openvibers/openvibe.sdk Commits

SDK 0.35.2: the mock developer platform grants services.release.* (contracts 0.113.0) (#23)

OP OpenVibers committed 8 Oct 2026 · be4019dac1 · 8 files, +30 −21

* SDK 0.35.2: the mock developer platform grants services.release.manage|read (contracts 0.113.0 moved the console to OpenVibe.Services)

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01K8AYn3FF3HE7CPfM262qdh

* SDK 0.35.2: the version constant and the browser bundle

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01K8AYn3FF3HE7CPfM262qdh

---------

Co-authored-by: Claude Opus 5.5 <[email protected]>

Changes

ddiff --git a/CHANGELOG.md b/CHANGELOG.md
iindex 235e430..68523c2 100644
---- a/CHANGELOG.md
++++ b/CHANGELOG.md
@@@ -3,6 +3,13 @@
  All notable changes to `openvibe-sdk`. The package follows semver; while it is `0.x`, a minor
  release may change an API and says so here.
  
++## 0.35.2 (2026-10-08)
++
++- **The mock developer platform grants `services.release.manage|read` (`openvibe-sdk/testing`, patch):** openvibe-contracts
++  0.113.0 moved the developer console from OpenVibe.Codes to OpenVibe.Services and retired `codes.release.*`; the mock's
++  app catalog follows, so a developer-path run against it requests the names Network grants. Pins openvibe-contracts
++  v0.113.0.
++
  ## 0.35.1 (2026-10-08)
  
  - **A PGlite test database no longer keeps its process alive (`openvibe-sdk/testing`, patch):** PGlite emulates
ddiff --git a/README.md b/README.md
iindex 683c38d..7cc3739 100644
---- a/README.md
++++ b/README.md
@@@ -2,14 +2,14 @@
  
  > Supported browser and server clients for the OpenVibe platform.
  
--**Status:** alpha, v0.35.1 (roadmap Wave 2; developer apps from Wave 20; Media objects v2 from Wave 4; the Tools platform API; Search, Chat and AI clients from WS-F task 4; per-actor limits from WS-R task 4). Every release is tagged (see [CHANGELOG.md](CHANGELOG.md)). Tested against local stub servers and the built-in mock platform only, never against the live platform. Services pin release tags; each repository's `STATUS.json` names the one it uses.
++**Status:** alpha, v0.35.2 (roadmap Wave 2; developer apps from Wave 20; Media objects v2 from Wave 4; the Tools platform API; Search, Chat and AI clients from WS-F task 4; per-actor limits from WS-R task 4). Every release is tagged (see [CHANGELOG.md](CHANGELOG.md)). Tested against local stub servers and the built-in mock platform only, never against the live platform. Services pin release tags; each repository's `STATUS.json` names the one it uses.
  **Plan:** OpenVibe End-to-End Realignment & Implementation Plan, revision 3 (20 Sep 2026), §3.2; roadmap §30.  
  **License:** MIT ([LICENSE](LICENSE)). This package is a library that apps outside the network embed, so it uses MIT. The OpenVibe services themselves stay AGPL-3.0.
  
  **If a capability is not in the SDK, it is not public.** Apps call services through `openvibe-sdk` and never build internal routes themselves. A route with no SDK wrapper is internal, even when you can reach it, and it can change without notice. To make a capability public, first define it in OpenVibe.Contracts, then wrap it here.
  
  ```bash
--npm install https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.35.1
++npm install https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.35.2
  ```
  
  It has no runtime dependencies. It needs Node ≥ 20, or any browser with `fetch`, Web Crypto and `TextDecoder`. There is no build step. The package is CommonJS with ESM entry points (`import` works). Each subpath has its own `.d.ts`. For a page with no bundler, `browser/openvibe-sdk.mjs` is one self-contained ES module of the browser-safe subpaths (see [Browser without a bundler](#browser-without-a-bundler)). It does not depend on `openvibe-contracts` at runtime: it copies the contract types it uses (from Contracts v0.86.0, a devDependency the tests check them against).
@@@ -517,5 +517,5 @@ Nothing at runtime. `openvibe-contracts` v0.86.0 and `better-sqlite3` are devDep
  Part of the [OpenVibe network](https://openvibe.network). Built in the open by [OpenVibers](https://github.com/OpenVibers).
  
  <!-- versions:start -->
--- openvibe-contracts: v0.112.0
++- openvibe-contracts: v0.113.0
  <!-- versions:end -->
ddiff --git a/STATUS.json b/STATUS.json
iindex 55cd302..f26358f 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -3,11 +3,11 @@
    "stage": "alpha",
    "code": true,
    "wave": "W2",
--  "version": "0.35.1",
++  "version": "0.35.2",
    "plan": "OpenVibe End-to-End Realignment & Implementation Plan, revision 3 (20 Sep 2026), §3.2; roadmap §30",
    "deployed": false,
    "deployment": "none: a package released as git tags; services and apps pin a tag",
--  "contracts": "openvibe-contracts v0.112.0 (devDependency; runtime contracts range >=0.5.0 <1.0.0)",
++  "contracts": "openvibe-contracts v0.113.0 (devDependency; runtime contracts range >=0.5.0 <1.0.0)",
    "features": [
      "core client: retries, timeouts, problem+json errors, trace propagation",
      "auth: service and app tokens, PKCE, offline verification, revocation cutoffs",
ddiff --git a/browser/openvibe-sdk.mjs b/browser/openvibe-sdk.mjs
iindex 1e36e92..cc29e64 100644
---- a/browser/openvibe-sdk.mjs
++++ b/browser/openvibe-sdk.mjs
@@@ -1,4 +1,4 @@
--// Generated by scripts/browser-bundle.js from browser.js (openvibe-sdk 0.35.1, MIT). Do not edit.
++// Generated by scripts/browser-bundle.js from browser.js (openvibe-sdk 0.35.2, MIT). Do not edit.
  // One self-contained ES module: core at the top level plus the browser-safe subpaths as namespaces
  // (auth, registry, modules, realtime, media, community, bot, search, chat, ai, jobs, tools, projects, geo). No server-only code: no service tokens, JWT verification, events, identity.
  /* eslint-disable */
@@@ -42,7 +42,7 @@ const { paginate, offsetPager } = __load(7);
  const semver = __load(6);
  
  /** The package version (test/version.test.js keeps it equal to package.json). */
--const SDK_VERSION = '0.35.1';
++const SDK_VERSION = '0.35.2';
  
  module.exports = {
      createClient,
ddiff --git a/package-lock.json b/package-lock.json
iindex d58148a..01122ef 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -1,18 +1,18 @@
  {
    "name": "openvibe-sdk",
--  "version": "0.35.1",
++  "version": "0.35.2",
    "lockfileVersion": 3,
    "requires": true,
    "packages": {
      "": {
        "name": "openvibe-sdk",
--      "version": "0.35.1",
++      "version": "0.35.2",
        "license": "MIT",
        "devDependencies": {
          "@electric-sql/pglite": "^0.5.8",
          "better-sqlite3": "^11.10.0",
          "iovalkey": "^0.4.0",
--        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.112.0",
++        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.113.0",
          "pg": "^8.23.0"
        },
        "engines": {
@@@ -459,9 +459,9 @@
        }
      },
      "node_modules/openvibe-contracts": {
--      "version": "0.112.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.112.0",
--      "integrity": "sha512-ujIdCjv+oHfwg/+Hw0tyt2erVnornjDiKVPN8snHvybfysR/DBZQ2G32bQj8oAaK90s12ADEpdrXT1eust3eAw==",
++      "version": "0.113.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.113.0",
++      "integrity": "sha512-HdSr3C27r29ciHabb8cFqqZ0658Ki3zbYSz1461xjO4knktweGgJsefJnhGTx7iQBbbJ7XDCAUoTnvouuotNYg==",
        "dev": true,
        "license": "AGPL-3.0-only",
        "dependencies": {
ddiff --git a/package.json b/package.json
iindex 4e33378..f3dcf87 100644
---- a/package.json
++++ b/package.json
@@@ -1,6 +1,6 @@
  {
    "name": "openvibe-sdk",
--  "version": "0.35.1",
++  "version": "0.35.2",
    "description": "Supported browser and server clients for the OpenVibe platform: auth (incl. developer apps), registry discovery, identity, user modules, events, realtime, media, community, Bot robots, search, chat, AI runs, Tools (registry, run API and jobs), VIP memberships and developer projects, the async PostgreSQL data layer (db) and the Valkey cache, limits store, queue and pub/sub, with deadlines, safe retries, problem errors and trace propagation.",
    "main": "index.js",
    "types": "types/index.d.ts",
@@@ -287,14 +287,14 @@
      "@electric-sql/pglite": "^0.5.8",
      "better-sqlite3": "^11.10.0",
      "iovalkey": "^0.4.0",
--    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.112.0",
++    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.113.0",
      "pg": "^8.23.0"
    },
    "peerDependencies": {
--    "pg": "^8.23.0",
      "@electric-sql/pglite": "^0.5.8",
++    "better-sqlite3": ">=11",
      "iovalkey": "^0.4.0",
--    "better-sqlite3": ">=11"
++    "pg": "^8.23.0"
    },
    "peerDependenciesMeta": {
      "pg": {
ddiff --git a/src/core/index.js b/src/core/index.js
iindex c2add68..08a7d64 100644
---- a/src/core/index.js
++++ b/src/core/index.js
@@@ -8,7 +8,7 @@ const { paginate, offsetPager } = require('./paginate');
  const semver = require('./semver');
  
  /** The package version (test/version.test.js keeps it equal to package.json). */
--const SDK_VERSION = '0.35.1';
++const SDK_VERSION = '0.35.2';
  
  module.exports = {
      createClient,
ddiff --git a/src/testing/developer.js b/src/testing/developer.js
iindex 68733fe..d47186f 100644
---- a/src/testing/developer.js
++++ b/src/testing/developer.js
@@@ -24,14 +24,16 @@ const RANK = { viewer: 1, developer: 2, admin: 3, owner: 4 };
  const ENV_POLICIES = { sandbox: ['sandbox'], 'sandbox+production': ['sandbox', 'production'] };
  
  /**
-- * Capabilities that are public + active in openvibe-contracts v0.28.0, the ones Network grants to
-- * apps (network.project.manage is public but planned, so not grantable).
++ * Capabilities that are public + active, the ones Network grants to apps (network.project.manage is public but
++ * planned, so not grantable). openvibe-contracts 0.113.0 renamed codes.release.* to services.release.* (the developer
++ * console moved to OpenVibe.Services).
   */
  const DEFAULT_APP_CATALOG = [
--    'codes.release.manage', 'codes.release.read', 'community.paste.create', 'community.post.create',
++    'community.paste.create', 'community.post.create',
      'events.app.publish', 'events.app.read', 'events.app.subscribe',
      'games.mod.read', 'games.prop.place', 'games.world.announce',
      'media.object.read', 'media.object.upload',
++    'services.release.manage', 'services.release.read',
      'tools.job.cancel', 'tools.job.create', 'tools.job.read',
      'vip.perk.list', 'vip.plan.list',
  ];