Commits

main

1.11.1: the footer's shipped line follows the footer's own service (a local or unmapped host showed the whole network); an id that is not a registry id falls back to the hostnameOpenVibers · 24 Sept 2026 d2dbacb
1.11.0: the OpenVibe Frame — the shared navbar, footer and shipped views are no longer called 'chrome': openvibe-shared/frame (chrome-ssr stays a deprecated alias until 2.0), /api/frame and /api/frame/hit, window.OpenVibeFrame (OpenVibeChrome aliases it), cache key ov_frame_v1; the theme loader's browser-UI colour sync is syncBrowserUi. No behaviour changeOpenVibers · 24 Sept 2026 78883bf
1.10.0: chrome-ssr shipped() (a home page's pill and recent changes), updatesBody() (a site's /updates page) and shippedScript(): the server-side half of the shared update system, so every site renders the same markupOpenVibers · 24 Sept 2026 16c66ef
1.9.0: one shipped/update-log system for every site (shipped.js latest/list/log views from data-ov-shipped markup, via the Network changelog proxy; the footer's 'shipped X ago' line and Updates link); fixes: the footer's empty signed-in bar (display:flex beat [hidden]) and 'Sign In' for signed-in people on sites with their own session (a stale or refused token now falls back to sessionUrl; logoutUrl ends the site session; {path} in login/logout URLs)OpenVibers · 24 Sept 2026 c5b47f3
1.8.0: shipped.js, 'Recently shipped' for any OpenVibe site from the network changelog on OpenVibe.Blog (per site or network-wide, each line linked to its commit, the latest Patch notes post linked); DOM nodes only, https links only, hidden when empty or failing; served at openvibe.network/shared/shipped.jsOpenVibers · 24 Sept 2026 cccccba
1.7.0: openvibe-shared/trace, one W3C trace across services: install(app) keeps each request's trace in AsyncLocalStorage and wraps fetch() so calls to loopback or OpenVibe hosts carry traceparent (new span) and X-OpenVibe-Request-Id; provider and user-chosen URLs are untouched; tested against a real loopback serverOpenVibers · 24 Sept 2026 f62f653
test workflow: apt-packages (e.g. ffmpeg for media tests) and several contracts-src directoriesOpenVibers · 24 Sept 2026 e8b0caf
Reusable test workflow (Track Q): .github/workflows/test.yml (workflow_call) runs install, node --check over server/ and scripts/, the tests, openvibe-contracts-check for the named service and optional extra commands, with the Node version production runs; repositories call it pinned to a commit instead of carrying copiesOpenVibers · 24 Sept 2026 f5e7e73
1.6.0: openvibe-shared/egress, the one SSRF rule for Live, Events and Tools (strictest union of their drifted copies: 3fff::/20, 5f00::/16, NAT64 /48, Teredo; connect-time safeLookup, assertPublicUrl, EgressDenied), tested down to a refused socket; release.collect() keys beacons by req.ip (behind the proxy every socket was 127.0.0.1, one bucket for the whole site) or keyOf(req); STATUS versionOpenVibers · 24 Sept 2026 644d4c3
SECURITY.md: how to report a vulnerability ([email protected], 7-day reply, scope, supported versions)OpenVibers · 24 Sept 2026 c7489fc
v1.5.1: touch and keyboard feedback in the shared chrome: the navbar, dropdowns, launcher, drawer and footer turn off the browser's blue tap highlight, press slightly (scale) and give keyboard focus one theme-accent ring; zero-specificity :where() rules, reduced motion dims insteadOpenVibers · 23 Sept 2026 ec5f31b
Contracts devDependency v0.31.0: the release-manifest 1.1.0 schema comes from the package; the interim fixture is goneOpenVibers · 23 Sept 2026 c272680
Release v1.5.0OpenVibers · 23 Sept 2026 81f840c
Track R (ADR-016, D42-D46): release manifests with components, open tabs updated in place, update metrics, and an N/N-1 mixed-version harnessOpenVibers · 23 Sept 2026 4b9e5d7
Release v1.4.0OpenVibers · 23 Sept 2026 c6405d4
Shared ADR 0001 (proposed): one package with explicit subpath exports, not a split into @openvibe/* packagesOpenVibers · 23 Sept 2026 6f61fbc
analytics: the ADR-021 module moves into Shared (register item 26, C-80); Sec-GPC/DNT requests are not recorded; analytics/event.v1 schemaOpenVibers · 23 Sept 2026 9aaf919
CI: reusable security workflow (gitleaks secret scan + npm/pnpm audit) for every OpenVibers repo, Track QOpenVibers · 23 Sept 2026 83c998b
Docs: STATUS.json and README match production (2026-09-23)OpenVibers · 23 Sept 2026 e009226
metrics test: let the event-loop histogram take a sample before the scrape (the p99 line is correctly absent with no samples; CI raced it)OpenVibers · 23 Sept 2026 f81e54b
metrics: event-loop lag excludes the sampling interval (an idle loop read ~20 ms before)OpenVibers · 23 Sept 2026 1173562
metrics: an array route is labelled by the plain member that matchedOpenVibers · 23 Sept 2026 31572ca
1.3.0: openvibe-shared/metrics (Prometheus registry, golden-signal HTTP middleware by route template, process metrics, release_info, loopback-only /metrics) and openvibe-shared/ready (named required/optional checks; degraded never reads as down)OpenVibers · 23 Sept 2026 59fa8f9
1.2.1: release-watch treats playing media and live capture as protectedOpenVibers · 23 Sept 2026 ed8f5d4
1.2.0: navbar.js loads release-watch.js after init (opt out with releaseWatch: false)OpenVibers · 23 Sept 2026 7136ff0
1.1.1: release-watch learns its baseline from /release.json when the page has no ov-release metaOpenVibers · 23 Sept 2026 7c9a373
1.1.0: release manifest (/release.json, openvibe-shared/release) and release-watch.js — open tabs are prompted on a new release and reload only when safe (ADR-016)OpenVibers · 23 Sept 2026 6c855ea
License: MIT, matching the package's history (a library other sites embed); services stay AGPL-3.0OpenVibers · 23 Sept 2026 9b53beb
README (consuming, releasing, compatibility), vendored-copy divergence audit, consumer migration plan; alphaOpenVibers · 23 Sept 2026 3d873ad
The repository root is the package: exports for every module, test runner, CI, v1.0.0 changelogOpenVibers · 23 Sept 2026 6806014

More commits