Skip to content

Sign each journal line with the account that made the change - #779

Merged
ccomb merged 3 commits into
mainfrom
journal-author
Oct 31, 2026
Merged

ccomb merged 3 commits into
mainfrom
journal-author

Conversation

@ccomb

@ccomb ccomb commented Oct 30, 2026 •

Copy link
Copy Markdown
Owner

Each change to a database, a method collection or the scenarios of a database now says who made it.

The server in front of the engine already names the account on every request (Volca-Reader). It will also send the account's public name (Volca-Author-Handle). When both are there, the journal line carries "by": {"account": "acc-1", "handle": "ana"} next to its time. When they are not, as on the desktop, the line is written exactly as before, and older lines read as made by nobody.

  • The history of a database and of a collection returns by, the public name.
  • The changes report carried by an export says By: @ana above the reason.
  • Replaying a journal never looks at the author.
  • The reader header is now read on every request, not only when the usage log is on.

Wire revision 104.

Checked on a local engine: a copy edited with both headers has "by" on its journal line and by: "ana" in its history; the same edit without them has neither.

ccomb added 2 commits October 30, 2026 23:06
A change to a database, a method collection or the scenarios of a database
now records who made it, next to when. The server in front of the engine
names the account (Volca-Reader) and its public name (Volca-Author-Handle);
with both, the line carries "by": {"account", "handle"}. Without them, as on
the desktop, the line is written as before, and older lines still read.

The account id stays stable while the public name can change: the line keeps
both, the name as it was that day and the account to find it again. The
history of a database and of a collection returns the name as "by", and the
changes report of an export says "By: @name" above the reason. Replaying a
journal never looks at the author.

The reader header is now read on every request, not only when the usage log
is on, so signing does not depend on counting. Wire revision 102.
… signed

A blank Volca-Author-Handle now counts as no name, so a line is never signed
"@" with nothing after it. The MCP takes who sent a request as one Caller,
the reader and the author together, instead of two parameters side by side.
The README says which headers sign a change, next to the usage log's.
@ccomb ccomb added the agent-reviewed pr-cycle ran label Oct 30, 2026
Main took revision 102 for the basis of a score and 103 for the method
catalogue.
@ccomb
ccomb merged commit 410bdae into main Oct 31, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

agent-reviewed pr-cycle ran

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant