@floomhq/signaldash 0.39.9 → 0.39.11

package/README.md

@@ -120,7 +120,7 @@ setup installs both from the same pinned npm package
 the human chose to execute:
 
 ```bash
-npx -y @floomhq/signaldash@0.39.9 <invite-code>
+npx -y @floomhq/signaldash@0.39.11 <invite-code>
 ```
 
 Run that command in a terminal, not in an agent chat. Do not ask an agent to
@@ -410,7 +410,12 @@ with `private, no-store`, MIME allowlisting, `nosniff`, and a restrictive CSP.
 The shared calendar displays unscheduled SignalDash and Buffer drafts with the
 same cards as scheduled posts, marked by a visible `DRAFT` tag and an
 `Unscheduled` time label. Saved SignalDash media uses separate protected
-`/calendar/drafts/...` URLs. Drafts never enter the `items` returned by
+`/calendar/drafts/...` URLs. Each saved SignalDash draft also exposes an
+authenticated edit-and-feedback form. Its CSRF token is bound to the live
+calendar session, draft UUID, and current version. Copy edits and feedback use
+one atomic compare-and-swap, preserve existing media and the first comment,
+append bounded editorial metadata, and never schedule or publish the draft.
+Drafts never enter the `items` returned by
 `li_scheduled_posts`, preserving its existing calendar contract.
 
 `li_scheduled_posts` is the shared planning read across posts stored by
@@ -424,10 +429,11 @@ visible SignalDash and Buffer sources are empty, never that the native LinkedIn
 calendar is empty.
 
 The read-only calendar page renders each stored SignalDash image through a
-calendar-session-protected, tenant-scoped media route. It does not invent
-visuals for Buffer entries because SignalDash does not store their media bytes.
-Calendar media is no-store and becomes unavailable when the session expires or
-the originating user is revoked.
+calendar-session-protected, tenant-scoped media route. Buffer image assets and
+video or document thumbnails use a separate authenticated proxy that accepts
+only the provider's validated HTTPS media hosts and never exposes a provider
+URL in browser HTML. Calendar media is no-store and becomes unavailable when
+the session expires or the originating user is revoked.
 
 `li_scheduled_post_preview` returns a short-lived, single-use browser handoff
 for one exact active SignalDash post owned by the authenticated user. The page
@@ -442,6 +448,16 @@ per-client throttle. Already-issued 24-character compact tokens and 48-character
 `/scheduled-post/h/<token>` or `/calendar/h/<token>` links remain valid until
 their normal expiry.
 
+The shared calendar preserves validated Buffer LinkedIn tag ranges and URLs in
+the post body and also keeps the separate tag audit pills. Valid provider
+annotations render as clickable LinkedIn links in both places. SignalDash
+mentions derive inline ranges only when the named occurrence is unique, and
+derive a LinkedIn company link only from a validated numeric provider ID.
+Ambiguous names or unsafe URLs remain plain text. Buffer image assets and
+video/document thumbnails render through the same authenticated, no-store
+media surface as SignalDash attachments; provider asset URLs are never placed
+in the browser HTML.
+
 `li_edit_scheduled_post` replaces one complete scheduled-post payload in place.
 The preview call takes the exact UUID, text, offset-qualified time, mentions,
 image bytes, and optional first comment. Confirmation repeats that identical

package/bin/sd.mjs

@@ -1909,6 +1909,7 @@ const TOOLS = [
               meta: { type: "array", maxItems: 4, items: { type: "string", maxLength: 80 } },
               org: { type: "string", maxLength: 120 },
               tags: { type: "array", maxItems: 5, items: { type: "string", maxLength: 28 } },
+              facts: { type: "array", maxItems: 4, items: { type: "object", properties: { label: { type: "string", maxLength: 24 }, value: { type: "string", maxLength: 120 } }, required: ["label","value"], additionalProperties: false } },
               factors: {
                 type: "array", maxItems: 6,
                 items: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floomhq/signaldash",
-  "version": "0.39.9",
+  "version": "0.39.11",
   "description": "Secure LinkedIn, WhatsApp, and email access for AI agents",
   "type": "module",
   "bin": {

package/skills/signaldash/SKILL.md

@@ -455,7 +455,7 @@ Use the exact tool names and argument keys below. Limits are optional.
 | `li_update_post_draft` | `id`, complete replacement `text`, and current `expected_version` required; `mentions`, `attachments`, and `first_comment` optional | Atomically replace the complete saved draft. A stale version is refused with the current version and timestamp. Omitting an optional field clears it. No provider call occurs. |
 | `li_delete_post_draft` | `id`, current `expected_version`, and `confirm:true` required | Permanently delete one exact saved SignalDash draft. Unknown, foreign, deleted, and replayed identifiers are indistinguishable. This cannot delete LinkedIn-native or scheduled content. |
 | `li_post_draft_preview` | `id` required UUID | Create a short-lived, single-use `https://signaldash.dev/d/<token>` browser handoff for one exact saved draft. Its page and exact image bytes are protected by a tenant-, draft-, and originating-session-scoped cookie under `/drafts`. |
-| `li_scheduled_posts` | no arguments | Read one shared content-calendar view across SignalDash and the configured Buffer LinkedIn channel. Inspect `completeness` and every `sources.*.state` before treating absence as an empty calendar. Native LinkedIn scheduled posts and drafts are invisible because Unipile has no documented read route for them; SignalDash does not use raw Voyager routes or linkedin.com browser access. An empty `items` array proves only that the visible sources returned no entries. |
+| `li_scheduled_posts` | no arguments | Read one shared content-calendar view across SignalDash and the configured Buffer LinkedIn channel. The browser calendar renders validated Buffer company tags both inline and as audit pills, and proxies supported Buffer image previews through its authenticated no-store media route without exposing provider URLs. Inspect `completeness` and every `sources.*.state` before treating absence as an empty calendar. Native LinkedIn scheduled posts and drafts are invisible because Unipile has no documented read route for them; SignalDash does not use raw Voyager routes or linkedin.com browser access. An empty `items` array proves only that the visible sources returned no entries. |
 | `li_profile` | `identifier` required, a public id or member id | Read one LinkedIn profile: name, headline, public identifier, provider id, network distance and the profile picture url. Read-only, one provider call, and it returns those six fields rather than the provider's whole record about a person. It exists because pictures were otherwise a by-product of engagement only: reactions and comments carry one, the stored connections carry no picture field, chats carry none, and the invitation preview refuses anyone already connected, so every new name in a shortlist stayed faceless. |
 | `sd_share_list` | `action` create/list/revoke, plus `title`, `columns`, `rows`, optional `note`, or `token` to revoke | Share one selection as a standalone `https://signaldash.dev/l/<token>` page that anyone with the link can open. `create` returns the url ONCE and stores only its SHA-256 hash, so a lost link can be revoked but never recovered. The page is a fixed snapshot and never re-reads the source, so a list shared today does not keep disclosing tomorrow's data. Pass `people` instead of `rows` for a shortlist of humans: each renders as a card with a photo where the provider supplies one and initials where it does not, an optional `score` out of 100, and the `reason` that earned it, with the scoring rule in `rubric` so the reader can check it. For a plain table, every row must have exactly as many cells as there are columns, because a crooked table reads as a claim about the wrong person. `list` shows every live link with its non-secret `list_id` and open count, so a link whose url is lost can still be switched off and a forgotten one stays visible; `revoke` takes either the `token` or that `list_id` and kills it immediately, and a revoked token is indistinguishable from one that never existed. |
 | `li_scheduled_post_preview` | `id` required UUID | Create a short-lived, single-use `https://signaldash.dev/p/<token>` browser handoff for one exact active SignalDash post. The isolated page includes its stored image attachments through account- and post-scoped protected media routes. |