Summary:
- Treat /contribute.html and /contribute as first-class SPA routes so
GitHub OAuth callback and documented upload links land on the uploader.
- Switch the browser uploader from multipart/base64 to raw JSONL POSTs
with metadata headers, while keeping JSON file_data and multipart
compatibility on the API.
- Add static upload-flow gates and Vitest coverage for authenticated
upload sanitization, R2 writes, and D1 metadata recording.
- Bump plugin and marketplace versions to 3.4.4.
Rationale:
- The upload path had two breakpoints: documented /contribute.html links
rendered the homepage because routing only checked hash, and multipart
browser uploads could be stripped by proxy/custom-domain behavior.
- Raw JSONL avoids multipart body loss and avoids base64 size/memory bloat
for large session files.
Tests:
- bash evals/test-upload-flow.sh
- bash evals/test-release-consistency.sh
- npm --prefix landing test -- --run src/test/upload-function.test.ts
- static eval suite: governance, feedback auth, heartbeat, integrity
guard, issue regressions, Microsoft flavor, platform compat, loop hook,
Windows Python hooks, YAML frontmatter
- npm --prefix landing run build
- ./landing/node_modules/.bin/tsc -p pi/pua/tsconfig.json
- git diff --check
Co-authored-by: Codex <codex@openai.com>
Summary:
- Add a silent SessionStart heartbeat hook that posts minimal anonymous
install activity to Cloudflare without emitting stdout, stderr, or
additionalContext.
- Add the Cloudflare Pages heartbeat endpoint, D1 migration, and
admin-only stats page at #/admin/heartbeats.
- Add heartbeat regression gates, release consistency checks, FAQ/design
notes, and bump marketplace/package versions to 3.4.3.
Rationale:
- Active-user measurement belongs in a hook-side mechanical gate, not in
the model prompt, so the worker context cannot narrate or leak the
telemetry behavior.
- Privacy gates disable the signal for offline mode, telemetry opt-out,
and feedback-off users before any local telemetry identity is created.
Tests:
- bash evals/test-heartbeat.sh
- bash evals/test-release-consistency.sh
- static eval suite: governance, feedback auth, integrity guard, issue
regressions, Microsoft flavor, platform compat, loop hook, Windows
Python hooks, YAML frontmatter
- bash evals/test-behavior.sh
- npm --prefix landing run build
- ./landing/node_modules/.bin/tsc -p pi/pua/tsconfig.json
- git diff --check
Co-authored-by: Codex <codex@openai.com>
xsser