tapflow 0.8.1 → 0.8.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +6 -3
  2. package/package.json +5 -5
package/README.md CHANGED
@@ -173,7 +173,8 @@ tapflow is self-hosted by design — build files, device streams, and session re
173
173
  | Third-party simulator cloud | Not required |
174
174
 
175
175
  - **LAN-first** — the agent ↔ relay leg is internal traffic; the device stream never transits a third party.
176
- - **PAT + roles** — Personal Access Tokens carry scopes (e.g. `builds:write` for CI uploads), and team roles (Admin / Developer / QA / Viewer) govern dashboard access.
176
+ - **Authenticated by default off-host** — the relay accepts unauthenticated connections only from its own machine (`localhost`). Browsers reaching it from elsewhere sign in; agents on another machine present an `agent`-scope token.
177
+ - **PAT + roles** — Personal Access Tokens carry scopes (`builds:write` for CI uploads, `agent` for remote agents), and team roles (Admin / Developer / QA / Viewer) govern dashboard access.
177
178
 
178
179
  Found a vulnerability? See [SECURITY.md](https://github.com/jo-duchan/tapflow/blob/main/SECURITY.md). For the full model, read [Security & Privacy](https://www.tapflow.dev/guide/security).
179
180
 
@@ -203,9 +204,11 @@ pm2 save && pm2 startup
203
204
  **Each Mac agent:**
204
205
 
205
206
  ```sh
206
- tapflow agent start --relay wss://your-relay-url
207
+ tapflow agent start --relay wss://your-relay-url --token <agent-token>
207
208
  ```
208
209
 
210
+ > A relay on a different machine accepts an agent only with an `agent`-scope token — create one in **Settings → Tokens** (Admin only). Agents on the relay's own machine (`tapflow start`) need no token. See [Remote relay authentication](https://www.tapflow.dev/guide/agent#remote-relay-authentication).
211
+ >
209
212
  > For nginx / Caddy reverse proxy setup and external access, see [Self-Hosting the Relay](https://www.tapflow.dev/guide/self-hosting).
210
213
 
211
214
  ## CLI Reference
@@ -214,7 +217,7 @@ tapflow agent start --relay wss://your-relay-url
214
217
  |---------|-------------|
215
218
  | `tapflow start` | Start relay + agent together (local mode) |
216
219
  | `tapflow relay start` | Start relay only |
217
- | `tapflow agent start --relay <url>` | Start agent and connect to a relay |
220
+ | `tapflow agent start --relay <url> [--token <pat>]` | Start agent and connect to a relay (remote relays need an `agent`-scope token) |
218
221
  | `tapflow init` | Scaffold `tapflow.config.json` |
219
222
  | `tapflow admin init` | Create the first admin account (CLI fallback) |
220
223
  | `tapflow doctor [platform]` | Diagnose prerequisites (Node, iOS, Android) |
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "tapflow",
3
- "version": "0.8.1",
3
+ "version": "0.8.2",
4
4
  "description": "Self-hosted iOS/Android simulator streaming for the whole team",
5
5
  "keywords": [
6
6
  "ios",
@@ -47,10 +47,10 @@
47
47
  "cac": "^6.7.14",
48
48
  "ws": "^8.0.0",
49
49
  "zod": "^4.4.3",
50
- "@tapflowio/agent-core": "0.8.1",
51
- "@tapflowio/android-agent": "0.8.1",
52
- "@tapflowio/ios-agent": "0.8.1",
53
- "@tapflowio/relay": "0.8.1"
50
+ "@tapflowio/agent-core": "0.8.2",
51
+ "@tapflowio/ios-agent": "0.8.2",
52
+ "@tapflowio/android-agent": "0.8.2",
53
+ "@tapflowio/relay": "0.8.2"
54
54
  },
55
55
  "devDependencies": {
56
56
  "@types/node": "^20.0.0",