openvibers/openvibe.shared Commits

Next-step cards in the showcase kit and the traffic-between-products ADR; release 2.10.0 (#19)

OP OpenVibers committed 5 Oct 2026 · tag v2.10. · 0 files, +0 −0

* Next-step cards in the showcase kit and the traffic-between-products ADR; release 2.10.0

D94 (plan T11): sites send people to each other on purpose.

- docs/adr/0002-traffic-between-products.md (proposed): the next-step card
  fields (to, what, text, href, from, embed), the referral tag ov_from with
  nothing about the person, shareable result pages (explicit share,
  unguessable id, noindex unless published, product retention), embeds and
  badges (live-rendered SVG plus a proof page that re-checks the fact at
  request time; a signed form only when someone needs offline checks), and
  quests (progress computed by each owning service).
- showcase.nextSteps({ id, title, lede, items }): up to four cards, each a
  real link (https or a site path only), the target's ring icon and "on
  OpenVibe.X", the referral tag before any fragment, an optional "Embed it"
  link; unusable items are left out, no items render ''. Styled in
  showcase.css (rebuilt).
- Test: escaping, unsafe and protocol-relative links refused, the tag, the
  cap of four, the embed link.

* nextSteps: a site path with a backslash, tab or newline is refused (review)