openvibers/openvibe.tools Commits

openvibe-shared v4.133.0 (was v4.129.0) (#232)

OP OpenVibers committed 6 days ago · 93a0e4d16c · 18 files, +27 −20

* 

* 

* 

*

Changes

ddiff --git a/README.md b/README.md
iindex f1a540a..cc2fcd1 100644
---- a/README.md
++++ b/README.md
@@@ -31,7 +31,7 @@ offline against the Network's public key (JWKS).
    OpenVibe.Search (tool documents), OpenVibe.Community (the paste hand-over), OpenVibe.Billing (job usage
    readings)
  - host programs some tools need (ffmpeg, yt-dlp, qpdf, poppler, libheif; [Host packages](#host-packages-some-tools-need))
--- in each app: `openvibe-contracts` v0.92.0 (img, audio, docs, gateway), `openvibe-sdk` v0.12.0 and `openvibe-shared` v4.129.0, pinned
++- in each app: `openvibe-contracts` v0.92.0 (img, audio, docs, gateway), `openvibe-sdk` v0.12.0 and `openvibe-shared` v4.133.0, pinned
    by release tarball, and `apps/_shared` (openvibe-tools-shared) by relative path
  
  ## Capabilities
@@@ -642,5 +642,5 @@ counters and salt use Valkey through `VALKEY_URL`, with process-local state when
  <!-- versions:start -->
  - openvibe-contracts: v0.312.0
  - openvibe-sdk: v0.94.0
--- openvibe-shared: v4.129.0
++- openvibe-shared: v4.133.0
  <!-- versions:end -->
ddiff --git a/STATUS.json b/STATUS.json
iindex 47bb6cb..8c9b003 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -18,7 +18,7 @@
    "domain": "openvibe.tools and *.openvibe.tools",
    "contracts": "openvibe-contracts v0.312.0 (the gateway, img, audio and docs apps' package.json; the root package.json pins none)",
    "sdk": "openvibe-sdk v0.94.0 (the gateway's package.json; the other apps are still on v0.67.0)",
--  "shared": "openvibe-shared v4.129.0 (each app's package.json; the root package.json pins none)",
++  "shared": "openvibe-shared v4.133.0 (each app's package.json; the root package.json pins none)",
    "capabilities": [
      "tools.job.create",
      "tools.job.read",
ddiff --git a/apps/audio/package.json b/apps/audio/package.json
iindex aa40811..6c3f4e7 100644
---- a/apps/audio/package.json
++++ b/apps/audio/package.json
@@@ -25,7 +25,7 @@
      "multer": "^1.4.5-lts.1",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.312.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.94.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.129.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.133.0",
      "uuid": "^11.1.0"
    }
  }
ddiff --git a/apps/audio/server/index.js b/apps/audio/server/index.js
iindex 7a9d5de..44a003d 100644
---- a/apps/audio/server/index.js
++++ b/apps/audio/server/index.js
@@@ -101,7 +101,8 @@ app.use(helmet({
              imgSrc: ["'self'", "data:", "blob:", jobsRuntime.mediaOrigin()],     // job result previews are 302s to Media
              mediaSrc: ["'self'", "blob:", jobsRuntime.mediaOrigin()],
              // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 2.13.0).
--            connectSrc: ["'self'", "https://openvibe.network", "https://*.openvibe.tools", "https://openvibe.events"],
++            // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++            connectSrc: ["'self'", "https://openvibe.chat", "https://openvibe.network", "https://*.openvibe.tools", "https://openvibe.events"],
              workerSrc: ["'self'", "blob:"],
              scriptSrcAttr: ["'unsafe-inline'"],
          },
ddiff --git a/apps/docs/package.json b/apps/docs/package.json
iindex 472f5dd..5b4e215 100644
---- a/apps/docs/package.json
++++ b/apps/docs/package.json
@@@ -24,7 +24,7 @@
      "multer": "^1.4.5-lts.1",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.312.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.94.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.129.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.133.0",
      "pdf-lib": "^1.17.1",
      "sharp": "^0.33.5",
      "uuid": "^11.1.0"
ddiff --git a/apps/docs/server/index.js b/apps/docs/server/index.js
iindex db7f073..35a8331 100644
---- a/apps/docs/server/index.js
++++ b/apps/docs/server/index.js
@@@ -117,7 +117,8 @@ app.use(helmet({
              fontSrc: ["'self'", "https://fonts.gstatic.com"],
              imgSrc: ["'self'", "data:", "blob:"],
              // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 2.13.0).
--            connectSrc: ["'self'", "https://openvibe.network", "https://*.openvibe.tools", "https://openvibe.events"],
++            // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++            connectSrc: ["'self'", "https://openvibe.chat", "https://openvibe.network", "https://*.openvibe.tools", "https://openvibe.events"],
              workerSrc: ["'self'", "blob:"],
              scriptSrcAttr: ["'unsafe-inline'"],
          },
ddiff --git a/apps/food/package.json b/apps/food/package.json
iindex ae1931a..c611876 100644
---- a/apps/food/package.json
++++ b/apps/food/package.json
@@@ -20,6 +20,6 @@
      "express-rate-limit": "^7.1.5",
      "helmet": "^7.1.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.94.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.129.0"
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.133.0"
    }
  }
ddiff --git a/apps/food/server/index.js b/apps/food/server/index.js
iindex 54dfc15..7539b3a 100644
---- a/apps/food/server/index.js
++++ b/apps/food/server/index.js
@@@ -90,7 +90,8 @@ app.use(helmet({
        fontSrc: ["'self'", 'fonts.gstatic.com'],
        imgSrc: ["'self'", 'data:', 'image.tmdb.org', '*.tile.openstreetmap.org', '*.basemaps.cartocdn.com', 'server.arcgisonline.com'],
        // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 2.13.0).
--      connectSrc: ["'self'", 'nominatim.openstreetmap.org', 'https://openvibe.network', 'https://openvibe.events'],
++      // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++      connectSrc: ["'self'", 'https://openvibe.chat', 'nominatim.openstreetmap.org', 'https://openvibe.network', 'https://openvibe.events'],
        scriptSrcAttr: ["'unsafe-inline'"],
      },
    },
ddiff --git a/apps/gateway/package.json b/apps/gateway/package.json
iindex 9188983..82cd06d 100644
---- a/apps/gateway/package.json
++++ b/apps/gateway/package.json
@@@ -23,7 +23,7 @@
      "jsonwebtoken": "^9.0.0",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.312.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.94.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.129.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.133.0",
      "bwip-js": "4.11.4",
      "zxing-wasm": "3.1.5"
    }
ddiff --git a/apps/gateway/server/index.js b/apps/gateway/server/index.js
iindex ad0ce88..4b8b4df 100644
---- a/apps/gateway/server/index.js
++++ b/apps/gateway/server/index.js
@@@ -137,7 +137,8 @@ app.use(helmet({
              fontSrc: ["'self'", "fonts.gstatic.com"],
              imgSrc: ["'self'", "data:", "blob:", "https://openvibe.network", "https://openvibe.media"],
              // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 2.13.0).
--            connectSrc: ["'self'", "https://cloudflareinsights.com", "https://openvibe.network", "https://openvibe.tools", "https://*.openvibe.tools", "https://openvibe.media", "https://openvibe.live", "https://openvibe.games", "https://openvibe.events"],
++            // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++            connectSrc: ["'self'", "https://openvibe.chat", "https://cloudflareinsights.com", "https://openvibe.network", "https://openvibe.tools", "https://*.openvibe.tools", "https://openvibe.media", "https://openvibe.live", "https://openvibe.games", "https://openvibe.events"],
              frameSrc: ["https://openvibe.network"], // the hidden /sso/check sign-in probe
              scriptSrcAttr: ["'unsafe-inline'"],
          },
ddiff --git a/apps/gateway/test/perf-budget.test.js b/apps/gateway/test/perf-budget.test.js
iindex fad5476..d6d30ad 100644
---- a/apps/gateway/test/perf-budget.test.js
++++ b/apps/gateway/test/perf-budget.test.js
@@@ -13,8 +13,8 @@ const BUDGETS = {
      htmlRawKB: 160,       // measured 135.5 (production; the catalogue is server-rendered)
      htmlBrotliKB: 23,     // 19.5
      jsFiles: 6,           // 5
--    jsRawKB: 313.3, // 313.3 with openvibe-shared 4.129.0 (2026-11-07: the one menu (the burger opens the OpenVibe menu)); 312.2 with openvibe-shared 4.122.0 (2026-11-06: the featured link's phone button (4.119.0), the Dock's agent view (4.120.0), the agent view in the Dock's pop-out (4.121.0) and the thread start page's head (4.122.0)); 308.7 with openvibe-shared 4.114.0 (2026-11-06: the one Share sheet in the navbar (ov-share.js and ov-qr.js load on the first press); navbar.js gains its click handler); 307.4 with openvibe-shared 4.112.1 (2026-11-06: theme-loader.js (4.111.1) and the footer/appbar phone CSS (4.112.1)); 306.1 with openvibe-shared 4.109.2 (2026-11-03: OpenVibe's own select, the navbar loads ov-forms); 302.8 with openvibe-shared 4.106.2 (2026-11-02: the site's name reads whole on a signed-in phone; the balances stack); 301.6 with openvibe-shared 4.103.0 (2026-11-02: the puzzle glyph, two-line sidebar rows, boost lets parsed pages go, eight solids) (2026-11-02); 299 openvibe-shared 4.70.0 (2026-11-01: the app bar, busy(), skeletons, view transitions); 295.6 with openvibe-shared 4.66.0: the mark with depth and motion, ov-fx loaded on request (2026-10-31); 294 with openvibe-shared 4.59.0: the Pair mark beside the name, set in the brand face (2026-10-31); 291.9 with openvibe-shared 4.53.0: the footer's columns fold on phones (2026-10-30); 288.9 with openvibe-shared 4.52.0: the Dock's loader and its Chats tab (2026-10-30); 286.4 with openvibe-shared 4.48.0 (the site switcher on the mark, the menu's Start tab and quick tools; Kit's touch hit areas and the phone navbar fix, 4.44-4.47.3); 278.6 with openvibe-shared 4.43.0 (room.css carries the kit tokens, 4.39.1; the kit's 4.39.0 rules); 271.5 with openvibe-shared 4.27.0 and the home's live demo (the design pass, 2026-10-29: +1.2 KB, four real transform previews); 269.3 with openvibe-shared 4.25.0 (the menu's orb beside the brand, both balances on phones, messages, the phone account sheet, the bar stepping away on phones); 263.1 with openvibe-shared 4.22.0 (the navbar's magnifier search and More; search.js and loading.js load only when used); 257.4 with openvibe-shared 4.17.0 (the folded balance chip, Across OpenVibe marks, wallet chips); 243.4 with openvibe-shared 4.15.0 (the compact footer opens into the whole one, the pulse line); 207.9 before
--    jsBrotliKB: 74.8,   // 74.8 with openvibe-shared 4.129.0 (2026-11-07: the one menu (the burger opens the OpenVibe menu)); 74.6 with openvibe-shared 4.124.0 (2026-11-07: the share gate's markup start (4.123.0) and the Dock agent view's four controls (4.124.0)); 74.5 with openvibe-shared 4.122.0 (2026-11-06: the featured link's phone button (4.119.0), the Dock's agent view (4.120.0), the agent view in the Dock's pop-out (4.121.0) and the thread start page's head (4.122.0)); 74 with openvibe-shared 4.114.0 (2026-11-06: the one Share sheet in the navbar (ov-share.js and ov-qr.js load on the first press); navbar.js gains its click handler); 73.2 openvibe-shared 4.70.0 (2026-11-01: the app bar, busy(), skeletons, view transitions); 72.5 with openvibe-shared 4.59.0: the Pair mark beside the name, set in the brand face (2026-10-31); 71.3 with openvibe-shared 4.52.0: the Dock's loader and its Chats tab (2026-10-30); 70.6 with openvibe-shared 4.48.0 (the site switcher on the mark, the menu's Start tab and quick tools; Kit's touch hit areas and the phone navbar fix, 4.44-4.47.3); 69.1 with openvibe-shared 4.43.0 (room.css carries the kit tokens, 4.39.1; the kit's 4.39.0 rules); 67.3 with openvibe-shared 4.27.0 and the live demo; 66.6 with openvibe-shared 4.25.0; 64.7 with openvibe-shared 4.22.0; 63.2 with openvibe-shared 4.17.0; 60.6 with openvibe-shared 4.15.0; 58.0 with openvibe-shared 4.12.0 (light/dark switch, seasonal mark, theme pairs); 48.5 before
++    jsRawKB: 315.6, // 315.6 with openvibe-shared 4.133.0 (2026-11-07: your feeds in the menu, the navbar keeps the Frame cards again, Messages and the balances on every signed-in site, and your online status); 315.6 with openvibe-shared 4.133.0 (2026-11-07: your feeds in the menu, the navbar keeps the Frame cards again, Messages and the balances on every signed-in site, and your online status); 313.3 with openvibe-shared 4.129.0 (2026-11-07: the one menu (the burger opens the OpenVibe menu)); 312.2 with openvibe-shared 4.122.0 (2026-11-06: the featured link's phone button (4.119.0), the Dock's agent view (4.120.0), the agent view in the Dock's pop-out (4.121.0) and the thread start page's head (4.122.0)); 308.7 with openvibe-shared 4.114.0 (2026-11-06: the one Share sheet in the navbar (ov-share.js and ov-qr.js load on the first press); navbar.js gains its click handler); 307.4 with openvibe-shared 4.112.1 (2026-11-06: theme-loader.js (4.111.1) and the footer/appbar phone CSS (4.112.1)); 306.1 with openvibe-shared 4.109.2 (2026-11-03: OpenVibe's own select, the navbar loads ov-forms); 302.8 with openvibe-shared 4.106.2 (2026-11-02: the site's name reads whole on a signed-in phone; the balances stack); 301.6 with openvibe-shared 4.103.0 (2026-11-02: the puzzle glyph, two-line sidebar rows, boost lets parsed pages go, eight solids) (2026-11-02); 299 openvibe-shared 4.70.0 (2026-11-01: the app bar, busy(), skeletons, view transitions); 295.6 with openvibe-shared 4.66.0: the mark with depth and motion, ov-fx loaded on request (2026-10-31); 294 with openvibe-shared 4.59.0: the Pair mark beside the name, set in the brand face (2026-10-31); 291.9 with openvibe-shared 4.53.0: the footer's columns fold on phones (2026-10-30); 288.9 with openvibe-shared 4.52.0: the Dock's loader and its Chats tab (2026-10-30); 286.4 with openvibe-shared 4.48.0 (the site switcher on the mark, the menu's Start tab and quick tools; Kit's touch hit areas and the phone navbar fix, 4.44-4.47.3); 278.6 with openvibe-shared 4.43.0 (room.css carries the kit tokens, 4.39.1; the kit's 4.39.0 rules); 271.5 with openvibe-shared 4.27.0 and the home's live demo (the design pass, 2026-10-29: +1.2 KB, four real transform previews); 269.3 with openvibe-shared 4.25.0 (the menu's orb beside the brand, both balances on phones, messages, the phone account sheet, the bar stepping away on phones); 263.1 with openvibe-shared 4.22.0 (the navbar's magnifier search and More; search.js and loading.js load only when used); 257.4 with openvibe-shared 4.17.0 (the folded balance chip, Across OpenVibe marks, wallet chips); 243.4 with openvibe-shared 4.15.0 (the compact footer opens into the whole one, the pulse line); 207.9 before
++    jsBrotliKB: 75.3,   // 75.3 with openvibe-shared 4.133.0 (2026-11-07: your feeds in the menu, the navbar keeps the Frame cards again, Messages and the balances on every signed-in site, and your online status); 75.3 with openvibe-shared 4.133.0 (2026-11-07: your feeds in the menu, the navbar keeps the Frame cards again, Messages and the balances on every signed-in site, and your online status); 74.8 with openvibe-shared 4.129.0 (2026-11-07: the one menu (the burger opens the OpenVibe menu)); 74.6 with openvibe-shared 4.124.0 (2026-11-07: the share gate's markup start (4.123.0) and the Dock agent view's four controls (4.124.0)); 74.5 with openvibe-shared 4.122.0 (2026-11-06: the featured link's phone button (4.119.0), the Dock's agent view (4.120.0), the agent view in the Dock's pop-out (4.121.0) and the thread start page's head (4.122.0)); 74 with openvibe-shared 4.114.0 (2026-11-06: the one Share sheet in the navbar (ov-share.js and ov-qr.js load on the first press); navbar.js gains its click handler); 73.2 openvibe-shared 4.70.0 (2026-11-01: the app bar, busy(), skeletons, view transitions); 72.5 with openvibe-shared 4.59.0: the Pair mark beside the name, set in the brand face (2026-10-31); 71.3 with openvibe-shared 4.52.0: the Dock's loader and its Chats tab (2026-10-30); 70.6 with openvibe-shared 4.48.0 (the site switcher on the mark, the menu's Start tab and quick tools; Kit's touch hit areas and the phone navbar fix, 4.44-4.47.3); 69.1 with openvibe-shared 4.43.0 (room.css carries the kit tokens, 4.39.1; the kit's 4.39.0 rules); 67.3 with openvibe-shared 4.27.0 and the live demo; 66.6 with openvibe-shared 4.25.0; 64.7 with openvibe-shared 4.22.0; 63.2 with openvibe-shared 4.17.0; 60.6 with openvibe-shared 4.15.0; 58.0 with openvibe-shared 4.12.0 (light/dark switch, seasonal mark, theme pairs); 48.5 before
      cssFiles: 1,          // 0
      externalFiles: 3,     // 1 in production
  };
ddiff --git a/apps/img/package.json b/apps/img/package.json
iindex 10b7941..09b4869 100644
---- a/apps/img/package.json
++++ b/apps/img/package.json
@@@ -24,7 +24,7 @@
      "multer": "^1.4.5-lts.1",
      "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.312.0",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.94.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.129.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.133.0",
      "sharp": "^0.33.5",
      "to-ico": "^1.1.5",
      "uuid": "^11.1.0"
ddiff --git a/apps/img/server/index.js b/apps/img/server/index.js
iindex d9a4ebb..09354cf 100644
---- a/apps/img/server/index.js
++++ b/apps/img/server/index.js
@@@ -106,7 +106,8 @@ app.use(helmet({
              fontSrc: ["'self'", "https://fonts.gstatic.com"],
              imgSrc: ["'self'", "data:", "blob:", jobsRuntime.mediaOrigin()],   // job result previews are 302s to Media
              // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 2.13.0).
--            connectSrc: ["'self'", "https://openvibe.network", "https://*.openvibe.tools", "https://openvibe.events"],
++            // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++            connectSrc: ["'self'", "https://openvibe.chat", "https://openvibe.network", "https://*.openvibe.tools", "https://openvibe.events"],
              workerSrc: ["'self'", "blob:"],
              scriptSrcAttr: ["'unsafe-inline'"],
          },
ddiff --git a/apps/maps/package.json b/apps/maps/package.json
iindex d4431f0..e4477fb 100644
---- a/apps/maps/package.json
++++ b/apps/maps/package.json
@@@ -15,7 +15,7 @@
      "pg": "^8.23.0",
      "@electric-sql/pglite": "^0.5.8",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.94.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.129.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.133.0",
      "cheerio": "^1.0.0-rc.12",
      "cookie-parser": "^1.4.7",
      "cors": "^2.8.5",
ddiff --git a/apps/maps/server/index.js b/apps/maps/server/index.js
iindex 9544135..e3ebe3c 100644
---- a/apps/maps/server/index.js
++++ b/apps/maps/server/index.js
@@@ -82,7 +82,8 @@ app.use(helmet({
        styleSrc: ["'self'", "'unsafe-inline'", "unpkg.com", "cdn.jsdelivr.net", "fonts.googleapis.com"],
        imgSrc: ["'self'", "data:", "blob:", "*.tile.openstreetmap.org", "*.basemaps.cartocdn.com", "server.arcgisonline.com", "image.tmdb.org", "*.wp.com"],
        // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 2.13.0).
--      connectSrc: ["'self'", "nominatim.openstreetmap.org", "api.weather.gov", "api.open-meteo.com", "*.tile.openstreetmap.org", "*.basemaps.cartocdn.com", "server.arcgisonline.com", "https://openvibe.network", "https://openvibe.events"],
++      // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++      connectSrc: ["'self'", "https://openvibe.chat", "nominatim.openstreetmap.org", "api.weather.gov", "api.open-meteo.com", "*.tile.openstreetmap.org", "*.basemaps.cartocdn.com", "server.arcgisonline.com", "https://openvibe.network", "https://openvibe.events"],
        fontSrc: ["'self'", "fonts.gstatic.com", "cdn.jsdelivr.net"],
        frameSrc: ["'none'"],
        scriptSrcAttr: ["'unsafe-inline'"],
ddiff --git a/apps/text/package.json b/apps/text/package.json
iindex bbcb360..828d8f1 100644
---- a/apps/text/package.json
++++ b/apps/text/package.json
@@@ -20,7 +20,7 @@
      "express-rate-limit": "^7.1.5",
      "dotenv": "^16.3.1",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.94.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.129.0"
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.133.0"
    },
    "license": "MIT"
  }
ddiff --git a/apps/text/server/index.js b/apps/text/server/index.js
iindex d356f75..2ff5f1a 100644
---- a/apps/text/server/index.js
++++ b/apps/text/server/index.js
@@@ -69,7 +69,8 @@ app.use(helmet({
              fontSrc: ["'self'", "fonts.gstatic.com"],
              imgSrc: ["'self'", "data:", "blob:"],
              // openvibe.events: release notifications (release-watch's EventSource, openvibe-shared 2.13.0).
--            connectSrc: ["'self'", "https://openvibe.network", "https://api.exchangerate-api.com", "https://openvibe.events"],
++            // The navbar's Messages count asks Chat (openvibe-shared 4.130.0).
++            connectSrc: ["'self'", "https://openvibe.chat", "https://openvibe.network", "https://api.exchangerate-api.com", "https://openvibe.events"],
              frameSrc: ["'none'"],
              scriptSrcAttr: ["'unsafe-inline'"],
          },
ddiff --git a/apps/yt/package.json b/apps/yt/package.json
iindex 641fe45..5ac0425 100644
---- a/apps/yt/package.json
++++ b/apps/yt/package.json
@@@ -21,7 +21,7 @@
      "pg": "^8.23.0",
      "@electric-sql/pglite": "^0.5.8",
      "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.94.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.129.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v4.133.0",
      "jsonwebtoken": "^9.0.2",
      "uuid": "^11.1.0"
    }