From 422c8931d63f253941e110ce51881ecd9e1ff276 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=8E=8B=E5=BE=B7=E5=AE=87?= <kvtodev@outlook.com>
Date: Thu, 3 Sep 2026 10:02:05 +0800
Subject: [PATCH 1/2] =?UTF-8?q?Feat/AGC=E9=94=99=E8=AF=AF=E6=8A=A5?=
 =?UTF-8?q?=E5=91=8A=20(#240)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

实现:
在rust内存里维护错误事件队列, webview调用tauri command传入, 后台任务agent工具等直接插入
把rust , webview console的日志统一写到AppData文件夹下的(滚动保存的)日志文件.
rust对传入的错误进行筛选,脱敏, 防抖,后通知前端提醒用户.
用户提醒是一个不阻塞的小UI, 展开后可以选择错误上报, 可以附加文字描述
上传时附带最近日志, 错误堆栈等信息

元数据存在数据库, 考虑到字符串信息很难查询, 所以在api server打包成zip存在OSS.
管理页面新增错误报告的查看页面

![shotmd-1788328504.jpg](/attachments/641b43c8-deed-47d8-8c78-36adb9a2548f)
![shotmd-1788328495.jpg](/attachments/33c6ada3-dd4d-44b6-9859-f18f944eb653)
![shotmd-1788328222.jpg](/attachments/59267df9-f624-4e47-bb9b-b69d77f595c4)
![shotmd-1788328230.jpg](/attachments/63ea6a86-9a51-412b-a98c-dce454bcc968)

---------

Co-authored-by: 段舒康 <kdletters@qq.com>
Reviewed-on: http://192.168.35.82/git/GenarrativeAI/Genarrative/pulls/240
Co-authored-by: 王德宇 <kvtodev@outlook.com>
Co-committed-by: 王德宇 <kvtodev@outlook.com>
---
 apps/admin-web/src/api/adminApiClient.ts      | 150 +++-
 apps/admin-web/src/api/adminApiTypes.ts       |  32 +
 apps/admin-web/src/app/AdminApp.tsx           |   7 +
 apps/admin-web/src/app/AdminShell.tsx         |   1 +
 apps/admin-web/src/app/adminRoutes.ts         |   2 +
 .../src/pages/AdminErrorReportsPage.tsx       | 288 +++++++
 apps/admin-web/src/styles/admin.css           |  20 +
 .../scripts/check-config.mjs                  |   6 +-
 .../src-tauri/Cargo.lock                      |   1 +
 .../src-tauri/Cargo.toml                      |   1 +
 .../src-tauri/src/agent/codex_app_server.rs   |   6 +-
 .../src/agent/codex_provider_proxy.rs         |   4 +-
 .../agent/generation/loop_orchestration.rs    |   2 +-
 .../agent/runtime_driver/provider_recovery.rs |   2 +-
 .../src-tauri/src/agent/runtime_state.rs      |   3 +
 .../src-tauri/src/commands.rs                 |  20 +-
 .../src-tauri/src/debug/debug_drafts.rs       |  16 +-
 .../src-tauri/src/error_report/commands.rs    |  32 +
 .../src-tauri/src/error_report/mod.rs         |   8 +
 .../src/error_report/notifications.rs         |  55 ++
 .../src-tauri/src/error_report/queue.rs       | 257 ++++++
 .../src-tauri/src/error_report/sanitize.rs    |  90 ++
 .../src-tauri/src/main.rs                     | 106 ++-
 .../src/ui_editor/commands/binding.rs         |   2 +-
 .../src-tauri/src/ui_editor/commands/merge.rs |  28 +-
 .../src/ui_editor/commands/recognition.rs     |  28 +-
 .../commands/ui_design_suggestion.rs          |  26 +-
 apps/ai-game-creator-shell/src/App.tsx        |  12 +-
 .../src/app/AuthenticatedClient.tsx           |  45 +-
 .../error-report/ErrorReportDialog.tsx        | 209 +++++
 .../error-report/ErrorReportNotice.tsx        | 111 +++
 .../projectDeliverySummaries.ts               |   2 +-
 .../projectGuidanceSummaries.ts               |   1 -
 .../projectPlaytestSummaries.ts               |   8 +-
 .../projectQualitySummaries.ts                |   2 +-
 .../projectSummaryConstants.ts                |   1 -
 .../projectSummaryCommands.ts                 |  18 -
 .../src/services/clientApi.ts                 |  38 +-
 .../src/services/errorReporting.ts            | 262 ++++++
 .../src/services/errorReportingBridge.ts      |  63 ++
 .../tests/ErrorReportNotice.test.tsx          |  67 ++
 .../developer-agent-window.suite.ts           |   1 -
 .../tests/appSurface/plan-gdd.suite.ts        |  16 +-
 .../assert-playtest-and-release-shortcuts.ts  |  45 +-
 .../assert-project-and-design-shortcuts.ts    |   2 +-
 .../tests/errorReporting.test.ts              | 232 ++++++
 docs/README.md                                |   1 +
 .../shared-memory/decision-log.md             |  17 +
 docs/project-memory/shared-memory/pitfalls.md |   7 +
 ...��管理】多账号与Tab访问权限方案-2026-07-14.md |  21 +-
 ...�术方案】AGC错误报告与诊断上传-2026-08-31.md |  45 +
 ...�案】AI游戏创作智能体App实施计划-2026-06-24.md |   4 +-
 ...�】server-rs与SpacetimeDB数据契约-2026-05-15.md |   7 +
 server-rs/Cargo.lock                          |   1 +
 server-rs/crates/api-server/Cargo.toml        |   1 +
 server-rs/crates/api-server/src/admin.rs      |   3 +
 server-rs/crates/api-server/src/app.rs        |   1 +
 server-rs/crates/api-server/src/assets.rs     |   5 +-
 .../crates/api-server/src/error_reports.rs    | 787 ++++++++++++++++++
 server-rs/crates/api-server/src/main.rs       |   2 +
 server-rs/crates/platform-oss/src/lib.rs      | 110 ++-
 .../crates/shared-contracts/src/admin.rs      |   3 +-
 .../shared-contracts/src/error_reports.rs     |  88 ++
 server-rs/crates/shared-contracts/src/lib.rs  |   1 +
 .../crates/spacetime-client/src/active.rs     |   2 +
 .../src/active/error_reports.rs               |  89 ++
 .../spacetime-client/src/active/mapper.rs     |   7 +
 .../src/active/mapper/error_reports.rs        | 124 +++
 .../spacetime-client/src/module_bindings.rs   |  61 +-
 ...reate_error_report_and_return_procedure.rs |  59 ++
 ...elete_error_report_and_return_procedure.rs |  59 ++
 .../error_report_create_input_type.rs         |  25 +
 .../error_report_delete_input_type.rs         |  15 +
 .../error_report_get_input_type.rs            |  15 +
 .../error_report_list_input_type.rs           |  19 +
 .../error_report_procedure_result_type.rs     |  21 +
 .../error_report_snapshot_type.rs             |  29 +
 .../src/module_bindings/error_report_table.rs | 259 ++++++
 .../src/module_bindings/error_report_type.rs  |  97 +++
 .../error_report_update_input_type.rs         |  17 +
 .../get_error_report_and_return_procedure.rs  |  59 ++
 ...list_error_reports_and_return_procedure.rs |  59 ++
 ...pdate_error_report_and_return_procedure.rs |  59 ++
 .../crates/spacetime-module/src/active.rs     |   3 +
 .../spacetime-module/src/error_report.rs      | 444 ++++++++++
 .../crates/spacetime-module/src/migration.rs  |   1 +
 86 files changed, 4729 insertions(+), 226 deletions(-)
 create mode 100644 apps/admin-web/src/pages/AdminErrorReportsPage.tsx
 create mode 100644 apps/ai-game-creator-shell/src-tauri/src/error_report/commands.rs
 create mode 100644 apps/ai-game-creator-shell/src-tauri/src/error_report/mod.rs
 create mode 100644 apps/ai-game-creator-shell/src-tauri/src/error_report/notifications.rs
 create mode 100644 apps/ai-game-creator-shell/src-tauri/src/error_report/queue.rs
 create mode 100644 apps/ai-game-creator-shell/src-tauri/src/error_report/sanitize.rs
 create mode 100644 apps/ai-game-creator-shell/src/components/error-report/ErrorReportDialog.tsx
 create mode 100644 apps/ai-game-creator-shell/src/components/error-report/ErrorReportNotice.tsx
 create mode 100644 apps/ai-game-creator-shell/src/services/errorReporting.ts
 create mode 100644 apps/ai-game-creator-shell/src/services/errorReportingBridge.ts
 create mode 100644 apps/ai-game-creator-shell/tests/ErrorReportNotice.test.tsx
 create mode 100644 apps/ai-game-creator-shell/tests/errorReporting.test.ts
 create mode 100644 docs/technical/【技术方案】AGC错误报告与诊断上传-2026-08-31.md
 create mode 100644 server-rs/crates/api-server/src/error_reports.rs
 create mode 100644 server-rs/crates/shared-contracts/src/error_reports.rs
 create mode 100644 server-rs/crates/spacetime-client/src/active/error_reports.rs
 create mode 100644 server-rs/crates/spacetime-client/src/active/mapper/error_reports.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/create_error_report_and_return_procedure.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/delete_error_report_and_return_procedure.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/error_report_create_input_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/error_report_delete_input_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/error_report_get_input_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/error_report_list_input_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/error_report_procedure_result_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/error_report_snapshot_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/error_report_table.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/error_report_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/error_report_update_input_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/get_error_report_and_return_procedure.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/list_error_reports_and_return_procedure.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/update_error_report_and_return_procedure.rs
 create mode 100644 server-rs/crates/spacetime-module/src/error_report.rs

diff --git a/apps/admin-web/src/api/adminApiClient.ts b/apps/admin-web/src/api/adminApiClient.ts
index 9912b9cf7..65bb5d4e5 100644
--- a/apps/admin-web/src/api/adminApiClient.ts
+++ b/apps/admin-web/src/api/adminApiClient.ts
@@ -23,6 +23,9 @@ import type {
   AdminEditorShowcaseListQuery,
   AdminEditorShowcaseListResponse,
   AdminEditorShowcaseReviewRequest,
+  AdminErrorReportDetail,
+  AdminErrorReportEntry,
+  AdminErrorReportListResponse,
   AdminFeatureGateConfigResponse,
   AdminLoginResponse,
   AdminMeResponse,
@@ -259,7 +262,16 @@ export function listAdminTrackingEvents(
   query: AdminTrackingEventListQuery = {},
 ) {
   return request<AdminTrackingEventListResponse>(
-    `/admin/api/tracking/events${buildQueryString(query)}`,
+    `/admin/api/tracking/events${buildQueryString((params) => {
+      appendQueryParam(params, 'eventKey', query.eventKey);
+      appendQueryParam(params, 'userId', query.userId);
+      appendQueryParam(params, 'scopeKind', query.scopeKind);
+      appendQueryParam(params, 'scopeId', query.scopeId);
+      appendQueryParam(params, 'startDate', query.startDate);
+      appendQueryParam(params, 'endDate', query.endDate);
+      appendNumericQueryParam(params, 'limit', query.limit);
+      if (query.exportAll) params.set('exportAll', 'true');
+    })}`,
     { token },
   );
 }
@@ -271,6 +283,60 @@ export function listAdminTrackingEventKeys(token: string) {
   );
 }
 
+export function listAdminErrorReports(
+  token: string,
+  query: {
+    status?: string;
+    fingerprint?: string;
+    source?: string;
+    limit?: number;
+    offset?: number;
+  } = {},
+) {
+  return request<AdminErrorReportListResponse>(
+    `/admin/api/error-reports${buildErrorReportQueryString(query)}`,
+    { token },
+  );
+}
+
+export function getAdminErrorReport(token: string, batchId: string) {
+  return request<AdminErrorReportDetail>(
+    `/admin/api/error-reports/${encodeURIComponent(batchId)}`,
+    { token },
+  );
+}
+
+export function updateAdminErrorReport(
+  token: string,
+  batchId: string,
+  payload: { status: string; note?: string },
+) {
+  return request<AdminErrorReportEntry>(
+    `/admin/api/error-reports/${encodeURIComponent(batchId)}`,
+    { method: 'PATCH', token, body: payload },
+  );
+}
+
+export function getAdminErrorReportDownloadUrl(batchId: string) {
+  return `/admin/api/error-reports/${encodeURIComponent(batchId)}/download`;
+}
+
+export async function downloadAdminErrorReport(token: string, batchId: string) {
+  const response = await fetch(
+    buildRequestUrl(getAdminErrorReportDownloadUrl(batchId)),
+    {
+      headers: { Authorization: `Bearer ${token}` },
+    },
+  );
+  if (!response.ok) {
+    throw new AdminApiError({
+      message: `下载失败（${response.status}）`,
+      status: response.status,
+    });
+  }
+  return response.blob();
+}
+
 export function getAdminFeatureGateConfig(token: string) {
   return request<AdminFeatureGateConfigResponse>('/admin/api/feature-gates', {
     token,
@@ -788,43 +854,44 @@ async function postAdminDirectUploadFile(
   }
 }
 
-function buildQueryString(query: AdminTrackingEventListQuery) {
+function buildQueryString(append: (params: URLSearchParams) => void) {
   const params = new URLSearchParams();
-  appendQueryParam(params, 'eventKey', query.eventKey);
-  appendQueryParam(params, 'userId', query.userId);
-  appendQueryParam(params, 'scopeKind', query.scopeKind);
-  appendQueryParam(params, 'scopeId', query.scopeId);
-  appendQueryParam(params, 'startDate', query.startDate);
-  appendQueryParam(params, 'endDate', query.endDate);
-  if (typeof query.limit === 'number' && Number.isFinite(query.limit)) {
-    params.set('limit', String(query.limit));
-  }
-  if (query.exportAll) {
-    params.set('exportAll', 'true');
-  }
-  const queryString = params.toString();
-  return queryString ? `?${queryString}` : '';
+  append(params);
+  return formatQueryString(params);
+}
+
+function buildErrorReportQueryString(query: {
+  status?: string;
+  fingerprint?: string;
+  source?: string;
+  limit?: number;
+  offset?: number;
+}) {
+  return buildQueryString((params) => {
+    appendQueryParam(params, 'status', query.status);
+    appendQueryParam(params, 'fingerprint', query.fingerprint);
+    appendQueryParam(params, 'source', query.source);
+    appendNumericQueryParam(params, 'limit', query.limit);
+    appendNumericQueryParam(params, 'offset', query.offset);
+  });
 }
 
 function buildAdminRechargeOrderListQuery(query: AdminRechargeOrderListQuery) {
-  const params = new URLSearchParams();
-  appendQueryParam(params, 'orderId', query.orderId);
-  appendQueryParam(
-    params,
-    'providerTransactionId',
-    query.providerTransactionId,
-  );
-  appendQueryParam(params, 'userId', query.userId);
-  appendQueryParam(params, 'publicUserCode', query.publicUserCode);
-  appendQueryParam(params, 'paymentChannel', query.paymentChannel);
-  appendQueryParam(params, 'status', query.status);
-  appendQueryParam(params, 'createdAfter', query.createdAfter);
-  appendQueryParam(params, 'createdBefore', query.createdBefore);
-  if (typeof query.limit === 'number' && Number.isFinite(query.limit)) {
-    params.set('limit', String(query.limit));
-  }
-  const queryString = params.toString();
-  return queryString ? `?${queryString}` : '';
+  return buildQueryString((params) => {
+    appendQueryParam(params, 'orderId', query.orderId);
+    appendQueryParam(
+      params,
+      'providerTransactionId',
+      query.providerTransactionId,
+    );
+    appendQueryParam(params, 'userId', query.userId);
+    appendQueryParam(params, 'publicUserCode', query.publicUserCode);
+    appendQueryParam(params, 'paymentChannel', query.paymentChannel);
+    appendQueryParam(params, 'status', query.status);
+    appendQueryParam(params, 'createdAfter', query.createdAfter);
+    appendQueryParam(params, 'createdBefore', query.createdBefore);
+    appendNumericQueryParam(params, 'limit', query.limit);
+  });
 }
 
 function buildAdminUserDetailQuery(query: AdminUserDetailQuery) {
@@ -900,6 +967,21 @@ function appendQueryParam(
   }
 }
 
+function appendNumericQueryParam(
+  params: URLSearchParams,
+  key: string,
+  value: number | null | undefined,
+) {
+  if (typeof value === 'number' && Number.isFinite(value)) {
+    params.set(key, String(value));
+  }
+}
+
+function formatQueryString(params: URLSearchParams) {
+  const queryString = params.toString();
+  return queryString ? `?${queryString}` : '';
+}
+
 function parseJsonResponse(responseText: string): unknown {
   if (!responseText.trim()) {
     return null;
diff --git a/apps/admin-web/src/api/adminApiTypes.ts b/apps/admin-web/src/api/adminApiTypes.ts
index bcd2ee1db..b911a6e8b 100644
--- a/apps/admin-web/src/api/adminApiTypes.ts
+++ b/apps/admin-web/src/api/adminApiTypes.ts
@@ -96,6 +96,38 @@ export interface AdminMeResponse {
   admin: AdminSessionPayload;
 }
 
+export interface AdminErrorReportEntry {
+  batchId: string;
+  eventCount: number;
+  logCount: number;
+  fingerprint?: string;
+  source?: string;
+  status: 'new' | 'in-progress' | 'resolved';
+  userId: string;
+  createdAt: string;
+  updatedAt: string;
+  userDescription?: string;
+  attachmentSizeBytes: number;
+  submissionId?: string;
+  ossObjectKey?: string;
+  archiveSha256?: string;
+  uploadStatus?: 'uploading' | 'ready' | 'failed';
+}
+
+export interface AdminErrorReportListResponse {
+  reports: AdminErrorReportEntry[];
+  total: number;
+  offset: number;
+  limit: number;
+  hasMore: boolean;
+}
+
+export interface AdminErrorReportDetail extends AdminErrorReportEntry {
+  note?: string;
+  events: Array<Record<string, unknown>>;
+  logNames: string[];
+}
+
 export interface AdminOverviewResponse {
   service: AdminServiceOverviewPayload;
   database: AdminDatabaseOverviewPayload;
diff --git a/apps/admin-web/src/app/AdminApp.tsx b/apps/admin-web/src/app/AdminApp.tsx
index de33c8761..a717f146b 100644
--- a/apps/admin-web/src/app/AdminApp.tsx
+++ b/apps/admin-web/src/app/AdminApp.tsx
@@ -24,6 +24,7 @@ import { AdminDebugHttpPage } from '../pages/AdminDebugHttpPage';
 import { AdminEditorAssetQueryPage } from '../pages/AdminEditorAssetQueryPage';
 import { AdminEditorGenerationPricingPage } from '../pages/AdminEditorGenerationPricingPage';
 import { AdminEditorShowcaseReviewPage } from '../pages/AdminEditorShowcaseReviewPage';
+import { AdminErrorReportsPage } from '../pages/AdminErrorReportsPage';
 import { AdminGrayReleaseConfigPage } from '../pages/AdminGrayReleaseConfigPage';
 import { AdminInviteCodePage } from '../pages/AdminInviteCodePage';
 import { AdminLoginPage } from '../pages/AdminLoginPage';
@@ -228,6 +229,12 @@ export function AdminApp() {
           onUnauthorized={handleUnauthorized}
         />
       ) : null}
+      {activeRouteId === 'error-reports' ? (
+        <AdminErrorReportsPage
+          token={token}
+          onUnauthorized={handleUnauthorized}
+        />
+      ) : null}
       {activeRouteId === 'gray-release' ? (
         <AdminGrayReleaseConfigPage
           token={token}
diff --git a/apps/admin-web/src/app/AdminShell.tsx b/apps/admin-web/src/app/AdminShell.tsx
index 2970955a6..dee729541 100644
--- a/apps/admin-web/src/app/AdminShell.tsx
+++ b/apps/admin-web/src/app/AdminShell.tsx
@@ -38,6 +38,7 @@ const routeIcons = {
   tables: Database,
   debug: Bug,
   tracking: Table2,
+  'error-reports': Bug,
   'gray-release': GitBranch,
   redeem: TicketPercent,
   invite: TicketCheck,
diff --git a/apps/admin-web/src/app/adminRoutes.ts b/apps/admin-web/src/app/adminRoutes.ts
index b3bad3b50..6afaf6b7e 100644
--- a/apps/admin-web/src/app/adminRoutes.ts
+++ b/apps/admin-web/src/app/adminRoutes.ts
@@ -5,6 +5,7 @@ export type AdminRouteId =
   | 'tables'
   | 'debug'
   | 'tracking'
+  | 'error-reports'
   | 'gray-release'
   | 'redeem'
   | 'invite'
@@ -33,6 +34,7 @@ export const adminRoutes: AdminRouteDefinition[] = [
   { id: 'tables', label: '表查询', hash: '#tables' },
   { id: 'debug', label: 'API 调试', hash: '#debug' },
   { id: 'tracking', label: '埋点数据', hash: '#tracking' },
+  { id: 'error-reports', label: '错误报告', hash: '#error-reports' },
   { id: 'gray-release', label: '灰度发布', hash: '#gray-release' },
   { id: 'redeem', label: '兑换码', hash: '#redeem' },
   { id: 'invite', label: '邀请码', hash: '#invite' },
diff --git a/apps/admin-web/src/pages/AdminErrorReportsPage.tsx b/apps/admin-web/src/pages/AdminErrorReportsPage.tsx
new file mode 100644
index 000000000..e690a313b
--- /dev/null
+++ b/apps/admin-web/src/pages/AdminErrorReportsPage.tsx
@@ -0,0 +1,288 @@
+import { useCallback, useEffect, useRef, useState } from 'react';
+
+import {
+  downloadAdminErrorReport,
+  formatAdminApiError,
+  getAdminErrorReport,
+  isAdminApiError,
+  listAdminErrorReports,
+  updateAdminErrorReport,
+} from '../api/adminApiClient';
+import type {
+  AdminErrorReportDetail,
+  AdminErrorReportEntry,
+} from '../api/adminApiTypes';
+
+type Props = { token: string; onUnauthorized: (message?: string) => void };
+
+const ADMIN_ERROR_REPORT_STATUSES = ['new', 'in-progress', 'resolved'] as const;
+const ERROR_REPORT_PAGE_SIZE = 50;
+
+export function AdminErrorReportsPage({ token, onUnauthorized }: Props) {
+  const [reports, setReports] = useState<AdminErrorReportEntry[]>([]);
+  const [selected, setSelected] = useState<AdminErrorReportDetail | null>(null);
+  const [status, setStatus] = useState('');
+  const [downloading, setDownloading] = useState(false);
+  const [busy, setBusy] = useState(false);
+  const [filterStatus, setFilterStatus] = useState('');
+  const [pageOffset, setPageOffset] = useState(0);
+  const [pageInfo, setPageInfo] = useState({ total: 0, hasMore: false });
+  const openReportRequestId = useRef(0);
+  const loadRequestId = useRef(0);
+
+  const load = useCallback(async () => {
+    const requestId = ++loadRequestId.current;
+    setStatus('');
+    try {
+      const response = await listAdminErrorReports(token, {
+        status: filterStatus || undefined,
+        limit: ERROR_REPORT_PAGE_SIZE,
+        offset: pageOffset,
+      });
+      if (requestId === loadRequestId.current) {
+        const lastValidOffset = response.total
+          ? Math.floor((response.total - 1) / ERROR_REPORT_PAGE_SIZE) *
+            ERROR_REPORT_PAGE_SIZE
+          : 0;
+        if (pageOffset > lastValidOffset) {
+          setPageOffset(lastValidOffset);
+          return;
+        }
+        setReports(response.reports);
+        setPageInfo({ total: response.total, hasMore: response.hasMore });
+      }
+    } catch (error) {
+      if (requestId !== loadRequestId.current) return;
+      if (isAdminApiError(error) && error.status === 401)
+        return onUnauthorized();
+      setStatus(formatAdminApiError(error));
+    }
+  }, [filterStatus, onUnauthorized, pageOffset, token]);
+
+  const loadRef = useRef(load);
+  useEffect(() => {
+    loadRef.current = load;
+  }, [load]);
+
+  useEffect(() => {
+    void load();
+  }, [load]);
+
+  async function openReport(batchId: string) {
+    const requestId = ++openReportRequestId.current;
+    setStatus('');
+    try {
+      const detail = await getAdminErrorReport(token, batchId);
+      if (requestId === openReportRequestId.current) setSelected(detail);
+    } catch (error) {
+      if (requestId !== openReportRequestId.current) return;
+      if (isAdminApiError(error) && error.status === 401)
+        return onUnauthorized();
+      setStatus(formatAdminApiError(error));
+    }
+  }
+
+  async function saveStatus(nextStatus: string) {
+    if (!selected || busy) return;
+    setBusy(true);
+    setStatus('');
+    try {
+      const updated = await updateAdminErrorReport(token, selected.batchId, {
+          status: nextStatus,
+          note: selected.note,
+        });
+      setSelected((current) => (current ? { ...current, ...updated } : current));
+      await loadRef.current();
+    } catch (error) {
+      if (isAdminApiError(error) && error.status === 401) onUnauthorized();
+      else setStatus(formatAdminApiError(error));
+    } finally {
+      setBusy(false);
+    }
+  }
+
+  async function download(batchId: string) {
+    if (downloading) return;
+    setDownloading(true);
+    setStatus('');
+    try {
+      const blob = await downloadAdminErrorReport(token, batchId);
+      const url = URL.createObjectURL(blob);
+      const anchor = document.createElement('a');
+      anchor.href = url;
+      anchor.download = `${batchId}.zip`;
+      document.body.appendChild(anchor);
+      anchor.click();
+      anchor.remove();
+      setTimeout(() => URL.revokeObjectURL(url), 10_000);
+    } catch (error) {
+      if (isAdminApiError(error) && error.status === 401) onUnauthorized();
+      else setStatus(formatAdminApiError(error));
+    } finally {
+      setDownloading(false);
+    }
+  }
+
+  return (
+    <section className="admin-panel">
+      <div className="admin-panel-header">
+        <div>
+          <h1>错误报告</h1>
+          <p>查看用户提交的脱敏诊断包。</p>
+        </div>
+        <label>
+          状态{' '}
+          <select
+            value={filterStatus}
+            onChange={(event) => {
+              setFilterStatus(event.target.value);
+              setPageOffset(0);
+            }}
+          >
+            <option value="">全部</option>
+            {ADMIN_ERROR_REPORT_STATUSES.map((value) => (
+              <option key={value} value={value}>
+                {value}
+              </option>
+            ))}
+          </select>
+        </label>
+      </div>
+      {status ? (
+        <p className="admin-alert" role="status">
+          {status}
+        </p>
+      ) : null}
+      <div className="admin-table-wrap">
+        <table className="admin-table">
+          <thead>
+            <tr>
+              <th>报告</th>
+              <th>事件</th>
+              <th>来源</th>
+              <th>状态</th>
+              <th>用户</th>
+              <th>时间</th>
+            </tr>
+          </thead>
+          <tbody>
+            {reports.map((report) => (
+              <tr
+                key={report.batchId}
+                onClick={() => void openReport(report.batchId)}
+                role="button"
+                tabIndex={0}
+                onKeyDown={(event) => {
+                  if (event.key === 'Enter' || event.key === ' ') {
+                    event.preventDefault();
+                    void openReport(report.batchId);
+                  }
+                }}
+              >
+                <td>{report.batchId}</td>
+                <td>{report.eventCount}</td>
+                <td>{report.source ?? '-'}</td>
+                <td>{report.status}</td>
+                <td>{report.userId}</td>
+                <td>{new Date(report.createdAt).toLocaleString()}</td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+      </div>
+      <div className="admin-detail-modal__actions" aria-label="错误报告分页">
+        <span>
+          {pageInfo.total === 0
+            ? '暂无报告'
+            : `第 ${pageOffset + 1}-${Math.min(pageOffset + reports.length, pageInfo.total)} 条，共 ${pageInfo.total} 条`}
+        </span>
+        <button
+          type="button"
+          onClick={() =>
+            setPageOffset((offset) =>
+              Math.max(0, offset - ERROR_REPORT_PAGE_SIZE),
+            )
+          }
+          disabled={pageOffset === 0}
+        >
+          上一页
+        </button>
+        <button
+          type="button"
+          onClick={() =>
+            setPageOffset((offset) => offset + ERROR_REPORT_PAGE_SIZE)
+          }
+          disabled={!pageInfo.hasMore}
+        >
+          下一页
+        </button>
+      </div>
+      {selected ? (
+        <div
+          className="admin-detail-modal"
+          role="dialog"
+          aria-label="错误报告详情"
+        >
+          <div className="admin-detail-modal__panel">
+            <header>
+              <h2>{selected.batchId}</h2>
+              <button type="button" onClick={() => setSelected(null)}>
+                关闭
+              </button>
+            </header>
+            <p>
+              用户：{selected.userId} · 事件：{selected.eventCount} · 日志：
+              {selected.logCount}
+            </p>
+            <pre>{JSON.stringify(selected.events.slice(0, 20), null, 2)}</pre>
+            {selected.userDescription ? (
+              <p>用户描述：{selected.userDescription}</p>
+            ) : null}
+            <label className="admin-detail-modal__note">
+              处理备注
+              <textarea
+                value={selected.note ?? ''}
+                onChange={(event) =>
+                  setSelected((current) =>
+                    current ? { ...current, note: event.target.value } : current,
+                  )
+                }
+                maxLength={2000}
+                rows={4}
+                placeholder="记录处理结论或后续跟进事项"
+                disabled={busy}
+              />
+            </label>
+            <div className="admin-detail-modal__actions">
+              <select
+                value={selected.status}
+                onChange={(event) => void saveStatus(event.target.value)}
+                disabled={busy}
+              >
+                {ADMIN_ERROR_REPORT_STATUSES.map((value) => (
+                  <option key={value} value={value}>
+                    {value}
+                  </option>
+                ))}
+              </select>
+              <button
+                type="button"
+                onClick={() => void saveStatus(selected.status)}
+                disabled={busy}
+              >
+                保存备注
+              </button>
+              <button
+                type="button"
+                onClick={() => void download(selected.batchId)}
+                disabled={downloading}
+              >
+                {downloading ? '下载中…' : '下载诊断包'}
+              </button>
+            </div>
+          </div>
+        </div>
+      ) : null}
+    </section>
+  );
+}
diff --git a/apps/admin-web/src/styles/admin.css b/apps/admin-web/src/styles/admin.css
index ee3de64f4..adfb46737 100644
--- a/apps/admin-web/src/styles/admin.css
+++ b/apps/admin-web/src/styles/admin.css
@@ -3075,3 +3075,23 @@ button:disabled {
     white-space: nowrap;
   }
 }
+.admin-detail-modal {
+  position: fixed;
+  inset: 0;
+  z-index: 20;
+  display: grid;
+  place-items: center;
+  padding: 20px;
+  background: rgb(15 23 42 / 35%);
+}
+.admin-detail-modal__panel {
+  width: min(860px, 100%);
+  max-height: 90vh;
+  overflow: auto;
+  border-radius: 14px;
+  padding: 20px;
+  background: var(--admin-surface, #fff);
+}
+.admin-detail-modal__panel header,
+.admin-detail-modal__actions { display: flex; align-items: center; justify-content: space-between; gap: 12px; }
+.admin-detail-modal__panel pre { max-height: 360px; overflow: auto; white-space: pre-wrap; background: #f8fafc; padding: 12px; border-radius: 8px; }
diff --git a/apps/ai-game-creator-shell/scripts/check-config.mjs b/apps/ai-game-creator-shell/scripts/check-config.mjs
index 4bc3df399..9833f1251 100644
--- a/apps/ai-game-creator-shell/scripts/check-config.mjs
+++ b/apps/ai-game-creator-shell/scripts/check-config.mjs
@@ -320,6 +320,7 @@ const APP_INVOKE_BARE_CALL_NAMES = new Set([
   'directInvoke',
   'invokeInput',
   'invokeAuthenticatedInput',
+  'invokeDiagnostic',
 ]);
 
 function parseAppInvokeCommandNames(source, fileName = 'fixture.tsx') {
@@ -352,7 +353,10 @@ function parseAppInvokeCommandNames(source, fileName = 'fixture.tsx') {
       const isObjectInvoke =
         ts.isPropertyAccessExpression(expression) &&
         expression.name.text === 'invoke';
-      const commandArgument = node.arguments[0];
+      const commandArgument =
+        ts.isIdentifier(expression) && expression.text === 'invokeDiagnostic'
+          ? node.arguments[1]
+          : node.arguments[0];
       if (
         (isBareCall || isObjectInvoke) &&
         commandArgument !== undefined &&
diff --git a/apps/ai-game-creator-shell/src-tauri/Cargo.lock b/apps/ai-game-creator-shell/src-tauri/Cargo.lock
index 665fe6e9d..f4ca27d53 100644
--- a/apps/ai-game-creator-shell/src-tauri/Cargo.lock
+++ b/apps/ai-game-creator-shell/src-tauri/Cargo.lock
@@ -1727,6 +1727,7 @@ dependencies = [
  "platform-agent",
  "platform-llm",
  "portable-pty",
+ "regex",
  "reqwest 0.12.28",
  "schemars 1.2.1",
  "serde",
diff --git a/apps/ai-game-creator-shell/src-tauri/Cargo.toml b/apps/ai-game-creator-shell/src-tauri/Cargo.toml
index 3b7ab2880..7aa0e1cb4 100644
--- a/apps/ai-game-creator-shell/src-tauri/Cargo.toml
+++ b/apps/ai-game-creator-shell/src-tauri/Cargo.toml
@@ -44,6 +44,7 @@ platform-agent = { path = "../../../server-rs/crates/platform-agent" }
 portable-pty = "0.9"
 percent-encoding = "2"
 reqwest = { version = "0.12", default-features = false, features = ["json", "multipart", "native-tls", "stream"] }
+regex = "1"
 shared-contracts = { path = "../../../server-rs/crates/shared-contracts", default-features = false }
 tauri = { version = "2.11.2", features = [] }
 tauri-plugin-dialog = "2.7.1"
diff --git a/apps/ai-game-creator-shell/src-tauri/src/agent/codex_app_server.rs b/apps/ai-game-creator-shell/src-tauri/src/agent/codex_app_server.rs
index 0fbb5a01f..13c863112 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/agent/codex_app_server.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/agent/codex_app_server.rs
@@ -1669,7 +1669,7 @@ impl CodexAppServerConnection {
             None
         };
         if std::env::var_os("GENARRATIVE_AGC_DIRECT_DEBUG").is_some() {
-            eprintln!(
+            app_log!(
                 "agent.direct_codex.provider_proxy configured={}",
                 provider_proxy.is_some()
             );
@@ -1803,7 +1803,7 @@ impl CodexAppServerConnection {
             .await
             .map_err(platform_llm::LlmError::Transport)?;
         if let Some(reason) = remote_control_disable_reason {
-            eprintln!("agent.codex_app_server.remote_control disabled reason={reason}");
+            app_log!("agent.codex_app_server.remote_control disabled reason={reason}");
         }
         if let Some(skill_roots) = connection.inner._skill_roots.as_ref() {
             connection
@@ -2954,7 +2954,7 @@ async fn fail_game_creator_codex_app_server_connection(
         .unwrap_or_else(|| "unknown".to_string());
     let stderr = inner.stderr_summary.lock().await.diagnostic();
     let diagnostic = format!("{error}；exitStatus={exit_status}；{stderr}");
-    eprintln!("agent.runner.failed: Codex app-server 连接终止：{diagnostic}");
+    app_log!("agent.runner.failed: Codex app-server 连接终止：{diagnostic}");
     for (_, pending) in inner.pending.lock().await.drain() {
         let _ = pending.sender.send(Err(diagnostic.clone()));
     }
diff --git a/apps/ai-game-creator-shell/src-tauri/src/agent/codex_provider_proxy.rs b/apps/ai-game-creator-shell/src-tauri/src/agent/codex_provider_proxy.rs
index 5df545d75..6024bcbe4 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/agent/codex_provider_proxy.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/agent/codex_provider_proxy.rs
@@ -111,7 +111,7 @@ async fn proxy_codex_provider_request(
     }
     let direct_debug = std::env::var_os("GENARRATIVE_AGC_DIRECT_DEBUG").is_some();
     if direct_debug {
-        eprintln!(
+        app_log!(
             "agent.direct_codex.provider_proxy.request method={} path={}",
             request.method(),
             request.uri().path(),
@@ -174,7 +174,7 @@ async fn proxy_codex_provider_request(
             }
         }
         if direct_debug {
-            eprintln!(
+            app_log!(
                 "agent.direct_codex.provider_proxy.response status={} strippedCodexHeaders={}",
                 status.as_u16(),
                 stripped_limit_headers,
diff --git a/apps/ai-game-creator-shell/src-tauri/src/agent/generation/loop_orchestration.rs b/apps/ai-game-creator-shell/src-tauri/src/agent/generation/loop_orchestration.rs
index 43a6aa0ed..e955f53a4 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/agent/generation/loop_orchestration.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/agent/generation/loop_orchestration.rs
@@ -462,7 +462,7 @@ pub(crate) async fn request_generator_game_draft_with_client(
             Ok(response) => break response,
             Err(platform_llm::LlmError::EmptyResponse) if empty_retries < MAX_EMPTY_RETRIES => {
                 empty_retries += 1;
-                eprintln!(
+                app_log!(
                     "llm.chat.generator.empty-response 重试 {empty_retries}/{MAX_EMPTY_RETRIES}（上游返回空 content，原样重发）"
                 );
                 // 同步推送到 App 进度面板，便于在界面上看到重试（无需盯命令行）。
diff --git a/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_driver/provider_recovery.rs b/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_driver/provider_recovery.rs
index cc208c003..d183afa8a 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_driver/provider_recovery.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_driver/provider_recovery.rs
@@ -141,7 +141,7 @@ pub(crate) fn schedule_waiting_autonomous_manifest_parent_wake_after_lane_releas
                         "error": error,
                     }),
                 );
-                eprintln!("项目任务图自动唤醒状态持久化失败：{error}");
+                app_log!("项目任务图自动唤醒状态持久化失败：{error}");
             }
             if !singleflight.finish_pass() {
                 return;
diff --git a/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_state.rs b/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_state.rs
index 30fb3866c..79d824021 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_state.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/agent/runtime_state.rs
@@ -1410,6 +1410,7 @@ pub(crate) fn fail_game_creator_agent_runtime_turn_at(
     state.next_step = "等待开发者处理失败".to_string();
     let public_error = redact_agent_runtime_error(root, error, 500);
     state.error = Some(public_error.clone());
+    let _ = crate::error_report::report_agent_runtime_error(&state.agent_id, &public_error);
     // The public terminal message is deliberately committed before the
     // remaining Runtime projections. Even if a task/event/state write is the
     // failing subsystem, the user still receives one stable failure outcome.
@@ -1469,6 +1470,7 @@ pub(crate) fn fail_game_creator_agent_runtime_budget_at(
     state.next_step = "调整任务范围后重试".to_string();
     let public_error = redact_agent_runtime_error(root, error, 500);
     state.error = Some(public_error.clone());
+    let _ = crate::error_report::report_agent_runtime_error(&state.agent_id, &public_error);
     let public_status_result =
         append_game_creator_agent_runtime_terminal_public_message_at(root, &state, &public_error);
     write_non_terminal_isolated_child_cancel_tombstones_for_parent_at(
@@ -3783,6 +3785,7 @@ pub(crate) fn fail_game_creator_agent_runtime_public_start_status_at(
     error: &str,
 ) -> Result<(), String> {
     let error = redact_agent_runtime_project_paths(root, error, 500);
+    let _ = crate::error_report::report_agent_runtime_error(&record.agent_id, &error);
     let failed_task = AgentRuntimeTaskRecord {
         status: "failed".to_string(),
         phase: "public-status-write-failed".to_string(),
diff --git a/apps/ai-game-creator-shell/src-tauri/src/commands.rs b/apps/ai-game-creator-shell/src-tauri/src/commands.rs
index 55f86012f..3d6744e87 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/commands.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/commands.rs
@@ -1714,7 +1714,7 @@ pub(crate) fn decide_game_creator_plan_gdd(
     enforce_project_permission_policy(&root, "conversation.write")?;
     enforce_project_permission_policy(&root, "agent.run_status")?;
     enforce_project_permission_policy(&root, "agent.resume")?;
-    let mut result = decide_plan_gdd_at(
+    let mut result = match decide_plan_gdd_at(
         &root,
         &DecidePlanGddInputV1 {
             gdd_id,
@@ -1726,10 +1726,22 @@ pub(crate) fn decide_game_creator_plan_gdd(
             action,
             comment,
         },
-    )
-    .map_err(|error| error.to_string())?;
+    ) {
+        Ok(result) => result,
+        Err(error) => {
+            return Err(error.to_string());
+        }
+    };
     if !result.recovery_pending {
-        if wake_pending_game_creator_agent_background_tasks_at(&root).is_err() {
+        if let Err(error) = wake_pending_game_creator_agent_background_tasks_at(&root) {
+            let detail = error.to_string();
+            crate::error_report::report_diagnostic_error(
+                "agent",
+                &detail,
+                None,
+                Some("wake_pending_game_creator_agent_background_tasks"),
+                None,
+            );
             // The receipt is already the user-decision linearization point;
             // surface a recoverable projection state instead of turning a
             // durable approval into a false command failure.
diff --git a/apps/ai-game-creator-shell/src-tauri/src/debug/debug_drafts.rs b/apps/ai-game-creator-shell/src-tauri/src/debug/debug_drafts.rs
index 65a9b9c69..ebd0ab68a 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/debug/debug_drafts.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/debug/debug_drafts.rs
@@ -39,7 +39,7 @@ fn repo_root() -> Option<PathBuf> {
 // 便于排查 “EOF while parsing a string” 这类输出截断问题。尽力而为，不阻断主流程。
 pub(crate) fn persist_snapshot(raw_content: &str) {
     let Some(repo_root) = repo_root() else {
-        eprintln!("llm.draft.snapshot.skip: 未能定位仓库根目录");
+        app_log!("llm.draft.snapshot.skip: 未能定位仓库根目录");
         return;
     };
     let dir = repo_root
@@ -47,12 +47,12 @@ pub(crate) fn persist_snapshot(raw_content: &str) {
         .join("ai-game-creator-shell")
         .join(".llm-drafts");
     if let Err(error) = fs::create_dir_all(&dir) {
-        eprintln!("llm.draft.snapshot.dir.failed: {}: {error}", dir.display());
+        app_log!("llm.draft.snapshot.dir.failed: {}: {error}", dir.display());
         return;
     }
     let path = dir.join(format!("draft-{}.txt", unix_millis()));
     if let Err(error) = fs::write(&path, raw_content) {
-        eprintln!(
+        app_log!(
             "llm.draft.snapshot.write.failed: {}: {error}",
             path.display()
         );
@@ -61,14 +61,14 @@ pub(crate) fn persist_snapshot(raw_content: &str) {
     // 同步更新 latest.txt，方便直接打开最近一次草案。
     let latest = dir.join("latest.txt");
     let _ = fs::write(&latest, raw_content);
-    eprintln!("llm.draft.snapshot.saved: {}", path.display());
+    app_log!("llm.draft.snapshot.saved: {}", path.display());
 }
 
 // LLM 调用失败（例如返回内容为空）时，把本次发送给模型的输入（system + 完整 user prompt）
 // 连同错误信息一起落盘到 .llm-drafts/，便于按同样输入复现与定位。尽力而为，不阻断主流程。
 pub(crate) fn persist_error_input(system_prompt: &str, user_prompt: &str, error: &str) {
     let Some(repo_root) = repo_root() else {
-        eprintln!("llm.draft.error-input.skip: 未能定位仓库根目录");
+        app_log!("llm.draft.error-input.skip: 未能定位仓库根目录");
         return;
     };
     let dir = repo_root
@@ -76,7 +76,7 @@ pub(crate) fn persist_error_input(system_prompt: &str, user_prompt: &str, error:
         .join("ai-game-creator-shell")
         .join(".llm-drafts");
     if let Err(io_error) = fs::create_dir_all(&dir) {
-        eprintln!(
+        app_log!(
             "llm.draft.error-input.dir.failed: {}: {io_error}",
             dir.display()
         );
@@ -87,7 +87,7 @@ pub(crate) fn persist_error_input(system_prompt: &str, user_prompt: &str, error:
     );
     let path = dir.join(format!("error-input-{}.txt", unix_millis()));
     if let Err(io_error) = fs::write(&path, &body) {
-        eprintln!(
+        app_log!(
             "llm.draft.error-input.write.failed: {}: {io_error}",
             path.display()
         );
@@ -96,5 +96,5 @@ pub(crate) fn persist_error_input(system_prompt: &str, user_prompt: &str, error:
     // 同步更新 latest-error-input.txt，方便直接打开最近一次失败输入。
     let latest = dir.join("latest-error-input.txt");
     let _ = fs::write(&latest, &body);
-    eprintln!("llm.draft.error-input.saved: {}", path.display());
+    app_log!("llm.draft.error-input.saved: {}", path.display());
 }
diff --git a/apps/ai-game-creator-shell/src-tauri/src/error_report/commands.rs b/apps/ai-game-creator-shell/src-tauri/src/error_report/commands.rs
new file mode 100644
index 000000000..06e308cf2
--- /dev/null
+++ b/apps/ai-game-creator-shell/src-tauri/src/error_report/commands.rs
@@ -0,0 +1,32 @@
+use tauri::command;
+
+use super::queue::{ack, report_diagnostic_error, snapshot, ErrorReportEvent};
+
+#[command]
+pub fn report_client_error(
+    source: String,
+    message: String,
+    stack: Option<String>,
+    action: Option<String>,
+    page: Option<String>,
+) -> Result<ErrorReportEvent, String> {
+    report_diagnostic_error(
+        &source,
+        &message,
+        stack.as_deref(),
+        action.as_deref(),
+        page.as_deref(),
+    )
+    .ok_or_else(|| "错误消息不能为空".to_string())
+}
+
+#[command]
+pub fn get_pending_error_reports() -> Vec<ErrorReportEvent> {
+    snapshot()
+}
+
+#[command]
+pub fn ack_error_reports(event_ids: Vec<String>) -> Result<(), String> {
+    ack(&event_ids);
+    Ok(())
+}
diff --git a/apps/ai-game-creator-shell/src-tauri/src/error_report/mod.rs b/apps/ai-game-creator-shell/src-tauri/src/error_report/mod.rs
new file mode 100644
index 000000000..1d3db7c14
--- /dev/null
+++ b/apps/ai-game-creator-shell/src-tauri/src/error_report/mod.rs
@@ -0,0 +1,8 @@
+mod commands;
+mod notifications;
+mod queue;
+mod sanitize;
+
+pub use commands::{ack_error_reports, get_pending_error_reports, report_client_error};
+pub use notifications::initialize_notifications;
+pub use queue::{report_agent_runtime_error, report_diagnostic_error};
diff --git a/apps/ai-game-creator-shell/src-tauri/src/error_report/notifications.rs b/apps/ai-game-creator-shell/src-tauri/src/error_report/notifications.rs
new file mode 100644
index 000000000..b6f8bb86d
--- /dev/null
+++ b/apps/ai-game-creator-shell/src-tauri/src/error_report/notifications.rs
@@ -0,0 +1,55 @@
+use std::sync::{
+    atomic::{AtomicU64, Ordering},
+    Mutex, OnceLock,
+};
+use std::time::Duration;
+
+use tauri::{AppHandle, Emitter};
+
+use super::queue::snapshot_with_generation;
+
+static APP_HANDLE: OnceLock<AppHandle> = OnceLock::new();
+static TIMER_ACTIVE: OnceLock<Mutex<bool>> = OnceLock::new();
+static LAST_EMITTED_GENERATION: AtomicU64 = AtomicU64::new(0);
+
+pub fn initialize_notifications(app: &AppHandle) {
+    let _ = APP_HANDLE.set(app.clone());
+    let _ = TIMER_ACTIVE.set(Mutex::new(false));
+}
+
+pub(crate) fn schedule_notification() {
+    let Some(handle) = APP_HANDLE.get().cloned() else {
+        return;
+    };
+    let active = TIMER_ACTIVE.get_or_init(|| Mutex::new(false));
+    {
+        let mut value = active
+            .lock()
+            .unwrap_or_else(|poisoned| poisoned.into_inner());
+        if *value {
+            return;
+        }
+        *value = true;
+    }
+    tauri::async_runtime::spawn(async move {
+        tokio::time::sleep(Duration::from_secs(5)).await;
+        let (events, current_generation) = snapshot_with_generation();
+        LAST_EMITTED_GENERATION.store(current_generation, Ordering::Release);
+        if !events.is_empty() {
+            let _ = handle.emit(
+                "error-report-updated",
+                serde_json::json!({
+                    "generation": current_generation,
+                }),
+            );
+        }
+        if let Some(active) = TIMER_ACTIVE.get() {
+            *active
+                .lock()
+                .unwrap_or_else(|poisoned| poisoned.into_inner()) = false;
+        }
+        if snapshot_with_generation().1 > LAST_EMITTED_GENERATION.load(Ordering::Acquire) {
+            schedule_notification();
+        }
+    });
+}
diff --git a/apps/ai-game-creator-shell/src-tauri/src/error_report/queue.rs b/apps/ai-game-creator-shell/src-tauri/src/error_report/queue.rs
new file mode 100644
index 000000000..acef69e10
--- /dev/null
+++ b/apps/ai-game-creator-shell/src-tauri/src/error_report/queue.rs
@@ -0,0 +1,257 @@
+use std::collections::{HashMap, VecDeque};
+use std::sync::{Mutex, OnceLock};
+use std::time::{SystemTime, UNIX_EPOCH};
+
+use serde::{Deserialize, Serialize};
+
+use super::notifications::schedule_notification;
+use super::sanitize::{fingerprint, sanitize};
+
+const MAX_EVENTS: usize = 100;
+const MAX_SOURCE_CHARS: usize = 128;
+const MAX_MESSAGE_CHARS: usize = 512;
+const MAX_STACK_CHARS: usize = 8_000;
+const MAX_ACTION_CHARS: usize = 128;
+const MAX_PAGE_CHARS: usize = 128;
+
+#[derive(Clone, Debug, Deserialize, Serialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+pub struct ErrorReportEvent {
+    pub event_id: String,
+    pub fingerprint: String,
+    pub source: String,
+    pub message: String,
+    pub stack: Option<String>,
+    pub occurred_at: String,
+    pub last_occurred_at: String,
+    pub count: u32,
+}
+
+#[derive(Default)]
+struct Queue {
+    events: HashMap<String, ErrorReportEvent>,
+    order: VecDeque<String>,
+    sequence: u64,
+}
+
+static QUEUE: OnceLock<Mutex<Queue>> = OnceLock::new();
+
+fn queue() -> &'static Mutex<Queue> {
+    QUEUE.get_or_init(|| Mutex::new(Queue::default()))
+}
+
+fn now() -> String {
+    let seconds = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_secs();
+    format!("{seconds}")
+}
+
+fn stable_codex_app_server_error_message(message: &str) -> Option<String> {
+    for marker in ["kind=codex-app-server-", "codex-app-server-error:"] {
+        let Some(start) = message.find(marker) else {
+            continue;
+        };
+        let kind_start = start + marker.len();
+        let kind = message[kind_start..]
+            .chars()
+            .take_while(|character| character.is_ascii_lowercase() || *character == '-')
+            .collect::<String>();
+        if !kind.is_empty() {
+            return Some(format!("codex-app-server-error:{kind}"));
+        }
+    }
+    None
+}
+
+pub fn report_agent_runtime_error(agent_id: &str, error: &str) -> Option<ErrorReportEvent> {
+    report_diagnostic_error(
+        "agent-runtime",
+        error,
+        None,
+        Some("agent-runtime"),
+        Some(agent_id),
+    )
+}
+
+pub fn report_diagnostic_error(
+    source: &str,
+    message: &str,
+    stack: Option<&str>,
+    action: Option<&str>,
+    page: Option<&str>,
+) -> Option<ErrorReportEvent> {
+    let raw_call_site = stack.and_then(|value| {
+        value.lines().find_map(|line| {
+            let trimmed = line.trim();
+            trimmed.strip_prefix("at ").map(|site| {
+                site.trim_end_matches(|character: char| {
+                    character.is_ascii_digit()
+                        || character == ':'
+                        || character == ')'
+                        || character == '('
+                })
+                .trim()
+                .to_string()
+            })
+        })
+    });
+    let source = sanitize(source, MAX_SOURCE_CHARS);
+    let action = action.map(|value| sanitize(value, MAX_ACTION_CHARS));
+    let page = page.map(|value| sanitize(value, MAX_PAGE_CHARS));
+    let sanitized_message = sanitize(message, MAX_MESSAGE_CHARS);
+    let message =
+        stable_codex_app_server_error_message(&sanitized_message).unwrap_or(sanitized_message);
+    let stack = stack.map(|value| sanitize(value, MAX_STACK_CHARS));
+    if message.trim().is_empty() {
+        return None;
+    }
+    let fingerprint = fingerprint(&[
+        &source,
+        action.as_deref().unwrap_or_default(),
+        page.as_deref().unwrap_or_default(),
+        &message,
+        raw_call_site.as_deref().unwrap_or_default(),
+    ]);
+    let timestamp = now();
+    let (should_schedule, event) = {
+        let mut state = queue()
+            .lock()
+            .unwrap_or_else(|poisoned| poisoned.into_inner());
+        if let Some(existing) = state.events.get_mut(&fingerprint) {
+            existing.count = existing.count.saturating_add(1);
+            existing.last_occurred_at = timestamp;
+            (false, existing.clone())
+        } else {
+            state.sequence = state.sequence.saturating_add(1);
+            let event_id = format!("rust-error-{}", state.sequence);
+            if state.order.len() >= MAX_EVENTS {
+                if let Some(oldest) = state.order.pop_front() {
+                    state.events.remove(&oldest);
+                }
+            }
+            state.order.push_back(fingerprint.clone());
+            let event = ErrorReportEvent {
+                event_id,
+                fingerprint,
+                source,
+                message,
+                stack,
+                occurred_at: timestamp.clone(),
+                last_occurred_at: timestamp,
+                count: 1,
+            };
+            state
+                .events
+                .insert(event.fingerprint.clone(), event.clone());
+            (true, event)
+        }
+    };
+    if should_schedule {
+        schedule_notification();
+    }
+    Some(event)
+}
+
+pub(crate) fn snapshot() -> Vec<ErrorReportEvent> {
+    snapshot_with_generation().0
+}
+
+pub(crate) fn snapshot_with_generation() -> (Vec<ErrorReportEvent>, u64) {
+    let state = queue()
+        .lock()
+        .unwrap_or_else(|poisoned| poisoned.into_inner());
+    let events = state
+        .order
+        .iter()
+        .filter_map(|fingerprint| state.events.get(fingerprint).cloned())
+        .collect();
+    (events, state.sequence)
+}
+
+pub(crate) fn ack(event_ids: &[String]) {
+    let mut state = queue()
+        .lock()
+        .unwrap_or_else(|poisoned| poisoned.into_inner());
+    for event_id in event_ids {
+        let Some(fingerprint) = state.events.iter().find_map(|(fingerprint, event)| {
+            (event.event_id == *event_id).then_some(fingerprint.clone())
+        }) else {
+            continue;
+        };
+        state.events.remove(&fingerprint);
+        state.order.retain(|item| item != &fingerprint);
+    }
+}
+
+pub(crate) fn generation() -> u64 {
+    let state = queue()
+        .lock()
+        .unwrap_or_else(|poisoned| poisoned.into_inner());
+    state.sequence
+}
+
+#[cfg(test)]
+pub(crate) fn reset_for_tests() {
+    let mut state = queue()
+        .lock()
+        .unwrap_or_else(|poisoned| poisoned.into_inner());
+    *state = Queue::default();
+}
+
+#[cfg(test)]
+mod tests {
+    use super::{report_agent_runtime_error, report_diagnostic_error, reset_for_tests, snapshot};
+
+    #[test]
+    fn merges_events_by_call_site_without_storing_second_queue() {
+        reset_for_tests();
+        let first = report_diagnostic_error(
+            "test",
+            "boom",
+            Some("Error: boom\n    at app.ts:10:2"),
+            None,
+            None,
+        )
+        .expect("first event");
+        let second = report_diagnostic_error(
+            "test",
+            "boom",
+            Some("Error: boom\n    at app.ts:99:7"),
+            None,
+            None,
+        )
+        .expect("merged event");
+        assert_eq!(first.event_id, second.event_id);
+        assert_eq!(snapshot()[0].count, 2);
+    }
+
+    #[test]
+    fn rejects_empty_messages() {
+        reset_for_tests();
+        assert!(report_diagnostic_error("test", "\n", None, None, None).is_none());
+        assert!(snapshot().is_empty());
+    }
+
+    #[test]
+    fn canonicalizes_codex_app_server_public_summaries_and_deduplicates_frontend_capture() {
+        reset_for_tests();
+        let runtime = report_agent_runtime_error(
+            "project-supervisor",
+            "runtime 调用 LLM 失败：kind=codex-app-server-other fingerprint=deadbeef chars=42",
+        )
+        .expect("runtime event");
+        let frontend = report_diagnostic_error(
+            "agent-runtime",
+            "codex-app-server-error:other",
+            None,
+            Some("agent-runtime"),
+            Some("project-supervisor"),
+        )
+        .expect("frontend event");
+        assert_eq!(runtime.event_id, frontend.event_id);
+        assert_eq!(snapshot()[0].count, 2);
+        assert_eq!(snapshot()[0].message, "codex-app-server-error:other");
+    }
+}
diff --git a/apps/ai-game-creator-shell/src-tauri/src/error_report/sanitize.rs b/apps/ai-game-creator-shell/src-tauri/src/error_report/sanitize.rs
new file mode 100644
index 000000000..cdd7e8567
--- /dev/null
+++ b/apps/ai-game-creator-shell/src-tauri/src/error_report/sanitize.rs
@@ -0,0 +1,90 @@
+use sha2::{Digest, Sha256};
+use std::sync::LazyLock;
+
+static AUTHORIZATION_PATTERN: LazyLock<regex::Regex> = LazyLock::new(|| {
+    regex::Regex::new(r"(?i)authorization\s*:\s*(?:bearer\s+)?\S+")
+        .expect("valid diagnostic sanitization pattern")
+});
+static BEARER_PATTERN: LazyLock<regex::Regex> = LazyLock::new(|| {
+    regex::Regex::new(r"(?i)bearer\s+\S+").expect("valid diagnostic sanitization pattern")
+});
+static TOKEN_PATTERN: LazyLock<regex::Regex> = LazyLock::new(|| {
+    regex::Regex::new(r"(?i)(?:api[_-]?key|token)\s*[=:]\s*\S+")
+        .expect("valid diagnostic sanitization pattern")
+});
+static URL_PATTERN: LazyLock<regex::Regex> = LazyLock::new(|| {
+    regex::Regex::new(r"(?i)https?://\S+").expect("valid diagnostic sanitization pattern")
+});
+static PATH_PATTERN: LazyLock<regex::Regex> = LazyLock::new(|| {
+    regex::Regex::new(r"(?i)[A-Z]:[\\/][^\s]+|/(?:Users|home|private|tmp)/[^\s]+")
+        .expect("valid diagnostic sanitization pattern")
+});
+static HEX_ID_PATTERN: LazyLock<regex::Regex> = LazyLock::new(|| {
+    regex::Regex::new(r"(?i)\b[0-9a-f]{8,}\b").expect("valid diagnostic sanitization pattern")
+});
+
+fn replace_pattern(value: String, pattern: &regex::Regex, replacement: &str) -> String {
+    pattern.replace_all(&value, replacement).into_owned()
+}
+
+pub(crate) fn sanitize(value: &str, max_chars: usize) -> String {
+    let normalized = value
+        .to_string()
+        .pipe(|value| replace_pattern(value, &AUTHORIZATION_PATTERN, "authorization: [REDACTED]"))
+        .pipe(|value| replace_pattern(value, &BEARER_PATTERN, "Bearer [REDACTED]"))
+        .pipe(|value| replace_pattern(value, &TOKEN_PATTERN, "[REDACTED]"))
+        .pipe(|value| replace_pattern(value, &URL_PATTERN, "<url>"))
+        .pipe(|value| replace_pattern(value, &PATH_PATTERN, "<path>"))
+        .pipe(|value| replace_pattern(value, &HEX_ID_PATTERN, "<id>"));
+    normalized
+        .replace(['\r', '\n'], " ")
+        .chars()
+        .filter(|character| !character.is_control() || *character == '\t')
+        .collect::<String>()
+        .chars()
+        .take(max_chars)
+        .collect()
+}
+
+trait Pipe: Sized {
+    fn pipe<T>(self, function: impl FnOnce(Self) -> T) -> T {
+        function(self)
+    }
+}
+
+impl<T> Pipe for T {}
+
+pub(crate) fn fingerprint(parts: &[&str]) -> String {
+    let mut hasher = Sha256::new();
+    for part in parts {
+        hasher.update(part.as_bytes());
+        hasher.update([0]);
+    }
+    format!("{:x}", hasher.finalize())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::sanitize;
+
+    #[test]
+    fn redacts_credentials_urls_paths_and_ids() {
+        let value = "authorization: Bearer secret token=abc https://example.test/a /home/alice/project deadbeef12";
+        let sanitized = sanitize(value, 512);
+        assert!(!sanitized.contains("secret"));
+        assert!(!sanitized.contains("example.test"));
+        assert!(!sanitized.contains("/home/alice"));
+        assert!(!sanitized.contains("deadbeef12"));
+    }
+
+    #[test]
+    fn redacts_case_insensitive_posix_paths() {
+        let sanitized = sanitize("/users/alice/project", 512);
+        assert!(!sanitized.contains("/users/alice"));
+    }
+
+    #[test]
+    fn removes_newlines_and_bounds_length() {
+        assert_eq!(sanitize("a\nb\u{0000}c", 3), "a b");
+    }
+}
diff --git a/apps/ai-game-creator-shell/src-tauri/src/main.rs b/apps/ai-game-creator-shell/src-tauri/src/main.rs
index c9b611aca..196d5b85a 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/main.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/main.rs
@@ -24,6 +24,7 @@ use platform_llm::{
 use reqwest::header;
 use serde::{Deserialize, Serialize};
 use sha2::Digest;
+use shared_contracts::error_reports::ErrorReportLogInput;
 use shared_contracts::game_creation_app::{
     new_game_creation_app_manifest, new_game_creation_app_seed_tasks,
     validate_game_iteration_versions, GameCreationAgentArtifactTrace,
@@ -227,6 +228,16 @@ async fn download_agc_update(
     Ok(target.to_string_lossy().into_owned())
 }
 
+/// Rust 侧普通文本日志：保留 stderr 输出，同时将同一行持久化到 AppData。
+/// 诊断包只在用户主动提交时读取这些 raw log；结构化错误事件仍只留在内存。
+macro_rules! app_log {
+    ($($arg:tt)*) => {{
+        let message = format!($($arg)*);
+        let _ = $crate::append_application_log_line(&format!("RUST {}: {}", module_path!(), message));
+        std::eprintln!("{}", message);
+    }};
+}
+
 // 调试落盘模块（保存 LLM 原始输出 / 失败输入，排查截断、空返回等）放在 debug_drafts.rs。
 // 用 #[cfg] 编译期门控：仅开发（debug）且非测试构建编入；生产 release 与 cargo test 下整体剔除。
 mod agent;
@@ -247,6 +258,7 @@ mod context_menu;
 #[cfg(all(debug_assertions, not(test)))]
 mod debug;
 mod delegation;
+pub mod error_report;
 mod git_inspect;
 mod goal;
 mod http_client;
@@ -283,6 +295,7 @@ use commands::*;
 use config::*;
 use context_compaction::*;
 use delegation::*;
+use error_report::*;
 use git_inspect::*;
 use goal::*;
 use image_inspect::*;
@@ -1759,6 +1772,47 @@ static DIAGNOSTIC_LOG_LOCK: OnceLock<Mutex<()>> = OnceLock::new();
 static STARTUP_PANIC_LOG_PATH: OnceLock<PathBuf> = OnceLock::new();
 static STARTUP_ERROR_DIALOG_SHOWN: AtomicBool = AtomicBool::new(false);
 
+#[tauri::command]
+fn append_application_log(level: String, source: String, message: String) -> Result<(), String> {
+    let config_dir = game_creator_runtime_config_dir()
+        .ok_or_else(|| "客户端 AppData 配置目录未初始化".to_string())?;
+    let level = sanitize_diagnostic_message(&level, Some(&config_dir));
+    let source = sanitize_diagnostic_message(&source, Some(&config_dir));
+    let message = sanitize_diagnostic_message(&message, Some(&config_dir));
+    let line = format!("WEBVIEW {level} {source}: {message}");
+    append_application_log_line(&line).map_err(|error| error.to_string())
+}
+
+#[tauri::command]
+fn read_diagnostic_logs() -> Result<Vec<ErrorReportLogInput>, String> {
+    let Some(config_dir) = game_creator_runtime_config_dir() else {
+        return Ok(Vec::new());
+    };
+    let _guard = DIAGNOSTIC_LOG_LOCK
+        .get_or_init(|| Mutex::new(()))
+        .lock()
+        .unwrap_or_else(|poisoned| poisoned.into_inner());
+    let directory = config_dir.join("diagnostics");
+    let mut files = Vec::new();
+    for name in ["application.log", "application.previous.log", "startup.log"] {
+        let path = directory.join(name);
+        let Ok(metadata) = fs::symlink_metadata(&path) else {
+            continue;
+        };
+        if metadata.file_type().is_symlink() || !metadata.is_file() {
+            continue;
+        }
+        let Ok(content) = fs::read_to_string(&path) else {
+            continue;
+        };
+        files.push(ErrorReportLogInput {
+            name: name.to_string(),
+            content,
+        });
+    }
+    Ok(files)
+}
+
 fn diagnostic_timestamp() -> u64 {
     SystemTime::now()
         .duration_since(UNIX_EPOCH)
@@ -1864,6 +1918,14 @@ pub(crate) fn append_bounded_diagnostic_line(path: &Path, line: &str) -> std::io
     append_bounded_diagnostic_line_with_limit(path, line, DIAGNOSTIC_LOG_MAX_BYTES)
 }
 
+pub(crate) fn append_application_log_line(line: &str) -> std::io::Result<()> {
+    let Some(config_dir) = game_creator_runtime_config_dir() else {
+        return Ok(());
+    };
+    let sanitized = sanitize_diagnostic_message(line, Some(&config_dir));
+    append_bounded_diagnostic_line(&config_dir.join("diagnostics/application.log"), &sanitized)
+}
+
 fn redact_windows_absolute_paths(value: &str) -> String {
     let bytes = value.as_bytes();
     let mut output = String::with_capacity(value.len());
@@ -1952,7 +2014,7 @@ pub(crate) fn sanitize_diagnostic_message(value: &str, private_root: Option<&Pat
 }
 
 fn show_startup_error_dialog(log_path: &Path) {
-    eprintln!("Genarrative startup failed; see {}", log_path.display());
+    app_log!("Genarrative startup failed; see {}", log_path.display());
 }
 
 #[derive(Clone, Debug)]
@@ -2042,16 +2104,16 @@ where
 fn handle_game_creator_gui_run_event(event: &tauri::RunEvent) {
     if matches!(event, tauri::RunEvent::Exit) {
         if let Err(error) = agent::shutdown_game_creator_codex_app_servers() {
-            eprintln!("agent.direct_codex.gui_exit.shutdown_failed: {error}");
+            app_log!("agent.direct_codex.gui_exit.shutdown_failed: {error}");
         }
     }
     match resolve_game_creator_gui_runner_shutdown(event, shutdown_external_agent_runner) {
         GameCreatorGuiRunnerShutdownOutcome::NotRequested => {}
         GameCreatorGuiRunnerShutdownOutcome::Requested => {
-            eprintln!("agent.runner.gui_exit.shutdown_requested")
+            app_log!("agent.runner.gui_exit.shutdown_requested")
         }
         GameCreatorGuiRunnerShutdownOutcome::Failed(failure) => {
-            eprintln!("agent.runner.gui_exit.shutdown_failed.{}", failure.code())
+            app_log!("agent.runner.gui_exit.shutdown_failed.{}", failure.code())
         }
     }
 }
@@ -2078,7 +2140,7 @@ fn install_agent_runtime_async_runtime_with_deep_stack() {
     let runtime = match build_agent_runtime_async_runtime() {
         Ok(runtime) => runtime,
         Err(error) => {
-            eprintln!("agent.runner.failed: {error}");
+            app_log!("agent.runner.failed: {error}");
             std::process::exit(1);
         }
     };
@@ -2197,7 +2259,7 @@ fn main() {
     let runtime_config_dir = match take_cli_runtime_config_dir(&mut args) {
         Ok(config_dir) => config_dir,
         Err(error) => {
-            eprintln!("{error}");
+            app_log!("{error}");
             std::process::exit(1);
         }
     };
@@ -2206,23 +2268,23 @@ fn main() {
             [_] => false,
             [_, option] if option == "--gui-owner-required" => true,
             _ => {
-                eprintln!(
+                app_log!(
                     "用法：--agent-runner [--gui-owner-required] --config-dir <AppData 绝对路径>"
                 );
                 std::process::exit(1);
             }
         };
         let Some(config_dir) = runtime_config_dir else {
-            eprintln!("Agent Runner 必须显式传入 --config-dir <AppData 绝对路径>");
+            app_log!("Agent Runner 必须显式传入 --config-dir <AppData 绝对路径>");
             std::process::exit(1);
         };
         if let Err(error) = load_platform_session_fixture_from_env(&config_dir) {
-            eprintln!("agent.runner.failed: {error}");
+            app_log!("agent.runner.failed: {error}");
             std::process::exit(1);
         }
         set_game_creator_runtime_config_dir(config_dir.clone());
         if let Err(error) = run_external_agent_runner_server(config_dir, gui_owner_required) {
-            eprintln!("agent.runner.failed: {error}");
+            app_log!("agent.runner.failed: {error}");
             std::process::exit(1);
         }
         return;
@@ -2233,13 +2295,13 @@ fn main() {
                 match prepare_cli_command_paths(&mut command, runtime_config_dir.as_deref()) {
                     Ok(config_dir) => config_dir,
                     Err(error) => {
-                        eprintln!("agent.runner.failed: {error}");
+                        app_log!("agent.runner.failed: {error}");
                         std::process::exit(1);
                     }
                 };
             if let Some(config_dir) = config_dir {
                 if let Err(error) = load_platform_session_fixture_from_env(&config_dir) {
-                    eprintln!("agent.runner.failed: {error}");
+                    app_log!("agent.runner.failed: {error}");
                     std::process::exit(1);
                 }
                 if command.requires_external_agent_runner() {
@@ -2249,7 +2311,7 @@ fn main() {
                         configure_external_agent_runner(&config_dir)
                     };
                     if let Err(error) = configured {
-                        eprintln!("agent.runner.failed: {error}");
+                        app_log!("agent.runner.failed: {error}");
                         std::process::exit(1);
                     }
                 }
@@ -2257,19 +2319,19 @@ fn main() {
             }
             if command.requires_started_external_agent_runner() {
                 if let Err(error) = ensure_external_agent_runner_started() {
-                    eprintln!("agent.runner.failed: {error}");
+                    app_log!("agent.runner.failed: {error}");
                     std::process::exit(1);
                 }
             }
             if let Err(error) = run_cli_command(command) {
-                eprintln!("agent.run.failed: {error}");
+                app_log!("agent.run.failed: {error}");
                 std::process::exit(1);
             }
             return;
         }
         Ok(None) => {}
         Err(error) => {
-            eprintln!("{error}");
+            app_log!("{error}");
             std::process::exit(1);
         }
     }
@@ -2290,6 +2352,7 @@ fn main() {
         .manage(game_creator_preview_registry())
         .manage(ProjectResourcePreviewReadManager::default())
         .setup(move |app| {
+            error_report::initialize_notifications(app.handle());
             if let Some(path) = setup_log.as_deref() {
                 let _ = append_bounded_diagnostic_line(path, "startup.setup.begin");
                 let _ = append_bounded_diagnostic_line(path, "startup.appdata.configure.begin");
@@ -2304,7 +2367,9 @@ fn main() {
                     show_startup_error_dialog(path);
                 }
             })?;
-            if let Some(path) = setup_log.as_deref() {
+            let startup_log = game_creator_runtime_config_dir()
+                .map(|directory| directory.join("diagnostics/startup.log"));
+            if let Some(path) = startup_log.as_deref() {
                 let _ = append_bounded_diagnostic_line(path, "startup.appdata.configure.complete");
             }
             let config_dir = game_creator_runtime_config_dir().ok_or_else(|| {
@@ -2547,6 +2612,11 @@ fn main() {
             get_local_game_project_revision,
             get_local_game_manifest,
             download_agc_update,
+            append_application_log,
+            read_diagnostic_logs,
+            report_client_error,
+            get_pending_error_reports,
+            ack_error_reports
         ])
         .build(tauri_context);
     let app = match app {
@@ -2565,7 +2635,7 @@ fn main() {
                 );
                 show_startup_error_dialog(path);
             }
-            eprintln!("failed to build Genarrative AI Game Creator shell: {error}");
+            app_log!("failed to build Genarrative AI Game Creator shell: {error}");
             std::process::exit(1);
         }
     };
diff --git a/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/binding.rs b/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/binding.rs
index 8ede8b652..e59d90fb1 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/binding.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/binding.rs
@@ -409,7 +409,7 @@ pub(crate) async fn bind_components_impl_with_provider(
         &known_sprite_ids,
         &known_font_ids,
     )?;
-    eprintln!(
+    app_log!(
         "ui_binding.completed ui_images={} sprites={} editable_nodes={} changes={}",
         state.ui_design_images.len(),
         sprite_ids.len(),
diff --git a/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/merge.rs b/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/merge.rs
index 4b9852063..e8a789948 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/merge.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/merge.rs
@@ -403,27 +403,27 @@ pub(crate) async fn merge_ui_impl_with_provider(
     provider_identity: Option<(&str, &str)>,
 ) -> Result<MergeDTO, String> {
     if state.ui_trees.is_empty() {
-        eprintln!("ui_merge.error stage=validate reason=no_trees");
+        app_log!("ui_merge.error stage=validate reason=no_trees");
         return Err("请先完成 UI 结构识别".to_string());
     }
     validate_merge_input_state(&state).map_err(|error| {
-        eprintln!("ui_merge.error stage=validate_input error={error}");
+        app_log!("ui_merge.error stage=validate_input error={error}");
         error
     })?;
     let priorities = priority::for_state(&state).map_err(|error| {
-        eprintln!("ui_merge.error stage=build_priority error={error}");
+        app_log!("ui_merge.error stage=build_priority error={error}");
         error
     })?;
     let trees = llm_contract::input_trees(&state, &priorities).map_err(|error| {
-        eprintln!("ui_merge.error stage=build_input error={error}");
+        app_log!("ui_merge.error stage=build_input error={error}");
         error
     })?;
     let records_json = serde_json::to_string(&trees).map_err(|error| {
-        eprintln!("ui_merge.error stage=serialize_input error={error}");
+        app_log!("ui_merge.error stage=serialize_input error={error}");
         format!("序列化 UI 合并输入失败：{error}")
     })?;
     if records_json.len() > MAX_MERGE_INPUT_BYTES {
-        eprintln!(
+        app_log!(
             "ui_merge.error stage=serialize_input reason=too_large bytes={} limit={MAX_MERGE_INPUT_BYTES}",
             records_json.len()
         );
@@ -438,7 +438,7 @@ pub(crate) async fn merge_ui_impl_with_provider(
             .llm;
         let client =
             build_game_creator_llm_client_from_llm_config(&llm, "llm").map_err(|error| {
-                eprintln!("ui_merge.error stage=build_client error={error}");
+                app_log!("ui_merge.error stage=build_client error={error}");
                 error
             })?;
         (Some(llm), Some(client))
@@ -446,7 +446,7 @@ pub(crate) async fn merge_ui_impl_with_provider(
         (None, None)
     };
     let schema = llm_contract::schema().map_err(|error| {
-        eprintln!("ui_merge.error stage=build_schema error={error}");
+        app_log!("ui_merge.error stage=build_schema error={error}");
         error
     })?;
     let tool = LlmFunctionTool::new(
@@ -483,7 +483,7 @@ pub(crate) async fn merge_ui_impl_with_provider(
         .await
     }
     .map_err(|error| {
-        eprintln!("ui_merge.error stage=llm_request error={error}");
+        app_log!("ui_merge.error stage=llm_request error={error}");
         format!("UI 树合并失败：{error}")
     })?;
     let call = response
@@ -491,24 +491,24 @@ pub(crate) async fn merge_ui_impl_with_provider(
         .iter()
         .find(|call| call.name == MERGE_TOOL_NAME)
         .ok_or_else(|| {
-            eprintln!("ui_merge.error stage=parse_tool_call reason=missing_tool_call");
+            app_log!("ui_merge.error stage=parse_tool_call reason=missing_tool_call");
             format!("LLM 未返回 {MERGE_TOOL_NAME} 工具调用")
         })?;
     let arguments = parse_limited_llm_tool_arguments(&call.arguments).map_err(|error| {
-        eprintln!("ui_merge.error stage=parse_arguments error={error}");
+        app_log!("ui_merge.error stage=parse_arguments error={error}");
         format!("UI 合并工具参数无效：{error}")
     })?;
     validate_merge_plan_shape(&arguments).map_err(|error| {
-        eprintln!("ui_merge.error stage=validate_arguments error={error}");
+        app_log!("ui_merge.error stage=validate_arguments error={error}");
         format!("UI 合并工具参数无效：{error}")
     })?;
     let parsed =
         serde_json::from_value::<llm_contract::MergeResponse>(arguments).map_err(|error| {
-            eprintln!("ui_merge.error stage=parse_arguments error={error}");
+            app_log!("ui_merge.error stage=parse_arguments error={error}");
             format!("UI 合并工具参数无效：{error}")
         })?;
     let ui_tree = materialize::plan(parsed.root, &state, &priorities).map_err(|error| {
-        eprintln!("ui_merge.error stage=materialize error={error}");
+        app_log!("ui_merge.error stage=materialize error={error}");
         error
     })?;
     Ok(MergeDTO { ui_tree })
diff --git a/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/recognition.rs b/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/recognition.rs
index 408b95e4e..081db0bb1 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/recognition.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/recognition.rs
@@ -595,11 +595,11 @@ pub(crate) async fn recognize_ui_impl_with_provider(
     provider_identity: Option<(&str, &str)>,
 ) -> Result<RecognitionDTO, String> {
     if state.ui_design_images.is_empty() {
-        eprintln!("ui_recognition.error stage=validate reason=no_images");
+        app_log!("ui_recognition.error stage=validate reason=no_images");
         return Err("请先导入界面图".to_string());
     }
     if state.ui_design_images.len() > MAX_REFERENCES {
-        eprintln!(
+        app_log!(
             "ui_recognition.error stage=validate reason=too_many_images count={}",
             state.ui_design_images.len()
         );
@@ -607,13 +607,13 @@ pub(crate) async fn recognize_ui_impl_with_provider(
     }
     let root_ids = recognition_root_image_ids(&state);
     if root_ids.is_empty() {
-        eprintln!("ui_recognition.error stage=validate reason=no_root_image");
+        app_log!("ui_recognition.error stage=validate reason=no_root_image");
         return Err("至少需要一张可作为识别上下文根的界面图".to_string());
     }
     let (llm, client) = if provider_identity.is_none() {
         let llm = load_game_creator_app_config()
             .map_err(|error| {
-                eprintln!("ui_recognition.error stage=build_client error={error}");
+                app_log!("ui_recognition.error stage=build_client error={error}");
                 error
             })?
             .llm;
@@ -627,7 +627,7 @@ pub(crate) async fn recognize_ui_impl_with_provider(
         (None, None)
     };
     let schema = recognition_json_schema().map_err(|error| {
-        eprintln!("ui_recognition.error stage=build_schema error={error}");
+        app_log!("ui_recognition.error stage=build_schema error={error}");
         error
     })?;
     let root = Path::new(project_path.trim());
@@ -645,7 +645,7 @@ pub(crate) async fn recognize_ui_impl_with_provider(
                 .ok_or_else(|| "缺少识别上下文界面图资源".to_string())?;
             let absolute =
                 crate::project::resolve_local_project_path(root, &image.path).map_err(|error| {
-                    eprintln!(
+                    app_log!(
                         "ui_recognition.error stage=resolve_image root={} image={} error={error}",
                         root_id.as_str(),
                         context_id.as_str()
@@ -655,7 +655,7 @@ pub(crate) async fn recognize_ui_impl_with_provider(
             let image_url = read_ui_reference_image_data_url(absolute)
                 .await
                 .map_err(|error| {
-                    eprintln!(
+                    app_log!(
                         "ui_recognition.error stage=read_image root={} image={} error={error}",
                         root_id.as_str(),
                         context_id.as_str()
@@ -706,13 +706,13 @@ pub(crate) async fn recognize_ui_impl_with_provider(
             .await
         }
         .map_err(|error| {
-            eprintln!(
+            app_log!(
                 "ui_recognition.error stage=llm_request root={} error={error}",
                 root_id.as_str()
             );
             format!("UI 结构识别失败（根界面图 {}）：{error}", root_id.as_str())
         })?;
-        eprintln!(
+        app_log!(
             "ui_recognition.llm_output root={} text_present={} tool_call_count={}",
             root_id.as_str(),
             !response.text.trim().is_empty(),
@@ -723,7 +723,7 @@ pub(crate) async fn recognize_ui_impl_with_provider(
             .iter()
             .find(|call| call.name == "recognize_ui_structure")
             .ok_or_else(|| {
-                eprintln!(
+                app_log!(
                     "ui_recognition.error stage=parse_tool_call root={} reason=missing_tool_call",
                     root_id.as_str()
                 );
@@ -733,28 +733,28 @@ pub(crate) async fn recognize_ui_impl_with_provider(
                 )
             })?;
         let arguments = parse_limited_llm_tool_arguments(&call.arguments).map_err(|error| {
-            eprintln!(
+            app_log!(
                 "ui_recognition.error stage=parse_arguments root={} error={error}",
                 root_id.as_str()
             );
             format!("根界面图 {} 的识别工具参数无效：{error}", root_id.as_str())
         })?;
         validate_recognition_response_shape(&arguments).map_err(|error| {
-            eprintln!(
+            app_log!(
                 "ui_recognition.error stage=validate_arguments root={} error={error}",
                 root_id.as_str()
             );
             format!("根界面图 {} 的识别工具参数无效：{error}", root_id.as_str())
         })?;
         let parsed = serde_json::from_value::<RecognitionResponse>(arguments).map_err(|error| {
-            eprintln!(
+            app_log!(
                 "ui_recognition.error stage=parse_arguments root={} error={error}",
                 root_id.as_str()
             );
             format!("根界面图 {} 的识别工具参数无效：{error}", root_id.as_str())
         })?;
         validate_tree_image_ids(&parsed.trees, &context_ids).map_err(|error| {
-            eprintln!(
+            app_log!(
                 "ui_recognition.error stage=validate_trees root={} error={error}",
                 root_id.as_str()
             );
diff --git a/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/ui_design_suggestion.rs b/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/ui_design_suggestion.rs
index 2bb51d67b..613d44b7b 100644
--- a/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/ui_design_suggestion.rs
+++ b/apps/ai-game-creator-shell/src-tauri/src/ui_editor/commands/ui_design_suggestion.rs
@@ -137,11 +137,11 @@ pub(crate) async fn suggest_ui_design_semantic_impl(
     state: State,
 ) -> Result<Vec<UIDesignSuggestionTreeNode>, String> {
     if state.ui_design_images.is_empty() {
-        eprintln!("ui_design_suggestion.error stage=validate reason=no_images");
+        app_log!("ui_design_suggestion.error stage=validate reason=no_images");
         return Err("请先导入界面图".to_string());
     }
     if state.ui_design_images.len() > MAX_REFERENCES {
-        eprintln!(
+        app_log!(
             "ui_design_suggestion.error stage=validate reason=too_many_images count={}",
             state.ui_design_images.len()
         );
@@ -154,7 +154,7 @@ pub(crate) async fn suggest_ui_design_semantic_impl(
         ids.insert(id.clone());
         let absolute =
             crate::project::resolve_local_project_path(root, &image.path).map_err(|error| {
-                eprintln!(
+                app_log!(
                     "ui_design_suggestion.error stage=resolve_image id={} error={error}",
                     id.as_str()
                 );
@@ -163,7 +163,7 @@ pub(crate) async fn suggest_ui_design_semantic_impl(
         let image_url = read_ui_reference_image_data_url(absolute)
             .await
             .map_err(|error| {
-                eprintln!(
+                app_log!(
                     "ui_design_suggestion.error stage=read_image id={} error={error}",
                     id.as_str()
                 );
@@ -181,11 +181,11 @@ pub(crate) async fn suggest_ui_design_semantic_impl(
         })?
         .llm;
     let client = build_game_creator_llm_client_from_llm_config(&llm, "llm").map_err(|error| {
-        eprintln!("ui_design_suggestion.error stage=build_client error={error}");
+        app_log!("ui_design_suggestion.error stage=build_client error={error}");
         error
     })?;
     let schema = ui_design_suggestion_json_schema().map_err(|error| {
-        eprintln!("ui_design_suggestion.error stage=build_schema error={error}");
+        app_log!("ui_design_suggestion.error stage=build_schema error={error}");
         error
     })?;
     let tool = LlmFunctionTool::new(
@@ -206,10 +206,10 @@ pub(crate) async fn suggest_ui_design_semantic_impl(
     )
     .await
     .map_err(|error| {
-        eprintln!("ui_design_suggestion.error stage=llm_request error={error}");
+        app_log!("ui_design_suggestion.error stage=llm_request error={error}");
         format!("UI 参考图语义识别失败：{error}")
     })?;
-    eprintln!(
+    app_log!(
         "ui_design_suggestion.llm_output text_present={} tool_call_count={}",
         !response.text.trim().is_empty(),
         response.tool_calls.len()
@@ -219,25 +219,25 @@ pub(crate) async fn suggest_ui_design_semantic_impl(
         .iter()
         .find(|call| call.name == "suggest_ui_design_semantics")
         .ok_or_else(|| {
-            eprintln!("ui_design_suggestion.error stage=parse_tool_call reason=missing_tool_call");
+            app_log!("ui_design_suggestion.error stage=parse_tool_call reason=missing_tool_call");
             "LLM 响应无效（详情：未返回 suggest_ui_design_semantics 工具调用）".to_string()
         })?;
     let arguments = parse_limited_llm_tool_arguments(&call.arguments).map_err(|error| {
-        eprintln!("ui_design_suggestion.error stage=parse_arguments error={error}");
+        app_log!("ui_design_suggestion.error stage=parse_arguments error={error}");
         format!("LLM 响应无效（详情：UI 语义建议工具参数无效：{error}）")
     })?;
     validate_suggestion_response_shape(&arguments).map_err(|error| {
-        eprintln!("ui_design_suggestion.error stage=validate_arguments error={error}");
+        app_log!("ui_design_suggestion.error stage=validate_arguments error={error}");
         format!("LLM 响应无效（详情：{error}）")
     })?;
     let suggestions = serde_json::from_value::<UIDesignSuggestion>(arguments)
         .map_err(|error| {
-            eprintln!("ui_design_suggestion.error stage=parse_arguments error={error}");
+            app_log!("ui_design_suggestion.error stage=parse_arguments error={error}");
             format!("LLM 响应无效（详情：UI 语义建议工具参数无效：{error}）")
         })?
         .ui_designs;
     validate_suggestions(&suggestions, &ids).map_err(|error| {
-        eprintln!("ui_design_suggestion.error stage=validate_result error={error}");
+        app_log!("ui_design_suggestion.error stage=validate_result error={error}");
         format!("LLM 响应无效（详情：{error}）")
     })?;
     Ok(suggestions)
diff --git a/apps/ai-game-creator-shell/src/App.tsx b/apps/ai-game-creator-shell/src/App.tsx
index f923269b7..80481f51b 100644
--- a/apps/ai-game-creator-shell/src/App.tsx
+++ b/apps/ai-game-creator-shell/src/App.tsx
@@ -242,6 +242,10 @@ import { ProjectSupervisorView } from './features/project-workspace/ProjectSuper
 import { ProjectWorkspaceChatPane } from './features/project-workspace/ProjectWorkspaceChatPane';
 import { SupervisorChatOnlyView } from './features/project-workspace/SupervisorChatOnlyView';
 import { RuntimeConfigDialog } from './features/runtime-config/RuntimeConfigDialog';
+import {
+  captureAgentRuntimeError,
+  invokeDiagnostic,
+} from './services/errorReporting';
 import type { HomeCreationType } from './view/home';
 import {
   type ProjectAgentResultSummary,
@@ -699,7 +703,7 @@ export function App({
       setPlanGddDecisionBusy(true);
       setPlanGddError(null);
       try {
-        await invoke('decide_game_creator_plan_gdd', {
+        await invokeDiagnostic(invoke, 'decide_game_creator_plan_gdd', {
           projectPath: targetProjectPath,
           gddId: pending.gddRef.gddId,
           version: pending.gddRef.version,
@@ -3403,6 +3407,7 @@ export function App({
       if (agentConversationLoadVersionRef.current !== saveVersion) {
         return;
       }
+      void captureAgentRuntimeError(error, agent.id);
       if (savedUserResult) {
         const message = `已保存用户消息；Agent 回复失败：${
           error instanceof Error ? error.message : String(error)
@@ -5558,6 +5563,10 @@ export function App({
             }
             return;
           }
+          if (localProjectPathRef.current !== directProjectPath) {
+            return;
+          }
+          void captureAgentRuntimeError(error, PROJECT_SUPERVISOR_AGENT_ID);
           const message =
             error instanceof Error ? error.message : String(error);
           const visibleMessage = projectRuntimeVisibleError(
@@ -5766,6 +5775,7 @@ export function App({
       if (localProjectPathRef.current !== nextProjectPath) {
         return;
       }
+      void captureAgentRuntimeError(error, PROJECT_SUPERVISOR_AGENT_ID);
       const message = error instanceof Error ? error.message : String(error);
       if (isRuntimeConfigMissingError(message)) {
         requestRuntimeConfigOpen();
diff --git a/apps/ai-game-creator-shell/src/app/AuthenticatedClient.tsx b/apps/ai-game-creator-shell/src/app/AuthenticatedClient.tsx
index 980cae00b..3878476a3 100644
--- a/apps/ai-game-creator-shell/src/app/AuthenticatedClient.tsx
+++ b/apps/ai-game-creator-shell/src/app/AuthenticatedClient.tsx
@@ -10,6 +10,7 @@ import {
 
 import type { AuthUser } from '../../../../packages/shared/src/contracts/auth';
 import brandIcon from '../../../../packages/shared/src/icons/taonier-product-ip.png';
+import { ErrorReportNotice } from '../components/error-report/ErrorReportNotice';
 import {
   clearStoredAuthAccessToken,
   getClientAuthErrorMessage,
@@ -30,6 +31,11 @@ import {
   normalizeClientServerBaseUrl,
   setClientServerSelection,
 } from '../services/clientHttp';
+import {
+  captureClientError,
+  installWebviewLogBridge,
+  shouldCaptureClientError,
+} from '../services/errorReporting';
 import {
   beginPlatformSessionClearTransition,
   beginPlatformSessionTransition,
@@ -97,6 +103,7 @@ export class ClientRuntimeErrorBoundary extends Component<
 
   componentDidCatch(error: unknown, errorInfo: ErrorInfo) {
     console.error('AGC authenticated client render failed', error, errorInfo);
+    void captureClientError(error, { source: 'react-render' });
   }
 
   render() {
@@ -152,6 +159,24 @@ export function AuthenticatedClient({
   const [customServerUrl, setCustomServerUrl] = useState(
     initialServerSelection.customBaseUrl,
   );
+  useEffect(() => {
+    const uninstallWebviewLogBridge = installWebviewLogBridge();
+    const handleError = (event: ErrorEvent) => {
+      void captureClientError(event.error ?? event.message, {
+        source: 'window.onerror',
+      });
+    };
+    const handleRejection = (event: PromiseRejectionEvent) => {
+      void captureClientError(event.reason, { source: 'unhandledrejection' });
+    };
+    window.addEventListener('error', handleError);
+    window.addEventListener('unhandledrejection', handleRejection);
+    return () => {
+      uninstallWebviewLogBridge();
+      window.removeEventListener('error', handleError);
+      window.removeEventListener('unhandledrejection', handleRejection);
+    };
+  }, []);
 
   function persistServerSelection() {
     try {
@@ -162,6 +187,10 @@ export function AuthenticatedClient({
       setServerSelection(next);
       return next;
     } catch (error) {
+      void captureClientError(error, {
+        source: 'auth-hydrate',
+        action: 'restore-session',
+      });
       setLoginStatus(error instanceof Error ? error.message : String(error));
       return null;
     }
@@ -413,6 +442,11 @@ export function AuthenticatedClient({
       setCodeCooldownSeconds(Math.max(0, Math.floor(response.cooldownSeconds)));
       setLoginStatus(`验证码已发送，${response.expiresInSeconds} 秒内有效`);
     } catch (error) {
+      if (shouldCaptureClientError(error))
+        void captureClientError(error, {
+          source: 'auth',
+          action: 'send-login-code',
+        });
       setLoginStatus(error instanceof Error ? error.message : String(error));
     } finally {
       setCodeBusy(false);
@@ -472,6 +506,8 @@ export function AuthenticatedClient({
       setCode('');
       setPassword('');
     } catch (error) {
+      if (shouldCaptureClientError(error))
+        void captureClientError(error, { source: 'auth', action: 'login' });
       setLoginStatus(error instanceof Error ? error.message : String(error));
     } finally {
       setLoginBusy(false);
@@ -669,8 +705,11 @@ export function AuthenticatedClient({
   }
 
   return (
-    <ClientRuntimeErrorBoundary onLogout={logout}>
-      {children({ user: authUser, logout })}
-    </ClientRuntimeErrorBoundary>
+    <>
+      <ClientRuntimeErrorBoundary onLogout={logout}>
+        {children({ user: authUser, logout })}
+      </ClientRuntimeErrorBoundary>
+      <ErrorReportNotice />
+    </>
   );
 }
diff --git a/apps/ai-game-creator-shell/src/components/error-report/ErrorReportDialog.tsx b/apps/ai-game-creator-shell/src/components/error-report/ErrorReportDialog.tsx
new file mode 100644
index 000000000..d22ea9902
--- /dev/null
+++ b/apps/ai-game-creator-shell/src/components/error-report/ErrorReportDialog.tsx
@@ -0,0 +1,209 @@
+import { useCallback, useEffect, useState } from 'react';
+
+import {
+  ackClientErrorEventsWithRetry,
+  type ClientErrorEvent,
+  type DiagnosticLogFile,
+  getStableErrorReportSubmissionId,
+  readApplicationDiagnosticLogs,
+  submitErrorReportBatch,
+} from '../../services/errorReporting';
+import { ThemedModal } from '../modal/ThemedModal';
+
+type ErrorReportDialogProps = {
+  open: boolean;
+  events: ClientErrorEvent[];
+  onClose: () => void;
+};
+
+function diagnosticLogLabel(
+  logsReady: boolean,
+  logsError: boolean,
+  logCount: number,
+) {
+  if (!logsReady) return '正在读取应用诊断日志…';
+  if (logsError) return '应用诊断日志暂不可用（可取消后提交）';
+  return `附加应用诊断日志（${logCount} 个文件）`;
+}
+
+export function ErrorReportDialog({
+  open,
+  events,
+  onClose,
+}: ErrorReportDialogProps) {
+  const [selectedFingerprints, setSelectedFingerprints] = useState<Set<string>>(
+    new Set(),
+  );
+  const [logs, setLogs] = useState<DiagnosticLogFile[]>([]);
+  const [includeLogs, setIncludeLogs] = useState(true);
+  const [description, setDescription] = useState('');
+  const [busy, setBusy] = useState(false);
+  const [status, setStatus] = useState('');
+  const [logsReady, setLogsReady] = useState(false);
+  const [logsError, setLogsError] = useState(false);
+  const logLabel = diagnosticLogLabel(logsReady, logsError, logs.length);
+
+  useEffect(() => {
+    if (!open) return;
+    setSelectedFingerprints(
+      new Set(events.slice(0, 1).map((event) => event.fingerprint)),
+    );
+    setStatus('');
+    setLogsReady(false);
+    setLogsError(false);
+    void readApplicationDiagnosticLogs()
+      .then((nextLogs) => {
+        setLogs(nextLogs);
+        setLogsReady(true);
+      })
+      .catch(() => {
+        setLogs([]);
+        setLogsError(true);
+        setLogsReady(true);
+      });
+  }, [events, open]);
+
+  const submit = useCallback(async () => {
+    const selectedEvents = events.filter((event) =>
+      selectedFingerprints.has(event.fingerprint),
+    );
+    if (!selectedEvents.length || busy || !logsReady) return;
+    if (includeLogs && logsError) return;
+    setBusy(true);
+    setStatus('正在提交…');
+    try {
+      const submissionId = getStableErrorReportSubmissionId(selectedEvents);
+      await submitErrorReportBatch({
+        events: selectedEvents,
+        logs: includeLogs ? logs : [],
+        userDescription: description,
+        submissionId,
+      });
+      setStatus('已提交，感谢你的反馈');
+      window.setTimeout(onClose, 700);
+      void ackClientErrorEventsWithRetry(selectedEvents);
+    } catch (error) {
+      setStatus(
+        error instanceof Error ? error.message : '提交失败，请稍后再试',
+      );
+    } finally {
+      setBusy(false);
+    }
+  }, [
+    busy,
+    description,
+    events,
+    includeLogs,
+    logs,
+    logsError,
+    logsReady,
+    onClose,
+    selectedFingerprints,
+  ]);
+
+  return (
+    <ThemedModal
+      open={open}
+      ariaLabel="报告问题"
+      onClose={onClose}
+      panelClassName="w-[min(560px,calc(100vw-2rem))] max-h-[min(760px,calc(100vh-2rem))] overflow-auto rounded-[18px] p-5 shadow-[0_24px_80px_rgb(36_20_12_/_22%)]"
+    >
+      <header className="flex items-center justify-between gap-3">
+        <div>
+          <h2 className="m-0">报告问题</h2>
+        </div>
+        <button
+          className="min-h-10 w-10 cursor-pointer rounded-[10px] border-0 bg-transparent text-2xl"
+          type="button"
+          onClick={onClose}
+          aria-label="关闭"
+        >
+          ×
+        </button>
+      </header>
+      <div className="my-5 grid gap-4">
+        <section>
+          <strong>错误事件（{events.length}）</strong>
+          {events.length ? (
+            <ul className="m-0 mt-2 grid list-none gap-2 p-0">
+              {events.map((event) => (
+                <li
+                  className="grid gap-[3px] rounded-[10px] border border-[var(--platform-border-subtle)] p-2.5"
+                  key={event.fingerprint}
+                >
+                  <label className="flex items-start gap-2 text-[13px] font-semibold">
+                    <input
+                      className="mt-[3px]"
+                      type="checkbox"
+                      checked={selectedFingerprints.has(event.fingerprint)}
+                      onChange={() =>
+                        setSelectedFingerprints((current) => {
+                          const next = new Set(current);
+                          if (next.has(event.fingerprint))
+                            next.delete(event.fingerprint);
+                          else next.add(event.fingerprint);
+                          return next;
+                        })
+                      }
+                    />
+                    <span>{event.message}</span>
+                  </label>
+                  <small className="text-[var(--platform-text-soft)]">
+                    {event.source} · {event.count} 次
+                  </small>
+                </li>
+              ))}
+            </ul>
+          ) : (
+            <p>当前没有待报告的错误。</p>
+          )}
+        </section>
+        <label className="grid gap-1.5 text-[13px] font-semibold">
+          补充说明（可选）
+          <textarea
+            className="min-h-[100px] resize-y rounded-[10px] border border-[var(--platform-border-subtle)] p-2.5 font-[inherit]"
+            maxLength={2000}
+            value={description}
+            onChange={(event) => setDescription(event.target.value)}
+            placeholder="刚刚做了什么？"
+          />
+        </label>
+        <label className="flex items-center gap-1.5 text-[13px] font-semibold">
+          <input
+            type="checkbox"
+            checked={includeLogs}
+            onChange={(event) => setIncludeLogs(event.target.checked)}
+          />
+          <span>{logLabel}</span>
+        </label>
+        <p className="m-0 mt-1 text-[13px] text-[var(--platform-text-soft)]">
+          将上传选中的脱敏错误信息、可选的应用诊断日志和你填写的说明；不包含截图或项目文件。
+        </p>
+        {status ? <p role="status">{status}</p> : null}
+      </div>
+      <footer className="flex items-center justify-end gap-3">
+        <button
+          className="cursor-pointer rounded-[9px] border-0 px-3.5 py-[9px]"
+          type="button"
+          onClick={onClose}
+          disabled={busy}
+        >
+          取消
+        </button>
+        <button
+          className="cursor-pointer rounded-[9px] border-0 bg-[var(--platform-button-primary-fill)] px-3.5 py-[9px] text-[var(--platform-button-primary-text)]"
+          type="button"
+          onClick={() => void submit()}
+          disabled={
+            busy ||
+            !selectedFingerprints.size ||
+            !logsReady ||
+            (includeLogs && logsError)
+          }
+        >
+          {busy ? '提交中…' : '提交报告'}
+        </button>
+      </footer>
+    </ThemedModal>
+  );
+}
diff --git a/apps/ai-game-creator-shell/src/components/error-report/ErrorReportNotice.tsx b/apps/ai-game-creator-shell/src/components/error-report/ErrorReportNotice.tsx
new file mode 100644
index 000000000..fe0c6abdc
--- /dev/null
+++ b/apps/ai-game-creator-shell/src/components/error-report/ErrorReportNotice.tsx
@@ -0,0 +1,111 @@
+import { useCallback, useEffect, useRef, useState } from 'react';
+
+import {
+  ackClientErrorEventsWithRetry,
+  type ClientErrorEvent,
+  getPendingClientErrorEvents,
+  subscribeClientErrorEvents,
+} from '../../services/errorReporting';
+import { ErrorReportDialog } from './ErrorReportDialog';
+
+export function ErrorReportNotice() {
+  const [notificationEvents, setNotificationEvents] = useState<
+    ClientErrorEvent[]
+  >([]);
+  const [reportEvents, setReportEvents] = useState<ClientErrorEvent[]>([]);
+
+  const requestId = useRef(0);
+  const retryTimer = useRef<number | null>(null);
+  const loadEvents = useCallback(() => {
+    if (retryTimer.current !== null) {
+      window.clearTimeout(retryTimer.current);
+      retryTimer.current = null;
+    }
+    const currentRequest = ++requestId.current;
+    const retryDelays = [500, 1_000, 2_000];
+    const run = async (attempt: number): Promise<void> => {
+      try {
+        const events = await getPendingClientErrorEvents();
+        if (currentRequest !== requestId.current) return;
+        setNotificationEvents(events);
+      } catch {
+        if (
+          currentRequest !== requestId.current ||
+          attempt >= retryDelays.length
+        )
+          return;
+        retryTimer.current = window.setTimeout(() => {
+          retryTimer.current = null;
+          void run(attempt + 1);
+        }, retryDelays[attempt]);
+      }
+    };
+    void run(0);
+  }, []);
+
+  useEffect(() => {
+    const handleVisibilityChange = () => {
+      if (document.visibilityState === 'visible') loadEvents();
+    };
+    const handleFocus = () => loadEvents();
+    loadEvents();
+    document.addEventListener('visibilitychange', handleVisibilityChange);
+    window.addEventListener('focus', handleFocus);
+    const unsubscribe = subscribeClientErrorEvents(loadEvents);
+    return () => {
+      unsubscribe();
+      requestId.current += 1;
+      if (retryTimer.current !== null) {
+        window.clearTimeout(retryTimer.current);
+        retryTimer.current = null;
+      }
+      document.removeEventListener('visibilitychange', handleVisibilityChange);
+      window.removeEventListener('focus', handleFocus);
+    };
+  }, [loadEvents]);
+
+  const openReport = () => {
+    setReportEvents(notificationEvents);
+    setNotificationEvents([]);
+  };
+
+  return (
+    <>
+      {notificationEvents.length ? (
+        <aside
+          className="fixed top-[calc(var(--window-chrome-height)+14px)] right-4 z-40 flex max-w-[min(420px,calc(100vw-2rem))] items-center gap-2.5 rounded-xl border border-[var(--platform-surface-border)] bg-[var(--platform-subpanel-fill)] px-3.5 py-3 text-[var(--platform-text-strong)] shadow-[0_12px_30px_rgb(36_20_12_/_18%)] max-[560px]:top-[calc(var(--window-chrome-height)+8px)] max-[560px]:right-2 max-[560px]:left-2 max-[560px]:max-w-none"
+          role="status"
+          aria-live="polite"
+        >
+          <span className="flex-[1_1_auto]">
+            发现 {notificationEvents.length} 个问题
+          </span>
+          <button
+            className="min-h-9 cursor-pointer rounded-lg border-0 bg-[var(--platform-button-primary-fill)] px-2.5 text-[var(--platform-button-primary-text)] last:w-9 last:bg-transparent last:px-0 last:text-xl last:text-[var(--platform-text-soft)]"
+            type="button"
+            onClick={openReport}
+          >
+            查看并报告
+          </button>
+          <button
+            className="min-h-9 cursor-pointer rounded-lg border-0 bg-[var(--platform-button-primary-fill)] px-2.5 text-[var(--platform-button-primary-text)] last:w-9 last:bg-transparent last:px-0 last:text-xl last:text-[var(--platform-text-soft)]"
+            type="button"
+            onClick={() => {
+              const dismissed = notificationEvents;
+              setNotificationEvents([]);
+              void ackClientErrorEventsWithRetry(dismissed);
+            }}
+            aria-label="忽略"
+          >
+            ×
+          </button>
+        </aside>
+      ) : null}
+      <ErrorReportDialog
+        open={reportEvents.length > 0}
+        events={reportEvents}
+        onClose={() => setReportEvents([])}
+      />
+    </>
+  );
+}
diff --git a/apps/ai-game-creator-shell/src/features/project-summary/projectDeliverySummaries.ts b/apps/ai-game-creator-shell/src/features/project-summary/projectDeliverySummaries.ts
index 61ad15279..0e3d4091c 100644
--- a/apps/ai-game-creator-shell/src/features/project-summary/projectDeliverySummaries.ts
+++ b/apps/ai-game-creator-shell/src/features/project-summary/projectDeliverySummaries.ts
@@ -159,7 +159,7 @@ export function summarizeProjectKnownIssues(
       }；预览 ${previewSummary}`,
       `- 已知问题：${knownIssueSummary}`,
       '- 试玩限制：本地 Web 原型；小范围 5-10 分钟试玩；不承诺账号、云存档、排行榜、付费或长期兼容',
-      '- 反馈入口：单个问题走 /bug-report；整体体验走 /feedback；版本变化走 /release-notes',
+      '- 反馈入口：客户端问题由自动诊断提示；整体体验走 /feedback；版本变化走 /release-notes',
       '- 发送前检查：可试玩状态先 /run；交付口径看 /share；对外资料看 /media-kit',
       '- 边界：只准备已知问题清单；不读取文件；不启动或打开预览；不导出试玩包；不上传云端；不发布作品；不写项目',
       `- 建议：${draftCommand}`,
diff --git a/apps/ai-game-creator-shell/src/features/project-summary/projectGuidanceSummaries.ts b/apps/ai-game-creator-shell/src/features/project-summary/projectGuidanceSummaries.ts
index 245effe3e..2bf3d12f9 100644
--- a/apps/ai-game-creator-shell/src/features/project-summary/projectGuidanceSummaries.ts
+++ b/apps/ai-game-creator-shell/src/features/project-summary/projectGuidanceSummaries.ts
@@ -75,7 +75,6 @@ export function summarizeNextProjectActions(
   addSuggestion('查看隐私与导出边界', '/privacy');
   addSuggestion('查看首批试玩对象', '/audience');
   addSuggestion('准备试玩邀请文案', '/invite');
-  addSuggestion('准备缺陷复现记录', '/bug-report');
   addSuggestion('准备试玩问卷问题', '/survey');
   addSuggestion('准备封面与缩略图检查', '/cover');
   addSuggestion('准备宣传截图清单', '/screenshots');
diff --git a/apps/ai-game-creator-shell/src/features/project-summary/projectPlaytestSummaries.ts b/apps/ai-game-creator-shell/src/features/project-summary/projectPlaytestSummaries.ts
index 18442f17c..53c928a77 100644
--- a/apps/ai-game-creator-shell/src/features/project-summary/projectPlaytestSummaries.ts
+++ b/apps/ai-game-creator-shell/src/features/project-summary/projectPlaytestSummaries.ts
@@ -290,8 +290,8 @@ export function summarizeProjectPlaytestSurvey(
       '- 使用场景：发给首批 3-5 位测试者；每人 5-10 分钟；先自由玩一局再回答',
       '- 问题清单：1. 30 秒内你觉得目标是什么？2. 第一次操作哪里最卡？3. 胜负/重开是否清楚？4. 难度/节奏感觉如何？5. 最想保留和最想改的各一项？',
       '- 记录格式：每题 1-5 分 + 一句话；补充设备、输入方式、是否愿意再玩一局',
-      '- 追踪方式：单个问题走 /bug-report；整体反馈走 /feedback；下一轮改动走 /revise',
-      '- 参考：/invite；/audience；/feedback；/bug-report',
+      '- 追踪方式：客户端问题由自动诊断提示；整体反馈走 /feedback；下一轮改动走 /revise',
+      '- 参考：/invite；/audience；/feedback',
       '- 边界：只准备试玩问卷；不读取文件；不启动或打开预览；不导出试玩包；不写项目',
       `- 建议：${draftCommand}`,
     ].join('\n'),
@@ -557,7 +557,7 @@ export function summarizeProjectPlaytestFaq(
       }；预览 ${previewSummary}`,
       '- 问答清单：1. 这是什么？2. 怎么开始和重开？3. 需要反馈什么？4. 打不开或卡住怎么办？5. 能不能转发或公开？',
       '- 回答口径：早期本地 Web 原型；5-10 分钟试玩；重点反馈目标理解、操作手感、难度、bug 和还想不想再玩',
-      '- 测试者提醒：先自由玩一局；不要评价完成度；问卷走 /survey；单个问题走 /bug-report',
+      '- 测试者提醒：先自由玩一局；不要评价完成度；问卷走 /survey；客户端问题由自动诊断提示',
       '- 交付搭配：/invite；/share；/screenshots；/trailer',
       '- 边界：只准备试玩常见问答；不读取文件；不启动或打开预览；不导出试玩包；不写项目',
       `- 建议：${draftCommand}`,
@@ -624,7 +624,7 @@ export function summarizeProjectCommunityPost(
       `- 短文案：我做了一个早期 Web 小游戏原型《${nextManifest.name}》，核心目标是${goal}。想找 3-5 位朋友试玩 5 分钟，重点看能不能理解目标、操作顺不顺、还想不想再来一局。`,
       '- 长文案结构：一句玩法目标；一张截图或短视频；试玩方式；希望收到的三类反馈；已知限制',
       '- 标签建议：#Web小游戏 #原型试玩 #AI游戏创作 #本地试玩',
-      '- CTA：愿意试玩请回复；遇到问题按 /faq 或 /bug-report 的口径反馈',
+      '- CTA：愿意试玩请回复；遇到问题按 /faq 的口径反馈，客户端问题会自动提示',
       '- 参考：/faq；/screenshots；/trailer；/store；/share',
       '- 边界：只准备社区发布文案；不上传云端；不发布作品；不读取文件；不启动或打开预览；不导出试玩包；不写项目',
       `- 建议：${draftCommand}`,
diff --git a/apps/ai-game-creator-shell/src/features/project-summary/projectQualitySummaries.ts b/apps/ai-game-creator-shell/src/features/project-summary/projectQualitySummaries.ts
index 0057fbb32..d95a6428f 100644
--- a/apps/ai-game-creator-shell/src/features/project-summary/projectQualitySummaries.ts
+++ b/apps/ai-game-creator-shell/src/features/project-summary/projectQualitySummaries.ts
@@ -290,7 +290,7 @@ export function summarizeProjectCompatibilityNotes(
       `- 输入兼容：${inputSummary}`,
       '- 推荐环境：桌面 Chrome / Edge 最新版；本机 127.0.0.1 预览；移动浏览器只做早期体验',
       '- 不承诺：旧浏览器、低端设备、离线模式、云存档、账号同步、手柄或多端数据一致',
-      '- 反馈口径：设备 / 浏览器 / 输入方式 / 截图或录屏；问题记录走 /bug-report',
+      '- 反馈口径：设备 / 浏览器 / 输入方式 / 截图或录屏；客户端检测到问题时会自动提示',
       '- 参考：/mobile；/accessibility；/performance；/known-issues',
       '- 边界：只准备兼容性说明；不读取文件；不启动或打开预览；不导出试玩包；不上传云端；不发布作品；不写项目',
       `- 建议：${draftCommand}`,
diff --git a/apps/ai-game-creator-shell/src/features/project-summary/projectSummaryConstants.ts b/apps/ai-game-creator-shell/src/features/project-summary/projectSummaryConstants.ts
index 24603b619..8329268ae 100644
--- a/apps/ai-game-creator-shell/src/features/project-summary/projectSummaryConstants.ts
+++ b/apps/ai-game-creator-shell/src/features/project-summary/projectSummaryConstants.ts
@@ -123,7 +123,6 @@ export const chatCommandHelp = [
   '/privacy：查看隐私与导出边界',
   '/audience：查看首批试玩对象',
   '/invite：准备试玩邀请文案',
-  '/bug-report：准备缺陷复现记录',
   '/survey：准备试玩问卷问题',
   '/cover：准备封面与缩略图检查',
   '/screenshots：准备宣传截图清单',
diff --git a/apps/ai-game-creator-shell/src/features/project-workspace/projectSummaryCommands.ts b/apps/ai-game-creator-shell/src/features/project-workspace/projectSummaryCommands.ts
index a1e6ff01d..065975c6a 100644
--- a/apps/ai-game-creator-shell/src/features/project-workspace/projectSummaryCommands.ts
+++ b/apps/ai-game-creator-shell/src/features/project-workspace/projectSummaryCommands.ts
@@ -19,7 +19,6 @@ import {
   summarizeProjectBalanceState,
   summarizeProjectBlockers,
   summarizeProjectBrief,
-  summarizeProjectBugReport,
   summarizeProjectCommunityPost,
   summarizeProjectCompatibilityNotes,
   summarizeProjectContextSources,
@@ -506,23 +505,6 @@ export function handleProjectSummaryChatCommand({
     return true;
   }
 
-  if (prompt === '/bug-report') {
-    if (!requireChatProjectForUserAction()) {
-      return true;
-    }
-    const summary = summarizeProjectBugReport(manifest, agentRunTrace);
-    setMessages((current) => [
-      ...current,
-      {
-        role: 'assistant',
-        text: summary.text,
-        draftCommand: summary.draftCommand,
-        draftCommandLabel: summary.draftCommandLabel,
-      },
-    ]);
-    return true;
-  }
-
   if (prompt === '/survey') {
     if (!requireChatProjectForUserAction()) {
       return true;
diff --git a/apps/ai-game-creator-shell/src/services/clientApi.ts b/apps/ai-game-creator-shell/src/services/clientApi.ts
index 2ca39bb4e..90e25572d 100644
--- a/apps/ai-game-creator-shell/src/services/clientApi.ts
+++ b/apps/ai-game-creator-shell/src/services/clientApi.ts
@@ -9,6 +9,7 @@ import {
   unwrapApiResponse,
 } from '../../../../packages/shared/src';
 import { fetchClientHttp } from './clientHttp';
+import { captureClientError } from './errorReporting';
 
 const ACCESS_TOKEN_STORAGE_KEY = 'genarrative.auth.access-token.v1';
 
@@ -56,6 +57,27 @@ async function readApiErrorMessage(response: Response, fallback: string) {
   return fallback;
 }
 
+function captureApiErrorStatus(url: string, response: Response) {
+  if (response.status < 500 && response.status !== 408) return;
+  void captureClientError(
+    new ClientAuthRequestError(`HTTP ${response.status}`, {
+      status: response.status,
+    }),
+    { source: 'api', action: url.split('?')[0] },
+  );
+}
+
+function apiNetworkError(url: string, error: unknown) {
+  void captureClientError(error, {
+    source: 'api',
+    action: url.split('?')[0],
+  });
+  return new ClientAuthRequestError(
+    '无法连接登录服务，请确认配套后端或 API 代理已启动后重试',
+    { networkError: true },
+  );
+}
+
 export async function requestClientApi<T>(
   url: string,
   init: RequestInit,
@@ -77,13 +99,11 @@ export async function requestClientApi<T>(
       credentials: 'same-origin',
       headers,
     });
-  } catch {
-    throw new ClientAuthRequestError(
-      '无法连接登录服务，请确认配套后端或 API 代理已启动后重试',
-      { networkError: true },
-    );
+  } catch (error) {
+    throw apiNetworkError(url, error);
   }
   if (!response.ok) {
+    captureApiErrorStatus(url, response);
     throw new ClientAuthRequestError(
       await readApiErrorMessage(response, fallbackMessage),
       { status: response.status },
@@ -116,13 +136,11 @@ export async function requestClientApiBytes(
       credentials: 'same-origin',
       headers,
     });
-  } catch {
-    throw new ClientAuthRequestError(
-      '无法连接登录服务，请确认配套后端或 API 代理已启动后重试',
-      { networkError: true },
-    );
+  } catch (error) {
+    throw apiNetworkError(url, error);
   }
   if (!response.ok) {
+    captureApiErrorStatus(url, response);
     throw new ClientAuthRequestError(
       await readApiErrorMessage(response, fallbackMessage),
       { status: response.status },
diff --git a/apps/ai-game-creator-shell/src/services/errorReporting.ts b/apps/ai-game-creator-shell/src/services/errorReporting.ts
new file mode 100644
index 000000000..9b9af0027
--- /dev/null
+++ b/apps/ai-game-creator-shell/src/services/errorReporting.ts
@@ -0,0 +1,262 @@
+import { invoke } from '@tauri-apps/api/core';
+
+import { getStoredAuthAccessToken } from './clientAuth';
+import { fetchClientHttp, getClientServerBaseUrl } from './clientHttp';
+import {
+  ackErrorReports,
+  getPendingErrorReports,
+  reportClientError,
+  subscribeErrorReportUpdates,
+} from './errorReportingBridge';
+
+export type ClientErrorEvent = {
+  eventId: string;
+  fingerprint: string;
+  source: string;
+  message: string;
+  stack?: string;
+  occurredAt: string;
+  count: number;
+};
+
+export type DiagnosticLogFile = { name: string; content: string };
+
+type WebviewLogLevel = 'debug' | 'info' | 'warn' | 'error' | 'log';
+
+let fallbackSubmissionSequence = 0;
+
+function createSubmissionId() {
+  return (
+    globalThis.crypto?.randomUUID?.() ??
+    `submission-${Date.now()}-${++fallbackSubmissionSequence}`
+  );
+}
+
+export function shouldCaptureClientError(error: unknown) {
+  if (!error || typeof error !== 'object') return true;
+  const candidate = error as { status?: unknown; networkError?: unknown };
+  if (candidate.networkError === true) return true;
+  if (typeof candidate.status === 'number') {
+    return candidate.status === 408 || candidate.status >= 500;
+  }
+  return true;
+}
+
+export async function invokeDiagnostic<T>(
+  invokeFn: (command: string, args?: Record<string, unknown>) => Promise<T>,
+  command: string,
+  args?: Record<string, unknown>,
+) {
+  try {
+    return await invokeFn(command, args);
+  } catch (error) {
+    void captureClientError(error, { source: 'tauri', action: command });
+    throw error;
+  }
+}
+
+function normalizeDiagnosticText(value: string) {
+  return value
+    .replace(
+      /authorization\s*:\s*(?:bearer\s+)?\S+/giu,
+      'authorization: [REDACTED]',
+    )
+    .replace(/bearer\s+\S+/giu, 'Bearer [REDACTED]')
+    .replace(/(?:api[_-]?key|token)\s*[=:]\s*\S+/giu, '[REDACTED]')
+    .replace(/https?:\/\/\S+/giu, '<url>')
+    .replace(/[A-Z]:\\[^\s]+|\/(?:Users|home|private|tmp)\/[^\s]+/giu, '<path>')
+    .replace(/\b[0-9a-f]{8,}\b/giu, '<id>');
+}
+
+export async function captureClientError(
+  error: unknown,
+  context: { source?: string; action?: string; page?: string } = {},
+) {
+  const errorValue = error instanceof Error ? error : new Error(String(error));
+  const message = errorValue.message || '未知客户端错误';
+  const stack = errorValue.stack ? errorValue.stack.slice(0, 8_000) : undefined;
+  return reportClientError({
+    source: context.source ?? 'client',
+    message,
+    stack,
+    action: context.action,
+    page: context.page,
+  }).catch(() => undefined);
+}
+
+export function captureAgentRuntimeError(error: unknown, agentId: string) {
+  return captureClientError(error, {
+    source: 'agent-runtime',
+    action: 'agent-runtime',
+    page: agentId,
+  });
+}
+
+function formatConsoleArgument(value: unknown) {
+  if (value instanceof Error) return value.stack || value.message;
+  if (typeof value === 'string') return value;
+  try {
+    return JSON.stringify(value);
+  } catch {
+    return String(value);
+  }
+}
+
+export function appendWebviewLog(level: WebviewLogLevel, values: unknown[]) {
+  const message = normalizeDiagnosticText(
+    values.map(formatConsoleArgument).join(' ').slice(0, 8_000),
+  );
+  void invoke('append_application_log', {
+    level,
+    source: 'webview',
+    message,
+  }).catch(() => {
+    // 浏览器预览或 Tauri 尚未初始化时不阻断主流程。
+  });
+}
+
+/** 将 WebView console 输出镜像到 Rust 的普通文本 application.log。 */
+export function installWebviewLogBridge() {
+  const marker = '__agcWebviewLogBridgeInstalled';
+  const target = globalThis as typeof globalThis & { [marker]?: boolean };
+  const targetConsole = globalThis.console;
+  if (target[marker] || !targetConsole) return () => {};
+  target[marker] = true;
+  const levels: WebviewLogLevel[] = ['debug', 'info', 'warn', 'error', 'log'];
+  const originals = new Map<WebviewLogLevel, (...args: unknown[]) => void>();
+  for (const level of levels) {
+    const original = targetConsole[level].bind(targetConsole) as (
+      ...args: unknown[]
+    ) => void;
+    originals.set(level, original);
+    targetConsole[level] = (...args: unknown[]) => {
+      original(...args);
+      appendWebviewLog(level, args);
+    };
+  }
+  return () => {
+    for (const level of levels) {
+      const original = originals.get(level);
+      if (original) targetConsole[level] = original;
+    }
+    delete target[marker];
+  };
+}
+
+export function getPendingClientErrorEvents() {
+  return getPendingErrorReports();
+}
+
+export function subscribeClientErrorEvents(listener: () => void) {
+  let disposed = false;
+  let unlisten: (() => void) | undefined;
+  void subscribeErrorReportUpdates(() => {
+    if (!disposed) listener();
+  })
+    .then((stop) => {
+      if (disposed) stop();
+      else unlisten = stop;
+    })
+    .catch(() => {
+      // Browser previews and partially initialized native webviews do not have
+      // an event bridge; snapshots and focus/visibility refreshes remain the
+      // source of truth in those environments.
+    });
+  return () => {
+    disposed = true;
+    unlisten?.();
+  };
+}
+
+export async function readApplicationDiagnosticLogs(): Promise<
+  DiagnosticLogFile[]
+> {
+  return invoke<DiagnosticLogFile[]>('read_diagnostic_logs');
+}
+
+export async function submitErrorReportBatch(
+  payload: {
+    events: ClientErrorEvent[];
+    userDescription?: string;
+    logs: DiagnosticLogFile[];
+    submissionId?: string;
+  },
+  apiBaseUrl = getClientServerBaseUrl(),
+) {
+  const token = getStoredAuthAccessToken();
+  if (!token) throw new Error('请先登录后再提交错误报告');
+  const response = await fetchClientHttp(
+    '/api/error-reports',
+    {
+      method: 'POST',
+      credentials: 'same-origin',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json',
+        Accept: 'application/json',
+      },
+      body: JSON.stringify({
+        schemaVersion: 1,
+        submissionId: payload.submissionId ?? createSubmissionId(),
+        events: payload.events,
+        userDescription: payload.userDescription?.trim() || null,
+        logs: payload.logs,
+      }),
+    },
+    { serverBaseUrl: apiBaseUrl },
+  );
+  if (!response.ok) {
+    throw new Error(`错误报告提交失败（${response.status}）`);
+  }
+  const result = (await response.json()) as { data?: unknown };
+  return result.data ?? result;
+}
+
+const stableSubmissionIds = new Map<string, string>();
+
+function errorEventKey(events: ClientErrorEvent[]) {
+  return events
+    .map((event) => event.eventId)
+    .sort()
+    .join('\u0000');
+}
+
+export function getStableErrorReportSubmissionId(events: ClientErrorEvent[]) {
+  const key = errorEventKey(events);
+  const existing = stableSubmissionIds.get(key);
+  if (existing) return existing;
+  const submissionId = createSubmissionId();
+  stableSubmissionIds.set(key, submissionId);
+  return submissionId;
+}
+
+export async function markClientErrorEventsSubmitted(
+  events: ClientErrorEvent[],
+) {
+  await ackErrorReports(events.map((event) => event.eventId));
+  stableSubmissionIds.delete(errorEventKey(events));
+}
+
+export async function ackClientErrorEventsWithRetry(
+  events: ClientErrorEvent[],
+) {
+  for (const [attempt, delay] of [0, 500, 1_000, 2_000].entries()) {
+    if (delay) await new Promise((resolve) => setTimeout(resolve, delay));
+    try {
+      await markClientErrorEventsSubmitted(events);
+      return;
+    } catch (error) {
+      console.warn(
+        `[error-report] 本地 ack 第 ${attempt + 1} 次失败，将继续重试`,
+        error,
+      );
+    }
+  }
+  console.warn('[error-report] 本地 ack 重试耗尽，事件仍保留在本地队列');
+}
+
+/** 仅供单元测试隔离进程内错误池；生产流程不调用。 */
+export function resetClientErrorEventsForTests() {
+  // Rust 队列按进程生命周期管理；测试通过 fake bridge 重建进程内状态。
+  stableSubmissionIds.clear();
+}
diff --git a/apps/ai-game-creator-shell/src/services/errorReportingBridge.ts b/apps/ai-game-creator-shell/src/services/errorReportingBridge.ts
new file mode 100644
index 000000000..1e36fb9ee
--- /dev/null
+++ b/apps/ai-game-creator-shell/src/services/errorReportingBridge.ts
@@ -0,0 +1,63 @@
+import { invoke } from '@tauri-apps/api/core';
+import { listen, type UnlistenFn } from '@tauri-apps/api/event';
+
+import type { ClientErrorEvent } from './errorReporting';
+
+type RustErrorReportEvent = ClientErrorEvent & {
+  lastOccurredAt?: string;
+};
+
+export type ErrorReportUpdate = {
+  generation: number;
+};
+
+export function reportClientError(input: {
+  source: string;
+  message: string;
+  stack?: string;
+  action?: string;
+  page?: string;
+}) {
+  return invoke<RustErrorReportEvent>('report_client_error', input);
+}
+export function getPendingErrorReports() {
+  return invoke<RustErrorReportEvent[]>('get_pending_error_reports');
+}
+
+export function ackErrorReports(eventIds: string[]) {
+  return invoke<void>('ack_error_reports', { eventIds });
+}
+
+export function subscribeErrorReportUpdates(
+  listener: () => void,
+): Promise<UnlistenFn> {
+  const handleUpdate = (event: { payload: ErrorReportUpdate }) => {
+    void event.payload;
+    listener();
+  };
+
+  // 客户端也会运行在浏览器预览和 Vitest 的 jsdom 中。Tauri API 模块默认
+  // `__TAURI_INTERNALS__` 已存在，缺失时会拒绝，因此原生 WebView 之外保持
+  // 桥接为空操作。启用 `withGlobalTauri` 时优先使用全局桥接，让测试替身与
+  // 客户端其它事件订阅复用同一入口。
+  if (typeof window !== 'undefined') {
+    const globalListen = window.__TAURI__?.event?.listen;
+    if (globalListen) {
+      return globalListen('error-report-updated', handleUpdate).catch(
+        () => () => {},
+      );
+    }
+
+    const internals = (window as Window & { __TAURI_INTERNALS__?: unknown })
+      .__TAURI_INTERNALS__;
+    if (!internals) {
+      return Promise.resolve(() => {});
+    }
+  } else {
+    return Promise.resolve(() => {});
+  }
+
+  return listen<ErrorReportUpdate>('error-report-updated', handleUpdate).catch(
+    () => () => {},
+  );
+}
diff --git a/apps/ai-game-creator-shell/tests/ErrorReportNotice.test.tsx b/apps/ai-game-creator-shell/tests/ErrorReportNotice.test.tsx
new file mode 100644
index 000000000..37e80b642
--- /dev/null
+++ b/apps/ai-game-creator-shell/tests/ErrorReportNotice.test.tsx
@@ -0,0 +1,67 @@
+/** @vitest-environment jsdom */
+
+import { cleanup, render, screen, waitFor } from '@testing-library/react';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+
+const mockState = vi.hoisted(() => ({
+  getPending: vi.fn(),
+  listeners: [] as Array<() => void>,
+}));
+
+vi.mock('../src/services/errorReporting', () => ({
+  getPendingClientErrorEvents: mockState.getPending,
+  subscribeClientErrorEvents: (listener: () => void) => {
+    mockState.listeners.push(listener);
+    return () => {
+      mockState.listeners = mockState.listeners.filter(
+        (item) => item !== listener,
+      );
+    };
+  },
+}));
+
+vi.mock('../src/components/error-report/ErrorReportDialog', () => ({
+  ErrorReportDialog: () => null,
+}));
+
+import { ErrorReportNotice } from '../src/components/error-report/ErrorReportNotice';
+
+const event = {
+  eventId: 'rust-error-1',
+  fingerprint: 'fingerprint-1',
+  source: 'test',
+  message: '错过 emit 的错误',
+  occurredAt: '1',
+  count: 1,
+};
+
+describe('ErrorReportNotice', () => {
+  afterEach(() => {
+    cleanup();
+    mockState.getPending.mockReset();
+    mockState.listeners = [];
+  });
+
+  it('挂载时查询快照，即使错过唤醒事件也能显示通知', async () => {
+    mockState.getPending.mockResolvedValue([event]);
+
+    render(<ErrorReportNotice />);
+
+    expect(await screen.findByText('发现 1 个问题')).toBeTruthy();
+    expect(mockState.getPending).toHaveBeenCalledTimes(1);
+  });
+
+  it('收到唤醒后重新查询权威快照', async () => {
+    mockState.getPending
+      .mockResolvedValueOnce([])
+      .mockResolvedValueOnce([event]);
+
+    render(<ErrorReportNotice />);
+    await waitFor(() => expect(mockState.getPending).toHaveBeenCalledTimes(1));
+
+    mockState.listeners[0]?.();
+
+    expect(await screen.findByText('发现 1 个问题')).toBeTruthy();
+    expect(mockState.getPending).toHaveBeenCalledTimes(2);
+  });
+});
diff --git a/apps/ai-game-creator-shell/tests/appSurface/developer-agent-window.suite.ts b/apps/ai-game-creator-shell/tests/appSurface/developer-agent-window.suite.ts
index 8e9a651ba..edb340240 100644
--- a/apps/ai-game-creator-shell/tests/appSurface/developer-agent-window.suite.ts
+++ b/apps/ai-game-creator-shell/tests/appSurface/developer-agent-window.suite.ts
@@ -5072,7 +5072,6 @@ export function registerDeveloperToolsTests() {
     expect(screen.getByText(/\/privacy：查看隐私与导出边界/)).not.toBeNull();
     expect(screen.getByText(/\/audience：查看首批试玩对象/)).not.toBeNull();
     expect(screen.getByText(/\/invite：准备试玩邀请文案/)).not.toBeNull();
-    expect(screen.getByText(/\/bug-report：准备缺陷复现记录/)).not.toBeNull();
     expect(screen.getByText(/\/survey：准备试玩问卷问题/)).not.toBeNull();
     expect(screen.getByText(/\/cover：准备封面与缩略图检查/)).not.toBeNull();
     expect(screen.getByText(/\/screenshots：准备宣传截图清单/)).not.toBeNull();
diff --git a/apps/ai-game-creator-shell/tests/appSurface/plan-gdd.suite.ts b/apps/ai-game-creator-shell/tests/appSurface/plan-gdd.suite.ts
index fe387dd7d..d63bb13b1 100644
--- a/apps/ai-game-creator-shell/tests/appSurface/plan-gdd.suite.ts
+++ b/apps/ai-game-creator-shell/tests/appSurface/plan-gdd.suite.ts
@@ -250,13 +250,15 @@ export function registerPlanGddApprovalTests() {
 
     const dialog = openReviseDialog();
     const textarea = typeComment(dialog, '战斗节奏太慢，请压缩到三个回合');
-    expect(
-      (
-        within(dialog).getByRole('button', {
-          name: '提交决定',
-        }) as HTMLButtonElement
-      ).disabled,
-    ).toBe(false);
+    await waitFor(() => {
+      expect(
+        (
+          within(dialog).getByRole('button', {
+            name: '提交决定',
+          }) as HTMLButtonElement
+        ).disabled,
+      ).toBe(false);
+    });
 
     // 弹层是打开之后才被后台 hydrate 翻掉决定资格的：触发按钮的 disabled 管不到它。
     harness.setPlanGddState(createPlanGddStateView({ recoveryPending: true }));
diff --git a/apps/ai-game-creator-shell/tests/appSurface/project-preview/preview-shortcuts/assert-playtest-and-release-shortcuts.ts b/apps/ai-game-creator-shell/tests/appSurface/project-preview/preview-shortcuts/assert-playtest-and-release-shortcuts.ts
index a1a1b50f8..cbcc6989f 100644
--- a/apps/ai-game-creator-shell/tests/appSurface/project-preview/preview-shortcuts/assert-playtest-and-release-shortcuts.ts
+++ b/apps/ai-game-creator-shell/tests/appSurface/project-preview/preview-shortcuts/assert-playtest-and-release-shortcuts.ts
@@ -46,7 +46,6 @@ export async function assertPlaytestAndReleaseShortcutFlow(
   expect(screen.getByText(/查看隐私与导出边界：\/privacy/)).not.toBeNull();
   expect(screen.getByText(/查看首批试玩对象：\/audience/)).not.toBeNull();
   expect(screen.getByText(/准备试玩邀请文案：\/invite/)).not.toBeNull();
-  expect(screen.getByText(/准备缺陷复现记录：\/bug-report/)).not.toBeNull();
   expect(screen.getByText(/准备试玩问卷问题：\/survey/)).not.toBeNull();
   expect(screen.getByText(/准备封面与缩略图检查：\/cover/)).not.toBeNull();
   expect(screen.getByText(/准备宣传截图清单：\/screenshots/)).not.toBeNull();
@@ -647,40 +646,6 @@ export async function assertPlaytestAndReleaseShortcutFlow(
       ([command]) => command === 'control_agent_run',
     ).length,
   };
-  submitChat('/bug-report');
-  const bugReportMessages = await screen.findAllByText(/缺陷记录：/);
-  const bugReportMessage = bugReportMessages[bugReportMessages.length - 1];
-  expect(bugReportMessage.textContent).toContain('项目：未命名游戏原型');
-  expect(bugReportMessage.textContent).toContain(
-    'Run：run-main-shortcut-trace · passed / done · 1/3 轮 · evaluator-passed',
-  );
-  expect(bugReportMessage.textContent).toContain(
-    '复现入口：预览 未启动 · 建议 /run',
-  );
-  expect(bugReportMessage.textContent).toContain('最近试玩证据：暂无');
-  expect(bugReportMessage.textContent).toContain(
-    '记录模板：问题一句话；复现步骤 1/2/3；期望结果；实际结果；设备/输入方式；严重度 阻断/高/中/低；附件 截图/录屏/日志时间点',
-  );
-  expect(bugReportMessage.textContent).toContain(
-    '优先级口径：阻断无法进入首局；高影响胜负或重开；中影响理解或手感；低为包装和文字问题',
-  );
-  expect(bugReportMessage.textContent).toContain(
-    '转修复草稿：/agent-resume 缺陷修复：现象…；复现…；期望…；实际…',
-  );
-  expect(bugReportMessage.textContent).toContain(
-    '参考：/test-plan；/feedback；/review；/logs',
-  );
-  expect(bugReportMessage.textContent).toContain(
-    '边界：只准备缺陷记录模板；不读取文件；不启动或打开预览；不导出试玩包；不写项目',
-  );
-  expect(bugReportMessage.textContent).toContain('建议：/run');
-  const bugReportMessageList = document.querySelector('.message-list');
-  expect(bugReportMessageList).not.toBeNull();
-  const bugReportDraftButtons = within(
-    bugReportMessageList as HTMLElement,
-  ).getAllByRole('button', { name: '启动试玩' });
-  fireEvent.click(bugReportDraftButtons[bugReportDraftButtons.length - 1]);
-  expect(screen.getByLabelText('创作想法')).toHaveProperty('value', '/run');
   expect(
     invoke.mock.calls.filter(
       ([command]) => command === 'get_local_game_manifest',
@@ -772,10 +737,10 @@ export async function assertPlaytestAndReleaseShortcutFlow(
     '记录格式：每题 1-5 分 + 一句话；补充设备、输入方式、是否愿意再玩一局',
   );
   expect(surveyMessage.textContent).toContain(
-    '追踪方式：单个问题走 /bug-report；整体反馈走 /feedback；下一轮改动走 /revise',
+    '追踪方式：客户端问题由自动诊断提示；整体反馈走 /feedback；下一轮改动走 /revise',
   );
   expect(surveyMessage.textContent).toContain(
-    '参考：/invite；/audience；/feedback；/bug-report',
+    '参考：/invite；/audience；/feedback',
   );
   expect(surveyMessage.textContent).toContain(
     '边界：只准备试玩问卷；不读取文件；不启动或打开预览；不导出试玩包；不写项目',
@@ -1204,7 +1169,7 @@ export async function assertPlaytestAndReleaseShortcutFlow(
     '回答口径：早期本地 Web 原型；5-10 分钟试玩；重点反馈目标理解、操作手感、难度、bug 和还想不想再玩',
   );
   expect(faqMessage.textContent).toContain(
-    '测试者提醒：先自由玩一局；不要评价完成度；问卷走 /survey；单个问题走 /bug-report',
+    '测试者提醒：先自由玩一局；不要评价完成度；问卷走 /survey；客户端问题由自动诊断提示',
   );
   expect(faqMessage.textContent).toContain(
     '交付搭配：/invite；/share；/screenshots；/trailer',
@@ -1315,7 +1280,7 @@ export async function assertPlaytestAndReleaseShortcutFlow(
     '标签建议：#Web小游戏 #原型试玩 #AI游戏创作 #本地试玩',
   );
   expect(postMessage.textContent).toContain(
-    'CTA：愿意试玩请回复；遇到问题按 /faq 或 /bug-report 的口径反馈',
+    'CTA：愿意试玩请回复；遇到问题按 /faq 的口径反馈，客户端问题会自动提示',
   );
   expect(postMessage.textContent).toContain(
     '参考：/faq；/screenshots；/trailer；/store；/share',
@@ -1754,7 +1719,7 @@ export async function assertPlaytestAndReleaseShortcutFlow(
     '试玩限制：本地 Web 原型；小范围 5-10 分钟试玩；不承诺账号、云存档、排行榜、付费或长期兼容',
   );
   expect(knownIssueMessage.textContent).toContain(
-    '反馈入口：单个问题走 /bug-report；整体体验走 /feedback；版本变化走 /release-notes',
+    '反馈入口：客户端问题由自动诊断提示；整体体验走 /feedback；版本变化走 /release-notes',
   );
   expect(knownIssueMessage.textContent).toContain(
     '发送前检查：可试玩状态先 /run；交付口径看 /share；对外资料看 /media-kit',
diff --git a/apps/ai-game-creator-shell/tests/appSurface/project-preview/preview-shortcuts/assert-project-and-design-shortcuts.ts b/apps/ai-game-creator-shell/tests/appSurface/project-preview/preview-shortcuts/assert-project-and-design-shortcuts.ts
index 97418c335..1aba097b3 100644
--- a/apps/ai-game-creator-shell/tests/appSurface/project-preview/preview-shortcuts/assert-project-and-design-shortcuts.ts
+++ b/apps/ai-game-creator-shell/tests/appSurface/project-preview/preview-shortcuts/assert-project-and-design-shortcuts.ts
@@ -916,7 +916,7 @@ export async function assertProjectAndDesignShortcutFlow(
     '不承诺：旧浏览器、低端设备、离线模式、云存档、账号同步、手柄或多端数据一致',
   );
   expect(compatibilityMessage.textContent).toContain(
-    '反馈口径：设备 / 浏览器 / 输入方式 / 截图或录屏；问题记录走 /bug-report',
+    '反馈口径：设备 / 浏览器 / 输入方式 / 截图或录屏；客户端检测到问题时会自动提示',
   );
   expect(compatibilityMessage.textContent).toContain(
     '参考：/mobile；/accessibility；/performance；/known-issues',
diff --git a/apps/ai-game-creator-shell/tests/errorReporting.test.ts b/apps/ai-game-creator-shell/tests/errorReporting.test.ts
new file mode 100644
index 000000000..3518def4a
--- /dev/null
+++ b/apps/ai-game-creator-shell/tests/errorReporting.test.ts
@@ -0,0 +1,232 @@
+/** @vitest-environment jsdom */
+
+import { afterEach, describe, expect, it, vi } from 'vitest';
+
+type FakeErrorEvent = {
+  eventId: string;
+  fingerprint: string;
+  source: string;
+  message: string;
+  stack?: string;
+  occurredAt: string;
+  count: number;
+};
+
+const fakeRustQueue = vi.hoisted(() => {
+  const events = new Map<string, FakeErrorEvent>();
+  let sequence = 0;
+  return {
+    events,
+    get sequence() {
+      return sequence;
+    },
+    next() {
+      sequence += 1;
+      return sequence;
+    },
+    reset() {
+      events.clear();
+      sequence = 0;
+    },
+  };
+});
+
+vi.mock('@tauri-apps/api/core', () => ({
+  invoke: vi.fn(async (command: string, args?: Record<string, unknown>) => {
+    if (command === 'report_client_error') {
+      const fingerprint = `${args?.source ?? 'client'}|${args?.action ?? ''}|${args?.page ?? ''}|${args?.message ?? ''}`;
+      const existing = fakeRustQueue.events.get(fingerprint);
+      if (existing) {
+        existing.count += 1;
+        return existing;
+      }
+      const event = {
+        eventId: `rust-error-${fakeRustQueue.next()}`,
+        fingerprint,
+        source: String(args?.source ?? 'client'),
+        message: String(args?.message ?? ''),
+        stack: typeof args?.stack === 'string' ? args.stack : undefined,
+        occurredAt: '1',
+        count: 1,
+      };
+      if (fakeRustQueue.events.size >= 100) {
+        const oldest = fakeRustQueue.events.keys().next().value;
+        if (oldest) fakeRustQueue.events.delete(oldest);
+      }
+      fakeRustQueue.events.set(fingerprint, event);
+      return event;
+    }
+    if (command === 'get_pending_error_reports')
+      return [...fakeRustQueue.events.values()];
+    if (command === 'ack_error_reports') {
+      for (const event of fakeRustQueue.events.values()) {
+        const eventIds = Array.isArray(args?.eventIds) ? args.eventIds : [];
+        if (eventIds.includes(event.eventId))
+          fakeRustQueue.events.delete(event.fingerprint);
+      }
+      return undefined;
+    }
+    return undefined;
+  }),
+}));
+vi.mock('../src/services/clientAuth', () => ({
+  getStoredAuthAccessToken: vi.fn(() => 'test-token'),
+}));
+vi.mock('../src/services/clientHttp', () => ({
+  fetchClientHttp: vi.fn(),
+  getClientServerBaseUrl: vi.fn(() => 'https://example.test'),
+}));
+
+import { invoke } from '@tauri-apps/api/core';
+
+import { fetchClientHttp } from '../src/services/clientHttp';
+import {
+  ackClientErrorEventsWithRetry,
+  captureAgentRuntimeError,
+  captureClientError,
+  getPendingClientErrorEvents,
+  getStableErrorReportSubmissionId,
+  installWebviewLogBridge,
+  markClientErrorEventsSubmitted,
+  resetClientErrorEventsForTests,
+  shouldCaptureClientError,
+  submitErrorReportBatch,
+  subscribeClientErrorEvents,
+} from '../src/services/errorReporting';
+
+describe('客户端错误报告池', () => {
+  afterEach(() => {
+    fakeRustQueue.reset();
+    resetClientErrorEventsForTests();
+    vi.clearAllMocks();
+  });
+
+  it('按 fingerprint 合并重复错误并累计次数', async () => {
+    const first = await captureClientError(new Error('重复错误'), {
+      source: 'test',
+    });
+    const second = await captureClientError(new Error('重复错误'), {
+      source: 'test',
+    });
+
+    expect(second.eventId).toBe(first.eventId);
+    expect(await getPendingClientErrorEvents()).toHaveLength(1);
+    expect((await getPendingClientErrorEvents())[0]?.count).toBe(2);
+  });
+
+  it('使用统一上下文采集 Agent Runtime 错误', async () => {
+    await captureAgentRuntimeError(
+      new Error('kind=codex-app-server-other fingerprint=dynamic chars=12'),
+      'project-supervisor',
+    );
+
+    expect(invoke).toHaveBeenCalledWith('report_client_error', {
+      source: 'agent-runtime',
+      message: 'kind=codex-app-server-other fingerprint=dynamic chars=12',
+      stack: expect.any(String),
+      action: 'agent-runtime',
+      page: 'project-supervisor',
+    });
+  });
+
+  it('限制当前进程错误池最多保留 100 条', async () => {
+    for (let index = 0; index < 101; index += 1) {
+      await captureClientError(new Error(`错误 ${index}`), { source: 'test' });
+    }
+    expect(await getPendingClientErrorEvents()).toHaveLength(100);
+  });
+
+  it('提交成功后只清除本次提交的事件', async () => {
+    const first = await captureClientError(new Error('第一个错误'), {
+      source: 'test',
+    });
+    const second = await captureClientError(new Error('第二个错误'), {
+      source: 'test',
+    });
+    vi.mocked(fetchClientHttp).mockResolvedValue(
+      new Response(JSON.stringify({ data: { batchId: 'batch-1' } }), {
+        status: 200,
+      }),
+    );
+
+    await submitErrorReportBatch({ events: [first], logs: [] });
+    await markClientErrorEventsSubmitted([first]);
+
+    expect(await getPendingClientErrorEvents()).toEqual([second]);
+  });
+
+  it('同一批事件复用稳定 submissionId', async () => {
+    const event = await captureClientError(new Error('可重试错误'), {
+      source: 'test',
+    });
+    const firstId = getStableErrorReportSubmissionId([event]);
+    const secondId = getStableErrorReportSubmissionId([event]);
+
+    expect(secondId).toBe(firstId);
+  });
+
+  it('本地 ack 失败时自动重试且不向调用方抛错', async () => {
+    vi.useFakeTimers();
+    const event = await captureClientError(new Error('ack 重试错误'), {
+      source: 'test',
+    });
+    vi.mocked(invoke)
+      .mockRejectedValueOnce(new Error('暂时不可用'))
+      .mockResolvedValueOnce(undefined);
+
+    const pending = ackClientErrorEventsWithRetry([event]);
+    await vi.advanceTimersByTimeAsync(500);
+    await pending;
+
+    expect(invoke).toHaveBeenCalledWith('ack_error_reports', {
+      eventIds: [event.eventId],
+    });
+    expect(
+      vi
+        .mocked(invoke)
+        .mock.calls.filter(([command]) => command === 'ack_error_reports'),
+    ).toHaveLength(2);
+    vi.useRealTimers();
+  });
+
+  it('未登录时拒绝提交且不发请求', async () => {
+    const auth = await import('../src/services/clientAuth');
+    vi.mocked(auth.getStoredAuthAccessToken).mockReturnValue('');
+
+    await expect(
+      submitErrorReportBatch({ events: [], logs: [] }),
+    ).rejects.toThrow('请先登录');
+    expect(fetchClientHttp).not.toHaveBeenCalled();
+  });
+
+  it('只采集网络错误、408 和 5xx', () => {
+    expect(shouldCaptureClientError({ status: 400 })).toBe(false);
+    expect(shouldCaptureClientError({ status: 401 })).toBe(false);
+    expect(shouldCaptureClientError({ status: 429 })).toBe(false);
+    expect(shouldCaptureClientError({ status: 408 })).toBe(true);
+    expect(shouldCaptureClientError({ status: 503 })).toBe(true);
+    expect(shouldCaptureClientError({ networkError: true })).toBe(true);
+  });
+
+  it('将 WebView console 输出写入普通文本日志 command', async () => {
+    const consoleInfo = vi.spyOn(console, 'info').mockImplementation(() => {});
+    const uninstall = installWebviewLogBridge();
+    console.info('hello', { count: 1 });
+    await Promise.resolve();
+    expect(invoke).toHaveBeenCalledWith('append_application_log', {
+      level: 'info',
+      source: 'webview',
+      message: 'hello {"count":1}',
+    });
+    uninstall();
+    consoleInfo.mockRestore();
+  });
+
+  it('浏览器预览中订阅错误事件不会产生未处理拒绝', async () => {
+    delete window.__TAURI__;
+
+    const unsubscribe = subscribeClientErrorEvents(vi.fn());
+    unsubscribe();
+    await Promise.resolve();
+  });
+});
diff --git a/docs/README.md b/docs/README.md
index 617391289..8492cccb9 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -25,6 +25,7 @@
 - [DirectProject 本轮附件路径映射](./technical/【技术方案】DirectProject本轮附件路径映射-2026-08-31.md)：Direct 首轮只映射附件原名与项目相对路径，不灌正文、不区别 GDD。
 - [Direct 回合行为审计账本](./technical/【技术方案】Direct回合行为审计账本-2026-08-31.md)：Direct GUI 回合把 native 读 / MCP / 写文件落成项目内有界时间线，用于判断有没有打开本轮附件。
 - [项目开发工作台 PRD](./prd/【AI游戏创作】项目开发工作台PRD-2026-07-20.md)：当前工作台页面和验收边界。
+- [AGC 错误报告与诊断上传](./technical/【技术方案】AGC错误报告与诊断上传-2026-08-31.md)：当前进程错误事件、应用级日志和管理员查看器合同。
 - [立项策划 Agent（Fast GDD）](<./technical/【技术方案】立项策划Agent（Fast GDD）-2026-08-10.md>)：当前策划入口、审批和恢复合同。
 - [GameAgent 资源自由画板与快速编辑](./technical/【技术方案】GameAgent资源自由画板与快速编辑-2026-08-20.md)
 - [UI 工作流资源桥接与 Runtime 执行](./【技术方案】UI工作流资源桥接与Runtime执行-2026-08-24.md)
diff --git a/docs/project-memory/shared-memory/decision-log.md b/docs/project-memory/shared-memory/decision-log.md
index 6ccaca4eb..2a7d67394 100644
--- a/docs/project-memory/shared-memory/decision-log.md
+++ b/docs/project-memory/shared-memory/decision-log.md
@@ -7901,6 +7901,23 @@ CI 上 `background_agent_runtime_recovers_stale_running_before_pending_task` 在
 - 任务最终状态不再提前绑定平台画布、preview、static smoke 或发布产物检查；这些内容不参与该档位的完成判定，也不会因缺失而重置已完成任务。父 run 在任务图进入终态后直接收束并回复。
 - 本档位仍沿用现有项目根和工具权限边界；本次调整只解除流程编排与平台产物验收前置，不新增第二套任务系统。
 
+## 2026-08-31 AGC 错误报告与诊断上传
+
+- AGC 采用 IDEA 风格的当前进程错误池：按 fingerprint 合并 React / window / Promise / Tauri / Agent 错误，重启后不恢复，不使用 run 或 run_id。
+- 应用级日志持续写入 Tauri AppData 并滚动；报告系统完全忽略项目 `.agent/logs`、源码、prompt、配置、项目产物和截图。用户只可补充文字描述。
+- 用户点击独立“报告问题”面板并确认后，批量提交当前进程事件和可取消的脱敏应用日志；失败只允许当前进程手动再次提交。
+- 上传接口为登录态 `/api/error-reports`，后台新增 error-reports Tab、专用文件化诊断包、状态与受控下载；管理员查看/下载进入审计链路。
+- `/bug-report` 仅作为打开该面板的快捷入口，追加简短提示，不再生成包含项目、run 或截图口径的缺陷模板。
+- 2026-08-31 追加：事件 DTO 精简为 `eventId/fingerprint/source/message/stack/occurredAt/count`，提交请求携带 `submissionId` 做幂等。归档固定为 `events.jsonl`，服务端使用 `agc/error-reports/v1/{batchId}.zip` 私有 OSS key；元数据只保留 batch、用户、状态、大小、SHA-256 和 OSS key，事件正文/说明/日志从归档读取。OSS 不可用或上传失败时不写数据库，客户端可重新提交。
+- 2026-09-01 追加：`application.log` 不再写结构化错误事件；Rust `app_log!` 和 WebView console 都写入普通文本 raw log，结构化事件仅保留在当前进程内，提交时才生成 ZIP 内的 `events.jsonl`。
+- 2026-09-01 review 收口：错误报告修复详情请求竞态、下载 anchor 生命周期、客户端采集脱敏/指纹降级与 4xx 噪声、用户级幂等隔离、`agc` 私有 OSS 前缀越权、日志读取链接检查、ZIP 同名日志和元数据/归档清理一致性；同步在 `review.txt` 标注仍需产品/运维决定的架构项。
+- 2026-09-01 追加：错误报告不依赖 api-server 本地文件、目录锁或同步文件 I/O；ZIP 只在请求内存构建后上传 OSS。管理员详情路由不属于 External OpenAPI；不存在返回 404，归档损坏返回 500。
+- 2026-09-01 追加：错误报告不落本地文件；请求内存构建 ZIP 后直接上传 OSS，成功后写入 SpacetimeDB `error_report` 元数据。OSS key 固定为 `agc/error-reports/v1/{batchId}.zip`，不含日期；同一用户 `userId + submissionId` 幂等。管理员查询 DB，详情/下载按 object key 读取 OSS；每日清理先删 OSS，再删 DB，失败留待下次重试。
+- 2026-09-01 review minor 修复：错误报告每日清理改为完整分页扫描，DB 删除失败显式返回以便下周期重试；OSS 读取按 `Content-Length` 与流式累计执行大小上限；管理员归档解析限制解压后 `events.jsonl` 为 24 MiB / 100 条事件。
+- 2026-09-02 review breaking 项落地：错误报告 create/update procedure 删除 `user_id`、`now_micros` 输入字段，分别改用 `ctx.sender()`、`ctx.timestamp`；首个 fingerprint/source 强制 512 字符上限，备注超过 2,000 字显式拒绝；内部 OSS 对象键收紧为 `agc/error-reports/v1/`，凭据脱敏覆盖空白/分隔符变体。发布需同步 module、spacetime-client bindings 与 api-server。
+- 2026-09-02 客户端错误报告提交成功与本地队列 ack 解耦：POST 成功即显示提交成功并关闭，ack 使用有限重试且失败只记录日志；同一批 eventId 在进程内复用稳定 submissionId，避免 ack 失败后重新提交产生重复报告。
+- 2026-09-02 review 后续收口：错误报告创建增加服务 identity 门禁与单 identity 每小时 100 次配额；开发期将已验证登录用户 `user_id` 由 api-server 注入 procedure 并由 module 校验；module 收紧固定 OSS key、SHA-256、归档大小和计数；管理员 PATCH 返回轻量元数据并在详情弹窗提供备注编辑器；列表无过滤查询使用 `created_at` BTree 索引。
+
 ## 2026-09-01 UI 编辑器代码导出与填充预览边界
 
 - UI 编辑器导出的 `ui/generated-*.js` 是派生本地产物。代码生成只写文件，绝不推进项目 revision、UI State revision、manifest 阶段或 Runtime 验证门；写入失败只返回生成错误，不能把生成文件写入冒充项目 mutation。
diff --git a/docs/project-memory/shared-memory/pitfalls.md b/docs/project-memory/shared-memory/pitfalls.md
index 7d6b77777..5860fb644 100644
--- a/docs/project-memory/shared-memory/pitfalls.md
+++ b/docs/project-memory/shared-memory/pitfalls.md
@@ -2,6 +2,13 @@
 
 > 当前口径：本文件保留可复用的排障经验；历史条目的旧路由、旧版本和已删除文档仅作根因背景，不得据此恢复退役入口。当前命令、路由和 schema 以代码与 `docs/README.md` 为准。
 
+## 2026-09-02 Tauri 事件桥在浏览器预览中必须 fail-safe
+
+- **现象**：Vitest/jsdom 挂载 AGC 客户端时，错误报告通知调用 `@tauri-apps/api/event.listen`，因缺少 `window.__TAURI_INTERNALS__` 产生未处理拒绝；测试断言虽通过，CI 仍以 unhandled errors 失败。
+- **原因**：错误报告订阅是非阻塞唤醒通道，不能假定所有渲染环境都已初始化 Tauri IPC；模块级 `listen` 在 API 调用前就会访问 `transformCallback`，仅在调用方包一层 `.then` 无法消除该环境差异。
+- **处理**：订阅桥先复用 `window.__TAURI__.event.listen`（含 globalTauri/native shim），其次仅在 `__TAURI_INTERNALS__` 存在时调用模块 API；浏览器预览或订阅失败统一返回 no-op，并在消费层收口 rejection。错误快照读取、焦点和可见性刷新仍是权威路径。
+- **验证**：`errorReporting.test.ts` 覆盖无 Tauri 环境无未处理拒绝；`appSurface.test.ts` 全部 385 条用例通过且无 Vitest unhandled errors。
+
 ## 2026-08-27 Provider 成功 handoff 失败时需要保留本地私有原始响应
 
 - **现象**：Provider 已返回响应，但 tool-plan handoff 因绝对路径或其它内容安全校验失败，Runtime 只留下 `failureKind`、哈希和被压平的 JSON pointer；排障时无法确认实际工具名和完整 arguments。
diff --git a/docs/technical/【后台管理】多账号与Tab访问权限方案-2026-07-14.md b/docs/technical/【后台管理】多账号与Tab访问权限方案-2026-07-14.md
index 68ec56be7..02f977095 100644
--- a/docs/technical/【后台管理】多账号与Tab访问权限方案-2026-07-14.md
+++ b/docs/technical/【后台管理】多账号与Tab访问权限方案-2026-07-14.md
@@ -10,12 +10,12 @@
 
 ## 2. 当前基线与目标
 
-当前后台由 `GENARRATIVE_ADMIN_USERNAME`、`GENARRATIVE_ADMIN_PASSWORD` 提供唯一管理员账号，`apps/admin-web/src/app/adminRoutes.ts` 定义 15 个可分配业务 Tab，并另有 owner-only 的“账号管理”Tab；`server-rs/crates/api-server/src/modules/admin.rs` 中的后台路由只校验统一的管理员 JWT。
+当前后台由 `GENARRATIVE_ADMIN_USERNAME`、`GENARRATIVE_ADMIN_PASSWORD` 提供唯一管理员账号，`apps/admin-web/src/app/adminRoutes.ts` 定义 16 个可分配业务 Tab，并另有 owner-only 的“账号管理”Tab；`server-rs/crates/api-server/src/modules/admin.rs` 中的后台路由只校验统一的管理员 JWT。
 
 改造后的目标如下：
 
 1. 现有环境变量账号升级为 `owner`，仍由部署环境提供，不迁移、不复制到 SpacetimeDB。
-2. owner 始终拥有全部 15 个业务 Tab 权限，并独占“账号管理”Tab 和账号管理 API。
+2. owner 始终拥有全部 16 个业务 Tab 权限，并独占“账号管理”Tab 和账号管理 API。
 3. owner 可以创建、修改、启停 member；member 保存在 SpacetimeDB 私有表 `admin_account`。
 4. member 按一级 Tab 分配常规权限；获得一个 Tab 权限即获得该页面内常规读写能力。历史花费手动对账必须另行授予 `profile-wallet-consumption-reconcile`，任何 Tab 都不隐式包含。
 5. member JWT 每次请求都重新读取当前账号并校验 `enabled`、`token_version`、实时 Tab 权限和独立操作权限，权限、密码或启停变更应立即让旧 JWT 失效。
@@ -26,7 +26,7 @@
 
 - owner 用户名和密码继续读取 `GENARRATIVE_ADMIN_USERNAME`、`GENARRATIVE_ADMIN_PASSWORD`。
 - owner 是环境变量构造的虚拟账号，不写入 `admin_account`，不允许通过后台改名、改密、禁用或删除。
-- owner 始终拥有本文列出的全部 15 个 Tab 权限和全部独立操作权限，不能在前端取消，也不从数据库加载权限。
+- owner 始终拥有本文列出的全部 16 个 Tab 权限和全部独立操作权限，不能在前端取消，也不从数据库加载权限。
 - “账号管理”是 owner-only 能力。它可以作为新增一级路由 `accounts` / `#accounts` 展示，但 `accounts` 不进入 `ADMIN_TAB_PERMISSIONS` 或 `ADMIN_ACTION_PERMISSIONS`，不能写入 member 的权限 JSON。
 - owner 会话返回 `accountRole = "owner"`、`roles = ["admin", "owner"]`；账号管理权限必须根据服务端确认的 `accountRole` 判断，不能只相信前端角色字符串。
 - owner 配置缺失时，后台整体保持未启用状态；不能依赖数据库中的 member 绕过 owner 引导配置启动后台。
@@ -41,7 +41,7 @@
 
 ## 4. 权限标识
 
-`ADMIN_TAB_PERMISSIONS` 必须是 shared-contracts 与 admin-web 共用的闭合集合，值与现有 `AdminRouteId` 一致。15 个可分配权限如下，顺序同时作为前端寻找“第一可访问项”的稳定顺序：
+`ADMIN_TAB_PERMISSIONS` 必须是 shared-contracts 与 admin-web 共用的闭合集合，值与现有 `AdminRouteId` 一致。16 个可分配权限如下，顺序同时作为前端寻找“第一可访问项”的稳定顺序：
 
 | permission id               | 一级 Tab  | hash                         |
 | --------------------------- | --------- | ---------------------------- |
@@ -50,6 +50,7 @@
 | `tables`                    | 表查询    | `#tables`                    |
 | `debug`                     | API 调试  | `#debug`                     |
 | `tracking`                  | 埋点数据  | `#tracking`                  |
+| `error-reports` | 错误报告 | `#error-reports` |
 | `gray-release`              | 灰度发布  | `#gray-release`              |
 | `redeem`                    | 兑换码    | `#redeem`                    |
 | `invite`                    | 邀请码    | `#invite`                    |
@@ -86,7 +87,7 @@ Tab 权限数组必须去重并按上表顺序规范化后保存。保存时拒
 | `username`                | `String`                | `unique`；登录名，创建后不可修改；按 `trim + ASCII lowercase` 规范化                        |
 | `display_name`            | `String`                | 展示名，去除首尾空白后 1 至 64 字符                                                         |
 | `password_hash`           | `String`                | Argon2id PHC 字符串；只在内部登录查询中返回给 api-server，永不进入 HTTP DTO、日志或前端状态 |
-| `tab_permissions_json`    | `String`                | 规范化后的 Tab permission JSON；只允许第 4 节 15 个值，空数组为 `[]`                        |
+| `tab_permissions_json`    | `String`                | 规范化后的 Tab permission JSON；只允许第 4 节 16 个值，空数组为 `[]`                        |
 | `enabled`                 | `bool`                  | 是否允许登录和继续使用现有 JWT                                                              |
 | `token_version`           | `u64`                   | 初始为 `1`；权限、密码或启停状态发生有效变化时加 `1`                                        |
 | `created_by`              | `String`                | 创建者后台 subject；当前只能是 owner subject                                                |
@@ -168,7 +169,7 @@ tabPermissions: string[]
 actionPermissions: string[]
 ```
 
-owner 返回全部 15 个 Tab permission id 和全部独立操作权限；member 返回数据库中的两组实时规范化数组。`GET /admin/api/me` 同样执行逐请求校验并返回实时权限，供刷新页面后恢复导航和操作按钮。
+owner 返回全部 16 个 Tab permission id 和全部独立操作权限；member 返回数据库中的两组实时规范化数组。`GET /admin/api/me` 同样执行逐请求校验并返回实时权限，供刷新页面后恢复导航和操作按钮。
 
 后台所有面向运营展示的管理员身份统一使用 `displayName`。审计表继续保存稳定 subject，例如 owner subject 或 `admin-account-<uuid>`；api-server 在返回兑换码、邀请码等操作记录时，按 owner 运行态和 `admin_account` 批量解析显示名称，同时兼容历史用户名记录。已无法解析的历史主体统一展示“已停用管理员”，前端不得直接渲染 `operatorUserId`、账号 ID 或登录用户名代替显示名称。对写接口，显示名目录必须在主事务前加载，或在主事务成功后降级为占位文案；不得因二次读取失败把已提交写入伪装成失败。
 
@@ -309,7 +310,7 @@ accounts: Array<{
 
 ### 11.1 路由与导航
 
-- `adminRoutes` 增加权限元数据；15 个业务路由使用同名 permission id。
+- `adminRoutes` 增加权限元数据；16 个业务路由使用同名 permission id。
 - `accounts` 路由只在 `admin.accountRole === "owner"` 时加入侧栏和移动底栏，不属于 member 可分配列表。
 - member 导航只渲染 `admin.tabPermissions` 包含的业务路由。页面组件也必须只在当前路由已授权时挂载，避免隐藏导航后仍发起无权限 API。
 - owner 渲染全部业务路由和账号管理路由。
@@ -321,13 +322,13 @@ accounts: Array<{
 1. 当前 hash 对应可访问路由时保持不变。
 2. hash 未知、属于无权限业务 Tab，或 member 访问 `#accounts` 时，使用 `replaceState` 回落到按第 4 节顺序找到的第一可访问业务 Tab。
 3. member 权限为空时，不回落 Dashboard；渲染独立的零权限空态，只保留账号信息和退出登录，不挂载任何业务页，也不发起业务 API。
-4. owner 的默认项仍可保持 Dashboard；账号管理不改变 15 个业务路由的排序。
+4. owner 的默认项仍可保持 Dashboard；账号管理不改变 16 个业务路由的排序。
 
 后端返回 `403` 时，前端重新请求 `/me` 获取实时权限并执行上述回落。即使前端状态陈旧或被篡改，后端权限 middleware 仍必须拒绝越权请求。
 
 ### 11.3 账号管理页
 
-- 权限编辑器分为 15 个 Tab checkbox 和独立操作权限区；当前独立区只显示“手动对账用户历史花费”。不能展示或提交 `accounts`。
+- 权限编辑器分为 16 个 Tab checkbox 和独立操作权限区；当前独立区只显示“手动对账用户历史花费”。不能展示或提交 `accounts`。
 - 创建和编辑使用独立弹窗或抽屉，不在列表下方追加表单。
 - 编辑时密码字段默认空，空表示请求中省略 `password`；页面永不展示现有密码或 hash。
 - 停用使用开关并二次确认。保存成功后以 API 返回 account snapshot 更新列表。
@@ -403,7 +404,7 @@ spacetime publish <database> \
 
 ### 14.2 前端
 
-- owner 看到 15 个业务 Tab 和账号管理；member 只看到被分配的业务 Tab。
+- owner 看到 16 个业务 Tab 和账号管理；member 只看到被分配的业务 Tab。
 - 常规二级 Tab、弹窗和写操作继承一级权限；历史花费对账按钮只在用户详情返回 `canReconcileConsumption=true` 时显示。
 - 直接输入无权限 hash 自动替换为第一可访问项，不短暂挂载无权限页面。
 - 当前 Tab 权限被 owner 收回后，下一请求触发重新登录；新会话恢复后落到第一可访问项。
diff --git a/docs/technical/【技术方案】AGC错误报告与诊断上传-2026-08-31.md b/docs/technical/【技术方案】AGC错误报告与诊断上传-2026-08-31.md
new file mode 100644
index 000000000..31b747b01
--- /dev/null
+++ b/docs/technical/【技术方案】AGC错误报告与诊断上传-2026-08-31.md
@@ -0,0 +1,45 @@
+# AGC 错误报告与诊断上传
+
+## 范围
+
+AI Game Creator Shell 采用 IDEA 风格的当前进程错误报告：错误事件在内存池中按 fingerprint 合并；应用级诊断日志持续写入 Tauri AppData 的滚动文件；用户打开“报告问题”面板并确认后，一次提交当前进程选中的错误事件和脱敏应用日志。项目目录 `.agent/logs/*`、源码、prompt、配置、项目产物和截图不进入报告包。
+
+## 客户端
+
+- 捕获 React render error、`window.onerror`、`unhandledrejection` 以及显式标记的 Tauri/API/Agent 错误。Agent Runtime 的终态失败、预算耗尽和启动确认失败由 Rust 失败投影统一入池；Direct Codex 与专业 Agent 的前台裸 Tauri invoke catch 作为补充入口，重复事件由同一 fingerprint 合并，主动取消和“同一 turn 已在运行”不作为错误采集。
+- 事件字段包括 eventId、fingerprint、source、message、stack、时间和次数；重复事件合并。不再携带 severity、errorCode、page、action、requestId 等无法稳定关联的字段。
+- 指纹计算可使用调用方的 page/action 及脱敏后的首个调用点作为进程内区分输入，但这些上下文不会作为事件字段上传；消息与 stack 在入池前统一脱敏，WebCrypto 失败时降级为稳定可读指纹，采集本身不得产生新的未处理拒绝。
+- 客户端 API 自动采集只覆盖网络错误、408 和 5xx；预期的 4xx 登录/鉴权失败不进入错误报告池。
+- Rust 侧通过 `app_log!` 将普通文本日志同时输出到 stderr 和 AppData `diagnostics/application.log`，超出 256 KiB 滚动到 `application.previous.log`；WebView 的 console 输出通过 `append_application_log` 镜像到同一 raw log，并在客户端桥接处再次脱敏；`read_diagnostic_logs` 只读取应用级日志。
+- 报告面板只由自动诊断通知中的“查看并报告”打开，不提供聊天命令、崩溃页按钮或其他手动入口；默认选中最新事件，其他事件可勾选。允许填写最多 2,000 字中文描述并取消日志附件；本版本不支持截图或任意文件附件。
+- Rust 是结构化错误队列的唯一真相源：`src-tauri/src/error_report/` 负责脱敏、调用点指纹、eventId、计数、100 条上限、5 秒聚合和 ack 生命周期；WebView 仅通过 Tauri bridge 上报、读取快照并保存短暂 React 展示状态，不维护第二份事件 Map。Runtime 错误上报统一使用 `source=agent-runtime`、`action=agent-runtime` 和 Agent ID 作为 page；包含 `kind=codex-app-server-*` 或 `codex-app-server-error:*` 的消息在入池前归一为稳定类别（例如 `codex-app-server-error:other`），不把 public summary 中的动态 fingerprint/长度作为分桶输入。Rust emit 只作为无状态唤醒，携带单调递增的 generation，不携带错误正文或事件 ID。
+- 错误事件先在当前进程内存池按 fingerprint 合并，经过 5 秒聚合后只发出一次非阻塞存在性唤醒；WebView 挂载、收到唤醒、重新获得焦点或恢复可见时都查询完整未 ack 快照，并在桥接暂时失败时做有限退避重试。通知支持“查看并报告”和“忽略”，同一 fingerprint 仅在新增时唤醒一次。通知不直接打开阻塞式报告面板。忽略只关闭当前 UI，不删除事件；提交成功后由 bridge ack/delete 选中事件。
+- 上传失败只在当前进程显示失败并允许用户再次提交，不跨重启恢复事件池，不后台自动重试。
+
+## HTTP 与存储
+
+- 登录态客户端使用 `POST /api/error-reports`，请求 DTO 位于 `shared-contracts::error_reports`。
+- api-server 对请求体设置 24 MiB 上限，并校验 schemaVersion、submissionId、事件/日志数量和 20 MiB 压缩包上限；事件字段、用户说明和日志名/内容均做长度限制与凭据脱敏（匹配归一化覆盖 Unicode 空白字符），归档使用 `events.jsonl`（每行一个事件）。结构化事件只保存在当前进程内，用户提交时才生成 `events.jsonl`，不在磁盘单独持久化。submissionId 提供重放幂等；客户端对同一批事件复用稳定 submissionId，服务端提交成功后立即反馈成功，本地事件 ack 独立重试，不因 ack 失败误报提交失败；SpacetimeDB procedure 使用服务 identity 门禁，`user_id` 由 api-server 注入并在 module 校验，时间戳仍使用 `ctx.timestamp`。创建 procedure 额外限制单 identity 每小时 100 次提交。
+- 归档构建只在请求生命周期内使用受 20 MiB 上限约束的内存 `Vec<u8>`，随后直接 PUT 到私有 OSS；服务端不写本地报告文件，也不保留本地索引。OSS 上传失败不写入数据库，调用方可稍后重新提交。
+- 归档对象使用固定私有 OSS key：`agc/error-reports/v1/{batchId}.zip`；key 只由报告 UUID 决定，不包含时间戳。上传成功后才写入 SpacetimeDB `error_report` 元数据表；`userId + submissionId` 由唯一幂等键保证重放返回已有记录。完整事件、说明和日志只存在 OSS ZIP。
+- `agc` 是服务端专用私有前缀；公共直传票据、通用 object-key 规范化和 legacy 公开路径均拒绝该前缀。归档内同名日志会自动加数字后缀，读取本机诊断日志时拒绝符号链接/非普通文件。
+- 后台接口：`GET/PATCH /admin/api/error-reports/{batchId}`、`GET /admin/api/error-reports` 和受保护的 `/download`。列表支持 `limit`/`offset` 分页并返回 `total`、`hasMore`；OSS 读取先检查 `Content-Length` 并在流式累计超过上限时立即中止，不把超限对象完整缓存在内存中。
+- 这些是 api-server 内部登录/管理员路由，不属于 `/api/external/v1`，不纳入 External OpenAPI；管理员详情对不存在返回 404，对归档/元数据损坏返回 500。
+- admin viewer 仅接受 error-reports Tab 权限，支持列表筛选、分页、详情、状态 `new/in-progress/resolved`、处理备注和受控下载；不存在的更新目标返回 404，存储损坏返回 500。列表行支持键盘 Enter/Space 打开详情，详情事件预览最多显示 20 条，完整内容通过诊断包下载获取。
+- 管理员列表、筛选、状态和备注全部读取/更新 SpacetimeDB；错误报告的 list/get/update procedure 要求 `require_editor_generation_runtime_service_identity`，详情先读表再从 OSS 下载并解析 ZIP，下载接口直接从 OSS 返回 ZIP。PATCH 更新直接返回元数据，不重新下载归档；详情弹窗提供备注编辑器。无需新增管理员 DELETE HTTP 接口。每日清理任务按分页扫描全部报告，删除过期 OSS 对象后再删 DB；任一 DB 删除失败会保留错误并在后续周期重试。详情解析对解压后的 `events.jsonl` 设置 24 MiB（与请求体上限一致）与 100 条事件上限。管理员备注超过 2,000 字会被明确拒绝；module 同时校验固定 OSS key、SHA-256、归档大小和事件/日志计数上限；OSS 读取仅将明确不存在映射为 404，其余错误按请求无效或上游故障返回。内部 OSS 读写只允许 `agc/error-reports/v1/`。旧本地报告不迁移。
+
+SpacetimeDB `error_report` 表字段：`batch_id` 主键、`user_id`、`submission_id`、`idempotency_key` 唯一键、`object_key`、`archive_sha256`、`archive_size_bytes`、`event_count`、`log_count`、首个 fingerprint/source、`review_status`、`admin_note`、`created_at`、`updated_at`；索引为 `(user_id, submission_id)`、`created_at`、`review_status`。
+
+## 验收
+
+```text
+npm run typecheck --workspace @genarrative/ai-game-creator-shell
+npx tsc -p apps/admin-web/tsconfig.json --noEmit
+npx vitest run apps/ai-game-creator-shell/tests/errorReporting.test.ts apps/ai-game-creator-shell/tests/clientRuntimeErrorBoundary.test.ts apps/admin-web/src/app/adminRoutes.test.ts
+cargo test -p api-server --bin api-server error_reports -- --nocapture
+cargo fmt -p api-server -p shared-contracts -- --check
+npm run check:encoding
+git diff --check
+```
+
+Rust 全量检查还受现有 `platform-llm` ProviderReasoningEffort::Max 编译错误阻塞；本变更未修改该历史问题。
diff --git a/docs/technical/【技术方案】AI游戏创作智能体App实施计划-2026-06-24.md b/docs/technical/【技术方案】AI游戏创作智能体App实施计划-2026-06-24.md
index c647815f6..5b59e156c 100644
--- a/docs/technical/【技术方案】AI游戏创作智能体App实施计划-2026-06-24.md
+++ b/docs/technical/【技术方案】AI游戏创作智能体App实施计划-2026-06-24.md
@@ -674,7 +674,7 @@ game-project/
 - 聊天输入 `/test-plan` 可在普通聊天消息里准备手动测试计划，不读取文件、不启动或打开预览、不直接继续 run，也不新增普通用户测试面板。
 - 聊天输入 `/audience` 可在普通聊天消息里查看首批试玩对象，不读取文件、不启动或打开预览、不导出试玩包、不写项目，也不新增普通用户对象面板。
 - 聊天输入 `/invite` 可在普通聊天消息里准备试玩邀请文案，不读取文件、不启动或打开预览、不导出试玩包、不写项目，也不新增普通用户邀请面板。
-- 聊天输入 `/bug-report` 可在普通聊天消息里准备缺陷复现记录，不读取文件、不启动或打开预览、不导出试玩包、不写项目，也不新增普通用户缺陷面板。
+- 聊天输入 `/bug-report` 只打开独立“报告问题”面板并允许填写用户说明；不读取项目文件、不启动或打开预览、不导出试玩包、不上传截图或任意文件、不写项目，也不依赖 run / run_id。
 - 聊天输入 `/survey` 可在普通聊天消息里准备试玩问卷问题，不读取文件、不启动或打开预览、不导出试玩包、不写项目，也不新增普通用户问卷面板。
 - 聊天输入 `/cover` 可在普通聊天消息里准备封面与缩略图检查，不截屏、不裁剪、不读取文件、不启动或打开预览、不导出试玩包、不上传云端、不发布作品、不写项目，也不新增普通用户封面面板。
 - 聊天输入 `/screenshots` 可在普通聊天消息里准备宣传截图清单，不截屏、不读取文件、不启动或打开预览、不导出试玩包、不写项目，也不新增普通用户截图面板。
@@ -749,7 +749,7 @@ game-project/
 - `/test-plan` 聊天入口由 `appSurface.test.ts` 主窗口 smoke 覆盖：只基于当前已加载 manifest、最近 run trace 和 preview 状态准备手动测试用例、关联任务和试玩证据，提供 `/run`、`/open-preview`、`/trace`、`/review` 或 `/next` 草稿，不触发 Tauri 读写、不读取文件、不启动或打开预览、不直接继续 run、不新增普通用户测试面板。
 - `/audience` 聊天入口由 `appSurface.test.ts` 主窗口 smoke 覆盖：只基于当前已加载 manifest、最近 run trace、preview 和试玩任务状态汇总首批试玩对象、邀请顺序和观察重点，提供 `/run`、`/feedback`、`/review`、`/trace` 或 `/next` 草稿，不触发 Tauri 读写、不读取文件、不启动或打开预览、不导出试玩包、不写项目、不新增普通用户对象面板。
 - `/invite` 聊天入口由 `appSurface.test.ts` 主窗口 smoke 覆盖：只基于当前已加载 manifest、最近 run trace 和 preview 状态准备测试者邀请对象、邀请文案、发送前检查和收反馈口径，提供 `/run`、`/feedback`、`/review`、`/trace` 或 `/next` 草稿，并在 `/next` 与 `/help` 暴露入口；不触发 Tauri 读写、不读取文件、不启动或打开预览、不导出试玩包、不写项目、不新增普通用户邀请面板。
-- `/bug-report` 聊天入口由 `appSurface.test.ts` 主窗口 smoke 覆盖：只基于当前已加载 manifest、最近 run trace 和 preview 状态准备问题一句话、复现步骤、期望 / 实际、设备 / 输入方式、严重度和附件口径，提供 `/run`、`/agent-resume 缺陷修复：`、`/review`、`/trace` 或 `/next` 草稿，并在 `/next` 与 `/help` 暴露入口；不触发 Tauri 读写、不读取文件、不启动或打开预览、不导出试玩包、不写项目、不新增普通用户缺陷面板。
+- `/bug-report` 聊天入口由 `appSurface.test.ts` 主窗口 smoke 覆盖：只追加“已打开报告问题面板”提示并触发独立面板；面板提交前读取应用级诊断日志（不读取 `.agent/logs/*`），只上传当前进程错误事件、脱敏日志和用户文字说明，不上传截图或任意文件，不触发项目读写、预览、导出或 run / run_id。
 - `/survey` 聊天入口由 `appSurface.test.ts` 主窗口 smoke 覆盖：只基于当前已加载 manifest、最近 run trace 和 preview 状态准备首批测试者问卷、五个核心问题、记录格式和追踪方式，提供 `/run`、`/invite`、`/review`、`/trace` 或 `/next` 草稿，并在 `/next` 与 `/help` 暴露入口；不触发 Tauri 读写、不读取文件、不启动或打开预览、不导出试玩包、不写项目、不新增普通用户问卷面板。
 - `/retention` 聊天入口由 `appSurface.test.ts` 主窗口 smoke 覆盖：只基于当前已加载 manifest、最近 run trace、preview、最近试玩证据、素材数量、发布说明和导出状态准备首轮复玩/留存观察清单，提供 `/run`、`/feedback`、`/review`、`/trace` 或 `/next` 草稿，并在 `/next` 与 `/help` 暴露入口；不触发 Tauri 读写、不读取文件、不启动或打开预览、不导出试玩包、不上传云端、不发布作品、不写项目、不新增普通用户留存面板，也不做真实埋点、留存报表、用户画像、A/B 实验、排行榜或账号留存。
 - `/cover` 聊天入口由 `appSurface.test.ts` 主窗口 smoke 覆盖：只基于当前已加载 manifest、最近 run trace、preview 和资产状态准备封面与缩略图候选、用途尺寸、选择口径和补齐路径，提供 `/run`、`/art`、`/listing`、`/review`、`/trace` 或 `/next` 草稿，并在 `/next` 与 `/help` 暴露入口；不触发 Tauri 读写、不截屏、不裁剪、不读取文件、不启动或打开预览、不导出试玩包、不上传云端、不发布作品、不写项目、不新增普通用户封面面板。
diff --git a/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md b/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md
index b54869a1d..899637a0c 100644
--- a/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md
+++ b/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md
@@ -633,6 +633,13 @@ Responses 的终态载荷既是工具调用的恢复源，也是正文的恢复
 - 说明：外部 OpenAPI 调用使用的账号级 API Key 凭据表，只保存 key prefix、SHA-256 hash、作用域、撤销状态和使用时间；明文 Key 只在 `/api/profile/api-keys` 创建接口返回一次，不进入 SpacetimeDB，且 API Key 管理接口不写入外部 OpenAPI JSON。v1 默认作用域为 `editor:project`、`editor:canvas`、`editor:image-generate`、`editor:asset`；其中 `editor:project` 覆盖项目列表、最近项目、创建、读取、重命名和删除，`editor:canvas` 覆盖默认画布布局保存，`editor:image-generate` 覆盖编辑器现有图片生成、重绘 / 调整、去背景、规范图、宣发素材、图标 spritesheet 生成 / 拆分、UI 设计图素材拆分、角色动画、视频、音效和背景音乐生成，`editor:asset` 覆盖素材直传凭证、素材对象确认、签名读取、账号级素材库和项目画布资源记录操作。
 - 索引：`by_external_api_key_owner_user_id` 用于登录态 API Key 列表；`key_hash` 唯一索引用于外部 API 鉴权。
 
+### `error_report`
+
+- Rust 结构体：`ErrorReport`
+- 源码：`server-rs/crates/spacetime-module/src/error_report.rs`
+- 说明：错误报告只在请求内存中构建 ZIP 并上传私有 OSS；SpacetimeDB 仅保存 batch、幂等、对象键、摘要、计数和管理员审核元数据。管理员列表/筛选/更新走 `spacetime-client` facade，详情和下载再从 OSS 读取 ZIP。OSS key 固定为 `agc/error-reports/v1/{batchId}.zip`，不含时间戳；上传失败不写表。
+- 索引：`by_error_report_user_submission` 用于用户提交幂等；`by_error_report_created_at`、`by_error_report_review_status` 用于后台查询与清理。
+
 ### `admin_account`
 
 - Rust 结构体：`AdminAccount`
diff --git a/server-rs/Cargo.lock b/server-rs/Cargo.lock
index 7d79543c0..1acba75f0 100644
--- a/server-rs/Cargo.lock
+++ b/server-rs/Cargo.lock
@@ -240,6 +240,7 @@ dependencies = [
  "platform-oss",
  "platform-speech",
  "platform-wechat",
+ "regex",
  "reqwest",
  "ring",
  "rmcp",
diff --git a/server-rs/crates/api-server/Cargo.toml b/server-rs/crates/api-server/Cargo.toml
index ff0357094..78cfb8bab 100644
--- a/server-rs/crates/api-server/Cargo.toml
+++ b/server-rs/crates/api-server/Cargo.toml
@@ -16,6 +16,7 @@ hex = { workspace = true }
 image = { workspace = true, features = ["jpeg", "png", "webp"] }
 http-body-util = { workspace = true }
 reqwest = { workspace = true, features = ["json", "multipart", "rustls-tls"] }
+regex = { workspace = true }
 rmcp = { workspace = true, features = ["server", "transport-streamable-http-server"] }
 webp = { workspace = true }
 module-ai = { workspace = true }
diff --git a/server-rs/crates/api-server/src/admin.rs b/server-rs/crates/api-server/src/admin.rs
index 9b2f29de7..92dfd260c 100644
--- a/server-rs/crates/api-server/src/admin.rs
+++ b/server-rs/crates/api-server/src/admin.rs
@@ -1792,6 +1792,8 @@ fn admin_permission_requirement(_method: &Method, path: &str) -> AdminPermission
         "/admin/api/debug/http" => AnyTab(&["debug"]),
         "/admin/api/tracking/events" => AnyTab(&["tracking"]),
         "/admin/api/tracking/event-keys" => AnyTab(&["tracking", "tasks"]),
+        "/admin/api/error-reports" => AnyTab(&["error-reports"]),
+        path if path.starts_with("/admin/api/error-reports/") => AnyTab(&["error-reports"]),
         "/admin/api/feature-gates" => AnyTab(&["gray-release"]),
         "/admin/api/editor-generation-pricing" => AnyTab(&["editor-generation-pricing"]),
         "/admin/api/editor-assets" => AnyTab(&["editor-assets"]),
@@ -6131,6 +6133,7 @@ mod tests {
             ("tables", Method::GET, "/admin/api/database/tables"),
             ("debug", Method::POST, "/admin/api/debug/http"),
             ("tracking", Method::GET, "/admin/api/tracking/events"),
+            ("error-reports", Method::GET, "/admin/api/error-reports"),
             ("gray-release", Method::GET, "/admin/api/feature-gates"),
             ("redeem", Method::GET, "/admin/api/profile/redeem-codes"),
             ("invite", Method::GET, "/admin/api/profile/invite-codes"),
diff --git a/server-rs/crates/api-server/src/app.rs b/server-rs/crates/api-server/src/app.rs
index 0560ab8c9..11e9ca980 100644
--- a/server-rs/crates/api-server/src/app.rs
+++ b/server-rs/crates/api-server/src/app.rs
@@ -46,6 +46,7 @@ pub fn build_router(state: AppState) -> Router {
         .merge(modules::platform::router(state.clone()))
         .merge(modules::external_generation::router(state.clone()))
         .merge(modules::platform_support::router(state.clone()))
+        .merge(crate::error_reports::router(state.clone()))
         .route(
             "/api/profile/recharge/wechat/notify",
             post(handle_wechat_pay_notify),
diff --git a/server-rs/crates/api-server/src/assets.rs b/server-rs/crates/api-server/src/assets.rs
index cfd70d42e..d1d3280e4 100644
--- a/server-rs/crates/api-server/src/assets.rs
+++ b/server-rs/crates/api-server/src/assets.rs
@@ -105,7 +105,10 @@ pub(crate) async fn create_direct_upload_ticket_for_owner(
             "supported": platform_oss::LEGACY_PUBLIC_PREFIXES,
         }))
     })?;
-    if matches!(legacy_prefix, LegacyAssetPrefix::EditorAgent) {
+    if matches!(
+        legacy_prefix,
+        LegacyAssetPrefix::EditorAgent | LegacyAssetPrefix::AgcErrorReports
+    ) {
         return Err(
             AppError::from_status(StatusCode::BAD_REQUEST).with_details(json!({
                 "field": "legacyPrefix",
diff --git a/server-rs/crates/api-server/src/error_reports.rs b/server-rs/crates/api-server/src/error_reports.rs
new file mode 100644
index 000000000..bb634179f
--- /dev/null
+++ b/server-rs/crates/api-server/src/error_reports.rs
@@ -0,0 +1,787 @@
+use crate::{
+    admin::{AuthenticatedAdmin, require_admin_auth},
+    api_response::json_success_body,
+    auth::{AuthenticatedAccessToken, require_bearer_auth},
+    http_error::AppError,
+    platform_errors,
+    request_context::RequestContext,
+    state::AppState,
+    tracking::{TrackingEventDraft, record_tracking_event_after_success},
+};
+use axum::{
+    Json, Router,
+    extract::{DefaultBodyLimit, Extension, Path as AxumPath, Query, State},
+    http::{HeaderValue, StatusCode, header},
+    middleware,
+    response::Response,
+    routing::{get, post},
+};
+use platform_oss::{
+    LegacyAssetPrefix, OssDeleteObjectRequest, OssGetObjectRequest, OssObjectAccess,
+    OssPutObjectRequest,
+};
+use serde_json::Value;
+use sha2::{Digest, Sha256};
+use shared_contracts::error_reports::{
+    AdminErrorReportEntry, AdminErrorReportListQuery, AdminErrorReportListResponse,
+    AdminUpdateErrorReportRequest, CreateErrorReportBatchRequest, CreateErrorReportBatchResponse,
+    Event,
+};
+use spacetime_client::{
+    ErrorReportCreateRecordInput, ErrorReportListRecordInput, ErrorReportUpdateRecordInput,
+};
+use std::{
+    collections::HashSet,
+    io::{Cursor, Read, Write},
+    sync::LazyLock,
+};
+use time::OffsetDateTime;
+use tokio::time::{Duration, interval};
+use uuid::Uuid;
+use zip::{ZipWriter, write::FileOptions};
+
+const MAX_EVENTS: usize = 100;
+const MAX_LOGS: usize = 5;
+const MAX_DESCRIPTION_CHARS: usize = 2_000;
+const MAX_LOG_CHARS: usize = 2_000_000;
+const MAX_BATCH_BYTES: usize = 20 * 1024 * 1024;
+const MAX_REQUEST_BODY_BYTES: usize = 24 * 1024 * 1024;
+const MAX_EVENT_FIELD_CHARS: usize = 512;
+const MAX_EVENTS_JSONL_BYTES: usize = MAX_REQUEST_BODY_BYTES;
+const MAX_NOTE_CHARS: usize = 2_000;
+static LOCAL_PATH_PATTERN: LazyLock<regex::Regex> = LazyLock::new(|| {
+    regex::Regex::new(r"(?i)(?:[a-z]:/|/)(?:users|home|private|tmp)/[^\s]+")
+        .expect("valid report path sanitization pattern")
+});
+
+#[derive(Clone, Debug, serde::Serialize)]
+#[serde(rename_all = "camelCase")]
+struct ErrorReportDetail {
+    batch_id: String,
+    submission_id: String,
+    user_id: String,
+    oss_object_key: String,
+    archive_sha256: String,
+    archive_size_bytes: u64,
+    event_count: u32,
+    log_count: u32,
+    first_fingerprint: Option<String>,
+    first_source: Option<String>,
+    review_status: String,
+    admin_note: Option<String>,
+    created_at: String,
+    updated_at: String,
+    events: Vec<Event>,
+    log_names: Vec<String>,
+    user_description: Option<String>,
+    status: String,
+    note: Option<String>,
+    attachment_size_bytes: u64,
+}
+
+pub fn router(state: AppState) -> Router<AppState> {
+    Router::new()
+        .route(
+            "/api/error-reports",
+            post(create_error_report)
+                .route_layer(middleware::from_fn_with_state(
+                    state.clone(),
+                    require_bearer_auth,
+                ))
+                .layer(DefaultBodyLimit::max(MAX_REQUEST_BODY_BYTES)),
+        )
+        .route(
+            "/admin/api/error-reports",
+            get(admin_list_error_reports).route_layer(middleware::from_fn_with_state(
+                state.clone(),
+                require_admin_auth,
+            )),
+        )
+        .route(
+            "/admin/api/error-reports/{batch_id}",
+            get(admin_get_error_report)
+                .patch(admin_update_error_report)
+                .route_layer(middleware::from_fn_with_state(
+                    state.clone(),
+                    require_admin_auth,
+                )),
+        )
+        .route(
+            "/admin/api/error-reports/{batch_id}/download",
+            get(admin_download_error_report)
+                .route_layer(middleware::from_fn_with_state(state, require_admin_auth)),
+        )
+}
+
+pub async fn create_error_report(
+    State(state): State<AppState>,
+    Extension(ctx): Extension<RequestContext>,
+    Extension(auth): Extension<AuthenticatedAccessToken>,
+    Json(mut payload): Json<CreateErrorReportBatchRequest>,
+) -> Result<Json<Value>, AppError> {
+    validate_payload(&mut payload)?;
+    let archive = build_error_report_archive(
+        &payload.events,
+        payload.user_description.as_deref(),
+        &payload
+            .logs
+            .iter()
+            .map(|l| {
+                (
+                    sanitize_log_name(&l.name),
+                    sanitize_report_text_with_limit(&l.content, MAX_LOG_CHARS),
+                )
+            })
+            .collect::<Vec<_>>(),
+    )
+    .map_err(bad_request)?;
+    if archive.len() > MAX_BATCH_BYTES {
+        return Err(bad_request("报告附件超过 20 MB 上限"));
+    }
+    let batch_id = Uuid::new_v4().to_string();
+    let digest = format!("{:x}", Sha256::digest(&archive));
+    let oss = state
+        .oss_client()
+        .ok_or_else(|| AppError::from_status(StatusCode::BAD_GATEWAY).with_message("OSS 未配置"))?;
+    let put_response = oss
+        .put_object(
+            state.editor_oss_http_client(),
+            OssPutObjectRequest {
+                prefix: LegacyAssetPrefix::AgcErrorReports,
+                path_segments: vec!["error-reports".into(), "v1".into()],
+                file_name: format!("{batch_id}.zip"),
+                content_type: Some("application/zip".into()),
+                access: OssObjectAccess::Private,
+                metadata: Default::default(),
+                body: archive.clone(),
+            },
+        )
+        .await
+        .map_err(|_| {
+            AppError::from_status(StatusCode::BAD_GATEWAY).with_message("诊断包上传失败")
+        })?;
+    let object_key = put_response.object_key;
+    let record = match state
+        .spacetime_client()
+        .create_error_report(ErrorReportCreateRecordInput {
+            batch_id: batch_id.clone(),
+            submission_id: payload.submission_id.clone(),
+            idempotency_key: format!("{}:{}", auth.claims().user_id(), payload.submission_id),
+            user_id: auth.claims().user_id().to_string(),
+            object_key: object_key.clone(),
+            archive_sha256: digest,
+            archive_size_bytes: archive.len() as u64,
+            event_count: payload.events.len() as u32,
+            log_count: payload.logs.len() as u32,
+            first_fingerprint: payload.events.first().map(|e| e.fingerprint.clone()),
+            first_source: payload.events.first().map(|e| e.source.clone()),
+        })
+        .await
+    {
+        Ok(record) => record,
+        Err(_) => {
+            let _ = oss
+                .delete_object(
+                    state.editor_oss_http_client(),
+                    OssDeleteObjectRequest {
+                        object_key: object_key.clone(),
+                    },
+                )
+                .await;
+            return Err(AppError::from_status(StatusCode::INTERNAL_SERVER_ERROR)
+                .with_message("报告元数据写入失败"));
+        }
+    };
+    let accepted_event_ids = if record.batch_id != batch_id {
+        let existing_archive = oss
+            .get_object(
+                state.editor_oss_http_client(),
+                OssGetObjectRequest {
+                    object_key: record.object_key.clone(),
+                    max_bytes: MAX_BATCH_BYTES,
+                },
+            )
+            .await
+            .map_err(map_error_report_oss_error)?;
+        let (existing_events, _, _) =
+            parse_archive(&existing_archive).map_err(|e| internal(format!("报告归档损坏：{e}")))?;
+        let mut requested_event_ids = payload
+            .events
+            .iter()
+            .map(|event| event.event_id.clone())
+            .collect::<Vec<_>>();
+        let existing_event_ids = existing_events
+            .iter()
+            .map(|event| event.event_id.clone())
+            .collect::<Vec<_>>();
+        let mut existing_event_ids_sorted = existing_event_ids.clone();
+        requested_event_ids.sort_unstable();
+        existing_event_ids_sorted.sort_unstable();
+        if requested_event_ids != existing_event_ids_sorted {
+            let _ = oss
+                .delete_object(
+                    state.editor_oss_http_client(),
+                    OssDeleteObjectRequest { object_key },
+                )
+                .await;
+            return Err(AppError::from_status(StatusCode::CONFLICT)
+                .with_message("相同 submissionId 的错误报告事件集合不一致"));
+        }
+        let _ = oss
+            .delete_object(
+                state.editor_oss_http_client(),
+                OssDeleteObjectRequest { object_key },
+            )
+            .await;
+        existing_event_ids
+    } else {
+        payload
+            .events
+            .into_iter()
+            .map(|event| event.event_id)
+            .collect()
+    };
+    Ok(json_success_body(
+        Some(&ctx),
+        CreateErrorReportBatchResponse {
+            batch_id: record.batch_id,
+            submission_id: record.submission_id,
+            status: "ready".into(),
+            accepted_event_ids,
+            created_at: record.created_at,
+        },
+    ))
+}
+
+pub async fn admin_list_error_reports(
+    State(state): State<AppState>,
+    Extension(ctx): Extension<RequestContext>,
+    Extension(admin): Extension<AuthenticatedAdmin>,
+    Query(q): Query<AdminErrorReportListQuery>,
+) -> Result<Json<Value>, AppError> {
+    let limit = q.limit.unwrap_or(100).clamp(1, 500);
+    let offset = q.offset.unwrap_or(0);
+    let (rows, total) = state
+        .spacetime_client()
+        .list_error_reports(ErrorReportListRecordInput {
+            status: q.status,
+            fingerprint: q.fingerprint,
+            source: q.source,
+            limit,
+            offset,
+        })
+        .await
+        .map_err(internal)?;
+    let reports = rows
+        .into_iter()
+        .map(|r| AdminErrorReportEntry {
+            batch_id: r.batch_id,
+            event_count: r.event_count,
+            log_count: r.log_count,
+            fingerprint: r.first_fingerprint,
+            source: r.first_source,
+            status: r.review_status.clone(),
+            user_id: r.user_id,
+            created_at: r.created_at,
+            updated_at: r.updated_at,
+            user_description: None,
+            attachment_size_bytes: r.archive_size_bytes,
+            submission_id: Some(r.submission_id),
+            oss_object_key: Some(r.object_key),
+            archive_sha256: Some(r.archive_sha256),
+            upload_status: Some("ready".into()),
+            review_status: Some(r.review_status),
+        })
+        .collect();
+    record_admin_report_audit(&state, &ctx, admin.session().subject.as_str(), "list", None).await;
+    Ok(json_success_body(
+        Some(&ctx),
+        AdminErrorReportListResponse {
+            reports,
+            total,
+            offset,
+            limit,
+            has_more: (offset as u64).saturating_add(limit as u64) < total,
+        },
+    ))
+}
+
+pub async fn admin_get_error_report(
+    State(state): State<AppState>,
+    Extension(ctx): Extension<RequestContext>,
+    Extension(admin): Extension<AuthenticatedAdmin>,
+    AxumPath(batch_id): AxumPath<String>,
+) -> Result<Json<Value>, AppError> {
+    let r = state
+        .spacetime_client()
+        .get_error_report(batch_id.clone())
+        .await
+        .map_err(map_error_report_spacetime_error)?;
+    let bytes = state
+        .oss_client()
+        .ok_or_else(|| internal("OSS 未配置"))?
+        .get_object(
+            state.editor_oss_http_client(),
+            OssGetObjectRequest {
+                object_key: r.object_key.clone(),
+                max_bytes: MAX_BATCH_BYTES,
+            },
+        )
+        .await
+        .map_err(map_error_report_oss_error)?;
+    let (events, desc, logs) =
+        parse_archive(&bytes).map_err(|e| internal(format!("报告归档损坏：{e}")))?;
+    record_admin_report_audit(
+        &state,
+        &ctx,
+        admin.session().subject.as_str(),
+        "view",
+        Some(&batch_id),
+    )
+    .await;
+    Ok(json_success_body(
+        Some(&ctx),
+        ErrorReportDetail {
+            batch_id: r.batch_id,
+            submission_id: r.submission_id,
+            user_id: r.user_id,
+            oss_object_key: r.object_key,
+            archive_sha256: r.archive_sha256,
+            archive_size_bytes: r.archive_size_bytes,
+            event_count: r.event_count,
+            log_count: r.log_count,
+            first_fingerprint: r.first_fingerprint,
+            first_source: r.first_source,
+            review_status: r.review_status.clone(),
+            admin_note: r.admin_note.clone(),
+            created_at: r.created_at,
+            updated_at: r.updated_at,
+            events,
+            log_names: logs,
+            user_description: desc,
+            status: r.review_status,
+            note: r.admin_note,
+            attachment_size_bytes: r.archive_size_bytes,
+        },
+    ))
+}
+
+pub async fn admin_update_error_report(
+    State(state): State<AppState>,
+    Extension(ctx): Extension<RequestContext>,
+    Extension(admin): Extension<AuthenticatedAdmin>,
+    AxumPath(batch_id): AxumPath<String>,
+    Json(p): Json<AdminUpdateErrorReportRequest>,
+) -> Result<Json<Value>, AppError> {
+    if !matches!(p.status.as_str(), "new" | "in-progress" | "resolved") {
+        return Err(bad_request("状态必须是 new、in-progress 或 resolved"));
+    }
+    if p.note
+        .as_deref()
+        .is_some_and(|note| note.chars().count() > MAX_NOTE_CHARS)
+    {
+        return Err(bad_request("处理备注不能超过 2000 个字符"));
+    }
+    let updated = state
+        .spacetime_client()
+        .update_error_report(ErrorReportUpdateRecordInput {
+            batch_id: batch_id.clone(),
+            status: p.status,
+            note: p.note,
+        })
+        .await
+        .map_err(internal)?;
+    record_admin_report_audit(
+        &state,
+        &ctx,
+        admin.session().subject.as_str(),
+        "update",
+        Some(&batch_id),
+    )
+    .await;
+    Ok(json_success_body(
+        Some(&ctx),
+        AdminErrorReportEntry {
+            batch_id: updated.batch_id,
+            event_count: updated.event_count,
+            log_count: updated.log_count,
+            fingerprint: updated.first_fingerprint,
+            source: updated.first_source,
+            status: updated.review_status.clone(),
+            user_id: updated.user_id,
+            created_at: updated.created_at,
+            updated_at: updated.updated_at,
+            user_description: None,
+            attachment_size_bytes: updated.archive_size_bytes,
+            submission_id: Some(updated.submission_id),
+            oss_object_key: Some(updated.object_key),
+            archive_sha256: Some(updated.archive_sha256),
+            upload_status: Some("ready".into()),
+            review_status: Some(updated.review_status),
+        },
+    ))
+}
+
+pub async fn admin_download_error_report(
+    State(state): State<AppState>,
+    Extension(ctx): Extension<RequestContext>,
+    Extension(admin): Extension<AuthenticatedAdmin>,
+    AxumPath(batch_id): AxumPath<String>,
+) -> Result<Response, AppError> {
+    let r = state
+        .spacetime_client()
+        .get_error_report(batch_id.clone())
+        .await
+        .map_err(map_error_report_spacetime_error)?;
+    let bytes = state
+        .oss_client()
+        .ok_or_else(|| internal("OSS 未配置"))?
+        .get_object(
+            state.editor_oss_http_client(),
+            OssGetObjectRequest {
+                object_key: r.object_key,
+                max_bytes: MAX_BATCH_BYTES,
+            },
+        )
+        .await
+        .map_err(map_error_report_oss_error)?;
+    record_admin_report_audit(
+        &state,
+        &ctx,
+        admin.session().subject.as_str(),
+        "download",
+        Some(&batch_id),
+    )
+    .await;
+    let mut resp = Response::new(bytes.into());
+    resp.headers_mut().insert(
+        header::CONTENT_TYPE,
+        HeaderValue::from_static("application/zip"),
+    );
+    resp.headers_mut().insert(
+        header::CONTENT_DISPOSITION,
+        HeaderValue::from_str(&format!("attachment; filename=\"{batch_id}.zip\""))
+            .map_err(internal)?,
+    );
+    Ok(resp)
+}
+
+fn bad_request(m: impl Into<String>) -> AppError {
+    AppError::from_status(StatusCode::BAD_REQUEST).with_message(m)
+}
+fn internal<E: ToString>(e: E) -> AppError {
+    AppError::from_status(StatusCode::INTERNAL_SERVER_ERROR).with_message(e.to_string())
+}
+
+fn map_error_report_oss_error(error: platform_oss::OssError) -> AppError {
+    match error.kind() {
+        platform_oss::OssErrorKind::ObjectNotFound => {
+            AppError::from_status(StatusCode::NOT_FOUND).with_message("报告附件不存在")
+        }
+        platform_oss::OssErrorKind::InvalidRequest => {
+            AppError::from_status(StatusCode::BAD_REQUEST).with_message("报告附件读取请求无效")
+        }
+        _ => platform_errors::map_oss_error(error, "error-report"),
+    }
+}
+
+fn map_error_report_spacetime_error(error: spacetime_client::SpacetimeClientError) -> AppError {
+    if error.to_string() == "错误报告不存在" {
+        AppError::from_status(StatusCode::NOT_FOUND).with_message("报告不存在")
+    } else {
+        internal(error)
+    }
+}
+async fn record_admin_report_audit(
+    state: &AppState,
+    ctx: &RequestContext,
+    subject: &str,
+    action: &'static str,
+    batch: Option<&str>,
+) {
+    let mut d = TrackingEventDraft::user("admin_error_report_action", "error-reports", subject);
+    d.metadata = serde_json::json!({"action":action,"batchId":batch});
+    record_tracking_event_after_success(state, ctx, d).await;
+}
+
+fn validate_payload(p: &mut CreateErrorReportBatchRequest) -> Result<(), AppError> {
+    if p.schema_version != 1 {
+        return Err(bad_request("报告协议版本不支持"));
+    }
+    p.submission_id = sanitize_report_text_with_limit(&p.submission_id, 128);
+    if p.submission_id.is_empty() {
+        return Err(bad_request("缺少提交幂等标识"));
+    }
+    if p.events.is_empty() || p.events.len() > MAX_EVENTS {
+        return Err(bad_request("报告事件数量必须在 1 到 100 之间"));
+    }
+    if p.logs.len() > MAX_LOGS {
+        return Err(bad_request("日志附件数量超出上限"));
+    }
+    for e in &mut p.events {
+        e.event_id = sanitize_report_text(&e.event_id);
+        e.fingerprint = sanitize_report_text(&e.fingerprint);
+        e.source = sanitize_report_text(&e.source);
+        e.message = sanitize_report_text(&e.message);
+        e.stack = e
+            .stack
+            .take()
+            .map(|v| sanitize_report_text_with_limit(&v, MAX_LOG_CHARS));
+        e.occurred_at = sanitize_report_text(&e.occurred_at);
+        if e.event_id.is_empty() || e.fingerprint.is_empty() || e.message.is_empty() {
+            return Err(bad_request("报告事件缺少必要字段"));
+        }
+        if e.count == 0 {
+            e.count = 1;
+        }
+    }
+    let ids = p
+        .events
+        .iter()
+        .map(|e| e.event_id.as_str())
+        .collect::<HashSet<_>>();
+    if ids.len() != p.events.len() {
+        return Err(bad_request("报告事件标识不能重复"));
+    }
+    p.user_description = p
+        .user_description
+        .take()
+        .map(|v| sanitize_report_text_with_limit(&v, MAX_DESCRIPTION_CHARS));
+    Ok(())
+}
+
+pub(crate) fn build_error_report_archive(
+    events: &[Event],
+    desc: Option<&str>,
+    logs: &[(String, String)],
+) -> Result<Vec<u8>, String> {
+    let mut z = ZipWriter::new(Cursor::new(Vec::new()));
+    let o = FileOptions::<()>::default().compression_method(zip::CompressionMethod::Deflated);
+    z.start_file("manifest.json", o)
+        .map_err(|e| e.to_string())?;
+    z.write_all(
+        serde_json::json!({"schemaVersion":1,"eventCount":events.len(),"logCount":logs.len()})
+            .to_string()
+            .as_bytes(),
+    )
+    .map_err(|e| e.to_string())?;
+    z.start_file("events.jsonl", o).map_err(|e| e.to_string())?;
+    for e in events {
+        z.write_all(
+            serde_json::to_string(e)
+                .map_err(|e| e.to_string())?
+                .as_bytes(),
+        )
+        .map_err(|e| e.to_string())?;
+        z.write_all(b"\n").map_err(|e| e.to_string())?;
+    }
+    if let Some(d) = desc {
+        z.start_file("user-description.txt", o)
+            .map_err(|e| e.to_string())?;
+        z.write_all(d.as_bytes()).map_err(|e| e.to_string())?;
+    }
+    let mut used = HashSet::new();
+    for (n, c) in logs {
+        let s = sanitize_log_name(n);
+        let mut a = s.clone();
+        let mut i = 2;
+        while !used.insert(a.clone()) {
+            a = format!("{s}.{i}");
+            i += 1;
+        }
+        z.start_file(format!("system-logs/{a}"), o)
+            .map_err(|e| e.to_string())?;
+        z.write_all(c.as_bytes()).map_err(|e| e.to_string())?;
+    }
+    z.finish()
+        .map(|c| c.into_inner())
+        .map_err(|e| e.to_string())
+}
+fn parse_archive(bytes: &[u8]) -> Result<(Vec<Event>, Option<String>, Vec<String>), String> {
+    let mut a = zip::ZipArchive::new(Cursor::new(bytes)).map_err(|e| e.to_string())?;
+    let mut t = String::new();
+    {
+        let mut events_file = a
+            .by_name("events.jsonl")
+            .map_err(|_| "归档缺少 events.jsonl".to_string())?
+            .take((MAX_EVENTS_JSONL_BYTES + 1) as u64);
+        events_file
+            .read_to_string(&mut t)
+            .map_err(|e| e.to_string())?;
+    }
+    if t.len() > MAX_EVENTS_JSONL_BYTES {
+        return Err("events.jsonl 解压后超过大小上限".to_string());
+    }
+    let events = t
+        .lines()
+        .filter(|l| !l.trim().is_empty())
+        .map(|l| serde_json::from_str(l).map_err(|e| e.to_string()))
+        .collect::<Result<Vec<Event>, _>>()?;
+    if events.len() > MAX_EVENTS {
+        return Err("归档事件数量超过上限".to_string());
+    }
+    let desc = if let Ok(f) = a.by_name("user-description.txt") {
+        let mut s = String::new();
+        f.take((MAX_DESCRIPTION_CHARS + 1) as u64)
+            .read_to_string(&mut s)
+            .map_err(|e| e.to_string())?;
+        if s.chars().count() > MAX_DESCRIPTION_CHARS {
+            return Err("user-description.txt 解压后超过大小上限".to_string());
+        }
+        Some(s)
+    } else {
+        None
+    };
+    let mut names = Vec::new();
+    for i in 0..a.len() {
+        let n = a.by_index(i).map_err(|e| e.to_string())?.name().to_string();
+        if let Some(n) = n.strip_prefix("system-logs/") {
+            names.push(n.to_string());
+        }
+    }
+    Ok((events, desc, names))
+}
+fn sanitize_report_text(v: &str) -> String {
+    sanitize_report_text_with_limit(v, MAX_EVENT_FIELD_CHARS)
+}
+fn sanitize_report_text_with_limit(v: &str, max: usize) -> String {
+    let normalized = v
+        .to_lowercase()
+        .chars()
+        .filter(|c| !c.is_whitespace())
+        .collect::<String>();
+    if [
+        "authorization:",
+        "authorization=",
+        "bearer",
+        "token=",
+        "token:",
+        "x-api-key:",
+        "x-api-key=",
+        "xapikey:",
+        "xapikey=",
+        "api-key:",
+        "api-key=",
+        "api_key:",
+        "api_key=",
+        "apikey:",
+        "apikey=",
+    ]
+    .iter()
+    .any(|m| normalized.contains(m))
+    {
+        return "[REDACTED]".into();
+    }
+    let normalized = v.replace(['\r', '\n'], " ").replace('\\', "/");
+    LOCAL_PATH_PATTERN
+        .replace_all(&normalized, "<absolute-path>/")
+        .chars()
+        .take(max)
+        .collect()
+}
+
+#[cfg(test)]
+mod tests {
+    use super::sanitize_report_text_with_limit;
+
+    #[test]
+    fn redacts_credentials_separated_by_unicode_whitespace() {
+        for value in [
+            "token\u{00a0}=\u{2003}secret",
+            "Authorization:\u{2003}Bearer\u{00a0}secret",
+            "api-key\u{00a0}:\u{2003}secret",
+        ] {
+            assert_eq!(sanitize_report_text_with_limit(value, 512), "[REDACTED]");
+        }
+    }
+}
+
+fn sanitize_log_name(v: &str) -> String {
+    let s = v
+        .rsplit(['/', '\\'])
+        .next()
+        .unwrap_or("")
+        .chars()
+        .filter(|c| c.is_ascii_alphanumeric() || matches!(c, '.' | '-' | '_'))
+        .take(128)
+        .collect::<String>();
+    if s.is_empty() || s == "." || s == ".." {
+        "application.log".into()
+    } else {
+        s
+    }
+}
+
+pub fn spawn_cleanup_worker(state: AppState) {
+    tokio::spawn(async move {
+        let mut tick = interval(Duration::from_secs(24 * 60 * 60));
+        loop {
+            tick.tick().await;
+            let _ = cleanup_expired(&state).await;
+        }
+    });
+}
+async fn cleanup_expired(state: &AppState) -> Result<(), String> {
+    let cutoff = OffsetDateTime::now_utc() - time::Duration::days(30);
+    let Some(oss) = state.oss_client() else {
+        return Ok(());
+    };
+    let mut offset = 0_u32;
+    let mut first_error = None;
+    loop {
+        let (rows, _) = state
+            .spacetime_client()
+            .list_error_reports(ErrorReportListRecordInput {
+                status: None,
+                fingerprint: None,
+                source: None,
+                limit: 500,
+                offset,
+            })
+            .await
+            .map_err(|e| e.to_string())?;
+        if rows.is_empty() {
+            break;
+        }
+        let page_len = rows.len() as u32;
+        let mut deleted = 0_u32;
+        for r in rows {
+            if r.created_at
+                .split('.')
+                .next()
+                .and_then(|s| s.parse::<i64>().ok())
+                .and_then(|seconds| OffsetDateTime::from_unix_timestamp(seconds).ok())
+                .is_some_and(|ts| ts < cutoff)
+            {
+                if oss
+                    .delete_object(
+                        state.editor_oss_http_client(),
+                        OssDeleteObjectRequest {
+                            object_key: r.object_key.clone(),
+                        },
+                    )
+                    .await
+                    .is_err()
+                {
+                    continue;
+                }
+                if let Err(error) = state
+                    .spacetime_client()
+                    .delete_error_report(r.batch_id)
+                    .await
+                {
+                    first_error.get_or_insert_with(|| error.to_string());
+                } else {
+                    deleted += 1;
+                }
+            }
+        }
+        if page_len < 500 {
+            break;
+        }
+        if deleted == 0 {
+            offset = offset.saturating_add(page_len);
+        }
+    }
+    first_error.map_or(Ok(()), Err)
+}
diff --git a/server-rs/crates/api-server/src/main.rs b/server-rs/crates/api-server/src/main.rs
index 441936e1e..fbc638bee 100644
--- a/server-rs/crates/api-server/src/main.rs
+++ b/server-rs/crates/api-server/src/main.rs
@@ -32,6 +32,7 @@ mod editor_screen_background_decision;
 mod editor_screen_background_filter;
 mod editor_sound_effect_prompt_assist;
 mod error_middleware;
+mod error_reports;
 mod external_api_audit;
 mod external_api_auth;
 mod external_api_keys;
@@ -565,6 +566,7 @@ fn spawn_common_app_state_background_workers(state: &AppState) {
 
 fn spawn_http_app_state_background_workers(state: &AppState, process_role: ProcessRole) {
     spawn_common_app_state_background_workers(state);
+    crate::error_reports::spawn_cleanup_worker(state.clone());
     if should_start_profile_recharge_expiration_listener(process_role) {
         spawn_profile_recharge_expiration_listener(state.clone());
         spawn_profile_recharge_refund_reconciliation_worker(state.clone());
diff --git a/server-rs/crates/platform-oss/src/lib.rs b/server-rs/crates/platform-oss/src/lib.rs
index c563ee158..4a542a8c6 100644
--- a/server-rs/crates/platform-oss/src/lib.rs
+++ b/server-rs/crates/platform-oss/src/lib.rs
@@ -52,6 +52,7 @@ pub enum OssObjectAccess {
 #[derive(Clone, Copy, Debug, PartialEq, Eq)]
 pub enum LegacyAssetPrefix {
     EditorAgent,
+    AgcErrorReports,
     CharacterDrafts,
     Characters,
     Animations,
@@ -103,6 +104,15 @@ pub struct OssSignedGetObjectUrlRequest {
 pub struct OssHeadObjectRequest {
     pub object_key: String,
 }
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct OssGetObjectRequest {
+    pub object_key: String,
+    pub max_bytes: usize,
+}
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct OssDeleteObjectRequest {
+    pub object_key: String,
+}
 
 #[derive(Clone, Debug, PartialEq, Eq)]
 pub struct OssPutObjectRequest {
@@ -218,6 +228,8 @@ pub struct OssClient {
 pub enum OssRequestOperation {
     Put,
     Head,
+    Get,
+    Delete,
 }
 
 #[derive(Clone, Debug, PartialEq, Eq)]
@@ -291,6 +303,7 @@ impl LegacyAssetPrefix {
 
         match normalized {
             "editor-agent" => Some(Self::EditorAgent),
+            "agc" => Some(Self::AgcErrorReports),
             "generated-character-drafts" => Some(Self::CharacterDrafts),
             "generated-characters" => Some(Self::Characters),
             "generated-animations" => Some(Self::Animations),
@@ -312,6 +325,7 @@ impl LegacyAssetPrefix {
     pub fn as_str(&self) -> &'static str {
         match self {
             Self::EditorAgent => "editor-agent",
+            Self::AgcErrorReports => "agc",
             Self::CharacterDrafts => "generated-character-drafts",
             Self::Characters => "generated-characters",
             Self::Animations => "generated-animations",
@@ -336,7 +350,11 @@ impl LegacyAssetPrefix {
     pub fn from_object_key(raw: &str) -> Option<Self> {
         let normalized = raw.trim().trim_start_matches('/').trim();
         let prefix = normalized.split('/').next()?;
-        Self::parse(prefix)
+        match Self::parse(prefix) {
+            // agc/error-reports is a server-only write prefix, never a caller-supplied object key.
+            Some(Self::AgcErrorReports) => None,
+            other => other,
+        }
     }
 }
 
@@ -841,6 +859,80 @@ impl OssClient {
         result
     }
 
+    pub async fn get_object(
+        &self,
+        client: &reqwest::Client,
+        request: OssGetObjectRequest,
+    ) -> Result<Vec<u8>, OssError> {
+        let key = normalize_internal_object_key(&request.object_key)?;
+        let target = build_object_url(&self.config.bucket, &self.config.endpoint, &key)
+            .map_err(|e| request_error(OssRequestOperation::Get, &e.to_string()))?;
+        let mut response = send_signed_request(
+            client,
+            &self.config,
+            Method::GET,
+            Some(&key),
+            target,
+            OssRequestOperation::Get,
+        )
+        .await?;
+        if response.status() == reqwest::StatusCode::NOT_FOUND {
+            return Err(OssError::ObjectNotFound(format!("OSS 对象不存在：{key}")));
+        }
+        if !response.status().is_success() {
+            return Err(request_status_error(
+                OssRequestOperation::Get,
+                response.status().as_u16(),
+                format!("OSS GET Object 失败，状态码：{}", response.status()),
+            ));
+        }
+        if response
+            .content_length()
+            .is_some_and(|length| length > request.max_bytes as u64)
+        {
+            return Err(OssError::InvalidRequest("OSS 对象超过读取上限".to_string()));
+        }
+        let mut bytes = Vec::new();
+        while let Some(chunk) = response
+            .chunk()
+            .await
+            .map_err(|e| request_error_from_reqwest(OssRequestOperation::Get, e))?
+        {
+            if bytes.len().saturating_add(chunk.len()) > request.max_bytes {
+                return Err(OssError::InvalidRequest("OSS 对象超过读取上限".to_string()));
+            }
+            bytes.extend_from_slice(&chunk);
+        }
+        Ok(bytes)
+    }
+
+    pub async fn delete_object(
+        &self,
+        client: &reqwest::Client,
+        request: OssDeleteObjectRequest,
+    ) -> Result<(), OssError> {
+        let key = normalize_internal_object_key(&request.object_key)?;
+        let target = build_object_url(&self.config.bucket, &self.config.endpoint, &key)
+            .map_err(|e| request_error(OssRequestOperation::Delete, &e.to_string()))?;
+        let response = send_signed_request(
+            client,
+            &self.config,
+            Method::DELETE,
+            Some(&key),
+            target,
+            OssRequestOperation::Delete,
+        )
+        .await?;
+        if response.status() == reqwest::StatusCode::NOT_FOUND || response.status().is_success() {
+            return Ok(());
+        }
+        Err(request_status_error(
+            OssRequestOperation::Delete,
+            response.status().as_u16(),
+            format!("OSS DELETE Object 失败，状态码：{}", response.status()),
+        ))
+    }
+
     // AI 生成资源默认由服务端上传 OSS，Web 端只拿签名读地址，不直接持有写权限。
     pub async fn put_object(
         &self,
@@ -1648,7 +1740,7 @@ fn normalize_object_key(raw: &str) -> Result<String, OssError> {
     match LegacyAssetPrefix::from_object_key(&normalized) {
         Some(LegacyAssetPrefix::EditorAgent) | None => {
             return Err(OssError::InvalidRequest(
-                "objectKey 必须落在受支持的 generated-* 前缀下".to_string(),
+                "objectKey 必须落在受支持的 OSS 前缀下".to_string(),
             ));
         }
         Some(_) => {}
@@ -1686,6 +1778,18 @@ fn normalize_editor_agent_messages_object_key(raw: &str) -> Result<String, OssEr
     Ok(normalized)
 }
 
+fn normalize_internal_object_key(raw: &str) -> Result<String, OssError> {
+    let normalized = raw.trim().trim_start_matches('/').trim().to_string();
+    validate_object_key_segments(&normalized)?;
+    if normalized.starts_with("agc/error-reports/v1/") {
+        Ok(normalized)
+    } else {
+        Err(OssError::InvalidRequest(
+            "objectKey 不属于内部对象前缀".to_string(),
+        ))
+    }
+}
+
 fn validate_object_key_segments(normalized: &str) -> Result<(), OssError> {
     let segments = normalized.split('/').collect::<Vec<_>>();
     if segments.len() < 2 {
@@ -3072,7 +3176,7 @@ mod tests {
 
         assert_eq!(
             error,
-            OssError::InvalidRequest("objectKey 必须落在受支持的 generated-* 前缀下".to_string())
+            OssError::InvalidRequest("objectKey 必须落在受支持的 OSS 前缀下".to_string())
         );
     }
 
diff --git a/server-rs/crates/shared-contracts/src/admin.rs b/server-rs/crates/shared-contracts/src/admin.rs
index 52f0e9733..9f7c4cb57 100644
--- a/server-rs/crates/shared-contracts/src/admin.rs
+++ b/server-rs/crates/shared-contracts/src/admin.rs
@@ -10,7 +10,7 @@ use crate::creation_entry_config::{
 };
 
 /// 后台 member 可被授予的一级 Tab 权限；账号管理仅 owner 可见，不进入该集合。
-pub const ADMIN_TAB_PERMISSIONS: [&str; 15] = [
+pub const ADMIN_TAB_PERMISSIONS: [&str; 16] = [
     "dashboard",
     "overview",
     "tables",
@@ -26,6 +26,7 @@ pub const ADMIN_TAB_PERMISSIONS: [&str; 15] = [
     "editor-generation-pricing",
     "editor-showcase",
     "editor-assets",
+    "error-reports",
 ];
 
 /// 不随一级 Tab 自动授予的后台高风险操作权限。
diff --git a/server-rs/crates/shared-contracts/src/error_reports.rs b/server-rs/crates/shared-contracts/src/error_reports.rs
new file mode 100644
index 000000000..e68cdcb88
--- /dev/null
+++ b/server-rs/crates/shared-contracts/src/error_reports.rs
@@ -0,0 +1,88 @@
+use serde::{Deserialize, Serialize};
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+pub struct Event {
+    pub event_id: String,
+    pub fingerprint: String,
+    pub source: String,
+    pub message: String,
+    pub stack: Option<String>,
+    pub occurred_at: String,
+    pub count: u32,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+pub struct ErrorReportLogInput {
+    pub name: String,
+    pub content: String,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+pub struct CreateErrorReportBatchRequest {
+    pub schema_version: u32,
+    pub submission_id: String,
+    pub events: Vec<Event>,
+    pub user_description: Option<String>,
+    pub logs: Vec<ErrorReportLogInput>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+pub struct CreateErrorReportBatchResponse {
+    pub batch_id: String,
+    pub submission_id: String,
+    pub status: String,
+    pub accepted_event_ids: Vec<String>,
+    pub created_at: String,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+pub struct AdminErrorReportListQuery {
+    pub status: Option<String>,
+    pub fingerprint: Option<String>,
+    pub source: Option<String>,
+    pub limit: Option<u32>,
+    pub offset: Option<u32>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+pub struct AdminErrorReportEntry {
+    pub batch_id: String,
+    pub event_count: u32,
+    pub log_count: u32,
+    pub fingerprint: Option<String>,
+    pub source: Option<String>,
+    pub status: String,
+    pub user_id: String,
+    pub created_at: String,
+    pub updated_at: String,
+    pub user_description: Option<String>,
+    pub attachment_size_bytes: u64,
+    pub submission_id: Option<String>,
+    pub oss_object_key: Option<String>,
+    pub archive_sha256: Option<String>,
+    pub upload_status: Option<String>,
+    pub review_status: Option<String>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+pub struct AdminErrorReportListResponse {
+    pub reports: Vec<AdminErrorReportEntry>,
+    pub total: u64,
+    pub offset: u32,
+    pub limit: u32,
+    pub has_more: bool,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+pub struct AdminUpdateErrorReportRequest {
+    pub status: String,
+    pub note: Option<String>,
+}
diff --git a/server-rs/crates/shared-contracts/src/lib.rs b/server-rs/crates/shared-contracts/src/lib.rs
index 8ad2b7140..bc32ee4b9 100644
--- a/server-rs/crates/shared-contracts/src/lib.rs
+++ b/server-rs/crates/shared-contracts/src/lib.rs
@@ -19,6 +19,7 @@ pub mod creation_entry_config;
 pub mod creative_agent;
 pub mod editor_agent;
 pub mod editor_generation;
+pub mod error_reports;
 pub use editor_generation::{
     EDITOR_GENERATION_ASSET_BINDING_ID_PREFIX, EDITOR_GENERATION_ASSET_ID_PREFIX,
     EDITOR_GENERATION_ASSET_OBJECT_ID_PREFIX, EDITOR_GENERATION_RESOURCE_ID_PREFIX,
diff --git a/server-rs/crates/spacetime-client/src/active.rs b/server-rs/crates/spacetime-client/src/active.rs
index dc9096de5..930b4ec1f 100644
--- a/server-rs/crates/spacetime-client/src/active.rs
+++ b/server-rs/crates/spacetime-client/src/active.rs
@@ -15,6 +15,8 @@ pub mod assets;
 pub mod auth;
 pub mod editor_agent;
 pub mod editor_project;
+#[path = "active/error_reports.rs"]
+mod error_reports;
 pub mod external_api_key;
 #[path = "active/external_generation.rs"]
 pub mod external_generation;
diff --git a/server-rs/crates/spacetime-client/src/active/error_reports.rs b/server-rs/crates/spacetime-client/src/active/error_reports.rs
new file mode 100644
index 000000000..dc0928264
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/active/error_reports.rs
@@ -0,0 +1,89 @@
+use super::*;
+
+impl SpacetimeClient {
+    pub async fn create_error_report(
+        &self,
+        input: ErrorReportCreateRecordInput,
+    ) -> Result<ErrorReportRecord, SpacetimeClientError> {
+        let input = input.into();
+        self.call_after_connect("create_error_report_and_return", move |c, s| {
+            c.procedures()
+                .create_error_report_and_return_then(input, move |_, r| {
+                    send_once(
+                        &s,
+                        r.map_err(SpacetimeClientError::from_sdk_error)
+                            .and_then(map_error_report_result),
+                    )
+                })
+        })
+        .await
+    }
+    pub async fn get_error_report(
+        &self,
+        batch_id: String,
+    ) -> Result<ErrorReportRecord, SpacetimeClientError> {
+        let input = ErrorReportGetInput { batch_id };
+        self.call_after_connect("get_error_report_and_return", move |c, s| {
+            c.procedures()
+                .get_error_report_and_return_then(input, move |_, r| {
+                    send_once(
+                        &s,
+                        r.map_err(SpacetimeClientError::from_sdk_error)
+                            .and_then(map_error_report_result),
+                    )
+                })
+        })
+        .await
+    }
+    pub async fn list_error_reports(
+        &self,
+        input: ErrorReportListRecordInput,
+    ) -> Result<(Vec<ErrorReportRecord>, u64), SpacetimeClientError> {
+        let input = input.into();
+        self.call_after_connect("list_error_reports_and_return", move |c, s| {
+            c.procedures()
+                .list_error_reports_and_return_then(input, move |_, r| {
+                    send_once(
+                        &s,
+                        r.map_err(SpacetimeClientError::from_sdk_error)
+                            .and_then(map_error_report_list_result),
+                    )
+                })
+        })
+        .await
+    }
+    pub async fn update_error_report(
+        &self,
+        input: ErrorReportUpdateRecordInput,
+    ) -> Result<ErrorReportRecord, SpacetimeClientError> {
+        let input = input.into();
+        self.call_after_connect("update_error_report_and_return", move |c, s| {
+            c.procedures()
+                .update_error_report_and_return_then(input, move |_, r| {
+                    send_once(
+                        &s,
+                        r.map_err(SpacetimeClientError::from_sdk_error)
+                            .and_then(map_error_report_result),
+                    )
+                })
+        })
+        .await
+    }
+    pub async fn delete_error_report(
+        &self,
+        batch_id: String,
+    ) -> Result<ErrorReportRecord, SpacetimeClientError> {
+        let input = ErrorReportDeleteInput { batch_id };
+        self.call_after_connect("delete_error_report_and_return", move |c, s| {
+            c.procedures()
+                .delete_error_report_and_return_then(input, move |_, r| {
+                    send_once(
+                        &s,
+                        r.map_err(SpacetimeClientError::from_sdk_error)
+                            .and_then(map_error_report_result),
+                    )
+                })
+        })
+        .await
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/active/mapper.rs b/server-rs/crates/spacetime-client/src/active/mapper.rs
index 66845286e..22bd3283d 100644
--- a/server-rs/crates/spacetime-client/src/active/mapper.rs
+++ b/server-rs/crates/spacetime-client/src/active/mapper.rs
@@ -14,6 +14,8 @@ mod auth;
 mod editor_agent;
 #[path = "mapper/editor_project.rs"]
 mod editor_project;
+#[path = "mapper/error_reports.rs"]
+mod error_reports;
 #[path = "mapper/external_api_key.rs"]
 mod external_api_key;
 #[path = "mapper/external_generation.rs"]
@@ -67,6 +69,10 @@ pub use self::editor_project::{
     EditorShowcaseAssetViewerRecord, EditorShowcaseCampaignConfigGetRecordInput,
     EditorShowcaseCampaignConfigRecord, EditorShowcaseCampaignConfigUpsertRecordInput,
 };
+pub use self::error_reports::{
+    ErrorReportCreateRecordInput, ErrorReportListRecordInput, ErrorReportRecord,
+    ErrorReportUpdateRecordInput,
+};
 pub use self::external_api_key::{
     ExternalApiKeyAuthenticateRecordInput, ExternalApiKeyCreateRecordInput, ExternalApiKeyRecord,
     ExternalApiKeyRevokeRecordInput,
@@ -118,6 +124,7 @@ pub(crate) use self::editor_project::{
     map_editor_showcase_campaign_config_procedure_result,
     map_optional_editor_asset_procedure_result,
 };
+pub(crate) use self::error_reports::{map_error_report_list_result, map_error_report_result};
 pub(crate) use self::external_api_key::{
     map_external_api_key_list_procedure_result, map_external_api_key_single_procedure_result,
 };
diff --git a/server-rs/crates/spacetime-client/src/active/mapper/error_reports.rs b/server-rs/crates/spacetime-client/src/active/mapper/error_reports.rs
new file mode 100644
index 000000000..7d1f96a5d
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/active/mapper/error_reports.rs
@@ -0,0 +1,124 @@
+use super::*;
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct ErrorReportRecord {
+    pub batch_id: String,
+    pub user_id: String,
+    pub submission_id: String,
+    pub idempotency_key: String,
+    pub object_key: String,
+    pub archive_sha256: String,
+    pub archive_size_bytes: u64,
+    pub event_count: u32,
+    pub log_count: u32,
+    pub first_fingerprint: Option<String>,
+    pub first_source: Option<String>,
+    pub review_status: String,
+    pub admin_note: Option<String>,
+    pub created_at: String,
+    pub updated_at: String,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct ErrorReportCreateRecordInput {
+    pub batch_id: String,
+    pub submission_id: String,
+    pub idempotency_key: String,
+    pub user_id: String,
+    pub object_key: String,
+    pub archive_sha256: String,
+    pub archive_size_bytes: u64,
+    pub event_count: u32,
+    pub log_count: u32,
+    pub first_fingerprint: Option<String>,
+    pub first_source: Option<String>,
+}
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct ErrorReportListRecordInput {
+    pub status: Option<String>,
+    pub fingerprint: Option<String>,
+    pub source: Option<String>,
+    pub limit: u32,
+    pub offset: u32,
+}
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct ErrorReportUpdateRecordInput {
+    pub batch_id: String,
+    pub status: String,
+    pub note: Option<String>,
+}
+
+fn map(s: ErrorReportSnapshot) -> ErrorReportRecord {
+    ErrorReportRecord {
+        batch_id: s.batch_id,
+        user_id: s.user_id,
+        submission_id: s.submission_id,
+        idempotency_key: s.idempotency_key,
+        object_key: s.object_key,
+        archive_sha256: s.archive_sha_256,
+        archive_size_bytes: s.archive_size_bytes,
+        event_count: s.event_count,
+        log_count: s.log_count,
+        first_fingerprint: s.first_fingerprint,
+        first_source: s.first_source,
+        review_status: s.review_status,
+        admin_note: s.admin_note,
+        created_at: format_timestamp_micros(s.created_at_micros),
+        updated_at: format_timestamp_micros(s.updated_at_micros),
+    }
+}
+pub(crate) fn map_error_report_result(
+    r: ErrorReportProcedureResult,
+) -> Result<ErrorReportRecord, SpacetimeClientError> {
+    if !r.ok {
+        return Err(SpacetimeClientError::procedure_failed(r.error_message));
+    }
+    r.report
+        .map(map)
+        .ok_or_else(|| SpacetimeClientError::missing_snapshot("错误报告快照"))
+}
+pub(crate) fn map_error_report_list_result(
+    r: ErrorReportProcedureResult,
+) -> Result<(Vec<ErrorReportRecord>, u64), SpacetimeClientError> {
+    if !r.ok {
+        return Err(SpacetimeClientError::procedure_failed(r.error_message));
+    }
+    Ok((r.reports.into_iter().map(map).collect(), r.total))
+}
+impl From<ErrorReportCreateRecordInput> for ErrorReportCreateInput {
+    fn from(i: ErrorReportCreateRecordInput) -> Self {
+        Self {
+            batch_id: i.batch_id,
+            submission_id: i.submission_id,
+            idempotency_key: i.idempotency_key,
+            user_id: i.user_id,
+            object_key: i.object_key,
+            archive_sha_256: i.archive_sha256,
+            archive_size_bytes: i.archive_size_bytes,
+            event_count: i.event_count,
+            log_count: i.log_count,
+            first_fingerprint: i.first_fingerprint,
+            first_source: i.first_source,
+        }
+    }
+}
+impl From<ErrorReportListRecordInput> for ErrorReportListInput {
+    fn from(i: ErrorReportListRecordInput) -> Self {
+        Self {
+            status: i.status,
+            fingerprint: i.fingerprint,
+            source: i.source,
+            limit: i.limit,
+            offset: i.offset,
+        }
+    }
+}
+impl From<ErrorReportUpdateRecordInput> for ErrorReportUpdateInput {
+    fn from(i: ErrorReportUpdateRecordInput) -> Self {
+        Self {
+            batch_id: i.batch_id,
+            status: i.status,
+            note: i.note,
+        }
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings.rs b/server-rs/crates/spacetime-client/src/module_bindings.rs
index f6c9c3b9d..98c63e1c9 100644
--- a/server-rs/crates/spacetime-client/src/module_bindings.rs
+++ b/server-rs/crates/spacetime-client/src/module_bindings.rs
@@ -197,6 +197,7 @@ pub mod create_editor_asset_and_return_procedure;
 pub mod create_editor_asset_folder_and_return_procedure;
 pub mod create_editor_project_and_return_procedure;
 pub mod create_editor_project_resource_and_return_procedure;
+pub mod create_error_report_and_return_procedure;
 pub mod create_external_api_key_and_return_procedure;
 pub mod create_profile_recharge_order_and_return_procedure;
 pub mod creation_entry_config_table;
@@ -241,6 +242,7 @@ pub mod delete_editor_agent_conversation_and_return_procedure;
 pub mod delete_editor_asset_and_return_procedure;
 pub mod delete_editor_asset_folder_and_return_procedure;
 pub mod delete_editor_project_and_return_procedure;
+pub mod delete_error_report_and_return_procedure;
 pub mod editor_agent_conversation_create_input_type;
 pub mod editor_agent_conversation_delete_input_type;
 pub mod editor_agent_conversation_get_input_type;
@@ -385,6 +387,15 @@ pub mod editor_spritesheet_slice_persisted_item_type;
 pub mod enqueue_external_generation_job_and_return_procedure;
 pub mod enqueue_profile_wallet_refund_outbox_and_return_procedure;
 pub mod ensure_analytics_date_dimension_for_date_reducer;
+pub mod error_report_create_input_type;
+pub mod error_report_delete_input_type;
+pub mod error_report_get_input_type;
+pub mod error_report_list_input_type;
+pub mod error_report_procedure_result_type;
+pub mod error_report_snapshot_type;
+pub mod error_report_table;
+pub mod error_report_type;
+pub mod error_report_update_input_type;
 pub mod expire_profile_recharge_order_timer_reducer;
 pub mod export_auth_store_projection_from_tables_procedure;
 pub mod export_database_migration_to_file_procedure;
@@ -446,6 +457,7 @@ pub mod get_editor_asset_library_and_return_procedure;
 pub mod get_editor_generation_pricing_config_and_return_procedure;
 pub mod get_editor_project_and_return_procedure;
 pub mod get_editor_showcase_campaign_config_and_return_procedure;
+pub mod get_error_report_and_return_procedure;
 pub mod get_external_generation_job_and_return_procedure;
 pub mod get_external_generation_job_result_and_return_procedure;
 pub mod get_external_generation_job_summary_and_return_procedure;
@@ -486,6 +498,7 @@ pub mod list_admin_accounts_and_return_procedure;
 pub mod list_asset_history_and_return_procedure;
 pub mod list_editor_agent_conversations_and_return_procedure;
 pub mod list_editor_projects_and_return_procedure;
+pub mod list_error_reports_and_return_procedure;
 pub mod list_external_api_keys_and_return_procedure;
 pub mod list_external_generation_job_summaries_and_return_procedure;
 pub mod list_external_generation_jobs_and_return_procedure;
@@ -849,6 +862,7 @@ pub mod update_editor_asset_and_return_procedure;
 pub mod update_editor_asset_folder_and_return_procedure;
 pub mod update_editor_project_resource_showcase_and_return_procedure;
 pub mod update_editor_showcase_asset_display_and_return_procedure;
+pub mod update_error_report_and_return_procedure;
 pub mod update_external_generation_job_phase_and_return_procedure;
 pub mod upsert_editor_generation_pricing_config_and_return_procedure;
 pub mod upsert_editor_showcase_campaign_config_and_return_procedure;
@@ -1071,6 +1085,7 @@ pub use create_editor_asset_and_return_procedure::create_editor_asset_and_return
 pub use create_editor_asset_folder_and_return_procedure::create_editor_asset_folder_and_return;
 pub use create_editor_project_and_return_procedure::create_editor_project_and_return;
 pub use create_editor_project_resource_and_return_procedure::create_editor_project_resource_and_return;
+pub use create_error_report_and_return_procedure::create_error_report_and_return;
 pub use create_external_api_key_and_return_procedure::create_external_api_key_and_return;
 pub use create_profile_recharge_order_and_return_procedure::create_profile_recharge_order_and_return;
 pub use creation_entry_config_table::*;
@@ -1115,6 +1130,7 @@ pub use delete_editor_agent_conversation_and_return_procedure::delete_editor_age
 pub use delete_editor_asset_and_return_procedure::delete_editor_asset_and_return;
 pub use delete_editor_asset_folder_and_return_procedure::delete_editor_asset_folder_and_return;
 pub use delete_editor_project_and_return_procedure::delete_editor_project_and_return;
+pub use delete_error_report_and_return_procedure::delete_error_report_and_return;
 pub use editor_agent_conversation_create_input_type::EditorAgentConversationCreateInput;
 pub use editor_agent_conversation_delete_input_type::EditorAgentConversationDeleteInput;
 pub use editor_agent_conversation_get_input_type::EditorAgentConversationGetInput;
@@ -1259,6 +1275,15 @@ pub use editor_spritesheet_slice_persisted_item_type::EditorSpritesheetSlicePers
 pub use enqueue_external_generation_job_and_return_procedure::enqueue_external_generation_job_and_return;
 pub use enqueue_profile_wallet_refund_outbox_and_return_procedure::enqueue_profile_wallet_refund_outbox_and_return;
 pub use ensure_analytics_date_dimension_for_date_reducer::ensure_analytics_date_dimension_for_date;
+pub use error_report_create_input_type::ErrorReportCreateInput;
+pub use error_report_delete_input_type::ErrorReportDeleteInput;
+pub use error_report_get_input_type::ErrorReportGetInput;
+pub use error_report_list_input_type::ErrorReportListInput;
+pub use error_report_procedure_result_type::ErrorReportProcedureResult;
+pub use error_report_snapshot_type::ErrorReportSnapshot;
+pub use error_report_table::*;
+pub use error_report_type::ErrorReport;
+pub use error_report_update_input_type::ErrorReportUpdateInput;
 pub use expire_profile_recharge_order_timer_reducer::expire_profile_recharge_order_timer;
 pub use export_auth_store_projection_from_tables_procedure::export_auth_store_projection_from_tables;
 pub use export_database_migration_to_file_procedure::export_database_migration_to_file;
@@ -1320,6 +1345,7 @@ pub use get_editor_asset_library_and_return_procedure::get_editor_asset_library_
 pub use get_editor_generation_pricing_config_and_return_procedure::get_editor_generation_pricing_config_and_return;
 pub use get_editor_project_and_return_procedure::get_editor_project_and_return;
 pub use get_editor_showcase_campaign_config_and_return_procedure::get_editor_showcase_campaign_config_and_return;
+pub use get_error_report_and_return_procedure::get_error_report_and_return;
 pub use get_external_generation_job_and_return_procedure::get_external_generation_job_and_return;
 pub use get_external_generation_job_result_and_return_procedure::get_external_generation_job_result_and_return;
 pub use get_external_generation_job_summary_and_return_procedure::get_external_generation_job_summary_and_return;
@@ -1360,6 +1386,7 @@ pub use list_admin_accounts_and_return_procedure::list_admin_accounts_and_return
 pub use list_asset_history_and_return_procedure::list_asset_history_and_return;
 pub use list_editor_agent_conversations_and_return_procedure::list_editor_agent_conversations_and_return;
 pub use list_editor_projects_and_return_procedure::list_editor_projects_and_return;
+pub use list_error_reports_and_return_procedure::list_error_reports_and_return;
 pub use list_external_api_keys_and_return_procedure::list_external_api_keys_and_return;
 pub use list_external_generation_job_summaries_and_return_procedure::list_external_generation_job_summaries_and_return;
 pub use list_external_generation_jobs_and_return_procedure::list_external_generation_jobs_and_return;
@@ -1723,6 +1750,7 @@ pub use update_editor_asset_and_return_procedure::update_editor_asset_and_return
 pub use update_editor_asset_folder_and_return_procedure::update_editor_asset_folder_and_return;
 pub use update_editor_project_resource_showcase_and_return_procedure::update_editor_project_resource_showcase_and_return;
 pub use update_editor_showcase_asset_display_and_return_procedure::update_editor_showcase_asset_display_and_return;
+pub use update_error_report_and_return_procedure::update_error_report_and_return;
 pub use update_external_generation_job_phase_and_return_procedure::update_external_generation_job_phase_and_return;
 pub use upsert_editor_generation_pricing_config_and_return_procedure::upsert_editor_generation_pricing_config_and_return;
 pub use upsert_editor_showcase_campaign_config_and_return_procedure::upsert_editor_showcase_campaign_config_and_return;
@@ -1919,6 +1947,7 @@ pub struct DbUpdate {
     editor_showcase_asset: __sdk::TableUpdate<EditorShowcaseAsset>,
     editor_showcase_asset_like: __sdk::TableUpdate<EditorShowcaseAssetLike>,
     editor_showcase_campaign_config: __sdk::TableUpdate<EditorShowcaseCampaignConfig>,
+    error_report: __sdk::TableUpdate<ErrorReport>,
     external_api_key: __sdk::TableUpdate<ExternalApiKey>,
     external_generation_job: __sdk::TableUpdate<ExternalGenerationJob>,
     external_generation_job_event: __sdk::TableUpdate<ExternalGenerationJobEvent>,
@@ -2211,6 +2240,9 @@ impl TryFrom<__ws::v2::TransactionUpdate> for DbUpdate {
                         editor_showcase_campaign_config_table::parse_table_update(table_update)?,
                     )
                 }
+                "error_report" => db_update
+                    .error_report
+                    .append(error_report_table::parse_table_update(table_update)?),
                 "external_api_key" => db_update
                     .external_api_key
                     .append(external_api_key_table::parse_table_update(table_update)?),
@@ -2812,6 +2844,9 @@ impl __sdk::DbUpdate for DbUpdate {
                 &self.editor_showcase_campaign_config,
             )
             .with_updates_by_pk(|row| &row.config_id);
+        diff.error_report = cache
+            .apply_diff_to_table::<ErrorReport>("error_report", &self.error_report)
+            .with_updates_by_pk(|row| &row.batch_id);
         diff.external_api_key = cache
             .apply_diff_to_table::<ExternalApiKey>("external_api_key", &self.external_api_key)
             .with_updates_by_pk(|row| &row.key_id);
@@ -3433,6 +3468,9 @@ impl __sdk::DbUpdate for DbUpdate {
                 "editor_showcase_campaign_config" => db_update
                     .editor_showcase_campaign_config
                     .append(__sdk::parse_row_list_as_inserts(table_rows.rows)?),
+                "error_report" => db_update
+                    .error_report
+                    .append(__sdk::parse_row_list_as_inserts(table_rows.rows)?),
                 "external_api_key" => db_update
                     .external_api_key
                     .append(__sdk::parse_row_list_as_inserts(table_rows.rows)?),
@@ -3866,6 +3904,9 @@ impl __sdk::DbUpdate for DbUpdate {
                 "editor_showcase_campaign_config" => db_update
                     .editor_showcase_campaign_config
                     .append(__sdk::parse_row_list_as_deletes(table_rows.rows)?),
+                "error_report" => db_update
+                    .error_report
+                    .append(__sdk::parse_row_list_as_deletes(table_rows.rows)?),
                 "external_api_key" => db_update
                     .external_api_key
                     .append(__sdk::parse_row_list_as_deletes(table_rows.rows)?),
@@ -4193,6 +4234,7 @@ pub struct AppliedDiff<'r> {
     editor_showcase_asset: __sdk::TableAppliedDiff<'r, EditorShowcaseAsset>,
     editor_showcase_asset_like: __sdk::TableAppliedDiff<'r, EditorShowcaseAssetLike>,
     editor_showcase_campaign_config: __sdk::TableAppliedDiff<'r, EditorShowcaseCampaignConfig>,
+    error_report: __sdk::TableAppliedDiff<'r, ErrorReport>,
     external_api_key: __sdk::TableAppliedDiff<'r, ExternalApiKey>,
     external_generation_job: __sdk::TableAppliedDiff<'r, ExternalGenerationJob>,
     external_generation_job_event: __sdk::TableAppliedDiff<'r, ExternalGenerationJobEvent>,
@@ -4568,6 +4610,11 @@ impl<'r> __sdk::AppliedDiff<'r> for AppliedDiff<'r> {
             &self.editor_showcase_campaign_config,
             event,
         );
+        callbacks.invoke_table_row_callbacks::<ErrorReport>(
+            "error_report",
+            &self.error_report,
+            event,
+        );
         callbacks.invoke_table_row_callbacks::<ExternalApiKey>(
             "external_api_key",
             &self.external_api_key,
@@ -5231,19 +5278,19 @@ impl __sdk::SubscriptionHandle for SubscriptionHandle {
 /// either a [`DbConnection`] or an [`EventContext`] and operate on either.
 pub trait RemoteDbContext:
     __sdk::DbContext<
-        DbView = RemoteTables,
-        Reducers = RemoteReducers,
-        SubscriptionBuilder = __sdk::SubscriptionBuilder<RemoteModule>,
-    >
+    DbView = RemoteTables,
+    Reducers = RemoteReducers,
+    SubscriptionBuilder = __sdk::SubscriptionBuilder<RemoteModule>,
+>
 {
 }
 impl<
-    Ctx: __sdk::DbContext<
+        Ctx: __sdk::DbContext<
             DbView = RemoteTables,
             Reducers = RemoteReducers,
             SubscriptionBuilder = __sdk::SubscriptionBuilder<RemoteModule>,
         >,
-> RemoteDbContext for Ctx
+    > RemoteDbContext for Ctx
 {
 }
 
@@ -5692,6 +5739,7 @@ impl __sdk::SpacetimeModule for RemoteModule {
         editor_showcase_asset_table::register_table(client_cache);
         editor_showcase_asset_like_table::register_table(client_cache);
         editor_showcase_campaign_config_table::register_table(client_cache);
+        error_report_table::register_table(client_cache);
         external_api_key_table::register_table(client_cache);
         external_generation_job_table::register_table(client_cache);
         external_generation_job_event_table::register_table(client_cache);
@@ -5834,6 +5882,7 @@ impl __sdk::SpacetimeModule for RemoteModule {
         "editor_showcase_asset",
         "editor_showcase_asset_like",
         "editor_showcase_campaign_config",
+        "error_report",
         "external_api_key",
         "external_generation_job",
         "external_generation_job_event",
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/create_error_report_and_return_procedure.rs b/server-rs/crates/spacetime-client/src/module_bindings/create_error_report_and_return_procedure.rs
new file mode 100644
index 000000000..cead7fda8
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/create_error_report_and_return_procedure.rs
@@ -0,0 +1,59 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::error_report_create_input_type::ErrorReportCreateInput;
+use super::error_report_procedure_result_type::ErrorReportProcedureResult;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+struct CreateErrorReportAndReturnArgs {
+    pub input: ErrorReportCreateInput,
+}
+
+impl __sdk::InModule for CreateErrorReportAndReturnArgs {
+    type Module = super::RemoteModule;
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the procedure `create_error_report_and_return`.
+///
+/// Implemented for [`super::RemoteProcedures`].
+pub trait create_error_report_and_return {
+    fn create_error_report_and_return(&self, input: ErrorReportCreateInput) {
+        self.create_error_report_and_return_then(input, |_, _| {});
+    }
+
+    fn create_error_report_and_return_then(
+        &self,
+        input: ErrorReportCreateInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ErrorReportProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    );
+}
+
+impl create_error_report_and_return for super::RemoteProcedures {
+    fn create_error_report_and_return_then(
+        &self,
+        input: ErrorReportCreateInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ErrorReportProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    ) {
+        self.imp
+            .invoke_procedure_with_callback::<_, ErrorReportProcedureResult>(
+                "create_error_report_and_return",
+                CreateErrorReportAndReturnArgs { input },
+                __callback,
+            );
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/delete_error_report_and_return_procedure.rs b/server-rs/crates/spacetime-client/src/module_bindings/delete_error_report_and_return_procedure.rs
new file mode 100644
index 000000000..f4070c42a
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/delete_error_report_and_return_procedure.rs
@@ -0,0 +1,59 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::error_report_delete_input_type::ErrorReportDeleteInput;
+use super::error_report_procedure_result_type::ErrorReportProcedureResult;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+struct DeleteErrorReportAndReturnArgs {
+    pub input: ErrorReportDeleteInput,
+}
+
+impl __sdk::InModule for DeleteErrorReportAndReturnArgs {
+    type Module = super::RemoteModule;
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the procedure `delete_error_report_and_return`.
+///
+/// Implemented for [`super::RemoteProcedures`].
+pub trait delete_error_report_and_return {
+    fn delete_error_report_and_return(&self, input: ErrorReportDeleteInput) {
+        self.delete_error_report_and_return_then(input, |_, _| {});
+    }
+
+    fn delete_error_report_and_return_then(
+        &self,
+        input: ErrorReportDeleteInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ErrorReportProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    );
+}
+
+impl delete_error_report_and_return for super::RemoteProcedures {
+    fn delete_error_report_and_return_then(
+        &self,
+        input: ErrorReportDeleteInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ErrorReportProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    ) {
+        self.imp
+            .invoke_procedure_with_callback::<_, ErrorReportProcedureResult>(
+                "delete_error_report_and_return",
+                DeleteErrorReportAndReturnArgs { input },
+                __callback,
+            );
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/error_report_create_input_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/error_report_create_input_type.rs
new file mode 100644
index 000000000..50f283f45
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/error_report_create_input_type.rs
@@ -0,0 +1,25 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ErrorReportCreateInput {
+    pub batch_id: String,
+    pub submission_id: String,
+    pub idempotency_key: String,
+    pub user_id: String,
+    pub object_key: String,
+    pub archive_sha_256: String,
+    pub archive_size_bytes: u64,
+    pub event_count: u32,
+    pub log_count: u32,
+    pub first_fingerprint: Option<String>,
+    pub first_source: Option<String>,
+}
+
+impl __sdk::InModule for ErrorReportCreateInput {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/error_report_delete_input_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/error_report_delete_input_type.rs
new file mode 100644
index 000000000..11babf06f
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/error_report_delete_input_type.rs
@@ -0,0 +1,15 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ErrorReportDeleteInput {
+    pub batch_id: String,
+}
+
+impl __sdk::InModule for ErrorReportDeleteInput {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/error_report_get_input_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/error_report_get_input_type.rs
new file mode 100644
index 000000000..97d9aed59
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/error_report_get_input_type.rs
@@ -0,0 +1,15 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ErrorReportGetInput {
+    pub batch_id: String,
+}
+
+impl __sdk::InModule for ErrorReportGetInput {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/error_report_list_input_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/error_report_list_input_type.rs
new file mode 100644
index 000000000..47d5bb9de
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/error_report_list_input_type.rs
@@ -0,0 +1,19 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ErrorReportListInput {
+    pub status: Option<String>,
+    pub fingerprint: Option<String>,
+    pub source: Option<String>,
+    pub limit: u32,
+    pub offset: u32,
+}
+
+impl __sdk::InModule for ErrorReportListInput {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/error_report_procedure_result_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/error_report_procedure_result_type.rs
new file mode 100644
index 000000000..61cd14056
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/error_report_procedure_result_type.rs
@@ -0,0 +1,21 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::error_report_snapshot_type::ErrorReportSnapshot;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ErrorReportProcedureResult {
+    pub ok: bool,
+    pub report: Option<ErrorReportSnapshot>,
+    pub reports: Vec<ErrorReportSnapshot>,
+    pub total: u64,
+    pub error_message: Option<String>,
+}
+
+impl __sdk::InModule for ErrorReportProcedureResult {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/error_report_snapshot_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/error_report_snapshot_type.rs
new file mode 100644
index 000000000..0bc2c9d2f
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/error_report_snapshot_type.rs
@@ -0,0 +1,29 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ErrorReportSnapshot {
+    pub batch_id: String,
+    pub user_id: String,
+    pub submission_id: String,
+    pub idempotency_key: String,
+    pub object_key: String,
+    pub archive_sha_256: String,
+    pub archive_size_bytes: u64,
+    pub event_count: u32,
+    pub log_count: u32,
+    pub first_fingerprint: Option<String>,
+    pub first_source: Option<String>,
+    pub review_status: String,
+    pub admin_note: Option<String>,
+    pub created_at_micros: i64,
+    pub updated_at_micros: i64,
+}
+
+impl __sdk::InModule for ErrorReportSnapshot {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/error_report_table.rs b/server-rs/crates/spacetime-client/src/module_bindings/error_report_table.rs
new file mode 100644
index 000000000..916e6b2aa
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/error_report_table.rs
@@ -0,0 +1,259 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use super::error_report_type::ErrorReport;
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+/// Table handle for the table `error_report`.
+///
+/// Obtain a handle from the [`ErrorReportTableAccess::error_report`] method on [`super::RemoteTables`],
+/// like `ctx.db.error_report()`.
+///
+/// Users are encouraged not to explicitly reference this type,
+/// but to directly chain method calls,
+/// like `ctx.db.error_report().on_insert(...)`.
+pub struct ErrorReportTableHandle<'ctx> {
+    imp: __sdk::TableHandle<ErrorReport>,
+    ctx: std::marker::PhantomData<&'ctx super::RemoteTables>,
+}
+
+/// Lifetime-aware accessor marker for the table `error_report`.
+pub struct ErrorReportTableAccessor;
+
+impl __sdk::TableAccessor<super::RemoteTables> for ErrorReportTableAccessor {
+    type Row = ErrorReport;
+    type Handle<'db> = ErrorReportTableHandle<'db>;
+
+    fn get<'db>(db: &'db super::RemoteTables) -> Self::Handle<'db> {
+        db.error_report()
+    }
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the table `error_report`.
+///
+/// Implemented for [`super::RemoteTables`].
+pub trait ErrorReportTableAccess {
+    #[allow(non_snake_case)]
+    /// Obtain a [`ErrorReportTableHandle`], which mediates access to the table `error_report`.
+    fn error_report(&self) -> ErrorReportTableHandle<'_>;
+}
+
+impl ErrorReportTableAccess for super::RemoteTables {
+    fn error_report(&self) -> ErrorReportTableHandle<'_> {
+        ErrorReportTableHandle {
+            imp: self.imp.get_table::<ErrorReport>("error_report"),
+            ctx: std::marker::PhantomData,
+        }
+    }
+}
+
+pub struct ErrorReportInsertCallbackId(__sdk::CallbackId);
+pub struct ErrorReportDeleteCallbackId(__sdk::CallbackId);
+
+impl<'ctx> __sdk::TableLike for ErrorReportTableHandle<'ctx> {
+    type Row = ErrorReport;
+    type EventContext = super::EventContext;
+
+    fn count(&self) -> u64 {
+        self.imp.count()
+    }
+    fn iter(&self) -> impl Iterator<Item = ErrorReport> + '_ {
+        self.imp.iter()
+    }
+}
+
+impl<'ctx> __sdk::Table for ErrorReportTableHandle<'ctx> {
+    type Row = ErrorReport;
+    type EventContext = super::EventContext;
+
+    fn count(&self) -> u64 {
+        self.imp.count()
+    }
+    fn iter(&self) -> impl Iterator<Item = ErrorReport> + '_ {
+        self.imp.iter()
+    }
+
+    type InsertCallbackId = ErrorReportInsertCallbackId;
+
+    fn on_insert(
+        &self,
+        callback: impl FnMut(&Self::EventContext, &Self::Row) + Send + 'static,
+    ) -> ErrorReportInsertCallbackId {
+        ErrorReportInsertCallbackId(self.imp.on_insert(Box::new(callback)))
+    }
+
+    fn remove_on_insert(&self, callback: ErrorReportInsertCallbackId) {
+        self.imp.remove_on_insert(callback.0)
+    }
+
+    type DeleteCallbackId = ErrorReportDeleteCallbackId;
+
+    fn on_delete(
+        &self,
+        callback: impl FnMut(&Self::EventContext, &Self::Row) + Send + 'static,
+    ) -> ErrorReportDeleteCallbackId {
+        ErrorReportDeleteCallbackId(self.imp.on_delete(Box::new(callback)))
+    }
+
+    fn remove_on_delete(&self, callback: ErrorReportDeleteCallbackId) {
+        self.imp.remove_on_delete(callback.0)
+    }
+}
+
+impl<'ctx> __sdk::WithInsert for ErrorReportTableHandle<'ctx> {
+    type InsertCallbackId = ErrorReportInsertCallbackId;
+
+    fn on_insert(
+        &self,
+        callback: impl FnMut(&Self::EventContext, &Self::Row) + Send + 'static,
+    ) -> ErrorReportInsertCallbackId {
+        ErrorReportInsertCallbackId(self.imp.on_insert(Box::new(callback)))
+    }
+
+    fn remove_on_insert(&self, callback: ErrorReportInsertCallbackId) {
+        self.imp.remove_on_insert(callback.0)
+    }
+}
+
+impl<'ctx> __sdk::WithDelete for ErrorReportTableHandle<'ctx> {
+    type DeleteCallbackId = ErrorReportDeleteCallbackId;
+
+    fn on_delete(
+        &self,
+        callback: impl FnMut(&Self::EventContext, &Self::Row) + Send + 'static,
+    ) -> ErrorReportDeleteCallbackId {
+        ErrorReportDeleteCallbackId(self.imp.on_delete(Box::new(callback)))
+    }
+
+    fn remove_on_delete(&self, callback: ErrorReportDeleteCallbackId) {
+        self.imp.remove_on_delete(callback.0)
+    }
+}
+
+pub struct ErrorReportUpdateCallbackId(__sdk::CallbackId);
+
+impl<'ctx> __sdk::TableWithPrimaryKey for ErrorReportTableHandle<'ctx> {
+    type UpdateCallbackId = ErrorReportUpdateCallbackId;
+
+    fn on_update(
+        &self,
+        callback: impl FnMut(&Self::EventContext, &Self::Row, &Self::Row) + Send + 'static,
+    ) -> ErrorReportUpdateCallbackId {
+        ErrorReportUpdateCallbackId(self.imp.on_update(Box::new(callback)))
+    }
+
+    fn remove_on_update(&self, callback: ErrorReportUpdateCallbackId) {
+        self.imp.remove_on_update(callback.0)
+    }
+}
+
+impl<'ctx> __sdk::WithUpdate for ErrorReportTableHandle<'ctx> {
+    type UpdateCallbackId = ErrorReportUpdateCallbackId;
+
+    fn on_update(
+        &self,
+        callback: impl FnMut(&Self::EventContext, &Self::Row, &Self::Row) + Send + 'static,
+    ) -> ErrorReportUpdateCallbackId {
+        ErrorReportUpdateCallbackId(self.imp.on_update(Box::new(callback)))
+    }
+
+    fn remove_on_update(&self, callback: ErrorReportUpdateCallbackId) {
+        self.imp.remove_on_update(callback.0)
+    }
+}
+
+/// Access to the `batch_id` unique index on the table `error_report`,
+/// which allows point queries on the field of the same name
+/// via the [`ErrorReportBatchIdUnique::find`] method.
+///
+/// Users are encouraged not to explicitly reference this type,
+/// but to directly chain method calls,
+/// like `ctx.db.error_report().batch_id().find(...)`.
+pub struct ErrorReportBatchIdUnique<'ctx> {
+    imp: __sdk::UniqueConstraintHandle<ErrorReport, String>,
+    phantom: std::marker::PhantomData<&'ctx super::RemoteTables>,
+}
+
+impl<'ctx> ErrorReportTableHandle<'ctx> {
+    /// Get a handle on the `batch_id` unique index on the table `error_report`.
+    pub fn batch_id(&self) -> ErrorReportBatchIdUnique<'ctx> {
+        ErrorReportBatchIdUnique {
+            imp: self.imp.get_unique_constraint::<String>("batch_id"),
+            phantom: std::marker::PhantomData,
+        }
+    }
+}
+
+impl<'ctx> ErrorReportBatchIdUnique<'ctx> {
+    /// Find the subscribed row whose `batch_id` column value is equal to `col_val`,
+    /// if such a row is present in the client cache.
+    pub fn find(&self, col_val: &String) -> Option<ErrorReport> {
+        self.imp.find(col_val)
+    }
+}
+
+/// Access to the `idempotency_key` unique index on the table `error_report`,
+/// which allows point queries on the field of the same name
+/// via the [`ErrorReportIdempotencyKeyUnique::find`] method.
+///
+/// Users are encouraged not to explicitly reference this type,
+/// but to directly chain method calls,
+/// like `ctx.db.error_report().idempotency_key().find(...)`.
+pub struct ErrorReportIdempotencyKeyUnique<'ctx> {
+    imp: __sdk::UniqueConstraintHandle<ErrorReport, String>,
+    phantom: std::marker::PhantomData<&'ctx super::RemoteTables>,
+}
+
+impl<'ctx> ErrorReportTableHandle<'ctx> {
+    /// Get a handle on the `idempotency_key` unique index on the table `error_report`.
+    pub fn idempotency_key(&self) -> ErrorReportIdempotencyKeyUnique<'ctx> {
+        ErrorReportIdempotencyKeyUnique {
+            imp: self.imp.get_unique_constraint::<String>("idempotency_key"),
+            phantom: std::marker::PhantomData,
+        }
+    }
+}
+
+impl<'ctx> ErrorReportIdempotencyKeyUnique<'ctx> {
+    /// Find the subscribed row whose `idempotency_key` column value is equal to `col_val`,
+    /// if such a row is present in the client cache.
+    pub fn find(&self, col_val: &String) -> Option<ErrorReport> {
+        self.imp.find(col_val)
+    }
+}
+
+#[doc(hidden)]
+pub(super) fn register_table(client_cache: &mut __sdk::ClientCache<super::RemoteModule>) {
+    let _table = client_cache.get_or_make_table::<ErrorReport>("error_report");
+    _table.add_unique_constraint::<String>("batch_id", |row| &row.batch_id);
+    _table.add_unique_constraint::<String>("idempotency_key", |row| &row.idempotency_key);
+}
+
+#[doc(hidden)]
+pub(super) fn parse_table_update(
+    raw_updates: __ws::v2::TableUpdate,
+) -> __sdk::Result<__sdk::TableUpdate<ErrorReport>> {
+    __sdk::TableUpdate::parse_table_update(raw_updates).map_err(|e| {
+        __sdk::InternalError::failed_parse("TableUpdate<ErrorReport>", "TableUpdate")
+            .with_cause(e)
+            .into()
+    })
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for query builder access to the table `ErrorReport`.
+///
+/// Implemented for [`__sdk::QueryTableAccessor`].
+pub trait error_reportQueryTableAccess {
+    #[allow(non_snake_case)]
+    /// Get a query builder for the table `ErrorReport`.
+    fn error_report(&self) -> __sdk::__query_builder::Table<ErrorReport>;
+}
+
+impl error_reportQueryTableAccess for __sdk::QueryTableAccessor {
+    fn error_report(&self) -> __sdk::__query_builder::Table<ErrorReport> {
+        __sdk::__query_builder::Table::new("error_report")
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/error_report_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/error_report_type.rs
new file mode 100644
index 000000000..300de9bf5
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/error_report_type.rs
@@ -0,0 +1,97 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ErrorReport {
+    pub batch_id: String,
+    pub user_id: String,
+    pub submission_id: String,
+    pub idempotency_key: String,
+    pub object_key: String,
+    pub archive_sha_256: String,
+    pub archive_size_bytes: u64,
+    pub event_count: u32,
+    pub log_count: u32,
+    pub first_fingerprint: Option<String>,
+    pub first_source: Option<String>,
+    pub review_status: String,
+    pub admin_note: Option<String>,
+    pub created_at: __sdk::Timestamp,
+    pub updated_at: __sdk::Timestamp,
+}
+
+impl __sdk::InModule for ErrorReport {
+    type Module = super::RemoteModule;
+}
+
+/// Column accessor struct for the table `ErrorReport`.
+///
+/// Provides typed access to columns for query building.
+pub struct ErrorReportCols {
+    pub batch_id: __sdk::__query_builder::Col<ErrorReport, String>,
+    pub user_id: __sdk::__query_builder::Col<ErrorReport, String>,
+    pub submission_id: __sdk::__query_builder::Col<ErrorReport, String>,
+    pub idempotency_key: __sdk::__query_builder::Col<ErrorReport, String>,
+    pub object_key: __sdk::__query_builder::Col<ErrorReport, String>,
+    pub archive_sha_256: __sdk::__query_builder::Col<ErrorReport, String>,
+    pub archive_size_bytes: __sdk::__query_builder::Col<ErrorReport, u64>,
+    pub event_count: __sdk::__query_builder::Col<ErrorReport, u32>,
+    pub log_count: __sdk::__query_builder::Col<ErrorReport, u32>,
+    pub first_fingerprint: __sdk::__query_builder::Col<ErrorReport, Option<String>>,
+    pub first_source: __sdk::__query_builder::Col<ErrorReport, Option<String>>,
+    pub review_status: __sdk::__query_builder::Col<ErrorReport, String>,
+    pub admin_note: __sdk::__query_builder::Col<ErrorReport, Option<String>>,
+    pub created_at: __sdk::__query_builder::Col<ErrorReport, __sdk::Timestamp>,
+    pub updated_at: __sdk::__query_builder::Col<ErrorReport, __sdk::Timestamp>,
+}
+
+impl __sdk::__query_builder::HasCols for ErrorReport {
+    type Cols = ErrorReportCols;
+    fn cols(table_name: &'static str) -> Self::Cols {
+        ErrorReportCols {
+            batch_id: __sdk::__query_builder::Col::new(table_name, "batch_id"),
+            user_id: __sdk::__query_builder::Col::new(table_name, "user_id"),
+            submission_id: __sdk::__query_builder::Col::new(table_name, "submission_id"),
+            idempotency_key: __sdk::__query_builder::Col::new(table_name, "idempotency_key"),
+            object_key: __sdk::__query_builder::Col::new(table_name, "object_key"),
+            archive_sha_256: __sdk::__query_builder::Col::new(table_name, "archive_sha_256"),
+            archive_size_bytes: __sdk::__query_builder::Col::new(table_name, "archive_size_bytes"),
+            event_count: __sdk::__query_builder::Col::new(table_name, "event_count"),
+            log_count: __sdk::__query_builder::Col::new(table_name, "log_count"),
+            first_fingerprint: __sdk::__query_builder::Col::new(table_name, "first_fingerprint"),
+            first_source: __sdk::__query_builder::Col::new(table_name, "first_source"),
+            review_status: __sdk::__query_builder::Col::new(table_name, "review_status"),
+            admin_note: __sdk::__query_builder::Col::new(table_name, "admin_note"),
+            created_at: __sdk::__query_builder::Col::new(table_name, "created_at"),
+            updated_at: __sdk::__query_builder::Col::new(table_name, "updated_at"),
+        }
+    }
+}
+
+/// Indexed column accessor struct for the table `ErrorReport`.
+///
+/// Provides typed access to indexed columns for query building.
+pub struct ErrorReportIxCols {
+    pub batch_id: __sdk::__query_builder::IxCol<ErrorReport, String>,
+    pub created_at: __sdk::__query_builder::IxCol<ErrorReport, __sdk::Timestamp>,
+    pub idempotency_key: __sdk::__query_builder::IxCol<ErrorReport, String>,
+    pub review_status: __sdk::__query_builder::IxCol<ErrorReport, String>,
+}
+
+impl __sdk::__query_builder::HasIxCols for ErrorReport {
+    type IxCols = ErrorReportIxCols;
+    fn ix_cols(table_name: &'static str) -> Self::IxCols {
+        ErrorReportIxCols {
+            batch_id: __sdk::__query_builder::IxCol::new(table_name, "batch_id"),
+            created_at: __sdk::__query_builder::IxCol::new(table_name, "created_at"),
+            idempotency_key: __sdk::__query_builder::IxCol::new(table_name, "idempotency_key"),
+            review_status: __sdk::__query_builder::IxCol::new(table_name, "review_status"),
+        }
+    }
+}
+
+impl __sdk::__query_builder::CanBeLookupTable for ErrorReport {}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/error_report_update_input_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/error_report_update_input_type.rs
new file mode 100644
index 000000000..a0d213264
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/error_report_update_input_type.rs
@@ -0,0 +1,17 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ErrorReportUpdateInput {
+    pub batch_id: String,
+    pub status: String,
+    pub note: Option<String>,
+}
+
+impl __sdk::InModule for ErrorReportUpdateInput {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/get_error_report_and_return_procedure.rs b/server-rs/crates/spacetime-client/src/module_bindings/get_error_report_and_return_procedure.rs
new file mode 100644
index 000000000..5bd9d91ee
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/get_error_report_and_return_procedure.rs
@@ -0,0 +1,59 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::error_report_get_input_type::ErrorReportGetInput;
+use super::error_report_procedure_result_type::ErrorReportProcedureResult;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+struct GetErrorReportAndReturnArgs {
+    pub input: ErrorReportGetInput,
+}
+
+impl __sdk::InModule for GetErrorReportAndReturnArgs {
+    type Module = super::RemoteModule;
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the procedure `get_error_report_and_return`.
+///
+/// Implemented for [`super::RemoteProcedures`].
+pub trait get_error_report_and_return {
+    fn get_error_report_and_return(&self, input: ErrorReportGetInput) {
+        self.get_error_report_and_return_then(input, |_, _| {});
+    }
+
+    fn get_error_report_and_return_then(
+        &self,
+        input: ErrorReportGetInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ErrorReportProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    );
+}
+
+impl get_error_report_and_return for super::RemoteProcedures {
+    fn get_error_report_and_return_then(
+        &self,
+        input: ErrorReportGetInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ErrorReportProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    ) {
+        self.imp
+            .invoke_procedure_with_callback::<_, ErrorReportProcedureResult>(
+                "get_error_report_and_return",
+                GetErrorReportAndReturnArgs { input },
+                __callback,
+            );
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/list_error_reports_and_return_procedure.rs b/server-rs/crates/spacetime-client/src/module_bindings/list_error_reports_and_return_procedure.rs
new file mode 100644
index 000000000..087327169
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/list_error_reports_and_return_procedure.rs
@@ -0,0 +1,59 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::error_report_list_input_type::ErrorReportListInput;
+use super::error_report_procedure_result_type::ErrorReportProcedureResult;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+struct ListErrorReportsAndReturnArgs {
+    pub input: ErrorReportListInput,
+}
+
+impl __sdk::InModule for ListErrorReportsAndReturnArgs {
+    type Module = super::RemoteModule;
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the procedure `list_error_reports_and_return`.
+///
+/// Implemented for [`super::RemoteProcedures`].
+pub trait list_error_reports_and_return {
+    fn list_error_reports_and_return(&self, input: ErrorReportListInput) {
+        self.list_error_reports_and_return_then(input, |_, _| {});
+    }
+
+    fn list_error_reports_and_return_then(
+        &self,
+        input: ErrorReportListInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ErrorReportProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    );
+}
+
+impl list_error_reports_and_return for super::RemoteProcedures {
+    fn list_error_reports_and_return_then(
+        &self,
+        input: ErrorReportListInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ErrorReportProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    ) {
+        self.imp
+            .invoke_procedure_with_callback::<_, ErrorReportProcedureResult>(
+                "list_error_reports_and_return",
+                ListErrorReportsAndReturnArgs { input },
+                __callback,
+            );
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/update_error_report_and_return_procedure.rs b/server-rs/crates/spacetime-client/src/module_bindings/update_error_report_and_return_procedure.rs
new file mode 100644
index 000000000..5ce804a62
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/update_error_report_and_return_procedure.rs
@@ -0,0 +1,59 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::error_report_procedure_result_type::ErrorReportProcedureResult;
+use super::error_report_update_input_type::ErrorReportUpdateInput;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+struct UpdateErrorReportAndReturnArgs {
+    pub input: ErrorReportUpdateInput,
+}
+
+impl __sdk::InModule for UpdateErrorReportAndReturnArgs {
+    type Module = super::RemoteModule;
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the procedure `update_error_report_and_return`.
+///
+/// Implemented for [`super::RemoteProcedures`].
+pub trait update_error_report_and_return {
+    fn update_error_report_and_return(&self, input: ErrorReportUpdateInput) {
+        self.update_error_report_and_return_then(input, |_, _| {});
+    }
+
+    fn update_error_report_and_return_then(
+        &self,
+        input: ErrorReportUpdateInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ErrorReportProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    );
+}
+
+impl update_error_report_and_return for super::RemoteProcedures {
+    fn update_error_report_and_return_then(
+        &self,
+        input: ErrorReportUpdateInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ErrorReportProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    ) {
+        self.imp
+            .invoke_procedure_with_callback::<_, ErrorReportProcedureResult>(
+                "update_error_report_and_return",
+                UpdateErrorReportAndReturnArgs { input },
+                __callback,
+            );
+    }
+}
diff --git a/server-rs/crates/spacetime-module/src/active.rs b/server-rs/crates/spacetime-module/src/active.rs
index 415a2c742..2afbc3464 100644
--- a/server-rs/crates/spacetime-module/src/active.rs
+++ b/server-rs/crates/spacetime-module/src/active.rs
@@ -23,6 +23,8 @@ mod big_fish;
 mod custom_world;
 mod editor_agent_storage;
 mod editor_project_storage;
+#[path = "error_report.rs"]
+mod error_reports_schema;
 mod external_api_key_storage;
 mod external_generation;
 #[path = "legacy_schema/gameplay.rs"]
@@ -54,6 +56,7 @@ pub use big_fish::*;
 pub use custom_world::*;
 pub use editor_agent_storage::*;
 pub use editor_project_storage::*;
+pub use error_reports_schema::*;
 pub use external_api_key_storage::*;
 pub use external_generation::*;
 pub use gameplay::*;
diff --git a/server-rs/crates/spacetime-module/src/error_report.rs b/server-rs/crates/spacetime-module/src/error_report.rs
new file mode 100644
index 000000000..76b5f9dad
--- /dev/null
+++ b/server-rs/crates/spacetime-module/src/error_report.rs
@@ -0,0 +1,444 @@
+use crate::*;
+
+const MAX_FIELD_CHARS: usize = 512;
+const MAX_NOTE_CHARS: usize = 2_000;
+const MAX_ARCHIVE_SIZE_BYTES: u64 = 20 * 1024 * 1024;
+const MAX_EVENT_COUNT: u32 = 100;
+const MAX_LOG_COUNT: u32 = 5;
+const MAX_REPORTS_PER_IDENTITY_PER_HOUR: usize = 100;
+const REPORT_QUOTA_WINDOW_MICROS: i64 = 60 * 60 * 1_000_000;
+
+#[spacetimedb::table(
+    accessor = error_report,
+    index(accessor = by_error_report_user_submission, btree(columns = [user_id, submission_id])),
+    index(accessor = by_error_report_created_at, btree(columns = [created_at])),
+    index(accessor = by_error_report_review_status, btree(columns = [review_status]))
+)]
+#[derive(Clone)]
+pub struct ErrorReport {
+    #[primary_key]
+    pub batch_id: String,
+    pub user_id: String,
+    pub submission_id: String,
+    #[unique]
+    pub idempotency_key: String,
+    pub object_key: String,
+    pub archive_sha256: String,
+    pub archive_size_bytes: u64,
+    pub event_count: u32,
+    pub log_count: u32,
+    pub first_fingerprint: Option<String>,
+    pub first_source: Option<String>,
+    pub review_status: String,
+    pub admin_note: Option<String>,
+    pub created_at: Timestamp,
+    pub updated_at: Timestamp,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ErrorReportCreateInput {
+    pub batch_id: String,
+    pub submission_id: String,
+    pub idempotency_key: String,
+    pub user_id: String,
+    pub object_key: String,
+    pub archive_sha256: String,
+    pub archive_size_bytes: u64,
+    pub event_count: u32,
+    pub log_count: u32,
+    pub first_fingerprint: Option<String>,
+    pub first_source: Option<String>,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ErrorReportListInput {
+    pub status: Option<String>,
+    pub fingerprint: Option<String>,
+    pub source: Option<String>,
+    pub limit: u32,
+    pub offset: u32,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ErrorReportGetInput {
+    pub batch_id: String,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ErrorReportUpdateInput {
+    pub batch_id: String,
+    pub status: String,
+    pub note: Option<String>,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ErrorReportDeleteInput {
+    pub batch_id: String,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ErrorReportSnapshot {
+    pub batch_id: String,
+    pub user_id: String,
+    pub submission_id: String,
+    pub idempotency_key: String,
+    pub object_key: String,
+    pub archive_sha256: String,
+    pub archive_size_bytes: u64,
+    pub event_count: u32,
+    pub log_count: u32,
+    pub first_fingerprint: Option<String>,
+    pub first_source: Option<String>,
+    pub review_status: String,
+    pub admin_note: Option<String>,
+    pub created_at_micros: i64,
+    pub updated_at_micros: i64,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ErrorReportProcedureResult {
+    pub ok: bool,
+    pub report: Option<ErrorReportSnapshot>,
+    pub reports: Vec<ErrorReportSnapshot>,
+    pub total: u64,
+    pub error_message: Option<String>,
+}
+
+fn error(message: impl Into<String>) -> ErrorReportProcedureResult {
+    ErrorReportProcedureResult {
+        ok: false,
+        report: None,
+        reports: Vec::new(),
+        total: 0,
+        error_message: Some(message.into()),
+    }
+}
+
+fn validate_text(value: &str, field: &str) -> Result<String, String> {
+    let value = value.trim();
+    if value.is_empty() || value.chars().count() > MAX_FIELD_CHARS {
+        return Err(format!("error_report.{field} 无效"));
+    }
+    Ok(value.to_string())
+}
+
+fn snapshot(row: &ErrorReport) -> ErrorReportSnapshot {
+    ErrorReportSnapshot {
+        batch_id: row.batch_id.clone(),
+        user_id: row.user_id.clone(),
+        submission_id: row.submission_id.clone(),
+        idempotency_key: row.idempotency_key.clone(),
+        object_key: row.object_key.clone(),
+        archive_sha256: row.archive_sha256.clone(),
+        archive_size_bytes: row.archive_size_bytes,
+        event_count: row.event_count,
+        log_count: row.log_count,
+        first_fingerprint: row.first_fingerprint.clone(),
+        first_source: row.first_source.clone(),
+        review_status: row.review_status.clone(),
+        admin_note: row.admin_note.clone(),
+        created_at_micros: row.created_at.to_micros_since_unix_epoch(),
+        updated_at_micros: row.updated_at.to_micros_since_unix_epoch(),
+    }
+}
+
+#[spacetimedb::procedure]
+pub fn create_error_report_and_return(
+    ctx: &mut ProcedureContext,
+    input: ErrorReportCreateInput,
+) -> ErrorReportProcedureResult {
+    let caller = ctx.sender();
+    let now = ctx.timestamp;
+    match ctx.try_with_tx(|tx| {
+        crate::editor_project_storage::require_editor_generation_runtime_service_identity(
+            tx, caller,
+        )?;
+        let batch_id = validate_text(&input.batch_id, "batch_id")?;
+        let user_id = validate_text(&input.user_id, "user_id")?;
+        let submission_id = validate_text(&input.submission_id, "submission_id")?;
+        let idempotency_key = validate_text(&input.idempotency_key, "idempotency_key")?;
+        let object_key = validate_text(&input.object_key, "object_key")?;
+        if object_key != format!("agc/error-reports/v1/{batch_id}.zip") {
+            return Err("error_report.object_key 格式无效".to_string());
+        }
+        let archive_sha256 = validate_text(&input.archive_sha256, "archive_sha256")?;
+        if archive_sha256.len() != 64
+            || !archive_sha256.bytes().all(|byte| byte.is_ascii_hexdigit())
+        {
+            return Err("error_report.archive_sha256 必须是 64 位十六进制 SHA-256".to_string());
+        }
+        if input.archive_size_bytes == 0 || input.archive_size_bytes > MAX_ARCHIVE_SIZE_BYTES {
+            return Err("error_report.archive_size_bytes 超出上限".to_string());
+        }
+        if input.event_count == 0 || input.event_count > MAX_EVENT_COUNT {
+            return Err("error_report.event_count 超出上限".to_string());
+        }
+        if input.log_count > MAX_LOG_COUNT {
+            return Err("error_report.log_count 超出上限".to_string());
+        }
+        if let Some(existing) = tx
+            .db
+            .error_report()
+            .by_error_report_user_submission()
+            .filter((user_id.as_str(), submission_id.as_str()))
+            .next()
+        {
+            return Ok(snapshot(&existing));
+        }
+        if tx
+            .db
+            .error_report()
+            .idempotency_key()
+            .find(&idempotency_key)
+            .is_some()
+        {
+            return Err("错误报告提交幂等键冲突".to_string());
+        }
+        if tx.db.error_report().batch_id().find(&batch_id).is_some() {
+            return Err("错误报告 batch_id 已存在".to_string());
+        }
+        let cutoff_micros = now
+            .to_micros_since_unix_epoch()
+            .saturating_sub(REPORT_QUOTA_WINDOW_MICROS);
+        let recent_count = tx
+            .db
+            .error_report()
+            .iter()
+            .filter(|row| {
+                row.user_id == user_id
+                    && row.created_at.to_micros_since_unix_epoch() >= cutoff_micros
+            })
+            .count();
+        if recent_count >= MAX_REPORTS_PER_IDENTITY_PER_HOUR {
+            return Err("错误报告提交频率超出限制，请稍后再试".to_string());
+        }
+        tx.db.error_report().insert(ErrorReport {
+            batch_id: batch_id.clone(),
+            user_id,
+            submission_id,
+            idempotency_key,
+            object_key,
+            archive_sha256,
+            archive_size_bytes: input.archive_size_bytes,
+            event_count: input.event_count,
+            log_count: input.log_count,
+            first_fingerprint: input
+                .first_fingerprint
+                .as_deref()
+                .map(|value| validate_text(value, "first_fingerprint"))
+                .transpose()?,
+            first_source: input
+                .first_source
+                .as_deref()
+                .map(|value| validate_text(value, "first_source"))
+                .transpose()?,
+            review_status: "new".to_string(),
+            admin_note: None,
+            created_at: now,
+            updated_at: now,
+        });
+        tx.db
+            .error_report()
+            .batch_id()
+            .find(&batch_id)
+            .map(|row| snapshot(&row))
+            .ok_or_else(|| "错误报告写入后读取失败".to_string())
+    }) {
+        Ok(report) => ErrorReportProcedureResult {
+            ok: true,
+            report: Some(report),
+            reports: Vec::new(),
+            total: 1,
+            error_message: None,
+        },
+        Err(message) => error(message),
+    }
+}
+
+#[spacetimedb::procedure]
+pub fn get_error_report_and_return(
+    ctx: &mut ProcedureContext,
+    input: ErrorReportGetInput,
+) -> ErrorReportProcedureResult {
+    let caller = ctx.sender();
+    match ctx.try_with_tx(|tx| {
+        crate::editor_project_storage::require_editor_generation_runtime_service_identity(
+            tx, caller,
+        )?;
+        tx.db
+            .error_report()
+            .batch_id()
+            .find(&input.batch_id)
+            .map(|row| snapshot(&row))
+            .ok_or_else(|| "错误报告不存在".to_string())
+    }) {
+        Ok(report) => ErrorReportProcedureResult {
+            ok: true,
+            report: Some(report),
+            reports: Vec::new(),
+            total: 1,
+            error_message: None,
+        },
+        Err(message) => error(message),
+    }
+}
+
+#[spacetimedb::procedure]
+pub fn list_error_reports_and_return(
+    ctx: &mut ProcedureContext,
+    input: ErrorReportListInput,
+) -> ErrorReportProcedureResult {
+    let caller = ctx.sender();
+    match ctx.try_with_tx(|tx| {
+        crate::editor_project_storage::require_editor_generation_runtime_service_identity(
+            tx, caller,
+        )?;
+        let limit = input.limit.clamp(1, 500) as usize;
+        let offset = input.offset as usize;
+        if input.status.is_none() && input.fingerprint.is_none() && input.source.is_none() {
+            let mut rows = tx
+                .db
+                .error_report()
+                .by_error_report_created_at()
+                .filter(Timestamp::from_micros_since_unix_epoch(i64::MIN)..)
+                .collect::<Vec<_>>();
+            let total = rows.len() as u64;
+            rows.reverse();
+            let reports = rows
+                .into_iter()
+                .skip(offset)
+                .take(limit)
+                .map(|row| snapshot(&row))
+                .collect::<Vec<_>>();
+            return Ok((reports, total));
+        }
+        let mut rows = tx
+            .db
+            .error_report()
+            .iter()
+            .filter(|row| {
+                input
+                    .status
+                    .as_deref()
+                    .is_none_or(|v| v == row.review_status)
+            })
+            .filter(|row| {
+                input
+                    .fingerprint
+                    .as_deref()
+                    .is_none_or(|v| row.first_fingerprint.as_deref() == Some(v))
+            })
+            .filter(|row| {
+                input
+                    .source
+                    .as_deref()
+                    .is_none_or(|v| row.first_source.as_deref() == Some(v))
+            })
+            .collect::<Vec<_>>();
+        rows.sort_by(|left, right| {
+            right
+                .created_at
+                .cmp(&left.created_at)
+                .then_with(|| right.batch_id.cmp(&left.batch_id))
+        });
+        let total = rows.len() as u64;
+        let reports = rows
+            .into_iter()
+            .skip(offset)
+            .take(limit)
+            .map(|row| snapshot(&row))
+            .collect::<Vec<_>>();
+        Ok::<(Vec<ErrorReportSnapshot>, u64), String>((reports, total))
+    }) {
+        Ok((reports, total)) => ErrorReportProcedureResult {
+            ok: true,
+            report: None,
+            reports,
+            total,
+            error_message: None,
+        },
+        Err(message) => error(message),
+    }
+}
+
+#[spacetimedb::procedure]
+pub fn update_error_report_and_return(
+    ctx: &mut ProcedureContext,
+    input: ErrorReportUpdateInput,
+) -> ErrorReportProcedureResult {
+    let caller = ctx.sender();
+    let now = ctx.timestamp;
+    match ctx.try_with_tx(|tx| {
+        crate::editor_project_storage::require_editor_generation_runtime_service_identity(
+            tx, caller,
+        )?;
+        if !matches!(input.status.as_str(), "new" | "in-progress" | "resolved") {
+            return Err("状态必须是 new、in-progress 或 resolved".to_string());
+        }
+        let row = tx
+            .db
+            .error_report()
+            .batch_id()
+            .find(&input.batch_id)
+            .ok_or_else(|| "错误报告不存在".to_string())?;
+        let note = input
+            .note
+            .clone()
+            .map(|value| {
+                if value.chars().count() > MAX_NOTE_CHARS {
+                    return Err("error_report.note 超过 2000 个字符".to_string());
+                }
+                Ok(value)
+            })
+            .transpose()?;
+        let updated = ErrorReport {
+            review_status: input.status.clone(),
+            admin_note: note,
+            updated_at: now,
+            ..row.clone()
+        };
+        tx.db.error_report().batch_id().delete(&row.batch_id);
+        tx.db.error_report().insert(updated.clone());
+        Ok(snapshot(&updated))
+    }) {
+        Ok(report) => ErrorReportProcedureResult {
+            ok: true,
+            report: Some(report),
+            reports: Vec::new(),
+            total: 1,
+            error_message: None,
+        },
+        Err(message) => error(message),
+    }
+}
+
+#[spacetimedb::procedure]
+pub fn delete_error_report_and_return(
+    ctx: &mut ProcedureContext,
+    input: ErrorReportDeleteInput,
+) -> ErrorReportProcedureResult {
+    let caller = ctx.sender();
+    match ctx.try_with_tx(|tx| {
+        crate::editor_project_storage::require_editor_generation_runtime_service_identity(
+            tx, caller,
+        )?;
+        let row = tx
+            .db
+            .error_report()
+            .batch_id()
+            .find(&input.batch_id)
+            .ok_or_else(|| "错误报告不存在".to_string())?;
+        let snapshot = snapshot(&row);
+        tx.db.error_report().batch_id().delete(&row.batch_id);
+        Ok::<ErrorReportSnapshot, String>(snapshot)
+    }) {
+        Ok(report) => ErrorReportProcedureResult {
+            ok: true,
+            report: Some(report),
+            reports: Vec::new(),
+            total: 1,
+            error_message: None,
+        },
+        Err(message) => error(message),
+    }
+}
diff --git a/server-rs/crates/spacetime-module/src/migration.rs b/server-rs/crates/spacetime-module/src/migration.rs
index 32e02063c..0bdd92d3c 100644
--- a/server-rs/crates/spacetime-module/src/migration.rs
+++ b/server-rs/crates/spacetime-module/src/migration.rs
@@ -250,6 +250,7 @@ macro_rules! migration_tables {
             asset_entity_binding,
             asset_event,
             external_api_key,
+            error_report,
             editor_agent_conversation,
             editor_project,
             editor_canvas,

From 2079e274b6449ea5c248538b2321590eef3d13fb Mon Sep 17 00:00:00 2001
From: kdletters <kdletters@qq.com>
Date: Thu, 3 Sep 2026 10:11:29 +0800
Subject: [PATCH 2/2] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=20AGC=20=E5=8F=91?=
 =?UTF-8?q?=E5=B8=83=E6=B8=85=E5=8D=95=E8=A6=86=E7=9B=96=20=E5=BC=BA?=
 =?UTF-8?q?=E5=88=B6=E8=A6=86=E7=9B=96=E7=89=88=E6=9C=AC=E5=AE=89=E8=A3=85?=
 =?UTF-8?q?=E5=8C=85=E4=B8=8E=20latest.json=20=E5=A2=9E=E5=8A=A0=20latest?=
 =?UTF-8?q?=20=E4=B8=8A=E4=BC=A0=E8=A6=86=E7=9B=96=E5=9B=9E=E5=BD=92?=
 =?UTF-8?q?=E6=A3=80=E6=9F=A5=20=E5=90=8C=E6=AD=A5=20AGC=20=E6=9B=B4?=
 =?UTF-8?q?=E6=96=B0=E5=8F=91=E5=B8=83=E6=96=87=E6=A1=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../scripts/build-release.test.mjs                   | 12 ++++++++++++
 .../ai-game-creator-shell/scripts/release-upload.mjs |  6 ++++--
 ...【技术方案】AGC客户端更新检查与下载-2026-08-31.md |  2 +-
 3 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/apps/ai-game-creator-shell/scripts/build-release.test.mjs b/apps/ai-game-creator-shell/scripts/build-release.test.mjs
index ffc8bb8b2..798bd206f 100644
--- a/apps/ai-game-creator-shell/scripts/build-release.test.mjs
+++ b/apps/ai-game-creator-shell/scripts/build-release.test.mjs
@@ -1,4 +1,5 @@
 import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
 import { test } from 'node:test';
 
 import {
@@ -46,3 +47,14 @@ test('next release version follows the higher local or OSS version', () => {
   assert.equal(nextPatchVersion('0.1.18', '0.1.15'), '0.1.19');
   assert.equal(nextPatchVersion('0.1.12', null), '0.1.13');
 });
+
+test('release upload forces overwrite for versioned artifact and latest pointer', () => {
+  const source = readFileSync(
+    new URL('./release-upload.mjs', import.meta.url),
+    'utf8',
+  );
+  assert.equal(
+    (source.match(/runOssutil\(\['cp', '--force'/gu) ?? []).length,
+    2,
+  );
+});
diff --git a/apps/ai-game-creator-shell/scripts/release-upload.mjs b/apps/ai-game-creator-shell/scripts/release-upload.mjs
index e2085345a..ee5af4452 100644
--- a/apps/ai-game-creator-shell/scripts/release-upload.mjs
+++ b/apps/ai-game-creator-shell/scripts/release-upload.mjs
@@ -40,7 +40,9 @@ await prepareReleaseVersion();
 runTauriBuild([]);
 const { artifact, manifestPath, manifest } = generateUpdateManifest();
 const artifactKey = `agc/${manifest.version}/${path.basename(artifact)}`;
-runOssutil(['cp', artifact, `oss://${bucket}/${artifactKey}`]);
-runOssutil(['cp', manifestPath, `oss://${bucket}/agc/latest.json`]);
+// Jenkins/ossutil 默认会在目标对象已存在时交互询问并按默认值跳过；
+// 发布清单是固定的 latest 指针，必须显式覆盖，否则流水线会误报成功但远端仍保留旧版本。
+runOssutil(['cp', '--force', artifact, `oss://${bucket}/${artifactKey}`]);
+runOssutil(['cp', '--force', manifestPath, `oss://${bucket}/agc/latest.json`]);
 console.log(`[ai-game-creator-shell] 已上传 oss://${bucket}/${artifactKey}`);
 console.log(`[ai-game-creator-shell] 已上传 oss://${bucket}/agc/latest.json`);
diff --git a/docs/technical/【技术方案】AGC客户端更新检查与下载-2026-08-31.md b/docs/technical/【技术方案】AGC客户端更新检查与下载-2026-08-31.md
index a5e11496c..455c37670 100644
--- a/docs/technical/【技术方案】AGC客户端更新检查与下载-2026-08-31.md
+++ b/docs/technical/【技术方案】AGC客户端更新检查与下载-2026-08-31.md
@@ -40,7 +40,7 @@ Windows x64），通过 `AGC_UPDATE_ARTIFACT` 指定要发布的安装包，通
 OSS 前缀，通过 `AGC_RELEASE_VERSION` 指定三段版本号（仅在明确需要复现指定版本时使用），通过
 `AGC_UPDATE_RELEASE_NOTES` 写入发布说明；`--no-bundle` smoke 构建不会读取 OSS、修改版本或生成清单。
 
-每次发布安装包上传完成后，再上传同一目录生成的 `latest.json`，确保 `downloadUrl` 指向已存在的 OSS 对象；清单和安装包均使用公开可读对象，不在清单中保存凭据、签名或本地路径。构建脚本本身不负责上传 OSS，发布流水线通过 `release:upload` 完成上传。
+每次发布安装包上传完成后，再使用 ossutil 的 `--force` 覆盖上传同一目录生成的 `latest.json`，确保固定的 latest 指针和 `downloadUrl` 指向已存在的 OSS 对象；未显式强制覆盖时，ossutil 在目标已存在时会交互询问并按默认值跳过，不能作为 Jenkins 非交互发布方式。清单和安装包均使用公开可读对象，不在清单中保存凭据、签名或本地路径。构建脚本本身不负责上传 OSS，发布流水线通过 `release:upload` 完成上传。
 
 如需一键构建并上传，可执行 `npm run ai-game-creator-shell:release:upload`。该命令要求本机已安装并配置 `ossutil`，
 先按上述规则比较 OSS 版本、递增 patch、构建 Windows x64 NSIS，再上传安装包和 `latest.json`。默认上传到