openvibe-shared v4.177.0 (was v4.173.0) (#376)

ddiff --git a/README.md b/README.md
iindex e918c4d..6867a26 100644
---- a/README.md
++++ b/README.md
@@@ -46,7 +46,7 @@ without `DATABASE_URL`, development uses an embedded PGlite database in `data/pg
    the account and revocation subscriptions)
  - Backblaze B2 and Cloudflare R2 (S3 API) when configured; `ffmpeg`/`ffprobe` on the host
  - `openvibe-contracts` v0.373.0, `openvibe-sdk` v0.125.0 (tokens, events outbox, usage readings, per-actor limits),
--  `openvibe-shared` v4.173.0, pinned by release tarball
++  `openvibe-shared` v4.177.0, pinned by release tarball
  
  ## Capabilities
  
@@@ -129,7 +129,7 @@ server/
                           storage.orphans.scan (monthly storage orphan report, service-wide, report only),
                           storage.move.cleanup (the alert for placement moves whose delete keeps failing, service-wide)
    client-ip.js           trust proxy = loopback; req.ip is the only client address
--(openvibe-shared v4.173.0, openvibe-contracts v0.373.0, openvibe-sdk v0.125.0: pinned release tarballs, installed by npm)
++(openvibe-shared v4.177.0, openvibe-contracts v0.373.0, openvibe-sdk v0.125.0: pinned release tarballs, installed by npm)
  scripts/smoke-test.sh    end-to-end smoke test (boots a temp instance)
  scripts/reconcile-objects.js / object-invariant.js / no-good-copy-report.js   object-model operator tools
  scripts/media-jobs.js     list jobs, run the size-invariant scan (dry run by default), approve/cancel proposals
@@@ -790,7 +790,7 @@ Rollback: ovhost puts the previous sha back by itself when `/api/ready` does not
  restart; afterwards `sudo ovhost rollback media --to <sha>`.
  
  <!-- versions:start -->
--- openvibe-contracts: v0.338.0
++- openvibe-contracts: v0.373.0
  - openvibe-sdk: v0.125.0
--- openvibe-shared: v4.173.0
++- openvibe-shared: v4.177.0
  <!-- versions:end -->
ddiff --git a/STATUS.json b/STATUS.json
iindex 0e36289..de9862f 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -6,9 +6,9 @@
    "runtime": "node 22, express, PostgreSQL 18 (openvibe-sdk/db, async) + Valkey 9, ffmpeg",
    "port": 4100,
    "domain": "openvibe.media",
--  "contracts": "openvibe-contracts v0.338.0",
++  "contracts": "openvibe-contracts v0.373.0",
    "sdk": "openvibe-sdk v0.125.0",
--  "shared": "openvibe-shared v4.173.0",
++  "shared": "openvibe-shared v4.177.0",
    "capabilities": [
      "media.object.upload",
      "media.object.read",
ddiff --git a/package-lock.json b/package-lock.json
iindex b9d2564..bf0d929 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -18,7 +18,7 @@
          "multer": "^1.4.5-lts.1",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.373.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.125.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.173.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.177.0",
          "pg": "^8.23.0",
          "sharp": "^0.33.4"
        },
@@@ -2166,9 +2166,9 @@
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "4.173.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.173.0",
--      "integrity": "sha512-VdIphRqtkexEU3GlF13277EpjIG4p60CzauQaMrJaAg/bgFF6go51lfRwy/MiR9mxBqXVZoxJUQinWKb3049VQ==",
++      "version": "4.177.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.177.0",
++      "integrity": "sha512-SA0N7z48/4blBszvVuuqlNVfFWiadZu6C+tY9IJPR8jvJqT04ml6zwsnd29o7TXSs1F7zLl+f6ETsSv6x9QYNA==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0",
ddiff --git a/package.json b/package.json
iindex f2b84df..af52218 100644
---- a/package.json
++++ b/package.json
@@@ -22,7 +22,7 @@
      "multer": "^1.4.5-lts.1",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.373.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.125.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.173.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.177.0",
      "pg": "^8.23.0",
      "sharp": "^0.33.4"
    },
ddiff --git a/test/perf-budget.test.js b/test/perf-budget.test.js
iindex cedaae3..4b24b4a 100644
---- a/test/perf-budget.test.js
++++ b/test/perf-budget.test.js
@@@ -14,7 +14,7 @@ const { measure, check, format } = require('openvibe-shared/perf-budget');
  (async () => {
      const BUDGETS = {
          htmlRawKB: 54.8, // 54.8: measured 52.8 with openvibe-shared 4.163.0, plus room for 4.162.0–4.163.0, 2026-11-09
--        htmlBrotliKB: 12.4,   // 12.4 with openvibe-shared 4.113.0 (2026-11-06: the kit's badge at 12 px and the room link's touch hit area); 12.1 with openvibe-shared 4.66.0: the mark with depth and motion, ov-fx loaded on request (2026-10-31); 10.8 openvibe-shared 4.22.0: the navbar's magnifier search button and More dropdown (search.js and loading.js load only when used); 9.7 on 2026-10-22; 5.0 before
++        htmlBrotliKB: 12.5,   // 12.5 with openvibe-shared 4.177.0 (2026-11-09: the menu Home grid, the model chip and the offer card); 12.4 with openvibe-shared 4.113.0 (2026-11-06: the kit's badge at 12 px and the room link's touch hit area); 12.1 with openvibe-shared 4.66.0: the mark with depth and motion, ov-fx loaded on request (2026-10-31); 10.8 openvibe-shared 4.22.0: the navbar's magnifier search button and More dropdown (search.js and loading.js load only when used); 9.7 on 2026-10-22; 5.0 before
          jsFiles: 4,   // 3
          // 2026-09-27: theme-loader (44.3 KB, 8.3 brotli) now comes from Media's own /shared (D42) instead of
          // openvibe.network, so it is counted here; the page itself did not grow.