Commits

main · package.json

openvibe-shared v2.20.0 (was v2.17.0) (#22)OpenVibers · 9 Oct 2026 de0a260
openvibe-contracts v0.122.1 (was v0.112.0) (#20)OpenVibers · 9 Oct 2026 159a517
openvibe-shared v2.17.0 (was v2.15.0) (#19)OpenVibers · 9 Oct 2026 6b9e8c6
openvibe-shared v2.15.0 (was v2.13.2) (#18)OpenVibers · 8 Oct 2026 5333cef
openvibe-shared v2.13.2 (was v2.13.0) (#16)OpenVibers · 8 Oct 2026 abaeb78
openvibe-sdk v0.35.0 (was v0.26.0) (#15)OpenVibers · 7 Oct 2026 c1c2b9f
openvibe-contracts v0.112.0 (was v0.97.0) (#14)OpenVibers · 7 Oct 2026 9097537
Events moves to openvibe.events: connect-src, stream URLs and shared 2.13.0 in one change (plan T7) (#13)OpenVibers · 7 Oct 2026 5f969bb
openvibe-shared 2.12.0: the showcase home and the Frame footer set their font (they rendered serif) (#12)OpenVibers · 7 Oct 2026 e66b6ff
Pin openvibe-contracts v0.97.0 and drop the proposed-capability shim (#11)OpenVibers · 5 Oct 2026 58546a1
Pin openvibe-shared v2.9.0 (from v2.6.0): showcase ring icons fill their slot (#10)OpenVibers · 5 Oct 2026 0ba890b
Add /llms-full.txt for indexable stories and adopt publishing v1.3.0OpenVibers · 4 Oct 2026 6f9ea2a
Render every page through openvibe-publishing/layout on shared shellOpenVibers · 4 Oct 2026 cd8d193
Bump openvibe-shared v2.4.0 → v2.5.0 (#5)OpenVibers · 3 Oct 2026 5ab185f
Bump openvibe-shared pin to v2.4.0 in package files (#4)OpenVibers · 3 Oct 2026 79ae5ab
Move News errors and shutdown onto openvibe-sdk/service (#3)OpenVibers · 2 Oct 2026 6d30b5e
News on the Publishing 1.1.0 chassis (plan T9 J2) with IndexNow and a CI performance budget (plan T11 decision 4): the Sources client, change cursor and pull loop, signed event consumer and normalisers come from openvibe-publishing/ingest; News keeps its domain half (domain/source-items.js, http/events.js). Migration 0002 seeds news_ingest_cursor once from news_state (continuity, never a reset to zero). The replaced clients/sources.js, domain/ingest.js, domain/text.js and http/webhook.js are deleted; test/chassis.test.js proves nothing requires them and replays the Sources fixture against a golden captured from the pre-change code. IndexNow (openvibe-shared/indexnow): the key file is served when INDEXNOW_KEY is set, and published or changed stories are pinged. test/perf-budget.test.js holds the home page to its measured sizes. npm test and test:pg green (verified).OpenVibers · 29 Sept 2026 99e3641
News moves between its pages without a reload (plan T11): openvibe-shared v2.2.0 boost swaps <main> styles-first with the shared transition, prefetching on intent, and does a normal load across a deploy (the ov-boost marker carries the release). The navbar's sign-in returns to the current page. test/layout.test.js pins the marker, the boost tag and the login template.OpenVibers · 29 Sept 2026 ff65515
News on the service kit (plan T1): sign-in is openvibe-sdk/sso createSsoClient (state + PKCE S256, server-side exchange, next limited to this site and the Network), service tokens are checked by openvibe-sdk/auth verifyServiceToken (the key their kid names), the outbox is createServiceOutbox; server/auth/sso.js and server/events/outbox.js are deleted. Pins: openvibe-sdk v0.25.0, openvibe-contracts v0.79.0, openvibe-shared v2.0.0. Both suites green (verified).OpenVibers · 29 Sept 2026 6023be4
The SQLite era is gone (on PostgreSQL since 2026-09-28; no compatibility kept): the one-time migrate-to-postgres script, *_DB_PATH settings (config, .env.example, systemd unit, test helpers), the unused better-sqlite3 dependency and its lockfile entries, and docs, docstrings and STATUS lines about SQLite or its rollback window. Reviewed independently before shipping. npm test 16/16 test files passed.OpenVibers · 29 Sept 2026 08c3e75
openvibe-shared v1.27.0 (from v1.25.0): an async route handler's rejection now reaches the error handler instead of ending the process. Express 4 leaves such a promise unhandled and Node 22 exits on it; instrument() now applies openvibe-shared/express-async. 1.26.0 adds async gauge collects. npm test: 16/16 test files passed.OpenVibers · 28 Sept 2026 79a851f
News moves to PostgreSQL and Valkey (ADR-035, roadmap WS-X2, repository-pass group G1), async from end to end.OpenVibers · 28 Sept 2026 cf653dd
npm test no longer counts a skipped test as passed (roadmap WS-Q task 7; openvibe-shared/test-runner, Shared v1.25.0). test/run.js counted every file that exited 0 as passed, so a file that printed that it skipped its work and checked nothing still read as green. It is now the shared runner through run() (same files, one at a time as before, 60 s timeout per file, VERBOSE=1 still prints every file's output): a test prints "<label>: skipped (<why>)" for what it could not run, and that file is listed with ○ and its reasons and not counted as passed; --strict makes a skip fail the run. No test here skips anything. openvibe-shared is pinned at v1.25.0 (from v1.24.0; STATUS.json follows, and the README, which still named v1.22.0). npm test (Node 22) 16/16.OpenVibers · 28 Sept 2026 cb6d79e
News's readiness has no fake green (roadmap WS-Q task 7, Shared v1.24.0). sources_pull answered ok ({ pull: 'off' }) when the pull was switched off and had never run, which verified nothing. It now reports skipped with the reason (NEWS_PULL_INTERVAL_MS=0 or NEWS_WORKER=off), never ok; a pull that ran and failed, or is due and has not run, still fails as before. openvibe-shared is pinned at v1.24.0 (from v1.22.0), named in STATUS.json. npm test 16/16.OpenVibers · 28 Sept 2026 2b8bcd1
Per-actor rate limits on News' /api/v1, the editor desk and the comment form (roadmap WS-R task 4, openvibe-sdk v0.12.0 limits). server/http/actor-limits.js makes one limiter per app and counts requests once req.viewer is resolved and a route's capability guard passed, before any work (for a write, before its body is read). A person counts as user:usr_…, whether they use their own token or cookie, a first-party service names them in X-OV-Subject, or an app acts for them through on_behalf_of. A service or app acting as itself counts by its principal; anyone else by address. Past a limit a route answers 429 problem+json rate_limited with Retry-After, logs one line and counts news_rate_limited_total{limit,window}.OpenVibers · 28 Sept 2026 8ab47a6
Pins: openvibe-shared 1.20.0 -> 1.22.0 (realtime notification badge, off until a site turns it on; the unreachable-host browser check)OpenVibers · 26 Sept 2026 0860cf2
Pins: openvibe-shared 1.18.0 -> 1.20.0 (the update matrix and release manifest 1.2.0: client generations, the shell)OpenVibers · 26 Sept 2026 90fbbad
Pins: openvibe-shared 1.17.1 -> 1.18.0 (update telemetry: prompted count, sessions by generation)OpenVibers · 26 Sept 2026 57c5ab3
Pins: openvibe-shared 1.16.1 -> 1.17.1 (release notifications)OpenVibers · 26 Sept 2026 9202f90
Pins: openvibe-shared 1.16.0 -> 1.16.1 (the OV mark stops animating when idle, hidden or off-screen)OpenVibers · 26 Sept 2026 48a339d

More commits