Commits
-
openvibe-shared v2.20.4 (was v2.20.3) (#29)OpenVibers · 10 Oct 2026
f9b9162 -
openvibe-contracts v0.127.0 (was v0.126.0) (#28)OpenVibers · 10 Oct 2026
64183d4 -
openvibe-shared v2.20.3 (was v2.20.0) (#26)OpenVibers · 10 Oct 2026
c5200c0 -
openvibe-contracts v0.126.0 (was v0.122.1) (#24)OpenVibers · 10 Oct 2026
bd1daef -
openvibe-shared v2.20.0 (was v2.17.0) (#23)OpenVibers · 9 Oct 2026
9f13874 -
openvibe-contracts v0.122.1 (was v0.112.0) (#22)OpenVibers · 9 Oct 2026
4147871 -
openvibe-shared v2.17.0 (was v2.15.0) (#21)OpenVibers · 9 Oct 2026
7a2365e -
Deals: account export and deletion (ADR-033) — watches, votes, name and rate windows deleted; contributed offers, prices, products and reports stay authorless; staff records kept; subscriptions at boot (SDK v0.37.0) (#20)OpenVibers · 9 Oct 2026
4e0898b -
openvibe-shared v2.15.0 (was v2.13.2) (#18)OpenVibers · 8 Oct 2026
370af7f -
openvibe-shared v2.13.2 (was v2.13.0) (#16)OpenVibers · 8 Oct 2026
1351a75 -
openvibe-sdk v0.35.0 (was v0.26.0) (#15)OpenVibers · 7 Oct 2026
db2ebe2 -
openvibe-contracts v0.112.0 (was v0.97.0) (#14)OpenVibers · 7 Oct 2026
8dba866 -
Events moves to openvibe.events: connect-src, stream URLs and shared 2.13.0 in one change (plan T7) (#13)OpenVibers · 7 Oct 2026
9ab1afd -
openvibe-shared 2.12.0: the showcase home and the Frame footer set their font (they rendered serif) (#12)OpenVibers · 7 Oct 2026
0de5a01 -
Deals: a product home built with the showcase kit above the hot list. (#10)OpenVibers · 7 Oct 2026
2eb6b15 -
Pin openvibe-contracts v0.97.0 and drop the proposed-capability shim (#9)OpenVibers · 5 Oct 2026
65f1a8d -
Adopt openvibe-publishing v1.3.0 and serve /llms-full.txtOpenVibers · 4 Oct 2026
75a7bf7 -
Restore openvibe-publishing v1.2.0 lock integrity and guard codeload…OpenVibers · 4 Oct 2026
f7cb264 -
Render every page through openvibe-publishing/layout on shared shellOpenVibers · 4 Oct 2026
79ee3d8 -
Bump openvibe-shared v2.4.0 → v2.5.0 (#5)OpenVibers · 3 Oct 2026
a7fcdc4 -
Pin openvibe-shared to v2.4.0 (#4)OpenVibers · 3 Oct 2026
3db0c08 -
Move Deals errors and shutdown onto openvibe-sdk/service (#3)OpenVibers · 2 Oct 2026
f1dfe61 -
Deals on the Publishing 1.1.0 chassis (plan T9 J4): the Sources client, change cursor and pull loop, signed event consumer, normalisers and publication glue come from openvibe-publishing/ingest and /publication; Deals keeps its domain half (server/domain/source-items.js, values.js, http/events.js). Migration 0002 seeds deals_ingest_cursor once from import_state (continuity, never a reset to zero). The replaced importer.js, util.js, http/internal.js and clients/sources.js are deleted. test/chassis.test.js proves nothing requires them and replays the Sources fixture against a golden captured from the pre-change code. npm test and test:pg green (verified).OpenVibers · 29 Sept 2026
c56acd8 -
Deals moves between its pages without a reload (plan T11): openvibe-shared v2.2.0 boost swaps <main> styles-first with the shared transition, prefetching on intent, and does a normal load across a deploy (the ov-boost marker carries the release). The navbar's sign-in returns to the current page.OpenVibers · 29 Sept 2026
2bcad35 -
Deals on the service kit (plan T1): sign-in is openvibe-sdk/sso createSsoClient (state + PKCE S256, server-side exchange, next limited to this site and the Network), service tokens are checked by openvibe-sdk/auth verifyServiceToken (the key their kid names), the outbox is createServiceOutbox; server/auth/sso.js and server/events/outbox.js are deleted. Pins: openvibe-sdk v0.25.1, openvibe-contracts v0.79.0, openvibe-shared v2.0.0. npm test and test:pg 15/15.OpenVibers · 29 Sept 2026
8d78e7e -
The SQLite era is gone (on PostgreSQL since 2026-09-28; no compatibility kept): the one-time migrate-to-postgres script, *_DB_PATH settings (config, .env.example, systemd unit, test helpers), the unused better-sqlite3 dependency and its lockfile entries, and docs, docstrings and STATUS lines about SQLite or its rollback window. Reviewed independently; its blockers (an edited applied migration, the lockfile) are resolved here, Host's inventory follow-up is separate. npm test 14/14 test files passed.OpenVibers · 29 Sept 2026
0fe6545 -
openvibe-shared v1.27.0 (from v1.25.0): an async route handler's rejection now reaches the error handler instead of ending the process. Express 4 leaves such a promise unhandled and Node 22 exits on it; instrument() now applies openvibe-shared/express-async. 1.26.0 adds async gauge collects. npm test: 14/14 test files passed.OpenVibers · 28 Sept 2026
450af16 -
Deals moves to PostgreSQL and Valkey (ADR-035, roadmap WS-X2, repository-pass group G1), async from end to end.OpenVibers · 28 Sept 2026
69d3e47 -
npm test no longer counts a skipped test as passed (roadmap WS-Q task 7; openvibe-shared/test-runner, Shared v1.25.0). test/run.js counted every file that exited 0 as passed, so a file that printed that it skipped its work and checked nothing still read as green. It is now the shared runner through run() (same files, one at a time as before, 60 s timeout per file, VERBOSE=1 still prints every file's output): a test prints "<label>: skipped (<why>)" for what it could not run, and that file is listed with ○ and its reasons and not counted as passed; --strict makes a skip fail the run. No test here skips anything. openvibe-shared is pinned at v1.25.0 (from v1.22.0; 1.23 and 1.24 add the web runtime, release-watch fixes and the readiness skip, and /api/ready answers as before because its db check really runs; README and STATUS.json follow). npm test (Node 22) 14/14.OpenVibers · 28 Sept 2026
0bf25e2 -
Per-actor rate limits on Deals' /api/v1 and its page forms (roadmap WS-R task 4, openvibe-sdk v0.12.0 limits). server/http/actor-limits.js makes one limiter per app and counts requests once req.viewer is resolved. A person counts as user:usr_…, whether they use their own token or cookie or a service names them in X-OV-Subject. A first-party service relaying a signed-out visitor counts by the address it forwards. A service or app acting as itself, such as svc:ai for deals.enrich_deal, counts by its principal. A signed-out caller counts by address. A first-party service reading for itself is not counted on reads. Past a limit a route answers 429 problem+json rate_limited with Retry-After before any work, including before the body is read, logs one [Limits] line and counts deals_rate_limited_total{limit,window}.OpenVibers · 28 Sept 2026
fa0582d