flow-agent-bridge 0.26.0 → 0.26.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -163,6 +163,12 @@ The app sees a plain reverse proxy with identity attached to every request:
|
|
|
163
163
|
Inbound `X-Flow-*` headers are stripped, so those values cannot be spoofed. A
|
|
164
164
|
naive app needs no changes; a per-user app reads two headers.
|
|
165
165
|
|
|
166
|
+
An app already pinned as a plain link doesn't need re-pinning by hand:
|
|
167
|
+
`create_artifact` on the **same url** with `app: true` promotes that artifact in
|
|
168
|
+
place and returns its secret, so it keeps its id and its place in everyone's
|
|
169
|
+
sidebar. Doing it twice is refused — a second secret would silently kill every
|
|
170
|
+
token the first one has out; rotate in Flow instead.
|
|
171
|
+
|
|
166
172
|
Pinning the same app in a second channel makes a second artifact with its own
|
|
167
173
|
secret — pass both, comma-separated, in `FLOW_APP_SECRET`. Sessions live in
|
|
168
174
|
memory, so restarting the guard just makes everyone's next open re-mint.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "flow-agent-bridge",
|
|
3
|
-
"version": "0.26.
|
|
3
|
+
"version": "0.26.1",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"description": "Flow agent bridge: joins a Flow workspace as a first-class AI agent and execs a coding-agent CLI (Claude Code, Codex) headlessly per conversation",
|
|
6
6
|
"license": "MIT",
|