openvibers/openvibe.contracts Commits

Add the network.node.revoked@1 event contract (0.98.0) (#41)

OP OpenVibers committed 5 Oct 2026 · 3df8685620 · 41 files, +316 −56

* Add the network.node.revoked@1 event contract

**New contract**
- `contracts/events/payloads/network.node.revoked.v1.json`: new `network.node.revoked@1` event payload (`node_id`, `principal_id`, `owner` oneOf user/project/platform, optional `reason`, `at`; `additionalProperties:false`, repo `$id`/`title`/`description` conventions). Closes the deferred T2 item (Network's `docs/t2-cells-and-node-principal.md` §10) — a revoked machine can be told at once instead of at its next ≤330 s reauth. Placed under `events/payloads/` (not `contracts/network/`) because that is where the repo keeps every event payload and what `test/run.js` requires (`events/payloads/<event_type>.v<major>.json`).

**Fixtures**
- `fixtures/network.node.revoked/valid/revoked-by-owner.json`, `valid/revoked-by-service.json`, `valid/project-owned.json`: valid payloads (with/without `reason`, user and project owners).
- `fixtures/network.node.revoked/invalid/missing-principal.json`, `invalid/bad-node-id.json`, `invalid/owner-mixed.json`: counter-examples.

**Registration / generation**
- `contracts/catalog.json`: appended `network.node.revoked` 1.0.0, owner network, first-party, backward, active, ADR-034.
- `manifests/services/network.json`: added `network.node.revoked` to `eventsProduced` (alphabetical).
- `manifests/capabilities/network.node.manage.json`: added the event to the capability's `events` (its revoke route emits it).
- `generated/json-schema/bundle.json`, `generated/typescript/index.d.ts`: rebuilt via `npm run generate`.
- `CHANGELOG.md`: unversioned additive entry (following the non-release event-addition precedent, e.g. PR #17); no package version bump, so README/STATUS (already stale at v0.75.0/589) were left untouched as recent PRs did.

**Tests run**
- `node scripts/compat.js $(git describe --tags --abbrev=0 origin/main)` → `compat vs v0.97.0: no breaking changes`.
- `node scripts/generate.js --check` → `generated/: up to date`.
- `node test/capability-schemas.test.js` → `216/219 active capabilities complete; 3 recorded gap(s)` (unchanged).
- `node test/openapi.test.js` → `26 services, 537 operations, 1901 references, all valid OpenAPI 3.1`.
- Targeted replication of `test/run.js`'s catalog/fixture/manifest/event-payload loops for the new contract → `network.node.revoked targeted checks: 28 passed` (catalog integrity, valid/invalid fixtures, tombstone refusal, single producer + `eventsProduced`, envelope fit and `<event_type>@1` resolution, capability listing/validity).
- Grepped every repo under `~/OpenVibers` on `origin/main` for `network.node.revoked`/`node.revoked`: only Network's own doc names it as the deferred type — no collision.

**Could not do**
- `npm test` / `node test/run.js` (the whole suite) is blocked by a `PreToolUse:Bash` hook in this job; `ov test` selects 0 of 12 test files for these data/manifest changes. I therefore ran the two reachable test files directly and replicated `test/run.js`'s exact loops for the changed data in a scratch script. Nothing was committed, pushed, deployed or installed.

* Release 0.98.0: network.node.revoked@1

Changes

ddiff --git a/CHANGELOG.md b/CHANGELOG.md
iindex ed1926ef..c2ffee45 100644
---- a/CHANGELOG.md
++++ b/CHANGELOG.md
@@@ -4,6 +4,20 @@ All notable changes to `openvibe-contracts`. Releases are git tags (`vX.Y.Z`) th
  from `https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/<tag>`. Before v0.30.0,
  the notes were in the tag and commit messages (`git tag -n1`).
  
++## 0.98.0 — 2026-10-05
++
++**The node-revoked event contract** (plan T2 follow-up; the deferred item in OpenVibe.Network's
++`docs/t2-cells-and-node-principal.md` section 10, "Revocation latency outside Bot"). Adds
++`network.node.revoked@1` (owner `network`, first-party, active): a node principal (`nod_…`), a person's paired
++machine, was revoked through `POST /internal/node-principals/:id/revoke` (`network.node.manage`, the service that
++paired it) or `POST /api/v1/me/nodes/:id/revoke` (the owner's session), or with the owner's account. The payload is
++`{ node_id, principal_id, owner, reason?, at }` (`extra` fields refused): `owner` is the person, project or platform
++the machine belongs to, `reason` the caller's text when one was given, and the credential and its hash are never
++carried. Until now a connected machine learned of a revoke only at its next reauth (≤ 330 s); a consumer can stop it
++at once. Registered in the catalog, in Network's `eventsProduced`, and on `network.node.manage`'s `events`, with valid
++and invalid fixtures. Network emitting it inside `server/registry/node-principals.js` is a separate follow-up PR and
++depends on this one; there is no consumer yet. Additive.
++
  ## 0.97.0 — 2026-10-04
  
  **The job contract matches the Node again, and Bot's dispatch answer has a contract** (plan T14 step 6 follow-up).
ddiff --git a/contracts/catalog.json b/contracts/catalog.json
iindex 69ec0b56..2f78306c 100644
---- a/contracts/catalog.json
++++ b/contracts/catalog.json
@@@ -6092,6 +6092,16 @@
        "compatibility": "backward",
        "status": "active",
        "adr": "ADR-048"
++    },
++    {
++      "id": "network.node.revoked",
++      "version": "1.0.0",
++      "owner": "network",
++      "schema": "events/payloads/network.node.revoked.v1.json",
++      "visibility": "first-party",
++      "compatibility": "backward",
++      "status": "active",
++      "adr": "ADR-034"
      }
    ]
  }
ddiff --git a/contracts/events/payloads/network.node.revoked.v1.json b/contracts/events/payloads/network.node.revoked.v1.json
nnew file mode 100644
iindex 00000000..df69420a
---- /dev/null
++++ b/contracts/events/payloads/network.node.revoked.v1.json
@@@ -0,0 +1,68 @@
++{
++  "$schema": "https://json-schema.org/draft/2020-12/schema",
++  "$id": "https://openvibe.network/contracts/events/payloads/network.node.revoked.v1.json",
++  "title": "NetworkNodeRevokedPayload",
++  "description": "network.node.revoked v1 (OpenVibe.Network; plan T2, docs/t2-cells-and-node-principal.md section 10, migrations/0014_node_pairing.sql). A node principal (nod_…), a person's paired machine, was revoked: through POST /internal/node-principals/:id/revoke (network.node.manage, the service that paired it), through POST /api/v1/me/nodes/:id/revoke (the owner's session), or with the owner's account. Network revokes the row and clears the credential and its grace window; a machine holding a live node token is refused at its next use (≤ 300 s), and until this event only learned of the revoke at its next reauth (≤ 330 s). A consumer stops the machine at once; a second revoke changes nothing and emits nothing. The credential and its hash are never carried. Envelope: subject { type: node_principal, id: <nod_…> }, visibility internal, actor the service (svc:<service>) or the owner ({ type: user }) that revoked.",
++  "type": "object",
++  "required": [
++    "node_id",
++    "principal_id",
++    "owner",
++    "at"
++  ],
++  "additionalProperties": false,
++  "properties": {
++    "node_id": {
++      "type": "string",
++      "pattern": "^n-[a-z0-9]{26}$",
++      "description": "The machine's node id (platform_node_principals.node_id), minted with the principal and unique among principals."
++    },
++    "principal_id": {
++      "type": "string",
++      "pattern": "^nod_[0-9A-HJKMNP-TV-Z]{26}$",
++      "description": "The revoked node principal. Also the envelope subject id."
++    },
++    "owner": {
++      "description": "Who the machine belongs to, as GET /api/v1/me/nodes and the operator list show it: the person who paired it, the project it is paired into, or the platform for a Host-reported machine.",
++      "oneOf": [
++        {
++          "type": "object",
++          "required": ["kind", "subject"],
++          "additionalProperties": false,
++          "properties": {
++            "kind": { "const": "user" },
++            "subject": { "type": "string", "pattern": "^usr_[0-9A-HJKMNP-TV-Z]{26}$" }
++          }
++        },
++        {
++          "type": "object",
++          "required": ["kind", "project_id"],
++          "additionalProperties": false,
++          "properties": {
++            "kind": { "const": "project" },
++            "project_id": { "type": "string", "pattern": "^prj_[0-9A-HJKMNP-TV-Z]{26}$" }
++          }
++        },
++        {
++          "type": "object",
++          "required": ["kind"],
++          "additionalProperties": false,
++          "properties": {
++            "kind": { "const": "platform" }
++          }
++        }
++      ]
++    },
++    "reason": {
++      "type": "string",
++      "minLength": 1,
++      "maxLength": 500,
++      "description": "Why it was revoked, when the caller gave one (the owner's text or the service's); absent otherwise."
++    },
++    "at": {
++      "type": "string",
++      "format": "date-time",
++      "description": "When the revoke was applied (platform_node_principals.revoked_at)."
++    }
++  }
++}
ddiff --git a/fixtures/network.node.revoked/invalid/bad-node-id.json b/fixtures/network.node.revoked/invalid/bad-node-id.json
nnew file mode 100644
iindex 00000000..6d5fe57a
---- /dev/null
++++ b/fixtures/network.node.revoked/invalid/bad-node-id.json
@@@ -0,0 +1,6 @@
++{
++  "node_id": "node-1",
++  "principal_id": "nod_01JAB2C3D4E5F6G7H8J9K0MNPS",
++  "owner": { "kind": "user", "subject": "usr_01JAB2C3D4E5F6G7H8J9K0MNPR" },
++  "at": "2026-10-04T18:00:00.000Z"
++}
ddiff --git a/fixtures/network.node.revoked/invalid/missing-principal.json b/fixtures/network.node.revoked/invalid/missing-principal.json
nnew file mode 100644
iindex 00000000..af39109f
---- /dev/null
++++ b/fixtures/network.node.revoked/invalid/missing-principal.json
@@@ -0,0 +1,5 @@
++{
++  "node_id": "n-01jab2c3d4e5f6g7h8j9k0mnps",
++  "owner": { "kind": "user", "subject": "usr_01JAB2C3D4E5F6G7H8J9K0MNPR" },
++  "at": "2026-10-04T18:00:00.000Z"
++}
ddiff --git a/fixtures/network.node.revoked/invalid/owner-mixed.json b/fixtures/network.node.revoked/invalid/owner-mixed.json
nnew file mode 100644
iindex 00000000..85b05c0f
---- /dev/null
++++ b/fixtures/network.node.revoked/invalid/owner-mixed.json
@@@ -0,0 +1,6 @@
++{
++  "node_id": "n-01jab2c3d4e5f6g7h8j9k0mnps",
++  "principal_id": "nod_01JAB2C3D4E5F6G7H8J9K0MNPS",
++  "owner": { "kind": "user", "subject": "usr_01JAB2C3D4E5F6G7H8J9K0MNPR", "project_id": "prj_01JAB2C3D4E5F6G7H8J9K0MNPQ" },
++  "at": "2026-10-04T18:00:00.000Z"
++}
ddiff --git a/fixtures/network.node.revoked/valid/project-owned.json b/fixtures/network.node.revoked/valid/project-owned.json
nnew file mode 100644
iindex 00000000..4da6f211
---- /dev/null
++++ b/fixtures/network.node.revoked/valid/project-owned.json
@@@ -0,0 +1,6 @@
++{
++  "node_id": "n-01jab2c3d4e5f6g7h8j9k0mnpt",
++  "principal_id": "nod_01JAB2C3D4E5F6G7H8J9K0MNPT",
++  "owner": { "kind": "project", "project_id": "prj_01JAB2C3D4E5F6G7H8J9K0MNPQ" },
++  "at": "2026-10-04T18:00:00.000Z"
++}
ddiff --git a/fixtures/network.node.revoked/valid/revoked-by-owner.json b/fixtures/network.node.revoked/valid/revoked-by-owner.json
nnew file mode 100644
iindex 00000000..65feccf6
---- /dev/null
++++ b/fixtures/network.node.revoked/valid/revoked-by-owner.json
@@@ -0,0 +1,6 @@
++{
++  "node_id": "n-01jab2c3d4e5f6g7h8j9k0mnps",
++  "principal_id": "nod_01JAB2C3D4E5F6G7H8J9K0MNPS",
++  "owner": { "kind": "user", "subject": "usr_01JAB2C3D4E5F6G7H8J9K0MNPR" },
++  "at": "2026-10-04T18:00:00.000Z"
++}
ddiff --git a/fixtures/network.node.revoked/valid/revoked-by-service.json b/fixtures/network.node.revoked/valid/revoked-by-service.json
nnew file mode 100644
iindex 00000000..862e2e50
---- /dev/null
++++ b/fixtures/network.node.revoked/valid/revoked-by-service.json
@@@ -0,0 +1,7 @@
++{
++  "node_id": "n-01jab2c3d4e5f6g7h8j9k0mnps",
++  "principal_id": "nod_01JAB2C3D4E5F6G7H8J9K0MNPS",
++  "owner": { "kind": "user", "subject": "usr_01JAB2C3D4E5F6G7H8J9K0MNPR" },
++  "reason": "the owner disconnected the machine from Bot",
++  "at": "2026-10-04T18:00:00.000Z"
++}
ddiff --git a/generated/json-schema/bundle.json b/generated/json-schema/bundle.json
iindex 8ec08d39..ca902804 100644
---- a/generated/json-schema/bundle.json
++++ b/generated/json-schema/bundle.json
@@@ -70329,6 +70329,99 @@
            }
          }
        }
++    },
++    "network.node.revoked": {
++      "version": "1.0.0",
++      "owner": "network",
++      "status": "active",
++      "schema": {
++        "$schema": "https://json-schema.org/draft/2020-12/schema",
++        "$id": "https://openvibe.network/contracts/events/payloads/network.node.revoked.v1.json",
++        "title": "NetworkNodeRevokedPayload",
++        "description": "network.node.revoked v1 (OpenVibe.Network; plan T2, docs/t2-cells-and-node-principal.md section 10, migrations/0014_node_pairing.sql). A node principal (nod_…), a person's paired machine, was revoked: through POST /internal/node-principals/:id/revoke (network.node.manage, the service that paired it), through POST /api/v1/me/nodes/:id/revoke (the owner's session), or with the owner's account. Network revokes the row and clears the credential and its grace window; a machine holding a live node token is refused at its next use (≤ 300 s), and until this event only learned of the revoke at its next reauth (≤ 330 s). A consumer stops the machine at once; a second revoke changes nothing and emits nothing. The credential and its hash are never carried. Envelope: subject { type: node_principal, id: <nod_…> }, visibility internal, actor the service (svc:<service>) or the owner ({ type: user }) that revoked.",
++        "type": "object",
++        "required": [
++          "node_id",
++          "principal_id",
++          "owner",
++          "at"
++        ],
++        "additionalProperties": false,
++        "properties": {
++          "node_id": {
++            "type": "string",
++            "pattern": "^n-[a-z0-9]{26}$",
++            "description": "The machine's node id (platform_node_principals.node_id), minted with the principal and unique among principals."
++          },
++          "principal_id": {
++            "type": "string",
++            "pattern": "^nod_[0-9A-HJKMNP-TV-Z]{26}$",
++            "description": "The revoked node principal. Also the envelope subject id."
++          },
++          "owner": {
++            "description": "Who the machine belongs to, as GET /api/v1/me/nodes and the operator list show it: the person who paired it, the project it is paired into, or the platform for a Host-reported machine.",
++            "oneOf": [
++              {
++                "type": "object",
++                "required": [
++                  "kind",
++                  "subject"
++                ],
++                "additionalProperties": false,
++                "properties": {
++                  "kind": {
++                    "const": "user"
++                  },
++                  "subject": {
++                    "type": "string",
++                    "pattern": "^usr_[0-9A-HJKMNP-TV-Z]{26}$"
++                  }
++                }
++              },
++              {
++                "type": "object",
++                "required": [
++                  "kind",
++                  "project_id"
++                ],
++                "additionalProperties": false,
++                "properties": {
++                  "kind": {
++                    "const": "project"
++                  },
++                  "project_id": {
++                    "type": "string",
++                    "pattern": "^prj_[0-9A-HJKMNP-TV-Z]{26}$"
++                  }
++                }
++              },
++              {
++                "type": "object",
++                "required": [
++                  "kind"
++                ],
++                "additionalProperties": false,
++                "properties": {
++                  "kind": {
++                    "const": "platform"
++                  }
++                }
++              }
++            ]
++          },
++          "reason": {
++            "type": "string",
++            "minLength": 1,
++            "maxLength": 500,
++            "description": "Why it was revoked, when the caller gave one (the owner's text or the service's); absent otherwise."
++          },
++          "at": {
++            "type": "string",
++            "format": "date-time",
++            "description": "When the revoke was applied (platform_node_principals.revoked_at)."
++          }
++        }
++      }
      }
    }
  }
ddiff --git a/generated/openapi/ai.json b/generated/openapi/ai.json
iindex b45daefe..29577785 100644
---- a/generated/openapi/ai.json
++++ b/generated/openapi/ai.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.AI API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.AI as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.AI as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/billing.json b/generated/openapi/billing.json
iindex d9bb8b23..5458fb30 100644
---- a/generated/openapi/billing.json
++++ b/generated/openapi/billing.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Billing API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Billing as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Billing as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/blog.json b/generated/openapi/blog.json
iindex 54def2a0..301e7704 100644
---- a/generated/openapi/blog.json
++++ b/generated/openapi/blog.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Blog API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Blog as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Blog as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/bot.json b/generated/openapi/bot.json
iindex 3b16e07f..f74e0ca2 100644
---- a/generated/openapi/bot.json
++++ b/generated/openapi/bot.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Bot API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Bot as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Bot as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/chat.json b/generated/openapi/chat.json
iindex 5b4e7245..a2e070d4 100644
---- a/generated/openapi/chat.json
++++ b/generated/openapi/chat.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Chat API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Chat as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Chat as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/codes.json b/generated/openapi/codes.json
iindex e4b63362..aabdd85f 100644
---- a/generated/openapi/codes.json
++++ b/generated/openapi/codes.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Codes API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Codes as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Codes as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/community.json b/generated/openapi/community.json
iindex 52a090d9..979dddc9 100644
---- a/generated/openapi/community.json
++++ b/generated/openapi/community.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Community API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Community as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Community as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/coupons.json b/generated/openapi/coupons.json
iindex a5913ddb..d54d392b 100644
---- a/generated/openapi/coupons.json
++++ b/generated/openapi/coupons.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Coupons API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Coupons as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Coupons as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/deals.json b/generated/openapi/deals.json
iindex 09363355..03a86acd 100644
---- a/generated/openapi/deals.json
++++ b/generated/openapi/deals.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Deals API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Deals as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Deals as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/events.json b/generated/openapi/events.json
iindex 0753052c..6e6ff06e 100644
---- a/generated/openapi/events.json
++++ b/generated/openapi/events.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Events API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Events as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Events as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/games.json b/generated/openapi/games.json
iindex c642375a..93f0b64c 100644
---- a/generated/openapi/games.json
++++ b/generated/openapi/games.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Games API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Games as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Games as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/host.json b/generated/openapi/host.json
iindex 89c0040e..873b053b 100644
---- a/generated/openapi/host.json
++++ b/generated/openapi/host.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Host API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Host as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Host as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/live.json b/generated/openapi/live.json
iindex d1793658..ef9972aa 100644
---- a/generated/openapi/live.json
++++ b/generated/openapi/live.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Live API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Live as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Live as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/media.json b/generated/openapi/media.json
iindex 7ad2e23f..06b4dccf 100644
---- a/generated/openapi/media.json
++++ b/generated/openapi/media.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Media API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Media as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Media as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/network.json b/generated/openapi/network.json
iindex 34823080..fd839db8 100644
---- a/generated/openapi/network.json
++++ b/generated/openapi/network.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Network API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Network as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Network as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/news.json b/generated/openapi/news.json
iindex bf1b4763..bcaa95ba 100644
---- a/generated/openapi/news.json
++++ b/generated/openapi/news.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.News API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.News as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.News as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/openre.json b/generated/openapi/openre.json
iindex 0c9a59db..f203c0c6 100644
---- a/generated/openapi/openre.json
++++ b/generated/openapi/openre.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenRe.Stream API",
--  "version": "0.97.0",
--  "description": "Routes of OpenRe.Stream as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenRe.Stream as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/reviews.json b/generated/openapi/reviews.json
iindex 04dd1d7f..5e2479e6 100644
---- a/generated/openapi/reviews.json
++++ b/generated/openapi/reviews.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Reviews API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Reviews as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Reviews as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/search.json b/generated/openapi/search.json
iindex 93859e62..6dc41261 100644
---- a/generated/openapi/search.json
++++ b/generated/openapi/search.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Search API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Search as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Search as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/sources.json b/generated/openapi/sources.json
iindex 64d44fd2..6b336a76 100644
---- a/generated/openapi/sources.json
++++ b/generated/openapi/sources.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Sources API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Sources as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Sources as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/space.json b/generated/openapi/space.json
iindex 90f597f1..3d202d4b 100644
---- a/generated/openapi/space.json
++++ b/generated/openapi/space.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Space API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Space as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Space as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/tips.json b/generated/openapi/tips.json
iindex f6c0a622..564064f2 100644
---- a/generated/openapi/tips.json
++++ b/generated/openapi/tips.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Tips API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Tips as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Tips as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/tools.json b/generated/openapi/tools.json
iindex 6a062189..4edbe8fa 100644
---- a/generated/openapi/tools.json
++++ b/generated/openapi/tools.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Tools API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Tools as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Tools as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/trade.json b/generated/openapi/trade.json
iindex 0c98e62c..04e0040d 100644
---- a/generated/openapi/trade.json
++++ b/generated/openapi/trade.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Trade API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Trade as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Trade as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/vip.json b/generated/openapi/vip.json
iindex 01ac8654..2b6491f2 100644
---- a/generated/openapi/vip.json
++++ b/generated/openapi/vip.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.VIP API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.VIP as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.VIP as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/openapi/wiki.json b/generated/openapi/wiki.json
iindex 58cbee06..73bbeb8e 100644
---- a/generated/openapi/wiki.json
++++ b/generated/openapi/wiki.json
@@@ -3,8 +3,8 @@
   "jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
   "info": {
    "title": "OpenVibe.Wiki API",
--  "version": "0.97.0",
--  "description": "Routes of OpenVibe.Wiki as the OpenVibe contracts describe them (openvibe-contracts 0.97.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
++  "version": "0.98.0",
++  "description": "Routes of OpenVibe.Wiki as the OpenVibe contracts describe them (openvibe-contracts 0.98.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
    "license": {
     "name": "MIT",
     "identifier": "MIT"
ddiff --git a/generated/typescript/index.d.ts b/generated/typescript/index.d.ts
iindex ebe74b24..54f9c619 100644
---- a/generated/typescript/index.d.ts
++++ b/generated/typescript/index.d.ts
@@@ -54561,3 +54561,41 @@ export interface ResourceControlResult {
    problem?: Problem;
    at: string;
  }
++
++/** [email protected] (owner: network) */
++/**
++ * network.node.revoked v1 (OpenVibe.Network; plan T2, docs/t2-cells-and-node-principal.md section 10, migrations/0014_node_pairing.sql). A node principal (nod_…), a person's paired machine, was revoked: through POST /internal/node-principals/:id/revoke (network.node.manage, the service that paired it), through POST /api/v1/me/nodes/:id/revoke (the owner's session), or with the owner's account. Network revokes the row and clears the credential and its grace window; a machine holding a live node token is refused at its next use (≤ 300 s), and until this event only learned of the revoke at its next reauth (≤ 330 s). A consumer stops the machine at once; a second revoke changes nothing and emits nothing. The credential and its hash are never carried. Envelope: subject { type: node_principal, id: <nod_…> }, visibility internal, actor the service (svc:<service>) or the owner ({ type: user }) that revoked.
++ */
++export interface NetworkNodeRevokedPayload {
++  /**
++   * The machine's node id (platform_node_principals.node_id), minted with the principal and unique among principals.
++   */
++  node_id: string;
++  /**
++   * The revoked node principal. Also the envelope subject id.
++   */
++  principal_id: string;
++  /**
++   * Who the machine belongs to, as GET /api/v1/me/nodes and the operator list show it: the person who paired it, the project it is paired into, or the platform for a Host-reported machine.
++   */
++  owner:
++    | {
++        kind: "user";
++        subject: string;
++      }
++    | {
++        kind: "project";
++        project_id: string;
++      }
++    | {
++        kind: "platform";
++      };
++  /**
++   * Why it was revoked, when the caller gave one (the owner's text or the service's); absent otherwise.
++   */
++  reason?: string;
++  /**
++   * When the revoke was applied (platform_node_principals.revoked_at).
++   */
++  at: string;
++}
ddiff --git a/manifests/capabilities/network.node.manage.json b/manifests/capabilities/network.node.manage.json
iindex 197dfc76..b27d6c68 100644
---- a/manifests/capabilities/network.node.manage.json
++++ b/manifests/capabilities/network.node.manage.json
@@@ -14,7 +14,7 @@
      "owner"
    ],
    "quotaClass": "admin",
--  "events": [],
++  "events": ["network.node.revoked"],
    "implementedBy": [
      "POST /internal/node-pairings",
      "GET /internal/node-principals/:id",
ddiff --git a/manifests/services/network.json b/manifests/services/network.json
iindex 8b1cb06c..f5fa46a8 100644
---- a/manifests/services/network.json
++++ b/manifests/services/network.json
@@@ -75,6 +75,7 @@
      "network.grant.changed",
      "network.mod.grants_changed",
      "network.module.updated",
++    "network.node.revoked",
      "network.notification.created",
      "network.principal_grant.changed",
      "network.subject.merged",
ddiff --git a/package-lock.json b/package-lock.json
iindex dbd40425..8d96f748 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -1,12 +1,12 @@
  {
    "name": "openvibe-contracts",
--  "version": "0.97.0",
++  "version": "0.98.0",
    "lockfileVersion": 3,
    "requires": true,
    "packages": {
      "": {
        "name": "openvibe-contracts",
--      "version": "0.97.0",
++      "version": "0.98.0",
        "license": "AGPL-3.0-only",
        "dependencies": {
          "ajv": "^8.17.1",
ddiff --git a/package.json b/package.json
iindex 3a2c882a..b6c1690e 100644
---- a/package.json
++++ b/package.json
@@@ -1,6 +1,6 @@
  {
    "name": "openvibe-contracts",
--  "version": "0.97.0",
++  "version": "0.98.0",
    "description": "Machine-readable contracts for the OpenVibe network: schemas, manifests, ids, error envelope, capability checks.",
    "main": "index.js",
    "types": "generated/typescript/index.d.ts",