Commits

main

ADR-007 amendment 2026-09-26 (WS-S task 1): SQLite is the reviewed store for every service; Events, Chat and Billing measured on production (the busiest minute two orders of magnitude under SQLite's capacity; Billing's money paths serialised by the single writer) and the measured thresholds that would move a service to PostgreSQLOpenVibers · 26 Sept 2026 a1162486
v0.60.0: release manifest 1.2.0 (roadmap WS-P task 7, ADR-016 amendment 2): client_generation, min_client_generation (a tab below it reloads when safe, reason required) and shell { version, components } (a tab whose shell differs is prompted, never updated in place); fixturesOpenVibers · 26 Sept 2026 f3852ee9
v0.59.0: Media namespaces and grants (WS-G task 2): media.object.list and media.object.delete (public, namespace-scoped), media.object@1 and media.object-list@1OpenVibers · 26 Sept 2026 0c626d5d
Media namespaces and grants (roadmap WS-G task 2), unreleased: media.object.list and media.object.delete, public and active and namespace-scoped, so Media's five verbs (read, list, write, delete, transform) each have a capability per namespace. New contracts media.object@1 (a v2 object, with its namespace) and media.object-list@1 (a page of the object list), with fixtures; the Media manifest lists the new ids. media.derivative.create stays planned and says Media accepts it as the transform verb; media.lifecycle.read/transition say which verbs guard their routes. identity.service-token-claims@1 (description and a fixture): a developer app token's ns carries its project_id and app.<project_id>.*. Generated files regenerated. Additive (compat vs v0.58.0: no breaking changes); CHANGELOG under Unreleased, no version bumpOpenVibers · 26 Sept 2026 a4f281ae
v0.58.0 (continued): the release notification is its own event type, host.release.published@1; host.deploy.activated@1 is the tenant shape onlyOpenVibers · 26 Sept 2026 36d560ea
v0.58.0: host.deploy.activated@1, the release notification (WS-P task 9, ADR-016 amendment 1)OpenVibers · 26 Sept 2026 4988f126
v0.57.2: ADR-029 account merge, ADR-030 follow graph, ADR-031 S3-compatible surface (WS-B 5, WS-E 4, WS-N 8 decisions)OpenVibers · 26 Sept 2026 71296f39
v0.57.1: ADR-024 amendment 1 (theme preference stays Network data; reviewed community themes; allow-listed theme values; openvibe-theme@1 import/export)OpenVibers · 26 Sept 2026 ff4299d0
v0.57.0: chat.room.message.created (public rooms only, visibility public) and chat.room.message.deleted (redacts) with payload contracts and fixtures; Chat produces both (WS-I task 9)OpenVibers · 26 Sept 2026 740aa993
ADR index: ADR-005 row has one status cell (v0.56.1 left an empty extra cell)OpenVibers · 26 Sept 2026 22a8f1a9
v0.56.1: ADR-005 amendment 1: presence is ephemeral, in Chat's delivery plane (room user lists over its WebSocket, GET /api/chat/online for other products), never an Events topic; hidden or unknown reads offline. test/presence-policy.test.js (WS-F task 2)OpenVibers · 26 Sept 2026 158e70d2
v0.56.0: live.loyalty namespace (channel points per channel, Arena level and XP; private) and the loyalty-is-never-money policy test (WS-K task 9)OpenVibers · 26 Sept 2026 78971cbb
v0.55.1: lifecycle declarations follow the shutdown and fencing fixes (WS-P task 1 follow-ups); manifest text only. tools: every process, the gateway included, stops through the shared graceful stop (timers and workers, HTTP drain 4 s with Connection: close, usage flush, databases and pools, exit 0 within 5 s); games: deadlineSeconds 0 -> 10 (unit 30): refuse connections and upgrades, stop the simulation and timers, announce and close every socket with 1012 (each close saves the character), save the world, drain, await mirror, summaries and outbox, close world.db; community: subscriptions, profile and search scans, Discord relay and events outbox stopped with their work in flight awaited before the DB closes; media: leases fencing is a real lease_token matched by renew, checkpoint, succeed, fail and cancel, stale holders refused and counted; network: timers, pollers and the event relay stopped, analytics and DB closed, Connection: close drain (8 s); ai: the ai.run.* relay stopped after the runs drain. Generated OpenAPI carries the new versionOpenVibers · 26 Sept 2026 7aa1dc01
Lifecycle notes: Codes loses a keep-alive claim that does not hold on Node 19+ (server.close() closes idle connections); Network and Community say their unstopped timers end with the processOpenVibers · 26 Sept 2026 0ab89ffe
v0.55.0: lifecycle declarations (WS-P task 1): registry.service-manifest@1 gains an optional lifecycle block (liveness endpoint and what it proves; shutdown signal, deadlineSeconds, drains, workers, note; startupRecovery resumes by kind; rollback conditions, window and blockers; contracts.range; leases claims with holder, expiry and fencing; { none: reason } where a part does not apply), filled for all 31 manifests from each service's code and systemd units; tests: every manifest declares all six, running services have a concrete liveness (their health path) and shutdown, libraries none, contracts.range equals contractRanges, every lifecycle field is described; fixtures for a lifecycle, a library and five invalid shapesOpenVibers · 26 Sept 2026 22fd274e
Fixture: events.subscription-result's sample secret is now a plain placeholder (the made-up whsec_ value matched GitHub's Stripe webhook-secret pattern; it was never a real secret: not in any production env file or database)OpenVibers · 26 Sept 2026 afaacb14
v0.54.0: media.moderation.action (ADR-022, WS-D task 1): Media's staff actions on someone else's media (retention holds placed or released, staff deletions and visibility changes) as common.moderation-action@1, produced by media, consumed by networkOpenVibers · 26 Sept 2026 666cc084
gitleaks: allow the made-up credentials in seven capability-schema fixtures (github token, overlay and subscription secrets, stream keys), each matched on its path and exact valueOpenVibers · 26 Sept 2026 4336f129
v0.53.0: moderation audit for every service (WS-D task 1): common.moderation-action@1 and <service>.moderation.action for tools, games, wiki, blog, news, reviews, deals, coupons, trade and codes, produced by each and consumed by NetworkOpenVibers · 26 Sept 2026 47f783de
Moderation audit events for ten more producers (ADR-022, WS-D task 1): common.moderation-action@1 (action verb id, target { type, id, owner_subject? }, actor_subject; optional reason and details; never the content) and tools, games, wiki, blog, news, reviews, deals, coupons, trade and codes .moderation.action as thin schemas over it; each manifest produces its type and Network consumes all ten; fixtures and checks (unreleased)OpenVibers · 26 Sept 2026 2d0a8372
v0.52.0: common.config-snapshot@1 (WS-C task 7), one immutable revision of a service's configuration namespace: state, values with secrets as keyed fingerprints, classification, checksum over the values as shown, actor, reasonOpenVibers · 26 Sept 2026 4c885265
Config snapshots (WS-C task 7): common.config-snapshot@1, one immutable revision of one service's configuration namespace (service, namespace, revision and previous, proposed/active/superseded/rejected/rolled_back, values with secret-class keys as { redacted, fingerprint }: an HMAC-SHA256 under the namespace's secret key, never an unkeyed hash; per-key classification, a sha256 checksum of the values as shown, created/activated by and at, reason, error, copied_from); a rejected revision names its error and an active one when it activated; fixtures and cross-field checks (unreleased)OpenVibers · 26 Sept 2026 b5de6465
ADR-008 amendment (WS-C task 8): a library that builds on openvibe-shared takes it as an optional peer; a product installs exactly one copy per package root, checked by the shared CI pin-drift stepOpenVibers · 25 Sept 2026 cba16d2b
v0.51.0: OpenAPI 3.1 per service (WS-C task 6), generated from the capabilities: generated/openapi/<service>.json for 24 services (450 operations; request bodies, query parameters, 2XX schemas, problem+json errors, bearer security with the capabilities each route performs), index.json, openapi.index()/document(); validated as OpenAPI 3.1 in npm testOpenVibers · 25 Sept 2026 5735b155
v0.50.0: every active capability names an input and an output schema that match its routes (WS-C task 4): 162 gaps to 0, 313 new request, result and record schemas with fixtures, older references corrected; capability-schema test; ADR-028 expand/migrate/contract; search query and write schemasOpenVibers · 25 Sept 2026 14e49dfc
Capability schemas (WS-C task 4): every remaining reference that did not match its routes is corrected. codes.release.manage, community pulse/space/thread reads and comment writes, sources item and source reads, ai run reads and creates, events publish (one envelope or a batch), identity.subject.resolve, network.modules.write, media object read and upload, search queries and the owner API, and tools registry reads and job create/read now name request and result schemas with one branch per route (29 new, fixtures for each). The Tools assertions in test/run.js name the new ids (unreleased)OpenVibers · 25 Sept 2026 fed7c00a
Capability schemas (WS-C task 4): seven older references now describe what the routes really take and return. events.event.read answers events.read-result@1; codes.release.read answers codes.release-read-result@1; community.paste.create answers community.paste-create-result@1; community.post.create answers community.post-write-result@1 (forum-thread and forum-post records); community.pulse.write takes community.pulse-write-request@1; games.mod.manage takes games.mod-manage-request@1 and games.mod.read answers games.mod-read-result@1 (mod-view record). Fixtures for each (unreleased)OpenVibers · 25 Sept 2026 46f65177
Capability schemas (WS-C task 4) for News, Reviews and Host: news story, cluster, cluster audit and source item records with topic, story create/revise/publish/retract, source, perspective, timeline and cluster requests and results; reviews entity, signal, item, summary, summary revision, correction and link records with resolve, manage, merge, split, signal import, summary propose/publish and correction requests and results; host project, site, deploy and domain records with site, deploy and domain requests and results. Every active capability now has both schemas: gaps 22 -> 0 (178/178). CHANGELOG lists the 275 new schemas by owner (unreleased)OpenVibers · 25 Sept 2026 54d9f445
Capability schemas (WS-C task 4) for Deals and Trade: deals offer record, submissions, updates and price observations, actions, votes, flags, moderation, product resolve and watches; trade instrument, observation, alert rule, watchlist and context revision records, instrument management and resolve, observation writes, context reads and proposals, alerts and watchlists. 24 capabilities complete; gaps 46 -> 22 (unreleased)OpenVibers · 25 Sept 2026 6a58762e
Capability schemas (WS-C task 4) for Blog and Coupons: blog and post records, blog create/configure/theme, members, post create/update/publish/schedule/delete, post reads and the JSON Feed; coupons merchant and coupon records, host resolve, lookups, submissions, reports, status changes and merchant management. 18 capabilities complete; gaps 64 -> 46 (unreleased)OpenVibers · 25 Sept 2026 4691e87c

More commits