jazari 0.4.0 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b3e1d3f594584f56c5ea72c8aacd01ce1aa9fc6ddd12b2b1f9c160072dfd9c63
-  data.tar.gz: f5d622adb6252f7465adb0aeab696c9876598bef6a368bf1845dd8a2c896b252
+  metadata.gz: f9cbfc9b54c5489c8f751da47fb21b875022595d50b41b144e3aab021e46d9cd
+  data.tar.gz: a477a52e534f3683e07d05cae377cdbaaf114c28c8ddb738e532f43bc9ab2cdb
 SHA512:
-  metadata.gz: dfc06b9155a1f706488fa36ee9661c92fb419a27c76cfe6f1e912be31a365ceb6249e24805a92f7e1b9d025511e0559332d6f391f604dbe24e569f46ab886cc1
-  data.tar.gz: f5f37bdc359b9626221055c908a5a0ab59f713ab2238ff5df99a82da9c787e403966ef591e65d25fab45ebd2d9dadb78e2a1fd8af860627c4d8661b589356668
+  metadata.gz: 79803d6a78f7a6bfc032b3319ca341d2f327e9839492d5512f7ddc42d05d5994cc0163cfb9864a230bfd04dee0d9934728a21948b0ebbb49e05ac1dd251a88e1
+  data.tar.gz: 6609743e4e095d8e37b8aaf4a753300e67596faef66cf97ceb364cb7d974b3bb24da76bd3d16ba6ddf57afc5db5a16004a8bc44de929ff430f627dbe0b31efd7

data/CHANGELOG.md

@@ -8,6 +8,27 @@ codes, the resolved-value shape, how revisions are computed, and the schema the
 generator emits — changes to any of those are breaking even when the method
 signatures do not move.
 
+## [0.5.0] - 2026-08-12
+
+### Added
+
+- **Execution-scoped actor identity.** Runs now require an opaque `actor_ref`,
+  with explicit values taking precedence over a configured trusted-system
+  default. Ticks and evidence inherit the run actor unless explicitly
+  attributed otherwise.
+- Evidence records now retain `actor_ref`, making it possible to answer who or
+  what performed each procedure step without giving Jazari access to actor
+  objects.
+- MCP evidence declarations and public examples now expose the actor contract.
+- Public guides and the landing page now document actor attribution and
+  RecipeFiles load, seed, dump, and drift workflows.
+
+### Compatibility
+
+- Existing explicit `actor_ref` calls continue to work unchanged.
+- MCP run start continues to require an explicit actor identity; subsequent
+  tick and evidence calls may inherit the actor from the open run.
+
 ## [0.4.0] - 2026-08-11
 
 ### Added

data/README.md

@@ -12,7 +12,8 @@ Requires Ruby 3.2+, Rails 7.1+, and PostgreSQL.
 
 ## Guides
 
-The README is the pitch; the [guides](guide/) are the working documents —
+The README is the pitch; the public [Kuickr guide](https://kuickr.co/jazari/guide)
+is the operating manual. Its source lives in [`guide/`](guide/), including
 [concepts](guide/01-concepts.md) (start here: one word means something
 different than you expect), [adoption](guide/02-adoption.md),
 [anchors](guide/03-anchors.md), [runs and evidence](guide/04-runs.md),
@@ -96,7 +97,8 @@ Jazari.tick(run: run, expected_revision: run.lock_version,
             item_id: "restore", done: true, actor_ref: "agent:nightly")
 
 Jazari.attach_evidence(run: run.reload, expected_revision: run.lock_version,
-                       item_id: "counts", kind: "count", value: "4211 rows")
+                       item_id: "counts", kind: "count", value: "4211 rows",
+                       actor_ref: "agent:nightly")
 
 Jazari.close_run(run: run.reload, expected_revision: run.lock_version,
                  outcome: "completed")
@@ -156,6 +158,15 @@ operator-owned. Reseeding never overwrites an edit.
 That means fixing a ritual is a **write, not a deploy** — and a fresh install
 can ship with working procedures instead of an empty text box.
 
+For version-controlled recipes, load YAML or JSON as a seed and report drift
+without overwriting operator edits:
+
+```ruby
+entries = Jazari::RecipeFiles.load("config/recipes")
+Jazari::RecipeRegistry.seed!(entries)
+Jazari::RecipeFiles.drift(entries)
+```
+
 ## Runs are bound to the canon they opened against
 
 A run snapshots its checklist when it opens. Edit the recipe mid-run and the
@@ -163,6 +174,29 @@ in-flight run still ticks its own steps, and refuses steps that did not exist
 when it started. Without this, an operator improving a procedure silently breaks
 every run in progress.
 
+## Actor identity is part of the evidence
+
+Jazari stores the opaque identity attached to the run, every tick, and every
+evidence entry. Pass a stable reference when a human, agent, or job acts:
+
+```ruby
+Jazari.open_run(target: target, actor_ref: "user:42")
+Jazari.tick(run: run, expected_revision: run.lock_version,
+            item_id: "restore", done: true, actor_ref: "user:42")
+Jazari.attach_evidence(run: run.reload, expected_revision: run.lock_version,
+                       item_id: "restore", kind: "note", value: "verified",
+                       actor_ref: "user:42")
+```
+
+For trusted system jobs, configure a zero-argument default. Explicit references
+always win. When a tick or evidence entry omits its actor, it inherits the run's
+actor; opening a run without an explicit actor requires this configured default.
+
+```ruby
+Jazari.configure { |c| c.actor_ref = -> { "system:nightly-backup" } }
+Jazari.open_run(target: target)
+```
+
 ## MCP
 
 `Jazari::Mcp::Handler` maps action names onto the domain and knows nothing about
@@ -183,10 +217,11 @@ could disclose a record or whether a target exists.
 `Handler.actions_for("read")` returns the read-only subset, so a read-scoped
 connection never advertises mutations.
 
-## You authorize; Jazari never sees an actor
+## You authorize; Jazari never sees an actor object
 
-The domain accepts no raw IDs, no arbitrary records, and no actor. Your app
-authorizes first, then constructs exactly one immutable target:
+The domain accepts no raw IDs, arbitrary records, or actor objects. Your app
+authorizes first, then constructs exactly one immutable target. It passes only an
+opaque `actor_ref` string for audit history:
 
 ```ruby
 Jazari::RecordTarget.new(runbookable: site, public_reference: { kind: "site" },

data/lib/jazari/mcp/actions.rb

@@ -74,7 +74,8 @@ module Jazari
                    summary: "Attach evidence to a run: output, url, sha, count, or note.",
                    params: { run_id: RUN_ID, expected_revision: REVISION, item_id: ITEM_ID,
                              kind: { type: "string", description: "One of: output, url, sha, count, note." },
-                             value: { type: "string", description: "The evidence itself." } }),
+                             value: { type: "string", description: "The evidence itself." },
+                             actor_ref: ACTOR }),
         Action.new(name: "finish", scope: :write, effect: :additive, confirm: false,
                    summary: "Close a run with an outcome: completed, abandoned, or failed.",
                    params: { run_id: RUN_ID, expected_revision: REVISION,

data/lib/jazari/mcp/handler.rb

@@ -86,13 +86,14 @@ module Jazari
       def handle_tick(_target, args)
         run = Runs.tick(run: args.fetch(:run_id), expected_revision: args[:expected_revision],
                         item_id: args[:item_id], done: args.fetch(:done, true),
-                        actor_ref: args.fetch(:actor_ref), note: args[:note])
+                        actor_ref: args[:actor_ref], note: args[:note])
         run_view(run)
       end
 
       def handle_evidence(_target, args)
         run = Runs.attach_evidence(run: args.fetch(:run_id), expected_revision: args[:expected_revision],
-                                   item_id: args[:item_id], kind: args.fetch(:kind), value: args.fetch(:value))
+                                   item_id: args[:item_id], kind: args.fetch(:kind),
+                                   value: args.fetch(:value), actor_ref: args[:actor_ref])
         run_view(run)
       end
 

data/lib/jazari/runs.rb

@@ -18,10 +18,11 @@ module Jazari
     # Insert FIRST, then rescue the unique violation and select the winner.
     # A find-then-insert races under concurrent writers — the same defect class
     # the revision guard exists to prevent.
-    def open(target:, actor_ref:, now: Time.now.utc)
+    def open(target:, actor_ref: nil, now: Time.now.utc)
       recipe = RecipeRegistry.fetch(target.recipe_id)
       subject = subject_for(target)
       started_at = now.utc
+      actor_ref = resolve_actor_ref(actor_ref)
 
       attributes = {
         recipe_id: recipe.id,
@@ -67,7 +68,7 @@ module Jazari
       end
     end
 
-    def tick(run:, expected_revision:, item_id:, done:, actor_ref:, note: nil, now: Time.now.utc)
+    def tick(run:, expected_revision:, item_id:, done:, actor_ref: nil, note: nil, now: Time.now.utc)
       mutate(run, expected_revision) do |record|
         raise RunClosed, "run #{record.id} is already closed" if record.closed?
 
@@ -84,12 +85,14 @@ module Jazari
 
         ticks = stored(record.ticks).reject { |t| t["id"] == item_id.to_s }
         ticks << { "id" => item_id.to_s, "done" => done == true, "at" => now.utc.iso8601,
-                   "actor_ref" => actor_ref.to_s, "note" => note&.to_s }
+                   "actor_ref" => resolve_actor_ref(actor_ref, fallback: record.actor_ref),
+                   "note" => note&.to_s }
         record.ticks = ticks
       end
     end
 
-    def attach_evidence(run:, expected_revision:, item_id:, kind:, value:, now: Time.now.utc)
+    def attach_evidence(run:, expected_revision:, item_id:, kind:, value:, actor_ref: nil,
+                        now: Time.now.utc)
       raise InvalidRunbook, "unknown evidence kind #{kind.inspect}" unless EVIDENCE_KINDS.include?(kind.to_s)
 
       mutate(run, expected_revision) do |record|
@@ -97,7 +100,8 @@ module Jazari
 
         record.evidence = stored(record.evidence) + [
           { "item_id" => item_id&.to_s, "kind" => kind.to_s,
-            "value" => value.to_s[0, MAX_EVIDENCE], "at" => now.utc.iso8601 }
+            "value" => value.to_s[0, MAX_EVIDENCE], "at" => now.utc.iso8601,
+            "actor_ref" => resolve_actor_ref(actor_ref, fallback: record.actor_ref) }
         ]
       end
     end
@@ -175,5 +179,15 @@ module Jazari
 
     def stored(value) = Array(value).map { |h| h.to_h.transform_keys(&:to_s) }
     private_class_method :stored
+
+    def resolve_actor_ref(explicit, fallback: nil)
+      value = explicit || fallback || Jazari.config.actor_ref
+      value = value.call if value.respond_to?(:call)
+      value = value.to_s
+      raise InvalidRunbook, "actor_ref is required" if value.empty?
+
+      value
+    end
+    private_class_method :resolve_actor_ref
   end
 end

data/lib/jazari/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Jazari
-  VERSION = "0.4.0"
+  VERSION = "0.5.0"
 end

data/lib/jazari.rb

@@ -44,7 +44,9 @@ module Jazari
       # renaming live tables in the same deploy as a cut-over is exactly what
       # the adoption plan forbids. Any key omitted falls back to the prefix.
       self.table_names   ||= {}
-      self.actor_ref     ||= ->(actor) { "actor:#{actor.object_id}" }
+      # Optional zero-argument provider for trusted system contexts. User and
+      # agent callers should pass an explicit opaque actor_ref.
+      self.actor_ref     = nil if actor_ref.nil?
     end
 
     # Fail at boot, not at first call.
@@ -52,6 +54,10 @@ module Jazari
       anchor_scopes.each_key do |scope|
         raise ArgumentError, "anchor scope #{scope.inspect} must be a String" unless scope.is_a?(String)
       end
+      if actor_ref && !actor_ref.is_a?(String) &&
+          !(actor_ref.respond_to?(:call) && actor_ref.respond_to?(:arity) && actor_ref.arity.zero?)
+        raise ArgumentError, "actor_ref must be a String or zero-argument callable"
+      end
       true
     end
   end
@@ -82,18 +88,18 @@ module Jazari
   # The documented public interface (spec 02 section 3). `Runs` is the
   # implementation; these are the names hosts and the MCP handler call.
   class << self
-    def open_run(target:, actor_ref:, now: Time.now.utc)
+    def open_run(target:, actor_ref: nil, now: Time.now.utc)
       Runs.open(target: target, actor_ref: actor_ref, now: now)
     end
 
-    def tick(run:, expected_revision:, item_id:, done:, actor_ref:, note: nil)
+    def tick(run:, expected_revision:, item_id:, done:, actor_ref: nil, note: nil)
       Runs.tick(run: run, expected_revision: expected_revision, item_id: item_id,
                 done: done, actor_ref: actor_ref, note: note)
     end
 
-    def attach_evidence(run:, expected_revision:, item_id:, kind:, value:)
+    def attach_evidence(run:, expected_revision:, item_id:, kind:, value:, actor_ref: nil)
       Runs.attach_evidence(run: run, expected_revision: expected_revision,
-                           item_id: item_id, kind: kind, value: value)
+                           item_id: item_id, kind: kind, value: value, actor_ref: actor_ref)
     end
 
     def close_run(run:, expected_revision:, outcome:)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jazari
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.5.0
 platform: ruby
 authors:
 - Nauman Tariq