create-feedbax 0.2.1 → 0.2.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-feedbax",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "type": "module",
   "bin": {
     "create-feedbax": "./dist/cli.js"
@@ -10,17 +10,17 @@
   },
   "scripts": {
     "check-types": "tsc --noEmit",
-    "test": "vitest run src/index.test.ts src/template.test.ts",
+    "test": "vitest run src",
     "template:sync": "tsx ../../scripts/assemble-template.ts",
     "template:check": "tsx ../../scripts/assemble-template.ts --check",
     "build": "esbuild src/cli.ts src/index.ts --bundle --platform=node --format=esm --alias:@feedbax/config=../config/src/index.ts --alias:@feedbax/feedback=../feedback/src/index.ts --alias:@feedbax/changelog=../changelog/src/index.ts --outdir=dist --external:jsonc-parser --external:@clack/prompts",
     "prepack": "pnpm build"
   },
   "devDependencies": {
-    "esbuild": "0.28.1",
-    "tsx": "4.20.6",
+    "esbuild": "0.28.2",
+    "tsx": "4.23.15",
     "typescript": "catalog:",
-    "vitest": "4.1.11"
+    "vitest": "5.0.4"
   },
   "files": [
     "dist",
@@ -30,7 +30,7 @@
     "@clack/prompts": "^1.8.1",
     "jsonc-parser": "3.3.1"
   },
-  "description": "Create a self-hosted Notion-native feedback portal",
+  "description": "Create a self-hosted feedback portal with Notion or GitHub",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -42,7 +42,7 @@
     "url": "https://github.com/jessequartey/feedbax/issues"
   },
   "engines": {
-    "node": ">=22.14.0"
+    "node": "^24.15.0 || >=26.0.0"
   },
   "publishConfig": {
     "access": "public"

package/template/.feedbax-template.sha256

@@ -1 +1 @@
-9c41cfc9758db8b7b6c022fe973f24e7a94244c96c13b6679010702d3d39a054
+38ac71db749b85b9900fd636aa95867390517bc9695bc11534a44892e26810b2

package/template/.gitignore.template

@@ -1,5 +1,6 @@
 .dev.vars
 .env*
+.feedbax/
 dist/
 .wrangler/
 *.log

package/template/.npmignore.template

@@ -1,5 +1,6 @@
 .dev.vars
 .env*
+.feedbax/
 dist/
 .wrangler/
 *.log

package/template/.nvmrc

@@ -0,0 +1 @@
+24.22.0

package/template/AGENTS.md

@@ -6,7 +6,7 @@ This is a flat application, not the Feedbax development monorepo. Product settin
 
 Use the copied shadcn primitives in `src/components/ui`. Keep the configured Geist font and theme tokens. After changes, run `pnpm lint`, `pnpm type-check`, `pnpm test`, and `pnpm build`, fixing errors. Use `pnpm format:check` to check formatting.
 
-For setup, `pnpm exec feedbax doctor` must pass with real Notion credentials/mappings and enabled bindings. Run `pnpm deploy:dry-run` before deployment and verify the actual live URL after `pnpm exec feedbax deploy`. Distinguish copied source, configured local readiness, and a verified deployment in the result.
+For setup, `pnpm exec feedbax doctor` must pass with the selected provider’s real credentials/mappings and enabled bindings. For GitHub provisioning, pairing, native publication, public-repository exposure, or provider secrets, read the GitHub setup and publication section in README.md. GitHub requires dedicated D1 independently of Connected identity and disables Changelog. Bootstrap deployment remains unpaired until the GitHub authorization flow completes. Run `pnpm deploy:dry-run` before deployment and verify the actual live URL after `pnpm exec feedbax deploy`. Distinguish copied source, configured local readiness, and a verified deployment in the result.
 
 ## Connected social features
 

package/template/CONNECTED.md

@@ -1,6 +1,6 @@
-# Connected Profile in 0.2.1
+# Connected Profile
 
-Connected Profile is optional. Omit `connected` to retain Notion-only behavior. A Connected Installation requires a dedicated D1 database and an existing Product Team application that authenticates Participants on its server. There is no Feedbax email sign-in. Small processing also uses a dedicated Cloudflare Queue for background work.
+Connected Profile is optional. Omit `connected` to retain the selected provider’s unsigned participation behavior. Published 0.2.1 uses Notion; 0.2.2 also supports GitHub. A Connected Installation requires a dedicated D1 database (reuse the Installation’s required provider D1 for GitHub) and an existing Product Team application that authenticates Participants on its server. There is no Feedbax email sign-in. Small processing also uses a dedicated Cloudflare Queue for background work.
 
 ## Configure an Installation
 
@@ -402,3 +402,17 @@ In a dedicated Installation, apply all D1 migrations, configure the timer and pr
 5. Reject a forged review link, wrong-owner image association, oversized/unsupported image, unsigned mutation, and cross-origin mutation. Check mobile previews, unread states, empty/error/retry states, and cleanup of abandoned uploads.
 
 These checks require your real application, sender, and infrastructure. Local tests and builds do not constitute production delivery or release evidence.
+
+## GitHub and My feedback in 0.2.2
+
+Provider setup and Participant authentication are separate. Complete the GitHub App service pairing and use the same Installation D1 database for Connected; GitHub needs no Notion token and disables Changelog. The existing issuer/subject trust pair, signed handoff, consent and session revocation rules remain unchanged. GitHub Participants need no GitHub account. Follow the GitHub setup guide before adding Connected bindings and secrets.
+
+My feedback provides private Submitted, Supported and Following views with bounded pagination. New submissions from a server-verified portal session gain ownership independently of their Device Profile. The owner can view eligible pending context and edit or withdraw a New, unpublished draft from another verified device. Publication or advancement beyond New ends edit authority.
+
+An older unsigned draft is not automatically owned. While its lifecycle remains eligible, sign in on the browser that still holds its capability, open My feedback, and explicitly link the draft. Both proofs are required. Matching names/email, browser storage alone without verified identity, and public URLs do not establish ownership. Existing ownership cannot be transferred by another Participant's claim.
+
+Private owner responses use an explicit projection and `no-store`; no provider handles, contacts, capability hashes or identity subjects are returned. The browser resets private lists and editors before a session refresh, using an opaque session key rather than a display name to separate cached views. Sign-out revokes the session and reloads the page.
+
+Apply every included D1 migration before enabling the new views, including `0007_ownership.sql`; GitHub also needs the integration/recovery migrations. These additions do not create ownership for historical Posts or send historical Notifications. Existing 0.2.1 Comment editing limits remain; the new cross-device authority concerns eligible owned Post drafts, not arbitrary provider moderation.
+
+GitHub Comments use explicit App-created public records and private attribution mappings. Private image access still follows current publication and Comment visibility. GitHub issues contain no private review links; native Notion's private page-body review links remain specific to Notion. The selected Content Provider stays authoritative for feedback content and publication, and D1 stays authoritative for verified participation.

package/template/README.md

@@ -1,32 +1,32 @@
 # Your Feedbax portal
 
-This is an application you own. Product Teams manage Posts, statuses, Comments, and release notes in Notion; the portal runs on Cloudflare Workers.
+This is an application you own. Product Teams manage Posts, statuses, Comments, and release notes in the selected Notion or GitHub Content Provider; the portal runs on Cloudflare Workers.
 
 [Feedbax on GitHub](https://github.com/jessequartey/feedbax) · [Setup and operations](https://feedbax-docs.jessefquartey.workers.dev/docs)
 
 ## Start locally
 
-Use Node.js 22.14+ and pnpm 10. Guided setup already installs dependencies and configures the app:
+Use Node.js 24.15+ (Node 24 LTS) and pnpm 10. The included `.nvmrc` pins the tested version; with nvm installed, run `nvm install` and `nvm use` before working on the Installation. Guided setup already installs dependencies and configures the app:
 
 ```sh
 pnpm dev
 ```
 
-Open the local address printed by Vite. If this directory was created with `--template-only`, run `pnpm install` and finish configuration first; copied source is not yet connected to Notion.
+Open the local address printed by Vite. If this directory was created with `--template-only`, run `pnpm install` and finish configuration first; copied source still requires provider configuration.
 
 ## Configuration
 
-| File                | Purpose                                                                                                        |
-| ------------------- | -------------------------------------------------------------------------------------------------------------- |
-| `src/feedbax.ts`    | Public product settings, feature switches, Notion IDs/property mappings, and optional Connected settings       |
-| `.dev.vars`         | Ignored local Notion token, API-key hash, participation signing secret, and enabled Turnstile/identity secrets |
-| `wrangler.jsonc`    | Worker name, hostnames, rate-limit bindings, and optional dedicated D1 binding                                 |
-| `src/components/ui` | Your copied shadcn primitives, utilities, and theme                                                            |
-| `CONNECTED.md`      | Complete existing-application authentication setup and verification                                            |
+| File                | Purpose                                                                                                  |
+| ------------------- | -------------------------------------------------------------------------------------------------------- |
+| `src/feedbax.ts`    | Product settings, feature switches, selected provider mapping, and optional Connected settings           |
+| `.dev.vars`         | Ignored local provider/pairing credentials, API-key hash, and enabled signing/Turnstile/identity secrets |
+| `wrangler.jsonc`    | Worker name, hostnames, rate-limit bindings, and optional dedicated D1 binding                           |
+| `src/components/ui` | Your copied shadcn primitives, utilities, and theme                                                      |
+| `CONNECTED.md`      | Complete existing-application authentication setup and verification                                      |
 
 The plaintext trusted API key printed during setup belongs on your product server. The portal stores its hash. Never expose either Notion credentials or signing secrets through browser configuration. Existing `src/feedbax.test-fixture.ts` is for tests only.
 
-For template-only output, follow the [agent setup guide](https://github.com/jessequartey/feedbax/blob/main/docs/agent-setup.md) and supply real Notion mappings and secrets before diagnostics. For Connected, follow `CONNECTED.md`, implement the signed application endpoint, bind a dedicated D1 database, and apply the included migration.
+For template-only output, follow the [agent setup guide](https://github.com/jessequartey/feedbax/blob/main/docs/agent-setup.md) and supply real provider mappings and secrets before diagnostics. For Connected, follow `CONNECTED.md`, implement the signed application endpoint, bind a dedicated D1 database, and apply the included migration.
 
 ## Check and deploy
 
@@ -47,12 +47,51 @@ pnpm exec feedbax deploy
 
 Keep the included Geist font and shadcn theme tokens consistent. Run `pnpm lint` after UI changes; it checks theme colors, unknown Tailwind classes, and inspectable component classes. Update individual primitives instead of reapplying a full preset.
 
-Use the [feedback block guide](https://github.com/jessequartey/feedbax/blob/main/apps/docs/content/docs/integrations/feedback-block.mdx) to add feedback collection to your product. Its server helper uses a trusted submission key and new Posts remain unpublished until your Product Team moderates them in Notion. The portal’s standard footer links to Feedbax on GitHub.
+Use the [feedback block guide](https://github.com/jessequartey/feedbax/blob/main/apps/docs/content/docs/integrations/feedback-block.mdx) to add feedback collection to your product. Its server helper uses a trusted submission key and new Posts remain unpublished until your Product Team publishes them through its selected provider. The portal’s standard footer links to Feedbax on GitHub.
 
-Keep Comments and browser capabilities distinct from verified identity: Notion-only names/email are unverified, Votes are best-effort, and recent Comment editing uses short-lived browser capabilities. Connected adds signed identity, unique Votes, and durable attribution without moving content out of Notion.
+Keep Device Profiles and browser capabilities distinct from verified identity: names/email supplied by the browser are unverified, Votes without Connected are best-effort, and recent Comment editing uses short-lived browser capabilities. Connected adds signed identity, unique Votes, and durable attribution while keeping content in the selected provider.
 
 See `AGENTS.md` for the short agent workflow.
 
 ## Connected social features
 
 For following, in-app/email notifications, or image attachments, use the full Connected guide (CONNECTED.md in a generated app; docs/connected-profile.md in the source repository). Apply every included D1 migration, including the Follow baseline migration, configure the timer and dedicated processing queue for small mode, choose Cloudflare/Resend/custom email when required, and keep the R2 bucket private for images. Never use a Device Profile as verified email evidence. Run doctor and behavior checks; explicitly distinguish local tests from real sender delivery and production authentication acceptance.
+
+## GitHub setup and publication
+
+GitHub requires a dedicated D1 database even without Participant sign-in. It uses no Notion token, and Changelog must be disabled. A GitHub App service holds the App key; this portal stores only its own directional binding credentials. Setup must use the public-fetch compatibility flag for Worker-to-Worker calls, or an explicitly configured Service Binding. Never copy an App private key into the portal.
+
+Apply every included D1 migration before deploying updated source:
+
+```sh
+pnpm exec wrangler d1 migrations apply FEEDBAX_DB --local
+pnpm exec wrangler d1 migrations apply FEEDBAX_DB --remote
+pnpm exec feedbax deploy --pairing-bootstrap
+pnpm exec feedbax pair-github GITHUB_APP_INSTALLATION_ID
+```
+
+Complete the printed GitHub authorization flow, then run `pnpm exec feedbax doctor`. Bootstrap deployment intentionally leaves feedback unavailable until authorization finishes. Local development uses local D1; production pairing writes credentials only into remote D1. A production binding does not automatically authorize a local development origin. Use a separately configured development Installation/repository when testing GitHub writes locally.
+
+Native GitHub workflow uses exactly one label: `feedbax:new`, `feedbax:reviewing`, `feedbax:planned`, `feedbax:in-progress`, `feedbax:shipped`, or `feedbax:closed`. Add `feedbax:published` independently to display a Post in the portal. Issue closure alone does not change its Feedbax status. Missing/conflicting status labels block draft changes until repaired.
+
+The issue body contains a versioned JSON section between `<!-- feedbax:public:v1 -->` and `<!-- /feedbax:public -->`. Edit its title, description, type and optional Team Response/release-notes URL to change approved portal content. Keep its immutable slug. Notes outside this section and ordinary engineering comments are never portal content. Portal Comments are separately marked App-created records with private attribution mappings.
+
+**A public repository exposes issue titles and bodies on GitHub immediately, including Posts awaiting portal moderation.** Use a private Feedback Repository for confidential intake. Portal moderation cannot make an existing public GitHub issue private.
+
+Connected identity remains independent: only verified application sessions get cross-device ownership, My feedback, unique Votes and Follows. D1 alone does not establish identity. Browser drafts can be explicitly linked only while New/unpublished and while the browser still possesses their capability.
+
+## Integration checks
+
+The [integration checklist](https://github.com/jessequartey/feedbax/blob/main/docs/integration-checklist.md) brings together provider setup, product-server intake, credential locations and authentication.
+
+Post details show Comments by default, with observed progress under Activities when enabled. Follow controls appear after Connected sign-in.
+
+For an observed public timeline, explicitly add root-level `history: true`, bind `FEEDBAX_DB`, apply all migrations including `0009_observed_history.sql`, and configure a timer. Reuse this Installation's existing GitHub/Connected D1 when present. The first public Post read establishes a baseline; later checks record public status and Team Response changes without backfilling private history. Follow the [history guide](https://github.com/jessequartey/feedbax/blob/main/apps/docs/content/docs/guides/progress-history.mdx). Omit the switch to preserve an existing Notion Installation's storage footprint.
+
+Before connecting your product, test a disposable submission from its server, retry with the same `Idempotency-Key`, and confirm one New, unpublished Post. Publish through the selected provider and check that only approved fields appear. Remove publication and verify the Post, Comments and images become unavailable.
+
+For Connected, verify two application accounts and two browsers: each account should see only its own My feedback and Notifications. Sign out, then check that private views clear. Test email and images only when enabled; a local build does not verify production sender delivery, identity handoff or private R2 access.
+
+Keep the product server's trusted key private. A trusted API submission does not acquire verified ownership from a submitted name, email or subject. Use the signed Identity Handoff for Participant identity. Follow the [submission API guide](https://github.com/jessequartey/feedbax/blob/main/apps/docs/content/docs/integrations/submission-api.mdx) and `CONNECTED.md` for working examples.
+
+For an existing customized 0.2.1 Installation, follow the [source upgrade guide](https://github.com/jessequartey/feedbax/blob/main/apps/docs/content/docs/guides/upgrading.mdx). The 0.2.2 CLI previews against the exact published baseline, preserves configuration, and supports source resume/rollback. Review private diffs and back up data separately; source recovery is not a complete archive/restore.

package/template/feedbax-vite.ts

@@ -0,0 +1,79 @@
+import { build } from "esbuild";
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+import type { Plugin, ResolvedConfig } from "vite";
+
+// Only the server receives provider identifiers and operational configuration.
+// The client gets a fixed allowlist, even when copied configuration is customized.
+export function publicFeedbaxConfiguration(): Plugin {
+  let configuration: ResolvedConfig;
+  return {
+    name: "feedbax-public-configuration",
+    enforce: "pre",
+    configResolved(value) {
+      configuration = value;
+    },
+    async transform(code, id) {
+      const root = configuration.root;
+      if (
+        this.environment.name !== "client" ||
+        id.split("?")[0] !== resolve(root, "src/feedbax.ts")
+      )
+        return;
+      const localConfig = resolve(root, "src/feedbax/config/index.ts");
+      const result = await build({
+        stdin: {
+          contents: code,
+          loader: "ts",
+          resolveDir: resolve(root, "src"),
+        },
+        bundle: true,
+        write: false,
+        platform: "node",
+        format: "esm",
+        alias: {
+          "@feedbax/config": existsSync(localConfig)
+            ? localConfig
+            : resolve(root, "../../packages/config/src/index.ts"),
+        },
+        define: { "import.meta.env": JSON.stringify(configuration.env) },
+      });
+      const full = (
+        await import(
+          `data:text/javascript;base64,${Buffer.from(result.outputFiles[0]!.text).toString("base64")}`
+        )
+      ).default;
+      const publicConfiguration = {
+        product: full.product,
+        theme: full.theme,
+        features: full.features,
+        submissions: full.submissions,
+        turnstile: full.turnstile,
+        history: full.history,
+        ...(full.connected
+          ? {
+              connected: {
+                issuer: full.connected.issuer,
+                loginUrl: full.connected.loginUrl,
+                images: full.connected.images,
+                ...(full.connected.email
+                  ? { email: { provider: full.connected.email.provider } }
+                  : {}),
+              },
+            }
+          : {}),
+      };
+      const publicCode = `export default ${JSON.stringify(publicConfiguration)};`;
+      return {
+        code: publicCode,
+        map: {
+          version: 3,
+          sources: ["feedbax-public-configuration.ts"],
+          sourcesContent: [publicCode],
+          names: [],
+          mappings: "",
+        },
+      };
+    },
+  };
+}

package/template/migrations/0005_github.sql

@@ -0,0 +1,4 @@
+CREATE TABLE IF NOT EXISTS github_posts (installation_id TEXT NOT NULL, repository_id INTEGER NOT NULL, post_id TEXT NOT NULL, slug TEXT NOT NULL, external_id TEXT, issue_number INTEGER, issue_id INTEGER, record TEXT NOT NULL, state TEXT NOT NULL CHECK(state IN ('reserved','creating','ready','uncertain','failed','withdrawn')), last_status TEXT NOT NULL DEFAULT 'New', vote_count INTEGER NOT NULL DEFAULT 0, projection_hash TEXT, public_updated_at INTEGER, PRIMARY KEY(installation_id,post_id), UNIQUE(installation_id,slug), UNIQUE(installation_id,external_id), UNIQUE(installation_id,repository_id,issue_id));
+CREATE INDEX IF NOT EXISTS github_posts_repository ON github_posts(installation_id,repository_id,state);
+CREATE TABLE IF NOT EXISTS github_comments (installation_id TEXT NOT NULL, repository_id INTEGER NOT NULL, comment_id TEXT NOT NULL, post_id TEXT NOT NULL, discussion_id TEXT NOT NULL, remote_id INTEGER, record TEXT NOT NULL, state TEXT NOT NULL CHECK(state IN ('creating','ready','uncertain','deleted')), PRIMARY KEY(installation_id,comment_id), UNIQUE(installation_id,repository_id,remote_id), FOREIGN KEY(installation_id,post_id) REFERENCES github_posts(installation_id,post_id));
+CREATE INDEX IF NOT EXISTS github_comments_post ON github_comments(installation_id,repository_id,post_id,state);

package/template/migrations/0006_integration.sql

@@ -0,0 +1,3 @@
+CREATE TABLE IF NOT EXISTS integration_credentials (installation_id TEXT PRIMARY KEY, portal_secret TEXT NOT NULL, delivery_secret TEXT NOT NULL, revoked INTEGER NOT NULL DEFAULT 0, paired_at INTEGER NOT NULL);
+CREATE TABLE IF NOT EXISTS portal_integration_nonces (installation_id TEXT NOT NULL, nonce TEXT NOT NULL, expires_at INTEGER NOT NULL, PRIMARY KEY(installation_id,nonce));
+CREATE TABLE IF NOT EXISTS integration_receipts (installation_id TEXT NOT NULL, event_id TEXT NOT NULL, kind TEXT NOT NULL, state TEXT NOT NULL DEFAULT 'pending', received_at INTEGER NOT NULL, cursor TEXT NOT NULL DEFAULT '', last_checked_at INTEGER, failure_code TEXT, PRIMARY KEY(installation_id,event_id));

package/template/migrations/0007_ownership.sql

@@ -0,0 +1,2 @@
+CREATE TABLE IF NOT EXISTS post_ownership (post_id TEXT PRIMARY KEY, post_slug TEXT NOT NULL, subject TEXT NOT NULL, title TEXT NOT NULL, type TEXT NOT NULL, created_at INTEGER NOT NULL, withdrawn INTEGER NOT NULL DEFAULT 0);
+CREATE INDEX IF NOT EXISTS owned_posts_subject ON post_ownership(subject,created_at,post_id);

package/template/migrations/0008_integration_recovery.sql

@@ -0,0 +1,5 @@
+ALTER TABLE integration_receipts ADD COLUMN attempts INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE integration_receipts ADD COLUMN next_attempt INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE integration_receipts ADD COLUMN lease_token TEXT;
+ALTER TABLE integration_receipts ADD COLUMN lease_until INTEGER NOT NULL DEFAULT 0;
+CREATE INDEX integration_receipts_due ON integration_receipts(installation_id,state,next_attempt,lease_until);

package/template/migrations/0009_observed_history.sql

@@ -0,0 +1,3 @@
+CREATE TABLE IF NOT EXISTS public_post_observations (post_slug TEXT PRIMARY KEY, revision INTEGER NOT NULL DEFAULT 0, projection TEXT, checked_at INTEGER NOT NULL DEFAULT 0, lease_until INTEGER NOT NULL DEFAULT 0, lease_token TEXT);
+CREATE TABLE IF NOT EXISTS public_post_history (id TEXT PRIMARY KEY, post_slug TEXT NOT NULL REFERENCES public_post_observations(post_slug), revision INTEGER NOT NULL, kind TEXT NOT NULL CHECK(kind IN ('status','update')), status TEXT, message TEXT, observed_at INTEGER NOT NULL, UNIQUE(post_slug,revision,kind));
+CREATE INDEX IF NOT EXISTS public_post_history_order ON public_post_history(post_slug,observed_at,revision,kind);

package/template/package.json

@@ -1,6 +1,6 @@
 {
   "name": "feedbax-installation",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "private": true,
   "type": "module",
   "scripts": {
@@ -16,17 +16,17 @@
   "dependencies": {
     "@tailwindcss/vite": "4.3.3",
     "@tanstack/react-form": "^1.33.5",
-    "@tanstack/react-query": "5.101.4",
-    "@tanstack/react-router": "1.170.31",
-    "@tanstack/react-start": "1.168.48",
-    "dotenv": "17.4.2",
-    "lucide-react": "1.33.0",
+    "@tanstack/react-query": "5.104.3",
+    "@tanstack/react-router": "1.170.44",
+    "@tanstack/react-start": "1.169.2",
+    "dotenv": "18.0.8",
+    "lucide-react": "1.57.0",
     "next-themes": "0.4.6",
-    "react": "19.2.8",
-    "react-dom": "19.2.8",
+    "react": "19.3.1",
+    "react-dom": "19.3.1",
     "sonner": "2.0.8",
     "tailwindcss": "4.3.3",
-    "zod": "4.4.3",
+    "zod": "4.6.7",
     "@base-ui/react": "1.9.0",
     "@fontsource-variable/geist": "5.3.0",
     "@shadcn/react": "0.3.1",
@@ -34,38 +34,39 @@
     "clsx": "2.1.1",
     "cmdk": "^1.1.1",
     "shadcn": "latest",
-    "tailwind-merge": "3.6.0",
+    "tailwind-merge": "3.7.0",
     "tw-animate-css": "1.4.0",
-    "drizzle-orm": "0.45.2"
+    "drizzle-orm": "0.45.4"
   },
   "devDependencies": {
-    "@cloudflare/vite-plugin": "1.53.0",
-    "@cloudflare/workers-types": "^5.20261014.1",
-    "@tanstack/react-router-devtools": "1.167.1",
-    "@tanstack/router-cli": "1.167.32",
-    "@testing-library/dom": "10.4.1",
-    "@testing-library/react": "16.3.2",
-    "@testing-library/user-event": "14.6.1",
-    "@types/react": "19.2.18",
-    "@types/react-dom": "19.2.4",
-    "@vitejs/plugin-react": "6.1.0",
-    "jsdom": "29.1.1",
+    "@cloudflare/vite-plugin": "1.64.0",
+    "@cloudflare/workers-types": "^5.20261015.1",
+    "@tanstack/react-router-devtools": "1.167.2",
+    "@tanstack/router-cli": "1.167.44",
+    "@testing-library/dom": "10.4.2",
+    "@testing-library/react": "16.3.3",
+    "@testing-library/user-event": "14.6.8",
+    "@types/react": "19.3.0",
+    "@types/react-dom": "19.3.0",
+    "@vitejs/plugin-react": "6.1.2",
+    "jsdom": "30.1.2",
     "miniflare": "4.20260730.0",
     "typescript": "6.0.3",
-    "vite": "8.2.2",
-    "web-vitals": "5.3.0",
-    "wrangler": "4.124.0",
+    "vite": "8.3.4",
+    "web-vitals": "6.2.3",
+    "wrangler": "4.151.0",
+    "esbuild": "0.28.2",
     "@tailwindcss/postcss": "4.3.3",
     "tailwindcss": "4.3.3",
-    "vitest": "4.1.11",
+    "vitest": "5.0.4",
     "@eslint/js": "10.0.1",
     "@shadcn/lint": "0.2.1",
-    "@types/node": "22.20.1",
-    "feedbax": "0.2.1",
-    "eslint": "10.8.1",
-    "globals": "17.11.0",
-    "prettier": "3.9.6",
-    "typescript-eslint": "8.67.0"
+    "@types/node": "24.19.2",
+    "feedbax": "0.2.2",
+    "eslint": "10.12.0",
+    "globals": "17.13.0",
+    "prettier": "3.9.10",
+    "typescript-eslint": "8.71.2"
   },
   "pnpm": {
     "onlyBuiltDependencies": [
@@ -73,7 +74,7 @@
     ]
   },
   "engines": {
-    "node": ">=22.14.0"
+    "node": "^24.15.0 || >=26.0.0"
   },
   "packageManager": "pnpm@10.29.3",
   "license": "Apache-2.0"

package/template/src/changelog-runtime.ts

@@ -8,7 +8,8 @@ import { requiredEnvironmentValue } from "./feedback-runtime";
 
 let configuredChangelog: ReturnType<typeof createChangelogModule> | undefined;
 
-export function createConfiguredChangelogModule() {
+export function createConfiguredChangelogModule(fresh = false) {
+  if (fresh) return buildConfiguredChangelogModule();
   configuredChangelog ??= buildConfiguredChangelogModule();
   return configuredChangelog;
 }

package/template/src/cloudflare-workers.d.ts

@@ -6,6 +6,9 @@ declare module "cloudflare:workers" {
     }>;
   };
   export const env: {
+    GITHUB_SERVICE_SECRET?: string;
+    GITHUB_DELIVERY_SECRET?: string;
+    GITHUB_PAIRING_SECRET?: string;
     FEEDBAX_UPDATES?: import("@cloudflare/workers-types").Queue<string>;
     FEEDBAX_EMAIL?: import("@feedbax/feedback").CloudflareEmailBinding;
     EMAIL_PROVIDER_SECRET?: string;

package/template/src/comment-creation.test.tsx

@@ -111,12 +111,15 @@ describe("Comment creation", () => {
     });
     fireEvent.click(screen.getByRole("button", { name: "Post comment" }));
     expect(screen.getByText("Please add shortcuts.")).toBeTruthy();
-    expect(submitComment).toHaveBeenCalledWith({
-      slug: "roadmap-search",
-      body: "Please add shortcuts.",
-      displayName: "Ari",
-      email: "private@example.com",
-    });
+    await waitFor(() =>
+      expect(submitComment).toHaveBeenCalledWith({
+        slug: "roadmap-search",
+        body: "Please add shortcuts.",
+        displayName: "Ari",
+        email: "private@example.com",
+        submissionKey: expect.stringMatching(/^[A-Za-z0-9_-]{43}$/),
+      }),
+    );
 
     confirm({
       id: "notion-comment",
@@ -182,6 +185,7 @@ describe("Comment creation", () => {
         />
       </DeviceProfileProvider>,
     );
+    await waitFor(() => expect(submitComment).toHaveBeenCalledTimes(1));
     finish(confirmed);
     await waitFor(() =>
       expect(screen.getAllByText("One comment")).toHaveLength(1),
@@ -205,6 +209,49 @@ describe("Comment creation", () => {
     await screen.findByRole("alert");
     expect(screen.queryByText("Temporary message")).toBeNull();
     expect(screen.getByRole("alert").textContent).toContain("Try again");
+    expect(
+      (screen.getByLabelText("Add a comment") as HTMLTextAreaElement).value,
+    ).toBe("Temporary message");
+  });
+
+  it("retries a lost Comment response with the same intent and preserves the composer", async () => {
+    saveDeviceProfile(localStorage, {
+      name: "Ari",
+      email: "private@example.com",
+    });
+    const requests: Record<string, unknown>[] = [];
+    vi.spyOn(globalThis, "fetch").mockImplementation(async (_url, init) => {
+      requests.push(JSON.parse(String(init?.body)));
+      if (requests.length === 1) throw new Error("Response lost. Try again.");
+      return Response.json({
+        comment: {
+          id: "recovered-comment",
+          discussionId: "recovered-thread",
+          body: "Keep this message",
+          author: { kind: "participant", displayName: "Ari" },
+          createdAt: "2026-08-25T01:00:00.000Z",
+        },
+      });
+    });
+    renderCommentDetail({ submitComment: submitPublicComment });
+    fireEvent.change(await screen.findByLabelText("Add a comment"), {
+      target: { value: "Keep this message" },
+    });
+    fireEvent.click(screen.getByRole("button", { name: "Post comment" }));
+    await screen.findByRole("alert");
+    expect(
+      (screen.getByLabelText("Add a comment") as HTMLTextAreaElement).value,
+    ).toBe("Keep this message");
+    fireEvent.click(screen.getByRole("button", { name: "Post comment" }));
+    await waitFor(() => expect(requests).toHaveLength(2));
+    await waitFor(() =>
+      expect(
+        (screen.getByLabelText("Add a comment") as HTMLTextAreaElement).value,
+      ).toBe(""),
+    );
+    expect(requests[0]?.submissionKey).toMatch(/^[A-Za-z0-9_-]{43}$/);
+    expect(requests[1]?.submissionKey).toBe(requests[0]?.submissionKey);
+    expect(screen.getAllByText("Keep this message")).toHaveLength(1);
   });
 
   it("renders a fresh Turnstile challenge after a stale Participation Pass is rejected", async () => {

package/template/src/components/connected-identity-provider.tsx

@@ -19,6 +19,7 @@ type IdentityState = {
   enabled: boolean;
   ready: boolean;
   displayName?: string;
+  sessionKey?: string;
   error?: string;
   signOut: () => Promise<void>;
 };
@@ -38,28 +39,54 @@ export function ConnectedIdentityProvider({
   const [state, setState] = useState<{
     ready: boolean;
     displayName?: string;
+    sessionKey?: string;
     error?: string;
   }>({ ready: !feedbax.connected });
   useEffect(() => {
     if (!feedbax.connected) return;
-    const controller = new AbortController();
-    fetch("/internal/identity/session", {
-      signal: controller.signal,
-      cache: "no-store",
-    })
-      .then(async (response) => {
-        if (!response.ok) throw new Error();
-        const value = await response.json();
-        setState({ ready: true, displayName: value.participant?.displayName });
+    let controller: AbortController | undefined;
+    const refresh = () => {
+      controller?.abort();
+      const active = new AbortController();
+      controller = active;
+      // Unmount private views before fetching a possibly different session.
+      setState({ ready: false });
+      fetch("/internal/identity/session", {
+        signal: active.signal,
+        cache: "no-store",
       })
-      .catch(() => {
-        if (!controller.signal.aborted)
-          setState({
-            ready: true,
-            error: "Sign-in is temporarily unavailable.",
-          });
-      });
-    return () => controller.abort();
+        .then(async (response) => {
+          if (!response.ok) throw new Error();
+          const value = await response.json();
+          if (!active.signal.aborted)
+            setState({
+              ready: true,
+              displayName: value.participant?.displayName,
+              sessionKey: value.participant?.sessionKey,
+            });
+        })
+        .catch(() => {
+          if (!active.signal.aborted)
+            setState({
+              ready: true,
+              error: "Sign-in is temporarily unavailable.",
+            });
+        });
+    };
+    const visibility = () => {
+      if (document.visibilityState === "hidden") {
+        controller?.abort();
+        setState({ ready: false });
+      } else refresh();
+    };
+    refresh();
+    window.addEventListener("focus", refresh);
+    document.addEventListener("visibilitychange", visibility);
+    return () => {
+      controller?.abort();
+      window.removeEventListener("focus", refresh);
+      document.removeEventListener("visibilitychange", visibility);
+    };
   }, []);
   async function signOut() {
     const response = await fetch("/internal/identity/logout", {