feat: add first-party Tinybird analytics - #2003

Closed

richiemcilroy wants to merge 151 commits into

mainfrom

codex/first-party-analytics

Commits on Jul 12, 2026

feat: add shared product analytics contract
richiemcilroy
committed
c87f74e
feat: add first-party web analytics
richiemcilroy
committed
ca35887
feat: add first-party desktop analytics
richiemcilroy
committed
2e481d6
feat: add Tinybird analytics infrastructure
richiemcilroy
committed
a2b4a01
fix: secure product analytics ingestion
richiemcilroy
committed
9d7b695
fix: harden analytics deployment tooling
richiemcilroy
committed
557abd1
fix: require trusted analytics origins
richiemcilroy
committed
5540c9e
fix: mount Tinybird CLI config safely
richiemcilroy
committed
ac73bd8
fix: require browser fetch metadata
richiemcilroy
committed
ce87b26
fix: give Tinybird resources unique names
richiemcilroy
committed
6355ec7
fix: sign anonymous analytics requests
richiemcilroy
committed
e08bc0a
fix: make analytics TTL compatible
richiemcilroy
committed
f8820d9
fix: type analytics health parameters
richiemcilroy
committed
9fa6e12
fix: align analytics health fixture
richiemcilroy
committed
dc25da4
fix: contain anonymous analytics ingestion
richiemcilroy
committed
552b9e0
fix: parse Tinybird workspace identity
richiemcilroy
committed
fee7c3a

Commits on Jul 24, 2026

Merge remote-tracking branch 'origin/main' into codex/first-party-analytics
richiemcilroy
committed
8c94da0
refactor: remove PostHog analytics
richiemcilroy
committed
bd2039a
fix: restore devtools effect import
richiemcilroy
committed
bd28a25

Commits on Jul 31, 2026

Merge main into first-party analytics
richiemcilroy
committed
5aefe3d
fix(mobile): align React Native with Expo
richiemcilroy
committed
d986b6c
fix: parse Tinybird workspace table
richiemcilroy
committed
28e2967
fix: support scoped Tinybird deploy tokens
richiemcilroy
committed
5e0dc42
fix: allow current Vercel preview analytics
richiemcilroy
committed
1938917
fix: normalize Tinybird health query timestamps
richiemcilroy
committed
84b6b3b
feat: enforce typed first-party analytics events
richiemcilroy
committed
b445429
feat: make critical analytics delivery durable
richiemcilroy
committed
f8a610f
feat: add exact analytics decision views
richiemcilroy
committed
e030c95
ci: prove analytics in isolated staging
richiemcilroy
committed
fc802e4
fix: avoid nested Tinybird aggregate aliases
richiemcilroy
committed
729f28c
fix: disambiguate traffic engagement aggregates
richiemcilroy
committed
c4a3b9c
fix: use supported Tinybird copy commands
richiemcilroy
committed
094f838
fix: prove exact analytics decisions
richiemcilroy
committed
3852628
fix: reconcile authoritative analytics facts
richiemcilroy
committed
4ff7e41
fix: fail closed on analytics privacy boundaries
richiemcilroy
committed
7d85e4f
fix: harden analytics collectors and outbox
richiemcilroy
committed
1b257a0
fix: verify copied Tinybird endpoints locally
richiemcilroy
committed
93e488f
fix: bound browser analytics activity
richiemcilroy
committed
d43593d
fix: fail closed in analytics staging
richiemcilroy
committed
835a60d
fix: reject sensitive analytics payloads
richiemcilroy
committed
11c8261
fix: use scoped Tinybird local tokens
richiemcilroy
committed
a6cb613
fix: reconcile Stripe analytics events
richiemcilroy
committed
4fd055c
fix: verify bounded analytics helpers
richiemcilroy
committed
b54c723
fix: authenticate Tinybird local token discovery
richiemcilroy
committed
364c888
feat: harden analytics delivery and business facts
richiemcilroy
committed
5739a36
feat: materialize analytics decision views
richiemcilroy
committed
89d3e7b
ci: prove exact-sha analytics staging
richiemcilroy
committed
2715d98
test: type analytics performance scheduler
richiemcilroy
committed
178e2f8
chore: format analytics recovery tests
richiemcilroy
committed
6b2a979
test: isolate Tinybird local fixtures
richiemcilroy
committed
298f9d9
fix: preserve analytics delivery recovery
richiemcilroy
committed
42e7fef
ci: retire legacy staging analytics resources
richiemcilroy
committed
a1895a1

Commits on Aug 1, 2026

fix: keep analytics recovery durable
richiemcilroy
committed
56d0e8b
fix: evolve exact analytics aggregates safely
richiemcilroy
committed
0054d58
fix: close analytics recovery abuse gaps
richiemcilroy
committed
0b74725
test: bound Tinybird local copy threads
richiemcilroy
committed
7b1f97a
fix: keep analytics keys in the OS keyring
richiemcilroy
committed
ad881ea
ci: install dependencies for staging assertions
richiemcilroy
committed
2f915b4
fix: migrate durable analytics outbox keys
richiemcilroy
committed
c5a464f
ci: scope analytics staging operators
richiemcilroy
committed
20ff135
fix: adopt concurrent analytics outbox keys
richiemcilroy
committed
e561dfb
fix: bound analytics privacy scans
richiemcilroy
committed
47a75d6
ci: discard failed staging before cleanup
richiemcilroy
committed
b02f04b
ci: accept exact no-op Tinybird deployments
richiemcilroy
committed
fc31804
ci: require explicit Tinybird no-op proof
richiemcilroy
committed
da61fb7
ci: run Tinybird copies with scoped API
richiemcilroy
committed
3437e9f
ci: target live Tinybird copies directly
richiemcilroy
committed
b3a5956
fix: bind analytics limits to trusted networks
richiemcilroy
committed
be8cdd3
ci: poll Tinybird copies with staging deploy token
richiemcilroy
committed
59397b9
ci: prove Tinybird copies from aggregate state
richiemcilroy
committed
32c9b38
ci: preserve analytics candidate through cleanup
richiemcilroy
committed
b58f419
ci: clean partial analytics seeds
richiemcilroy
committed
ac90129
ci: reconcile interrupted analytics runs
richiemcilroy
committed
4570483
fix: inline analytics copy assertion parameter
richiemcilroy
committed
c32fd9b
ci: bind analytics staging lifecycle to deployment
richiemcilroy
committed
62e6dbf
ci: authorize candidate analytics copies
richiemcilroy
committed
794a23f
feat: harden analytics contracts and business events
richiemcilroy
committed
600bbcd
fix: make analytics delivery and erasure durable
richiemcilroy
committed
1723c7e
feat: add exact Tinybird decision aggregates
richiemcilroy
committed
d351872
ci: prove analytics against exact staging deployments
richiemcilroy
committed
d2a45c6
ci: compile desktop analytics before staging
richiemcilroy
committed
8039996
ci: prepare native deps for analytics Rust gate
richiemcilroy
committed
26217fd
feat: enforce typed analytics delivery contracts
richiemcilroy
committed
af3a0cb
feat: make analytics delivery and erasure durable
richiemcilroy
committed
5b45cd1
feat: harden analytics decision aggregates
richiemcilroy
committed
d7d80a9
ci: prove analytics staging at the exact SHA
richiemcilroy
committed
c6101c8
fix: use a valid analytics workflow path glob
richiemcilroy
committed
409d18a
fix: keep analytics workflow runtime portable
richiemcilroy
committed
340e03e
fix: prevent Tinybird resource node collisions
richiemcilroy
committed
c707ffc
fix: harden analytics event admission
richiemcilroy
committed
23e6ae9
fix: expose durable analytics health
richiemcilroy
committed
c3788de
ci: harden Tinybird staging lifecycle
richiemcilroy
committed
1dd669f
docs: tighten analytics rollout contract
richiemcilroy
committed
a183e23
fix: make Tinybird staging aggregates executable
richiemcilroy
committed
131b29b
ci: authorize protected analytics previews
richiemcilroy
committed
ea74b61
fix: attest branch-scoped analytics previews
richiemcilroy
committed
9be8862
fix: restrict staging analytics by preview host
richiemcilroy
committed
cde2ccc
fix: trust scoped analytics preview marker
richiemcilroy
committed
f357201
fix: accept Vercel deployment routing host
richiemcilroy
committed
f55226b
fix: gate staging analytics by branch marker
richiemcilroy
committed
d8c622c
fix: sign staging analytics requests
richiemcilroy
committed
224c011
fix: bootstrap protected analytics preview
richiemcilroy
committed
8838813
fix: route analytics staging subpaths
richiemcilroy
committed
217a95d
improve: report staging credential drift
richiemcilroy
committed
c9e8b67
fix: harden analytics staging recovery
richiemcilroy
committed
65a968e
fix: seed analytics after staging promotion
richiemcilroy
committed
e560be9
fix: attest analytics copy jobs before erasure
richiemcilroy
committed
7a2b9e2
fix: harden Tinybird staging token boundaries
richiemcilroy
committed
078f69e
fix: mint scoped JWT for local analytics checks
richiemcilroy
committed
8001bc9
fix: isolate local analytics read token
richiemcilroy
committed
3c92e69
fix: scope Tinybird Local verification at build
richiemcilroy
committed
ebdb814
fix: retire superseded Tinybird staging deployments
richiemcilroy
committed
5389076

Commits on Aug 2, 2026

fix: harden staging analytics identity cleanup
richiemcilroy
committed
ff64788
fix: keep analytics fixtures in completed UTC days
richiemcilroy
committed
aaaf7d4
fix: deliver initial analytics page views reliably
richiemcilroy
committed
ae2b835
fix: isolate analytics copy generations
richiemcilroy
committed
8613612
fix: make analytics staging recovery fail closed
richiemcilroy
committed
c362483
fix: invoke analytics timers safely
richiemcilroy
committed
df69a61
test: prove browser delivery by event id
richiemcilroy
committed
768cd08
test: isolate analytics main-thread cost
richiemcilroy
committed
766b051
test: isolate fresh browser retry
richiemcilroy
committed
5fe625a
improve: classify analytics request rejections
richiemcilroy
committed
addf90f
test: report deployed analytics acknowledgements
richiemcilroy
committed
97759a4
fix: accept generated analytics identifiers
richiemcilroy
committed
7fed64b
docs: pin analytics firewall semantics
richiemcilroy
committed
67ac7cc
fix: exercise durable analytics retry
richiemcilroy
committed
7a90111
fix: deduplicate analytics cleanup scopes
richiemcilroy
committed
884a7a1
fix: version analytics client event contracts
richiemcilroy
committed
41e64c1
fix: preserve analytics retry and sign-in evidence
richiemcilroy
committed
3eba5ad
fix: emit first views for legacy shares
richiemcilroy
committed
bcb1c59
fix: erase organization analytics identity state
richiemcilroy
committed
1dbe76f
fix: make analytics staging fail closed
richiemcilroy
committed
73c90e8
fix: contain failed analytics staging run
richiemcilroy
committed
2fec91b
fix: attest analytics recovery alias
richiemcilroy
committed
c55b311
fix: resume scoped analytics containment
richiemcilroy
committed
af3109f
fix: harden analytics staging recovery
richiemcilroy
committed
fa9374c
docs: update analytics recovery contract
richiemcilroy
committed
08efb0d
fix: make analytics recovery alias-safe
richiemcilroy
committed
9558544
fix: stabilize analytics preview evidence
richiemcilroy
committed
f72ba4d
fix: align analytics staging fixture assertions
richiemcilroy
committed
f36805a
fix: model analytics endpoint scale correctly
richiemcilroy
committed
8fc6cdc
fix: count typed experiment outcomes
richiemcilroy
committed
7003bb2
fix: measure analytics visibility boundaries
richiemcilroy
committed
7723d2c
fix: preserve preview delivery cardinality
richiemcilroy
committed
3439443
fix: scope analytics health proof by test run
richiemcilroy
committed
1ce06e1
fix: recover scoped analytics erasure retries
richiemcilroy
committed
840ad5a
fix: clear synthetic erasure fence before browser proof
richiemcilroy
committed
761c7cb
fix: retire stale analytics erasure requests
richiemcilroy
committed
3f3ad8f
fix: expose safe analytics erasure phases
richiemcilroy
committed
04ac9b5
fix: request JSON for analytics erasure queries
richiemcilroy
committed
56e82cc
fix: verify shared-browser analytics erasure
richiemcilroy
committed
921f653