dsh-tmp-hook

Configuration

key	default	meaning
baseUrl	''	Public origin prepended to every callback URL. Must be an absolute http/https URL; trailing slashes are stripped. Empty means "derive it from the trust fence".
baseUrlScheme	'https'	Scheme assumed for a derived origin. Ignored when baseUrl is set.
pathPrefix	'/api/tmp-hooks'	Path prefix the callback route is registered under. Must be a sub-path; / is rejected.
ttlSeconds	1800	Default token lifetime when the tool call omits ttl_seconds.
minTtlSeconds	30	Lower clamp for a requested ttl_seconds.
maxTtlSeconds	86400	Upper clamp for a requested ttl_seconds.
maxBodyBytes	262144	Maximum accepted callback body. Larger bodies get 413.
sweepIntervalMs	60000	Period between expired-token sweeps. 0 disables the sweeper (records then only die on access).
deliverTimeoutMs	15000	Budget for admitting a delivered message into its session.
allowUnauthenticated	true	Compose with dsh-auth-gate so the callback prefix is reachable without a dsh login session. See below.

Unknown keys and malformed values are rejected at load time: a bad config fails the boot instead of failing the first callback.