openvibers/openvibe.tips Commits

openvibe-sdk v0.43.0 (was v0.42.0) (#40)

OP OpenVibers committed 11 Oct 2026 · 4d41fa92e0 · 5 files, +9 −9

* openvibe-sdk v0.43.0 (was v0.42.0)

Opened by scripts/pin-bump.js in OpenVibers/OpenVibe.Shared after the v0.43.0 release.

* Events deliveries are { event } (no sequence number since Events#60): the refusal says so

Changes

ddiff --git a/README.md b/README.md
iindex bcd0ea0..15c0744 100644
---- a/README.md
++++ b/README.md
@@@ -452,6 +452,6 @@ Part of the [OpenVibe network](https://openvibe.network). Built in the open by [
  
  <!-- versions:start -->
  - openvibe-contracts: v0.129.0
--- openvibe-sdk: v0.42.0
++- openvibe-sdk: v0.43.0
  - openvibe-shared: v3.0.1
  <!-- versions:end -->
ddiff --git a/STATUS.json b/STATUS.json
iindex 426791b..ff4e5dc 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -10,7 +10,7 @@
    "deployment": "Deployed internally, not launched: deployed with `sudo ovhost deploy tips`, /opt/openvibe.tips, unit openvibe-tips, 127.0.0.1:4610 loopback only; https://openvibe.tips still serves the OpenVibe.Sites placeholder. Principal tips; Events subscriptions billing.transaction.* and billing.receipt.* -> /internal/events (secret rotated 2026-09-24); TIPS_CHAT_ADAPTER is empty (no chat side effects); TIPS_CHAT_ADAPTER=chat delivers through OpenVibe.Chat's ingress once tips is granted chat.message.send, chat.event.publish and identity.subject.resolve.",
    "database": "PostgreSQL 18 through PgBouncer (transaction mode) as the system of record, Valkey 9 for shared state (per-actor limits, overlay fan-out, overlay stream slots), ADR-035: database ov_tips from OpenVibe.Host's data role, schema in migrations/ (0001_initial expand, 0002_drop_legacy_import contract), async on openvibe-sdk/db v0.28.0, money paths serializable with row locks, PostgreSQL outbox and inbox.",
    "contracts": "openvibe-contracts v0.129.0",
--  "sdk": "openvibe-sdk v0.42.0",
++  "sdk": "openvibe-sdk v0.43.0",
    "shared": "openvibe-shared v3.0.1",
    "notes": "Runtime, API, SSR pages, overlays, the Billing settlement consumer and the events outbox are built, tested and deployed, together with /metrics (loopback only), truthful /api/ready (Billing and Events checks), supporter privacy (anonymous, hidden amount, private message), goal and supporter-page settings, export and erasure (tips.interaction.erased), moderation (word filter, hide/show, invited moderators, tips.interaction.moderated) and per-actor limits. Capabilities (18 tips.*) and payload schemas are in openvibe-contracts. No billing.* event had arrived: Billing runs in shadow. A written internal threat review (docs/threat-review.md) with its fixes and test/security.test.js. Not done: an independent security review; the openvibe.tips launch. Live stays the place tips happen until the Billing cutover (blocked on the owner re-pointing the PowerChat webhook) and the launch rule in README.md holds.",
    "features": [
@@@ -28,5 +28,5 @@
      "SDK outbox and inbox on PostgreSQL",
      "Billing client on openvibe-sdk/commerce (shared with VIP): same capabilities, idempotency keys and retry rule"
    ],
--  "updated": "2026-10-10"
++  "updated": "2026-10-11"
  }
ddiff --git a/package-lock.json b/package-lock.json
iindex c82bf70..d761f10 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -14,7 +14,7 @@
          "express": "^4.21.2",
          "iovalkey": "^0.4.0",
          "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.129.0",
--        "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.42.0",
++        "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.43.0",
          "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v3.0.1",
          "pg": "^8.23.0"
        },
@@@ -859,9 +859,9 @@
        }
      },
      "node_modules/openvibe-sdk": {
--      "version": "0.42.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.42.0",
--      "integrity": "sha512-MpUPLW8iBviKYcnjvNffQ6pshDCMT9ETj70hYoh6VFtwu1rxCs2DwSs8B84yPLRIyTKNxiMFchTd7tLnOUZAtg==",
++      "version": "0.43.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.43.0",
++      "integrity": "sha512-Pgh/6gFna/h1o5+r0UZ2XHS3QkjD0Ti/bHO4LKvnCguS0cS1aDqbX5q4BGYEPWTW4IJUrvCYISEjbxIkCkm26w==",
        "license": "MIT",
        "engines": {
          "node": ">=20"
ddiff --git a/package.json b/package.json
iindex f0a0d97..2fee4e4 100644
---- a/package.json
++++ b/package.json
@@@ -26,7 +26,7 @@
      "express": "^4.21.2",
      "iovalkey": "^0.4.0",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.129.0",
--    "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.42.0",
++    "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.43.0",
      "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v3.0.1",
      "pg": "^8.23.0"
    },
ddiff --git a/server/events/consumer.js b/server/events/consumer.js
iindex aa133c7..521e3d3 100644
---- a/server/events/consumer.js
++++ b/server/events/consumer.js
@@@ -69,7 +69,7 @@ function consumerRouter({ domain, config, log = console, accountData = null, acc
          if (!delivery) return http.sendProblem(res, 401, 'tips.bad_signature', { detail: 'X-OpenVibe-Signature does not verify', ctx: req.ov });
          const event = delivery.event;
          if (!event || typeof event.event_id !== 'string' || !/^evt_[0-9A-HJKMNP-TV-Z]{26}$/.test(event.event_id)) {
--            return http.sendProblem(res, 400, 'tips.bad_delivery', { detail: 'body must be { event: <envelope>, seq }', ctx: req.ov });
++            return http.sendProblem(res, 400, 'tips.bad_delivery', { detail: 'body must be { event: <envelope> }', ctx: req.ov });
          }
          let out;
          try {