django-snapnote 0.1.1__py3-none-any.whl

django_snapnote-0.1.1.dist-info/METADATA

@@ -0,0 +1,112 @@
+Metadata-Version: 2.5
+Name: django-snapnote
+Version: 0.1.1
+Summary: Report problems from any page of a Django site: screenshot, annotations and a ticket list.
+License: MIT
+License-File: LICENSE
+Classifier: Environment :: Web Environment
+Classifier: Framework :: Django
+Classifier: Framework :: Django :: 4.2
+Classifier: Framework :: Django :: 5.0
+Classifier: Framework :: Django :: 5.1
+Classifier: Framework :: Django :: 5.2
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Requires-Python: >=3.10
+Requires-Dist: django>=4.2
+Requires-Dist: pillow>=9.0
+Description-Content-Type: text/markdown
+
+# django-snapnote
+
+Let your users report a problem from any page: a floating button captures the tab, lets them
+draw on it and creates a ticket you can review in the admin or in built-in views.
+
+Requires only Django (4.2–5.2) and Pillow. No DRF, no Node, no build step for you. The widget is a
+self-contained bundle rendered in a Shadow DOM, so your CSS and ours don't interfere.
+
+## Install
+
+```bash
+pip install django-snapnote
+```
+
+```python
+# settings.py
+INSTALLED_APPS += ["snapnote"]          # needs django.contrib.auth and staticfiles
+
+# urls.py
+path("snapnote/", include("snapnote.urls")),   # report endpoint + management views
+```
+
+```django
+{# in your base template (the view needs the request context processor) #}
+{% load snapnote_tags %}
+{% snapnote_button %}
+```
+
+Then `python manage.py migrate`. Uploaded images use your `MEDIA_ROOT`/storage.
+
+## Settings
+
+| Setting | Default | Purpose |
+| --- | --- | --- |
+| `SNAPNOTE_CAN_REPORT` | `"snapnote.permissions.is_authenticated"` | Dotted path to `user -> bool`: who sees the button and may report |
+| `SNAPNOTE_NOTIFIERS` | `["snapnote.notifiers.email"]` | Callables `(ticket, absolute_url)` run after a ticket is created |
+| `SNAPNOTE_NOTIFY_EMAILS` | `[]` | Recipients of the email notifier (nothing is sent if empty) |
+| `SNAPNOTE_BASE_TEMPLATE` | `None` | Template the management views extend; it only needs `{% block content %}` |
+| `SNAPNOTE_ENABLE_MANAGEMENT_VIEWS` | `True` | List/detail views (the admin is always registered) |
+| `SNAPNOTE_SEARCH_UNACCENT` | `False` | Accent-insensitive search (PostgreSQL + `django.contrib.postgres` only) |
+| `SNAPNOTE_MAX_UPLOAD_MB` | `5` | Per-image size limit |
+| `SNAPNOTE_MAX_DIMENSION` | `8000` | Max width/height in pixels |
+| `SNAPNOTE_UPLOAD_TO` | `"snapnote/"` | Prefix in the storage |
+| `SNAPNOTE_THROTTLE` | `"10/hour"` | Reports per user (`second`, `minute`, `hour`, `day`); uses Django's cache. `None` disables |
+| `SNAPNOTE_AUTO_INJECT` | `False` | Also add `snapnote.middleware.AutoInjectMiddleware` to `MIDDLEWARE` to insert the button automatically. Incompatible with strict CSP and streaming responses |
+
+Customise the look by overriding CSS variables on `#snapnote-root`
+(`--snapnote-accent`, `--snapnote-accent-text`, `--snapnote-z-index`, `--snapnote-font`).
+
+## Permissions
+
+Reporting follows `SNAPNOTE_CAN_REPORT`. Managing uses the model permissions
+`snapnote.view_ticket`, `change_ticket` and `delete_ticket` (superusers have them all).
+Anonymous users are redirected to `LOGIN_URL`; authenticated users without permission get 403.
+
+## Notifiers
+
+The signal `snapnote.signals.ticket_created(sender, ticket, request_url)` is sent after commit.
+A notifier is any callable; a failing one is logged and never breaks the report:
+
+```python
+# myproject/notifiers.py — Slack recipe
+import requests
+def slack(ticket, url):
+    requests.post(settings.SLACK_WEBHOOK, json={"text": f"New ticket: {ticket.title} {url}"}, timeout=5)
+
+SNAPNOTE_NOTIFIERS = ["snapnote.notifiers.email", "myproject.notifiers.slack"]
+```
+
+## Security and deployment notes
+
+- **Screenshots can contain sensitive data.** Serve `MEDIA_ROOT` only to authenticated staff (or use a
+  private storage); do not expose it publicly. Purge old reports with
+  `python manage.py snapnote_purge --older-than 90` (`--dry-run` to preview).
+- **Permissions-Policy**: the browser needs `display-capture=(self)`. With `display-capture=()`
+  (also sent by some proxies) capture never works and users get the upload fallback.
+- **CSP**: allow `img-src blob: data:` and `style-src 'unsafe-inline'` (the Shadow DOM stylesheet
+  is inline) and `script-src` for the static bundle.
+- Uploads are validated (PNG/JPEG/WebP only, no SVG), size/dimension limited and re-encoded with Pillow.
+- `page_url` must be http(s) and is never rendered as a clickable link otherwise.
+- The report endpoint uses Django's CSRF protection; the template tag sets the cookie.
+- Capture uses `getDisplayMedia` (desktop browsers). On mobile the user attaches an image.
+
+## Development
+
+```bash
+pip install -e . pytest pytest-django
+pytest                      # SQLite; SNAPNOTE_TEST_DB=postgres for PostgreSQL
+cd frontend && npm ci && npm run build   # writes src/snapnote/static/snapnote/snapnote.js
+npm test && npm run e2e
+```
+
+The built `snapnote.js` is committed/packaged so installing the wheel never needs Node.

django_snapnote-0.1.1.dist-info/RECORD

@@ -0,0 +1,34 @@
+snapnote/__init__.py,sha256=rnObPjuBcEStqSO0S6gsdS_ot8ITOQjVj_-P1LUUYpg,22
+snapnote/admin.py,sha256=8SpOdeu_xcvj9hq0CTtSINJ5i9PEfL0spTMDKU414ik,398
+snapnote/apps.py,sha256=ASR7xi2EOT23E5uddRi7jMB2cjiXbl3494svOdV7j0U,452
+snapnote/checks.py,sha256=JYcd8UA5VvFKHF2_JRufDY093ndVQ50o5DZCMkhIuOk,672
+snapnote/conf.py,sha256=AGJiH3IDxtsmMjaE_12eSFDqxYcZwmMdTzwLf0cz9FA,661
+snapnote/forms.py,sha256=kNO3SGn8PqW3ZOiDzZQ-IbqHuaXnQnwRw43qt7s49jU,2966
+snapnote/middleware.py,sha256=OcF9bc7X8gxoEwrawMiFHxnNdn1brOPdNRzFT6OYrPg,1224
+snapnote/models.py,sha256=M6VlT-TCdCPckffz5vhnJ9MJIrAz14Y3gP4xXCpQJh8,3992
+snapnote/notifiers.py,sha256=NvV41RIRMMcQVwBq2RDuwiB9yjAYtK_64h3ij71SCok,1215
+snapnote/permissions.py,sha256=Z2tr344MBwHqZYiL987vEIm9-74WThQ7-Lmj17uQu3c,76
+snapnote/signals.py,sha256=E3akLPzYQGfkQgvR8e7qZXxne8ajluJQiXu4ij_ogmQ,206
+snapnote/urls.py,sha256=ksVPeeVwouEpe6Oo0mQ2KnS-v_lpYYEXhtuFfYrZouQ,578
+snapnote/views.py,sha256=vBmc2LnriG29u-hIOR2YxE4ascbqstrBsnn2GaIhv3I,4264
+snapnote/locale/es/LC_MESSAGES/django.mo,sha256=JncSwBm73vBqreNuxsFUwAl6McEqW2T4v6HRsKutcTU,2934
+snapnote/locale/es/LC_MESSAGES/django.po,sha256=tso7WVBMKnIFZJ6fUefHB__SE43ixyTGkSHOn_ojdvM,3055
+snapnote/management/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+snapnote/management/commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+snapnote/management/commands/snapnote_purge.py,sha256=DgRBF-F_qiiaIej-aaIyuU4B457RCkkN9ArO59X_Ads,964
+snapnote/migrations/0001_initial.py,sha256=OsrI176xEDLf7iqTup4r8yMjqeuFcorjy_f5vMlpOmY,3343
+snapnote/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+snapnote/static/snapnote/management.css,sha256=e5x4vpUE29PsxPfWnCZaRa7aYQj3-b1XW9N-Lotr_hs,1913
+snapnote/static/snapnote/snapnote.js,sha256=wUXb8woyoTscCLhCrdIo9HtprJ3q6aHEtIDjGqorJ8E,156495
+snapnote/templates/snapnote/base.html,sha256=pG-amUv_AYSFDQxgG56YUD2cDP9Aa8xvdLdLQXFAF94,372
+snapnote/templates/snapnote/button.html,sha256=vfgN3_yUIW6RGZXkudu_CazenLodGRVrL2xIxTdwEpY,141
+snapnote/templates/snapnote/ticket_confirm_delete.html,sha256=ksd4UukbtRqaitN1j29Gg-fhu5bp1k7_orydIztQMQo,554
+snapnote/templates/snapnote/ticket_detail.html,sha256=3TT5TQFTjs9XpbHWNVVRc0kNwnJji_2laRS4lNWgatY,2403
+snapnote/templates/snapnote/ticket_list.html,sha256=5xaJhpO5XsKD7OUwIp-XvuQLkay68xHfA-E7qxLh1Ig,1663
+snapnote/templates/snapnote/includes/status_badge.html,sha256=VS66ixwUbGXgGl_JtSLaQGEfUE3c6JneQZKwJ3aJMQg,103
+snapnote/templatetags/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+snapnote/templatetags/snapnote_tags.py,sha256=FAsBgoRh06Lm6jXdE0llG96kn6xapIpz2_fvj8_jNT8,2032
+django_snapnote-0.1.1.dist-info/METADATA,sha256=Fsrim2eelPngKepSbnkteSfGUdTLKrcNi-UcoNghmRo,5020
+django_snapnote-0.1.1.dist-info/WHEEL,sha256=2iZrJkDIkeDh0k9SikKMqFuRP-ua6mb4Ir1AsER4BEw,87
+django_snapnote-0.1.1.dist-info/licenses/LICENSE,sha256=6w-wMxs-japVMrB73w0A5dGaX1tMYeV8wl5N6M25REE,1067
+django_snapnote-0.1.1.dist-info/RECORD,,

django_snapnote-0.1.1.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.33.0
+Root-Is-Purelib: true
+Tag: py3-none-any

django_snapnote-0.1.1.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Magnet SpA
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

snapnote/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.1"

snapnote/admin.py

@@ -0,0 +1,12 @@
+from django.contrib import admin
+
+from .models import Ticket
+
+
+@admin.register(Ticket)
+class TicketAdmin(admin.ModelAdmin):
+    list_display = ("id", "title", "status", "reported_by", "created_at")
+    list_filter = ("status", "created_at")
+    search_fields = ("title", "description", "page_url")
+    raw_id_fields = ("reported_by", "closed_by")
+    readonly_fields = ("created_at", "updated_at")

snapnote/apps.py

@@ -0,0 +1,14 @@
+from django.apps import AppConfig
+from django.utils.translation import gettext_lazy as _
+
+
+class SnapnoteConfig(AppConfig):
+    name = "snapnote"
+    verbose_name = _("Snapnote")
+    default_auto_field = "django.db.models.BigAutoField"
+
+    def ready(self):
+        from . import checks, notifiers  # noqa: F401
+        from .signals import ticket_created
+
+        ticket_created.connect(notifiers.run_notifiers, dispatch_uid="snapnote.run_notifiers")

snapnote/checks.py

@@ -0,0 +1,22 @@
+from django.apps import apps
+from django.core.checks import Warning, register
+from django.db import connection
+
+from . import conf
+
+
+@register()
+def check_settings(app_configs, **kwargs):
+    messages = []
+    if conf.get("SEARCH_UNACCENT") and (
+        connection.vendor != "postgresql" or not apps.is_installed("django.contrib.postgres")
+    ):
+        messages.append(
+            Warning(
+                "SNAPNOTE_SEARCH_UNACCENT is ignored.",
+                hint="It needs PostgreSQL and 'django.contrib.postgres' in INSTALLED_APPS "
+                "(plus the unaccent extension).",
+                id="snapnote.W001",
+            )
+        )
+    return messages

snapnote/conf.py

@@ -0,0 +1,25 @@
+from django.conf import settings
+from django.utils.module_loading import import_string
+
+DEFAULTS = {
+    "CAN_REPORT": "snapnote.permissions.is_authenticated",
+    "NOTIFIERS": ["snapnote.notifiers.email"],
+    "NOTIFY_EMAILS": [],
+    "BASE_TEMPLATE": None,
+    "ENABLE_MANAGEMENT_VIEWS": True,
+    "SEARCH_UNACCENT": False,
+    "MAX_UPLOAD_MB": 5,
+    "MAX_DIMENSION": 8000,
+    "UPLOAD_TO": "snapnote/",
+    "THROTTLE": "10/hour",
+    "AUTO_INJECT": False,
+}
+
+
+def get(name):
+    return getattr(settings, f"SNAPNOTE_{name}", DEFAULTS[name])
+
+
+def get_callable(name):
+    value = get(name)
+    return import_string(value) if isinstance(value, str) else value

snapnote/forms.py

@@ -0,0 +1,83 @@
+import io
+from urllib.parse import urlsplit
+
+from django import forms
+from django.core.files.base import ContentFile
+from django.utils.translation import gettext_lazy as _
+from PIL import Image, UnidentifiedImageError
+
+from . import conf
+from .models import Ticket
+
+ALLOWED_FORMATS = {"PNG": "png", "JPEG": "jpg", "WEBP": "webp"}
+
+
+def clean_image(upload):
+    """Validates size and dimensions, rejects non raster formats and re-encodes with Pillow."""
+    max_bytes = conf.get("MAX_UPLOAD_MB") * 1024 * 1024
+    if upload.size > max_bytes:
+        raise forms.ValidationError(
+            _("The image is too large (max %(mb)s MB)."), params={"mb": conf.get("MAX_UPLOAD_MB")}
+        )
+    try:
+        upload.seek(0)
+        image = Image.open(upload)
+        fmt = image.format
+        if fmt not in ALLOWED_FORMATS:
+            raise forms.ValidationError(_("Unsupported image format."))
+        limit = conf.get("MAX_DIMENSION")
+        if max(image.size) > limit:
+            raise forms.ValidationError(
+                _("The image is too large (max %(px)s px per side)."), params={"px": limit}
+            )
+        image.load()
+    except (UnidentifiedImageError, OSError, Image.DecompressionBombError):
+        raise forms.ValidationError(_("Upload a valid image.")) from None
+    if fmt == "JPEG" and image.mode not in ("RGB", "L"):
+        image = image.convert("RGB")
+    out = io.BytesIO()
+    # Saving a fresh image drops metadata and any trailing payload.
+    image.save(out, format=fmt)
+    return ContentFile(
+        out.getvalue(), name=f"{upload.name.rsplit('.', 1)[0]}.{ALLOWED_FORMATS[fmt]}"
+    )
+
+
+class TicketReportForm(forms.ModelForm):
+    class Meta:
+        model = Ticket
+        fields = ("title", "description", "page_url", "screenshot", "annotations")
+
+    def clean_page_url(self):
+        value = self.cleaned_data["page_url"].strip()
+        if urlsplit(value).scheme not in ("http", "https"):
+            raise forms.ValidationError(_("Enter an http or https URL."))
+        return value
+
+    def _clean_file(self, name):
+        upload = self.cleaned_data.get(name)
+        # Falsy when nothing was uploaded (or an empty FieldFile).
+        if not upload or not hasattr(upload, "size"):
+            return upload
+        return clean_image(upload)
+
+    def clean_screenshot(self):
+        return self._clean_file("screenshot")
+
+    def clean_annotations(self):
+        return self._clean_file("annotations")
+
+
+class TicketFilterForm(forms.Form):
+    q = forms.CharField(label=_("Search"), required=False)
+    status = forms.ChoiceField(
+        label=_("Status"), required=False, choices=[("", _("All"))] + Ticket.Status.choices
+    )
+
+    def filter(self, queryset):
+        if not self.is_valid():
+            return queryset
+        queryset = queryset.search(self.cleaned_data["q"])
+        if self.cleaned_data["status"]:
+            queryset = queryset.filter(status=self.cleaned_data["status"])
+        return queryset

snapnote/locale/es/LC_MESSAGES/django.po

@@ -0,0 +1,186 @@
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: django-snapnote\n"
+"Language: es\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+msgid "Snapnote"
+msgstr "Snapnote"
+
+msgid "open"
+msgstr "abierto"
+
+msgid "closed"
+msgstr "cerrado"
+
+msgid "title"
+msgstr "título"
+
+msgid "description"
+msgstr "descripción"
+
+msgid "page url"
+msgstr "URL de la página"
+
+msgid "screenshot"
+msgstr "captura"
+
+msgid "annotations"
+msgstr "anotaciones"
+
+msgid "status"
+msgstr "estado"
+
+msgid "reported by"
+msgstr "reportado por"
+
+msgid "closed at"
+msgstr "cerrado el"
+
+msgid "closed by"
+msgstr "cerrado por"
+
+msgid "created at"
+msgstr "creado el"
+
+msgid "updated at"
+msgstr "actualizado el"
+
+msgid "ticket"
+msgstr "ticket"
+
+msgid "tickets"
+msgstr "tickets"
+
+msgid "Page"
+msgstr "Página"
+
+msgid "Ticket"
+msgstr "Ticket"
+
+msgid "Search"
+msgstr "Buscar"
+
+msgid "Status"
+msgstr "Estado"
+
+msgid "All"
+msgstr "Todos"
+
+msgid "The image is too large (max %(mb)s MB)."
+msgstr "La imagen es demasiado grande (máx. %(mb)s MB)."
+
+msgid "Unsupported image format."
+msgstr "Formato de imagen no soportado."
+
+msgid "The image is too large (max %(px)s px per side)."
+msgstr "La imagen es demasiado grande (máx. %(px)s px por lado)."
+
+msgid "Upload a valid image."
+msgstr "Sube una imagen válida."
+
+msgid "Enter an http or https URL."
+msgstr "Ingresa una URL http o https."
+
+msgid "Report a problem"
+msgstr "Reportar un problema"
+
+msgid "Title"
+msgstr "Título"
+
+msgid "Description"
+msgstr "Descripción"
+
+msgid "Preview"
+msgstr "Vista previa"
+
+msgid "Edit annotations"
+msgstr "Editar anotaciones"
+
+msgid "Send"
+msgstr "Enviar"
+
+msgid "Cancel"
+msgstr "Cancelar"
+
+msgid "Sending…"
+msgstr "Enviando…"
+
+msgid "Thanks! Your report was sent."
+msgstr "¡Gracias! Tu reporte fue enviado."
+
+msgid "The report could not be sent. Try again."
+msgstr "No se pudo enviar el reporte. Inténtalo de nuevo."
+
+msgid "Could not capture the screen. You can attach a screenshot instead."
+msgstr "No se pudo capturar la pantalla. Puedes adjuntar una captura."
+
+msgid "Attach a screenshot"
+msgstr "Adjuntar una captura"
+
+msgid "Pen"
+msgstr "Lápiz"
+
+msgid "Rectangle"
+msgstr "Rectángulo"
+
+msgid "Text"
+msgstr "Texto"
+
+msgid "Undo"
+msgstr "Deshacer"
+
+msgid "Clear all"
+msgstr "Borrar todo"
+
+msgid "Done"
+msgstr "Listo"
+
+msgid "The title is required."
+msgstr "El título es obligatorio."
+
+msgid "Tickets"
+msgstr "Tickets"
+
+msgid "Filter"
+msgstr "Filtrar"
+
+msgid "Reported by"
+msgstr "Reportado por"
+
+msgid "Created at"
+msgstr "Creado el"
+
+msgid "No tickets found."
+msgstr "No se encontraron tickets."
+
+msgid "Close"
+msgstr "Cerrar"
+
+msgid "Reopen"
+msgstr "Reabrir"
+
+msgid "Delete"
+msgstr "Eliminar"
+
+msgid "Closed"
+msgstr "Cerrado"
+
+msgid "Show annotations"
+msgstr "Mostrar anotaciones"
+
+msgid "Screenshot"
+msgstr "Captura"
+
+msgid "Annotations"
+msgstr "Anotaciones"
+
+msgid "Confirm"
+msgstr "Confirmar"
+
+msgid "Are you sure you want to delete \"%(object)s\"?"
+msgstr "¿Seguro que quieres eliminar \"%(object)s\"?"

snapnote/management/commands/snapnote_purge.py

@@ -0,0 +1,26 @@
+from datetime import timedelta
+
+from django.core.management.base import BaseCommand
+from django.utils import timezone
+
+from snapnote.models import Ticket
+
+
+class Command(BaseCommand):
+    help = "Deletes tickets (and their images) older than N days."
+
+    def add_arguments(self, parser):
+        parser.add_argument("--older-than", type=int, required=True, metavar="DAYS")
+        parser.add_argument("--dry-run", action="store_true")
+
+    def handle(self, *args, older_than, dry_run, **options):
+        cutoff = timezone.now() - timedelta(days=older_than)
+        tickets = Ticket.objects.filter(created_at__lt=cutoff)
+        count = tickets.count()
+        if not dry_run:
+            for ticket in tickets:
+                ticket.screenshot.delete(save=False)
+                ticket.annotations.delete(save=False)
+                ticket.delete()
+        verb = "Would delete" if dry_run else "Deleted"
+        self.stdout.write(f"{verb} {count} ticket(s).")

snapnote/middleware.py

@@ -0,0 +1,32 @@
+from . import conf
+from .templatetags.snapnote_tags import render_button
+
+
+class AutoInjectMiddleware:
+    """Inserts the button before </body> in HTML responses. Opt in with SNAPNOTE_AUTO_INJECT.
+
+    Not compatible with streaming responses or a strict CSP.
+    """
+
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+        response = self.get_response(request)
+        if (
+            not conf.get("AUTO_INJECT")
+            or getattr(response, "streaming", False)
+            or "text/html" not in response.get("Content-Type", "")
+            or response.get("Content-Encoding")
+        ):
+            return response
+        content = response.content.decode(response.charset or "utf-8")
+        if "snapnote-root" in content or "</body>" not in content:
+            return response
+        snippet = render_button(request)
+        if snippet.strip():
+            head, _, tail = content.rpartition("</body>")
+            response.content = f"{head}{snippet}</body>{tail}".encode(response.charset or "utf-8")
+            if response.has_header("Content-Length"):
+                response["Content-Length"] = len(response.content)
+        return response