@floomhq/signaldash 0.39.4 → 0.39.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -4
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -120,7 +120,7 @@ setup installs both from the same pinned npm package
|
|
|
120
120
|
the human chose to execute:
|
|
121
121
|
|
|
122
122
|
```bash
|
|
123
|
-
npx -y @floomhq/signaldash@0.39.
|
|
123
|
+
npx -y @floomhq/signaldash@0.39.5 <invite-code>
|
|
124
124
|
```
|
|
125
125
|
|
|
126
126
|
Run that command in a terminal, not in an agent chat. Do not ask an agent to
|
|
@@ -395,9 +395,11 @@ shows only that post, including its stored image attachments. Preview sessions
|
|
|
395
395
|
and media routes remain account- and post-scoped, expire independently, and
|
|
396
396
|
are revoked on logout. New exact-post links use
|
|
397
397
|
`https://signaldash.dev/p/<token>` and calendar links use
|
|
398
|
-
`https://signaldash.dev/c/<token>`. Each compact token is
|
|
399
|
-
characters generated from
|
|
400
|
-
|
|
398
|
+
`https://signaldash.dev/c/<token>`. Each new compact token is 8 base64url
|
|
399
|
+
characters generated from 6 random bytes. Its 48 bits of entropy are bounded
|
|
400
|
+
by a 15-minute lifetime, one-use consumption, and a durable five-attempt
|
|
401
|
+
per-client throttle. Already-issued 24-character compact tokens and 48-character
|
|
402
|
+
`/scheduled-post/h/<token>` or `/calendar/h/<token>` links remain valid until
|
|
401
403
|
their normal expiry.
|
|
402
404
|
|
|
403
405
|
`li_edit_scheduled_post` replaces one complete scheduled-post payload in place.
|