Commits
-
Sources: GitHub repositories (code), star history and the code API (#284)OpenVibers · 24 h ago
dd27cde -
Sources: the read-only GitHub token is an owner setting (sources.data_sources) (#219)OpenVibers · 6 days ago
5ada3fd -
List your store on OpenVibe: merchant opt-in with DNS or meta proof, terms note, withdrawal (#136)OpenVibers · 15 days ago
c38cb1e -
Source access is computed from evidence (ADR 0007): probe.mjs writes evidence/<domain>.json for 29 shops; 12 ok get enabled crawl adapters, 6 structured-only get disabled ones (Lane 1), 11 queued go to compliance/review-queue.yaml; the crawler identifies as OpenVibeBot/1.0 (compatible form) and obeys robots groups, meta and X-Robots-Tag for OpenVibeBot or OpenVibeSources; ADR 0006 records the crawl type (#131)OpenVibers · 16 days ago
acc2073 -
Sources: sec-company-tickers, SEC's ticker/CIK/exchange list as instrument items (#62)OpenVibers · 29 days ago
00e875b -
Network tokens verify with keys from openvibe-sdk/auth's JWKS client (v0.23.1) in place of Sources' own key store: the last good keys through a Network outage, backoff, a rotation honoured on an unknown kid. Every service-token rule stays openvibe-contracts' verifyServiceToken (claims schema, sandbox refused, issuer, audience, expiry), tried with the key the token names, else each key. Nothing public names the internal JWKS URL or the fetch error: a 503 says 'signing key not loaded yet' (the real error is logged), and /api/ready's network_jwks (still optional) reports counts and times only. OV_NETWORK_PUBLIC_KEY is gone (unset in production). Tests: a stub JWKS, an outage with cached keys, an unreachable JWKS without leaks. npm test and test:pg green.OpenVibers · 29 Sept 2026
4bea21f -
The SQLite era is gone (on PostgreSQL since 2026-09-28; no compatibility kept): the one-time migrate-to-postgres script, *_DB_PATH settings (config, .env.example, systemd unit, test helpers), the unused better-sqlite3 dependency and its lockfile entries, and docs, docstrings and STATUS lines about SQLite or its rollback window. Reviewed independently; its blockers (an edited applied migration, the lockfile) are resolved here, Host's inventory follow-up is separate. npm test 11/11 test files passed.OpenVibers · 29 Sept 2026
eab2714 -
Sources moves to PostgreSQL (ADR-035, roadmap WS-X2, repository-pass group G2), async from end to end.OpenVibers · 28 Sept 2026
6f68dd5 -
Per-actor rate limits on Sources' /api/v1 (roadmap WS-R task 4; openvibe-sdk v0.12.0 is now a dependency). server/api/actor-limits.js counts each request by the principal that passed the route's capability guard (req.principal.sub: svc:news, app:app_…), before any work. Past a limit a route answers 429 problem+json rate_limited with Retry-After, logs one [limits] line and counts sources_rate_limited_total{limit,window}.OpenVibers · 28 Sept 2026
351383e -
Contracts proposals (sources.source@1, sources.item@1), capability and service manifest proposals, README, STATUS alpha W14, env example, systemd unit, nginx vhost, CI on Node 22.22.1OpenVibers · 23 Sept 2026
65b893b