v0.6.0

Static composition — the plugin no longer rewrites official rows at runtime. The webserver bind and the connection fence/lifetime are now loader !!js expressions evaluated once per boot from the lan-access entry's disabled state and the settings-tab toggle, so every failure mode that came from a live-process row change (the 0.4 boot-assertion crash loop, the 0.5 wedged listener) is structurally gone: toggling the plugin — in the settings tab or in dshmarket — is a file write plus restart, never a hot re-compose. Includes the unreleased 0.5.0 fix (drop the boot-time row restore that could wedge the webserver listener) and two follow-ups: the settings-tab enable checkbox once again controls the bind (the first 0.6.0 expression set read only the entry's disabled state), and the settings-tab overview now polls every 30s and refreshes as soon as the tab becomes visible, so a restart's new bind/fence facts replace a stale snapshot within half a minute. Needs a restart.

Note for dsh-mobile users: while noAuth: true is set, dsh-mobile ≤ 0.3.14 answers its gateway with 502 upstream_unavailable, because its launch-token exchange has no token to exchange. Set noAuth: false if you need dsh-mobile today, or pick up the fix in saya-ch/dsh-mobile#59.

v0.4.0

noAuth: true drops the browser session gate — no launch token, no cookie, no 401. Host/Origin trust fence stays (hosts outside accessHosts are still 403); everything else becomes your network's job. Needs a restart. sessionDays has no meaning while it is on.

v0.3.0

Configurable browser-session lifetime (sessionDays, default 30, range 1-3650) fed to connection.cookieMaxAgeDays, plus the 0.2.0 strict fence and the remote-visit workarounds. Install: dsh plugin --profile web add github:longisland-icetea/dsh-lan-access.