eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Wire KV sync through iroh-docs

Browse source
This commit is contained in:
Eric Wendland 2026-05-22 16:24:11 +02:00
commit 59c463eb40
9 changed files with 406 additions and 47 deletions
Download patch file Download diff file Expand all files Collapse all files

15
docs/adr/0011-kv-iroh-documents.md
View file

@ -12,8 +12,13 @@ prefix-scoped capabilities.
## Consequences
The prototype exposes CLI shape and durable local KV state. `iroh-docs 0.95.0`
is pinned and compiles against the daemon-owned `iroh 0.95.1` endpoint
generation, so the remaining work is replacing the bootstrap control-path KV
sync with an Iroh Documents namespace implementation and resource-scoped
authorization checks around namespace access.
The prototype keeps SQLite as the durable local KV index and mirrors each named
KV store into an Iroh Documents namespace on the daemon-owned `iroh 0.95.1`
endpoint. Remote `geth kv sync` still uses geth control as the authorization
preflight. If the caller has `kv.read` on the remote `resource:kv:<name>`, the
remote daemon returns a read-only Iroh Documents ticket and the requester imports
entries through `iroh-docs 0.95.0`.
The daemon must not hand out Iroh Documents write capabilities as a substitute
for geth authorization. Write authority remains modeled through geth resource
capabilities such as `kv.write` and `kv.write_prefix:<prefix>`.