LLL Timed Notice / 期限付きサイト告知

Does installation display a bar automatically? No. A site builder must place the self-hosted kit in the theme and verify an anonymous visitor page. Admin preview does not prove that connection.

Is it storage-free? No. The plugin keeps one private draft and one public committed snapshot in its own CMS KV. It does not read or change CMS content. Empty capability/SQL-storage declarations do not mean no KV persistence.

Can future text be read anonymously? The public route returns no text/link while waiting, ended or stopped. Active text/link are public. Do not store secrets in notices or send private text to support.

Does Save publish? No. Review the saved snapshot and confirm publication separately. Draft changes do not change the public snapshot. Conflicting admin tabs must reload instead of overwriting.

How exact are start/end/Stop? Server UTC [start,end), foreground15s polling and≤30slease; starts/stops can lag up to30s under normal operation. Browser sleep, long tasks, networks, host clock errors and caching prevent exact guarantees. This is not for emergency, legal or safety notices.

Can I use external links or HTML? No. Plain text and one same-origin root-relative path only, no query/fragment. HTML is displayed as text. No tracking/cookie/dismiss history is added.

How do I clear? Stop disables the public snapshot. Clear private draft saves an empty tombstone, preserving CAS revisions. These are different operations. Host uninstall retention/deletion is not guaranteed.

日本語: 自動theme接続ではありません。Setupを設置し実visitor確認が必要です。保存は公開と別で、公開済snapshotだけを明示Stopします。自plugin KVを保存し、active文面/linkのみ公衆へ返します。UTC期限はbest effort、緊急通知には使わないでください。

Private admin POST requires host plugins:manage and normal host CSRF. Public GET feed exposes only active text/link/shortlease, reads one public KV key and never writes. Draft and public snapshots are separate, revision-guarded CAS keys. There is no actor/email/history storage, CMS/schema/content/SEO/redirect access, cron, external network capability, API key or billing.

Public feed is no-store. The self-hosted visitor helper polls only the same origin with credentials omitted, bounded response/timeout, no cookie/localStorage/analytics and fail-closed visibility/offline handling. Normal site/host logs and browser infrastructure have their own policies. Public active text/link are intentionally anonymous. Plugin-scoped KV storage is not encryption or secret storage. Single-key CAS is atomic; separate draft/public keys are not one transaction.

Report vulnerabilities to contact@lx3.cafe using synthetic/redacted steps only. Never send credentials, private notice text, paths or customer data. No guaranteed response SLA, legal compliance or exact timing is claimed.

0.1.0 — One private saved notice, explicit snapshot publication, server UTC start/end, manual stop and republish, revision-guarded plugin KV, self-hosted JS/CSS setup kit. No automatic theme injection or external services. English/Japanese admin. Best-effort timing only.

Install from the official EmDash Registry when published, using EmDash1.4 and a supported sandbox runner. No CMS/network capabilities are requested, but one private draft and one public snapshot persist in plugin KV.

Open Timed Notice: Save private draft → Review saved draft → Confirm publication. Save alone never publishes. Draft changes require republishing. Stop disables the public snapshot; Clear private draft is separate. Reload removes the form, then Edit mounts current saved values.

A site builder must copy the complete JS/CSS kit from Setup or signed README into the named public/assets files, add its stylesheet, hidden body mount and deferred external script to the layout, and use Setup’s exact installed feed path. For Astro use is:inline on the external script to preserve it. This does not require CSP unsafe-inline/eval. Keep script/style/connect on the same origin. Full code and procedures are in the README; no remote script download is needed.

Deploy normally and manually check an anonymous visitor page, link, start/end, Stop and republish. No automatic theme connection is claimed. Only pages with the kit are covered.

UTC format:2030-01-01T12:00:00Z; [start,end), blank means unbounded. Foreground starts/stops may lag up to30s. Sleep/network/host clock/cache problems prevent exact guarantees. Not for emergency/legal/safety notices.

下書き保存と公開は別です。sitebuilderがSetupの同origin JS/CSSをthemeへ設置し、匿名visitorで表示・期限・停止を確認してください。管理previewだけで接続済みとは扱いません。無料1告知、追加キー不要。