* feat(bookkeeping): agent attribution into the immutable ledger layer
Close the three attribution gaps left after 20260618120001 (which made
commit_method record 'api_key' for MCP-relayed approvals):
- journal_entries gains nullable committed_actor_type/committed_actor_label,
stamped by commit_journal_entry in the same draft->posted UPDATE that
writes commit_method. The RPC gains p_actor_type/p_actor_label
(DEFAULT NULL; prior signature dropped first to avoid PostgREST overload
ambiguity, same technique as 20260421140000).
- write_audit_log now populates audit_log.actor_type/actor_label from
transaction-local gnubok.actor_* GUCs set by the RPC (the established
gnubok.allow_delete pattern). Unset GUCs COALESCE to 'user' — byte-
identical to the column's previous effective DEFAULT for every
pre-existing write path.
- commitPendingOperation accepts opts.actor and runs the entire executor
inside an AsyncLocalStorage runWithActor() scope read by commitEntry(),
so EVERY journal commit an operation makes is attributed — closing the
documented "commitMethod only reaches create_voucher" gap. MCP approve
passes the api_key actor + key label; web single/bulk approve pass the
user + email.
Known limitation (documented): reverseEntry posts reversal vouchers via
direct PostgREST writes, not the commit RPC — reversals keep NULL
attribution until that path is RPC-ified (follow-up).
pg-real coverage: lib/bookkeeping/__tests__/commit-actor.pg.test.ts
(RPC param stamping, audit GUC read, transaction-locality, CHECK
rejection, immutability of the new columns, single-signature guard).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* fix(bookkeeping): split actor-context so client bundles never see node:async_hooks
CI core-only build failed: engine.ts is reachable from client component
bundles (invoices/[id] page), and the static node:async_hooks import in
actor-context.ts cannot be chunked for the browser. Split the module:
- actor-context.ts (isomorphic): CommitActor type + a storage registry +
getActor(). In a client bundle the registry stays empty and getActor()
returns undefined — identical to the server-side no-scope default.
- actor-context-node.ts (server-only): owns the AsyncLocalStorage, binds it
into the registry on import, exports runWithActor(). Imported only by the
approval paths (commit.ts), which are never client-reachable.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* feat(voucher): add create voucher and correct entry previews; update commit methods
* feat: add support for pending operations in API key scopes and OAuth client management
- Introduced new API key scopes for reading and approving pending operations.
- Updated the scope groups to include pending operations.
- Added new tools for listing and managing pending operations.
- Implemented OAuth client registration and revocation endpoints.
- Created a UI panel for managing OAuth clients, including registration and revocation.
- Added tests for pending operations tools and OAuth allowlist functionality.
- Implemented a database migration for OAuth client registrations with appropriate policies and constraints.
* feat: Implement OAuth client registration rate limiting and enhance security measures
- Added IP-based rate limiting to the OAuth client registration endpoint to prevent enumeration attacks.
- Introduced a service-role client for allowlist lookups, ensuring trust boundaries are maintained.
- Updated error responses to be uniform across different types of redirect URI validation failures.
- Enhanced tests to reflect changes in OAuth scope handling, ensuring fallback to read-only scopes when no scopes are provided.
- Improved handling of high-risk pending operations, requiring explicit confirmation for approvals.
- Added audit logging for OAuth client revocations and pending operation approvals/rejections to maintain a security audit trail.
- Refactored API key scope management to include default read-only scopes for OAuth-issued keys and added segregation-of-duties checks.
Jakob Wennberg