openvibers/openvibe.contracts Commits
0.314.0: live.agent_sandbox.register and the sandbox worker's check-in contracts (#322)
Changes
@@@ -1,5 +1,15 @@# Changelog++## 0.314.0 — 2026-11-07++++- Add the capability `live.agent_sandbox.register` (Agent Streams S6): the chat plays sandbox worker's check-in on OpenVibe.Live, `POST /api/streams/agent/:id/plays/worker`, owned by Live and internal. Only a first-party service token whose principal holds it may register a worker, and the token names the person it works for in `X-OV-Subject`, who must own the stream. The owner's own session, a desk ticket (`wpt_`) and a person token are refused: an owner who could register a worker would declare their own unisolated machine a sandbox. The worker reports the isolation facts Live requires (no host network, no credentials, no profile, egress through the proxy, an ephemeral workspace) and Live derives health only from a check-in within the last minute; Live stores no endpoint and never calls the worker. Name the capability in Live's service manifest.++- Add `live.agent-sandbox-worker-request@1`: the worker's check-in body, which names the five isolation facts Live reads exactly (`host_network` false, `credentials` false, `profile` false, `egress_proxy` true, `workspace` `ephemeral`) and may carry the worker's own checks, limits, versions and counts. A worker that cannot say each of the five is not registered. Add `live.agent-sandbox-worker-result@1`: the worker's state for the stream's owner, with the reason when there is no healthy one, the last check-in and the minute a check-in counts for. Live never returns an endpoint: there is none.++- Valid and invalid fixtures cover a full worker check-in and an isolation-only one, a worker with the host's network and one that cannot say there is no profile, and a healthy worker, a stale one, a missing stale window and an unknown state code.++++## 0.313.0 — 2026-11-07++++- Placeholder for the 0.313.0 that #321 claims (A6: `agent.timeline-entry@1` and the agent.step.* events). This line keeps the history whole until that pull request merges; it is replaced by that release's own entry then.++## 0.312.0 — 2026-11-07- Add the Codes skills-hub records (the Compute plan §5, E6). `codes.skill@1` is one skill, rule, MCP server, command or hook: its owner, kind, stable slug, title, summary, the four sharing audiences (`private`, `people`, `link`, `public`), the harnesses it is written for, the newest version and that version's body. A `private`, `people` or `link` record is never in the gallery; only `public` is. The body is untrusted Markdown and the page renders it through the markup gate.@@@ -9484,6 +9484,24 @@"compatibility": "backward","status": "active"},++ {++ "id": "live.agent-sandbox-worker-request",++ "version": "1.0.0",++ "owner": "live",++ "schema": "live/agent-sandbox-worker-request.v1.json",++ "visibility": "first-party",++ "compatibility": "backward",++ "status": "active"++ },++ {++ "id": "live.agent-sandbox-worker-result",++ "version": "1.0.0",++ "owner": "live",++ "schema": "live/agent-sandbox-worker-result.v1.json",++ "visibility": "first-party",++ "compatibility": "backward",++ "status": "active"++ },{"id": "live.agent-stream","version": "1.0.0",nnew file mode 100644@@@ -0,0 +1,107 @@++{++ "$schema": "https://json-schema.org/draft/2020-12/schema",++ "$id": "https://openvibe.network/contracts/live/agent-sandbox-worker-request.v1.json",++ "title": "LiveAgentSandboxWorkerRequest",++ "description": "live.agent-sandbox-worker-request@1 (Agent Streams S6): the body of POST /api/streams/agent/:id/plays/worker on OpenVibe.Live (capability live.agent_sandbox.register). It is the sandbox worker's own check-in: the worker says it is there and reports the isolation facts Live requires, and Live derives health only from that check-in (it stores no endpoint and never calls the worker). Only a first-party service token whose principal holds live.agent_sandbox.register may send it, and it names the person it works for in X-OV-Subject, who must own the stream. The owner's session, a desk ticket and a person token are refused. Live counts a check-in within the last minute as alive and requires isolation to say exactly: host_network false, credentials false, profile false, egress_proxy true, workspace 'ephemeral'. The worker may report more than these five facts (its own checks, limits and versions); Live reads only the five and stores the report it was given. A worker that cannot say each of the five is not registered at all.",++ "type": "object",++ "additionalProperties": false,++ "required": [++ "isolation"++ ],++ "properties": {++ "worker_id": {++ "type": "string",++ "maxLength": 64,++ "description": "The worker's name in its own records; not a secret and not an address."++ },++ "service": {++ "type": "string",++ "maxLength": 64,++ "description": "The worker implementation that checked in (`codes-sandbox` for OpenVibe.Codes')."++ },++ "version": {++ "type": "string",++ "maxLength": 64++ },++ "ready": {++ "type": "boolean",++ "description": "The worker's own view of its health; Live's health is the check-in plus the isolation report, never this flag alone."++ },++ "reasons": {++ "type": "array",++ "maxItems": 10,++ "items": {++ "type": "string",++ "maxLength": 500++ },++ "description": "Why the worker says it is not ready (its self-test's failures), for the owner's page."++ },++ "checks": {++ "type": "object",++ "additionalProperties": {++ "type": "boolean"++ },++ "description": "The worker's self-test: one boolean per check it ran (the network namespace, the egress refusals, the cleaned environment, the host files, the capabilities, seccomp, the cgroup limits, the wipe)."++ },++ "checked_at": {++ "type": [++ "string",++ "null"++ ],++ "format": "date-time",++ "description": "When that self-test ran; null before the first one."++ },++ "isolation": {++ "type": "object",++ "additionalProperties": true,++ "required": [++ "host_network",++ "credentials",++ "profile",++ "egress_proxy",++ "workspace"++ ],++ "properties": {++ "host_network": {++ "const": false,++ "description": "The sandbox has its own network namespace; it cannot reach the host's network."++ },++ "credentials": {++ "const": false,++ "description": "No credential of the host, the worker or the person is inside the sandbox."++ },++ "profile": {++ "const": false,++ "description": "No browser or desktop profile of the host's is mounted."++ },++ "egress_proxy": {++ "const": true,++ "description": "Its only way out is the worker's proxy, which applies the egress guard."++ },++ "workspace": {++ "const": "ephemeral",++ "description": "The workspace is the sandbox's own and is gone with the wipe."++ }++ }++ },++ "browser": {++ "type": "boolean",++ "description": "Whether this worker has the optional headless browser."++ },++ "capacity": {++ "type": "integer",++ "minimum": 1,++ "description": "How many sandboxes it may run at once."++ },++ "active": {++ "type": "integer",++ "minimum": 0,++ "description": "How many are running now."++ },++ "at": {++ "type": "string",++ "format": "date-time",++ "description": "When the worker assembled the report."++ }++ }++}nnew file mode 100644@@@ -0,0 +1,59 @@++{++ "$schema": "https://json-schema.org/draft/2020-12/schema",++ "$id": "https://openvibe.network/contracts/live/agent-sandbox-worker-result.v1.json",++ "title": "LiveAgentSandboxWorkerResult",++ "description": "live.agent-sandbox-worker-result@1 (Agent Streams S6): the answer to POST /api/streams/agent/:id/plays/worker (capability live.agent_sandbox.register). It carries the worker's state for the stream's owner as Live now holds it: whether a healthy worker is registered, the code and the owner-facing reason when not, when the last check-in was, and how long a check-in counts (a minute). Live never returns an endpoint: there is none to return.",++ "type": "object",++ "additionalProperties": false,++ "required": [++ "worker"++ ],++ "properties": {++ "worker": {++ "type": "object",++ "additionalProperties": false,++ "required": [++ "ready",++ "stale_after_ms"++ ],++ "properties": {++ "ready": {++ "type": "boolean"++ },++ "code": {++ "type": [++ "string",++ "null"++ ],++ "enum": [++ "sandbox_worker_missing",++ "sandbox_worker_stale",++ "sandbox_worker_not_isolated",++ null++ ],++ "description": "Why there is no healthy worker; null when ready is true."++ },++ "reason": {++ "type": [++ "string",++ "null"++ ],++ "maxLength": 500,++ "description": "The line the owner's page shows; null when ready is true."++ },++ "last_seen_at": {++ "type": [++ "integer",++ "null"++ ],++ "minimum": 0,++ "description": "The last check-in, in milliseconds since the epoch; null when the worker never checked in."++ },++ "stale_after_ms": {++ "type": "integer",++ "minimum": 1000++ }++ }++ }++ }++}nnew file mode 100644@@@ -0,0 +1,8 @@++{++ "isolation": {++ "host_network": false,++ "credentials": false,++ "egress_proxy": true,++ "workspace": "ephemeral"++ }++}nnew file mode 100644@@@ -0,0 +1,9 @@++{++ "isolation": {++ "host_network": true,++ "credentials": false,++ "profile": false,++ "egress_proxy": true,++ "workspace": "ephemeral"++ }++}nnew file mode 100644@@@ -0,0 +1,9 @@++{++ "isolation": {++ "host_network": false,++ "credentials": false,++ "profile": false,++ "egress_proxy": true,++ "workspace": "ephemeral"++ }++}nnew file mode 100644@@@ -0,0 +1,53 @@++{++ "worker_id": "sbw-ovhost",++ "service": "codes-sandbox",++ "version": "0.7.0",++ "ready": true,++ "checks": {++ "network_namespace": true,++ "no_direct_egress": true,++ "egress_refuses_private": true,++ "clean_env": true,++ "no_host_files": true,++ "no_capabilities": true,++ "seccomp": true,++ "limits": true,++ "wipe": true++ },++ "checked_at": "2026-11-07T12:00:00.000Z",++ "isolation": {++ "sandbox": "bubblewrap",++ "bubblewrap": "0.9.0",++ "user_namespace": true,++ "network_namespace": true,++ "egress": {++ "via": "proxy",++ "public_only": true,++ "ports": [80, 443],++ "direct": "none"++ },++ "host_credentials": "none",++ "host_files": "none",++ "capabilities": "none",++ "seccomp": true,++ "host_network": false,++ "credentials": false,++ "profile": false,++ "egress_proxy": true,++ "workspace": "ephemeral",++ "workspace_kind": "tmpfs, wiped with the sandbox",++ "limits": {++ "kind": "cgroup",++ "enforced": true,++ "memory_mb": 2048,++ "disk_mb": 512,++ "pids": 256,++ "cpu_percent": 100,++ "time_box_minutes": [5, 30]++ }++ },++ "browser": false,++ "capacity": 2,++ "active": 0,++ "at": "2026-11-07T12:00:00.000Z"++}nnew file mode 100644@@@ -0,0 +1,8 @@++{++ "worker": {++ "ready": false,++ "code": "sandbox_worker_missing",++ "reason": "Needs the sandbox worker; coming soon",++ "last_seen_at": null++ }++}nnew file mode 100644@@@ -0,0 +1,9 @@++{++ "worker": {++ "ready": false,++ "code": "sandbox_worker_offline",++ "reason": "Needs the sandbox worker; coming soon",++ "last_seen_at": null,++ "stale_after_ms": 60000++ }++}nnew file mode 100644@@@ -0,0 +1,9 @@++{++ "worker": {++ "ready": true,++ "code": null,++ "reason": null,++ "last_seen_at": 1770000000000,++ "stale_after_ms": 60000++ }++}nnew file mode 100644@@@ -0,0 +1,9 @@++{++ "worker": {++ "ready": false,++ "code": "sandbox_worker_stale",++ "reason": "Needs the sandbox worker; coming soon",++ "last_seen_at": 1769999940000,++ "stale_after_ms": 60000++ }++}@@@ -104110,6 +104110,182 @@}}},++ "live.agent-sandbox-worker-request": {++ "version": "1.0.0",++ "owner": "live",++ "status": "active",++ "schema": {++ "$schema": "https://json-schema.org/draft/2020-12/schema",++ "$id": "https://openvibe.network/contracts/live/agent-sandbox-worker-request.v1.json",++ "title": "LiveAgentSandboxWorkerRequest",++ "description": "live.agent-sandbox-worker-request@1 (Agent Streams S6): the body of POST /api/streams/agent/:id/plays/worker on OpenVibe.Live (capability live.agent_sandbox.register). It is the sandbox worker's own check-in: the worker says it is there and reports the isolation facts Live requires, and Live derives health only from that check-in (it stores no endpoint and never calls the worker). Only a first-party service token whose principal holds live.agent_sandbox.register may send it, and it names the person it works for in X-OV-Subject, who must own the stream. The owner's session, a desk ticket and a person token are refused. Live counts a check-in within the last minute as alive and requires isolation to say exactly: host_network false, credentials false, profile false, egress_proxy true, workspace 'ephemeral'. The worker may report more than these five facts (its own checks, limits and versions); Live reads only the five and stores the report it was given. A worker that cannot say each of the five is not registered at all.",++ "type": "object",++ "additionalProperties": false,++ "required": [++ "isolation"++ ],++ "properties": {++ "worker_id": {++ "type": "string",++ "maxLength": 64,++ "description": "The worker's name in its own records; not a secret and not an address."++ },++ "service": {++ "type": "string",++ "maxLength": 64,++ "description": "The worker implementation that checked in (`codes-sandbox` for OpenVibe.Codes')."++ },++ "version": {++ "type": "string",++ "maxLength": 64++ },++ "ready": {++ "type": "boolean",++ "description": "The worker's own view of its health; Live's health is the check-in plus the isolation report, never this flag alone."++ },++ "reasons": {++ "type": "array",++ "maxItems": 10,++ "items": {++ "type": "string",++ "maxLength": 500++ },++ "description": "Why the worker says it is not ready (its self-test's failures), for the owner's page."++ },++ "checks": {++ "type": "object",++ "additionalProperties": {++ "type": "boolean"++ },++ "description": "The worker's self-test: one boolean per check it ran (the network namespace, the egress refusals, the cleaned environment, the host files, the capabilities, seccomp, the cgroup limits, the wipe)."++ },++ "checked_at": {++ "type": [++ "string",++ "null"++ ],++ "format": "date-time",++ "description": "When that self-test ran; null before the first one."++ },++ "isolation": {++ "type": "object",++ "additionalProperties": true,++ "required": [++ "host_network",++ "credentials",++ "profile",++ "egress_proxy",++ "workspace"++ ],++ "properties": {++ "host_network": {++ "const": false,++ "description": "The sandbox has its own network namespace; it cannot reach the host's network."++ },++ "credentials": {++ "const": false,++ "description": "No credential of the host, the worker or the person is inside the sandbox."++ },++ "profile": {++ "const": false,++ "description": "No browser or desktop profile of the host's is mounted."++ },++ "egress_proxy": {++ "const": true,++ "description": "Its only way out is the worker's proxy, which applies the egress guard."++ },++ "workspace": {++ "const": "ephemeral",++ "description": "The workspace is the sandbox's own and is gone with the wipe."++ }++ }++ },++ "browser": {++ "type": "boolean",++ "description": "Whether this worker has the optional headless browser."++ },++ "capacity": {++ "type": "integer",++ "minimum": 1,++ "description": "How many sandboxes it may run at once."++ },++ "active": {++ "type": "integer",++ "minimum": 0,++ "description": "How many are running now."++ },++ "at": {++ "type": "string",++ "format": "date-time",++ "description": "When the worker assembled the report."++ }++ }++ }++ },++ "live.agent-sandbox-worker-result": {++ "version": "1.0.0",++ "owner": "live",++ "status": "active",++ "schema": {++ "$schema": "https://json-schema.org/draft/2020-12/schema",++ "$id": "https://openvibe.network/contracts/live/agent-sandbox-worker-result.v1.json",++ "title": "LiveAgentSandboxWorkerResult",++ "description": "live.agent-sandbox-worker-result@1 (Agent Streams S6): the answer to POST /api/streams/agent/:id/plays/worker (capability live.agent_sandbox.register). It carries the worker's state for the stream's owner as Live now holds it: whether a healthy worker is registered, the code and the owner-facing reason when not, when the last check-in was, and how long a check-in counts (a minute). Live never returns an endpoint: there is none to return.",++ "type": "object",++ "additionalProperties": false,++ "required": [++ "worker"++ ],++ "properties": {++ "worker": {++ "type": "object",++ "additionalProperties": false,++ "required": [++ "ready",++ "stale_after_ms"++ ],++ "properties": {++ "ready": {++ "type": "boolean"++ },++ "code": {++ "type": [++ "string",++ "null"++ ],++ "enum": [++ "sandbox_worker_missing",++ "sandbox_worker_stale",++ "sandbox_worker_not_isolated",++ null++ ],++ "description": "Why there is no healthy worker; null when ready is true."++ },++ "reason": {++ "type": [++ "string",++ "null"++ ],++ "maxLength": 500,++ "description": "The line the owner's page shows; null when ready is true."++ },++ "last_seen_at": {++ "type": [++ "integer",++ "null"++ ],++ "minimum": 0,++ "description": "The last check-in, in milliseconds since the epoch; null when the worker never checked in."++ },++ "stale_after_ms": {++ "type": "integer",++ "minimum": 1000++ }++ }++ }++ }++ }++ },"live.agent-stream": {"version": "1.0.0","owner": "live",@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Actor API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Actor as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Actor as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.AI API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.AI as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.AI as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Bench API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Bench as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Bench as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Billing API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Billing as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Billing as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Blog API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Blog as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Blog as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Bot API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Bot as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Bot as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Chat API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Chat as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Chat as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Codes API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Codes as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Codes as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Community API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Community as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Community as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Coupons API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Coupons as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Coupons as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Deals API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Deals as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Deals as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Domains API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Domains as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Domains as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Events API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Events as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Events as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Food API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Food as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Food as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Games API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Games as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Games as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Host API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Host as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Host as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -124,8 +124,8 @@"service": "live","name": "OpenVibe.Live","origin": "https://openvibe.live",-- "operations": 46,-- "capabilities": 11++ "operations": 47,++ "capabilities": 12},{"service": "media",@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Inventory API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Inventory as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Inventory as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Live API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Live as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Live as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -1114,6 +1114,72 @@}}},++ "/api/streams/agent/{id}/plays/worker": {++ "post": {++ "operationId": "post_api_streams_agent_id_plays_worker",++ "summary": "The chat plays sandbox worker checks in for the person it works for on OpenVibe.Live (Agent Streams S6): POST /api/streams/agent/:id/plays/worker.",++ "description": "**live.agent_sandbox.register** (internal): The chat plays sandbox worker checks in for the person it works for on OpenVibe.Live (Agent Streams S6): POST /api/streams/agent/:id/plays/worker. Only a first-party service token whose principal holds this capability may register one, and it names the person in X-OV-Subject, who must own the stream. The owner's own session, a desk ticket (wpt_) and a person token are refused: an owner who could register a worker would declare their own unisolated machine a sandbox, and the gate would mean nothing. The body is live.agent-sandbox-worker-request@1, the worker's own report; Live requires isolation to say exactly host_network false, credentials false, profile false, egress_proxy true and workspace 'ephemeral', and refuses a worker that does not. Health comes only from a check-in within the last minute; Live stores no endpoint, never calls the worker and never accepts an isolation code it cannot read. The capability is internal because no person or app calls it: OpenVibe.Codes' sandbox worker holds it through its own Network service client for the audience openvibe.live.",++ "tags": [++ "live.agent_sandbox"++ ],++ "x-openvibe-capabilities": [++ "live.agent_sandbox.register"++ ],++ "x-openvibe-visibility": [++ "internal"++ ],++ "x-openvibe-quota-class": "standard",++ "security": [++ {++ "openvibeToken": [++ "live.agent_sandbox.register"++ ]++ }++ ],++ "requestBody": {++ "required": false,++ "content": {++ "application/json": {++ "schema": {++ "$ref": "#/components/schemas/live.agent-sandbox-worker-request.v1"++ }++ }++ }++ },++ "parameters": [++ {++ "name": "id",++ "in": "path",++ "required": true,++ "schema": {++ "type": "string"++ }++ }++ ],++ "responses": {++ "2XX": {++ "description": "Success",++ "content": {++ "application/json": {++ "schema": {++ "$ref": "#/components/schemas/live.agent-sandbox-worker-result.v1"++ }++ }++ }++ },++ "default": {++ "description": "An error (RFC 9457 problem details)",++ "content": {++ "application/problem+json": {++ "schema": {++ "$ref": "#/components/schemas/errors.problem.v1"++ }++ }++ }++ }++ }++ }++ },"/api/streams/agent/{id}/state": {"get": {"operationId": "get_api_streams_agent_id_state",@@@ -3319,6 +3385,168 @@}}},++ "live.agent-sandbox-worker-request.v1": {++ "title": "LiveAgentSandboxWorkerRequest",++ "description": "live.agent-sandbox-worker-request@1 (Agent Streams S6): the body of POST /api/streams/agent/:id/plays/worker on OpenVibe.Live (capability live.agent_sandbox.register). It is the sandbox worker's own check-in: the worker says it is there and reports the isolation facts Live requires, and Live derives health only from that check-in (it stores no endpoint and never calls the worker). Only a first-party service token whose principal holds live.agent_sandbox.register may send it, and it names the person it works for in X-OV-Subject, who must own the stream. The owner's session, a desk ticket and a person token are refused. Live counts a check-in within the last minute as alive and requires isolation to say exactly: host_network false, credentials false, profile false, egress_proxy true, workspace 'ephemeral'. The worker may report more than these five facts (its own checks, limits and versions); Live reads only the five and stores the report it was given. A worker that cannot say each of the five is not registered at all.",++ "type": "object",++ "additionalProperties": false,++ "required": [++ "isolation"++ ],++ "properties": {++ "worker_id": {++ "type": "string",++ "maxLength": 64,++ "description": "The worker's name in its own records; not a secret and not an address."++ },++ "service": {++ "type": "string",++ "maxLength": 64,++ "description": "The worker implementation that checked in (`codes-sandbox` for OpenVibe.Codes')."++ },++ "version": {++ "type": "string",++ "maxLength": 64++ },++ "ready": {++ "type": "boolean",++ "description": "The worker's own view of its health; Live's health is the check-in plus the isolation report, never this flag alone."++ },++ "reasons": {++ "type": "array",++ "maxItems": 10,++ "items": {++ "type": "string",++ "maxLength": 500++ },++ "description": "Why the worker says it is not ready (its self-test's failures), for the owner's page."++ },++ "checks": {++ "type": "object",++ "additionalProperties": {++ "type": "boolean"++ },++ "description": "The worker's self-test: one boolean per check it ran (the network namespace, the egress refusals, the cleaned environment, the host files, the capabilities, seccomp, the cgroup limits, the wipe)."++ },++ "checked_at": {++ "type": [++ "string",++ "null"++ ],++ "format": "date-time",++ "description": "When that self-test ran; null before the first one."++ },++ "isolation": {++ "type": "object",++ "additionalProperties": true,++ "required": [++ "host_network",++ "credentials",++ "profile",++ "egress_proxy",++ "workspace"++ ],++ "properties": {++ "host_network": {++ "const": false,++ "description": "The sandbox has its own network namespace; it cannot reach the host's network."++ },++ "credentials": {++ "const": false,++ "description": "No credential of the host, the worker or the person is inside the sandbox."++ },++ "profile": {++ "const": false,++ "description": "No browser or desktop profile of the host's is mounted."++ },++ "egress_proxy": {++ "const": true,++ "description": "Its only way out is the worker's proxy, which applies the egress guard."++ },++ "workspace": {++ "const": "ephemeral",++ "description": "The workspace is the sandbox's own and is gone with the wipe."++ }++ }++ },++ "browser": {++ "type": "boolean",++ "description": "Whether this worker has the optional headless browser."++ },++ "capacity": {++ "type": "integer",++ "minimum": 1,++ "description": "How many sandboxes it may run at once."++ },++ "active": {++ "type": "integer",++ "minimum": 0,++ "description": "How many are running now."++ },++ "at": {++ "type": "string",++ "format": "date-time",++ "description": "When the worker assembled the report."++ }++ }++ },++ "live.agent-sandbox-worker-result.v1": {++ "title": "LiveAgentSandboxWorkerResult",++ "description": "live.agent-sandbox-worker-result@1 (Agent Streams S6): the answer to POST /api/streams/agent/:id/plays/worker (capability live.agent_sandbox.register). It carries the worker's state for the stream's owner as Live now holds it: whether a healthy worker is registered, the code and the owner-facing reason when not, when the last check-in was, and how long a check-in counts (a minute). Live never returns an endpoint: there is none to return.",++ "type": "object",++ "additionalProperties": false,++ "required": [++ "worker"++ ],++ "properties": {++ "worker": {++ "type": "object",++ "additionalProperties": false,++ "required": [++ "ready",++ "stale_after_ms"++ ],++ "properties": {++ "ready": {++ "type": "boolean"++ },++ "code": {++ "type": [++ "string",++ "null"++ ],++ "enum": [++ "sandbox_worker_missing",++ "sandbox_worker_stale",++ "sandbox_worker_not_isolated",++ null++ ],++ "description": "Why there is no healthy worker; null when ready is true."++ },++ "reason": {++ "type": [++ "string",++ "null"++ ],++ "maxLength": 500,++ "description": "The line the owner's page shows; null when ready is true."++ },++ "last_seen_at": {++ "type": [++ "integer",++ "null"++ ],++ "minimum": 0,++ "description": "The last check-in, in milliseconds since the epoch; null when the worker never checked in."++ },++ "stale_after_ms": {++ "type": "integer",++ "minimum": 1000++ }++ }++ }++ }++ },"live.agent-stream-create-request.v1": {"title": "LiveAgentStreamCreateRequest","description": "live.agent-stream-create-request@1 (the Agent Streams plan, S1): the body of POST /api/streams/agent on OpenVibe.Live (capability live.agent_stream.publish). It answers 201 with the stream (live.agent-stream@1) and the publish part (live.agent-stream-publish@1): { stream, publish }. The caller is the person's own session token, or a first-party service token acting for that person (a Node principal acting for its owner, Codes or Actor) that holds live.agent_stream.publish for the audience openvibe.live; Network grants it to exactly those principals. Never a developer-app token, never another person's stream. TITLE is the card's title, TASK says what the agent is doing and where that task lives, VISIBILITY says who may watch, and ALLOW_SITES is the optional list of hosts a browser desk may navigate to (a desk that leaves the list raises the curtain).",@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.MediaHub API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.MediaHub as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.MediaHub as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Media API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Media as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Media as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Network API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Network as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Network as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.News API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.News as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.News as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenRestream API",-- "version": "0.312.0",-- "description": "Routes of OpenRestream as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenRestream as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Play API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Play as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Play as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Quest API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Quest as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Quest as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Report API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Report as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Report as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Reviews API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Reviews as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Reviews as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Run API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Run as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Run as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Search API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Search as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Search as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Services API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Services as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Services as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Sources API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Sources as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Sources as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Space API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Space as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Space as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Tips API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Tips as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Tips as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Today API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Today as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Today as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Tools API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Tools as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Tools as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Trade API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Trade as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Trade as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.VIP API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.VIP as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.VIP as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Vision API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Vision as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Vision as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Watch API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Watch as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Watch as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Wiki API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Wiki as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Wiki as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Work API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Work as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Work as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -3,8 +3,8 @@"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema","info": {"title": "OpenVibe.Zone API",-- "version": "0.312.0",-- "description": "Routes of OpenVibe.Zone as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",++ "version": "0.314.0",++ "description": "Routes of OpenVibe.Zone as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.","license": {"name": "MIT","identifier": "MIT"@@@ -293405,6 +293405,115 @@ export interface LockerKeyChange {previous_fingerprint?: string;}++/** [email protected] (owner: live) */++/**++ * live.agent-sandbox-worker-request@1 (Agent Streams S6): the body of POST /api/streams/agent/:id/plays/worker on OpenVibe.Live (capability live.agent_sandbox.register). It is the sandbox worker's own check-in: the worker says it is there and reports the isolation facts Live requires, and Live derives health only from that check-in (it stores no endpoint and never calls the worker). Only a first-party service token whose principal holds live.agent_sandbox.register may send it, and it names the person it works for in X-OV-Subject, who must own the stream. The owner's session, a desk ticket and a person token are refused. Live counts a check-in within the last minute as alive and requires isolation to say exactly: host_network false, credentials false, profile false, egress_proxy true, workspace 'ephemeral'. The worker may report more than these five facts (its own checks, limits and versions); Live reads only the five and stores the report it was given. A worker that cannot say each of the five is not registered at all.++ */++export interface LiveAgentSandboxWorkerRequest {++ /**++ * The worker's name in its own records; not a secret and not an address.++ */++ worker_id?: string;++ /**++ * The worker implementation that checked in (`codes-sandbox` for OpenVibe.Codes').++ */++ service?: string;++ version?: string;++ /**++ * The worker's own view of its health; Live's health is the check-in plus the isolation report, never this flag alone.++ */++ ready?: boolean;++ /**++ * Why the worker says it is not ready (its self-test's failures), for the owner's page.++ *++ * @maxItems 10++ */++ reasons?:++ | []++ | [string]++ | [string, string]++ | [string, string, string]++ | [string, string, string, string]++ | [string, string, string, string, string]++ | [string, string, string, string, string, string]++ | [string, string, string, string, string, string, string]++ | [string, string, string, string, string, string, string, string]++ | [string, string, string, string, string, string, string, string, string]++ | [string, string, string, string, string, string, string, string, string, string];++ /**++ * The worker's self-test: one boolean per check it ran (the network namespace, the egress refusals, the cleaned environment, the host files, the capabilities, seccomp, the cgroup limits, the wipe).++ */++ checks?: {++ [k: string]: boolean | undefined;++ };++ /**++ * When that self-test ran; null before the first one.++ */++ checked_at?: string | null;++ isolation: {++ /**++ * The sandbox has its own network namespace; it cannot reach the host's network.++ */++ host_network: false;++ /**++ * No credential of the host, the worker or the person is inside the sandbox.++ */++ credentials: false;++ /**++ * No browser or desktop profile of the host's is mounted.++ */++ profile: false;++ /**++ * Its only way out is the worker's proxy, which applies the egress guard.++ */++ egress_proxy: true;++ /**++ * The workspace is the sandbox's own and is gone with the wipe.++ */++ workspace: "ephemeral";++ [k: string]: unknown | undefined;++ };++ /**++ * Whether this worker has the optional headless browser.++ */++ browser?: boolean;++ /**++ * How many sandboxes it may run at once.++ */++ capacity?: number;++ /**++ * How many are running now.++ */++ active?: number;++ /**++ * When the worker assembled the report.++ */++ at?: string;++}++++/** [email protected] (owner: live) */++/**++ * live.agent-sandbox-worker-result@1 (Agent Streams S6): the answer to POST /api/streams/agent/:id/plays/worker (capability live.agent_sandbox.register). It carries the worker's state for the stream's owner as Live now holds it: whether a healthy worker is registered, the code and the owner-facing reason when not, when the last check-in was, and how long a check-in counts (a minute). Live never returns an endpoint: there is none to return.++ */++export interface LiveAgentSandboxWorkerResult {++ worker: {++ ready: boolean;++ /**++ * Why there is no healthy worker; null when ready is true.++ */++ code?: "sandbox_worker_missing" | "sandbox_worker_stale" | "sandbox_worker_not_isolated" | null;++ /**++ * The line the owner's page shows; null when ready is true.++ */++ reason?: string | null;++ /**++ * The last check-in, in milliseconds since the epoch; null when the worker never checked in.++ */++ last_seen_at?: number | null;++ stale_after_ms: number;++ };++}++/** [email protected] (owner: live) *//*** live.agent-stream@1 (the Agent Streams plan, S1): an agent's own stream on OpenVibe.Live. It is a managed_streams row of kind 'agent' with the id ags_<ULID>; it never has a stream key and it never takes a normal slot (a second live one answers 409 live.agent_stream_limit). OWNER is the person the stream belongs to, CHANNEL their Live channel, and TASK says what the agent is doing and where that task lives. VISIBILITY is who may watch; MODE is how the stream is played (S1 accepts watch only) and STATE where it stands. CURTAIN is the desk's privacy screen: while it is up Live pauses every viewer's consumer, so a viewer sees 'Private screen' and never the reason (the reason stays in the owner's view). The card stays after the stream ends, with the last frame, the worked seconds and the VOD once it is recorded.nnew file mode 100644@@@ -0,0 +1,21 @@++{++ "id": "live.agent_sandbox.register",++ "version": "1.0",++ "owner": "live",++ "status": "active",++ "visibility": "internal",++ "description": "The chat plays sandbox worker checks in for the person it works for on OpenVibe.Live (Agent Streams S6): POST /api/streams/agent/:id/plays/worker. Only a first-party service token whose principal holds this capability may register one, and it names the person in X-OV-Subject, who must own the stream. The owner's own session, a desk ticket (wpt_) and a person token are refused: an owner who could register a worker would declare their own unisolated machine a sandbox, and the gate would mean nothing. The body is live.agent-sandbox-worker-request@1, the worker's own report; Live requires isolation to say exactly host_network false, credentials false, profile false, egress_proxy true and workspace 'ephemeral', and refuses a worker that does not. Health comes only from a check-in within the last minute; Live stores no endpoint, never calls the worker and never accepts an isolation code it cannot read. The capability is internal because no person or app calls it: OpenVibe.Codes' sandbox worker holds it through its own Network service client for the audience openvibe.live.",++ "inputSchema": "live.agent-sandbox-worker-request@1",++ "outputSchema": "live.agent-sandbox-worker-result@1",++ "permissions": [++ "live:write"++ ],++ "resourceConstraints": [++ "owner"++ ],++ "quotaClass": "standard",++ "events": [],++ "implementedBy": [++ "POST /api/streams/agent/:id/plays/worker"++ ]++}@@@ -47,6 +47,7 @@"neighbourhood": "streams"},"capabilities": [++ "live.agent_sandbox.register","live.agent_stream.publish","live.analytics.read","live.avatar.write",@@@ -1,6 +1,6 @@{"name": "openvibe-contracts",-- "version": "0.312.0",++ "version": "0.314.0","description": "Machine-readable contracts for the OpenVibe network: schemas, manifests, ids, error envelope, capability checks.","main": "index.js","types": "generated/typescript/index.d.ts",
@@ -1,5 +1,15 @@
@@ -1,5 +1,15 @@
# Changelog
# Changelog
+## 0.314.0 — 2026-11-07
+
+- Add the capability `live.agent_sandbox.register` (Agent Streams S6): the chat plays sandbox worker's check-in on OpenVibe.Live, `POST /api/streams/agent/:id/plays/worker`, owned by Live and internal. Only a first-party service token whose principal holds it may register a worker, and the token names the person it works for in `X-OV-Subject`, who must own the stream. The owner's own session, a desk ticket (`wpt_`) and a person token are refused: an owner who could register a worker would declare their own unisolated machine a sandbox. The worker reports the isolation facts Live requires (no host network, no credentials, no profile, egress through the proxy, an ephemeral workspace) and Live derives health only from a check-in within the last minute; Live stores no endpoint and never calls the worker. Name the capability in Live's service manifest.
+- Add `live.agent-sandbox-worker-request@1`: the worker's check-in body, which names the five isolation facts Live reads exactly (`host_network` false, `credentials` false, `profile` false, `egress_proxy` true, `workspace` `ephemeral`) and may carry the worker's own checks, limits, versions and counts. A worker that cannot say each of the five is not registered. Add `live.agent-sandbox-worker-result@1`: the worker's state for the stream's owner, with the reason when there is no healthy one, the last check-in and the minute a check-in counts for. Live never returns an endpoint: there is none.
+- Valid and invalid fixtures cover a full worker check-in and an isolation-only one, a worker with the host's network and one that cannot say there is no profile, and a healthy worker, a stale one, a missing stale window and an unknown state code.
+
+## 0.313.0 — 2026-11-07
+
+- Placeholder for the 0.313.0 that #321 claims (A6: `agent.timeline-entry@1` and the agent.step.* events). This line keeps the history whole until that pull request merges; it is replaced by that release's own entry then.
+
## 0.312.0 — 2026-11-07
## 0.312.0 — 2026-11-07
- Add the Codes skills-hub records (the Compute plan §5, E6). `codes.skill@1` is one skill, rule, MCP server, command or hook: its owner, kind, stable slug, title, summary, the four sharing audiences (`private`, `people`, `link`, `public`), the harnesses it is written for, the newest version and that version's body. A `private`, `people` or `link` record is never in the gallery; only `public` is. The body is untrusted Markdown and the page renders it through the markup gate.
- Add the Codes skills-hub records (the Compute plan §5, E6). `codes.skill@1` is one skill, rule, MCP server, command or hook: its owner, kind, stable slug, title, summary, the four sharing audiences (`private`, `people`, `link`, `public`), the harnesses it is written for, the newest version and that version's body. A `private`, `people` or `link` record is never in the gallery; only `public` is. The body is untrusted Markdown and the page renders it through the markup gate.
@@ -9484,6 +9484,24 @@
@@ -9484,6 +9484,24 @@
"compatibility": "backward",
"compatibility": "backward",
"status": "active"
"status": "active"
},
},
+ {
+ "id": "live.agent-sandbox-worker-request",
+ "version": "1.0.0",
+ "owner": "live",
+ "schema": "live/agent-sandbox-worker-request.v1.json",
+ "visibility": "first-party",
+ "compatibility": "backward",
+ "status": "active"
+ },
+ {
+ "id": "live.agent-sandbox-worker-result",
+ "version": "1.0.0",
+ "owner": "live",
+ "schema": "live/agent-sandbox-worker-result.v1.json",
+ "visibility": "first-party",
+ "compatibility": "backward",
+ "status": "active"
+ },
{
{
"id": "live.agent-stream",
"id": "live.agent-stream",
"version": "1.0.0",
"version": "1.0.0",
new file mode 100644
new file mode 100644
@@ -0,0 +1,107 @@
@@ -0,0 +1,107 @@
+{
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
+ "$id": "https://openvibe.network/contracts/live/agent-sandbox-worker-request.v1.json",
+ "title": "LiveAgentSandboxWorkerRequest",
+ "description": "live.agent-sandbox-worker-request@1 (Agent Streams S6): the body of POST /api/streams/agent/:id/plays/worker on OpenVibe.Live (capability live.agent_sandbox.register). It is the sandbox worker's own check-in: the worker says it is there and reports the isolation facts Live requires, and Live derives health only from that check-in (it stores no endpoint and never calls the worker). Only a first-party service token whose principal holds live.agent_sandbox.register may send it, and it names the person it works for in X-OV-Subject, who must own the stream. The owner's session, a desk ticket and a person token are refused. Live counts a check-in within the last minute as alive and requires isolation to say exactly: host_network false, credentials false, profile false, egress_proxy true, workspace 'ephemeral'. The worker may report more than these five facts (its own checks, limits and versions); Live reads only the five and stores the report it was given. A worker that cannot say each of the five is not registered at all.",
+ "type": "object",
+ "additionalProperties": false,
+ "required": [
+ "isolation"
+ ],
+ "properties": {
+ "worker_id": {
+ "type": "string",
+ "maxLength": 64,
+ "description": "The worker's name in its own records; not a secret and not an address."
+ },
+ "service": {
+ "type": "string",
+ "maxLength": 64,
+ "description": "The worker implementation that checked in (`codes-sandbox` for OpenVibe.Codes')."
+ },
+ "version": {
+ "type": "string",
+ "maxLength": 64
+ },
+ "ready": {
+ "type": "boolean",
+ "description": "The worker's own view of its health; Live's health is the check-in plus the isolation report, never this flag alone."
+ },
+ "reasons": {
+ "type": "array",
+ "maxItems": 10,
+ "items": {
+ "type": "string",
+ "maxLength": 500
+ },
+ "description": "Why the worker says it is not ready (its self-test's failures), for the owner's page."
+ },
+ "checks": {
+ "type": "object",
+ "additionalProperties": {
+ "type": "boolean"
+ },
+ "description": "The worker's self-test: one boolean per check it ran (the network namespace, the egress refusals, the cleaned environment, the host files, the capabilities, seccomp, the cgroup limits, the wipe)."
+ },
+ "checked_at": {
+ "type": [
+ "string",
+ "null"
+ ],
+ "format": "date-time",
+ "description": "When that self-test ran; null before the first one."
+ },
+ "isolation": {
+ "type": "object",
+ "additionalProperties": true,
+ "required": [
+ "host_network",
+ "credentials",
+ "profile",
+ "egress_proxy",
+ "workspace"
+ ],
+ "properties": {
+ "host_network": {
+ "const": false,
+ "description": "The sandbox has its own network namespace; it cannot reach the host's network."
+ },
+ "credentials": {
+ "const": false,
+ "description": "No credential of the host, the worker or the person is inside the sandbox."
+ },
+ "profile": {
+ "const": false,
+ "description": "No browser or desktop profile of the host's is mounted."
+ },
+ "egress_proxy": {
+ "const": true,
+ "description": "Its only way out is the worker's proxy, which applies the egress guard."
+ },
+ "workspace": {
+ "const": "ephemeral",
+ "description": "The workspace is the sandbox's own and is gone with the wipe."
+ }
+ }
+ },
+ "browser": {
+ "type": "boolean",
+ "description": "Whether this worker has the optional headless browser."
+ },
+ "capacity": {
+ "type": "integer",
+ "minimum": 1,
+ "description": "How many sandboxes it may run at once."
+ },
+ "active": {
+ "type": "integer",
+ "minimum": 0,
+ "description": "How many are running now."
+ },
+ "at": {
+ "type": "string",
+ "format": "date-time",
+ "description": "When the worker assembled the report."
+ }
+ }
+}
new file mode 100644
new file mode 100644
@@ -0,0 +1,59 @@
@@ -0,0 +1,59 @@
+{
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
+ "$id": "https://openvibe.network/contracts/live/agent-sandbox-worker-result.v1.json",
+ "title": "LiveAgentSandboxWorkerResult",
+ "description": "live.agent-sandbox-worker-result@1 (Agent Streams S6): the answer to POST /api/streams/agent/:id/plays/worker (capability live.agent_sandbox.register). It carries the worker's state for the stream's owner as Live now holds it: whether a healthy worker is registered, the code and the owner-facing reason when not, when the last check-in was, and how long a check-in counts (a minute). Live never returns an endpoint: there is none to return.",
+ "type": "object",
+ "additionalProperties": false,
+ "required": [
+ "worker"
+ ],
+ "properties": {
+ "worker": {
+ "type": "object",
+ "additionalProperties": false,
+ "required": [
+ "ready",
+ "stale_after_ms"
+ ],
+ "properties": {
+ "ready": {
+ "type": "boolean"
+ },
+ "code": {
+ "type": [
+ "string",
+ "null"
+ ],
+ "enum": [
+ "sandbox_worker_missing",
+ "sandbox_worker_stale",
+ "sandbox_worker_not_isolated",
+ null
+ ],
+ "description": "Why there is no healthy worker; null when ready is true."
+ },
+ "reason": {
+ "type": [
+ "string",
+ "null"
+ ],
+ "maxLength": 500,
+ "description": "The line the owner's page shows; null when ready is true."
+ },
+ "last_seen_at": {
+ "type": [
+ "integer",
+ "null"
+ ],
+ "minimum": 0,
+ "description": "The last check-in, in milliseconds since the epoch; null when the worker never checked in."
+ },
+ "stale_after_ms": {
+ "type": "integer",
+ "minimum": 1000
+ }
+ }
+ }
+ }
+}
new file mode 100644
new file mode 100644
@@ -0,0 +1,8 @@
@@ -0,0 +1,8 @@
+{
+ "isolation": {
+ "host_network": false,
+ "credentials": false,
+ "egress_proxy": true,
+ "workspace": "ephemeral"
+ }
+}
new file mode 100644
new file mode 100644
@@ -0,0 +1,9 @@
@@ -0,0 +1,9 @@
+{
+ "isolation": {
+ "host_network": true,
+ "credentials": false,
+ "profile": false,
+ "egress_proxy": true,
+ "workspace": "ephemeral"
+ }
+}
new file mode 100644
new file mode 100644
@@ -0,0 +1,9 @@
@@ -0,0 +1,9 @@
+{
+ "isolation": {
+ "host_network": false,
+ "credentials": false,
+ "profile": false,
+ "egress_proxy": true,
+ "workspace": "ephemeral"
+ }
+}
new file mode 100644
new file mode 100644
@@ -0,0 +1,53 @@
@@ -0,0 +1,53 @@
+{
+ "worker_id": "sbw-ovhost",
+ "service": "codes-sandbox",
+ "version": "0.7.0",
+ "ready": true,
+ "checks": {
+ "network_namespace": true,
+ "no_direct_egress": true,
+ "egress_refuses_private": true,
+ "clean_env": true,
+ "no_host_files": true,
+ "no_capabilities": true,
+ "seccomp": true,
+ "limits": true,
+ "wipe": true
+ },
+ "checked_at": "2026-11-07T12:00:00.000Z",
+ "isolation": {
+ "sandbox": "bubblewrap",
+ "bubblewrap": "0.9.0",
+ "user_namespace": true,
+ "network_namespace": true,
+ "egress": {
+ "via": "proxy",
+ "public_only": true,
+ "ports": [80, 443],
+ "direct": "none"
+ },
+ "host_credentials": "none",
+ "host_files": "none",
+ "capabilities": "none",
+ "seccomp": true,
+ "host_network": false,
+ "credentials": false,
+ "profile": false,
+ "egress_proxy": true,
+ "workspace": "ephemeral",
+ "workspace_kind": "tmpfs, wiped with the sandbox",
+ "limits": {
+ "kind": "cgroup",
+ "enforced": true,
+ "memory_mb": 2048,
+ "disk_mb": 512,
+ "pids": 256,
+ "cpu_percent": 100,
+ "time_box_minutes": [5, 30]
+ }
+ },
+ "browser": false,
+ "capacity": 2,
+ "active": 0,
+ "at": "2026-11-07T12:00:00.000Z"
+}
new file mode 100644
new file mode 100644
@@ -0,0 +1,8 @@
@@ -0,0 +1,8 @@
+{
+ "worker": {
+ "ready": false,
+ "code": "sandbox_worker_missing",
+ "reason": "Needs the sandbox worker; coming soon",
+ "last_seen_at": null
+ }
+}
new file mode 100644
new file mode 100644
@@ -0,0 +1,9 @@
@@ -0,0 +1,9 @@
+{
+ "worker": {
+ "ready": false,
+ "code": "sandbox_worker_offline",
+ "reason": "Needs the sandbox worker; coming soon",
+ "last_seen_at": null,
+ "stale_after_ms": 60000
+ }
+}
new file mode 100644
new file mode 100644
@@ -0,0 +1,9 @@
@@ -0,0 +1,9 @@
+{
+ "worker": {
+ "ready": true,
+ "code": null,
+ "reason": null,
+ "last_seen_at": 1770000000000,
+ "stale_after_ms": 60000
+ }
+}
new file mode 100644
new file mode 100644
@@ -0,0 +1,9 @@
@@ -0,0 +1,9 @@
+{
+ "worker": {
+ "ready": false,
+ "code": "sandbox_worker_stale",
+ "reason": "Needs the sandbox worker; coming soon",
+ "last_seen_at": 1769999940000,
+ "stale_after_ms": 60000
+ }
+}
@@ -104110,6 +104110,182 @@
@@ -104110,6 +104110,182 @@
}
}
}
}
},
},
+ "live.agent-sandbox-worker-request": {
+ "version": "1.0.0",
+ "owner": "live",
+ "status": "active",
+ "schema": {
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
+ "$id": "https://openvibe.network/contracts/live/agent-sandbox-worker-request.v1.json",
+ "title": "LiveAgentSandboxWorkerRequest",
+ "description": "live.agent-sandbox-worker-request@1 (Agent Streams S6): the body of POST /api/streams/agent/:id/plays/worker on OpenVibe.Live (capability live.agent_sandbox.register). It is the sandbox worker's own check-in: the worker says it is there and reports the isolation facts Live requires, and Live derives health only from that check-in (it stores no endpoint and never calls the worker). Only a first-party service token whose principal holds live.agent_sandbox.register may send it, and it names the person it works for in X-OV-Subject, who must own the stream. The owner's session, a desk ticket and a person token are refused. Live counts a check-in within the last minute as alive and requires isolation to say exactly: host_network false, credentials false, profile false, egress_proxy true, workspace 'ephemeral'. The worker may report more than these five facts (its own checks, limits and versions); Live reads only the five and stores the report it was given. A worker that cannot say each of the five is not registered at all.",
+ "type": "object",
+ "additionalProperties": false,
+ "required": [
+ "isolation"
+ ],
+ "properties": {
+ "worker_id": {
+ "type": "string",
+ "maxLength": 64,
+ "description": "The worker's name in its own records; not a secret and not an address."
+ },
+ "service": {
+ "type": "string",
+ "maxLength": 64,
+ "description": "The worker implementation that checked in (`codes-sandbox` for OpenVibe.Codes')."
+ },
+ "version": {
+ "type": "string",
+ "maxLength": 64
+ },
+ "ready": {
+ "type": "boolean",
+ "description": "The worker's own view of its health; Live's health is the check-in plus the isolation report, never this flag alone."
+ },
+ "reasons": {
+ "type": "array",
+ "maxItems": 10,
+ "items": {
+ "type": "string",
+ "maxLength": 500
+ },
+ "description": "Why the worker says it is not ready (its self-test's failures), for the owner's page."
+ },
+ "checks": {
+ "type": "object",
+ "additionalProperties": {
+ "type": "boolean"
+ },
+ "description": "The worker's self-test: one boolean per check it ran (the network namespace, the egress refusals, the cleaned environment, the host files, the capabilities, seccomp, the cgroup limits, the wipe)."
+ },
+ "checked_at": {
+ "type": [
+ "string",
+ "null"
+ ],
+ "format": "date-time",
+ "description": "When that self-test ran; null before the first one."
+ },
+ "isolation": {
+ "type": "object",
+ "additionalProperties": true,
+ "required": [
+ "host_network",
+ "credentials",
+ "profile",
+ "egress_proxy",
+ "workspace"
+ ],
+ "properties": {
+ "host_network": {
+ "const": false,
+ "description": "The sandbox has its own network namespace; it cannot reach the host's network."
+ },
+ "credentials": {
+ "const": false,
+ "description": "No credential of the host, the worker or the person is inside the sandbox."
+ },
+ "profile": {
+ "const": false,
+ "description": "No browser or desktop profile of the host's is mounted."
+ },
+ "egress_proxy": {
+ "const": true,
+ "description": "Its only way out is the worker's proxy, which applies the egress guard."
+ },
+ "workspace": {
+ "const": "ephemeral",
+ "description": "The workspace is the sandbox's own and is gone with the wipe."
+ }
+ }
+ },
+ "browser": {
+ "type": "boolean",
+ "description": "Whether this worker has the optional headless browser."
+ },
+ "capacity": {
+ "type": "integer",
+ "minimum": 1,
+ "description": "How many sandboxes it may run at once."
+ },
+ "active": {
+ "type": "integer",
+ "minimum": 0,
+ "description": "How many are running now."
+ },
+ "at": {
+ "type": "string",
+ "format": "date-time",
+ "description": "When the worker assembled the report."
+ }
+ }
+ }
+ },
+ "live.agent-sandbox-worker-result": {
+ "version": "1.0.0",
+ "owner": "live",
+ "status": "active",
+ "schema": {
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
+ "$id": "https://openvibe.network/contracts/live/agent-sandbox-worker-result.v1.json",
+ "title": "LiveAgentSandboxWorkerResult",
+ "description": "live.agent-sandbox-worker-result@1 (Agent Streams S6): the answer to POST /api/streams/agent/:id/plays/worker (capability live.agent_sandbox.register). It carries the worker's state for the stream's owner as Live now holds it: whether a healthy worker is registered, the code and the owner-facing reason when not, when the last check-in was, and how long a check-in counts (a minute). Live never returns an endpoint: there is none to return.",
+ "type": "object",
+ "additionalProperties": false,
+ "required": [
+ "worker"
+ ],
+ "properties": {
+ "worker": {
+ "type": "object",
+ "additionalProperties": false,
+ "required": [
+ "ready",
+ "stale_after_ms"
+ ],
+ "properties": {
+ "ready": {
+ "type": "boolean"
+ },
+ "code": {
+ "type": [
+ "string",
+ "null"
+ ],
+ "enum": [
+ "sandbox_worker_missing",
+ "sandbox_worker_stale",
+ "sandbox_worker_not_isolated",
+ null
+ ],
+ "description": "Why there is no healthy worker; null when ready is true."
+ },
+ "reason": {
+ "type": [
+ "string",
+ "null"
+ ],
+ "maxLength": 500,
+ "description": "The line the owner's page shows; null when ready is true."
+ },
+ "last_seen_at": {
+ "type": [
+ "integer",
+ "null"
+ ],
+ "minimum": 0,
+ "description": "The last check-in, in milliseconds since the epoch; null when the worker never checked in."
+ },
+ "stale_after_ms": {
+ "type": "integer",
+ "minimum": 1000
+ }
+ }
+ }
+ }
+ }
+ },
"live.agent-stream": {
"live.agent-stream": {
"version": "1.0.0",
"version": "1.0.0",
"owner": "live",
"owner": "live",
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Actor API",
"title": "OpenVibe.Actor API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Actor as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Actor as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.AI API",
"title": "OpenVibe.AI API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.AI as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.AI as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Bench API",
"title": "OpenVibe.Bench API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Bench as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Bench as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Billing API",
"title": "OpenVibe.Billing API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Billing as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Billing as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Blog API",
"title": "OpenVibe.Blog API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Blog as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Blog as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Bot API",
"title": "OpenVibe.Bot API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Bot as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Bot as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Chat API",
"title": "OpenVibe.Chat API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Chat as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Chat as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Codes API",
"title": "OpenVibe.Codes API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Codes as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Codes as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Community API",
"title": "OpenVibe.Community API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Community as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Community as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Coupons API",
"title": "OpenVibe.Coupons API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Coupons as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Coupons as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Deals API",
"title": "OpenVibe.Deals API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Deals as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Deals as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Domains API",
"title": "OpenVibe.Domains API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Domains as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Domains as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Events API",
"title": "OpenVibe.Events API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Events as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Events as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Food API",
"title": "OpenVibe.Food API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Food as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Food as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Games API",
"title": "OpenVibe.Games API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Games as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Games as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Host API",
"title": "OpenVibe.Host API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Host as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Host as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -124,8 +124,8 @@
@@ -124,8 +124,8 @@
"service": "live",
"service": "live",
"name": "OpenVibe.Live",
"name": "OpenVibe.Live",
"origin": "https://openvibe.live",
"origin": "https://openvibe.live",
- "operations": 46,
- "capabilities": 11
+ "operations": 47,
+ "capabilities": 12
},
},
{
{
"service": "media",
"service": "media",
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Inventory API",
"title": "OpenVibe.Inventory API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Inventory as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Inventory as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Live API",
"title": "OpenVibe.Live API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Live as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Live as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -1114,6 +1114,72 @@
@@ -1114,6 +1114,72 @@
}
}
}
}
},
},
+ "/api/streams/agent/{id}/plays/worker": {
+ "post": {
+ "operationId": "post_api_streams_agent_id_plays_worker",
+ "summary": "The chat plays sandbox worker checks in for the person it works for on OpenVibe.Live (Agent Streams S6): POST /api/streams/agent/:id/plays/worker.",
+ "description": "**live.agent_sandbox.register** (internal): The chat plays sandbox worker checks in for the person it works for on OpenVibe.Live (Agent Streams S6): POST /api/streams/agent/:id/plays/worker. Only a first-party service token whose principal holds this capability may register one, and it names the person in X-OV-Subject, who must own the stream. The owner's own session, a desk ticket (wpt_) and a person token are refused: an owner who could register a worker would declare their own unisolated machine a sandbox, and the gate would mean nothing. The body is live.agent-sandbox-worker-request@1, the worker's own report; Live requires isolation to say exactly host_network false, credentials false, profile false, egress_proxy true and workspace 'ephemeral', and refuses a worker that does not. Health comes only from a check-in within the last minute; Live stores no endpoint, never calls the worker and never accepts an isolation code it cannot read. The capability is internal because no person or app calls it: OpenVibe.Codes' sandbox worker holds it through its own Network service client for the audience openvibe.live.",
+ "tags": [
+ "live.agent_sandbox"
+ ],
+ "x-openvibe-capabilities": [
+ "live.agent_sandbox.register"
+ ],
+ "x-openvibe-visibility": [
+ "internal"
+ ],
+ "x-openvibe-quota-class": "standard",
+ "security": [
+ {
+ "openvibeToken": [
+ "live.agent_sandbox.register"
+ ]
+ }
+ ],
+ "requestBody": {
+ "required": false,
+ "content": {
+ "application/json": {
+ "schema": {
+ "$ref": "#/components/schemas/live.agent-sandbox-worker-request.v1"
+ }
+ }
+ }
+ },
+ "parameters": [
+ {
+ "name": "id",
+ "in": "path",
+ "required": true,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "2XX": {
+ "description": "Success",
+ "content": {
+ "application/json": {
+ "schema": {
+ "$ref": "#/components/schemas/live.agent-sandbox-worker-result.v1"
+ }
+ }
+ }
+ },
+ "default": {
+ "description": "An error (RFC 9457 problem details)",
+ "content": {
+ "application/problem+json": {
+ "schema": {
+ "$ref": "#/components/schemas/errors.problem.v1"
+ }
+ }
+ }
+ }
+ }
+ }
+ },
"/api/streams/agent/{id}/state": {
"/api/streams/agent/{id}/state": {
"get": {
"get": {
"operationId": "get_api_streams_agent_id_state",
"operationId": "get_api_streams_agent_id_state",
@@ -3319,6 +3385,168 @@
@@ -3319,6 +3385,168 @@
}
}
}
}
},
},
+ "live.agent-sandbox-worker-request.v1": {
+ "title": "LiveAgentSandboxWorkerRequest",
+ "description": "live.agent-sandbox-worker-request@1 (Agent Streams S6): the body of POST /api/streams/agent/:id/plays/worker on OpenVibe.Live (capability live.agent_sandbox.register). It is the sandbox worker's own check-in: the worker says it is there and reports the isolation facts Live requires, and Live derives health only from that check-in (it stores no endpoint and never calls the worker). Only a first-party service token whose principal holds live.agent_sandbox.register may send it, and it names the person it works for in X-OV-Subject, who must own the stream. The owner's session, a desk ticket and a person token are refused. Live counts a check-in within the last minute as alive and requires isolation to say exactly: host_network false, credentials false, profile false, egress_proxy true, workspace 'ephemeral'. The worker may report more than these five facts (its own checks, limits and versions); Live reads only the five and stores the report it was given. A worker that cannot say each of the five is not registered at all.",
+ "type": "object",
+ "additionalProperties": false,
+ "required": [
+ "isolation"
+ ],
+ "properties": {
+ "worker_id": {
+ "type": "string",
+ "maxLength": 64,
+ "description": "The worker's name in its own records; not a secret and not an address."
+ },
+ "service": {
+ "type": "string",
+ "maxLength": 64,
+ "description": "The worker implementation that checked in (`codes-sandbox` for OpenVibe.Codes')."
+ },
+ "version": {
+ "type": "string",
+ "maxLength": 64
+ },
+ "ready": {
+ "type": "boolean",
+ "description": "The worker's own view of its health; Live's health is the check-in plus the isolation report, never this flag alone."
+ },
+ "reasons": {
+ "type": "array",
+ "maxItems": 10,
+ "items": {
+ "type": "string",
+ "maxLength": 500
+ },
+ "description": "Why the worker says it is not ready (its self-test's failures), for the owner's page."
+ },
+ "checks": {
+ "type": "object",
+ "additionalProperties": {
+ "type": "boolean"
+ },
+ "description": "The worker's self-test: one boolean per check it ran (the network namespace, the egress refusals, the cleaned environment, the host files, the capabilities, seccomp, the cgroup limits, the wipe)."
+ },
+ "checked_at": {
+ "type": [
+ "string",
+ "null"
+ ],
+ "format": "date-time",
+ "description": "When that self-test ran; null before the first one."
+ },
+ "isolation": {
+ "type": "object",
+ "additionalProperties": true,
+ "required": [
+ "host_network",
+ "credentials",
+ "profile",
+ "egress_proxy",
+ "workspace"
+ ],
+ "properties": {
+ "host_network": {
+ "const": false,
+ "description": "The sandbox has its own network namespace; it cannot reach the host's network."
+ },
+ "credentials": {
+ "const": false,
+ "description": "No credential of the host, the worker or the person is inside the sandbox."
+ },
+ "profile": {
+ "const": false,
+ "description": "No browser or desktop profile of the host's is mounted."
+ },
+ "egress_proxy": {
+ "const": true,
+ "description": "Its only way out is the worker's proxy, which applies the egress guard."
+ },
+ "workspace": {
+ "const": "ephemeral",
+ "description": "The workspace is the sandbox's own and is gone with the wipe."
+ }
+ }
+ },
+ "browser": {
+ "type": "boolean",
+ "description": "Whether this worker has the optional headless browser."
+ },
+ "capacity": {
+ "type": "integer",
+ "minimum": 1,
+ "description": "How many sandboxes it may run at once."
+ },
+ "active": {
+ "type": "integer",
+ "minimum": 0,
+ "description": "How many are running now."
+ },
+ "at": {
+ "type": "string",
+ "format": "date-time",
+ "description": "When the worker assembled the report."
+ }
+ }
+ },
+ "live.agent-sandbox-worker-result.v1": {
+ "title": "LiveAgentSandboxWorkerResult",
+ "description": "live.agent-sandbox-worker-result@1 (Agent Streams S6): the answer to POST /api/streams/agent/:id/plays/worker (capability live.agent_sandbox.register). It carries the worker's state for the stream's owner as Live now holds it: whether a healthy worker is registered, the code and the owner-facing reason when not, when the last check-in was, and how long a check-in counts (a minute). Live never returns an endpoint: there is none to return.",
+ "type": "object",
+ "additionalProperties": false,
+ "required": [
+ "worker"
+ ],
+ "properties": {
+ "worker": {
+ "type": "object",
+ "additionalProperties": false,
+ "required": [
+ "ready",
+ "stale_after_ms"
+ ],
+ "properties": {
+ "ready": {
+ "type": "boolean"
+ },
+ "code": {
+ "type": [
+ "string",
+ "null"
+ ],
+ "enum": [
+ "sandbox_worker_missing",
+ "sandbox_worker_stale",
+ "sandbox_worker_not_isolated",
+ null
+ ],
+ "description": "Why there is no healthy worker; null when ready is true."
+ },
+ "reason": {
+ "type": [
+ "string",
+ "null"
+ ],
+ "maxLength": 500,
+ "description": "The line the owner's page shows; null when ready is true."
+ },
+ "last_seen_at": {
+ "type": [
+ "integer",
+ "null"
+ ],
+ "minimum": 0,
+ "description": "The last check-in, in milliseconds since the epoch; null when the worker never checked in."
+ },
+ "stale_after_ms": {
+ "type": "integer",
+ "minimum": 1000
+ }
+ }
+ }
+ }
+ },
"live.agent-stream-create-request.v1": {
"live.agent-stream-create-request.v1": {
"title": "LiveAgentStreamCreateRequest",
"title": "LiveAgentStreamCreateRequest",
"description": "live.agent-stream-create-request@1 (the Agent Streams plan, S1): the body of POST /api/streams/agent on OpenVibe.Live (capability live.agent_stream.publish). It answers 201 with the stream (live.agent-stream@1) and the publish part (live.agent-stream-publish@1): { stream, publish }. The caller is the person's own session token, or a first-party service token acting for that person (a Node principal acting for its owner, Codes or Actor) that holds live.agent_stream.publish for the audience openvibe.live; Network grants it to exactly those principals. Never a developer-app token, never another person's stream. TITLE is the card's title, TASK says what the agent is doing and where that task lives, VISIBILITY says who may watch, and ALLOW_SITES is the optional list of hosts a browser desk may navigate to (a desk that leaves the list raises the curtain).",
"description": "live.agent-stream-create-request@1 (the Agent Streams plan, S1): the body of POST /api/streams/agent on OpenVibe.Live (capability live.agent_stream.publish). It answers 201 with the stream (live.agent-stream@1) and the publish part (live.agent-stream-publish@1): { stream, publish }. The caller is the person's own session token, or a first-party service token acting for that person (a Node principal acting for its owner, Codes or Actor) that holds live.agent_stream.publish for the audience openvibe.live; Network grants it to exactly those principals. Never a developer-app token, never another person's stream. TITLE is the card's title, TASK says what the agent is doing and where that task lives, VISIBILITY says who may watch, and ALLOW_SITES is the optional list of hosts a browser desk may navigate to (a desk that leaves the list raises the curtain).",
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.MediaHub API",
"title": "OpenVibe.MediaHub API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.MediaHub as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.MediaHub as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Media API",
"title": "OpenVibe.Media API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Media as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Media as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Network API",
"title": "OpenVibe.Network API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Network as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Network as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.News API",
"title": "OpenVibe.News API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.News as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.News as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenRestream API",
"title": "OpenRestream API",
- "version": "0.312.0",
- "description": "Routes of OpenRestream as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenRestream as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Play API",
"title": "OpenVibe.Play API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Play as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Play as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Quest API",
"title": "OpenVibe.Quest API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Quest as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Quest as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Report API",
"title": "OpenVibe.Report API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Report as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Report as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Reviews API",
"title": "OpenVibe.Reviews API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Reviews as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Reviews as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Run API",
"title": "OpenVibe.Run API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Run as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Run as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Search API",
"title": "OpenVibe.Search API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Search as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Search as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Services API",
"title": "OpenVibe.Services API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Services as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Services as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Sources API",
"title": "OpenVibe.Sources API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Sources as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Sources as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Space API",
"title": "OpenVibe.Space API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Space as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Space as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Tips API",
"title": "OpenVibe.Tips API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Tips as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Tips as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Today API",
"title": "OpenVibe.Today API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Today as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Today as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Tools API",
"title": "OpenVibe.Tools API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Tools as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Tools as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Trade API",
"title": "OpenVibe.Trade API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Trade as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Trade as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.VIP API",
"title": "OpenVibe.VIP API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.VIP as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.VIP as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Vision API",
"title": "OpenVibe.Vision API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Vision as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Vision as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Watch API",
"title": "OpenVibe.Watch API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Watch as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Watch as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Wiki API",
"title": "OpenVibe.Wiki API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Wiki as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Wiki as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Work API",
"title": "OpenVibe.Work API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Work as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Work as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -3,8 +3,8 @@
@@ -3,8 +3,8 @@
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"jsonSchemaDialect": "https://json-schema.org/draft/2020-12/schema",
"info": {
"info": {
"title": "OpenVibe.Zone API",
"title": "OpenVibe.Zone API",
- "version": "0.312.0",
- "description": "Routes of OpenVibe.Zone as the OpenVibe contracts describe them (openvibe-contracts 0.312.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
+ "version": "0.314.0",
+ "description": "Routes of OpenVibe.Zone as the OpenVibe contracts describe them (openvibe-contracts 0.314.0): each operation lists the capabilities it performs; a token for the service's audience must carry one of them unless the route is open. Generated by openvibe-contracts lib/openapi.js; do not edit.",
"license": {
"license": {
"name": "MIT",
"name": "MIT",
"identifier": "MIT"
"identifier": "MIT"
@@ -293405,6 +293405,115 @@ export interface LockerKeyChange {
@@ -293405,6 +293405,115 @@ export interface LockerKeyChange {
previous_fingerprint?: string;
previous_fingerprint?: string;
}
}
+/** [email protected] (owner: live) */
+/**
+ * live.agent-sandbox-worker-request@1 (Agent Streams S6): the body of POST /api/streams/agent/:id/plays/worker on OpenVibe.Live (capability live.agent_sandbox.register). It is the sandbox worker's own check-in: the worker says it is there and reports the isolation facts Live requires, and Live derives health only from that check-in (it stores no endpoint and never calls the worker). Only a first-party service token whose principal holds live.agent_sandbox.register may send it, and it names the person it works for in X-OV-Subject, who must own the stream. The owner's session, a desk ticket and a person token are refused. Live counts a check-in within the last minute as alive and requires isolation to say exactly: host_network false, credentials false, profile false, egress_proxy true, workspace 'ephemeral'. The worker may report more than these five facts (its own checks, limits and versions); Live reads only the five and stores the report it was given. A worker that cannot say each of the five is not registered at all.
+ */
+export interface LiveAgentSandboxWorkerRequest {
+ /**
+ * The worker's name in its own records; not a secret and not an address.
+ */
+ worker_id?: string;
+ /**
+ * The worker implementation that checked in (`codes-sandbox` for OpenVibe.Codes').
+ */
+ service?: string;
+ version?: string;
+ /**
+ * The worker's own view of its health; Live's health is the check-in plus the isolation report, never this flag alone.
+ */
+ ready?: boolean;
+ /**
+ * Why the worker says it is not ready (its self-test's failures), for the owner's page.
+ *
+ * @maxItems 10
+ */
+ reasons?:
+ | []
+ | [string]
+ | [string, string]
+ | [string, string, string]
+ | [string, string, string, string]
+ | [string, string, string, string, string]
+ | [string, string, string, string, string, string]
+ | [string, string, string, string, string, string, string]
+ | [string, string, string, string, string, string, string, string]
+ | [string, string, string, string, string, string, string, string, string]
+ | [string, string, string, string, string, string, string, string, string, string];
+ /**
+ * The worker's self-test: one boolean per check it ran (the network namespace, the egress refusals, the cleaned environment, the host files, the capabilities, seccomp, the cgroup limits, the wipe).
+ */
+ checks?: {
+ [k: string]: boolean | undefined;
+ };
+ /**
+ * When that self-test ran; null before the first one.
+ */
+ checked_at?: string | null;
+ isolation: {
+ /**
+ * The sandbox has its own network namespace; it cannot reach the host's network.
+ */
+ host_network: false;
+ /**
+ * No credential of the host, the worker or the person is inside the sandbox.
+ */
+ credentials: false;
+ /**
+ * No browser or desktop profile of the host's is mounted.
+ */
+ profile: false;
+ /**
+ * Its only way out is the worker's proxy, which applies the egress guard.
+ */
+ egress_proxy: true;
+ /**
+ * The workspace is the sandbox's own and is gone with the wipe.
+ */
+ workspace: "ephemeral";
+ [k: string]: unknown | undefined;
+ };
+ /**
+ * Whether this worker has the optional headless browser.
+ */
+ browser?: boolean;
+ /**
+ * How many sandboxes it may run at once.
+ */
+ capacity?: number;
+ /**
+ * How many are running now.
+ */
+ active?: number;
+ /**
+ * When the worker assembled the report.
+ */
+ at?: string;
+}
+
+/** [email protected] (owner: live) */
+/**
+ * live.agent-sandbox-worker-result@1 (Agent Streams S6): the answer to POST /api/streams/agent/:id/plays/worker (capability live.agent_sandbox.register). It carries the worker's state for the stream's owner as Live now holds it: whether a healthy worker is registered, the code and the owner-facing reason when not, when the last check-in was, and how long a check-in counts (a minute). Live never returns an endpoint: there is none to return.
+ */
+export interface LiveAgentSandboxWorkerResult {
+ worker: {
+ ready: boolean;
+ /**
+ * Why there is no healthy worker; null when ready is true.
+ */
+ code?: "sandbox_worker_missing" | "sandbox_worker_stale" | "sandbox_worker_not_isolated" | null;
+ /**
+ * The line the owner's page shows; null when ready is true.
+ */
+ reason?: string | null;
+ /**
+ * The last check-in, in milliseconds since the epoch; null when the worker never checked in.
+ */
+ last_seen_at?: number | null;
+ stale_after_ms: number;
+ };
+}
+
/** [email protected] (owner: live) */
/** [email protected] (owner: live) */
/**
/**
* live.agent-stream@1 (the Agent Streams plan, S1): an agent's own stream on OpenVibe.Live. It is a managed_streams row of kind 'agent' with the id ags_<ULID>; it never has a stream key and it never takes a normal slot (a second live one answers 409 live.agent_stream_limit). OWNER is the person the stream belongs to, CHANNEL their Live channel, and TASK says what the agent is doing and where that task lives. VISIBILITY is who may watch; MODE is how the stream is played (S1 accepts watch only) and STATE where it stands. CURTAIN is the desk's privacy screen: while it is up Live pauses every viewer's consumer, so a viewer sees 'Private screen' and never the reason (the reason stays in the owner's view). The card stays after the stream ends, with the last frame, the worked seconds and the VOD once it is recorded.
* live.agent-stream@1 (the Agent Streams plan, S1): an agent's own stream on OpenVibe.Live. It is a managed_streams row of kind 'agent' with the id ags_<ULID>; it never has a stream key and it never takes a normal slot (a second live one answers 409 live.agent_stream_limit). OWNER is the person the stream belongs to, CHANNEL their Live channel, and TASK says what the agent is doing and where that task lives. VISIBILITY is who may watch; MODE is how the stream is played (S1 accepts watch only) and STATE where it stands. CURTAIN is the desk's privacy screen: while it is up Live pauses every viewer's consumer, so a viewer sees 'Private screen' and never the reason (the reason stays in the owner's view). The card stays after the stream ends, with the last frame, the worked seconds and the VOD once it is recorded.
new file mode 100644
new file mode 100644
@@ -0,0 +1,21 @@
@@ -0,0 +1,21 @@
+{
+ "id": "live.agent_sandbox.register",
+ "version": "1.0",
+ "owner": "live",
+ "status": "active",
+ "visibility": "internal",
+ "description": "The chat plays sandbox worker checks in for the person it works for on OpenVibe.Live (Agent Streams S6): POST /api/streams/agent/:id/plays/worker. Only a first-party service token whose principal holds this capability may register one, and it names the person in X-OV-Subject, who must own the stream. The owner's own session, a desk ticket (wpt_) and a person token are refused: an owner who could register a worker would declare their own unisolated machine a sandbox, and the gate would mean nothing. The body is live.agent-sandbox-worker-request@1, the worker's own report; Live requires isolation to say exactly host_network false, credentials false, profile false, egress_proxy true and workspace 'ephemeral', and refuses a worker that does not. Health comes only from a check-in within the last minute; Live stores no endpoint, never calls the worker and never accepts an isolation code it cannot read. The capability is internal because no person or app calls it: OpenVibe.Codes' sandbox worker holds it through its own Network service client for the audience openvibe.live.",
+ "inputSchema": "live.agent-sandbox-worker-request@1",
+ "outputSchema": "live.agent-sandbox-worker-result@1",
+ "permissions": [
+ "live:write"
+ ],
+ "resourceConstraints": [
+ "owner"
+ ],
+ "quotaClass": "standard",
+ "events": [],
+ "implementedBy": [
+ "POST /api/streams/agent/:id/plays/worker"
+ ]
+}
@@ -47,6 +47,7 @@
@@ -47,6 +47,7 @@
"neighbourhood": "streams"
"neighbourhood": "streams"
},
},
"capabilities": [
"capabilities": [
+ "live.agent_sandbox.register",
"live.agent_stream.publish",
"live.agent_stream.publish",
"live.analytics.read",
"live.analytics.read",
"live.avatar.write",
"live.avatar.write",
@@ -1,6 +1,6 @@
@@ -1,6 +1,6 @@
{
{
"name": "openvibe-contracts",
"name": "openvibe-contracts",
- "version": "0.312.0",
+ "version": "0.314.0",
"description": "Machine-readable contracts for the OpenVibe network: schemas, manifests, ids, error envelope, capability checks.",
"description": "Machine-readable contracts for the OpenVibe network: schemas, manifests, ids, error envelope, capability checks.",
"main": "index.js",
"main": "index.js",
"types": "generated/typescript/index.d.ts",
"types": "generated/typescript/index.d.ts",