@floomhq/signaldash 0.39.12 → 0.39.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -4
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -36,7 +36,7 @@ When the CLI runs without a TTY, it requests a session-bound browser handoff
|
|
|
36
36
|
instead. `POST /connect/<provider>/handoff` returns a short-lived `/c/<token>`
|
|
37
37
|
link on `https://signaldash.dev` for the human to open; only the token hash is persisted, and requesting a
|
|
38
38
|
new link for the same provider invalidates the previous one. The default
|
|
39
|
-
15-minute lifetime can be configured with
|
|
39
|
+
15-minute account-connection lifetime can be configured with
|
|
40
40
|
`SIGNALDASH_CONNECT_HANDOFF_TTL_MS`. Opening the link creates no SignalDash
|
|
41
41
|
session and binds the completed provider account only to the bearer session
|
|
42
42
|
that requested it.
|
|
@@ -120,7 +120,7 @@ setup installs both from the same pinned npm package
|
|
|
120
120
|
the human chose to execute:
|
|
121
121
|
|
|
122
122
|
```bash
|
|
123
|
-
npx -y @floomhq/signaldash@0.39.
|
|
123
|
+
npx -y @floomhq/signaldash@0.39.13 <invite-code>
|
|
124
124
|
```
|
|
125
125
|
|
|
126
126
|
Run that command in a terminal, not in an agent chat. Do not ask an agent to
|
|
@@ -442,8 +442,10 @@ and media routes remain account- and post-scoped, expire independently, and
|
|
|
442
442
|
are revoked on logout. New exact-post links use
|
|
443
443
|
`https://signaldash.dev/p/<token>` and calendar links use
|
|
444
444
|
`https://signaldash.dev/c/<token>`. Each new compact token is 8 base64url
|
|
445
|
-
characters generated from 6 random bytes.
|
|
446
|
-
|
|
445
|
+
characters generated from 6 random bytes. Calendar, scheduled-post preview,
|
|
446
|
+
and draft-preview handoffs default to a 60-minute unopened-link lifetime,
|
|
447
|
+
configurable with `SIGNALDASH_CALENDAR_HANDOFF_TTL_MS`. Their 48 bits of entropy
|
|
448
|
+
are bounded by one-use consumption and a durable five-attempt
|
|
447
449
|
per-client throttle. Already-issued 24-character compact tokens and 48-character
|
|
448
450
|
`/scheduled-post/h/<token>` or `/calendar/h/<token>` links remain valid until
|
|
449
451
|
their normal expiry.
|