v3.11.0

Shellshare room links can now teach an AI agent how to read them—while staying out of search indexes.

🤖 Paste a room URL straight into an agent. Every room page now carries a zero-install Node reader that prints the current history or follows live output. The same source powers /llms.txt, with robust handling for reconnects, partial records, UTF-8 boundaries, missing or wrong keys, unreachable servers, and truncated pipes. Existing CLI links keep working unchanged.

🔒 Fetchable is not indexable. Room pages and .bin history responses now send X-Robots-Tag: noindex. A human-directed assistant can open a pasted link without an ever-growing agent allowlist, while compliant crawlers keep ephemeral broadcasts out of search results.

🛡️ Safer delivery and automation internals. Viewer replay, fan-out, liveness, and user counts now live behind one focused module. CI and release jobs use least-privilege tokens, and the viewer no longer uses a dead innerHTML sink.

What's Changed

• Keep rooms out of search indexes with noindex, not an agent allowlist by @vitorbaptista in #181
• Make a room URL self-describing to AI agents by @vitorbaptista in #180
• docs: state that the viewer WebSocket opens with the room's history by @vitorbaptista in #182
• docs: configure the repo for Matt Pocock's engineering skills by @vitorbaptista in #183
• chore(deps): bump cryptography from 49.0.0 to 50.0.0 in /e2e by @dependabot[bot] in #184
• refactor: deepen viewer delivery module by @vitorbaptista in #185
• security: scope workflow tokens and drop a dead innerHTML sink by @vitorbaptista in #186
• chore: ignore .claude/worktrees by @vitorbaptista in #187

Full Changelog: v3.10.2...v3.11.0