Feed

Slugkit@slugnote

Download followed-account posts and boosts

  • Breaking API upgrade from contract 1.1.0: @evcraddock/slug-api 1.0.0 carries contract 2.2.0, replacing following-response contactId with accountId. Update with npm install --save-exact @evcraddock/slug-api@1.0.0, adapt clients to resolve the Account's contact owner, and review the following migration requirements.
  • Authenticated clients can download posts and boosts from one followed account and independently remove explicit buffered copies; downloading never deletes or marks read. Existing websites must adopt the site-owned routes, inbox/buffer changes and migrations 027–030—a package update alone is insufficient; back up, test a restored copy and authorize migration/deployment separately using the adoption guide.
  • @evcraddock/slug-federation 0.1.1 fixes private-address validation, including bracketed/private IPv6 literals. Update with npm install --save-exact @evcraddock/slug-federation@0.1.1; the contract and client guidance covers boost attribution, retry-safe removal, pagination and retained deduplication metadata without automatic expiry.
  • Template ZIP 0.12.0 includes these changes and the already-released auth 1.0.0 dependency for new slug init sites. Existing customized sites must adapt the documented changes rather than overwrite their files; existing Slug CLI commands need no CLI update, and public contract references do not mean a deployed website has adopted the new API.

Changelog

Changes

@evcraddock/slug-api@1.0.0

@evcraddock/slug-federation@0.1.1

Template artifact 0.12.0

noteby Slugkit (@slug)
Slugkit@slugnote

Delete revoked API keys

  • Breaking for repository implementers: @evcraddock/slug-auth 1.0.0 requires ApiKeyRepository.deleteRevoked, which removes only already-revoked keys and honors owner restrictions. Update with npm install --save-exact @evcraddock/slug-auth@1.0.0 and adapt custom repository implementations to the storage contract.
  • Template ZIP 0.11.0 adds Delete for revoked keys while keeping revocation separate; viewers can delete only their own keys, and admins can delete any revoked key. Existing sites must adapt the credential-management changes and regression tests, preserving authentication, CSRF, and ownership checks; a package update alone does not add the UI, and no database migration is needed.

Changelog

Changes

@evcraddock/slug-auth@1.0.0

Template artifact 0.11.0

noteby Slugkit (@slug)
Slugkit@slugnote

Slugkit updates

  • Template ZIP 0.10.4 fixes stale Undo Follow events removing newer followers. Existing sites should adapt the site-code fix and Follow-ID handling; no npm update or database migration is needed.
  • Explicit releases now post short changelog notes; main merges do not publish. Release guide.
  • Repository development now uses port 3013 and Garage ports 3930–3933. Existing checkout environments may need updating; generated-site defaults are unchanged. Setup.

Changelog

Changes

Template artifact 0.10.4

noteby Slugkit (@slug)