@bondsmith/bondsmithd 0.1.9 → 0.1.11

package/README.md

@@ -38,8 +38,14 @@ Environment variables (all optional):
 PORT=4577                                    # defaults to 4577
 ALLOWED_ORIGINS=https://app.bondsmith.dev
 BONDSMITH_RELAY_URL=ws://127.0.0.1:8787       # defaults to production; set this when developing bondsmithd against a local apps/relay
+BONDSMITH_RELAY_AUDIENCE=relay.example.com    # only if a non-loopback relay's RELAY_AUDIENCE differs from its hostname
 ```
 
+`BONDSMITH_API_URL` must be `https://`, and `BONDSMITH_RELAY_URL` must be `wss://`; the plain `http://`
+and `ws://` forms are accepted only for a loopback server (`127.0.0.1`, `localhost`, `[::1]`). The relay
+URL is only checked while the relay is enabled. The daemon refuses to register with a relay whose audience is not
+the relay URL's hostname (or `BONDSMITH_RELAY_AUDIENCE`); a loopback relay is not checked.
+
 `BONDSMITH_DEV_TUNNEL_TOKEN` also exists but only applies to the legacy direct-connection path
 (`BONDSMITH_RELAY_ENABLED=false`) — should not be set by hand for a normal install.
 
@@ -79,7 +85,8 @@ tmux set-option -t "$TMUX_PANE" -q @bondsmith-agent-state "waiting:$(date +%s)"
 The value is `<state>:<epoch seconds>`, where state is `working`, `waiting` (needs the user) or `done`.
 The daemon reads it on its 5-second tick and shows it on the session. Anything else is ignored, as is
 a report dated in the future. A `waiting` or `done` report is dropped once the pane writes output more
-than 2 seconds after it, since that means the agent moved on; a `working` report is not.
+than 2 seconds after it, since that means the agent moved on. A `working` report is dropped once the
+pane has been silent for 2 minutes, since an interrupted or crashed agent never reports again.
 
 An agent can also share the plan it is working against, which Bondsmith shows above the session's
 changes. Run this from inside the session's pane once the plan is agreed, and again whenever it changes: