Live may comment, moderate comments and publish Pulse items on Community (Wave 5); openvibe-contracts v0.7.0

ddiff --git a/package-lock.json b/package-lock.json
iindex 9424643f..cc71f0d9 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -20,7 +20,7 @@
          "helmet": "^8.1.0",
          "jsonwebtoken": "^9.0.0",
          "multer": "^1.4.5-lts.1",
--        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.5.1",
++        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.7.0",
          "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.0.0",
          "uuid": "^11.1.0",
          "web-push": "^3.6.7"
@@@ -1464,9 +1464,9 @@
        }
      },
      "node_modules/openvibe-contracts": {
--      "version": "0.5.1",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.5.1",
--      "integrity": "sha512-czQpWKEo8cY56Crj5l5Mv8r5vlIIj0vn/HMxv0OlIu5YTuSSlpvXyayYEfn3GQ5orDhaMIhOUlzmQMxUtWXaLA==",
++      "version": "0.7.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.7.0",
++      "integrity": "sha512-gUrjxbTy/HX0QMQGoDPphmFdwm7iitmNMMchs9tDSDGR47FRFHL/RgBgIKYR1S7M6ICu261YycFV8+YVglafXA==",
        "license": "AGPL-3.0-only",
        "dependencies": {
          "ajv": "^8.17.1",
ddiff --git a/package.json b/package.json
iindex 2444a20a..e16b8bb8 100644
---- a/package.json
++++ b/package.json
@@@ -23,7 +23,7 @@
      "helmet": "^8.1.0",
      "jsonwebtoken": "^9.0.0",
      "multer": "^1.4.5-lts.1",
--    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.5.1",
++    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.7.0",
      "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.0.0",
      "uuid": "^11.1.0",
      "web-push": "^3.6.7"
ddiff --git a/server/identity/principals.js b/server/identity/principals.js
iindex 7e027b41..55074172 100644
---- a/server/identity/principals.js
++++ b/server/identity/principals.js
@@@ -44,6 +44,11 @@ const DEFAULT_GRANTS = [
      ['live', 'community.paste.create', 'openvibe.community', []],
      ['live', 'community.paste.write', 'openvibe.community', []],
      ['live', 'community.paste.moderate', 'openvibe.community', []],
++    // Wave 5 remainder: Live comments on its own entities, publishes stream/VOD items to Pulse, and
++    // hides a thread when it takes the entity down.
++    ['live', 'community.comment.write', 'openvibe.community', []],
++    ['live', 'community.comment.moderate', 'openvibe.community', []],
++    ['live', 'community.pulse.write', 'openvibe.community', []],
  ];
  
  // Grants withdrawn by decision; applied at every boot so an old default can't come back.
ddiff --git a/test/principals.test.js b/test/principals.test.js
iindex 701b7def..12a4fbc6 100644
---- a/test/principals.test.js
++++ b/test/principals.test.js
@@@ -111,7 +111,7 @@ const server = http.createServer(app);
      const media = await token({ client_id: 'community', client_secret: 'community-secret', audience: 'openvibe.media' });
      assert.strictEqual(media.body.scope, 'media.object.upload', 'community may upload screenshot bytes to Media');
      const cm = await token({ client_id: 'live', client_secret: 'live-secret', audience: 'openvibe.community' });
--    assert.deepStrictEqual(cm.body.scope.split(' '), ['community.paste.create', 'community.paste.moderate', 'community.paste.write']);
++    assert.deepStrictEqual(cm.body.scope.split(' '), ['community.comment.moderate', 'community.comment.write', 'community.paste.create', 'community.paste.moderate', 'community.paste.write', 'community.pulse.write']);
  
      // ── Legacy key keeps working ──
      r = await post('/internal/coins/credit', credit(), { 'x-internal-key': 'legacy-key' });