Commits
-
openvibe-shared v2.20.4 (was v2.20.3) (#28)OpenVibers · 10 Oct 2026
0b3fe17 -
openvibe-contracts v0.127.0 (was v0.126.0) (#27)OpenVibers · 10 Oct 2026
8a8a98a -
openvibe-shared v2.20.3 (was v2.20.0) (#26)OpenVibers · 10 Oct 2026
5bc19d3 -
openvibe-contracts v0.126.0 (was v0.122.1) (#23)OpenVibers · 10 Oct 2026
8a165f2 -
openvibe-shared v2.20.0 (was v2.17.0) (#22)OpenVibers · 9 Oct 2026
8bfa657 -
openvibe-contracts v0.122.1 (was v0.112.0) (#21)OpenVibers · 9 Oct 2026
6e133b3 -
openvibe-shared v2.17.0 (was v2.15.0) (#20)OpenVibers · 9 Oct 2026
68eac97 -
openvibe-shared v2.15.0 (was v2.13.2) (#19)OpenVibers · 8 Oct 2026
55d534d -
openvibe-shared v2.13.2 (was v2.13.0) (#17)OpenVibers · 8 Oct 2026
0866091 -
openvibe-sdk v0.35.0 (was v0.26.0) (#16)OpenVibers · 7 Oct 2026
abb22ce -
openvibe-contracts v0.112.0 (was v0.96.0) (#15)OpenVibers · 7 Oct 2026
bfdb21e -
Events moves to openvibe.events: connect-src, stream URLs and shared 2.13.0 in one change (plan T7) (#14)OpenVibers · 7 Oct 2026
4e34665 -
openvibe-shared 2.12.0: the showcase home and the Frame footer set their font (they rendered serif) (#13)OpenVibers · 7 Oct 2026
6837665 -
The Search front page opens with the showcase kit and browse-by-source cards (#12)OpenVibers · 5 Oct 2026
a50eba2 -
Pin openvibe-contracts v0.96.0 and fix the stale OAuth-client note (#11)OpenVibers · 5 Oct 2026
78379c7 -
Render Search pages through openvibe-shared/shell with a hashed inline…OpenVibers · 4 Oct 2026
a732124 -
Bump openvibe-shared v2.2.0 → v2.5.0 (#5)OpenVibers · 3 Oct 2026
9e40ad9 -
Move Search's shutdown onto openvibe-sdk/service gracefulStop (#4)OpenVibers · 2 Oct 2026
4d6e48c -
Search moves between its pages without a reload (plan T11): openvibe-shared v2.2.0 boost swaps <main> styles-first with the shared transition and does a normal load across a deploy (the ov-boost marker carries the release); page scripts that wire <main> also run on ov:boost:load. Tests pin the marker and the boost tag (verified).OpenVibers · 29 Sept 2026
eea0abe -
Network tokens verify with keys from openvibe-sdk/auth's JWKS client (v0.23.1) in place of the hand-written key store: fresh keys, the last good ones through a Network outage, backoff, and a rotation honoured on an unknown kid. Service tokens keep every openvibe-contracts verifyServiceToken rule (the key a token names first, else each key until one is not a bad signature); browsers' user JWTs verify with the SDK's verifyUserToken (principals refused as users, as before). Nothing public names the internal JWKS URL or the fetch error: a write's 503 says 'signing key not loaded yet' and /api/ready's network_jwks (still optional) reports counts and times only. OV_NETWORK_PUBLIC_KEY is gone (unset in production). Tests: a stub JWKS, an outage with cached keys and a rotated kid, and a JWKS that never loads (degraded, no leak in /api/ready or the 503). npm test 14/14, test:pg green.OpenVibers · 29 Sept 2026
a3235a5 -
The SQLite era is gone (on PostgreSQL since 2026-09-28; no compatibility kept): the one-time migrate-to-postgres script, the *_DB_PATH settings (config, .env.example, systemd unit, test helpers), the unused better-sqlite3 dependency and its lockfile entries, and docs, docstrings and STATUS lines about SQLite or its rollback window. Reviewed independently before shipping. npm test 12/12 test files passed.OpenVibers · 29 Sept 2026
7be6c42 -
Search moves to PostgreSQL (ADR-035, roadmap WS-X2, repository-pass group G2), with a PostgreSQL full-text engine.OpenVibers · 28 Sept 2026
fa45c65 -
npm test no longer counts a skipped test as passed (roadmap WS-Q task 7; openvibe-shared/test-runner, Shared v1.25.0). test/run.js counted every file that exited 0 as passed, so a file that printed that it skipped its work and checked nothing still read as green. It is now the shared runner (same files, one at a time as before, 60 s timeout per file): a test prints "<label>: skipped (<why>)" for what it could not run, and that file is listed with ○ and its reasons and not counted as passed; --strict makes a skip fail the run. No test here skips anything. openvibe-shared is pinned at v1.25.0 (from v1.22.0; 1.23 and 1.24 add the web runtime, release-watch fixes and the readiness skip, and /api/ready answers as before because its db check really runs). npm test (Node 22) 12/12.OpenVibers · 28 Sept 2026
04f9fd4 -
Per-actor rate limits at Search's API routes (roadmap WS-R task 4): openvibe-sdk v0.12.0 is now a dependency, and server/actor-limits.js makes one limiter per app. Owner routes count the service principal (svc:wiki); query and saved-search routes count the person, from their own token or the X-OV-Subject a delegating service vouches for, and a signed-out caller by address. A first-party service querying for its signed-out visitors is not counted, since it speaks for all of them and one budget would refuse its whole site. withViewer resolves the viewer first, so the limit runs after authentication and before the handler. Past a limit a route answers 429 problem+json rate_limited with Retry-After, logs one [limits] line and counts search_rate_limited_total{limit,window}.OpenVibers · 28 Sept 2026
8ed7667 -
Pins: openvibe-shared 1.20.0 -> 1.22.0 (realtime notification badge, off until a site turns it on; the unreachable-host browser check)OpenVibers · 26 Sept 2026
b00aa4c -
Pins: openvibe-shared 1.18.0 -> 1.20.0 (the update matrix and release manifest 1.2.0: client generations, the shell)OpenVibers · 26 Sept 2026
18e7c29 -
Pins: openvibe-shared 1.17.1 -> 1.18.0 (update telemetry: prompted count, sessions by generation)OpenVibers · 26 Sept 2026
74755cb -
Pins: openvibe-shared 1.16.1 -> 1.17.1 (release notifications)OpenVibers · 26 Sept 2026
f58f819 -
Pins: openvibe-shared 1.16.0 -> 1.16.1 (the OV mark stops animating when idle, hidden or off-screen)OpenVibers · 26 Sept 2026
91d2068 -
Pins: openvibe-shared 1.13.0 -> 1.16.0OpenVibers · 26 Sept 2026
e90cb82