Update from code changes: document Flow Agent dashboard sign-in

[mintlify]

Summary

Adds an operator + integrator docs page for the Flow Agent dashboard, covering the new ImpactsX / ixo Auth Hub sign-in flow, the Bearer-token session contract, and the CSP shipped with the dashboard.

Changes

• New page build-an-oracle/develop/flow-agent-dashboard.mdx:
  • "Sign in with ImpactsX" front door (WorkOS-backed ixo Auth Hub, CSRF state, /auth/callback, single-use code).
  • Network-derived AUTH_HUB_URL defaults with VITE_AUTH_HUB_URL override.
  • Bearer-token session contract on POST/GET /flow-agent/auth/session ({ did, token, expiresAt } in the response body) and the stateless POST /logout no-op; explains why the token now lives in localStorage and enables wildcard CORS.
  • Renamed sessionTtlMs (was cookieTtlMs) and the removed FLOW_DASHBOARD_COOKIE.
  • CSP + X-Content-Type-Options / Referrer-Policy / X-Frame-Options shipped via vercel.json, with rationale for script-src 'self', wasm-unsafe-eval, and the *.ixo.earth connect-src allow-list.
• Added the new page to the "Develop" nav group in docs.json.

Context

Follows source changes:

• ixoworld/flow-manager-oracle#106 — feat(flow-dashboard): replace SignX/Passkey sign-in with ixo Auth Hub
• ixoworld/flow-manager-oracle#102 — fix(flow-agent): Bearer-token dashboard auth + CSP, drop session cookie

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
ixoworld	🟢 Ready	View Preview	Jul 2, 2026, 1:14 AM