Commits

main · SECURITY_AUDIT.md

Live: chat's robot commands drive the channel's OpenVibe.Bot robot; Live's robot controls are deleted; the phone chat sheet is full width again (#119)OpenVibers · 14 Oct 2026 95faead4
Analytics comes from openvibe-shared/analytics (v1.4.0; retires C-80): Live's hand-copied ADR-021 module in server/analytics/ is deleted, server/index.js requires the package (retention: false kept; the jobs.js analytics-prune job still runs retention.pruneRawEvents), scripts/analytics-prune.js is a thin wrapper over openvibe-shared/analytics/prune-cli (default $ANALYTICS_DB, else data/analytics.db; backups are now owner-only), test/analytics-privacy.test.js tests the package. New with v1.4.0: a request with Sec-GPC: 1 or DNT: 1 is not recorded at all (no raw row, visitor hash, session id or rate counter), noted in README and docs/architecture.md; SECURITY_AUDIT.md's analytics row points at the package (roll-ups still synchronous; the prune is 30 days in bounded batches)OpenVibers · 23 Sept 2026 c893c6ca
openvibe-shared is the pinned OpenVibe.Shared v1.0.0 release: /shared/* serves the package's own browser-file list (now with nav-icons.js and user-card.js) from node_modules, vendor/openvibe-shared is goneOpenVibers · 23 Sept 2026 c9af7800
Restreams end with their source; RobotStreamer state, errors and progress reach the dashboard; SRT destinationsOpenVibers · 17 Sept 2026 1ba082d8
Themes v2 re-sync (derived --on-accent etc.), :root on-accent white; audit: TURN now short-lived in productionOpenVibers · 17 Sept 2026 f39994ce
Docs: voice chat security fixes in the audit; friendly global chat and chat rendering in chat-system.mdOpenVibers · 17 Sept 2026 b3d61d45
node-media-server logs errors only: its info lines printed stream keysOpenVibers · 17 Sept 2026 54c5abe0
Stream keys no longer public; pages load only what their route needs; safe deploysOpenVibers · 17 Sept 2026 8fa04ccc
Initial OpenVibe releaseOpenVibers · 17 Aug 2026 ac0d6a47