From ef11d2f6824e89b31e745a6a7b50f7f5738e2382 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Thu, 17 Sep 2026 15:24:52 +0000
Subject: [PATCH 1/5] feat(feedback): add a bug report and feature request form
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reporting a problem meant opening a GitHub issue, which needs a GitHub
account — the issue notes this is exactly what stops users giving feedback.

Adds a public form at /feedback/, linked from the footer: report type,
description, optional e-mail and an optional attachment. Reports are stored
and triaged in the admin rather than e-mailed, so nothing is lost when mail
delivery is misconfigured and reports stay searchable.

Attachments are restricted to screenshots, PDFs and text logs, capped at 5 MB
and stored under a generated name, since both the file and its name come from
anonymous visitors.

Closes #691

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HXUw7kyELDu8ycGQxtaFbb
---
 src/core/admin.py                    |  11 ++-
 src/core/forms.py                    |  43 ++++++++++-
 src/core/jinja2/core/feedback.jinja2 |  28 +++++++
 src/core/jinja2/core/footer.jinja2   |   1 +
 src/core/migrations/0045_feedback.py |  75 ++++++++++++++++++
 src/core/models.py                   |  42 ++++++++++
 src/core/tests/test_feedback_form.py | 110 +++++++++++++++++++++++++++
 src/core/urls.py                     |   2 +
 src/core/views/views.py              |  14 ++++
 9 files changed, 324 insertions(+), 2 deletions(-)
 create mode 100644 src/core/jinja2/core/feedback.jinja2
 create mode 100644 src/core/migrations/0045_feedback.py
 create mode 100644 src/core/tests/test_feedback_form.py

diff --git a/src/core/admin.py b/src/core/admin.py
index 761d3ff0..851aaba7 100644
--- a/src/core/admin.py
+++ b/src/core/admin.py
@@ -11,7 +11,7 @@
 
 from core.marker_utils import generate_marker_variants
 from core.media_dimensions import extract_dimensions
-from core.models import Artwork, Exhibit, Marker, Object, Sound
+from core.models import Artwork, Exhibit, Feedback, Marker, Object, Sound
 from core.spritesheet_converter import gif_to_spritesheet
 from core.utils import filesizeformat, get_admin_url
 
@@ -392,3 +392,12 @@ def _owner(self, obj):
 
     def preview(self, obj):
         return format_html(obj.as_html(), "")
+
+
+@admin.register(Feedback)
+class FeedbackAdmin(admin.ModelAdmin):
+    list_display = ["__str__", "kind", "email", "handled", "created"]
+    list_filter = ["kind", "handled"]
+    list_editable = ["handled"]
+    search_fields = ["description", "email"]
+    readonly_fields = ["kind", "description", "email", "attachment", "created"]
diff --git a/src/core/forms.py b/src/core/forms.py
index 6806a9ba..7d88b8d1 100644
--- a/src/core/forms.py
+++ b/src/core/forms.py
@@ -6,7 +6,7 @@
 
 from core.marker_utils import generate_marker_variants
 from core.media_dimensions import extract_dimensions
-from core.models import Artwork, Marker, ObjectExtensions
+from core.models import Artwork, Feedback, Marker, ObjectExtensions
 
 from .models import Exhibit, ExhibitTypes, Object, Sound
 
@@ -53,6 +53,10 @@ def render(self, name, value, attrs=None, renderer=None):
         return mark_safe(template)
 
 
+# Feedback attachments come from anonymous visitors, so keep them small.
+MAX_FEEDBACK_ATTACHMENT_BYTES = 5 * 1024 * 1024
+
+
 class UploadObjectForm(forms.ModelForm):
     selected_sound = forms.ModelChoiceField(
         queryset=Sound.objects.all(),
@@ -418,3 +422,40 @@ def save(self, *args, **kwargs):
         self.instance.file_extension = self.instance.file.name.split(".")[-1].lower()
 
         return super(SoundForm, self).save(*args, **kwargs)
+
+
+class FeedbackForm(forms.ModelForm):
+    """Public bug report / feature request form linked from the footer."""
+
+    class Meta:
+        model = Feedback
+        fields = ("kind", "description", "email", "attachment")
+        widgets = {
+            "description": forms.Textarea(
+                attrs={
+                    "rows": 6,
+                    "placeholder": _("What happened, and what did you expect?"),
+                }
+            ),
+            "email": forms.EmailInput(
+                attrs={"placeholder": _("Your e-mail (optional, so we can reply)")}
+            ),
+        }
+
+    def clean_attachment(self):
+        attachment = self.cleaned_data.get("attachment")
+        if not attachment:
+            return None
+
+        allowed_extensions = ["png", "jpg", "jpeg", "gif", "webp", "pdf", "txt", "log"]
+        extension = getattr(attachment, "name", "").split(".")[-1].lower()
+        if extension not in allowed_extensions:
+            raise forms.ValidationError(
+                _("Attach a screenshot (PNG, JPG, GIF, WebP), a PDF or a text log.")
+            )
+        if attachment.size > MAX_FEEDBACK_ATTACHMENT_BYTES:
+            raise forms.ValidationError(
+                _("Attachments are limited to %(limit)s MB."),
+                params={"limit": MAX_FEEDBACK_ATTACHMENT_BYTES // (1024 * 1024)},
+            )
+        return attachment
diff --git a/src/core/jinja2/core/feedback.jinja2 b/src/core/jinja2/core/feedback.jinja2
new file mode 100644
index 00000000..ef9b0efa
--- /dev/null
+++ b/src/core/jinja2/core/feedback.jinja2
@@ -0,0 +1,28 @@
+{% extends "core/base.jinja2" %}
+{% block content %}
+    <main class="container feedback">
+        {% if submitted %}
+            <h1>{{ _("Thank you!") }}</h1>
+            <p>{{ _("Your report was received. If you left an e-mail, we may get back to you.") }}</p>
+            <a class="button" href="{{ url('home') }}">{{ _("Back to Jandig") }}</a>
+        {% else %}
+            <h1>{{ _("Report a bug or request a feature") }}</h1>
+            <p>
+                {{ _("Found something broken, or missing? Tell us here — no GitHub account needed.") }}
+            </p>
+            <form method="post" enctype="multipart/form-data" novalidate>
+                {{ csrf_input }}
+                {% for field in form %}
+                    <div class="form-field">
+                        <label for="{{ field.id_for_label }}">{{ field.label }}</label>
+                        {{ field }}
+                        {% if field.help_text %}<small>{{ field.help_text }}</small>{% endif %}
+                        {{ field.errors }}
+                    </div>
+                {% endfor %}
+                {{ form.non_field_errors() }}
+                <button type="submit" class="button">{{ _("Send") }}</button>
+            </form>
+        {% endif %}
+    </main>
+{% endblock content %}
diff --git a/src/core/jinja2/core/footer.jinja2 b/src/core/jinja2/core/footer.jinja2
index af13af06..6765d2cd 100644
--- a/src/core/jinja2/core/footer.jinja2
+++ b/src/core/jinja2/core/footer.jinja2
@@ -1,6 +1,7 @@
 <section class="footer">
     <div class="container flex">
         <a href="{{ url('community') }}" class="useful">{{ _("About Us") }}</a>
+        <a href="{{ url('feedback') }}" class="useful">{{ _("Report a bug") }}</a>
         <div class="social flex">
             <a href="https://www.instagram.com/jandig.art/"
                class="instagram"
diff --git a/src/core/migrations/0045_feedback.py b/src/core/migrations/0045_feedback.py
new file mode 100644
index 00000000..21eabce3
--- /dev/null
+++ b/src/core/migrations/0045_feedback.py
@@ -0,0 +1,75 @@
+# Generated by Django 6.1.1 on 2026-09-17 15:21
+
+import core.models
+import django_extensions.db.fields
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("core", "0044_populate_sound_in_use_fields"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="Feedback",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                (
+                    "created",
+                    django_extensions.db.fields.CreationDateTimeField(
+                        auto_now_add=True, verbose_name="created"
+                    ),
+                ),
+                (
+                    "modified",
+                    django_extensions.db.fields.ModificationDateTimeField(
+                        auto_now=True, verbose_name="modified"
+                    ),
+                ),
+                (
+                    "kind",
+                    models.CharField(
+                        choices=[
+                            ("bug", "Report a bug"),
+                            ("feature", "Request a feature"),
+                        ],
+                        db_index=True,
+                        default="bug",
+                        max_length=10,
+                    ),
+                ),
+                ("description", models.TextField(max_length=5000)),
+                ("email", models.EmailField(blank=True, max_length=254)),
+                (
+                    "attachment",
+                    models.FileField(
+                        blank=True,
+                        null=True,
+                        upload_to=core.models.feedback_attachment_path,
+                    ),
+                ),
+                (
+                    "handled",
+                    models.BooleanField(
+                        default=False,
+                        help_text="Tick once this report has been triaged.",
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name_plural": "feedback",
+                "get_latest_by": "modified",
+                "abstract": False,
+            },
+        ),
+    ]
diff --git a/src/core/models.py b/src/core/models.py
index 49628392..3102b542 100644
--- a/src/core/models.py
+++ b/src/core/models.py
@@ -1,4 +1,5 @@
 import logging
+from uuid import uuid4
 
 import pghistory
 from django.core.files.base import ContentFile as CF
@@ -733,3 +734,44 @@ def exhibit_sounds_changed(sender, instance, action, pk_set, **kwargs):
             # post_clear doesn't provide pk_set; recalculate all sounds
             for sound in Sound.objects.filter(in_use=True):
                 _recalculate_sound_flags(sound.pk)
+
+
+class FeedbackKinds(models.TextChoices):
+    BUG = "bug", _("Report a bug")
+    FEATURE = "feature", _("Request a feature")
+
+
+def feedback_attachment_path(instance, filename):
+    """Upload path: feedback/<uuid>.<ext> — the name comes from the public."""
+    ext = filename.rsplit(".", 1)[-1].lower() if "." in filename else ""
+    name = uuid4().hex
+    return f"feedback/{name}.{ext}" if ext else f"feedback/{name}"
+
+
+class Feedback(TimeStampedModel):
+    """A bug report or feature request sent from the site's feedback form.
+
+    Stored rather than e-mailed so nothing is lost if mail delivery is
+    misconfigured, and so reports remain searchable in the admin.
+    """
+
+    kind = models.CharField(
+        max_length=10,
+        choices=FeedbackKinds.choices,
+        default=FeedbackKinds.BUG,
+        db_index=True,
+    )
+    description = models.TextField(max_length=5000)
+    email = models.EmailField(blank=True)
+    attachment = models.FileField(
+        upload_to=feedback_attachment_path, null=True, blank=True
+    )
+    handled = models.BooleanField(
+        default=False, help_text="Tick once this report has been triaged."
+    )
+
+    class Meta(TimeStampedModel.Meta):
+        verbose_name_plural = "feedback"
+
+    def __str__(self):
+        return f"{self.get_kind_display()} #{self.pk}"
diff --git a/src/core/tests/test_feedback_form.py b/src/core/tests/test_feedback_form.py
new file mode 100644
index 00000000..77b39648
--- /dev/null
+++ b/src/core/tests/test_feedback_form.py
@@ -0,0 +1,110 @@
+import io
+
+from django.core.files.uploadedfile import SimpleUploadedFile
+from django.test import TestCase
+from django.urls import reverse
+from PIL import Image
+
+from core.forms import MAX_FEEDBACK_ATTACHMENT_BYTES
+from core.models import Feedback, FeedbackKinds
+
+
+def screenshot(name="shot.png"):
+    buffer = io.BytesIO()
+    Image.new("RGB", (8, 8), "white").save(buffer, format="PNG")
+    buffer.seek(0)
+    return SimpleUploadedFile(name, buffer.read(), content_type="image/png")
+
+
+class TestFeedbackForm(TestCase):
+    def test_the_form_is_reachable_without_an_account(self):
+        response = self.client.get(reverse("feedback"))
+
+        assert response.status_code == 200
+
+    def test_a_bug_report_is_stored(self):
+        response = self.client.post(
+            reverse("feedback"),
+            {
+                "kind": FeedbackKinds.BUG,
+                "description": "The marker preview never loads on Firefox.",
+                "email": "someone@example.com",
+            },
+        )
+
+        assert response.status_code == 200
+        report = Feedback.objects.get()
+        assert report.kind == FeedbackKinds.BUG
+        assert report.email == "someone@example.com"
+        assert report.handled is False
+
+    def test_a_feature_request_is_stored_with_its_own_kind(self):
+        self.client.post(
+            reverse("feedback"),
+            {
+                "kind": FeedbackKinds.FEATURE,
+                "description": "Let me sort exhibits by name.",
+            },
+        )
+
+        assert Feedback.objects.get().kind == FeedbackKinds.FEATURE
+
+    def test_the_email_is_optional(self):
+        self.client.post(
+            reverse("feedback"),
+            {"kind": FeedbackKinds.BUG, "description": "Something broke."},
+        )
+
+        assert Feedback.objects.get().email == ""
+
+    def test_a_description_is_required(self):
+        self.client.post(reverse("feedback"), {"kind": FeedbackKinds.BUG})
+
+        assert not Feedback.objects.exists()
+
+    def test_an_attachment_is_stored_under_a_generated_name(self):
+        self.client.post(
+            reverse("feedback"),
+            {
+                "kind": FeedbackKinds.BUG,
+                "description": "See the screenshot.",
+                "attachment": screenshot("Captura de tela #1.png"),
+            },
+        )
+        report = Feedback.objects.get()
+
+        assert report.attachment.name.startswith("feedback/")
+        assert report.attachment.name.endswith(".png")
+        assert "Captura" not in report.attachment.name
+
+    def test_an_executable_attachment_is_rejected(self):
+        self.client.post(
+            reverse("feedback"),
+            {
+                "kind": FeedbackKinds.BUG,
+                "description": "Trying to attach a binary.",
+                "attachment": SimpleUploadedFile("payload.exe", b"MZ\x00\x00"),
+            },
+        )
+
+        assert not Feedback.objects.exists()
+
+    def test_an_oversized_attachment_is_rejected(self):
+        oversized = SimpleUploadedFile(
+            "huge.png", b"\x00" * (MAX_FEEDBACK_ATTACHMENT_BYTES + 1)
+        )
+        self.client.post(
+            reverse("feedback"),
+            {
+                "kind": FeedbackKinds.BUG,
+                "description": "Attaching something enormous.",
+                "attachment": oversized,
+            },
+        )
+
+        assert not Feedback.objects.exists()
+
+    def test_the_footer_links_to_the_form(self):
+        response = self.client.get(reverse("home"))
+
+        assert reverse("feedback").encode() in response.content
diff --git a/src/core/urls.py b/src/core/urls.py
index 3fba7519..4d93fbb1 100644
--- a/src/core/urls.py
+++ b/src/core/urls.py
@@ -28,6 +28,7 @@
     exhibit,
     exhibit_detail,
     exhibit_select,
+    feedback,
     get_element,
     marker_preview,
     marker_upload,
@@ -47,6 +48,7 @@
     path("community/", community, name="community"),
     path("content/delete/", delete, name="delete-content"),
     path("documentation/", documentation, name="documentation"),
+    path("feedback/", feedback, name="feedback"),
     path("exhibit_select/", exhibit_select, name="exhibit_select"),
     path("exhibit/", exhibit_detail, name="exhibit-detail"),
     path("exhibits/create-ar/", create_or_edit_ar_exhibit, name="create-ar-exhibit"),
diff --git a/src/core/views/views.py b/src/core/views/views.py
index 9abe83ed..d870c285 100644
--- a/src/core/views/views.py
+++ b/src/core/views/views.py
@@ -14,6 +14,7 @@
     ArtworkForm,
     ExhibitForm,
     ExhibitSelectForm,
+    FeedbackForm,
     SoundForm,
     UploadMarkerForm,
     UploadObjectForm,
@@ -899,3 +900,16 @@ def ar_view(request):
     debug = request.GET.get("debug", "false").lower() == "true"
     ctx = {"artworks": exhibit.artworks.all(), "debug": debug}
     return render(request, "core/ar.jinja2", ctx)
+
+
+@require_http_methods(["GET", "POST"])
+def feedback(request):
+    """Public bug report / feature request form, linked from the footer."""
+    if request.method == "POST":
+        form = FeedbackForm(request.POST, request.FILES)
+        if form.is_valid():
+            form.save()
+            return render(request, "core/feedback.jinja2", {"submitted": True})
+    else:
+        form = FeedbackForm()
+    return render(request, "core/feedback.jinja2", {"form": form})

From 844c9e013dc238aad1740a979e48e0979e4a8a9f Mon Sep 17 00:00:00 2001
From: Pablo Silva <pablodiegoss@hotmail.com>
Date: Tue, 27 Oct 2026 18:58:45 +0000
Subject: [PATCH 2/5] Fix migration order from previous merges

---
 src/core/migrations/{0045_feedback.py => 0047_feedback.py} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename src/core/migrations/{0045_feedback.py => 0047_feedback.py} (97%)

diff --git a/src/core/migrations/0045_feedback.py b/src/core/migrations/0047_feedback.py
similarity index 97%
rename from src/core/migrations/0045_feedback.py
rename to src/core/migrations/0047_feedback.py
index 21eabce3..d55f694e 100644
--- a/src/core/migrations/0045_feedback.py
+++ b/src/core/migrations/0047_feedback.py
@@ -8,7 +8,7 @@
 class Migration(migrations.Migration):
 
     dependencies = [
-        ("core", "0044_populate_sound_in_use_fields"),
+        ("core", "0046_alter_sound_file_alter_soundevent_file"),
     ]
 
     operations = [

From 33470d859f87d6a948a22a2c69ea28b1e4ea523c Mon Sep 17 00:00:00 2001
From: Pablo Silva <pablodiegoss@hotmail.com>
Date: Tue, 27 Oct 2026 19:11:15 +0000
Subject: [PATCH 3/5] Update migration for feedback to not be a timestamped
 model

---
 src/core/migrations/0047_feedback.py | 12 ++++--------
 src/core/models.py                   |  7 +++++--
 2 files changed, 9 insertions(+), 10 deletions(-)

diff --git a/src/core/migrations/0047_feedback.py b/src/core/migrations/0047_feedback.py
index d55f694e..a726e06a 100644
--- a/src/core/migrations/0047_feedback.py
+++ b/src/core/migrations/0047_feedback.py
@@ -25,16 +25,12 @@ class Migration(migrations.Migration):
                     ),
                 ),
                 (
-                    "created",
-                    django_extensions.db.fields.CreationDateTimeField(
-                        auto_now_add=True, verbose_name="created"
-                    ),
+                "created",
+                models.DateTimeField(auto_now_add=True, db_index=True),
                 ),
                 (
-                    "modified",
-                    django_extensions.db.fields.ModificationDateTimeField(
-                        auto_now=True, verbose_name="modified"
-                    ),
+                "modified",
+                models.DateTimeField(auto_now=True, db_index=True)
                 ),
                 (
                     "kind",
diff --git a/src/core/models.py b/src/core/models.py
index 5d726ce0..a3bfbe74 100644
--- a/src/core/models.py
+++ b/src/core/models.py
@@ -777,7 +777,7 @@ def feedback_attachment_path(instance, filename):
     return f"feedback/{name}.{ext}" if ext else f"feedback/{name}"
 
 
-class Feedback(TimeStampedModel):
+class Feedback(models.Model):
     """A bug report or feature request sent from the site's feedback form.
 
     Stored rather than e-mailed so nothing is lost if mail delivery is
@@ -798,9 +798,12 @@ class Feedback(TimeStampedModel):
     handled = models.BooleanField(
         default=False, help_text="Tick once this report has been triaged."
     )
+    created = models.DateTimeField(auto_now_add=True, db_index=True)
+    modified = models.DateTimeField(auto_now=True, db_index=True)
 
-    class Meta(TimeStampedModel.Meta):
+    class Meta():
         verbose_name_plural = "feedback"
+        get_latest_by = "modified"
 
     def __str__(self):
         return f"{self.get_kind_display()} #{self.pk}"

From ff067dd77f26c043839542a54469f294bb111aa7 Mon Sep 17 00:00:00 2001
From: Pablo Silva <pablodiegoss@hotmail.com>
Date: Tue, 27 Oct 2026 19:11:29 +0000
Subject: [PATCH 4/5] Update base template for feedback page

---
 src/core/jinja2/core/feedback.jinja2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/core/jinja2/core/feedback.jinja2 b/src/core/jinja2/core/feedback.jinja2
index ef9b0efa..f8a8c13f 100644
--- a/src/core/jinja2/core/feedback.jinja2
+++ b/src/core/jinja2/core/feedback.jinja2
@@ -1,4 +1,4 @@
-{% extends "core/base.jinja2" %}
+{% extends "core/focused_layout.jinja2" %}
 {% block content %}
     <main class="container feedback">
         {% if submitted %}

From c5007cfcb04948e440fb3bd4f91a325d2342cd82 Mon Sep 17 00:00:00 2001
From: Pablo Silva <pablodiegoss@hotmail.com>
Date: Wed, 28 Oct 2026 19:10:21 +0000
Subject: [PATCH 5/5] Update migration number

---
 src/core/migrations/{0047_feedback.py => 0048_feedback.py} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename src/core/migrations/{0047_feedback.py => 0048_feedback.py} (97%)

diff --git a/src/core/migrations/0047_feedback.py b/src/core/migrations/0048_feedback.py
similarity index 97%
rename from src/core/migrations/0047_feedback.py
rename to src/core/migrations/0048_feedback.py
index a726e06a..4c755036 100644
--- a/src/core/migrations/0047_feedback.py
+++ b/src/core/migrations/0048_feedback.py
@@ -8,7 +8,7 @@
 class Migration(migrations.Migration):
 
     dependencies = [
-        ("core", "0046_alter_sound_file_alter_soundevent_file"),
+        ("core", "0047_remove_artwork_insert_insert_and_more"),
     ]
 
     operations = [