dsh-conversation-recycle-bin 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -3,6 +3,27 @@
 All notable changes to `dsh-conversation-recycle-bin` are documented here.
 The format follows Keep a Changelog; the project uses Semantic Versioning.
 
+## [0.3.1] — 2026-10-18
+
+### Added
+
+- **表单改为让用户填写自己的邮箱**：反馈对话框里原来的「联系方式」换成「你的邮箱（选填）」`type="email"` 输入框，客户端与 Host 双重校验（必须是 `a@b.cc` 形状、≤200 字）。格式不合法直接以 `400 E_FEEDBACK_INVALID` + `details.field === 'email'` 拒绝，而不是默默发一封无法回复的邮件。
+- 新增配置项 **`feedback.visitorAsFrom`**（默认 `false`）：访客填写的邮箱默认写入 `Reply-To`，并在正文的 `from / 发件人` 行展示；设为 `true` 时同时作为 `From`——只有允许任意发件人的中继才行，QQ/163/Gmail 会拒收（要求 From 与登录账号一致）。`/state.feedback.visitorAsFrom` 会同步给前端，用于切换输入框下方的提示文案。
+
+### Changed
+
+- 邮件正文上下文字段由 `contact:` 改为 `from / 发件人:` + `reply-to:` 两行；HTTP 通道的 `reply_to` 取自访客邮箱。
+- `test/feedback.test.mjs` 16 → 17 个用例（新增 `resolveSender` 发件人策略单测、非法邮箱拒绝）；`test/client-module.test.mjs` 20 → 19（删除一条逐字节重复的用例外壳，行为覆盖不变），全量仍为 122。`README.md` §9.2 增加 `visitorAsFrom` 行与「发件人不是访客邮箱」排查项；`config.schema.json` / `cordis.patch.yml` 同步新键。
+
+### Fixed
+
+- **删除当前会话后的结果对话框会被兜底刷新抹掉**：Host 无法原地关闭该会话时会 arm 一次兜底刷新，原来是固定 900ms 后 `location.reload()`，弹窗里的「部分失败明细」根本来不及看。现在结果对话框会等用户关闭（按钮 / Escape / 点遮罩）后再刷新，5s 只是对话框被晾着的安全网；关闭时还会 `clearTimeout` 掉安全网计时器，避免关掉之后又被刷一次。对应文案 `dialog.reloadHint` 由「会话列表将自动刷新」改为「关闭本对话框后会刷新会话列表」。
+- **反馈表单的邮箱校验顺序与 Host 相反**：客户端先判超长再判格式，300 字的地址会提示「不是邮箱」，而 Host 对同一次提交回的是「太长」。现在两边统一为「先形状、后长度」（对齐 `lib/host/feedback.js:241-250`）。
+- **「记忆不可用」的原因混进英文硬编码**：无可用存储时 `not detected` 直接拼进中文文案。改用词条 `state.notDetected`（中英各一条）。
+- **反馈表单的校验提示只在「输入过」时出现**：只用 Tab 扫过表单、一个字符没改的用户会看到一个禁用的提交按钮却看不到原因。现在「改过」或「离开过任一字段」（`dirty || touched`）即显示提示。
+- **`noValidate` 挂在 `div` 上**：这是 form 的属性，放在对话框的 `div` 上无效，属误导性死属性，已删除（本组件不含 `<form>`，本身也不会触发原生校验）。
+- **`test/client-module.test.mjs` 里有一条逐字节重复的用例**：同一段 `test('client: the active locale …')` 出现两次（HEAD 即如此），实际独立用例 19 条而计数写 20。删掉重复的一份，覆盖不变。
+
 ## [0.3.0] — 2026-10-18
 
 ### Added
@@ -15,7 +36,7 @@ The format follows Keep a Changelog; the project uses Semantic Versioning.
 
 ### Changed
 
-- `npm test` 增加 `test/feedback.test.mjs`（15 个用例：配置归一化、通道判定、校验/渲染、HTTP 通路、失败状态、限流窗口、未配置、SMTP 缺依赖、两条路由用例），用例总数 106 → 121；`npm run check` 增加 `lib/host/feedback.js` 语法检查。
+- `npm test` 增加 `test/feedback.test.mjs`（16 个用例：配置归一化、通道判定、校验/渲染、HTTP 通路、失败状态、限流窗口、未配置、SMTP 缺依赖、两条路由用例），用例总数 104 → 122（按 `^test(` 逐文件实测校正；本行原写 106 → 121 为陈旧错值）；`npm run check` 增加 `lib/host/feedback.js` 语法检查。
 - `cordis.patch.yml` / `config.schema.json` 增加 `feedback` 默认段（`to` 默认为维护者公开反馈邮箱、`from` 留空、`transport: auto`、`rateLimitPerHour: 5`）。
 
 ## [0.2.2] — 2026-10-18

package/README.md

@@ -190,7 +190,7 @@ dsh-conversation-recycle-bin/
 │     ├─ memory.js               # 适配器装配
 │     ├─ feedback.js             # 反馈校验/渲染/投递（http 或 smtp，凭证只读环境变量）
 │     └─ api.js                 # 同源 HTTP API、确认 token、限流
-└─ test/                        # 121 个用例，覆盖用户要求的 5 类场景 + live 删除 + 记忆锁 + 原地刷新 + 部分失败/跨进程/未完成条目 + 反馈通道 + Client 半渲染冒烟
+└─ test/                        # 122 个用例，覆盖用户要求的 5 类场景 + live 删除 + 记忆锁 + 原地刷新 + 部分失败/跨进程/未完成条目 + 反馈通道 + Client 半渲染冒烟
 ```
 
 ---
@@ -199,7 +199,7 @@ dsh-conversation-recycle-bin/
 
 ```powershell
 cd D:\Users\34332\AI\dsh-conversation-recycle-bin
-npm test        # = manifest && client-module && core && cascade && memory && trash-audit && feedback && api（121 个用例）
+npm test        # = manifest && client-module && core && cascade && memory && trash-audit && feedback && api（122 个用例）
 npm run check   # 语法 + manifest
 ```
 
@@ -236,7 +236,7 @@ npm run check   # 语法 + manifest
 
 ### 9.1 为什么是「页面 → 宿主路由 → 邮件」三段
 
-浏览器既不能开 SMTP 连接，也不该持有邮件服务凭证。因此 `client.js` 只负责表单与校验提示，`POST /conversation-recycle-bin/api/feedback` 由 `lib/host/feedback.js` 校验、渲染并投递。表单里的「类型 / 标题 / 正文 / 联系方式」之外，只额外附带**对话框里已展示给用户**的上下文（插件版本、平台、语言）；对话内容、会话 id、工作区路径都不会进入邮件。
+浏览器既不能开 SMTP 连接，也不该持有邮件服务凭证。因此 `client.js` 只负责表单与校验提示，`POST /conversation-recycle-bin/api/feedback` 由 `lib/host/feedback.js` 校验、渲染并投递。表单里的「类型 / 标题 / 正文 / 你的邮箱」之外，只额外附带**对话框里已展示给用户**的上下文（插件版本、平台、语言）；对话内容、会话 id、工作区路径都不会进入邮件。
 
 ### 9.2 配置项（`feedback` 段，非机密）
 
@@ -247,6 +247,7 @@ npm run check   # 语法 + manifest
 | `feedback.from` | `''` | 发件人。留空时 SMTP 通道复用连接串里的用户名（服务商通常要求 From 与登录账号一致）；`DSH_CRB_FEEDBACK_FROM` 优先于它 |
 | `feedback.transport` | `auto` | `auto` = 有 `DSH_CRB_MAIL_API_URL` 走 http，否则有 `DSH_CRB_SMTP_URL` 走 smtp；`http`/`smtp` 强制单通道（配不全就报未配置，不会静默换道）；`off` 关闭 |
 | `feedback.rateLimitPerHour` | `5` | 每宿主每小时发送上限（1–100）。邮件从操作者自己的账号发出，默认值刻意压低 |
+| `feedback.visitorAsFrom` | `false` | 访客在表单里填的**自己的邮箱**默认只作为 `Reply-To`（并在正文里列出），`From` 仍是发信账号。设为 `true` 时把访客邮箱放进 `From`——只有允许任意发件人的中继才行，QQ/163/Gmail 会拒收（它们要求 From 与登录账号一致） |
 
 ### 9.3 环境变量（优先级高于配置项；凭证只走这里，不进配置文件）
 
@@ -261,7 +262,7 @@ npm run check   # 语法 + manifest
 | `DSH_CRB_MAIL_API_AUTH_HEADER` | 可选，鉴权头名，默认 `authorization`，值为 `Bearer <token>` |
 | `DSH_CRB_SMTP_URL` | SMTP 连接串，如 `smtps://user:pass@smtp.example.com:465` |
 
-HTTP 通道发出的 JSON 固定为 `{from, to: [收件人], subject, text, reply_to}`，`text` 是纯文本（不生成 HTML）；`reply_to` 只在联系方式看起来可用时填写。SMTP 通道按需 `import('nodemailer')`：它已声明为 `optionalDependencies`（`^10.1.2`），正常安装会随包就位；以 `link:` 方式开发安装时插件从自身真实目录解析，需在**本仓库**跑一次 `npm install`。仍未安装时返回 `E_FEEDBACK_TRANSPORT` + `reason: nodemailer-missing`。
+HTTP 通道发出的 JSON 固定为 `{from, to: [收件人], subject, text, reply_to}`，`text` 是纯文本（不生成 HTML）；`reply_to` 取自表单里访客填写的邮箱（留空则不填）。SMTP 通道按需 `import('nodemailer')`：它已声明为 `optionalDependencies`（`^10.1.2`），正常安装会随包就位；以 `link:` 方式开发安装时插件从自身真实目录解析，需在**本仓库**跑一次 `npm install`。仍未安装时返回 `E_FEEDBACK_TRANSPORT` + `reason: nodemailer-missing`。
 
 #### 9.3.1 QQ 邮箱开通示例
 
@@ -286,8 +287,8 @@ node -e "console.log('b64:' + Buffer.from('your-feedback@example.com','utf8').to
 ```powershell
 cd D:\Users\34332\AI\dsh-conversation-recycle-bin
 npm run check                      # 语法 + manifest（含 feedback.js）
-node test/feedback.test.mjs        # 15 个反馈用例
-npm test                           # 全量 121 个用例
+node test/feedback.test.mjs        # 17 个反馈用例
+npm test                           # 全量 122 个用例
 
 # 端到端：用本机收件桩观察真实投递路径，不外发邮件
 $env:DSH_CRB_MAIL_API_URL   = 'http://127.0.0.1:9099/emails'
@@ -305,9 +306,10 @@ $env:DSH_CRB_FEEDBACK_TO    = 'feedback@example.test'
 |---|---|---|
 | 设置页没有「反馈」按钮 | 通道未配置（`/state.feedback.enabled === false`） | 设好 `DSH_CRB_MAIL_API_URL` + token，或 `DSH_CRB_SMTP_URL`；确认 `feedback.transport` 不是 `off`、`enabled` 不是 `false` |
 | 点击后 503 `E_FEEDBACK_DISABLED` | 同上一行（按钮来自旧页面渲染） | 刷新页面；看 `/state.feedback.reason`：`not-configured` / `disabled` / `off` |
-| 400 `E_FEEDBACK_INVALID` | 标题 4–120 字、正文 10–4000 字、联系方式 ≤200 字不满足 | `details.field` 指明字段，`details.min`/`details.max` 给出边界 |
+| 400 `E_FEEDBACK_INVALID` | 标题 4–120 字、正文 10–4000 字、邮箱 ≤200 字且必须形如 `a@b.cc` | `details.field` 指明字段，`details.min`/`details.max` 给出边界 |
 | 429 `E_FEEDBACK_RATE_LIMITED` | 超过 `feedback.rateLimitPerHour` | 等 `details.retryAfterMs` 后重试，或调高上限 |
 | 502 `E_FEEDBACK_TRANSPORT` | 邮件服务返回非 2xx / 网络失败 / 未装 nodemailer / 暴露不出 `createTransport` | 看宿主日志 `[conversation-recycle-bin] feedback delivery failed (<transport>): <code> <message>`（只含错误码与通道，不含正文）；核对 URL、token、SMTP 授权码 |
+| 邮件里「发件人」不是访客的邮箱 | 默认只把访客邮箱放进 `Reply-To`（`visitorAsFrom: false`），发信人仍是发信账号 | QQ/163/Gmail 必须如此（From 必须等于登录账号）；换用允许任意发件人的中继后再把 `feedback.visitorAsFrom` 设为 `true` |
 | 接口 200 但收件箱没有 | 服务端已受理，但被对方退信或进了垃圾箱 | 查发件账号退信；`feedback.from` 用与 SMTP 账号一致的地址，并检查收件人域名 |
 
 > 隐私边界：邮件正文 = 用户输入 + 对话框里已展示的上下文；宿主日志只记错误码、通道与耗时。删除开关（`enabled`）与反馈通道互相独立——关掉删除不影响反馈，反之亦然。

package/client.js

@@ -106,7 +106,7 @@ window.__ModuleLoader__.load({
         'dialog.partial': 'Deleted {done}, failed {failed}.',
         'dialog.noSession': 'The conversation no longer exists.',
         'dialog.blocked': 'This conversation cannot be deleted: {message}',
-        'dialog.reloadHint': 'The conversation list refreshes automatically.',
+        'dialog.reloadHint': 'The conversation list refreshes when you close this dialog.',
         'trash.title': 'Recycle bin',
         'trash.empty': 'The recycle bin is empty.',
         'trash.deletedAt': 'Deleted {time}',
@@ -145,6 +145,7 @@ window.__ModuleLoader__.load({
         'state.limits': 'Limits',
         'state.available': 'available',
         'state.unavailable': 'unavailable',
+        'state.notDetected': 'not detected',
         'state.rate': '{used}/{limit} deletions this minute',
         'state.batch': 'Effective batch limit: {limit}',
         'feedback.button': 'Feedback',
@@ -160,10 +161,15 @@ window.__ModuleLoader__.load({
         'feedback.titlePlaceholder': 'One line that summarises it',
         'feedback.bodyLabel': 'Message',
         'feedback.bodyPlaceholder': 'What happened, what you expected, and the steps that led to it.',
-        'feedback.contactLabel': 'Contact (optional)',
-        'feedback.contactPlaceholder': 'An email address or another way to reach you',
+        'feedback.emailLabel': 'Your email (optional)',
+        'feedback.emailPlaceholder': 'you@example.com',
+        'feedback.emailHint': 'Used as Reply-To so the maintainer can answer you. Leave it empty to stay anonymous.',
+        'feedback.emailHintAsFrom': 'Shown as the sender (From) of the mail.',
         'feedback.contextLabel': 'Attached automatically',
         'feedback.contextHint': 'Plugin version, platform and language. Conversation content is never attached.',
+        'feedback.contextVersion': 'Plugin version',
+        'feedback.contextPlatform': 'Platform',
+        'feedback.contextLocale': 'Language',
         'feedback.send': 'Send',
         'feedback.sending': 'Sending…',
         'feedback.sent': 'Feedback sent. Thank you!',
@@ -171,7 +177,8 @@ window.__ModuleLoader__.load({
         'feedback.tooLongTitle': 'The title may be at most {max} characters.',
         'feedback.tooShortBody': 'The message needs at least {min} characters.',
         'feedback.tooLongBody': 'The message may be at most {max} characters.',
-        'feedback.tooLongContact': 'The contact field may be at most {max} characters.',
+        'feedback.invalidEmail': 'That does not look like an email address.',
+        'feedback.tooLongEmail': 'The email address may be at most {max} characters.',
         'feedback.unavailable': 'The feedback channel is not configured on this Host.',
         'error.E_FEEDBACK_DISABLED': 'The feedback channel is not configured on this Host.',
         'error.E_FEEDBACK_INVALID': 'The feedback form is incomplete or too long.',
@@ -252,7 +259,7 @@ window.__ModuleLoader__.load({
         'dialog.partial': '成功 {done} 个，失败 {failed} 个。',
         'dialog.noSession': '该对话已不存在。',
         'dialog.blocked': '该对话无法删除：{message}',
-        'dialog.reloadHint': '会话列表将自动刷新。',
+        'dialog.reloadHint': '关闭本对话框后会刷新会话列表。',
         'trash.title': '回收站',
         'trash.empty': '回收站为空。',
         'trash.deletedAt': '删除于 {time}',
@@ -291,6 +298,7 @@ window.__ModuleLoader__.load({
         'state.limits': '限制',
         'state.available': '可用',
         'state.unavailable': '不可用',
+        'state.notDetected': '未检测到',
         'state.rate': '本分钟已删除 {used}/{limit}',
         'state.batch': '单次上限：{limit} 个（受每分钟额度约束）',
         'feedback.button': '反馈',
@@ -306,10 +314,15 @@ window.__ModuleLoader__.load({
         'feedback.titlePlaceholder': '用一句话概括',
         'feedback.bodyLabel': '正文',
         'feedback.bodyPlaceholder': '发生了什么、预期是什么、如何复现。',
-        'feedback.contactLabel': '联系方式（选填）',
-        'feedback.contactPlaceholder': '邮箱或其他能找到你的方式',
+        'feedback.emailLabel': '你的邮箱（选填）',
+        'feedback.emailPlaceholder': 'you@example.com',
+        'feedback.emailHint': '作为 Reply-To，便于维护者直接回复你；留空即匿名。',
+        'feedback.emailHintAsFrom': '会直接作为这封邮件的发件人。',
         'feedback.contextLabel': '自动附带',
         'feedback.contextHint': '插件版本、平台与语言；不会附带任何对话内容。',
+        'feedback.contextVersion': '插件版本',
+        'feedback.contextPlatform': '平台',
+        'feedback.contextLocale': '语言',
         'feedback.send': '发送',
         'feedback.sending': '正在发送…',
         'feedback.sent': '反馈已发送，谢谢！',
@@ -317,7 +330,8 @@ window.__ModuleLoader__.load({
         'feedback.tooLongTitle': '标题最多 {max} 个字符。',
         'feedback.tooShortBody': '正文至少需要 {min} 个字符。',
         'feedback.tooLongBody': '正文最多 {max} 个字符。',
-        'feedback.tooLongContact': '联系方式最多 {max} 个字符。',
+        'feedback.invalidEmail': '这看起来不是一个邮箱地址。',
+        'feedback.tooLongEmail': '邮箱最多 {max} 个字符。',
         'feedback.unavailable': '当前宿主未配置反馈通道。',
         'error.E_FEEDBACK_DISABLED': '当前宿主未配置反馈通道。',
         'error.E_FEEDBACK_INVALID': '反馈内容不完整或超出长度限制。',
@@ -544,11 +558,14 @@ window.__ModuleLoader__.load({
 
     const flashStore = {
       message: null,
+      timer: null,
       listeners: new Set(),
       show(message) {
+        if (this.timer !== null) clearTimeout(this.timer)
         this.message = message
         for (const listener of this.listeners) listener(this.message)
-        setTimeout(() => {
+        this.timer = setTimeout(() => {
+          this.timer = null
           if (this.message === message) {
             this.message = null
             for (const listener of this.listeners) listener(null)
@@ -650,7 +667,35 @@ window.__ModuleLoader__.load({
 
     function reloadApp(delay = 900) {
       if (typeof window === 'undefined' || typeof window.location?.reload !== 'function') return
-      window.setTimeout(() => window.location.reload(), delay)
+      reloadTimer = window.setTimeout(() => {
+        reloadTimer = null
+        reloadPending = false
+        window.location.reload()
+      }, delay)
+    }
+
+    // A fallback reload is armed when the Host cannot close the deleted
+    // conversation in place. The result dialog is the only place a partial
+    // batch reports its per-session failures, so the reload waits for the user
+    // to dismiss it; the timer is only a safety net for a dialog left open.
+    const RELOAD_FALLBACK_DELAY = 5_000
+    let reloadPending = false
+    let reloadTimer = null
+    // Set when the user dismisses the result dialog. `refreshAfterMutation`
+    // settles after the dialog is already on screen, so the dismissal can
+    // arrive first; the reload then happens at once instead of arming a timer.
+    let reloadDialogDismissed = false
+
+    function takeReloadPending() {
+      const pending = reloadPending
+      reloadPending = false
+      // Cancel the safety-net timer, otherwise dismissing the dialog would
+      // reload once now and once again when the original timer fires.
+      if (pending && reloadTimer !== null) {
+        if (typeof window !== 'undefined') window.clearTimeout?.(reloadTimer)
+        reloadTimer = null
+      }
+      return pending
     }
 
     function service(name) {
@@ -687,7 +732,7 @@ window.__ModuleLoader__.load({
     async function refreshAfterMutation(options = {}) {
       const sessionIds = Array.isArray(options.sessionIds) ? options.sessionIds : []
       const closeCurrent = options.closeCurrent !== false
-      const fallbackDelay = Number.isFinite(options.fallbackDelay) ? options.fallbackDelay : 900
+      const fallbackDelay = Number.isFinite(options.fallbackDelay) ? options.fallbackDelay : RELOAD_FALLBACK_DELAY
       const current = openSessionId()
       const sessions = service('sessions')
       let refreshed = false
@@ -725,7 +770,13 @@ window.__ModuleLoader__.load({
           }
         }
       }
-      if (!refreshed) reloadApp(fallbackDelay)
+      if (!refreshed) {
+        if (reloadDialogDismissed) reloadApp(0)
+        else {
+          reloadPending = true
+          reloadApp(fallbackDelay)
+        }
+      }
       if (options.notify !== false) mutationStore.bump()
       return refreshed
     }
@@ -828,22 +879,29 @@ window.__ModuleLoader__.load({
       titleMax: 120,
       bodyMin: 10,
       bodyMax: 4_000,
-      contactMax: 200,
+      emailMax: 200,
     })
 
+    /** Same loose shape the Host accepts: `a@b.cc`, no whitespace or separators. */
+    const EMAIL_PATTERN = /^[^\s@,;:<>()[\]\\]+@[^\s@,;:<>()[\]\\]+\.[^\s@,;:<>()[\]\\]{2,}$/
+
     /**
-     * @param {{title?: string, body?: string, contact?: string}} input
+     * @param {{title?: string, body?: string, email?: string}} input
      * @returns {{ok: true} | {ok: false, key: string, vars: Record<string, number>}}
      */
     function validateFeedbackInput(input) {
       const title = String(input?.title ?? '').trim()
       const body = String(input?.body ?? '').trim()
-      const contact = String(input?.contact ?? '').trim()
+      const email = String(input?.email ?? '').trim()
       if (title.length < FEEDBACK_LIMITS.titleMin) return { ok: false, key: 'feedback.tooShortTitle', vars: { min: FEEDBACK_LIMITS.titleMin } }
       if (title.length > FEEDBACK_LIMITS.titleMax) return { ok: false, key: 'feedback.tooLongTitle', vars: { max: FEEDBACK_LIMITS.titleMax } }
       if (body.length < FEEDBACK_LIMITS.bodyMin) return { ok: false, key: 'feedback.tooShortBody', vars: { min: FEEDBACK_LIMITS.bodyMin } }
       if (body.length > FEEDBACK_LIMITS.bodyMax) return { ok: false, key: 'feedback.tooLongBody', vars: { max: FEEDBACK_LIMITS.bodyMax } }
-      if (contact.length > FEEDBACK_LIMITS.contactMax) return { ok: false, key: 'feedback.tooLongContact', vars: { max: FEEDBACK_LIMITS.contactMax } }
+      // Same order as the Host (`lib/host/feedback.js:241-250`): shape first,
+      // then length. The reverse told a 300-character address it was "not an
+      // email" while the Host said "too long" for the identical submission.
+      if (email !== '' && !EMAIL_PATTERN.test(email)) return { ok: false, key: 'feedback.invalidEmail', vars: {} }
+      if (email.length > FEEDBACK_LIMITS.emailMax) return { ok: false, key: 'feedback.tooLongEmail', vars: { max: FEEDBACK_LIMITS.emailMax } }
       return { ok: true }
     }
 
@@ -878,6 +936,15 @@ window.__ModuleLoader__.load({
       const [error, setError] = useState(null)
       const [phrase, setPhrase] = useState('')
       const [done, setDone] = useState(null)
+
+      // Dismissing the result must also complete a reload the Host armed
+      // because it cannot close the deleted conversation in place; otherwise
+      // the safety-net timer would fire later and reload under the user's feet.
+      function closeDone() {
+        reloadDialogDismissed = true
+        dialogStore.close()
+        if (takeReloadPending()) reloadApp(0)
+      }
       const requestRef = useRef(0)
 
       const load = useCallback(async (nextMode, nextMemory, options = {}) => {
@@ -909,7 +976,9 @@ window.__ModuleLoader__.load({
 
       useEffect(() => {
         function onKey(event) {
-          if (event.key === 'Escape' && busy !== true) dialogStore.close()
+          // Escape dismisses the result dialog too, so it must release the
+          // armed reload exactly like the Close button does.
+          if (event.key === 'Escape' && busy !== true) closeDone()
         }
         window.addEventListener('keydown', onKey)
         return () => window.removeEventListener('keydown', onKey)
@@ -935,6 +1004,9 @@ window.__ModuleLoader__.load({
 
       async function submit() {
         if (confirmation === null || busy) return
+        // A new submission starts a new result cycle: a dismissal from the
+        // previous one must not force this run's reload to happen at once.
+        reloadDialogDismissed = false
         setBusy(true)
         setError(null)
         try {
@@ -985,7 +1057,10 @@ window.__ModuleLoader__.load({
       }
 
       if (done !== null) {
-        return h('div', { className: 'dc-backdrop' },
+        return h('div', {
+          className: 'dc-backdrop',
+          onMouseDown: (event) => { if (event.target === event.currentTarget) closeDone() },
+        },
           h('div', { className: 'dc-dialog', role: 'dialog', 'aria-modal': 'true' },
             h('h2', { className: 'dc-dialog-title' }, t('dialog.done', { count: done.count, memory: done.memory })),
             done.failed > 0 ? h('p', { className: 'dc-error-text' }, t('dialog.partial', { done: done.count, failed: done.failed })) : null,
@@ -996,7 +1071,7 @@ window.__ModuleLoader__.load({
               : null,
             h('p', { className: 'dc-hint' }, t('dialog.reloadHint')),
             h('div', { className: 'dc-actions' },
-              h(Button, { variant: 'primary', onClick: () => { dialogStore.close() } }, t('action.close')))))
+              h(Button, { variant: 'primary', onClick: () => closeDone() }, t('action.close')))))
       }
 
       return h('div', {
@@ -1103,7 +1178,10 @@ window.__ModuleLoader__.load({
       if (first !== undefined) return adapterReason(first.reason)
       const stores = Array.isArray(memory?.stores) ? memory.stores : []
       const store = stores.find((item) => item.available === false && typeof item.reason === 'string')
-      return store === undefined ? 'not detected' : adapterReason(store.reason)
+      // `not detected` used to be hard-coded English, so a Chinese page showed
+      // `记忆存储不可用：not detected`. Everything else here already routes
+      // through the string table.
+      return store === undefined ? t('state.notDetected') : adapterReason(store.reason)
     }
 
     /* ------------------------------------------------------------------ *
@@ -1124,15 +1202,22 @@ window.__ModuleLoader__.load({
       const [category, setCategory] = useState('bug')
       const [title, setTitle] = useState('')
       const [body, setBody] = useState('')
-      const [contact, setContact] = useState('')
+      const [email, setEmail] = useState('')
       const [busy, setBusy] = useState(false)
       const [error, setError] = useState(null)
-      const validation = validateFeedbackInput({ title, body, contact })
+      const validation = validateFeedbackInput({ title, body, email })
       const context = collectFeedbackContext()
       // A Host without a mail transport advertises `enabled: false`; the form is
       // still rendered read-only so the explanation is visible instead of a
       // button that fails on click.
       const unavailable = feedback?.enabled !== true
+      // Nothing has been typed on the first render, so the "too short" rule must
+      // not greet the user. It starts applying once the user edits a field OR
+      // leaves one: gating on `dirty` alone left the disabled submit button with
+      // no visible reason for anyone who only tabbed through the form.
+      const [dirty, setDirty] = useState(false)
+      const [touched, setTouched] = useState(false)
+      const validationVisible = (dirty === true || touched === true) && validation.ok !== true
 
       useEffect(() => {
         function onKey(event) {
@@ -1154,7 +1239,7 @@ window.__ModuleLoader__.load({
               category,
               title: title.trim(),
               body: body.trim(),
-              contact: contact.trim(),
+              email: email.trim(),
               context: {
                 pluginVersion: version,
                 platform: context.platform,
@@ -1192,7 +1277,8 @@ window.__ModuleLoader__.load({
             className: 'dc-input',
             value: category,
             disabled: busy,
-            onChange: (event) => setCategory(event.target.value),
+            onBlur: () => setTouched(true),
+            onChange: (event) => { setDirty(true); setCategory(event.target.value) },
           },
           h('option', { value: 'bug' }, t('feedback.categoryBug')),
           h('option', { value: 'suggestion' }, t('feedback.categorySuggestion')),
@@ -1208,7 +1294,8 @@ window.__ModuleLoader__.load({
             placeholder: t('feedback.titlePlaceholder'),
             disabled: busy,
             autoFocus: true,
-            onChange: (event) => setTitle(event.target.value),
+            onBlur: () => setTouched(true),
+            onChange: (event) => { setDirty(true); setTitle(event.target.value) },
           })),
 
         h('label', { className: 'dc-field' },
@@ -1220,30 +1307,34 @@ window.__ModuleLoader__.load({
             maxLength: FEEDBACK_LIMITS.bodyMax,
             placeholder: t('feedback.bodyPlaceholder'),
             disabled: busy,
-            onChange: (event) => setBody(event.target.value),
+            onBlur: () => setTouched(true),
+            onChange: (event) => { setDirty(true); setBody(event.target.value) },
           })),
 
         h('label', { className: 'dc-field' },
-          h('span', { className: 'dc-field-label' }, t('feedback.contactLabel')),
+          h('span', { className: 'dc-field-label' }, t('feedback.emailLabel')),
           h('input', {
-            type: 'text',
+            type: 'email',
             className: 'dc-input',
-            value: contact,
-            maxLength: FEEDBACK_LIMITS.contactMax,
-            placeholder: t('feedback.contactPlaceholder'),
+            value: email,
+            maxLength: FEEDBACK_LIMITS.emailMax,
+            placeholder: t('feedback.emailPlaceholder'),
+            autoComplete: 'email',
             disabled: busy,
-            onChange: (event) => setContact(event.target.value),
-          })),
+            onBlur: () => setTouched(true),
+            onChange: (event) => { setDirty(true); setEmail(event.target.value) },
+          }),
+          h('div', { className: 'dc-hint' }, t(feedback?.visitorAsFrom === true ? 'feedback.emailHintAsFrom' : 'feedback.emailHint'))),
 
         h('div', { className: 'dc-context' },
           h('div', { className: 'dc-context-title' }, t('feedback.contextLabel')),
           h('div', { className: 'dc-hint' }, t('feedback.contextHint')),
           h('ul', { className: 'dc-context-list' },
-            h('li', null, `plugin: ${version === '' ? '—' : version}`),
-            h('li', null, `platform: ${context.platform === '' ? '—' : context.platform}`),
-            h('li', null, `locale: ${context.locale}`))),
+            h('li', null, `${t('feedback.contextVersion')}: ${version === '' ? '—' : version}`),
+            h('li', null, `${t('feedback.contextPlatform')}: ${context.platform === '' ? '—' : context.platform}`),
+            h('li', null, `${t('feedback.contextLocale')}: ${context.locale}`))),
 
-        validation.ok !== true ? h('div', { className: 'dc-hint' }, t(validation.key, validation.vars)) : null,
+        validationVisible ? h('div', { className: 'dc-hint' }, t(validation.key, validation.vars)) : null,
         busy ? h(Spinner, { label: t('feedback.sending') }) : null,
 
         h('div', { className: 'dc-actions' },
@@ -1350,7 +1441,7 @@ window.__ModuleLoader__.load({
      * log) gets a Restore button: `performDiscard` refuses exactly those
      * entries, so without this the only way out was a manual API call.
      */
-    function IncompleteEntries({ entries, discardTarget, discardPhrase, onPhrase, onStart, onCancel, onDiscard, onRestore, restoreBusyId }) {
+    function IncompleteEntries({ entries, discardTarget, discardPhrase, onPhrase, onStart, onCancel, onDiscard, onRestore, restoreBusyId, discardBusyId = null }) {
       return h('div', { className: 'dc-panel dc-incomplete' },
         h('div', { className: 'dc-state-title' }, `${t('trash.incompleteTitle')} (${entries.length})`),
         h('p', { className: 'dc-hint' }, t('trash.incompleteHint')),
@@ -1378,10 +1469,10 @@ window.__ModuleLoader__.load({
                 }),
                 h(Button, {
                   variant: 'danger',
-                  disabled: discardPhrase.trim() !== 'DELETE',
+                  disabled: discardBusyId === entry.trashId || discardPhrase.trim() !== 'DELETE',
                   onClick: () => onDiscard(entry.trashId),
                 }, t('trash.discard')),
-                h(Button, { onClick: onCancel }, t('action.cancel')))
+                h(Button, { disabled: discardBusyId === entry.trashId, onClick: onCancel }, t('action.cancel')))
               : h(Button, {
                 onClick: () => onStart(entry.trashId),
                 title: t('trash.confirmDiscard'),
@@ -1432,8 +1523,17 @@ window.__ModuleLoader__.load({
       const [discardTarget, setDiscardTarget] = useState(null)
       const [discardPhrase, setDiscardPhrase] = useState('')
       const [restoreBusyId, setRestoreBusyId] = useState(null)
+      const [purgeBusy, setPurgeBusy] = useState(false)
+      const [discardBusyId, setDiscardBusyId] = useState(null)
+
+      // Two refreshes can overlap (mount, mutation broadcast, and the refresh a
+      // purge triggers), and the older response must not overwrite the newer.
+      const refreshSerial = useRef(0)
 
       const refresh = useCallback(async () => {
+        const serial = refreshSerial.current + 1
+        refreshSerial.current = serial
+        const stale = () => serial !== refreshSerial.current
         setLoading(true)
         setError(null)
         try {
@@ -1443,6 +1543,7 @@ window.__ModuleLoader__.load({
             api('/trash'),
             api('/audit?limit=50'),
           ])
+          if (stale()) return
           const nextSessions = Array.isArray(sessionsResponse.sessions) ? sessionsResponse.sessions : []
           setState(stateResponse.state)
           setSessions(nextSessions)
@@ -1456,9 +1557,9 @@ window.__ModuleLoader__.load({
             return next.size === current.size ? current : next
           })
         } catch (caught) {
-          setError(caught)
+          if (!stale()) setError(caught)
         } finally {
-          setLoading(false)
+          if (!stale()) setLoading(false)
         }
       }, [])
 
@@ -1515,6 +1616,8 @@ window.__ModuleLoader__.load({
       }
 
       async function purge(trashId, phrase) {
+        if (purgeBusy === true) return
+        setPurgeBusy(true)
         setError(null)
         const entry = trash.find((item) => item.trashId === trashId)
         try {
@@ -1531,10 +1634,14 @@ window.__ModuleLoader__.load({
           })
         } catch (caught) {
           setError(caught)
+        } finally {
+          setPurgeBusy(false)
         }
       }
 
       async function discard(trashId, phrase) {
+        if (discardBusyId !== null) return
+        setDiscardBusyId(trashId)
         setError(null)
         try {
           await api('/trash/discard', { method: 'POST', body: { trashId, confirmPhrase: phrase } })
@@ -1544,6 +1651,8 @@ window.__ModuleLoader__.load({
           await refresh()
         } catch (caught) {
           setError(caught)
+        } finally {
+          setDiscardBusyId(null)
         }
       }
 
@@ -1613,13 +1722,13 @@ window.__ModuleLoader__.load({
             h('div', { className: 'dc-hint' }, t('state.batch', { limit: effectiveBatch > 0 ? effectiveBatch : '—' })))) : null,
 
         h('div', { className: 'dc-tabs', role: 'tablist' },
-          h('button', { type: 'button', role: 'tab', 'aria-selected': tab === 'trash', className: `dc-tab${tab === 'trash' ? ' dc-tab-active' : ''}`, onClick: () => setTab('trash') }, t('trash.title')),
-          h('button', { type: 'button', role: 'tab', 'aria-selected': tab === 'batch', className: `dc-tab${tab === 'batch' ? ' dc-tab-active' : ''}`, onClick: () => setTab('batch') }, t('batch.title')),
-          h('button', { type: 'button', role: 'tab', 'aria-selected': tab === 'audit', className: `dc-tab${tab === 'audit' ? ' dc-tab-active' : ''}`, onClick: () => setTab('audit') }, t('audit.title'))),
+          h('button', { id: 'dc-tab-trash', type: 'button', role: 'tab', 'aria-selected': tab === 'trash', 'aria-controls': 'dc-panel-trash', className: `dc-tab${tab === 'trash' ? ' dc-tab-active' : ''}`, onClick: () => setTab('trash') }, t('trash.title')),
+          h('button', { id: 'dc-tab-batch', type: 'button', role: 'tab', 'aria-selected': tab === 'batch', 'aria-controls': 'dc-panel-batch', className: `dc-tab${tab === 'batch' ? ' dc-tab-active' : ''}`, onClick: () => setTab('batch') }, t('batch.title')),
+          h('button', { id: 'dc-tab-audit', type: 'button', role: 'tab', 'aria-selected': tab === 'audit', 'aria-controls': 'dc-panel-audit', className: `dc-tab${tab === 'audit' ? ' dc-tab-active' : ''}`, onClick: () => setTab('audit') }, t('audit.title'))),
 
         loading ? h(Spinner, { label: t('dialog.loading') }) : null,
 
-        tab === 'trash' && !loading ? h('div', { className: 'dc-panel' },
+        tab === 'trash' && !loading ? h('div', { id: 'dc-panel-trash', role: 'tabpanel', 'aria-labelledby': 'dc-tab-trash', className: 'dc-panel' },
           trash.length === 0 ? h('div', { className: 'dc-empty' }, t('trash.empty')) : null,
           ...trash.map((entry) => h('div', { key: entry.trashId, className: 'dc-row' },
             h('div', { className: 'dc-row-main' },
@@ -1636,10 +1745,10 @@ window.__ModuleLoader__.load({
                   }),
                   h(Button, {
                     variant: 'danger',
-                    disabled: purgePhrase.trim() !== 'DELETE',
+                    disabled: purgeBusy === true || purgePhrase.trim() !== 'DELETE',
                     onClick: () => { void purge(entry.trashId, purgePhrase.trim()) },
                   }, t('action.purge')),
-                  h(Button, { onClick: () => { setPurgeTarget(null); setPurgePhrase('') } }, t('action.cancel')))
+                  h(Button, { disabled: purgeBusy === true, onClick: () => { setPurgeTarget(null); setPurgePhrase('') } }, t('action.cancel')))
                 : h(Button, { variant: 'danger', onClick: () => { setPurgeTarget(entry.trashId); setPurgePhrase('') } }, t('action.purge')))))) : null,
 
         tab === 'trash' && !loading && incomplete.length > 0 ? h(IncompleteEntries, {
@@ -1652,9 +1761,10 @@ window.__ModuleLoader__.load({
           onDiscard: (trashId) => { void discard(trashId, discardPhrase.trim()) },
           onRestore: (trashId) => { void restoreIncomplete(trashId) },
           restoreBusyId,
+          discardBusyId,
         }) : null,
 
-        tab === 'batch' && !loading ? h('div', { className: 'dc-panel' },
+        tab === 'batch' && !loading ? h('div', { id: 'dc-panel-batch', role: 'tabpanel', 'aria-labelledby': 'dc-tab-batch', className: 'dc-panel' },
           h('div', { className: 'dc-batch-bar' },
             h('span', { className: 'dc-hint' }, t('batch.selected', { count: selectedIds.length })),
             // "Select all" only marks deletable rows: a batch containing one
@@ -1680,7 +1790,7 @@ window.__ModuleLoader__.load({
             onToggle: toggle,
           }))) : null,
 
-        tab === 'audit' && !loading ? h('div', { className: 'dc-panel' },
+        tab === 'audit' && !loading ? h('div', { id: 'dc-panel-audit', role: 'tabpanel', 'aria-labelledby': 'dc-tab-audit', className: 'dc-panel' },
           audit.length === 0 ? h('div', { className: 'dc-empty' }, t('audit.empty')) : null,
           ...audit.map((record) => h('div', { key: record.id, className: 'dc-row' },
             h('div', { className: 'dc-row-main' },
@@ -1699,10 +1809,10 @@ window.__ModuleLoader__.load({
      * ------------------------------------------------------------------ */
 
     const CSS = `
-/* 1100 sits above the settings modal (z-index 1000 on body) now that the
-   dialog is portaled into the same layer. */
-.dc-backdrop{position:fixed;inset:0;z-index:1100;display:flex;align-items:center;justify-content:center;background:rgba(0,0,0,.38);padding:16px}
-.dc-dialog{width:min(560px,94vw);max-height:88vh;overflow:auto;background:var(--dsw-alias-bg-overlay,#fff);color:var(--dsw-alias-label-primary,#1f2329);border:1px solid var(--dsw-alias-border-l1,#e5e6eb);border-radius:12px;box-shadow:0 18px 60px rgba(0,0,0,.28);padding:20px 20px 16px;font:inherit}
+/* 1300 clears the settings modal (1000) and the host panels that also use
+   1100, since this backlog shares document.body with them. */
+.dc-backdrop{position:fixed;inset:0;z-index:1300;display:flex;align-items:center;justify-content:center;background:rgba(0,0,0,.38);padding:16px}
+.dc-dialog{box-sizing:border-box;width:min(560px,94vw);max-height:88vh;overflow:auto;background:var(--dsw-alias-bg-overlay,#fff);color:var(--dsw-alias-label-primary,#1f2329);border:1px solid var(--dsw-alias-border-l1,#e5e6eb);border-radius:12px;box-shadow:0 18px 60px rgba(0,0,0,.28);padding:20px 20px 16px;font:inherit}
 .dc-dialog-title{margin:0 0 8px;font-size:16px;font-weight:600;line-height:1.4}
 .dc-dialog-body{margin:0 0 12px;font-size:13px;color:var(--dsw-alias-label-secondary,#646a73);line-height:1.6}
 .dc-section{margin-top:10px}
@@ -1779,7 +1889,7 @@ window.__ModuleLoader__.load({
 .dc-row-title{font-size:13px;font-weight:500;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
 .dc-row-actions{display:flex;gap:6px;align-items:center;flex-wrap:wrap;justify-content:flex-end}
 .dc-row-time{font-size:11px;color:var(--dsw-alias-label-secondary,#646a73);white-space:nowrap}
-.dc-inline-confirm{display:flex;gap:6px;align-items:center}
+.dc-inline-confirm{display:flex;gap:6px;align-items:center;flex-wrap:wrap}
 .dc-batch-bar{display:flex;gap:8px;align-items:center;flex-wrap:wrap;margin-bottom:4px}
 .dc-toast{position:fixed;left:50%;bottom:28px;transform:translateX(-50%);z-index:1200;background:var(--dsw-alias-bg-overlay,#fff);color:var(--dsw-alias-label-primary,#1f2329);border:1px solid var(--dsw-alias-border-l1,#e5e6eb);border-radius:9px;box-shadow:0 10px 30px rgba(0,0,0,.22);padding:9px 14px;font-size:12px;max-width:80vw}
 `

package/config.schema.json

@@ -78,7 +78,8 @@
         "to": { "type": "string", "default": "b64:MzQzMzI3NjU3N0BxcS5jb20=", "description": "Target mailbox. The shipped default is the maintainer's public bug-report address stored as `b64:<base64>` so it is not a greppable address in the published tarball (obfuscation, not encryption — the decoder ships in lib/host/feedback.js). Plain addresses work too; DSH_CRB_FEEDBACK_TO wins over this value." },
         "from": { "type": "string", "default": "", "description": "Sender address. Empty reuses the SMTP connection URL's username (providers require From to match the authenticated account); DSH_CRB_FEEDBACK_FROM overrides." },
         "transport": { "enum": ["auto", "smtp", "http", "off"], "default": "auto", "description": "auto = HTTP API when DSH_CRB_MAIL_API_URL is set, otherwise SMTP when DSH_CRB_SMTP_URL is set. http/smtp force one transport; off disables the channel." },
-        "rateLimitPerHour": { "type": "integer", "minimum": 1, "maximum": 100, "default": 5, "description": "Per-Host hourly cap on outgoing feedback mails. Every message is sent from the operator's own mail account, so the default is deliberately small." }
+        "rateLimitPerHour": { "type": "integer", "minimum": 1, "maximum": 100, "default": 5, "description": "Per-Host hourly cap on outgoing feedback mails. Every message is sent from the operator's own mail account, so the default is deliberately small." },
+        "visitorAsFrom": { "type": "boolean", "default": false, "description": "Put the visitor's own address into the From header instead of Reply-To only. The form always asks the visitor for their email and always sets Reply-To; leave this false for QQ/163/Gmail, which refuse a message whose From is not the authenticated account. True works on relays that allow an arbitrary sender." }
       }
     }
   }

package/cordis.patch.yml

@@ -87,3 +87,7 @@
           # auto | smtp | http | off
           transport: auto
           rateLimitPerHour: 5
+          # The form always asks the visitor for their own address and sends it
+          # as Reply-To. Set this to true to also use it as From — only on relays
+          # that allow an arbitrary sender; QQ/163/Gmail reject it.
+          visitorAsFrom: false

package/lib/core/config.js

@@ -61,6 +61,11 @@ export const DEFAULTS = deepFreeze({
     from: '',
     transport: 'auto',
     rateLimitPerHour: 5,
+    // The visitor's own address always travels in `Reply-To`. Setting this to
+    // true also puts it into `From`, which only works on relays that allow an
+    // arbitrary sender; QQ/163/Gmail reject it because `From` must equal the
+    // authenticated account.
+    visitorAsFrom: false,
   },
 })
 
@@ -234,6 +239,7 @@ export function normalizeConfig(raw) {
       // Host serves, and every message is an outbound mail from the operator's
       // account. One message a minute is plenty for a human.
       rateLimitPerHour: clampInt(feedbackRaw.rateLimitPerHour, DEFAULTS.feedback.rateLimitPerHour, 1, 100, 'feedback.rateLimitPerHour', warnings),
+      visitorAsFrom: readBool(feedbackRaw.visitorAsFrom, DEFAULTS.feedback.visitorAsFrom, 'feedback.visitorAsFrom', warnings),
     },
   }
 

package/lib/host/feedback.js

@@ -26,7 +26,7 @@
  *
  * Privacy: the delivered message contains only what the user typed plus the
  * context fields the dialog displays to them. Logs never contain the title,
- * body, contact address or mail credentials.
+ * body, visitor address or mail credentials.
  */
 import { DeleteError } from '../core/errors.js'
 import { PLUGIN_VERSION } from '../version.js'
@@ -59,7 +59,7 @@ export const FEEDBACK_LIMITS = Object.freeze({
   titleMax: 120,
   bodyMin: 10,
   bodyMax: 4_000,
-  contactMax: 200,
+  emailMax: 200,
 })
 
 /** Context keys the Client may attach; everything else is dropped. */
@@ -101,6 +101,18 @@ function singleLine(value) {
   return String(value ?? '').replace(/[\r\n\t]+/g, ' ').replace(/\s{2,}/g, ' ').trim()
 }
 
+/**
+ * The visitor's own address. Deliberately loose (`a@b.c` shape only): the Host
+ * is not the authority on what a given provider accepts, and a strict RFC 5322
+ * check would reject addresses that still deliver. Anything with CR/LF was
+ * already flattened by `singleLine`, so a header cannot be injected here.
+ */
+const EMAIL_PATTERN = /^[^\s@,;:<>()[\]\\]+@[^\s@,;:<>()[\]\\]+\.[^\s@,;:<>()[\]\\]{2,}$/
+
+function looksLikeAddress(value) {
+  return EMAIL_PATTERN.test(value)
+}
+
 /**
  * Resolve the effective settings. The environment wins over config for the two
  * addresses (an operator can redirect a deployed Host without editing the
@@ -108,7 +120,7 @@ function singleLine(value) {
  * ONLY source for credentials.
  *
  * @param {object} input
- * @param {{feedback?: {enabled?: boolean, to?: string, from?: string, transport?: string}}} [input.config]
+ * @param {{feedback?: {enabled?: boolean, to?: string, from?: string, transport?: string, visitorAsFrom?: boolean}}} [input.config]
  * @param {Record<string, string | undefined>} [input.env]
  */
 export function resolveFeedbackSettings({ config, env = process.env } = {}) {
@@ -120,6 +132,7 @@ export function resolveFeedbackSettings({ config, env = process.env } = {}) {
   const apiToken = envString(env, FEEDBACK_ENV.apiToken)
   const authHeader = envString(env, FEEDBACK_ENV.authHeader) || 'Authorization'
   const smtpUrl = envString(env, FEEDBACK_ENV.smtpUrl)
+  const visitorAsFrom = feedback.visitorAsFrom === true
 
   const httpReady = apiUrl !== '' && to !== ''
   const smtpReady = smtpUrl !== '' && to !== ''
@@ -144,7 +157,7 @@ export function resolveFeedbackSettings({ config, env = process.env } = {}) {
     reason = 'not-configured'
   }
 
-  return { configured, transport, reason, to, from, apiUrl, apiToken, authHeader, smtpUrl }
+  return { configured, transport, reason, to, from, apiUrl, apiToken, authHeader, smtpUrl, visitorAsFrom }
 }
 
 /**
@@ -164,6 +177,20 @@ function smtpSender(settings) {
   }
 }
 
+/**
+ * The `From` an outgoing message carries.
+ *
+ * Providers differ: hosted SMTP (QQ, 163, Gmail) refuses a message whose `From`
+ * is not the authenticated account, so by default the visitor's address only
+ * travels in `Reply-To` while the mail is sent from the operator's account.
+ * `feedback.visitorAsFrom = true` puts the visitor's address into `From` too —
+ * right for relays that allow it, rejected by the strict providers above.
+ */
+export function resolveSender(settings, submission) {
+  if (settings?.visitorAsFrom === true && submission?.email) return submission.email
+  return smtpSender(settings)
+}
+
 function normalizeContext(raw) {
   if (!isPlainObject(raw)) return {}
   const context = {}
@@ -182,14 +209,14 @@ function normalizeContext(raw) {
  * `details` so the Client can highlight the offending input.
  *
  * @param {unknown} raw request body
- * @returns {{category: string, title: string, body: string, contact: string | null, context: Record<string, string>}}
+ * @returns {{category: string, title: string, body: string, email: string | null, context: Record<string, string>}}
  */
 export function validateFeedbackPayload(raw) {
   const source = isPlainObject(raw) ? raw : {}
   const category = CATEGORIES.has(source.category) ? source.category : 'other'
   const title = singleLine(source.title)
   const body = typeof source.body === 'string' ? source.body.replace(/\r\n/g, '\n').trim() : ''
-  const contact = singleLine(source.contact)
+  const email = singleLine(source.email)
 
   if (title.length < FEEDBACK_LIMITS.titleMin) {
     throw new DeleteError('E_FEEDBACK_INVALID', 'A feedback title needs at least 4 characters.', {
@@ -211,9 +238,14 @@ export function validateFeedbackPayload(raw) {
       field: 'body', max: FEEDBACK_LIMITS.bodyMax,
     })
   }
-  if (contact.length > FEEDBACK_LIMITS.contactMax) {
-    throw new DeleteError('E_FEEDBACK_INVALID', 'The contact field is too long.', {
-      field: 'contact', max: FEEDBACK_LIMITS.contactMax,
+  if (email !== '' && !looksLikeAddress(email)) {
+    throw new DeleteError('E_FEEDBACK_INVALID', 'The sender address is not an email address.', {
+      field: 'email',
+    })
+  }
+  if (email.length > FEEDBACK_LIMITS.emailMax) {
+    throw new DeleteError('E_FEEDBACK_INVALID', 'The sender address is too long.', {
+      field: 'email', max: FEEDBACK_LIMITS.emailMax,
     })
   }
 
@@ -221,7 +253,7 @@ export function validateFeedbackPayload(raw) {
     category,
     title,
     body,
-    contact: contact === '' ? null : contact,
+    email: email === '' ? null : email,
     context: normalizeContext(source.context),
   }
 }
@@ -247,7 +279,8 @@ export function renderFeedbackMessage(submission, { at = Date.now() } = {}) {
     '---- 自动附带 / attached automatically ----',
     `  plugin: dsh-conversation-recycle-bin ${PLUGIN_VERSION}`,
     ...contextLines,
-    `  contact: ${submission.contact ?? '(none)'}`,
+    `  from / 发件人: ${submission.email ?? '(anonymous)'}`,
+    `  reply-to: ${submission.email ?? '(none)'}`,
     `  at: ${new Date(at).toISOString()}`,
   ]
   return { subject, text: lines.join('\n') }
@@ -275,6 +308,7 @@ export function createFeedbackService({ config, env = process.env, now = Date.no
       configured: settings.configured,
       toConfigured: settings.to !== '',
       fromConfigured: settings.from !== '',
+      visitorAsFrom: settings.visitorAsFrom,
       rateLimitPerHour: rateLimit,
     }
   }
@@ -301,7 +335,7 @@ export function createFeedbackService({ config, env = process.env, now = Date.no
       to: [settings.to],
       subject: message.subject,
       text: message.text,
-      reply_to: submission.contact ?? undefined,
+      reply_to: submission.email ?? undefined,
     }
     const controller = new AbortController()
     const timer = setTimeout(() => controller.abort(), DELIVERY_TIMEOUT_MS)
@@ -344,11 +378,11 @@ export function createFeedbackService({ config, env = process.env, now = Date.no
     const transporter = createTransport(settings.smtpUrl)
     try {
       await transporter.sendMail({
-        from: smtpSender(settings),
+        from: resolveSender(settings, submission),
         to: settings.to,
         subject: message.subject,
         text: message.text,
-        replyTo: submission.contact ?? undefined,
+        replyTo: submission.email ?? undefined,
       })
     } finally {
       try {
@@ -382,7 +416,7 @@ export function createFeedbackService({ config, env = process.env, now = Date.no
         : new DeleteError('E_FEEDBACK_TRANSPORT', 'The feedback message could not be delivered.', {
           transport: settings.transport,
         }, { cause: error })
-      // Only the code and transport: the message body and the contact address
+      // Only the code and transport: the message body and the visitor address
       // are user data and must not be copied into the Host log.
       logger.error?.(`[conversation-recycle-bin] feedback delivery failed (${settings.transport}): ${normalized.code} ${normalized.message}`)
       throw normalized

package/lib/version.js

@@ -5,4 +5,4 @@
  * asserted against it by `test/manifest.test.mjs` so the two can never drift
  * (they did: the constant stayed at 0.1.0 while the package reached 0.1.4).
  */
-export const PLUGIN_VERSION = '0.3.0'
+export const PLUGIN_VERSION = '0.3.1'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-conversation-recycle-bin",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "DSH conversation deletion with an optional, previewed cascade into conversation-associated memory: soft delete + recycle bin, audit trail, batch rate limits and per-session rollback. 删除对话（可选一并删除关联记忆）：软删除与回收站、审计留痕、批量限流、失败回滚。",
   "repository": {
     "type": "git",