: true, update: name !== "id" }))
+      fields: Object.entries(reportDef).map(([name, def]) => ({
+        fieldName: name,
+        columnName: name,
+        def,
+        select: true,
+        create: true,
+        update: name !== "id"
+      }))
     });
   }
   async ready() {
@@ -135,67 +164,86 @@ var FeedbackReportRepository = class extends BaseReldbCrudRepository {
     if (!report.success)
       return report;
     const definitions = [
-      [QUOTAS, {
-        id: { type: "TEXT", primaryKey: true },
-        app_id: { type: "TEXT", notNull: true },
-        scope_id: { type: "TEXT", notNull: true },
-        user_id: { type: "TEXT", notNull: true },
-        period: { type: "BIGINT", notNull: true },
-        report_count: { type: "BIGINT", notNull: true },
-        reserved_bytes: { type: "BIGINT", notNull: true },
-        report_bytes: { type: "BIGINT", notNull: true, defaultValue: 0 },
-        export_limit: { type: "INTEGER", notNull: true, defaultValue: 0 },
-        updated_at: { type: "BIGINT", notNull: true }
-      }],
-      [EVIDENCE, {
-        id: { type: "TEXT", primaryKey: true },
-        report_id: { type: "TEXT" },
-        scope_id: { type: "TEXT", notNull: true },
-        user_id: { type: "TEXT", notNull: true },
-        app_id: { type: "TEXT", notNull: true },
-        source: { type: "TEXT", notNull: true },
-        sequence: { type: "BIGINT", notNull: true },
-        kind: { type: "TEXT", notNull: true },
-        timestamp: { type: "BIGINT", notNull: true },
-        request_id: { type: "TEXT" },
-        error_id: { type: "TEXT" },
-        revision: { type: "INTEGER", notNull: true },
-        bytes: { type: "INTEGER", notNull: true },
-        expires_at: { type: "BIGINT", notNull: true },
-        payload: { type: "JSON", notNull: true }
-      }],
-      [ATTACHMENTS, {
-        id: { type: "TEXT", primaryKey: true },
-        client_id: { type: "TEXT", notNull: true },
-        report_id: { type: "TEXT", notNull: true },
-        scope_id: { type: "TEXT", notNull: true },
-        object_key: { type: "TEXT", notNull: true },
-        status: { type: "TEXT", notNull: true },
-        size: { type: "BIGINT", notNull: true },
-        checksum: { type: "TEXT", notNull: true },
-        updated_at: { type: "BIGINT", notNull: true },
-        payload: { type: "JSON", notNull: true }
-      }],
-      [HISTORY, { id: { type: "TEXT", primaryKey: true }, report_id: { type: "TEXT", notNull: true }, payload: { type: "JSON", notNull: true } }],
-      [JOBS, {
-        id: { type: "TEXT", primaryKey: true },
-        app_id: { type: "TEXT", notNull: true },
-        snapshot_revision: { type: "INTEGER" },
-        snapshot_version: { type: "INTEGER" },
-        report_id: { type: "TEXT", notNull: true },
-        scope_id: { type: "TEXT", notNull: true },
-        kind: { type: "TEXT", notNull: true },
-        status: { type: "TEXT", notNull: true },
-        token: { type: "TEXT" },
-        lease_until: { type: "BIGINT", notNull: true },
-        attempts: { type: "INTEGER", notNull: true },
-        next_run_at: { type: "BIGINT", notNull: true },
-        created_at: { type: "BIGINT", notNull: true },
-        updated_at: { type: "BIGINT", notNull: true },
-        last_error: { type: "TEXT" },
-        payload: { type: "JSON", notNull: true },
-        result: { type: "JSON" }
-      }]
+      [
+        QUOTAS,
+        {
+          id: { type: "TEXT", primaryKey: true },
+          app_id: { type: "TEXT", notNull: true },
+          scope_id: { type: "TEXT", notNull: true },
+          user_id: { type: "TEXT", notNull: true },
+          period: { type: "BIGINT", notNull: true },
+          report_count: { type: "BIGINT", notNull: true },
+          reserved_bytes: { type: "BIGINT", notNull: true },
+          report_bytes: { type: "BIGINT", notNull: true, defaultValue: 0 },
+          export_limit: { type: "INTEGER", notNull: true, defaultValue: 0 },
+          updated_at: { type: "BIGINT", notNull: true }
+        }
+      ],
+      [
+        EVIDENCE,
+        {
+          id: { type: "TEXT", primaryKey: true },
+          report_id: { type: "TEXT" },
+          scope_id: { type: "TEXT", notNull: true },
+          user_id: { type: "TEXT", notNull: true },
+          app_id: { type: "TEXT", notNull: true },
+          source: { type: "TEXT", notNull: true },
+          sequence: { type: "BIGINT", notNull: true },
+          kind: { type: "TEXT", notNull: true },
+          timestamp: { type: "BIGINT", notNull: true },
+          request_id: { type: "TEXT" },
+          error_id: { type: "TEXT" },
+          revision: { type: "INTEGER", notNull: true },
+          bytes: { type: "INTEGER", notNull: true },
+          expires_at: { type: "BIGINT", notNull: true },
+          payload: { type: "JSON", notNull: true }
+        }
+      ],
+      [
+        ATTACHMENTS,
+        {
+          id: { type: "TEXT", primaryKey: true },
+          client_id: { type: "TEXT", notNull: true },
+          report_id: { type: "TEXT", notNull: true },
+          scope_id: { type: "TEXT", notNull: true },
+          object_key: { type: "TEXT", notNull: true },
+          status: { type: "TEXT", notNull: true },
+          size: { type: "BIGINT", notNull: true },
+          checksum: { type: "TEXT", notNull: true },
+          updated_at: { type: "BIGINT", notNull: true },
+          payload: { type: "JSON", notNull: true }
+        }
+      ],
+      [
+        HISTORY,
+        {
+          id: { type: "TEXT", primaryKey: true },
+          report_id: { type: "TEXT", notNull: true },
+          payload: { type: "JSON", notNull: true }
+        }
+      ],
+      [
+        JOBS,
+        {
+          id: { type: "TEXT", primaryKey: true },
+          app_id: { type: "TEXT", notNull: true },
+          snapshot_revision: { type: "INTEGER" },
+          snapshot_version: { type: "INTEGER" },
+          report_id: { type: "TEXT", notNull: true },
+          scope_id: { type: "TEXT", notNull: true },
+          kind: { type: "TEXT", notNull: true },
+          status: { type: "TEXT", notNull: true },
+          token: { type: "TEXT" },
+          lease_until: { type: "BIGINT", notNull: true },
+          attempts: { type: "INTEGER", notNull: true },
+          next_run_at: { type: "BIGINT", notNull: true },
+          created_at: { type: "BIGINT", notNull: true },
+          updated_at: { type: "BIGINT", notNull: true },
+          last_error: { type: "TEXT" },
+          payload: { type: "JSON", notNull: true },
+          result: { type: "JSON" }
+        }
+      ]
     ];
     for (const [table, definition] of definitions) {
       const created = await reldb.ddl.createTable(table, definition);
@@ -203,16 +251,56 @@ var FeedbackReportRepository = class extends BaseReldbCrudRepository {
         return created;
     }
     const indexes = [
-      { table: QUOTAS, name: "hai_feedback_quotas_expiry", columns: ["app_id", "period"] },
-      { table: REPORTS, name: "hai_feedback_reports_scope_time", columns: ["scope_id", "created_at"] },
-      { table: REPORTS, name: "hai_feedback_reports_scope_status", columns: ["scope_id", "status", "created_at"] },
-      { table: EVIDENCE, name: "hai_feedback_evidence_report_seq", columns: ["report_id", "source", "sequence"] },
-      { table: EVIDENCE, name: "hai_feedback_evidence_temp_expiry", columns: ["app_id", "report_id", "expires_at"] },
-      { table: EVIDENCE, name: "hai_feedback_evidence_temp_scope", columns: ["scope_id", "user_id", "timestamp"] },
-      { table: ATTACHMENTS, name: "hai_feedback_attachments_report", columns: ["report_id"] },
-      { table: HISTORY, name: "hai_feedback_history_report", columns: ["report_id"] },
-      { table: JOBS, name: "hai_feedback_jobs_pending", columns: ["app_id", "status", "next_run_at"] },
-      { table: JOBS, name: "hai_feedback_jobs_snapshot", columns: ["report_id", "snapshot_revision", "snapshot_version"] }
+      {
+        table: QUOTAS,
+        name: "hai_feedback_quotas_expiry",
+        columns: ["app_id", "period"]
+      },
+      {
+        table: REPORTS,
+        name: "hai_feedback_reports_scope_time",
+        columns: ["scope_id", "created_at"]
+      },
+      {
+        table: REPORTS,
+        name: "hai_feedback_reports_scope_status",
+        columns: ["scope_id", "status", "created_at"]
+      },
+      {
+        table: EVIDENCE,
+        name: "hai_feedback_evidence_report_seq",
+        columns: ["report_id", "source", "sequence"]
+      },
+      {
+        table: EVIDENCE,
+        name: "hai_feedback_evidence_temp_expiry",
+        columns: ["app_id", "report_id", "expires_at"]
+      },
+      {
+        table: EVIDENCE,
+        name: "hai_feedback_evidence_temp_scope",
+        columns: ["scope_id", "user_id", "timestamp"]
+      },
+      {
+        table: ATTACHMENTS,
+        name: "hai_feedback_attachments_report",
+        columns: ["report_id"]
+      },
+      {
+        table: HISTORY,
+        name: "hai_feedback_history_report",
+        columns: ["report_id"]
+      },
+      {
+        table: JOBS,
+        name: "hai_feedback_jobs_pending",
+        columns: ["app_id", "status", "next_run_at"]
+      },
+      {
+        table: JOBS,
+        name: "hai_feedback_jobs_snapshot",
+        columns: ["report_id", "snapshot_revision", "snapshot_version"]
+      }
     ];
     for (const index of indexes) {
       const inspect = async () => {
@@ -360,7 +448,23 @@ function createFeedbackCapture(appId, envAllowlist, service) {
         if (additions.length) {
           const params = additions.flatMap(([key, item]) => {
             const event = item.event;
-            return [key, null, item.scopeId, item.userId, appId, event.source, event.sequence, event.kind, event.timestamp, event.requestId ?? null, event.errorId ?? null, 1, item.bytes, event.timestamp + 5 * 6e4, JSON.stringify(event)];
+            return [
+              key,
+              null,
+              item.scopeId,
+              item.userId,
+              appId,
+              event.source,
+              event.sequence,
+              event.kind,
+              event.timestamp,
+              event.requestId ?? null,
+              event.errorId ?? null,
+              1,
+              item.bytes,
+              event.timestamp + 5 * 6e4,
+              JSON.stringify(event)
+            ];
           });
           const duplicate = reldb.config?.type === "mysql" ? "ON DUPLICATE KEY UPDATE id = id" : "ON CONFLICT (id) DO NOTHING";
           const result = await reldb.sql.execute(`INSERT INTO hai_feedback_evidence (id, report_id, scope_id, user_id, app_id, source, sequence, kind, timestamp, request_id, error_id, revision, bytes, expires_at, payload) VALUES ${additions.map(() => "(?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)").join(",")} ${duplicate}`, params);
@@ -389,15 +493,34 @@ function createFeedbackCapture(appId, envAllowlist, service) {
     if (capacityLoss && capacityLoss.timestamp < Date.now() - 5 * 6e4)
       capacityLoss = void 0;
     const requestId = item.requestId ?? item.event?.requestId;
-    const key = JSON.stringify([item.scopeId, item.userId, requestId, reason]);
+    const key = JSON.stringify([
+      item.scopeId,
+      item.userId,
+      requestId,
+      reason
+    ]);
     if (losses.has(key))
       return;
-    const event = { id: randomUUID(), source, sequence: sequence++, kind: "missing", timestamp: Date.now(), requestId, data: { source: "server_logs" }, missingReason: reason };
+    const event = {
+      id: randomUUID(),
+      source,
+      sequence: sequence++,
+      kind: "missing",
+      timestamp: Date.now(),
+      requestId,
+      data: { source: "server_logs" },
+      missingReason: reason
+    };
     if (losses.size >= 200) {
       capacityLoss ??= { ...event, requestId: void 0, missingReason: "server_capture_capacity_exceeded" };
       return;
     }
-    const entry = { event, scopeId: item.scopeId, userId: item.userId, bytes: Buffer.byteLength(JSON.stringify(event)) };
+    const entry = {
+      event,
+      scopeId: item.scopeId,
+      userId: item.userId,
+      bytes: Buffer.byteLength(JSON.stringify(event))
+    };
     losses.set(key, entry);
     if (pendingBytes + entry.bytes <= 8 * 1024 * 1024) {
       pending.set(createHash("sha256").update(`${source}:${event.sequence}`).digest("hex"), entry);
@@ -436,7 +559,15 @@ function createFeedbackCapture(appId, envAllowlist, service) {
     if (typeof scopeId !== "string" || typeof userId !== "string" || typeof requestId !== "string")
       return;
     const value = sanitizeFeedbackValue({ message: record.message, level: record.level, context: record.context });
-    const event = FeedbackEvidenceInputSchema.parse({ id: randomUUID(), source, sequence: sequence++, kind: record.level === "error" || record.level === "fatal" ? "error" : "log", timestamp: record.timestamp, requestId, data: value });
+    const event = FeedbackEvidenceInputSchema.parse({
+      id: randomUUID(),
+      source,
+      sequence: sequence++,
+      kind: record.level === "error" || record.level === "fatal" ? "error" : "log",
+      timestamp: record.timestamp,
+      requestId,
+      data: value
+    });
     const bytes = Buffer.byteLength(JSON.stringify(event));
     if (bytes > 65536) {
       rememberLoss({ scopeId, userId, requestId }, "server_log_record_too_large");
@@ -505,14 +636,20 @@ function createFeedbackCapture(appId, envAllowlist, service) {
       }) : [];
       for (const event of saved) {
         const key = `${event.source}:${event.sequence}`;
-        if (!events.has(key))
+        if (!events.has(key)) {
           events.set(key, event.kind === "error" ? { ...event, errorId: event.id } : event);
+        }
       }
-      const pinnedRequests = new Set([...events.values()].filter((item) => item.errorId).map((item) => item.requestId));
+      const pinnedRequests = new Set([
+        ...events.values()
+      ].filter((item) => item.errorId).map((item) => item.requestId));
       const local = buffer.filter((item) => item.scopeId === scopeId && item.userId === userId && item.event.timestamp >= anchor - 5 * 6e4 && item.event.timestamp <= anchor + 3e4);
       const before = local.filter((item) => item.event.timestamp <= anchor).slice(-100);
       const after = local.filter((item) => item.event.timestamp > anchor).slice(0, 100);
-      for (const item of [...before, ...after]) {
+      for (const item of [
+        ...before,
+        ...after
+      ]) {
         if (!pinnedRequests.has(item.event.requestId))
           events.set(`${item.event.source}:${item.event.sequence}`, item.event);
       }
@@ -528,18 +665,53 @@ function createFeedbackCapture(appId, envAllowlist, service) {
         events.set(`${capacityLoss.source}:${capacityLoss.sequence}`, capacityLoss);
       if (events.size > 1e3) {
         rememberLoss({ scopeId, userId }, "server_evidence_truncated");
-        const marker = losses.get(JSON.stringify([scopeId, userId, void 0, "server_evidence_truncated"]))?.event;
+        const marker = losses.get(JSON.stringify([
+          scopeId,
+          userId,
+          void 0,
+          "server_evidence_truncated"
+        ]))?.event;
         if (marker)
           events.set(`${marker.source}:${marker.sequence}`, marker);
       }
-      const missing2 = [...events.values()].filter((item) => item.kind === "missing").slice(-1e3);
-      const logs = [...events.values()].filter((item) => item.kind !== "missing").sort((a, b) => a.timestamp - b.timestamp);
+      const missing2 = [
+        ...events.values()
+      ].filter((item) => item.kind === "missing").slice(-1e3);
+      const logs = [
+        ...events.values()
+      ].filter((item) => item.kind !== "missing").sort((a, b) => a.timestamp - b.timestamp);
       const allowance = 1e3 - missing2.length;
-      return [...allowance > 0 ? logs.slice(-allowance) : [], ...missing2].sort((a, b) => a.timestamp - b.timestamp);
+      return [
+        ...allowance > 0 ? logs.slice(-allowance) : [],
+        ...missing2
+      ].sort((a, b) => a.timestamp - b.timestamp);
     },
     environment() {
       const env = Object.fromEntries(envAllowlist.filter((key) => !core.sanitize.defaultSensitiveKeyRegex.test(key.replace(/([a-z])([A-Z])/g, "$1_$2"))).map((key) => [key, process.env[key] ?? null]));
-      return FeedbackEvidenceInputSchema.parse({ id: randomUUID(), source, sequence: sequence++, kind: "environment", timestamp: Date.now(), data: sanitizeFeedbackValue({ appId, service, os: { platform: platform(), release: release(), arch: arch() }, runtime: { name: "node", version: process.version, uptimeSeconds: Math.floor(process.uptime()), memoryBytes: process.memoryUsage().rss, totalMemoryBytes: totalmem() }, environment: env }) });
+      return FeedbackEvidenceInputSchema.parse({
+        id: randomUUID(),
+        source,
+        sequence: sequence++,
+        kind: "environment",
+        timestamp: Date.now(),
+        data: sanitizeFeedbackValue({
+          appId,
+          service,
+          os: {
+            platform: platform(),
+            release: release(),
+            arch: arch()
+          },
+          runtime: {
+            name: "node",
+            version: process.version,
+            uptimeSeconds: Math.floor(process.uptime()),
+            memoryBytes: process.memoryUsage().rss,
+            totalMemoryBytes: totalmem()
+          },
+          environment: env
+        })
+      });
     },
     async close() {
       stopped = true;
@@ -586,7 +758,13 @@ function validActor(actor) {
   return !!actor && typeof actor.scopeId === "string" && actor.scopeId.length > 0 && actor.scopeId.length <= 128 && typeof actor.userId === "string" && actor.userId.length > 0 && actor.userId.length <= 128;
 }
 function escapeHtml(value) {
-  return value.replace(/[&<>"']/g, (character) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[character] ?? character);
+  return value.replace(/[&<>"']/g, (character) => ({
+    "&": "&amp;",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#39;"
+  })[character] ?? character);
 }
 function createFeedbackOperations(repo, config, capture, options = {}) {
   const budget = resolveFeedbackBudget(config);
@@ -643,21 +821,58 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
     const day = Math.floor(now / 864e5) * 864e5;
     const bytes = budget.maxTotalBytes * (config.maxExportsPerReport + 1);
     const buckets = [
-      { id: scopeQuotaId(actor.scopeId), period: 0, maxReports: Number.MAX_SAFE_INTEGER, maxBytes: config.maxStoredBytesPerScope },
-      { id: hash(JSON.stringify([config.appId, actor.scopeId, actor.userId, day])), period: day, maxReports: config.maxReportsPerUserDay, maxBytes: config.maxBytesPerUserDay }
+      {
+        id: scopeQuotaId(actor.scopeId),
+        period: 0,
+        maxReports: Number.MAX_SAFE_INTEGER,
+        maxBytes: config.maxStoredBytesPerScope
+      },
+      {
+        id: hash(JSON.stringify([
+          config.appId,
+          actor.scopeId,
+          actor.userId,
+          day
+        ])),
+        period: day,
+        maxReports: config.maxReportsPerUserDay,
+        maxBytes: config.maxBytesPerUserDay
+      }
     ];
     for (const bucket of buckets) {
       const suffix = reldb.config?.type === "mysql" ? "ON DUPLICATE KEY UPDATE id = id" : "ON CONFLICT (id) DO NOTHING";
-      const inserted = await tx.execute(`INSERT INTO ${table.quotas} (id, app_id, scope_id, user_id, period, report_count, reserved_bytes, updated_at) VALUES (?, ?, ?, ?, ?, 0, 0, ?) ${suffix}`, [bucket.id, config.appId, actor.scopeId, bucket.period === 0 ? "" : actor.userId, bucket.period, now]);
+      const inserted = await tx.execute(`INSERT INTO ${table.quotas} (id, app_id, scope_id, user_id, period, report_count, reserved_bytes, updated_at) VALUES (?, ?, ?, ?, ?, 0, 0, ?) ${suffix}`, [
+        bucket.id,
+        config.appId,
+        actor.scopeId,
+        bucket.period === 0 ? "" : actor.userId,
+        bucket.period,
+        now
+      ]);
       if (!inserted.success)
         return inserted;
-      const reserved = await tx.execute(`UPDATE ${table.quotas} SET report_count = report_count + 1, reserved_bytes = reserved_bytes + ?, updated_at = ? WHERE id = ? AND report_count < ? AND reserved_bytes <= ?`, [bytes, now, bucket.id, bucket.maxReports, bucket.maxBytes - bytes]);
+      const reserved = await tx.execute(`UPDATE ${table.quotas} SET report_count = report_count + 1, reserved_bytes = reserved_bytes + ?, updated_at = ? WHERE id = ? AND report_count < ? AND reserved_bytes <= ?`, [
+        bytes,
+        now,
+        bucket.id,
+        bucket.maxReports,
+        bucket.maxBytes - bytes
+      ]);
       if (!reserved.success)
         return reserved;
       if (!reserved.data.changes)
         return quotaExceeded();
     }
-    return tx.execute(`INSERT INTO ${table.quotas} (id, app_id, scope_id, user_id, period, report_count, reserved_bytes, report_bytes, export_limit, updated_at) VALUES (?, ?, ?, ?, -1, 1, ?, ?, ?, ?)`, [reportId, config.appId, actor.scopeId, actor.userId, bytes, budget.maxTotalBytes, config.maxExportsPerReport, now]);
+    return tx.execute(`INSERT INTO ${table.quotas} (id, app_id, scope_id, user_id, period, report_count, reserved_bytes, report_bytes, export_limit, updated_at) VALUES (?, ?, ?, ?, -1, 1, ?, ?, ?, ?)`, [
+      reportId,
+      config.appId,
+      actor.scopeId,
+      actor.userId,
+      bytes,
+      budget.maxTotalBytes,
+      config.maxExportsPerReport,
+      now
+    ]);
   }
   async function access(id, actor, permission, sql = reldb.sql) {
     if (!validActor(actor))
@@ -667,8 +882,9 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       return result;
     if (!result.data || result.data.id !== id || result.data.scope_id !== actor.scopeId || result.data.app_id !== config.appId || Number(result.data.deleting))
       return missing();
-    if (permission ? !permitted(actor, permission) : result.data.user_id !== actor.userId && !permitted(actor, "feedback:read"))
+    if (permission ? !permitted(actor, permission) : result.data.user_id !== actor.userId && !permitted(actor, "feedback:read")) {
       return forbidden();
+    }
     return ok(result.data);
   }
   async function accessWrite(id, actor, sql = reldb.sql) {
@@ -685,15 +901,47 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
     if (previous.data)
       return ok(id);
     const now = Date.now();
-    const inserted = await tx.execute(`INSERT INTO ${table.jobs} (id, app_id, snapshot_revision, snapshot_version, report_id, scope_id, kind, status, token, lease_until, attempts, next_run_at, created_at, updated_at, last_error, payload, result) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ${clock} + ?, ?, ?, ?, ?, ?)`, [id, config.appId, kind === "export" ? report.evidenceRevision : null, kind === "export" ? report.version : null, report.id, report.scopeId, kind, "pending", null, 0, 0, Math.max(0, nextRun - now), now, now, null, JSON.stringify(payload), null]);
+    const inserted = await tx.execute(`INSERT INTO ${table.jobs} (id, app_id, snapshot_revision, snapshot_version, report_id, scope_id, kind, status, token, lease_until, attempts, next_run_at, created_at, updated_at, last_error, payload, result) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ${clock} + ?, ?, ?, ?, ?, ?)`, [
+      id,
+      config.appId,
+      kind === "export" ? report.evidenceRevision : null,
+      kind === "export" ? report.version : null,
+      report.id,
+      report.scopeId,
+      kind,
+      "pending",
+      null,
+      0,
+      0,
+      Math.max(0, nextRun - now),
+      now,
+      now,
+      null,
+      JSON.stringify(payload),
+      null
+    ]);
     return inserted.success ? ok(id) : inserted;
   }
   function jobData(row) {
     const result = readFeedbackJson(row.result);
-    return FeedbackJobSchema.parse({ id: row.id, feedbackId: row.report_id, type: row.kind, status: row.status, attempts: Number(row.attempts), createdAt: Number(row.created_at), updatedAt: Number(row.updated_at), nextRunAt: Number(row.next_run_at), lastError: row.last_error ?? void 0, result: result && typeof result === "object" ? { available: true } : void 0 });
+    return FeedbackJobSchema.parse({
+      id: row.id,
+      feedbackId: row.report_id,
+      type: row.kind,
+      status: row.status,
+      attempts: Number(row.attempts),
+      createdAt: Number(row.created_at),
+      updatedAt: Number(row.updated_at),
+      nextRunAt: Number(row.next_run_at),
+      lastError: row.last_error ?? void 0,
+      result: result && typeof result === "object" ? { available: true } : void 0
+    });
   }
   function attachmentData(row) {
-    return FeedbackAttachmentSchema.parse({ ...FeedbackAttachmentSchema.parse(readFeedbackJson(row.payload)), status: row.status });
+    return FeedbackAttachmentSchema.parse({
+      ...FeedbackAttachmentSchema.parse(readFeedbackJson(row.payload)),
+      status: row.status
+    });
   }
   async function appendInside(tx, row, events, internal = false) {
     const acknowledged = [];
@@ -721,20 +969,46 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       }
       acknowledged.push(event.id);
     }
-    if (!additions.length)
-      return ok({ acknowledged, evidenceRevision: Number(row.revision) });
+    if (!additions.length) {
+      return ok({
+        acknowledged,
+        evidenceRevision: Number(row.revision)
+      });
+    }
     const bytes = additions.reduce((total, item) => total + item.bytes, 0);
     const revision = Number(row.revision) + 1;
-    const params = [additions.length, bytes, revision, Date.now()];
+    const params = [
+      additions.length,
+      bytes,
+      revision,
+      Date.now()
+    ];
     const identity = `${feedbackTextEquals("id", row.id, params)} AND ${feedbackTextEquals("scope_id", row.scope_id, params)}`;
     params.push(row.revision, additions.length, budget.maxEvidenceCount, bytes, budget.maxEvidenceBytes);
     const changed = await tx.execute(`UPDATE ${table.reports} SET evidence_count = evidence_count + ?, evidence_bytes = evidence_bytes + ?, revision = ?, updated_at = ? WHERE ${identity} AND revision = ? AND deleting = 0 AND evidence_count + ? <= ? AND evidence_bytes + ? <= ?`, params);
     if (!changed.success)
       return changed;
-    if (!changed.data.changes)
+    if (!changed.data.changes) {
       return Number(row.evidence_count) + additions.length > budget.maxEvidenceCount || Number(row.evidence_bytes) + bytes > budget.maxEvidenceBytes ? limited() : conflict();
+    }
     for (const { key, event, bytes: itemBytes } of additions) {
-      const inserted = await tx.execute(`INSERT INTO ${table.evidence} (id, report_id, scope_id, user_id, app_id, source, sequence, kind, timestamp, request_id, error_id, revision, bytes, expires_at, payload) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [key, row.id, row.scope_id, row.user_id, row.app_id, event.source, event.sequence, event.kind, event.timestamp, event.requestId ?? null, event.errorId ?? null, revision, itemBytes, row.expires_at, JSON.stringify(event)]);
+      const inserted = await tx.execute(`INSERT INTO ${table.evidence} (id, report_id, scope_id, user_id, app_id, source, sequence, kind, timestamp, request_id, error_id, revision, bytes, expires_at, payload) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+        key,
+        row.id,
+        row.scope_id,
+        row.user_id,
+        row.app_id,
+        event.source,
+        event.sequence,
+        event.kind,
+        event.timestamp,
+        event.requestId ?? null,
+        event.errorId ?? null,
+        revision,
+        itemBytes,
+        row.expires_at,
+        JSON.stringify(event)
+      ]);
       if (!inserted.success)
         return inserted;
     }
@@ -780,7 +1054,11 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
   }
   async function evidence(id, revision, sql = reldb.sql) {
     const result = await sql.query(`SELECT * FROM ${table.evidence} WHERE report_id = ? AND revision <= ? ORDER BY timestamp, source, sequence`, [id, revision]);
-    return result.success ? ok(result.data.map((row) => FeedbackEvidenceSchema.parse({ ...FeedbackEvidenceInputSchema.parse(readFeedbackJson(row.payload)), feedbackId: id, revision: Number(row.revision) }))) : result;
+    return result.success ? ok(result.data.map((row) => FeedbackEvidenceSchema.parse({
+      ...FeedbackEvidenceInputSchema.parse(readFeedbackJson(row.payload)),
+      feedbackId: id,
+      revision: Number(row.revision)
+    }))) : result;
   }
   async function runJobs() {
     if (stopped)
@@ -816,7 +1094,12 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       const sanitized = FeedbackSubmitInputSchema.parse(sanitizeFeedbackValue(parsed.data));
       if (sanitized.evidence?.some((event) => event.source.startsWith("server:")))
         return invalid();
-      const submissionKey = hash(JSON.stringify([actor.scopeId, actor.userId, config.appId, sanitized.submissionId]));
+      const submissionKey = hash(JSON.stringify([
+        actor.scopeId,
+        actor.userId,
+        config.appId,
+        sanitized.submissionId
+      ]));
       const digest = hash(canonicalFeedbackJson(sanitized));
       const existing = await reldb.sql.get(`SELECT * FROM ${table.reports} WHERE submission_key = ?`, [submissionKey]);
       if (!existing.success)
@@ -825,8 +1108,9 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         return conflict();
       if (existing.data && Number(existing.data.deleting))
         return missing();
-      if (existing.data)
+      if (existing.data) {
         return existing.data.submission_hash === digest ? ok(repo.report(existing.data)) : conflict();
+      }
       const now = Date.now();
       const id = `fb_${randomUUID()}`;
       const report = {
@@ -851,7 +1135,30 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         version: 1,
         evidenceRevision: 1
       };
-      const row = { id, scope_id: actor.scopeId, user_id: actor.userId, app_id: config.appId, number: report.number, app_version: report.appVersion ?? null, summary: report.summary ?? "", submission_key: submissionKey, submission_hash: digest, status: "pending", collection_status: "collecting", notification_status: report.notificationStatus, created_at: now, updated_at: now, version: 1, revision: 1, evidence_count: 0, evidence_bytes: 0, collect_deadline: now + config.collectionTimeoutMs, expires_at: now + config.retentionDays * 864e5, payload: report, deleting: 0 };
+      const row = {
+        id,
+        scope_id: actor.scopeId,
+        user_id: actor.userId,
+        app_id: config.appId,
+        number: report.number,
+        app_version: report.appVersion ?? null,
+        summary: report.summary ?? "",
+        submission_key: submissionKey,
+        submission_hash: digest,
+        status: "pending",
+        collection_status: "collecting",
+        notification_status: report.notificationStatus,
+        created_at: now,
+        updated_at: now,
+        version: 1,
+        revision: 1,
+        evidence_count: 0,
+        evidence_bytes: 0,
+        collect_deadline: now + config.collectionTimeoutMs,
+        expires_at: now + config.retentionDays * 864e5,
+        payload: report,
+        deleting: 0
+      };
       const result = await repo.transaction(async (tx) => {
         const inserted = await repo.create({ ...row }, tx);
         if (!inserted.success)
@@ -859,7 +1166,10 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         const reservation = await reserveQuota(tx, actor, id);
         if (!reservation.success)
           return reservation;
-        const initial = await appendInside(tx, row, [...sanitized.evidence ?? [], capture.environment()], true);
+        const initial = await appendInside(tx, row, [
+          ...sanitized.evidence ?? [],
+          capture.environment()
+        ], true);
         if (!initial.success)
           return initial;
         if ((sanitized.attachments ?? []).reduce((total, file) => total + file.size, 0) > budget.maxAttachmentsBytes)
@@ -869,7 +1179,18 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
             return invalid();
           const attachmentId = hash(`${id}:${attachment.id}`);
           const data = { ...attachment, feedbackId: id, status: "pending" };
-          const saved = await tx.execute(`INSERT INTO ${table.attachments} (id, client_id, report_id, scope_id, object_key, status, size, checksum, updated_at, payload) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [attachmentId, attachment.id, id, actor.scopeId, `feedback/${hash(actor.scopeId).slice(0, 16)}/${id}/${attachmentId}`, "pending", attachment.size, attachment.checksum, now, JSON.stringify(data)]);
+          const saved = await tx.execute(`INSERT INTO ${table.attachments} (id, client_id, report_id, scope_id, object_key, status, size, checksum, updated_at, payload) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+            attachmentId,
+            attachment.id,
+            id,
+            actor.scopeId,
+            `feedback/${hash(actor.scopeId).slice(0, 16)}/${id}/${attachmentId}`,
+            "pending",
+            attachment.size,
+            attachment.checksum,
+            now,
+            JSON.stringify(data)
+          ]);
           if (!saved.success)
             return saved;
         }
@@ -915,8 +1236,17 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       if (query.from !== void 0 && query.to !== void 0 && query.from > query.to)
         return invalid();
       const params = [];
-      const conditions = [feedbackTextEquals("scope_id", actor.scopeId, params), feedbackTextEquals("app_id", config.appId, params), "deleting = 0"];
-      for (const [column, value] of [["status", query.status], ["collection_status", query.collectionStatus], ["notification_status", query.notificationStatus], ["app_id", query.appId]]) {
+      const conditions = [
+        feedbackTextEquals("scope_id", actor.scopeId, params),
+        feedbackTextEquals("app_id", config.appId, params),
+        "deleting = 0"
+      ];
+      for (const [column, value] of [
+        ["status", query.status],
+        ["collection_status", query.collectionStatus],
+        ["notification_status", query.notificationStatus],
+        ["app_id", query.appId]
+      ]) {
         if (value) {
           if (column === "app_id") {
             conditions.push(feedbackTextEquals(column, value, params));
@@ -944,8 +1274,15 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         params.push(query.appVersion);
       }
       const direction = query.sortDirection === "asc" ? "ASC" : "DESC";
-      const page = await reldb.sql.queryPage({ sql: `SELECT * FROM ${table.reports} WHERE ${conditions.join(" AND ")} ORDER BY created_at ${direction}, id ${direction}`, params, pagination: { page: query.page, pageSize: query.pageSize } });
-      return page.success ? ok({ ...page.data, items: page.data.items.map((row) => repo.report(row)) }) : page;
+      const page = await reldb.sql.queryPage({
+        sql: `SELECT * FROM ${table.reports} WHERE ${conditions.join(" AND ")} ORDER BY created_at ${direction}, id ${direction}`,
+        params,
+        pagination: { page: query.page, pageSize: query.pageSize }
+      });
+      return page.success ? ok({
+        ...page.data,
+        items: page.data.items.map((row) => repo.report(row))
+      }) : page;
     },
     async get(id, actor) {
       const report = await access(id, actor);
@@ -958,7 +1295,12 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       if (!changes.success)
         return changes;
       const jobs = await reldb.sql.query(`SELECT * FROM ${table.jobs} WHERE report_id = ? ORDER BY created_at, id`, [id]);
-      return jobs.success ? ok({ report: repo.report(report.data), attachments: files.data.map(attachmentData), history: changes.data, jobs: jobs.data.map(jobData) }) : jobs;
+      return jobs.success ? ok({
+        report: repo.report(report.data),
+        attachments: files.data.map(attachmentData),
+        history: changes.data,
+        jobs: jobs.data.map(jobData)
+      }) : jobs;
     },
     async getEvidence(input, actor) {
       const parsed = FeedbackEvidenceQuerySchema.safeParse(input);
@@ -969,8 +1311,15 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         return accessResult;
       const query = parsed.data;
       const params = [];
-      const conditions = [feedbackTextEquals("report_id", query.id, params), feedbackTextEquals("scope_id", actor.scopeId, params)];
-      for (const [column, value] of [["source", query.source], ["kind", query.kind], ["request_id", query.requestId]]) {
+      const conditions = [
+        feedbackTextEquals("report_id", query.id, params),
+        feedbackTextEquals("scope_id", actor.scopeId, params)
+      ];
+      for (const [column, value] of [
+        ["source", query.source],
+        ["kind", query.kind],
+        ["request_id", query.requestId]
+      ]) {
         if (value) {
           if (column === "kind") {
             conditions.push(`${column} = ?`);
@@ -986,8 +1335,14 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         const anchor = await reldb.sql.get(`SELECT * FROM ${table.evidence} WHERE ${anchorIdentity} AND kind = 'error'`, anchorParams);
         if (!anchor.success)
           return anchor;
-        if (!anchor.data)
-          return ok({ items: [], total: 0, page: query.page ?? 1, pageSize: query.pageSize ?? 20 });
+        if (!anchor.data) {
+          return ok({
+            items: [],
+            total: 0,
+            page: query.page ?? 1,
+            pageSize: query.pageSize ?? 20
+          });
+        }
         const contextParams = [];
         const contextIdentity = `${feedbackTextEquals("report_id", query.id, contextParams)} AND ${feedbackTextEquals("source", anchor.data.source, contextParams)}`;
         const request = anchor.data.request_id ? feedbackTextEquals("request_id", anchor.data.request_id, contextParams) : "request_id IS NULL";
@@ -997,7 +1352,10 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         const after = await reldb.sql.query(`SELECT id FROM ${table.evidence} WHERE ${contextIdentity} AND ${request} AND kind IN ('log', 'error') AND sequence > ? ORDER BY sequence ASC LIMIT 100`, [...contextParams, anchor.data.sequence]);
         if (!after.success)
           return after;
-        const ids = [...before.data, ...after.data].map((row) => row.id);
+        const ids = [
+          ...before.data,
+          ...after.data
+        ].map((row) => row.id);
         conditions.push(`id IN (${ids.map(() => "?").join(",")})`);
         params.push(...ids);
       }
@@ -1009,8 +1367,19 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         conditions.push("timestamp <= ?");
         params.push(query.to);
       }
-      const page = await reldb.sql.queryPage({ sql: `SELECT * FROM ${table.evidence} WHERE ${conditions.join(" AND ")} ORDER BY timestamp, source, sequence`, params, pagination: { page: query.page, pageSize: query.pageSize } });
-      return page.success ? ok({ ...page.data, items: page.data.items.map((row) => FeedbackEvidenceSchema.parse({ ...FeedbackEvidenceInputSchema.parse(readFeedbackJson(row.payload)), feedbackId: query.id, revision: Number(row.revision) })) }) : page;
+      const page = await reldb.sql.queryPage({
+        sql: `SELECT * FROM ${table.evidence} WHERE ${conditions.join(" AND ")} ORDER BY timestamp, source, sequence`,
+        params,
+        pagination: { page: query.page, pageSize: query.pageSize }
+      });
+      return page.success ? ok({
+        ...page.data,
+        items: page.data.items.map((row) => FeedbackEvidenceSchema.parse({
+          ...FeedbackEvidenceInputSchema.parse(readFeedbackJson(row.payload)),
+          feedbackId: query.id,
+          revision: Number(row.revision)
+        }))
+      }) : page;
     },
     async setStatus(input, actor) {
       const parsed = FeedbackSetStatusInputSchema.safeParse(input);
@@ -1033,14 +1402,31 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
           return updated;
         if (!updated.data.changes)
           return conflict();
-        const change = { id: randomUUID(), feedbackId: input.id, userId: actor.userId, from: repo.report(row.data).status, to: parsed.data.status, timestamp: now, note: parsed.data.note ? redactFeedbackText(parsed.data.note) : void 0 };
+        const change = {
+          id: randomUUID(),
+          feedbackId: input.id,
+          userId: actor.userId,
+          from: repo.report(row.data).status,
+          to: parsed.data.status,
+          timestamp: now,
+          note: parsed.data.note ? redactFeedbackText(parsed.data.note) : void 0
+        };
         const previousHistory = await history(input.id, tx);
         if (!previousHistory.success)
           return previousHistory;
         if (Buffer.byteLength(JSON.stringify([...previousHistory.data, change])) > 256 * 1024)
           return limited();
-        const saved = await tx.execute(`INSERT INTO ${table.history} (id, report_id, payload) VALUES (?, ?, ?)`, [change.id, input.id, JSON.stringify(change)]);
-        return saved.success ? ok({ ...repo.report(row.data), status: parsed.data.status, version: parsed.data.expectedVersion + 1, updatedAt: now }) : saved;
+        const saved = await tx.execute(`INSERT INTO ${table.history} (id, report_id, payload) VALUES (?, ?, ?)`, [
+          change.id,
+          input.id,
+          JSON.stringify(change)
+        ]);
+        return saved.success ? ok({
+          ...repo.report(row.data),
+          status: parsed.data.status,
+          version: parsed.data.expectedVersion + 1,
+          updatedAt: now
+        }) : saved;
       });
     },
     async appendEvidence(input, actor) {
@@ -1064,7 +1450,17 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       if (!row.success)
         return row;
       if (parsed.data.missing?.length) {
-        const saved = await appendInternal(input.id, actor, [{ id: randomUUID(), source: "collection", sequence: Date.now(), kind: "missing", timestamp: Date.now(), data: { missing: parsed.data.missing }, missingReason: "collection_incomplete" }]);
+        const saved = await appendInternal(input.id, actor, [
+          {
+            id: randomUUID(),
+            source: "collection",
+            sequence: Date.now(),
+            kind: "missing",
+            timestamp: Date.now(),
+            data: { missing: parsed.data.missing },
+            missingReason: "collection_incomplete"
+          }
+        ]);
         if (!saved.success)
           return saved;
       }
@@ -1091,7 +1487,11 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       if (hash(bytes.data) !== found.data.checksum)
         return err(HaiFeedbackError.CHECKSUM_MISMATCH, feedbackM("feedback_checksumMismatch"));
       const metadata = attachmentData(found.data);
-      return ok({ name: metadata.name, contentType: metadata.contentType, dataBase64: bytes.data.toString("base64") });
+      return ok({
+        name: metadata.name,
+        contentType: metadata.contentType,
+        dataBase64: bytes.data.toString("base64")
+      });
     },
     async retry(input, actor) {
       const parsed = FeedbackRetryInputSchema.safeParse(input);
@@ -1102,7 +1502,9 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       if (!row.success)
         return row;
       if (input.target === "attachment") {
-        const params = [Date.now()];
+        const params = [
+          Date.now()
+        ];
         const identity = `${feedbackTextEquals("report_id", input.id, params)} AND ${feedbackTextEquals("client_id", input.targetId ?? "", params)} AND ${feedbackTextEquals("scope_id", actor.scopeId, params)}`;
         const updated2 = await reldb.sql.execute(`UPDATE ${table.attachments} SET status = 'pending', updated_at = ? WHERE ${identity} AND status = 'failed'`, params);
         return updated2.success ? ok(void 0) : updated2;
@@ -1129,7 +1531,11 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         if (revision > Number(row.data.revision))
           return conflict();
         const snapshotVersion = revision === Number(row.data.revision) ? " AND snapshot_version = ?" : "";
-        const previous = await tx.get(`SELECT * FROM ${table.jobs} WHERE report_id = ? AND kind = 'export' AND snapshot_revision = ?${snapshotVersion} ORDER BY created_at DESC, id DESC LIMIT 1`, [input.id, revision, ...snapshotVersion ? [row.data.version] : []]);
+        const previous = await tx.get(`SELECT * FROM ${table.jobs} WHERE report_id = ? AND kind = 'export' AND snapshot_revision = ?${snapshotVersion} ORDER BY created_at DESC, id DESC LIMIT 1`, [
+          input.id,
+          revision,
+          ...snapshotVersion ? [row.data.version] : []
+        ]);
         if (!previous.success)
           return previous;
         if (previous.data) {
@@ -1159,7 +1565,14 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         if (!changes.success)
           return changes;
         const suffix = `${revision}:${row.data.version}${previous.data ? `:${previous.data.id}` : ""}`;
-        const added = await insertJob(tx, repo.report(row.data), "export", suffix, { report: repo.report(row.data), evidence: events.data, attachments: files.data, history: changes.data, maxBytes: Number(reservation.data.report_bytes), snapshotExpiresAt: Date.now() + 36e5 }, Date.now());
+        const added = await insertJob(tx, repo.report(row.data), "export", suffix, {
+          report: repo.report(row.data),
+          evidence: events.data,
+          attachments: files.data,
+          history: changes.data,
+          maxBytes: Number(reservation.data.report_bytes),
+          snapshotExpiresAt: Date.now() + 36e5
+        }, Date.now());
         if (!added.success)
           return added;
         const job = await tx.get(`SELECT * FROM ${table.jobs} WHERE id = ?`, [added.data]);
@@ -1200,7 +1613,11 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         return bytes;
       if (!("checksum" in data) || typeof data.checksum !== "string" || hash(bytes.data) !== data.checksum)
         return err(HaiFeedbackError.CHECKSUM_MISMATCH, feedbackM("feedback_checksumMismatch"));
-      return ok({ name: `${repo.report(row.data).number}.zip`, contentType: "application/zip", dataBase64: bytes.data.toString("base64") });
+      return ok({
+        name: `${repo.report(row.data).number}.zip`,
+        contentType: "application/zip",
+        dataBase64: bytes.data.toString("base64")
+      });
     },
     runJobs
   };
@@ -1225,11 +1642,18 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       return invalid();
     if (hash(bytes) !== attachment.checksum)
       return err(HaiFeedbackError.CHECKSUM_MISMATCH, feedbackM("feedback_checksumMismatch"));
-    const stored = await storage.file.put(attachment.object_key, bytes, { contentType: metadata.contentType, ifNoneMatch: "*", signal: AbortSignal.timeout(3e4) });
+    const stored = await storage.file.put(attachment.object_key, bytes, {
+      contentType: metadata.contentType,
+      ifNoneMatch: "*",
+      signal: AbortSignal.timeout(3e4)
+    });
     if (!stored.success) {
       const existing = await storage.file.get(attachment.object_key);
       if (!existing.success || hash(existing.data) !== attachment.checksum) {
-        await reldb.sql.execute(`UPDATE ${table.attachments} SET status = 'failed', updated_at = ? WHERE id = ? AND status <> 'available'`, [Date.now(), attachment.id]);
+        await reldb.sql.execute(`UPDATE ${table.attachments} SET status = 'failed', updated_at = ? WHERE id = ? AND status <> 'available'`, [
+          Date.now(),
+          attachment.id
+        ]);
         return stored;
       }
     }
@@ -1278,7 +1702,10 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
     let onAbort;
     try {
       collected = await Promise.race([
-        Promise.resolve().then(() => collectEvidence({ report: Object.freeze({ ...report }), signal })),
+        Promise.resolve().then(() => collectEvidence({
+          report: Object.freeze({ ...report }),
+          signal
+        })),
         new Promise((_resolve, reject) => {
           onAbort = () => reject(new Error("Feedback business collection aborted"));
           signal.addEventListener("abort", onAbort, { once: true });
@@ -1312,14 +1739,36 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         bytes = Buffer.from(JSON.stringify(sanitizeFeedbackValue(JSON.parse(bytes.toString("utf8")))));
       if (bytes.length > budget.maxAttachmentBytes)
         return limited();
-      const parsed = FeedbackAttachmentInputSchema.safeParse({ id: `server:business:${input.id}`, name: typeof input.name === "string" ? redactFeedbackText(input.name) : input.name, contentType: input.contentType, size: bytes.length, checksum: hash(bytes) });
+      const parsed = FeedbackAttachmentInputSchema.safeParse({
+        id: `server:business:${input.id}`,
+        name: typeof input.name === "string" ? redactFeedbackText(input.name) : input.name,
+        contentType: input.contentType,
+        size: bytes.length,
+        checksum: hash(bytes)
+      });
       if (!parsed.success || !input.id || files.some((file) => file.metadata.id === parsed.data.id))
         return invalid();
       const rowId = hash(`${report.id}:${parsed.data.id}`);
       const key = `feedback/${hash(report.scopeId).slice(0, 16)}/${report.id}/business/${rowId}-${parsed.data.checksum}`;
-      files.push({ metadata: { ...parsed.data, feedbackId: report.id, status: "available" }, bytes, key, rowId });
+      files.push({
+        metadata: { ...parsed.data, feedbackId: report.id, status: "available" },
+        bytes,
+        key,
+        rowId
+      });
     }
-    const event = FeedbackEvidenceInputSchema.safeParse(sanitizeFeedbackValue({ id: `business-${report.id}`, source: "server:business", sequence: 0, kind: "business", timestamp: report.createdAt, data: { ...collected.data, ...collected.text !== void 0 ? { text: collected.text } : {}, attachmentIds: files.map((file) => file.metadata.id) } }));
+    const event = FeedbackEvidenceInputSchema.safeParse(sanitizeFeedbackValue({
+      id: `business-${report.id}`,
+      source: "server:business",
+      sequence: 0,
+      kind: "business",
+      timestamp: report.createdAt,
+      data: {
+        ...collected.data,
+        ...collected.text !== void 0 ? { text: collected.text } : {},
+        attachmentIds: files.map((file) => file.metadata.id)
+      }
+    }));
     if (!event.success)
       return invalid();
     async function checkCapacity(sql) {
@@ -1338,9 +1787,14 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       const payload = readFeedbackJson(current2.data.payload);
       if (!payload || typeof payload !== "object")
         return invalid();
-      if ("businessFiles" in payload)
+      if ("businessFiles" in payload) {
         return canonicalFeedbackJson(payload.businessFiles) === canonicalFeedbackJson(frozenFiles) ? ok(void 0) : conflict();
-      const updated = await tx.execute(`UPDATE ${table.jobs} SET payload = ? WHERE id = ? AND token = ?`, [JSON.stringify({ ...payload, businessFiles: frozenFiles }), job.id, job.token]);
+      }
+      const updated = await tx.execute(`UPDATE ${table.jobs} SET payload = ? WHERE id = ? AND token = ?`, [
+        JSON.stringify({ ...payload, businessFiles: frozenFiles }),
+        job.id,
+        job.token
+      ]);
       return updated.success ? ok(void 0) : updated;
     });
     if (!frozen.success)
@@ -1349,7 +1803,14 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
     if (!capacity.success)
       return capacity;
     for (const file of files) {
-      const stored = await storage.file.put(file.key, file.bytes, { contentType: file.metadata.contentType, ifNoneMatch: "*", signal: AbortSignal.any([shutdown.signal, AbortSignal.timeout(3e4)]) });
+      const stored = await storage.file.put(file.key, file.bytes, {
+        contentType: file.metadata.contentType,
+        ifNoneMatch: "*",
+        signal: AbortSignal.any([
+          shutdown.signal,
+          AbortSignal.timeout(3e4)
+        ])
+      });
       if (!stored.success) {
         const existing = await storage.file.get(file.key);
         if (!existing.success || hash(existing.data) !== file.metadata.checksum)
@@ -1372,7 +1833,18 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       if (!appended.success)
         return appended;
       for (const file of files) {
-        const saved = await tx.execute(`INSERT INTO ${table.attachments} (id, client_id, report_id, scope_id, object_key, status, size, checksum, updated_at, payload) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [file.rowId, file.metadata.id, report.id, actor.scopeId, file.key, "available", file.bytes.length, file.metadata.checksum, Date.now(), JSON.stringify(file.metadata)]);
+        const saved = await tx.execute(`INSERT INTO ${table.attachments} (id, client_id, report_id, scope_id, object_key, status, size, checksum, updated_at, payload) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+          file.rowId,
+          file.metadata.id,
+          report.id,
+          actor.scopeId,
+          file.key,
+          "available",
+          file.bytes.length,
+          file.metadata.checksum,
+          Date.now(),
+          JSON.stringify(file.metadata)
+        ]);
         if (!saved.success)
           return saved;
       }
@@ -1410,7 +1882,16 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         const pendingReceipt = result.success && !!result.data && typeof result.data === "object" && "pending" in result.data && result.data.pending === true;
         const purged = result.success && !!result.data && typeof result.data === "object" && "purged" in result.data && result.data.purged === true;
         const status = result.success ? pendingReceipt ? "pending" : "succeeded" : job.kind !== "cleanup" && Number(job.attempts) + 1 >= config.maxAttempts ? "failed" : "pending";
-        const saved = purged ? await reldb.sql.execute(`DELETE FROM ${table.jobs} WHERE id = ? AND token = ? AND status = 'running' AND lease_until > ${clock}`, [job.id, token]) : await reldb.sql.execute(`UPDATE ${table.jobs} SET status = ?, attempts = attempts - ?, token = NULL, lease_until = 0, next_run_at = ${clock} + ?, updated_at = ${clock}, last_error = ?, result = CASE WHEN ? = 1 THEN ? ELSE result END WHERE id = ? AND token = ? AND status = 'running' AND lease_until > ${clock}`, [status, pendingReceipt ? 1 : 0, Math.min(6e4, 1e3 * 2 ** Math.min(Number(job.attempts), 6)), result.success ? null : result.error.code, result.success ? 1 : 0, result.success ? JSON.stringify(result.data) : null, job.id, token]);
+        const saved = purged ? await reldb.sql.execute(`DELETE FROM ${table.jobs} WHERE id = ? AND token = ? AND status = 'running' AND lease_until > ${clock}`, [job.id, token]) : await reldb.sql.execute(`UPDATE ${table.jobs} SET status = ?, attempts = attempts - ?, token = NULL, lease_until = 0, next_run_at = ${clock} + ?, updated_at = ${clock}, last_error = ?, result = CASE WHEN ? = 1 THEN ? ELSE result END WHERE id = ? AND token = ? AND status = 'running' AND lease_until > ${clock}`, [
+          status,
+          pendingReceipt ? 1 : 0,
+          Math.min(6e4, 1e3 * 2 ** Math.min(Number(job.attempts), 6)),
+          result.success ? null : result.error.code,
+          result.success ? 1 : 0,
+          result.success ? JSON.stringify(result.data) : null,
+          job.id,
+          token
+        ]);
         if (!saved.success)
           return saved;
         if (saved.data.changes && status === "failed" && job.kind === "collect") {
@@ -1422,7 +1903,12 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
           await notificationSummary(job.report_id);
         processed++;
       } catch {
-        await reldb.sql.execute(`UPDATE ${table.jobs} SET status = ?, next_run_at = ${clock} + 60000, last_error = ?, token = NULL, lease_until = 0 WHERE id = ? AND token = ? AND lease_until > ${clock}`, [job.kind === "cleanup" ? "pending" : "failed", HaiFeedbackError.OPERATION_FAILED.code, job.id, token]);
+        await reldb.sql.execute(`UPDATE ${table.jobs} SET status = ?, next_run_at = ${clock} + 60000, last_error = ?, token = NULL, lease_until = 0 WHERE id = ? AND token = ? AND lease_until > ${clock}`, [
+          job.kind === "cleanup" ? "pending" : "failed",
+          HaiFeedbackError.OPERATION_FAILED.code,
+          job.id,
+          token
+        ]);
         if (job.kind === "collect")
           await reldb.sql.execute(`UPDATE ${table.reports} SET collection_status = 'failed', updated_at = ${clock} WHERE id = ? AND deleting = 0 AND EXISTS (SELECT 1 FROM ${table.jobs} WHERE id = ? AND status = 'failed')`, [job.report_id, job.id]);
       } finally {
@@ -1442,7 +1928,11 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
           if (!deleted.success)
             return deleted;
         }
-        const marked = await reldb.sql.execute(`UPDATE ${table.jobs} SET status = 'failed', result = NULL, payload = ?, last_error = ? WHERE id = ? AND status = 'succeeded'`, [JSON.stringify({ expired: true }), HaiFeedbackError.NOT_FOUND.code, job.id]);
+        const marked = await reldb.sql.execute(`UPDATE ${table.jobs} SET status = 'failed', result = NULL, payload = ?, last_error = ? WHERE id = ? AND status = 'succeeded'`, [
+          JSON.stringify({ expired: true }),
+          HaiFeedbackError.NOT_FOUND.code,
+          job.id
+        ]);
         if (!marked.success)
           return marked;
       }
@@ -1458,11 +1948,17 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
     if (Date.now() >= cleanupAfter) {
       const params = [];
       const identity = feedbackTextEquals("app_id", config.appId, params);
-      const expired = await reldb.sql.query(`SELECT id FROM ${table.evidence} WHERE ${identity} AND report_id IS NULL AND expires_at < ? ORDER BY expires_at, id LIMIT 100`, [...params, Date.now()]);
+      const expired = await reldb.sql.query(`SELECT id FROM ${table.evidence} WHERE ${identity} AND report_id IS NULL AND expires_at < ? ORDER BY expires_at, id LIMIT 100`, [
+        ...params,
+        Date.now()
+      ]);
       if (!expired.success)
         return expired;
       if (expired.data.length) {
-        const removed = await reldb.sql.execute(`DELETE FROM ${table.evidence} WHERE ${identity} AND report_id IS NULL AND id IN (${expired.data.map(() => "?").join(",")})`, [...params, ...expired.data.map((row) => row.id)]);
+        const removed = await reldb.sql.execute(`DELETE FROM ${table.evidence} WHERE ${identity} AND report_id IS NULL AND id IN (${expired.data.map(() => "?").join(",")})`, [
+          ...params,
+          ...expired.data.map((row) => row.id)
+        ]);
         if (!removed.success)
           return removed;
       }
@@ -1496,13 +1992,27 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
     if (Number(row.data.deleting) && job.kind !== "cleanup")
       return missing();
     const report = repo.report(row.data);
-    const actor = { scopeId: report.scopeId, userId: report.userId, permissions: ["feedback:*"] };
+    const actor = {
+      scopeId: report.scopeId,
+      userId: report.userId,
+      permissions: ["feedback:*"]
+    };
     if (job.kind === "collect") {
       const anchor = "anchor" in payload && typeof payload.anchor === "number" ? payload.anchor : report.createdAt;
       const captured = await capture.collect(report.scopeId, report.userId, anchor);
       const saved = await withLease(job, async (tx) => {
         const fresh = await access(report.id, actor, void 0, tx);
-        return fresh.success ? appendInside(tx, fresh.data, captured.length ? captured : [{ id: `missing-server-${report.id}`, source: "collection", sequence: 0, kind: "missing", timestamp: report.createdAt, data: { source: "server_logs" }, missingReason: "no_correlated_server_logs" }], true) : fresh;
+        return fresh.success ? appendInside(tx, fresh.data, captured.length ? captured : [
+          {
+            id: `missing-server-${report.id}`,
+            source: "collection",
+            sequence: 0,
+            kind: "missing",
+            timestamp: report.createdAt,
+            data: { source: "server_logs" },
+            missingReason: "no_correlated_server_logs"
+          }
+        ], true) : fresh;
       });
       if (!saved.success)
         return saved;
@@ -1518,7 +2028,10 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       if (!reasons.success)
         return reasons;
       const partial = Number(reasons.data?.count ?? 0) > 0 || files.data.some((item) => item.status !== "available");
-      const updated = await withLease(job, (tx) => tx.execute(`UPDATE ${table.reports} SET collection_status = ?, updated_at = ${clock} WHERE id = ?`, [partial ? "partial" : "complete", report.id]));
+      const updated = await withLease(job, (tx) => tx.execute(`UPDATE ${table.reports} SET collection_status = ?, updated_at = ${clock} WHERE id = ?`, [
+        partial ? "partial" : "complete",
+        report.id
+      ]));
       return updated.success ? ok({ collected: captured.length }) : updated;
     }
     if (job.kind === "webhook") {
@@ -1541,24 +2054,55 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         const files = await attachments(report.id, tx);
         if (!files.success)
           return files;
-        const business = await tx.get(`SELECT id FROM ${table.evidence} WHERE id = ?`, [hash(`${report.id}:server:business:0`)]);
+        const business = await tx.get(`SELECT id FROM ${table.evidence} WHERE id = ?`, [
+          hash(`${report.id}:server:business:0`)
+        ]);
         if (!business.success)
           return business;
         const detailUrl = config.adminUrl ? new URL(config.adminUrl) : void 0;
         detailUrl?.searchParams.set("feedback", report.id);
-        const event = { event: "feedback.created", eventId: job.id, createdAt: report.createdAt, report: repo.report(live.data), evidence: { revision: Number(live.data.revision), business: !!business.data, attachments: files.data.map(attachmentData) }, ...detailUrl ? { detailUrl: detailUrl.href } : {} };
+        const event = {
+          event: "feedback.created",
+          eventId: job.id,
+          createdAt: report.createdAt,
+          report: repo.report(live.data),
+          evidence: {
+            revision: Number(live.data.revision),
+            business: !!business.data,
+            attachments: files.data.map(attachmentData)
+          },
+          ...detailUrl ? { detailUrl: detailUrl.href } : {}
+        };
         const body = JSON.stringify(event);
-        const saved = await tx.execute(`UPDATE ${table.jobs} SET payload = ? WHERE id = ? AND token = ?`, [JSON.stringify({ url: config.webhookUrl, body }), job.id, job.token]);
+        const saved = await tx.execute(`UPDATE ${table.jobs} SET payload = ? WHERE id = ? AND token = ?`, [
+          JSON.stringify({ url: config.webhookUrl, body }),
+          job.id,
+          job.token
+        ]);
         return saved.success ? ok(body) : saved;
       });
       if (!frozen.success)
         return frozen;
       const timestamp = String(Math.floor(Date.now() / 1e3));
-      const headers = { "content-type": "application/json", "idempotency-key": job.id, "x-hai-feedback-event": "feedback.created", "x-hai-feedback-timestamp": timestamp };
+      const headers = {
+        "content-type": "application/json",
+        "idempotency-key": job.id,
+        "x-hai-feedback-event": "feedback.created",
+        "x-hai-feedback-timestamp": timestamp
+      };
       if (config.webhookSecret)
         headers["x-hai-feedback-signature"] = `sha256=${createHmac("sha256", config.webhookSecret).update(`${timestamp}.${frozen.data}`).digest("hex")}`;
       try {
-        const response = await fetch(config.webhookUrl, { method: "POST", headers, body: frozen.data, redirect: "manual", signal: AbortSignal.any([shutdown.signal, AbortSignal.timeout(config.webhookTimeoutMs)]) });
+        const response = await fetch(config.webhookUrl, {
+          method: "POST",
+          headers,
+          body: frozen.data,
+          redirect: "manual",
+          signal: AbortSignal.any([
+            shutdown.signal,
+            AbortSignal.timeout(config.webhookTimeoutMs)
+          ])
+        });
         await response.body?.cancel();
         return response.ok ? ok({ status: response.status }) : failed();
       } catch {
@@ -1576,7 +2120,16 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         return live;
       const current2 = repo.report(live.data);
       if (config.notificationMode === "console") {
-        core.logger.info("Feedback notification", { module: "feedback", number: current2.number, appId: current2.appId, appVersion: current2.appVersion, buildId: current2.buildId, commit: current2.commit, collectionStatus: current2.collectionStatus, ...config.consoleContent === "summary" ? { summary: current2.summary } : {} });
+        core.logger.info("Feedback notification", {
+          module: "feedback",
+          number: current2.number,
+          appId: current2.appId,
+          appVersion: current2.appVersion,
+          buildId: current2.buildId,
+          commit: current2.commit,
+          collectionStatus: current2.collectionStatus,
+          ...config.consoleContent === "summary" ? { summary: current2.summary } : {}
+        });
         return ok({ channel: "console" });
       }
       const { HaiReachError, reach } = await import('@h-ai/reach');
@@ -1588,10 +2141,24 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       }[current2.collectionStatus];
       const detailUrl = config.adminUrl ? new URL(config.adminUrl) : void 0;
       detailUrl?.searchParams.set("feedback", report.id);
-      const facts = [current2.number, `${current2.appId} ${current2.appVersion ?? ""}`, `${feedbackM("feedback_submittedAt")}: ${new Date(current2.createdAt).toISOString()}`, `${feedbackM("feedback_materialStatus")}: ${materialStatus}`, current2.summary ?? "", ...detailUrl ? [detailUrl.href] : []];
+      const facts = [
+        current2.number,
+        `${current2.appId} ${current2.appVersion ?? ""}`,
+        `${feedbackM("feedback_submittedAt")}: ${new Date(current2.createdAt).toISOString()}`,
+        `${feedbackM("feedback_materialStatus")}: ${materialStatus}`,
+        current2.summary ?? "",
+        ...detailUrl ? [detailUrl.href] : []
+      ];
       const isEmail = reach.config?.providers.find((provider) => provider.name === config.notificationProvider)?.type === "smtp";
       const body = isEmail ? facts.map((value) => `<p>${escapeHtml(value)}</p>`).join("") : facts.join("\n");
-      const sent = await reach.send({ provider: config.notificationProvider, to: recipient, subject: `${feedbackM("feedback_received")} ${current2.number}`, body, idempotencyKey: job.id, deferPolicy: "reject" });
+      const sent = await reach.send({
+        provider: config.notificationProvider,
+        to: recipient,
+        subject: `${feedbackM("feedback_received")} ${current2.number}`,
+        body,
+        idempotencyKey: job.id,
+        deferPolicy: "reject"
+      });
       if (!sent.success && sent.error.code === HaiReachError.DND_BLOCKED.code)
         return ok({ pending: true, deferred: true });
       if (!sent.success)
@@ -1626,9 +2193,23 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         if (total > 64 * 1024 * 1024)
           return limited();
         const info = attachmentData(file);
-        files.push({ id: info.id, name: info.name, contentType: info.contentType, checksum: info.checksum, bytes: stored2.data });
+        files.push({
+          id: info.id,
+          name: info.name,
+          contentType: info.contentType,
+          checksum: info.checksum,
+          bytes: stored2.data
+        });
       }
-      const bundle = await createFeedbackBundle({ maxBytes: fixed.maxBytes, createdAt: Number(job.created_at), report: fixed.report, evidence: fixed.evidence, history: fixed.history, attachments: files, missing: unavailable2 });
+      const bundle = await createFeedbackBundle({
+        maxBytes: fixed.maxBytes,
+        createdAt: Number(job.created_at),
+        report: fixed.report,
+        evidence: fixed.evidence,
+        history: fixed.history,
+        attachments: files,
+        missing: unavailable2
+      });
       if (!bundle.success)
         return bundle;
       const key = `feedback/${hash(report.scopeId).slice(0, 16)}/${report.id}/exports/${job.id}.zip`;
@@ -1638,7 +2219,11 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
         if (!existing.success || hash(existing.data) !== hash(bundle.data))
           return stored;
       }
-      return ok({ key, checksum: hash(bundle.data), size: bundle.data.length });
+      return ok({
+        key,
+        checksum: hash(bundle.data),
+        size: bundle.data.length
+      });
     }
     const marked = await withLease(job, async (tx) => {
       const locked = await repo.find(report.id, report.scopeId, tx);
@@ -1671,9 +2256,14 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       if (!reservation.success)
         return reservation;
       if (reservation.data) {
-        const released = await tx.execute(`UPDATE ${table.quotas} SET report_count = report_count - 1, reserved_bytes = reserved_bytes - ?, updated_at = ${clock} WHERE id = ? AND reserved_bytes >= ? AND report_count > 0`, [Number(reservation.data.reserved_bytes), scopeQuotaId(report.scopeId), Number(reservation.data.reserved_bytes)]);
-        if (!released.success || !released.data.changes)
+        const released = await tx.execute(`UPDATE ${table.quotas} SET report_count = report_count - 1, reserved_bytes = reserved_bytes - ?, updated_at = ${clock} WHERE id = ? AND reserved_bytes >= ? AND report_count > 0`, [
+          Number(reservation.data.reserved_bytes),
+          scopeQuotaId(report.scopeId),
+          Number(reservation.data.reserved_bytes)
+        ]);
+        if (!released.success || !released.data.changes) {
           return released.success ? conflict() : released;
+        }
         const removed2 = await tx.execute(`DELETE FROM ${table.quotas} WHERE id = ?`, [report.id]);
         if (!removed2.success)
           return removed2;
@@ -1681,7 +2271,11 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
       const removedJobs = await tx.execute(`DELETE FROM ${table.jobs} WHERE report_id = ? AND id <> ?`, [report.id, job.id]);
       if (!removedJobs.success)
         return removedJobs;
-      const tombstone = await tx.execute(`UPDATE ${table.jobs} SET payload = ?, result = NULL WHERE id = ? AND token = ?`, [JSON.stringify({ tombstone: true, prefix, until: Date.now() + 864e5 }), job.id, job.token]);
+      const tombstone = await tx.execute(`UPDATE ${table.jobs} SET payload = ?, result = NULL WHERE id = ? AND token = ?`, [
+        JSON.stringify({ tombstone: true, prefix, until: Date.now() + 864e5 }),
+        job.id,
+        job.token
+      ]);
       if (!tombstone.success)
         return tombstone;
       const params = [];
@@ -1694,7 +2288,18 @@ function createFeedbackOperations(repo, config, capture, options = {}) {
   return operations;
 }
 function allowedContentType(type) {
-  return ["image/png", "image/jpeg", "image/webp", "video/webm", "video/mp4", "text/plain", "application/json", "application/pdf", "application/zip", "application/gzip"].includes(type);
+  return [
+    "image/png",
+    "image/jpeg",
+    "image/webp",
+    "video/webm",
+    "video/mp4",
+    "text/plain",
+    "application/json",
+    "application/pdf",
+    "application/zip",
+    "application/gzip"
+  ].includes(type);
 }
 function matchesContentType(bytes, type) {
   if (type === "application/zip")
@@ -1744,8 +2349,11 @@ var feedback = {
         return configFailure(parsed.error.issues.map((issue) => issue.path.join(".")));
       if (options.collectEvidence !== void 0 && typeof options.collectEvidence !== "function")
         return configFailure(["collectEvidence"]);
-      if (!reldb.isInitialized || !storage.isInitialized)
-        return configFailure([!reldb.isInitialized ? "reldb" : "storage"]);
+      if (!reldb.isInitialized || !storage.isInitialized) {
+        return configFailure([
+          !reldb.isInitialized ? "reldb" : "storage"
+        ]);
+      }
       if (parsed.data.notificationMode === "reach") {
         const provider = await import('@h-ai/reach').catch(() => void 0);
         if (!provider)
@@ -1807,7 +2415,11 @@ var feedback = {
     return current !== null;
   },
   get config() {
-    return current ? { ...current.config, recipients: [...current.config.recipients], envAllowlist: [...current.config.envAllowlist] } : null;
+    return current ? {
+      ...current.config,
+      recipients: [...current.config.recipients],
+      envAllowlist: [...current.config.envAllowlist]
+    } : null;
   },
   get budget() {
     return resolveFeedbackBudget(current?.config);
@@ -1827,7 +2439,14 @@ var feedback = {
   runJobs: () => guarded(() => (current?.operations ?? unavailable).runJobs())
 };
 function configFailure(fields) {
-  return { success: false, error: { ...HaiFeedbackError.CONFIG_ERROR, message: feedbackM("feedback_configError"), ext: { module: "feedback", fields } } };
+  return {
+    success: false,
+    error: {
+      ...HaiFeedbackError.CONFIG_ERROR,
+      message: feedbackM("feedback_configError"),
+      ext: { module: "feedback", fields }
+    }
+  };
 }
 async function guarded(work) {
   const promise = core.context.run({ suppressLogObservers: true }, work);