Commits
-
Events moves to openvibe.events: connect-src, stream URLs and shared 2.13.0 / sdk 0.35.0 in one change (plan T7) (#15)OpenVibers · 7 Oct 2026
7f14d88 -
openvibe-shared 2.12.0: the showcase home and the Frame footer set their font (they rendered serif) (#14)OpenVibers · 7 Oct 2026
82bd0ca -
Reviews: pins current (contracts 0.107.0, shared 2.11.0, sdk 0.34.0). (#13)OpenVibers · 7 Oct 2026
14fca97 -
Reviews: a product home built with the showcase kit above the entity list. (#11)OpenVibers · 7 Oct 2026
ce29e84 -
Pin openvibe-contracts v0.96.0 and drop the proposed-capability fallback (#10)OpenVibers · 5 Oct 2026
440a865 -
Adopt openvibe-publishing 1.3.0 and add /llms-full.txt with the site…OpenVibers · 4 Oct 2026
b21ffb8 -
Pin the openvibe-publishing tarball integrity in the lockfileOpenVibers · 4 Oct 2026
a81b835 -
Render Reviews pages through openvibe-publishing/layout shellOpenVibers · 4 Oct 2026
0b3aa79 -
Bump openvibe-shared v2.4.0 → v2.5.0 (#5)OpenVibers · 3 Oct 2026
38a6f36 -
Pin openvibe-shared to v2.4.0 in the manifest and lockfile (#4)OpenVibers · 3 Oct 2026
a24a5d2 -
Move Reviews errors and shutdown onto openvibe-sdk/service (#3)OpenVibers · 2 Oct 2026
bd447e9 -
Reviews on the Publishing 1.1.0 chassis (plan T9 J3): the Sources client, change cursor and pull loop, signed event consumer and normalisers come from openvibe-publishing/ingest; Reviews keeps its domain half (reviews/source-items.js, http/events.js). Migration 0002 seeds the chassis cursor once from the old state (continuity, never a reset to zero). The replaced reviews/sync.js, reviews/normalize.js and http/consumer.js are deleted; test/chassis.test.js proves nothing requires them and replays the Sources fixture against a golden captured from the pre-change code. npm test and test:pg 19/19.OpenVibers · 29 Sept 2026
e53a5dd -
Reviews moves between its pages without a reload (plan T11): openvibe-shared v2.2.0 boost swaps <main> styles-first with the shared transition, prefetching on intent, and does a normal load across a deploy (the ov-boost marker carries the release). The navbar's sign-in returns to the current page. Tests pin the marker, the boost tag and the login template (verified).OpenVibers · 29 Sept 2026
4054ffa -
The SQLite era is gone (on PostgreSQL since 2026-09-28; no compatibility kept): the one-time migrate-to-postgres script, REVIEWS_DB_PATH/dbPath (config, .env.example, systemd unit, test helpers), the unused better-sqlite3 dependency and its lockfile entries, and docs, docstrings and STATUS lines about SQLite or its rollback window. Reviewed independently (VERDICT: SHIP). npm test 15/15 test files passed.OpenVibers · 29 Sept 2026
34916a4 -
openvibe-shared v1.27.0 (from v1.25.0): an async route handler's rejection now reaches the error handler instead of ending the process. Express 4 leaves such a promise unhandled and Node 22 exits on it; instrument() now applies openvibe-shared/express-async. 1.26.0 adds async gauge collects. npm test: 15/15 test files passed.OpenVibers · 28 Sept 2026
298403f -
Reviews moves to PostgreSQL and Valkey (ADR-035, roadmap WS-X2, repository-pass group G1), async from end to end.OpenVibers · 28 Sept 2026
756f62e -
npm test no longer counts a skipped test as passed (roadmap WS-Q task 7; openvibe-shared/test-runner, Shared v1.25.0). test/run.js counted every file that exited 0 as passed, so a file that printed that it skipped its work and checked nothing still read as green. It is now the shared runner (same files, one at a time as before, 60 s timeout per file): a test prints "<label>: skipped (<why>)" for what it could not run, and that file is listed with ○ and its reasons and not counted as passed; --strict makes a skip fail the run. No test here skips anything. openvibe-shared is pinned at v1.25.0 (from v1.22.0; 1.23 and 1.24 add the web runtime, release-watch fixes and the readiness skip, and /api/ready answers as before because its db check really runs; README and STATUS.json follow). npm test (Node 22) 15/15.OpenVibers · 28 Sept 2026
8416fcb -
Per-actor rate limits on Reviews' /api/v1 and its forms (roadmap WS-R task 4, openvibe-sdk v0.12.0 limits). server/http/actor-limits.js makes one limiter per app and counts requests once req.actor is resolved and a route's capability guard passed, before any work (for a form, before its body is read). A person counts as user:usr_…, whether they use their own token or cookie, a first-party service names them in X-OV-Subject, or an app acts for them through on_behalf_of. A service or app acting as itself, such as OpenVibe.AI's summary proposals or an import service, counts by its principal. A signed-out caller counts by address, on writes only. Past a limit a route answers 429 problem+json rate_limited with Retry-After, logs one [Limits] line and counts reviews_rate_limited_total{limit,window}.OpenVibers · 28 Sept 2026
1cff36b -
Pins: openvibe-shared 1.20.0 -> 1.22.0 (realtime notification badge, off until a site turns it on; the unreachable-host browser check)OpenVibers · 26 Sept 2026
cfc37ac -
Pins: openvibe-shared 1.18.0 -> 1.20.0 (the update matrix and release manifest 1.2.0: client generations, the shell)OpenVibers · 26 Sept 2026
9b620b1 -
Pins: openvibe-shared 1.17.1 -> 1.18.0 (update telemetry: prompted count, sessions by generation)OpenVibers · 26 Sept 2026
01d7341 -
Pins: openvibe-shared 1.16.1 -> 1.17.1 (release notifications)OpenVibers · 26 Sept 2026
6a57a20 -
Pins: openvibe-shared 1.16.0 -> 1.16.1 (the OV mark stops animating when idle, hidden or off-screen)OpenVibers · 26 Sept 2026
cbf43f5 -
Pins: openvibe-shared 1.13.0 -> 1.16.0OpenVibers · 26 Sept 2026
ad96e46 -
Pins: openvibe-contracts 0.44.0 → 0.49.0, openvibe-shared 1.12.0 → 1.13.0, openvibe-sdk 0.9.1 → 0.11.0OpenVibers · 25 Sept 2026
42dbc0c -
Pins: openvibe-contracts 0.42.0 → 0.44.0 (Contracts 0.43.0 and 0.44.0 were released after the previous pin commit, leaving 0.42.0 two minors behind the pin-drift limit)OpenVibers · 25 Sept 2026
3aa08bb -
Pins: openvibe-contracts 0.38.0 → 0.42.0, openvibe-sdk 0.5.0 → 0.9.1; CI runs the pin-drift check (shared test and security workflows at 423fe51)OpenVibers · 25 Sept 2026
017c430 -
Staff powers from the contracts staff map (WS-D, ADR-022; Contracts 0.38.0): staff editors are staff.editorial.manage (admin; global_mods moderate but no longer edit entities), not a role list; REVIEWS_EDITORS stays the product's own editor role. test/staff-map.test.js fails on raw role checksOpenVibers · 24 Sept 2026
37b656f -
The OpenVibe Frame from this site's own pinned copy: /shared/* is served by openvibe-shared/serve (1.12.0) and every page references it by content hash (/shared/<file>?v=<hash>), so this site's pin decides what its pages run and its navbar and footer keep working while openvibe.network is down; openvibe-publishing 0.4.0 (openvibe-shared as a peer: one copy, no lockstep releases)OpenVibers · 24 Sept 2026
13f4628 -
The shared update system and one account UI, on the OpenVibe Frame (openvibe-shared 1.11.0, openvibe/frame): the home shows what shipped, /updates is the shared log and the footer links it; the shared navbar handles sign in and out (logoutUrl ends this site's session) and carries this site's account links in its menu, while the page's own account bar is only for no-JS visitorsOpenVibers · 24 Sept 2026
54c4d71