openvibers/openvibe.billing Commits

openvibe-shared v2.20.3 (was v2.20.0) (#29)

OP OpenVibers committed 10 Oct 2026 · e169b0421d · 4 files, +8 −8

Opened by scripts/pin-bump.js in OpenVibers/OpenVibe.Shared after the v2.20.3 release.

Changes

ddiff --git a/README.md b/README.md
iindex e8fd0b0..7eb8ad3 100644
---- a/README.md
++++ b/README.md
@@@ -63,7 +63,7 @@ promo write changes both in one transaction.
  - OpenVibe.Network (JWKS for service tokens; SSO with PKCE for the staff console; `identity.subject.resolve` for the Live import)
  - OpenVibe.Events (the outbox relay, only when `EVENTS_URL` is set)
  - the payment providers whose secrets are configured (none in production today)
--- `openvibe-contracts` v0.126.0, `openvibe-sdk` v0.35.0 (service tokens, per-person limits, `openvibe-sdk/db`, `openvibe-sdk/service`), `openvibe-shared` v2.20.0, pinned by release tarball
++- `openvibe-contracts` v0.126.0, `openvibe-sdk` v0.35.0 (service tokens, per-person limits, `openvibe-sdk/db`, `openvibe-sdk/service`), `openvibe-shared` v2.20.3, pinned by release tarball
  - **PostgreSQL 18 and Valkey 9** (OpenVibe.Host `roles/data/`, ADR-035): every read and write is async through
    `openvibe-sdk/db`; Valkey holds the per-person limit counters (optional: without `VALKEY_URL` they count in the process)
  
@@@ -459,5 +459,5 @@ Part of the [OpenVibe network](https://openvibe.network). Built in the open by [
  <!-- versions:start -->
  - openvibe-contracts: v0.126.0
  - openvibe-sdk: v0.35.0
--- openvibe-shared: v2.20.0
++- openvibe-shared: v2.20.3
  <!-- versions:end -->
ddiff --git a/STATUS.json b/STATUS.json
iindex dc003f0..2761731 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -10,7 +10,7 @@
    "deployment": "Deployed in shadow with `sudo ovhost deploy billing`: /opt/openvibe.billing, unit openvibe-billing, API on 127.0.0.1:4600 (loopback only; /api/v1 is denied on the public host). Public at https://billing.openvibe.network: the staff console (Network SSO + PKCE, BILLING_STAFF_SUBJECTS = the owner only), the billing policy (/policy), /api/health, /api/ready (openvibe-shared/ready shape), /release.json and /webhooks/*. No provider secret is configured, so every provider is off and /webhooks/* answers 404 billing.provider_disabled.",
    "contracts": "openvibe-contracts v0.126.0 (openvibe-sdk v0.28.0, openvibe-shared v2.13.0)",
    "sdk": "openvibe-sdk v0.35.0",
--  "shared": "openvibe-shared v2.20.0",
++  "shared": "openvibe-shared v2.20.3",
    "notes": "Runtime, journal, adapters, import, reconciliation and the staff console (cashout approve/deny, review queue, reconciliation, freeze, audit log) are built, tested and deployed, with /metrics (loopback only), hourly scheduled reconciliation (GET /api/v1/admin/reconciliations; 16 runs by 2026-09-24 05:06 UTC, ledger-vs-receipt checks), EXTERNAL PowerChat receipts (billing.receipt.external under BILLING_AUTHORITY=billing; recorded only while Live is the authority), overflow guards and serializable settlement (PostgreSQL, ADR-035). Production holds the shadow import of Live (322 transactions, 996 ledger entries), 0 subscriptions and 0 entitlements; the console has never been used (staff_audit 0). BILLING_AUTHORITY is not set in live.env, so Live stays the money authority. The cutover (README runbook, docs/live-cutover.md) waits on the owner putting the PowerChat secret in billing.env and re-pointing the PowerChat webhook to https://billing.openvibe.network/webhooks/powerchat; a duplicate-webhook proof in production follows it. Live's payouts, refunds and plans have no tables of their own; where they map is docs/live-mapping.md.",
    "features": [
      "append-only double-entry journal in bits and cents, balanced per currency",
ddiff --git a/package-lock.json b/package-lock.json
iindex 0076060..793c092 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -15,7 +15,7 @@
          "iovalkey": "^0.4.0",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.126.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.35.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.20.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.20.3",
          "pg": "^8.23.0"
        },
        "devDependencies": {
@@@ -1104,9 +1104,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "2.20.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.20.0",
--      "integrity": "sha512-rE43C5ik80zixTb+cOGI8nNj2uoKGzIt4J25pPJ8CDFUAIqE5ZRYFfdXa9+dX2GlFQEjclruNbpAF+p8wli+Dw==",
++      "version": "2.20.3",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.20.3",
++      "integrity": "sha512-SXw6W4oHxbSHXG0+YFF4ATyz6xbNXD5gq/7GiS9fxE0zuYXCDri+dMpj+NTN8eytp57liBTAC4RMEluFsulbqw==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/package.json b/package.json
iindex 7dde5e9..79bc3f3 100644
---- a/package.json
++++ b/package.json
@@@ -29,7 +29,7 @@
      "iovalkey": "^0.4.0",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.126.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.35.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.20.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.20.3",
      "pg": "^8.23.0"
    },
    "engines": {