.tiny-brain/ directory differs from what the server last saw, a push reports
that delta and the server projects it onto your project’s feed, board, and
metrics.
The origin of a push is which client sent it. Origin is recorded with
every push and shown in the activity feed.
The four origins
Why origin matters
Origin is used for three things:- Conflict resolution. A
cipush from the default branch is treated as authoritative — it can overwrite aclipush that ran before merge. Adashboardpush and aclipush race symmetrically. - Auditability. “Who changed this?” combines the role (human/agent) with the origin (cli/ci/mcp/dashboard) to give a complete trail in the feed.
- Filtering. The activity feed can be filtered to hide noisy origins —
e.g. exclude
dashboardmicro-edits when reviewing a release.
Origin and authentication
Every origin uses the same push-token auth (Authorization: Bearer <token>).
The server doesn’t trust the client’s self-reported origin blindly — it
cross-checks the request shape and user-agent against the claimed origin.
A push that claims origin: ci from a request with no CI environment fields
is rejected.
CI is special
origin: ci pushes carry extra metadata the other origins don’t:
- The commit SHA the push corresponds to
- The branch name
- The CI run URL (so the dashboard can deep-link back to the build)
- The PR number, if the push happened during a PR build
abc1234” links in
the activity feed.
See also
- Phases — origin influences phase transitions (CI pushes
from main move work to
done) - Integration guides → GitHub Actions —
setting up
origin: cipushes