Integrate reviewed upstream snapshot with fork diagnostics and process regressions

.env.compose.example

@@ -10,4 +10,3 @@ WEBCODEX_HOST_IP=127.0.0.1
 WEBCODEX_HOST_PORT=8080
 
 RUST_LOG=info
-WEBCODEX_MCP_MODEL_SURFACE=local-coding-v1

.gitattributes

@@ -1 +1,16 @@
 *.sh text eol=lf
+*.toml text eol=lf
+# Benchmark fixture bytes are part of the independent oracle.
+tests/fixtures/agent-loop-multi-file/*.txt text eol=lf
+
+# Frontend freshness checks compare these generated assets byte-for-byte.
+frontend/dist/** text eol=lf
+src/mcp_pdf_app.html text eol=lf
+src/mcp_work_result_app.html text eol=lf
+# Preserve the exact SheetJS distribution bytes used by the SHA-256 check.
+frontend/vendor/sheetjs/xlsx.mini.min.js -text
+# Keep spreadsheet bundle inputs and generated HTML identical across checkouts.
+frontend/vendor/sheetjs/LICENSE text eol=lf
+frontend/scripts/build-spreadsheet.mjs text eol=lf
+frontend/src/mcp-apps/spreadsheet-*.js text eol=lf
+src/mcp_spreadsheet_app.html text eol=lf

.github/FUNDING.yml

@@ -0,0 +1 @@
+custom: ["https://github.com/yyjeqhc/webcodex/blob/main/docs/SPONSORSHIP.md"]

.github/workflows/download-page.yml

@@ -0,0 +1,75 @@
+name: Build download page
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: Release tag to render (for example v1.2.3)
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.12"
+      - name: Resolve optional installer manifest
+        id: manifest
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ github.event.release.tag_name || inputs.tag }}
+          GH_REPOSITORY: ${{ github.repository }}
+        run: |
+          set -euo pipefail
+          mkdir -p "$RUNNER_TEMP/release"
+          release_json="$RUNNER_TEMP/release.json"
+          gh api "repos/$GH_REPOSITORY/releases/tags/$RELEASE_TAG" > "$release_json"
+          manifest_count="$(python3 - "$release_json" <<'PY'
+          import json
+          import sys
+          release = json.load(open(sys.argv[1], encoding="utf-8"))
+          print(sum(1 for asset in release.get("assets", []) if asset.get("name") == "manifest.json"))
+          PY
+          )"
+          if [ "$manifest_count" -gt 1 ]; then
+            echo "Release contains duplicate manifest.json assets." >&2
+            exit 1
+          fi
+          if [ "$manifest_count" = 0 ]; then
+            echo "has_installers=false" >> "$GITHUB_OUTPUT"
+            echo "Core release has no unified installer manifest; download-page generation is not applicable." >> "$GITHUB_STEP_SUMMARY"
+            exit 0
+          fi
+          gh release download "$RELEASE_TAG" --repo "$GH_REPOSITORY" --pattern manifest.json --dir "$RUNNER_TEMP/release"
+          test -s "$RUNNER_TEMP/release/manifest.json"
+          has_installers="$(python3 - "$RUNNER_TEMP/release/manifest.json" <<'PY'
+          import json
+          import sys
+          manifest = json.load(open(sys.argv[1], encoding="utf-8"))
+          print("true" if "installers" in manifest else "false")
+          PY
+          )"
+          echo "has_installers=$has_installers" >> "$GITHUB_OUTPUT"
+          if [ "$has_installers" = false ]; then
+            echo "Release manifest contains only core Runtime artifacts; installer download-page generation is not applicable." >> "$GITHUB_STEP_SUMMARY"
+          fi
+      - name: Build static download page
+        if: steps.manifest.outputs.has_installers == 'true'
+        run: >-
+          python3 scripts/build_download_page.py
+          --manifest "$RUNNER_TEMP/release/manifest.json"
+          --output-dir "$RUNNER_TEMP/download-page"
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        if: steps.manifest.outputs.has_installers == 'true'
+        with:
+          name: download-page-${{ github.event.release.tag_name || inputs.tag }}
+          path: ${{ runner.temp }}/download-page/
+          if-no-files-found: error