CHANGELOG.md

Changelog

What changed in OpenVibe.Today, newest first.

0.1.0 — 2026-10-28

The first version: the network's time bus and calendar authority.

• Scheduling. POST|PATCH|DELETE /api/v1/events, with title/description/time-zone/range validation, a stream's
  channel and URL taken from the caller's token, followers-only visibility, a cap of 60 scheduled future events per
  owner, an Idempotency-Key that returns the first event, and a same-origin rule for writes made with the session
  cookie (403 today.cross_site). The event and its today.event.scheduled outbox row commit in one transaction.
• Public read. GET /api/v1/events (soonest first, public cache 60 s) and GET /api/v1/events/:id; a cancelled
  event answers with its cancelled status, and a followers-only one is 404 unless the caller owns it.
• ICS. /ics/@<username>.ics (public) and /ics/<token>.ics (private, 300 s): RFC 5545 CRLF, 75-octet UTF-8-safe
  folding, TEXT escaping, UID/SEQUENCE/STATUS/LAST-MODIFIED, one-hour default end, a cancelled event as
  STATUS:CANCELLED for 7 days then dropped, and rotation that makes the old token 404 at once.
• Reminders. Upsert/remove/list and a 60 s job that claims a due row atomically before pushing one
  TODAY_REMINDER through OpenVibe.Network's /internal/notifications/push (user id resolved in batches and cached).
  A cancelled or done event's reminder never sends.
• Agenda. Own events, reminded events and the public or followers-only events of followed channels, with the
  follow graph read from Network with the person's own token and cached 60 s. Network down still answers own and
  reminded events with follows_unavailable: true.
• Brief. Later today, your reminders and up to three items from OpenVibe.Live's public Rundown; the Rundown
  section is omitted when it fails; one stored brief per person per day; a 06:00 UTC job for subjects active in the
  last 30 days (no notification in v1).
• Events. A transactional outbox with a fixed evt_ id, claim lease, backoff and attempts/last_error, and a
  v2-signed consumer at /internal/events for live.stream.started|ended; today_processed makes a replay a no-op.
  Account export and deletion go through openvibe-sdk/account-data over every table that holds a subject; the feed
  token itself is never exported.
• The service. OpenVibe.Network sign-in as OAuth client today (PKCE S256, today_at/today_rt/today_oauth),
  truthful readiness (the database is required), Prometheus metrics on loopback, crawl artifacts, deploy files, and
  server-rendered pages with schema.org Event JSON-LD.
• Tests. events, ics, consumer, outbox, reminders, agenda, brief, pages, sso, account-data and
  discovery, each in its own process on a temporary PGlite database with a mock Network/Events.