openvibers/openvibe.services Commits

openvibe-contracts v0.114.0 (was v0.113.0) (#8)

OP OpenVibers committed 8 Oct 2026 · 0084e7a074 · 4 files, +9 −9

Opened by scripts/pin-bump.js in OpenVibers/OpenVibe.Shared after the v0.114.0 release.

Changes

ddiff --git a/README.md b/README.md
iindex c5cdb52..bfe2cca 100644
---- a/README.md
++++ b/README.md
@@@ -102,7 +102,7 @@ There is no polling loop: the index reads the authorities on each request (step
  - **OpenVibe.Events** — the outbox relay publishes `services.app.*` with Services' service token (`events.event.publish`); the Events playground calls it with the app's token (`events.app.publish`); the project archive pulls the project's app events with a Network export token (`events.app.read`).
  - **OpenVibe.Media** — the Media playground uploads with the app's token into the project's namespace; the project archive lists the project's objects, namespaces and download URLs with a Network export token (`media.object.list`, `media.object.read`).
  - **PostgreSQL 18 and Valkey 9** (OpenVibe.Host `roles/data/`, ADR-035): every read and write is async through `openvibe-sdk/db`; Valkey holds the per-actor limit counters (optional).
--- **openvibe-contracts v0.113.0**, **openvibe-sdk v0.35.1**, **openvibe-shared v2.13.3** (pinned tag tarballs; the docs show the tag and the package version, and say so when they differ).
++- **openvibe-contracts v0.114.0**, **openvibe-sdk v0.35.1**, **openvibe-shared v2.13.3** (pinned tag tarballs; the docs show the tag and the package version, and say so when they differ).
  
  No path in Services sends or accepts a shared loopback key (tested by grep and at runtime).
  
@@@ -126,7 +126,7 @@ In Network (`server/identity/principals.js` / `server/db/database.js`, as for co
  - OAuth client `services`, name `OpenVibe.Services`, redirect URI `https://openvibe.services/auth/callback`.
  - Service grant `['services', 'events.event.publish', 'openvibe.events', []]` (the outbox relay).
  
--The Services service manifest, `services.release.manage|read`, `services.resource.read` and `services.app-manifest@1` are released in openvibe-contracts v0.113.0 (they replaced the `codes.*` forms, retired that release); the CI contracts check is blocking.
++The Services service manifest, `services.release.manage|read`, `services.resource.read` and `services.app-manifest@1` are released in openvibe-contracts v0.114.0 (they replaced the `codes.*` forms, retired that release); the CI contracts check is blocking.
  
  For the playgrounds to succeed end to end (not Services' code; configuration elsewhere): Network `DEV_SANDBOX_AUDIENCES` including `openvibe.media` and `openvibe.events`, a staff-set allowance containing `media.object.upload` and `events.app.publish` for the project, a Media tenant keyed by the project id, and OpenVibe.Events serving `events.app.publish` for app tokens. On 2026-09-23 these were in place on production: a sandbox app uploaded to Media (tenant `prj_…-sandbox`) and published and read app events through public endpoints. That run used curl, not the playgrounds, and it is not yet a committed, repeatable check.
  
@@@ -233,7 +233,7 @@ Reporting a vulnerability: [SECURITY.md](SECURITY.md).
  Part of the [OpenVibe network](https://openvibe.network). Built in the open by [OpenVibers](https://github.com/OpenVibers).
  
  <!-- versions:start -->
--- openvibe-contracts: v0.113.0
++- openvibe-contracts: v0.114.0
  - openvibe-sdk: v0.35.1
  - openvibe-shared: v2.13.3
  <!-- versions:end -->
ddiff --git a/STATUS.json b/STATUS.json
iindex a48f095..ac6bccb 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -7,7 +7,7 @@
    "runtime": "node 22, express 4, PostgreSQL 18 (openvibe-sdk/db)",
    "port": 4930,
    "domain": "openvibe.services",
--  "contracts": "openvibe-contracts v0.113.0",
++  "contracts": "openvibe-contracts v0.114.0",
    "sdk": "openvibe-sdk v0.35.1",
    "shared": "openvibe-shared v2.13.3",
    "packages": [
ddiff --git a/package-lock.json b/package-lock.json
iindex f34a82f..9239197 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -16,7 +16,7 @@
          "express-rate-limit": "^7.5.0",
          "helmet": "^8.1.0",
          "iovalkey": "^0.4.0",
--        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.113.0",
++        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.114.0",
          "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.35.1",
          "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.3",
          "pg": "^8.23.0"
@@@ -890,9 +890,9 @@
        }
      },
      "node_modules/openvibe-contracts": {
--      "version": "0.113.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.113.0",
--      "integrity": "sha512-HdSr3C27r29ciHabb8cFqqZ0658Ki3zbYSz1461xjO4knktweGgJsefJnhGTx7iQBbbJ7XDCAUoTnvouuotNYg==",
++      "version": "0.114.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.114.0",
++      "integrity": "sha512-MLtahxYztHGzN09L0D6TuXzPoueuqb/6+v9QVivaaGMO92PDhGK3Q9mg9f0oWX6pYa+iL25Au5sI2MEK0spsRw==",
        "license": "AGPL-3.0-only",
        "dependencies": {
          "ajv": "^8.17.1",
ddiff --git a/package.json b/package.json
iindex 7df7af6..45b552e 100644
---- a/package.json
++++ b/package.json
@@@ -27,7 +27,7 @@
      "express-rate-limit": "^7.5.0",
      "helmet": "^8.1.0",
      "iovalkey": "^0.4.0",
--    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.113.0",
++    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.114.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.35.1",
      "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v2.13.3",
      "pg": "^8.23.0"