openvibers/openvibe.chat Commits

openvibe-shared v4.126.0 (was v4.124.0) (#372)

OP OpenVibers committed 6 days ago · cbe83d6f81 · 5 files, +12 −9

* openvibe-shared v4.126.0 (was v4.124.0)

Opened by scripts/pin-bump.js in OpenVibers/OpenVibe.Shared after the v4.126.0 release.

* Merge origin/main into pin-bump/openvibe-shared-v4.126.0

* openvibe-shared v4.126.0 pin, refreshed on top of main

* the owner's test route answers before the shared dispatcher

openvibe-shared 4.125.0 gave adminRoutes a test route of its own, so the dispatcher answered POST /internal/config/:namespace/test/:key before this service's own route and returned 403 (it wants an acting subject; this route is guarded by the service-token capability). The service's route is mounted in front of the dispatcher again.

2026-11-07, the openvibe-shared v4.126.0 pin round.

Changes

ddiff --git a/README.md b/README.md
iindex c37412c..aa0442a 100644
---- a/README.md
++++ b/README.md
@@@ -970,5 +970,5 @@ Part of the [OpenVibe network](https://openvibe.network). Built in the open by [
  <!-- versions:start -->
  - openvibe-contracts: v0.315.0
  - openvibe-sdk: v0.94.0
--- openvibe-shared: v4.124.0
++- openvibe-shared: v4.126.0
  <!-- versions:end -->
ddiff --git a/STATUS.json b/STATUS.json
iindex a902546..4c9fa6e 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -9,7 +9,7 @@
    "domain": "openvibe.chat (Chat's own site: global chat, messages, rooms, settings; the service manifest records it live since 2026-09-24) and openvibe.live (/ws/chat, /api/chat/, /api/dm/, /api/tts/, /api/sounds via an nginx include in openvibe.live's vhost)",
    "contracts": "openvibe-contracts v0.315.0",
    "sdk": "openvibe-sdk v0.94.0",
--  "shared": "openvibe-shared v4.124.0",
++  "shared": "openvibe-shared v4.126.0",
    "capabilities": [
      "chat.message.send",
      "chat.event.publish",
ddiff --git a/package-lock.json b/package-lock.json
iindex 3976108..f0e2064 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -19,7 +19,7 @@
          "multer": "^2.0.2",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.315.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.94.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.124.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.126.0",
          "pg": "^8.23.0",
          "ws": "^8.18.0"
        },
@@@ -1601,9 +1601,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "4.124.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.124.0",
--      "integrity": "sha512-L0u70eK/W5njDfFyH/njXA8cWP2POrsIhWlKPngyF2qXLGSo+8Cup/UDzbO+Bo7zFhniI67iuSLPVSQmAdEzfw==",
++      "version": "4.126.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.126.0",
++      "integrity": "sha512-LF1eiR8xaT2wRtNSQ0qvVHu0lo8lfb2jPpRmkUkK8BJjNzF07fxZNuEcO16GIYYpXy7eloIMwu/DHcZwhF/Xtw==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0",
ddiff --git a/package.json b/package.json
iindex af3bff9..df43d01 100644
---- a/package.json
++++ b/package.json
@@@ -31,7 +31,7 @@
      "multer": "^2.0.2",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.315.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.94.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.124.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.126.0",
      "pg": "^8.23.0",
      "ws": "^8.18.0"
    },
ddiff --git a/server/settings.js b/server/settings.js
iindex 9204b28..dd886cf 100644
---- a/server/settings.js
++++ b/server/settings.js
@@@ -188,8 +188,9 @@ function createSettings({ db, env = process.env, log = console, probes = null }
      /** Mount the admin routes and the test route; `guard` is the service-token capability middleware. */
      function mount(app, { guard, log: appLog = log, also = [] } = {}) {
          if (!store) throw new Error('createSettings: await ready before mount()');
--        // `also`: other namespaces served by the same routes (chat.apps, server/chat-apps/owner-settings.js).
--        const routes = mountStores(app, { guard, stores: [store, ...also], log: appLog });
++        // The owner's test route is mounted in front of the store's dispatcher: openvibe-shared 4.125.0 gave
++        // adminRoutes a test route of its own, and the dispatcher answers it first (it wants an acting subject,
++        // this one the service-token capability). 2026-11-07, the openvibe-shared v4.126.0 pin round.
          app.post(`${BASE_PATH}/:namespace/test/:key`, guard, async (req, res) => {
              if (req.params.namespace !== NAMESPACE) return res.status(404).json({ error: 'no such configuration namespace' });
              let key = String(req.params.key || '');
@@@ -203,6 +204,8 @@ function createSettings({ db, env = process.env, log = console, probes = null }
                  return res.status(200).json({ ok: false, detail: 'failed — the test did not finish. The service log has the reason.' });
              }
          });
++        // `also`: other namespaces served by the same routes (chat.apps, server/chat-apps/owner-settings.js).
++        const routes = mountStores(app, { guard, stores: [store, ...also], log: appLog });
          return routes;
      }