A price check can report itself, and the dialog is the disclosure

[JIRPOS]

Release notes

ADDED: Report a Bug on the price-check panel, for a check that read an item wrong — an
unmatched modifier, the wrong base, a search that asked for the wrong thing.

• It opens a dialog that shows you the whole report before it goes anywhere: the item text the
  game copied, everything this tool made of it, the version line, a box to describe the problem,
  and a screenshot you can attach or not. What is on that screen is what is sent, and nothing is
  sent until you press Send.
• The report is anonymous. There is no login, no identifier of you or your machine, and nothing
  kept on disk afterwards. Reports go to a small relay of the project's own, described in full in
  PRIVACY.md.
• The screenshot is a picture of this tool's own window and nothing else — the game behind it is
  not in it and cannot be, and every seller's name in a search result is replaced by its position
  before the picture is taken. The box starts unticked either way.
• If it is sent you get a report id; if it fails the dialog stays open with the reason, so nothing
  you typed is lost.

CHANGED: Search and Open in browser are now icons at the right of the panel rather than two
labelled buttons, which is what makes room for the third.

Review notes

ADDED: A Report a Bug button on the price-check panel, opening a dialog that shows the whole
payload — the clipboard capture, what this tool made of it, the build line and the screenshot —
before anything is sent.

• Nothing may reach the relay that the preview does not draw, which is why report::to_json
  writes five keys and a test asserts the count.
• The payload is frozen when the dialog opens: the updater can swap a bundle in and a search can
  land while the user is still reading, and a preview a frame behind what will be sent says
  nothing.

ADDED: report::describe, the parse dump a mispricing is actually diagnosed from: what was read
off the clipboard, what it resolved to in the bundle, which modifier matched which stat record —
and, the line that earns the rest, which matched none.
ADDED: An optional screenshot, read back from our own framebuffer with glReadPixels between the
draw and the swap.

• It is this process's own pixels and cannot be anything else, so the game behind the transparent
  parts of the overlay is not in it and no other window can be.
• Rows are flipped and the colour is un-premultiplied on the way out: ImGui blends onto a
  transparent clear, which is right for a compositor and a shade too dark for every PNG reader.

ADDED: A masked frame between the press and the dialog, which is the frame that gets photographed:
every seller's account name is replaced by its position and no button shows its tooltip.

• Masking in place would work only for as long as the action bar keeps being drawn before the
  results table, and that failure would be silent and would consist of publishing somebody's name.

ADDED: util/png, an encoder with one IDAT, no interlacing and no ancillary chunks at all — no
timestamp, no text, no gamma. Every row is filtered Sub, which is what fits a 900×1080 panel into
~190 KB against the relay's 5 MB cap.
ADDED: ReportService, off the UI thread and deliberately not behind trade::request — the
shared limiter is GGG's policy and nothing else belongs there. The screenshot reaches the worker
as raw pixels, because encoding and serialising it is most of a second.
ADDED: A monospace face chosen at startup, for the two payload previews. A capture is read down
the line and Fontin has no figure alignment at all.
ADDED: Three Font Awesome glyphs, docs/reporting.md, and tests/report_test.cpp.
ADDED: worker/, the Cloudflare Worker the report is posted to, with its deploy scripts and 22
contract tests of its own — every field fenced, mentions disabled, bidi overrides stripped, only
known fields read, and a screenshot that must decode to a real PNG.

• The app ships the Worker's public URL and never a credential: the Discord webhook is a
  Cloudflare secret, so reading the URL out of the binary yields a rate-limited endpoint.
• Each report becomes its own forum post, named by us from the item and the report id, so triage
  is Discord's own open/resolved state rather than a convention.

CHANGED: Search and Open in browser are square glyph buttons against the panel's right edge
instead of two words, so the row is one toolbar and fits beside the listings.
CHANGED: PRIVACY.md no longer says there is no server on the other end — there is now exactly
one, reached only by a press, and a section says what a report carries and what it cannot.
CHANGED: zlib becomes ppc_core's one link dependency besides nlohmann/json, and a CI package.

🤖 Generated with Claude Code