What shipped on OpenVibe.Tips
Every change deployed to OpenVibe, newest first. Each line is a commit from the OpenVibers repositories, linked to the change itself. When enough have gathered, or a large feature lands, they are written up as Patch notes on openvibe.blog. JSON: /api/v1/changelog.
2026-09-24
f5c0783The shared update system and one account UI, on the OpenVibe Frame (openvibe-shared 1.11.0, openvibe/frame): the home shows what shipped, /updates is the shared log and the footer links it; the shared navbar handles sign in and out…
da7273bCI calls the shared test workflow (Track Q): OpenVibe.Shared .github/workflows/test.yml@f5e7e73 (install, node --check over server/ and scripts/, npm test, openvibe-contracts-check) instead of a copy of those steps
fb110b9STATUS.json describes production: the running release and pins, what is deployed, the Live import that has run, and what is still owner-blocked
847d22aSECURITY.md: how to report a vulnerability ([email protected], 7-day reply, scope, supported versions)
2026-09-23
3fb582eopenvibe-shared v1.5.1, openvibe-contracts v0.33.0
9acca6aopenvibe-shared v1.5.0 (Track R release manifest), openvibe-contracts v0.32.0, openvibe-sdk v0.5.0
f211c03The creator page's Watch on OpenVibe.Live link goes to the channel, /@<handle> (it linked to /<handle>, which is not a page on Live)
fdb1657Threat review (docs/threat-review.md) and the gaps it closed
c428a28Moderation: the creator's word filter before anything is shown or read; the creator and their moderators hide and show paid messages without touching the money
2e79f74Privacy controls: supporters choose what the public sees, creators what their pages show, supporters export and erase their tips
e042cbaopenvibe-contracts v0.30.2: the tips.* event payload schemas; test/contracts.test.js validates every envelope and payload Tips produces against them
9a3a186CI: run the shared security workflow (gitleaks secret scan + dependency audit, Track Q)
15bfc12Track O: /metrics for direct loopback callers and a truthful /api/ready (openvibe-shared v1.3.0)
6d14574EXTERNAL PowerChat tips from Billing: consume billing.receipt.external (a tip on a creator's own PowerChat, announced by Billing once it receives the PowerChat webhook) and celebrate it the way Live's webhook did: recorded once by…
86304cdDocs: STATUS.json and README match production (2026-09-23)
854920cImport: read Live's chat_messages time from its timestamp column (created_at on older snapshots); the fixture now mirrors Live's schema — the production dry run failed on it
435f32bEvents webhook requires signature v2 (replay window); openvibe-sdk v0.4.0
bea0996nginx: client address headers only from $remote_addr (realip). X-Forwarded-For was appended to and CF-Connecting-IP passed through from the client, so a request reaching the origin without Cloudflare (DNS-only host or the bare IP) chose…
53c0a04openvibe-contracts v0.15.0 (tips capabilities and manifest released); contracts check is blocking
e79904aOpenVibe.Tips W9: tip interactions on top of Billing, goals, paid messages/TTS/media requests, overlays, SSR pages, events, Live import
2026-09-21
8d9772dCharter: OpenVibe.Tips as defined in the OpenVibe realignment plan (placeholder, no code yet)