Commits

main · .env.example

Code search: GitHub, Sourcegraph and forge, merged and ranked, with a cited deep mode (#274)OpenVibers · 3 days ago 188b714
Search Fabric hybrid ranking: pgvector embeddings of public documents through OpenVibe.AI, fused with the keyword rank by RRF (k 60); keyword ranking whenever vectors are not there, and explain says why (#126)OpenVibers · 16 days ago 0402cf1
The Search Fabric v1 (Contracts 0.225.0 search.fabric.query): POST/GET /api/v1/query over network, mine, web and the vertical scopes; the web ladder open index → DeepSeek (signed-in, daily cap) → Wikipedia through AI's research, cached by freshness; route.explain and cost; GET /api/v1/query/providers (#119)OpenVibers · 16 days ago 7c2b1b6
Serve /llms-full.txt route index and the IndexNow key fileOpenVibers · 4 Oct 2026 fe1f83c
Notify saved searches of new matches through Network behind a flagOpenVibers · 4 Oct 2026 de3bc9f
Network tokens verify with keys from openvibe-sdk/auth's JWKS client (v0.23.1) in place of the hand-written key store: fresh keys, the last good ones through a Network outage, backoff, and a rotation honoured on an unknown kid. Service tokens keep every openvibe-contracts verifyServiceToken rule (the key a token names first, else each key until one is not a bad signature); browsers' user JWTs verify with the SDK's verifyUserToken (principals refused as users, as before). Nothing public names the internal JWKS URL or the fetch error: a write's 503 says 'signing key not loaded yet' and /api/ready's network_jwks (still optional) reports counts and times only. OV_NETWORK_PUBLIC_KEY is gone (unset in production). Tests: a stub JWKS, an outage with cached keys and a rotated kid, and a JWKS that never loads (degraded, no leak in /api/ready or the 503). npm test 14/14, test:pg green.OpenVibers · 29 Sept 2026 a3235a5
The SQLite era is gone (on PostgreSQL since 2026-09-28; no compatibility kept): the one-time migrate-to-postgres script, the *_DB_PATH settings (config, .env.example, systemd unit, test helpers), the unused better-sqlite3 dependency and its lockfile entries, and docs, docstrings and STATUS lines about SQLite or its rollback window. Reviewed independently before shipping. npm test 12/12 test files passed.OpenVibers · 29 Sept 2026 7be6c42
Search moves to PostgreSQL (ADR-035, roadmap WS-X2, repository-pass group G2), with a PostgreSQL full-text engine.OpenVibers · 28 Sept 2026 fa45c65
Per-actor rate limits at Search's API routes (roadmap WS-R task 4): openvibe-sdk v0.12.0 is now a dependency, and server/actor-limits.js makes one limiter per app. Owner routes count the service principal (svc:wiki); query and saved-search routes count the person, from their own token or the X-OV-Subject a delegating service vouches for, and a signed-out caller by address. A first-party service querying for its signed-out visitors is not counted, since it speaks for all of them and one budget would refuse its whole site. withViewer resolves the viewer first, so the limit runs after authentication and before the handler. Past a limit a route answers 429 problem+json rate_limited with Retry-After, logs one [limits] line and counts search_rate_limited_total{limit,window}.OpenVibers · 28 Sept 2026 8ed7667
W14: removal purge queue, freshness ranking, saved searches, a search page and the public vhostOpenVibers · 23 Sept 2026 dd7bcab
Contracts proposal (search.index-document@1), capability and service manifest proposals, engine ADR, README, STATUS alpha W14, env example, systemd unit, nginx vhost, CI on Node 22.22.1OpenVibers · 23 Sept 2026 244d812