Commits

main

Merge main into agent/bump-openvibe-shared-v2.3.1-mupvaa5x (auto-finish)OpenVibers · 1 Oct 2026 0c214f32
Merge main into wip/t4-live-pg-s1 (auto-finish)OpenVibers · 1 Oct 2026 cee5f96b
finish-f2: Changed: Added narrow, file-scoped allowances for the…OpenVibers · 1 Oct 2026 3fd8665f
Merge pull request #4 from OpenVibers/agent/live-branch-wip-t3-drop-emotes-pr-1-of-183459-mupvj8yzOpenVibers · 1 Oct 2026 0299cc9a
finish-f1: One caveat I could not close here: I could not run the…OpenVibers · 1 Oct 2026 cec6788b
Merge origin/agent/bump-openvibe-shared-v2.3.1-mupvaa5x into agent/bump-openvibe-shared-v2.3.1-mupvaa5xOpenVibers · 1 Oct 2026 b54bc11a
CI green on main: openvibe-contracts v0.83.0 and a gitleaks allowlist for the site-config fixtureOpenVibers · 1 Oct 2026 325232e4
finish-f1: Changed: package.json and package-lock.json; left uncommitte…OpenVibers · 1 Oct 2026 982f82e4
finish-f1: test / test: Updated [package.json](/home/workstation/openvi…OpenVibers · 1 Oct 2026 a044d08e
Updated [package.json](/home/workstation/openvibe/agents/worktrees/Open…OpenVibers · 1 Oct 2026 d323dc96
Bump openvibe-shared v1.30.1 → v2.3.1OpenVibers · 1 Oct 2026 f08ddcd5
Pin openvibe-shared to v2.3.1 to clear the pin-drift checkOpenVibers · 1 Oct 2026 c442a01c
finish-f1: test / test: Updated the Contracts pin to v0.79.0; the contr…OpenVibers · 1 Oct 2026 e67b2986
finish-f1: test / test: Updated [package.json](/home/workstation/openvi…OpenVibers · 1 Oct 2026 e78e4f79
Tests: old-release checkouts get a process-unique worktree name, so parallel test files no longer contend on one .git/worktrees/<name>/index.lockOpenVibers · 1 Oct 2026 124c1a0e
Add gated PostgreSQL page analytics sliceOpenVibers · 1 Oct 2026 dc6eb160
Drop Live emotes table after Chat handoffOpenVibers · 1 Oct 2026 185b4d7b
N-1 fixtures re-recorded from fb3957f, the release now in production (npm run n-1:record).OpenVibers · 29 Sept 2026 b3b93dbf
Live T3 N+2: Live's copies of seven chat tables are dropped, and robot commands from chat pass the control gate.OpenVibers · 29 Sept 2026 fb3957f3
N-1 fixtures re-recorded from 8654ef6, the release now in production (npm run n-1:record).OpenVibers · 29 Sept 2026 3bb29769
Live's T3 N+1 release: the staged-table machinery, Live's chat-AI job and the old emote and channel-moderation routes are deleted (plan T3 step 5; OpenVibe.Chat has written the six tables since 14:46 UTC and serves their APIs).OpenVibers · 29 Sept 2026 8654ef6b
N-1 fixtures re-recorded from 8cead36, the release now in production (npm run n-1:record).OpenVibers · 29 Sept 2026 50eab3bd
Live reads the six chat tables from Chat (plan T3 step 3; Chat has been their writer since 14:46 UTC): server/chat/moderation-client.js asks Chat's internal read API (chat.moderation.read, service token, 30 s cache, a failure answers 'not a moderator' and defaults, off under LIVE_DRILL) for channel moderation, the channels a person moderates and emote counts; permissions are async on that client (sync peeks for the few paths that cannot await, warming the cache); setup-progress, the about page, clip moderation and account data read through it or leave the six to Chat; the dashboard, channel page and uploads call Chat's /api/chat/channels/… and /api/chat/ai/… directly; donation and goal alert sounds are played by Chat (bridge op playAlertSound); the channel rows Chat reads carry emote_sources and a channel-emote-sources effect writes them; the emote asset backfill and user_tags reader are gone. Live's old emote and channel-moderation routes stay one release for N-1 (they write through the bridge to Chat). New tests for the client and the alert op. npm test 154/156, 2 skipped (verified).OpenVibers · 29 Sept 2026 8cead363
Live reaches Media with its own service token (plan T4, Media cleanup D8): media-client and the lineage media source send a client-credentials token for audience openvibe.media (media.object.read/list/upload/delete on namespace live), one shared cached client, off under LIVE_DRILL, X-OV-User-Id unchanged; MEDIA_API_KEY is gone from code, docs and tests. test/media-service-token.test.js drives the token path, reuse, no-secret and the retired key never being sent. npm test 153/154, 1 skipped.OpenVibers · 29 Sept 2026 06f752af
Stream thumbnails may be embedded by other OpenVibe sites (Cross-Origin-Resource-Policy: cross-origin on /api/thumbnails): the network's front door shows who is live with their current frame. Everything else keeps helmet's same-origin policy.OpenVibers · 29 Sept 2026 971b3cd0
N-1 fixtures re-recorded from 6e7ed60, the release now in production (npm run n-1:record).OpenVibers · 29 Sept 2026 97b15888
No floating promises left in Live (plan T0, the shared checker reports 0): the control socket awaits handleCommand so a rejection is caught and logged; the Kick and YouTube chat-relay connects stay fire-and-forget but log their rejections; the calls into functions that catch their own errors are marked '// floating-ok: <why>'. A regression test drives both fixed paths with rejecting dependencies (logged, never unhandled). npm test 152/153, 1 skipped (verified).OpenVibers · 29 Sept 2026 6e7ed605
N-1 fixtures re-recorded from 66f590b, the release now in production (npm run n-1:record).OpenVibers · 29 Sept 2026 c56e9c49
X-Internal-Key is gone from Live (plan T2, step 3 of the sweep): every internal route takes only a Network service token with the capability it performs (live.avatar.write, live.url_registry.refresh, live.analytics.read, live.chat_mirror.write for Chat's staged-table handoff), loopback only. server/net/internal-key.js and config.internalApiKey are deleted; the proxy rule lives in service-guard.js. Network already sends its token on every call to Live (79a4eea). Tests: the retired key opens nothing (alone or beside a bad token), a token through the public edge is refused, and no server file reads or sends the key. SETUP, README, .env.example and the API docs describe the service token. npm test 151/152, 1 skipped.OpenVibers · 29 Sept 2026 66f590b7
N-1 fixtures re-recorded from bea231e, the release now in production (npm run n-1:record).OpenVibers · 29 Sept 2026 71829e5e

More commits