Commits

main

T0 report — ovhost logs <svc [--tail n]OpenVibers · 1 Oct 2026 3e036ca
Host on openvibe-contracts v0.83.0, which releases host.site.config: the local 'proposed capability' path and docs/capabilities-proposal/ plus the service manifest proposal are gone; capabilities are checked by the library alone, and the contracts test now holds the routes, guards and emitted events to the released manifests. npm test 52/52.OpenVibers · 29 Sept 2026 dee29c4
Host: certificate lifecycle, per-site config, tenant sitemaps and preview deploys (plan T12 J1, J3, J4, J6; behind the loopback service until the launch).OpenVibers · 29 Sept 2026 4cbdf05
Host tells search engines when a hosted site changes (plan T11, IndexNow): with INDEXNOW_KEY set, a production site's deploy, rollback, domain change or removal pings the engines for that site (its root and sitemap); sandbox sites never; unset, nothing is sent. A dashboard performance budget runs in CI. Tests green (verified).OpenVibers · 29 Sept 2026 bf33758
Host moves between its pages without a reload (plan T11): openvibe-shared v2.2.0 boost swaps <main> styles-first with the shared transition, prefetching on intent, and does a normal load across a deploy (the ov-boost marker carries the release). The navbar's sign-in returns to the current page.OpenVibers · 29 Sept 2026 92e4727
Host on the service kit (plan T1): sign-in is openvibe-sdk/sso createSsoClient (state + PKCE S256, server-side exchange, next limited to this site and the Network), service tokens are checked by openvibe-sdk/auth verifyServiceToken (the key their kid names; sandbox tokens still confined to sandbox projects), the outbox is createServiceOutbox with Host's event-type list; server/auth/sso.js is deleted. Pins: openvibe-sdk v0.25.0, openvibe-contracts v0.79.0, openvibe-shared v2.0.0. Both suites green (verified).OpenVibers · 29 Sept 2026 4030fdc
Compatibility register: C-89 closed. The SQLite files of the 19 services on PostgreSQL (and older pre-migration backups, Billing's stale Live snapshot) are archived off-host (ovhost archive 20260929-124813, 44 files, restore verified) and deleted from the host (plan T1).OpenVibers · 29 Sept 2026 9feaac5
Compatibility register: the shared internal key is retired (C-50 to C-59 closed in one sweep, plan T2): Network, Live, Media, Tools and Shared on service tokens with per-route capabilities (Contracts v0.79.0), INTERNAL_API_KEY gone from every host env file (backup kept), Media's view hashes carried over by VIEW_HASH_SECRET. Games EDITOR_KEY is recorded as removed (3ea36b3).OpenVibers · 29 Sept 2026 6547316
Compatibility register: C-82 (OpenVibe.Realtime) is closed with nothing to migrate: the repository never carried code, its Contracts manifest was removed in Contracts v0.78.0, the repository is archived as ADR-005's decision record, and realtime.openvibe.network serves a closed notice (C-81 no longer lists it as a defect). Reviewed independently (VERDICT: SHIP).OpenVibers · 29 Sept 2026 93971d2
host.example.json: Games is on PostgreSQL (its ADR-0007 M1, OpenVibe.Games 540f672): databases world = ov_games, the preflight loads pg and openvibe-sdk/db instead of better-sqlite3, no generated dist-types (Games no longer tracks build output), the drill maps DATABASE_URL/DATABASE_DIRECT_URL to the scratch database with Valkey on a closed port and counts characters and mods. npm test 45/45. npm test 45/45 test files passed.OpenVibers · 29 Sept 2026 2e7d452
ovhost backs up and drills PostgreSQL services natively (every service but network, chat, tools, games and live is on PostgreSQL since 2026-09-28; the old inventory's SQLite paths no longer exist, so backups of those services had silently skipped). databases[] is a union: SQLite { name, path } or PostgreSQL { name, engine: postgresql, database: ov_* }, reached as the postgres OS user over peer auth (lib/dbengine.js; no service env value is read). Backup verifies pgBackRest every run (newest backup within 26 h, stanza ok, WAL archive failures not rising, else the service fails, never skips) and takes a pg_dump -Fc at most weekly (or --logical) for the existing off-site upload; restore-download checks .dump files with pg_restore --list. Drills restore the dump into a scratch database under a freshly generated role (pg_restore --no-owner --no-privileges --role), boot the release with DATABASE_URL and DATABASE_DIRECT_URL on the scratch database (direct port) and VALKEY_URL on a closed port, and refuse to start if any of the three would keep production's value or any PostgreSQL database is left unmapped; the scratch database and role are always dropped (dropdb --force, also after a failed stop), leftovers of a killed drill are swept first, free space is checked, and postgres can traverse the drill directory (0711). Probes gain postgresql-count, nginx tenants read ov_host over psql, metrics openvibe_backup_pg_verified and openvibe_pgbackrest_last_backup_age_seconds, alerts OpenVibeBackupSkipped and DataBackupStale. host.example.json converts the 19 PostgreSQL services (Media's drill also requires DATABASE_URL handling). Built by DeepSeek from the design brief, reviewed independently (FIX) and by Claude; every finding fixed here with tests (unmapped database refused, 0711 directory, leftovers swept, --force and --no-privileges). npm test 45/45. npm test 45/45 test files passed.OpenVibers · 29 Sept 2026 1157859
A database error while resolving a request's host now answers 500 instead of hanging the request: the async host-dispatch middleware (tenant.resolve/handle read PostgreSQL since ADR-035) had no error path, and Express 4 does not catch a rejected async handler, so the rejection was unhandled and the socket stayed open. The error reaches the app's error handler, counted as an unknown-host request. test/host-dispatch-error.test.js: resolve rejects -> 500 within 3 s, then the site serves 200 again. Found by the estate-wide floating-promise sweep; reviewed independently (VERDICT: SHIP). npm test 42/42 test files passed.OpenVibers · 29 Sept 2026 de873f6
C-89 openre: OpenRe.Stream's SQLite file after its switch to PostgreSQL (2026-09-28 23:32 UTC); archive and delete 2026-10-05.OpenVibers · 28 Sept 2026 37a2c1b
switch-service.sh takes SWITCH_UNITS (every unit to stop, patterns for per-release worker instances; the first one's environment runs the import), SWITCH_DIR (a release layout's origin is read from repo/) and SWITCH_AFTER (run after the deploy, e.g. OpenRe's deploy.sh workers): OpenRe.Stream and later Live are not one unit in /opt/openvibe.<svc>.OpenVibers · 28 Sept 2026 18faddc
C-89 media: Media's SQLite file after its switch to PostgreSQL (2026-09-28 22:54 UTC); archive and delete 2026-10-05.OpenVibers · 28 Sept 2026 217aa62
switch-service.sh waits for the service's protected sessions to be idle (two checks a minute apart, up to 12 hours) before stopping it: a Media switch must not cut a recording.OpenVibers · 28 Sept 2026 019d853
C-89 billing: Billing's SQLite ledger after its switch to PostgreSQL (2026-09-28 22:22 UTC); archive and delete 2026-10-05.OpenVibers · 28 Sept 2026 3ac6a09
Inventory: Media's recording guard reads recordings_in_progress from its /api/ready.OpenVibers · 28 Sept 2026 19662b5
Compatibility register: the C-89 community backup's name.OpenVibers · 28 Sept 2026 fe6f008
Compatibility register: C-89 community (Community on PostgreSQL since 2026-09-28 19:41 UTC).OpenVibers · 28 Sept 2026 1ae01db
Compatibility register: C-89 events (Events on PostgreSQL since 2026-09-28 18:31 UTC).OpenVibers · 28 Sept 2026 0d566b0
Compatibility register: C-89 ai and host. AI moved to PostgreSQL at 17:05 UTC (release af9166a; the first attempt stopped before importing and restarted the old release, as the switch script intends) and Host Stage B at 17:08 UTC (release 03d70e1); imports verified. Group G2 is complete: every service of G0-G2 serves from PostgreSQL. Their SQLite files stay read-only as the 7-day rollback, archived and deleted on 2026-10-05.OpenVibers · 28 Sept 2026 2c73902
Stage B readiness names the store: the db check makes a real round trip (db.ready) and reports postgresql or pglite with the pool, as the other services on PostgreSQL do.OpenVibers · 28 Sept 2026 f5fdf5d
Host Stage B moves to PostgreSQL and Valkey (ADR-035, roadmap WS-X2, repository-pass group G2), async from end to end.OpenVibers · 28 Sept 2026 03d70e1
Compatibility register: C-89 codes and vip. Codes moved to PostgreSQL at 16:09 UTC (release 6329b53) and VIP at 16:47 UTC (release 9ff4277), imports verified; their SQLite files stay read-only as the 7-day rollback, archived and deleted on 2026-10-05.OpenVibers · 28 Sept 2026 91064f1
Compatibility register: C-89 search and sources. Search moved to PostgreSQL at 15:41 UTC (release fa45c65, its full-text index rebuilt from the imported documents) and Sources at 16:00 UTC (release cee509c), imports verified; their SQLite files stay read-only as the 7-day rollback, archived and deleted on 2026-10-05.OpenVibers · 28 Sept 2026 9f5fd31
Compatibility register: C-89 trade and reviews. Trade moved to PostgreSQL at 15:03 UTC (release e140fcb) and Reviews at 15:05 UTC (release 756f62e), imports verified, with roles/data/switch-service.sh; group G1 is complete. Their SQLite files stay read-only as the 7-day rollback, archived and deleted on 2026-10-05.OpenVibers · 28 Sept 2026 7311963
roles/data/switch-service.sh: the production switch of one service from its SQLite file to PostgreSQL (ADR-035), as run for News, Deals, Coupons and Trade on 2026-09-28. It installs main as ubuntu in /var/tmp, stops the unit, keeps a read-only pre-postgres backup, runs that release's migrate-to-postgres.js (migrate, import, verify) with the unit's environment as ubuntu, starts the old release again on any failure, then unfreezes, deploys and makes the SQLite file read-only as the 7-day rollback (C-89).OpenVibers · 28 Sept 2026 b87f20f
Compatibility register: C-89 deals and coupons. Deals moved to PostgreSQL at 14:33 UTC (release 69d3e47) and Coupons at 14:42 UTC (release 040dc3e), imports verified; their SQLite files stay read-only as the 7-day rollback, archived and deleted on 2026-10-05.OpenVibers · 28 Sept 2026 34765b3
Compatibility register: C-89 news. News moved to PostgreSQL at 14:22 UTC (release cf653dd, import verified); its SQLite file stays read-only as the 7-day rollback, archived and deleted on 2026-10-05.OpenVibers · 28 Sept 2026 fbb00bd

More commits