Commits

main

Pins: openvibe-contracts 0.42.0 → 0.44.0 (Contracts 0.43.0 and 0.44.0 were released after the previous pin commit, leaving 0.42.0 two minors behind the pin-drift limit)OpenVibers · 25 Sept 2026 2e0bb45
Pins: openvibe-contracts 0.33.0 → 0.42.0, openvibe-sdk 0.5.0 → 0.9.1; CI runs the pin-drift check (shared test and security workflows at 423fe51)OpenVibers · 25 Sept 2026 39026a0
The OpenVibe Frame from this site's own pinned copy: /shared/* is served by openvibe-shared/serve (1.12.0) and every page references it by content hash (/shared/<file>?v=<hash>), so this site's pin decides what its pages run and its navbar and footer keep working while openvibe.network is downOpenVibers · 24 Sept 2026 c0b4c87
The shared update system and one account UI, on the OpenVibe Frame (openvibe-shared 1.11.0, openvibe/frame): the home shows what shipped, /updates is the shared log and the footer links it; the shared navbar handles sign in and out (logoutUrl ends this site's session) and carries this site's account links in its menu, while the page's own account bar is only for no-JS visitorsOpenVibers · 24 Sept 2026 f5c0783
CI calls the shared test workflow (Track Q): OpenVibe.Shared .github/workflows/test.yml@f5e7e73 (install, node --check over server/ and scripts/, npm test, openvibe-contracts-check) instead of a copy of those stepsOpenVibers · 24 Sept 2026 da7273b
STATUS.json describes production: the running release and pins, what is deployed, the Live import that has run, and what is still owner-blockedOpenVibers · 24 Sept 2026 fb110b9
SECURITY.md: how to report a vulnerability ([email protected], 7-day reply, scope, supported versions)OpenVibers · 24 Sept 2026 847d22a
openvibe-shared v1.5.1, openvibe-contracts v0.33.0OpenVibers · 23 Sept 2026 3fb582e
openvibe-shared v1.5.0 (Track R release manifest), openvibe-contracts v0.32.0, openvibe-sdk v0.5.0OpenVibers · 23 Sept 2026 9acca6a
The creator page's Watch on OpenVibe.Live link goes to the channel, /@<handle> (it linked to /<handle>, which is not a page on Live)OpenVibers · 23 Sept 2026 f211c03
Threat review (docs/threat-review.md) and the gaps it closedOpenVibers · 23 Sept 2026 fdb1657
Moderation: the creator's word filter before anything is shown or read; the creator and their moderators hide and show paid messages without touching the moneyOpenVibers · 23 Sept 2026 c428a28
Privacy controls: supporters choose what the public sees, creators what their pages show, supporters export and erase their tipsOpenVibers · 23 Sept 2026 2e79f74
openvibe-contracts v0.30.2: the tips.* event payload schemas; test/contracts.test.js validates every envelope and payload Tips produces against themOpenVibers · 23 Sept 2026 e042cba
CI: run the shared security workflow (gitleaks secret scan + dependency audit, Track Q)OpenVibers · 23 Sept 2026 9a3a186
Track O: /metrics for direct loopback callers and a truthful /api/ready (openvibe-shared v1.3.0)OpenVibers · 23 Sept 2026 15bfc12
EXTERNAL PowerChat tips from Billing: consume billing.receipt.external (a tip on a creator's own PowerChat, announced by Billing once it receives the PowerChat webhook) and celebrate it the way Live's webhook did: recorded once by (provider, provider event id), settled, chat line "… tipped N Vibes: msg (PowerChat)" through Live's /internal/tips/deliveries (origin billing-external), overlay alert and goal (a Tips goal id or a Live goal id through the import map, else the only active goal); never counted as Billing money. npm run subscribe also creates the billing.receipt.* subscription; test/external.test.jsOpenVibers · 23 Sept 2026 6d14574
Docs: STATUS.json and README match production (2026-09-23)OpenVibers · 23 Sept 2026 86304cd
Import: read Live's chat_messages time from its timestamp column (created_at on older snapshots); the fixture now mirrors Live's schema — the production dry run failed on itOpenVibers · 23 Sept 2026 854920c
Events webhook requires signature v2 (replay window); openvibe-sdk v0.4.0OpenVibers · 23 Sept 2026 435f32b
nginx: client address headers only from $remote_addr (realip). X-Forwarded-For was appended to and CF-Connecting-IP passed through from the client, so a request reaching the origin without Cloudflare (DNS-only host or the bare IP) chose the address the service bans and rate-limits byOpenVibers · 23 Sept 2026 bea0996
openvibe-contracts v0.15.0 (tips capabilities and manifest released); contracts check is blockingOpenVibers · 23 Sept 2026 53c0a04
OpenVibe.Tips W9: tip interactions on top of Billing, goals, paid messages/TTS/media requests, overlays, SSR pages, events, Live importOpenVibers · 23 Sept 2026 e79904a
Charter: OpenVibe.Tips as defined in the OpenVibe realignment plan (placeholder, no code yet)OpenVibers · 21 Sept 2026 8d9772d