openvibers/openvibe.extensions STATUS.json
STATUS.json
| 1 | { |
| 2 | "repository": "OpenVibers/OpenVibe.Extensions", |
| 3 | "stage": "alpha", |
| 4 | "code": true, |
| 5 | "wave": "W18", |
| 6 | "plan": "OpenVibe End-to-End Realignment & Implementation Plan, revision 3 (20 Sep 2026)", |
| 7 | "adr": "OpenVibe.Contracts ADR-023 (first-party client surfaces)", |
| 8 | "version": "0.9.2", |
| 9 | "surfaces": { |
| 10 | "browser": { |
| 11 | "name": "OpenVibe Companion", |
| 12 | "version": "0.9.2", |
| 13 | "manifest": 3, |
| 14 | "targets": [ |
| 15 | "chromium >= 114", |
| 16 | "firefox >= 128" |
| 17 | ], |
| 18 | "api": "https://openvibe.coupons (OpenVibe.Coupons public API), https://openvibe.network (the Dock's state), https://openvibe.chat (the Dock's Chats tab), https://openvibe.codes (the Dock's agent view and its four controls); the agent embed is framed from https://openvibe.live", |
| 19 | "permissions": [ |
| 20 | "activeTab", |
| 21 | "identity", |
| 22 | "scripting", |
| 23 | "storage", |
| 24 | "sidePanel (Chrome only; Firefox needs no permission for sidebar_action)" |
| 25 | ], |
| 26 | "hostPermissions": [ |
| 27 | "https://openvibe.coupons/*", |
| 28 | "https://openvibe.network/*", |
| 29 | "https://openvibe.codes/*", |
| 30 | "https://openvibe.chat/*" |
| 31 | ], |
| 32 | "credential": "optional cpx_ install token (coupons.lookup, coupons.report); the Dock one-click OAuth public client (scopes dock, activity, chat.read; access in storage.session, rotating refresh in storage.local); the 0.7.0 pasted OpenVibe token is still accepted as a fallback until a later release", |
| 33 | "publishedToStores": false, |
| 34 | "loadedInChrome": "yes: headless Chrome 156 loads the 0.9.2 build via CDP Extensions.loadUnpacked; the side panel's Agents tab draws the Dock's agent view against a stubbed Network/Chat/Codes (the Live stream frame, the task line and meta, and Pause/Resume, Curtain now, Mute/Unmute and End) with its styles applied and no CSP refusal (scripts/check-panel.js); lib/autoapply.js passes three fixture checkout pages in headless Chrome; the one-click Dock sign-in is covered by test/auth.test.js", |
| 35 | "loadedInFirefox": "not yet loaded in a browser; Mozilla's web-ext lint (8.10.0, what AMO runs on upload) passes with 0 errors, 0 warnings and 0 notices, and runs in CI with warnings as errors", |
| 36 | "handoffs": [ |
| 37 | "https://openvibe.rent/board (keep a listing)", |
| 38 | "https://openvibe.rent/fair (check the rent)", |
| 39 | "https://openvibe.watch/watches/new (watch a page)", |
| 40 | "https://openvibe.food/delivery (compare delivery apps)", |
| 41 | "https://openvibe.reviews/save (a review site's rating, checked and saved on Reviews)" |
| 42 | ], |
| 43 | "storeBuilds": "npm run pack:stores: dist/openvibe-companion-<version>-chrome.zip and -firefox.zip, reproducible, audited", |
| 44 | "storeListing": "store/ (listing, privacy and permission answers, screenshot plan); support URL https://openvibe.coupons/companion", |
| 45 | "features": [ |
| 46 | "OpenVibe Dock one-click sign-in: public OAuth client companion (PKCE S256, no secret), read-only scopes dock/activity/chat.read, access token in storage.session, rotating refresh token in storage.local, Sign out revokes the family, the account page lists it under Signed-in apps", |
| 47 | "the OpenVibe Dock in the side panel (Chrome side_panel, Firefox sidebar_action): the released OpenVibe.Shared Dock 4.212.0 bundled under browser/shared/ (dock.js, dock-*.js, action-center.js, notification-*.js, agent-sheet.js, agent-session.js, ov-window.js, ov-float.js, ov-composer.js, ov-glyphs.js, brands.js, theme-loader.js, ov-mark.js, kit.css), reading and writing the same Network state as the Dock on a site, with the same tabs (Vibe, Agents, Chats, Activity), and re-reading it every 30 s so the page, the pop-out and the panel agree; the Agents tab draws the person's agent view with Pause/Resume, Curtain now, Mute/Unmute and End, and approvals/sends are hidden with the read-only scopes" |
| 48 | ], |
| 49 | "pending": [ |
| 50 | "owner: create the Chrome Web Store and AMO developer listings and upload the store zips with store/'s answers and screenshots; the Chrome id is fixed by browser/manifest.json key", |
| 51 | "Firefox: the extension loaded and run in a real Firefox (web-ext lint passes; nothing has run it yet)", |
| 52 | "use: on 2026-10-22 OpenVibe.Coupons had issued no install token and received no code report; it held 169 codes for 16 of its 37 merchants, all from the DealNews feed through OpenVibe.Sources", |
| 53 | "Codes/Live credential: the Dock's agent view now asks OpenVibe.Codes with the one-click OAuth token, but Codes' session check refuses the <network>/dock issuer, and Live's embed frame-ancestors allows first-party sites but not an extension origin; the view is bundled and verified against a stub, and needs one of those two to accept the extension before it shows in production" |
| 54 | ] |
| 55 | } |
| 56 | }, |
| 57 | "pending": [ |
| 58 | "owner: create the Chrome Web Store and AMO developer listings and upload the store zips with store/'s answers and screenshots; the Chrome id is fixed by browser/manifest.json key", |
| 59 | "Firefox: the extension loaded and run in a real Firefox (web-ext lint passes; nothing has run it yet)", |
| 60 | "use: on 2026-10-22 OpenVibe.Coupons had issued no install token and received no code report; it held 169 codes for 16 of its 37 merchants, all from the DealNews feed through OpenVibe.Sources", |
| 61 | "Codes/Live credential: the Dock's agent view now asks OpenVibe.Codes with the one-click OAuth token, but Codes' session check refuses the <network>/dock issuer, and Live's embed frame-ancestors allows first-party sites but not an extension origin; the view is bundled and verified against a stub, and needs one of those two to accept the extension before it shows in production" |
| 62 | ], |
| 63 | "deployed": false, |
| 64 | "features": [ |
| 65 | "OpenVibe Companion (Manifest V3): tries the coupon codes OpenVibe.Coupons knows on a checkout page", |
| 66 | "keeps a rental listing from any site on the OpenVibe.Rent board with the price, city and bedrooms the page states (read only when pressed), and checks its rent against the city median", |
| 67 | "watches a page on OpenVibe.Watch, and compares delivery apps on OpenVibe.Food", |
| 68 | "saves a review site's stated rating to OpenVibe.Reviews (read only when pressed, only on those sites)", |
| 69 | "an optional cpx_ install token, never an OpenVibe session; and the Dock one-click OAuth sign-in (scopes dock, activity, chat.read; access in storage.session, rotating refresh in storage.local; the 0.7.0 pasted token is still a fallback until a later release)", |
| 70 | "the OpenVibe Dock in the side panel (Chrome side_panel, Firefox sidebar_action): the released OpenVibe.Shared Dock 4.212.0 bundled under browser/shared/ (dock.js, dock-*.js, action-center.js, notification-*.js, agent-sheet.js, agent-session.js, ov-window.js, ov-float.js, ov-composer.js, ov-glyphs.js, brands.js, theme-loader.js, ov-mark.js, kit.css), reading and writing the same Network state as the Dock on a site, with the same tabs (Vibe, Agents, Chats, Activity), and re-reading it every 30 s so the page, the pop-out and the panel agree; the Agents tab draws the person's agent view with Pause/Resume, Curtain now, Mute/Unmute and End, and approvals/sends are hidden with the read-only scopes", |
| 71 | "store-ready: reproducible Chrome and Firefox store zips (npm run pack:stores), listing and privacy answers in store/, Mozilla web-ext lint in CI", |
| 72 | "kiosk companion (Firefox new-tab page and history bridge for Live's /kiosk), moved from OpenVibe.Live", |
| 73 | "hardware/: the Raspberry Pi streamer and controller scripts, moved from OpenVibe.Live" |
| 74 | ], |
| 75 | "updated": "2026-11-07" |
| 76 | } |
| 77 |