openvibers/openvibe.vip Commits

openvibe-shared v1.5.0 (Track R release manifest), openvibe-contracts v0.32.0, openvibe-sdk v0.5.0

OP OpenVibers committed 23 Sept 2026 · f6b98fc471 · 5 files, +21 −18

- /release.json is mounted with release.mount(app, { registry }): POST /release-metrics takes open
  tabs' update reports into /metrics (release_client_updates_total), and the ov-release meta tag
  carries data-metrics. On contracts 0.32.0 the manifest has the release-manifest 1.1.0 fields; no
  components are declared, so every release still prompts a reload. test/api.test.js validates the
  served manifest against the contracts.
- Contracts 0.19.0 -> 0.32.0 and SDK 0.4.0 -> 0.5.0 are additive for VIP: the tests and the
  contracts check pass unchanged.

Changes

ddiff --git a/README.md b/README.md
iindex 58ff033..3ccfdd2 100644
---- a/README.md
++++ b/README.md
@@@ -60,8 +60,8 @@ home that is not a cache.
  - **OpenVibe.Network** — RS256 service and user tokens (JWKS), OAuth sign-in for the pages, identity
    resolve (importer only).
  - **OpenVibe.Events** — delivery of Billing's events to `/internal/events`; relay of VIP's outbox.
--- **openvibe-contracts** v0.19.0, **openvibe-sdk** v0.4.0 (outbox, inbox, delivery signatures),
--  **openvibe-shared** v1.3.0 (chrome, legal pages, release, metrics, readiness).
++- **openvibe-contracts** v0.32.0, **openvibe-sdk** v0.5.0 (outbox, inbox, delivery signatures),
++  **openvibe-shared** v1.5.0 (chrome, legal pages, release manifest and update metrics, metrics, readiness).
  - Consumers, through the client below: Chat (the member badge), Community (members-only spaces and
    threads) and Blog (members-only posts); Live and Wiki are not wired yet.
  - **Not** OpenVibe.Live: VIP works with Live unavailable (nothing here calls Live).
ddiff --git a/package-lock.json b/package-lock.json
iindex 11b3087..5390b21 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -14,9 +14,9 @@
          "dotenv": "^16.4.7",
          "express": "^4.21.2",
          "jsonwebtoken": "^9.0.2",
--        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.19.0",
--        "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.4.0",
--        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.3.0"
++        "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.32.0",
++        "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.5.0",
++        "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.5.0"
        },
        "engines": {
          "node": ">=22.0.0"
@@@ -983,9 +983,9 @@
        }
      },
      "node_modules/openvibe-contracts": {
--      "version": "0.19.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.19.0",
--      "integrity": "sha512-5DjPvXIfc68wZhFXgKlCzDarbbFD5dUV4yYQIKEK1qD+VIuR+4twbON1brdyM9rYZyRyYClPigAqReocmRGytg==",
++      "version": "0.32.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.32.0",
++      "integrity": "sha512-ntN58SIG03YDxbhsiIzOM5GRH19jRMHZUYWI3xU2VwovExagF5DdwApLVfezsu84UTJ+V2Jfn+LWDc+Oz8ab+g==",
        "license": "AGPL-3.0-only",
        "dependencies": {
          "ajv": "^8.17.1",
@@@ -999,18 +999,18 @@
        }
      },
      "node_modules/openvibe-sdk": {
--      "version": "0.4.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.4.0",
--      "integrity": "sha512-Hyz55YOMIs0xwCQ1NXsN0sUYhlbKXAX3uWY2fPCdEEL18FXUYVhK8wlG/5JMMypFHnjDiSd9VHzBNG12hWsmkQ==",
++      "version": "0.5.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.5.0",
++      "integrity": "sha512-QVJkR5iazQX0ZwIrDp2A88ZeYYBSXEmSzhpgURPUSnzezIM3jz0HBhVKowyhkvg2aBO61XNf77eb4zJGkMjZiw==",
        "license": "MIT",
        "engines": {
          "node": ">=20"
        }
      },
      "node_modules/openvibe-shared": {
--      "version": "1.3.0",
--      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.3.0",
--      "integrity": "sha512-w8yl/5+9eend8I2O/DzAJnEAL2N3GTUY7c7pzK+MLJuLAGD8FmJJQ9gwbgyrq70Snjt3ebrg3TlpORhRAp2kgA==",
++      "version": "1.5.0",
++      "resolved": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.5.0",
++      "integrity": "sha512-cehnscuYMkJwuCYGcI6wPSswbUn0bhTyGAaD5feNCoO//2e9gyC7cgjkEcIOtM8DQF3yTuUNyXnOwckIeM4fUg==",
        "license": "MIT",
        "dependencies": {
          "jsonwebtoken": "^9.0.0"
ddiff --git a/package.json b/package.json
iindex 23b3da2..f2badba 100644
---- a/package.json
++++ b/package.json
@@@ -26,9 +26,9 @@
      "dotenv": "^16.4.7",
      "express": "^4.21.2",
      "jsonwebtoken": "^9.0.2",
--    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.19.0",
--    "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.4.0",
--    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.3.0"
++    "openvibe-contracts": "https://codeload.github.com/OpenVibers/OpenVibe.Contracts/tar.gz/refs/tags/v0.32.0",
++    "openvibe-sdk": "https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.5.0",
++    "openvibe-shared": "https://codeload.github.com/OpenVibers/OpenVibe.Shared/tar.gz/refs/tags/v1.5.0"
    },
    "engines": {
      "node": ">=22.0.0"
ddiff --git a/server/app.js b/server/app.js
iindex 8eb0db8..5ae6c72 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -86,7 +86,8 @@ function createApp(opts = {}) {
      app.get('/api/health', (req, res) => res.json({ ok: true, service: 'vip', version: VERSION, release: release.release, events: outbox.status() }));
      const readiness = createVipReadiness({ db, keys, config, outbox, now, release: release.release, fetchImpl });
      app.get('/api/ready', readiness.handler);
--    app.get('/release.json', release.handler);
++    // GET /release.json (ADR-016) and POST /release-metrics: open tabs' update reports into /metrics.
++    release.mount(app, { registry: metrics.registry });
  
      const consumer = consumerRouter({ domain, config, log });
      app.use('/internal', consumer.router);
ddiff --git a/test/api.test.js b/test/api.test.js
iindex 41696eb..81d7800 100644
---- a/test/api.test.js
++++ b/test/api.test.js
@@@ -20,6 +20,8 @@ const { test, run } = harness('api');
          assert.strictEqual(h.json.service, 'vip');
          const rel = await t.call('GET', '/release.json', { token: null });
          assert.strictEqual(rel.json.service, 'vip');
++        assert.deepStrictEqual(require('openvibe-contracts').validate('registry.release-manifest@1', rel.json).errors, []);
++        assert.strictEqual(rel.json.metrics_url, '/release-metrics');
          // Billing down: VIP stays ready (the projection still answers while fresh) and says so.
          t.billing.state.down = true;
          const r = await t.call('GET', '/api/ready', { token: null });