Commits
-
Security: app tokens act only for on_behalf_of; burn-after-read cannot be read around; forks keep unlisted pastes unlistedOpenVibers · 23 Sept 2026
cac1df9 -
Observability (Track O): GET /metrics (loopback only) with HTTP golden signals by route template, process metrics and release_info; /api/ready built on openvibe-shared/ready (db required; Network key, Live or Media optional -> degraded) instead of an unconditional {ready:true}; nginx refuses /metrics; openvibe-shared v1.3.0OpenVibers · 23 Sept 2026
b492398 -
GET /release.json (ADR-016); openvibe-shared v1.2.0, openvibe-contracts v0.11.0OpenVibers · 23 Sept 2026
2787010 -
openvibe-shared is the pinned OpenVibe.Shared v1.0.0 release (vendor/ is gone); openvibe-contracts v0.7.0 knows the Wave 5 capabilitiesOpenVibers · 23 Sept 2026
458d44b -
Wave 5: typed comment threads, forum (spaces/threads/posts), Discord relay, PulseOpenVibers · 23 Sept 2026
139aedd -
Importer: only rows between the OpenVibe launch and the id-space fix can hold a Network id (--ambiguous-from, default 2026-08-17T21:10:29Z); earlier rows were migrated from HoboStreamer with Live idsOpenVibers · 22 Sept 2026
d7c6e60 -
Pastes: Community becomes the authority (PASTES_AUTHORITY=community)OpenVibers · 22 Sept 2026
786e6f8 -
auth: a request that arrives while the Network key is loading waits for itOpenVibers · 22 Sept 2026
fdacc98 -
ssr test: expect the home headline introduced in 19cc8dd ("clearer home copy"); the test still asserted the old oneOpenVibers · 22 Sept 2026
515bc7f -
CI: npm test on Node 22 on every push to main and every PROpenVibers · 22 Sept 2026
199d0f1 -
vendor sync: openvibe-shared navbar + ring icons now draw solid Font Awesome glyphs (no FA CSS dependency)OpenVibers · 21 Sept 2026
de947ea -
vendor sync: shared navbar (drawer, chips, sections)OpenVibers · 18 Sept 2026
b9cb474 -
Paste authors without a stored picture use the network avatar addressOpenVibers · 18 Sept 2026
eb7c9d5 -
vendor sync: shared user menu and panel coordinatorOpenVibers · 18 Sept 2026
ee2f49d -
Footer baked into the HTML; vendor syncOpenVibers · 18 Sept 2026
f4533f4 -
vendor: Footer carries its own inline icons (no dependency on the page's icon font)OpenVibers · 18 Sept 2026
0f1eee5 -
vendor sync: navbar panels stay inside the viewportOpenVibers · 18 Sept 2026
4a99928 -
First paint never waits on the Network: inline dark canvas + cached-theme boot in the shared head tags, theme script deferred; CSP allows the Network sign-in check frameOpenVibers · 18 Sept 2026
4148b93 -
vendor syncOpenVibers · 18 Sept 2026
7ffa764 -
vendor: Icons: hover keeps the glyph in place, every glyph optically centred from measured bounds; legal documents rewritten with site-specific clauses and a table of contentsOpenVibers · 18 Sept 2026
e4494f3 -
Icon set and manifest; clearer home copy; vendor syncOpenVibers · 18 Sept 2026
19cc8dd -
vendor: Favicon and browser theme colour follow the user's theme and update live (this tab, other tabs, server sync)OpenVibers · 18 Sept 2026
1d57ded -
Shared app icon head tags; vendor syncOpenVibers · 18 Sept 2026
46ff0f9 -
Legal pages; vendor syncOpenVibers · 18 Sept 2026
3a047f3 -
vendor: sync openvibe-shared (icons, island, ui, seo, navbar launcher)OpenVibers · 18 Sept 2026
bd94360 -
POST /auth/fedcm swaps a FedCM assertion for a session (jwt-bearer grant, nonce pre-check); silent login skips the Network when ov_token already verifiesOpenVibers · 18 Sept 2026
f0d9c1a -
Unit runs as ubuntu like the other OpenVibe services; re-sync vendored openvibe-sharedOpenVibers · 18 Sept 2026
a788e6f -
Re-sync vendored openvibe-shared with the Network's current copyOpenVibers · 18 Sept 2026
ff4a6b6 -
Tests: SSR, /api/pastes proxy, OAuth client and SEO against mocked Live and NetworkOpenVibers · 18 Sept 2026
66a34f4 -
Deploy: systemd unit and nginx vhost for the Node app; README rewrittenOpenVibers · 18 Sept 2026
ed5edbb