Commits

main · package.json

Per-actor rate limits at Codes' capability boundaries (roadmap WS-R task 4, openvibe-sdk v0.12.0 limits). server/http/actor-limits.js makes one limiter per app. It covers /api/v1, the signed-in portal (/projects), release actions, the developer tools' forms and the staff trust form. An app token counts as its app (app:app_…, the principal requireCapability verified), a signed-in person as user:usr_…, anyone else by address. Codes hosts no git remotes, so there are no clone or push routes to leave out. Past a limit a route answers 429 problem+json rate_limited with Retry-After before any work (before a form or upload is read and before Network is asked), logs one [Limits] line and counts codes_rate_limited_total{limit,window}.OpenVibers · 28 Sept 2026 d78de70
Pins: openvibe-shared 1.20.0 -> 1.22.0 (realtime notification badge, off until a site turns it on; the unreachable-host browser check)OpenVibers · 26 Sept 2026 0bfdf70
Pins: openvibe-shared 1.18.0 -> 1.20.0 (the update matrix and release manifest 1.2.0: client generations, the shell)OpenVibers · 26 Sept 2026 c090e28
Pins: openvibe-shared 1.17.1 -> 1.18.0 (update telemetry: prompted count, sessions by generation)OpenVibers · 26 Sept 2026 3e11696
Pins: openvibe-shared 1.16.1 -> 1.17.1 (release notifications)OpenVibers · 26 Sept 2026 900559b
Pins: openvibe-shared 1.16.0 -> 1.16.1 (the OV mark stops animating when idle, hidden or off-screen)OpenVibers · 26 Sept 2026 a89ab3b
Pins: openvibe-shared 1.13.0 -> 1.16.0OpenVibers · 26 Sept 2026 0d8ac03
Moderation audit (ADR-022, WS-D task 1): codes.moderation.action from the outbox in the same transaction: release.revoked when Codes staff revoke a release their project role would not let them manage (also a staff project deletion), app.trust_changed for every trust tier set (from, to, the note as reason); a member revoking their own release reports nothing. Pins: openvibe-contracts 0.51.0 → 0.53.0OpenVibers · 26 Sept 2026 28dbf08
API explorer (WS-C task 6): /docs/api lists every service's OpenAPI 3.1 document from openvibe-contracts 0.51.0; /docs/api/:service shows each route with its method, capabilities, visibility, parameters, request and response schemas (linked to their contract pages) and a public-only filter; /docs/api/:service.json serves the document with CORS *; capability pages link their routes; in the sitemapOpenVibers · 25 Sept 2026 eba81c5
Pins: openvibe-contracts 0.44.0 → 0.49.0, openvibe-shared 1.12.0 → 1.13.0, openvibe-sdk 0.9.1 → 0.11.0OpenVibers · 25 Sept 2026 de62855
Pins: openvibe-contracts 0.42.0 → 0.44.0 (Contracts 0.43.0 and 0.44.0 were released after the previous pin commit, leaving 0.42.0 two minors behind the pin-drift limit); test/docs.test.js expects v0.44.0OpenVibers · 25 Sept 2026 bdb28de
Pins: openvibe-contracts 0.38.0 → 0.42.0, openvibe-sdk 0.5.0 → 0.9.1; test/docs.test.js expects the new pinned tags (it asserts the pinned versions on purpose); CI runs the pin-drift check (shared test and security workflows at 423fe51)OpenVibers · 25 Sept 2026 5bfd3f9
Staff powers from the contracts staff map (WS-D, ADR-022; Contracts 0.38.0, docs regenerate from it): Codes staff are staff.site.configure (admin, as before) or CODES_STAFF_SUBJECTS (break-glass), not a role comparison. test/staff-map.test.js fails on raw role checks (project roles and display reads allowed by name)OpenVibers · 24 Sept 2026 57809ad
The OpenVibe Frame from this site's own pinned copy: /shared/* is served by openvibe-shared/serve (1.12.0) and every page references it by content hash (/shared/<file>?v=<hash>), so this site's pin decides what its pages run and its navbar and footer keep working while openvibe.network is downOpenVibers · 24 Sept 2026 4dc695b
The shared update system and one account UI, on the OpenVibe Frame (openvibe-shared 1.11.0, openvibe/frame): the home shows what shipped, /updates is the shared log and the footer links it; the shared navbar handles sign in and out (logoutUrl ends this site's session) and carries this site's account links in its menu, while the page's own account bar is only for no-JS visitorsOpenVibers · 24 Sept 2026 df5e0a4
Docs: /docs/events links each event's payload contract (117 published) and marks the rest planned, instead of saying payload schemas do not exist; openvibe-contracts v0.34.2; the per-address rate limit is CODES_RATE_LIMIT_PER_MIN (default 300), raised in tests that fetch every contract pageOpenVibers · 24 Sept 2026 a129415
openvibe-shared v1.5.1, openvibe-contracts v0.33.0OpenVibers · 23 Sept 2026 241cce3
openvibe-shared v1.5.0 (Track R release manifest), openvibe-contracts v0.32.0, openvibe-sdk v0.5.0OpenVibers · 23 Sept 2026 e5a6280
Webhook tester verifies signature v2 (register C-61); openvibe-sdk v0.4.0OpenVibers · 23 Sept 2026 b0381da
openvibe-sdk v0.3.1; the SDK reference parser skips comments inside declarations (a quote in a doc comment swallowed later declarations)OpenVibers · 23 Sept 2026 04df705
openvibe-contracts v0.28.0 (same content as v0.27.0, correctly versioned)OpenVibers · 23 Sept 2026 1f13801
openvibe-contracts tag v0.27.0 (codes manifest, codes.release.manage|read, codes.app-manifest@1 released): app manifests validate with the released contract (compiled-in proposal and the proposals dropped), release API guarded with requireCapability (reads stay public; a presented token must hold codes.release.read), contracts check blocking in CI; trust tiers per ADR-013 (unreviewed, reviewed, first-party) with an idempotent boot migration of stored values and history; Events playground on the public events.app.publish (app.<project_key>.* types, source app-<ULID>); docs show the pinned tag next to the package versionOpenVibers · 23 Sept 2026 16a2c4a
OpenVibe.Codes service (Wave 20): SSR developer portal over Network's projects API (PKCE S256 sign-in, httpOnly session; projects, members, apps, secrets shown once and never stored, credential rotate/revoke, grant scope editor offering only grantable capabilities, quotas as recorded limits, audit; Network problems surfaced as answered), docs generated at boot from openvibe-contracts v0.26.0 and openvibe-sdk v0.2.2 (contracts with field tables and fixtures, capability catalog, event types, SDK reference, ADR-derived policy pages) plus the live registry, OAuth callback helper and non-exchanging test callback, webhook verifier and signed sample generator, grant-respecting Media/Events playgrounds with the app's own token through the SDK, app and mod manifest validation, release metadata with codes.app.published|deprecated|revoked through the SDK outbox, trust tiers as metadata; tests with mock Network, Events and MediaOpenVibers · 23 Sept 2026 0deb3d7