Evidence record / heypi

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-13-heypi-cloudflare-1-0-removes-the-session-api-used-by-heypi-s-remote-adapter

Cloudflare 1.0 removes the session API used by heypi’s remote adapter. Cloudflare’s 1.0.0 rewrite removes the session interface heypi’s adapter imports and calls on a caller-owned sandbox. heypi’s ^0.12.3 dependency ordinarily resolves 0.12.10, but does not control the SDK used by the operator’s Worker to construct that object. Cloudflare 1.0.1 was published by window close. Separately, heypi pins Vercel SDK 2.6.0 exactly while 3.8.0 was published by cutoff. Vercel 3.0.0 explicitly preserves runtime-based creation through the legacy v2 API, so age alone does not prove that adapter broken or unsupported.

Channel: tagged-release upstream; heypi Cloudflare and Vercel adapters preview-or-beta. Half: defect. Date: 2026-09-30 (npm 1.0.0 publication); 1.0.1 and Vercel 3.8.0 published 2026-10-13.

Operator consequence: Keep the caller-owned Cloudflare Worker sandbox on the 0.12 line, preferably 0.12.10 for section 12’s fixes, until the adapter is ported. Changing only heypi’s transitive SDK does not change the object supplied by the Worker. Treat 1.0.0 API incompatibility as source analysis, not an executed deployment failure. Verify Vercel’s exact 2.6.0 integration separately rather than transferring Cloudflare’s incompatibility to it.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-heypi-cloudflare-1-0-removes-the-session-api-used-by-heypi-s-remote-adapter

Profile citations

  • heypi / claim / cloudflare-caller-owned-sdk-boundary
  • heypi / posture / accessibility

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact