Commits

main · .env.example

The SQLite era is gone (on PostgreSQL since 2026-09-28; no compatibility kept): the one-time migrate-to-postgres script, *_DB_PATH settings (config, .env.example, systemd unit, test helpers), the unused better-sqlite3 dependency and its lockfile entries, and docs, docstrings and STATUS lines about SQLite or its rollback window. Reviewed independently before shipping. npm test 16/16 test files passed.OpenVibers · 29 Sept 2026 08c3e75
News moves to PostgreSQL and Valkey (ADR-035, roadmap WS-X2, repository-pass group G1), async from end to end.OpenVibers · 28 Sept 2026 cf653dd
Per-actor rate limits on News' /api/v1, the editor desk and the comment form (roadmap WS-R task 4, openvibe-sdk v0.12.0 limits). server/http/actor-limits.js makes one limiter per app and counts requests once req.viewer is resolved and a route's capability guard passed, before any work (for a write, before its body is read). A person counts as user:usr_…, whether they use their own token or cookie, a first-party service names them in X-OV-Subject, or an app acts for them through on_behalf_of. A service or app acting as itself counts by its principal; anyone else by address. Past a limit a route answers 429 problem+json rate_limited with Retry-After, logs one line and counts news_rate_limited_total{limit,window}.OpenVibers · 28 Sept 2026 8ab47a6
.env.example: names with a working default are commented (optional), so ovhost validate's from-example check requires only what the service cannot run withoutOpenVibers · 26 Sept 2026 8103b67
Staff powers from the contracts staff map (WS-D, ADR-022; Contracts 0.38.0): staff editors are staff.editorial.manage (admin, as before), not a role list; NEWS_EDITORS stays the product's own editor role. test/staff-map.test.js fails on raw role checksOpenVibers · 24 Sept 2026 b592ef0
Index gate needs two independent sources (NEWS_MIN_INDEPENDENT_SOURCES, default 2)OpenVibers · 23 Sept 2026 5a17e7f
Community comment threads on stories, referenced not copiedOpenVibers · 23 Sept 2026 0d95d9c
README (purpose, owns, does not own, depends on, grants, acceptance, launch rule, threat review, deploy), STATUS alpha W17, .env.example, deploy (systemd unit, nginx vhost on 4820), CI on Node 22.22.1 (contracts check continue-on-error until release)OpenVibers · 23 Sept 2026 7fd05ac