# Live.link architecture for consumers

Management: https://app.live.link. Reader apps execute on isolated artifact origins, never management origins. Supabase owns workspace authorization, immutable versions, publication pointers and exact-session revocation. Vercel Workflows executes durable operations.

Flow: local built files → private artifact → immutable version → review → explicit audience and publication → same-link revise / restore / revoke.

Keep credentials in the host's secret environment as LIVE_LINK_TOKEN, never in project files, prompts, URLs, screenshots or logs. Create a revocable credential in Settings → AI connections. Grant only required scopes; write and publish do not include read. A guide URL cannot install tools or authorize an account. Browser sign-in does not automatically authorize an agent.

Build frontend source locally in an isolated environment before upload. Only built HTML/CSS/JavaScript and supported assets are accepted; do not upload source secrets, node_modules, hidden files or backend processes. Apps execute on isolated delivery origins with restricted network capabilities. No arbitrary proxy or tenant backend is available.

Create and save are private. Obtain explicit publication authority and audience before publishing. Preserve the first assigned slug on revisions and restores, including after expiry or revocation. Failed writes must leave the existing live version intact. Keep the latest draft and publication pointers plus publication revision for concurrency checks. Never automatically revive a revoked or expired link or change its audience. Preview URLs contain single-use credentials: do not persist or log them. Logout or credential revocation must end private access.

## Local project map

Record your source directory, build command, output directory, entrypoint, declared external dependencies, artifact ID and acceptance criteria in your project's own architecture notes. Do not replace existing architecture or AGENTS.md instructions.

Current implemented transport: 30 files, 3145728 decoded bytes per version, 4194304 UTF-8 JSON request bytes, and 524288 structured document-block bytes. Planned larger quotas are not active on this transport.

- [Start](https://live.link/start)
- [Publishing API](https://app.live.link/api/v1/openapi)
- [Create a scoped credential](https://app.live.link/settings)
- [Capabilities](https://app.live.link/.well-known/agent.json)
- [Agent instructions](https://live.link/AGENTS.md)
- [Skill](https://live.link/SKILL.md)
- [Architecture](https://live.link/architecture.md)