diff --git a/backend/api/apitest/apitest.go b/backend/api/apitest/apitest.go
index 7888aaac0..c8c577b68 100644
--- a/backend/api/apitest/apitest.go
+++ b/backend/api/apitest/apitest.go
@@ -32,6 +32,12 @@ func (b *ChangeBuilder) SetCapability(cpbID string) *ChangeBuilder {
 	return b
 }
 
+// SetMessage sets the optional human-readable publish message on the request.
+func (b *ChangeBuilder) SetMessage(message string) *ChangeBuilder {
+	b.req.Message = message
+	return b
+}
+
 // SetMetadata adds a SetMetadata change to the request.
 func (b *ChangeBuilder) SetMetadata(key, value string) *ChangeBuilder {
 	b.req.Changes = append(b.req.Changes, &documents.DocumentChange{
diff --git a/backend/api/documents/v3alpha/dochistory.go b/backend/api/documents/v3alpha/dochistory.go
index 40a84a67f..7d1eb2a50 100644
--- a/backend/api/documents/v3alpha/dochistory.go
+++ b/backend/api/documents/v3alpha/dochistory.go
@@ -107,6 +107,7 @@ func (srv *Server) ListDocumentChanges(ctx context.Context, in *documents.ListDo
 			Author:     change.Signer.String(),
 			Deps:       colx.SliceMap(change.Deps, cid.Cid.String),
 			CreateTime: timestamppb.New(change.Ts),
+			Message:    change.Message,
 		})
 	}
 
@@ -144,5 +145,6 @@ func (srv *Server) GetDocumentChange(ctx context.Context, in *documents.GetDocum
 		Author:     change.Signer.String(),
 		Deps:       colx.SliceMap(change.Deps, cid.Cid.String),
 		CreateTime: timestamppb.New(change.Ts),
+		Message:    change.Message,
 	}, nil
 }
diff --git a/backend/api/documents/v3alpha/docmodel/crdt.go b/backend/api/documents/v3alpha/docmodel/crdt.go
index 8bd357ff9..d04ef6e7b 100644
--- a/backend/api/documents/v3alpha/docmodel/crdt.go
+++ b/backend/api/documents/v3alpha/docmodel/crdt.go
@@ -590,8 +590,10 @@ func addUnique(in []int, v int) []int {
 	return slices.Insert(in, targetIndex, v)
 }
 
-// prepareChange to be applied later.
-func (e *docCRDT) prepareChange(ts time.Time, signer core.Signer, body blob.ChangeBody) (hb blob.Encoded[*blob.Change], err error) {
+// prepareChange to be applied later. The message argument is an optional
+// human-readable description (like a git commit message) embedded in the
+// signed Change blob; pass an empty string to omit it.
+func (e *docCRDT) prepareChange(ts time.Time, signer core.Signer, body blob.ChangeBody, message string) (hb blob.Encoded[*blob.Change], err error) {
 	var genesis cid.Cid
 	if len(e.cids) > 0 {
 		genesis = e.cids[0]
@@ -611,7 +613,7 @@ func (e *docCRDT) prepareChange(ts time.Time, signer core.Signer, body blob.Chan
 	}
 	slices.SortFunc(deps, func(a, b cid.Cid) int { return strings.Compare(a.KeyString(), b.KeyString()) })
 
-	hb, err = blob.NewChange(signer, genesis, deps, depth, body, ts)
+	hb, err = blob.NewChange(signer, genesis, deps, depth, body, ts, message)
 	if err != nil {
 		return hb, err
 	}
diff --git a/backend/api/documents/v3alpha/docmodel/docmodel.go b/backend/api/documents/v3alpha/docmodel/docmodel.go
index 577cc49b4..07786d9a1 100644
--- a/backend/api/documents/v3alpha/docmodel/docmodel.go
+++ b/backend/api/documents/v3alpha/docmodel/docmodel.go
@@ -340,22 +340,25 @@ func (dm *Document) ensureTreeMutation() (*blockTreeMutation, error) {
 	return dm.mut, nil
 }
 
-// SignChange creates a change.
+// SignChange creates a change with an optional human-readable message
+// (similar to a git commit message). Pass an empty string to omit the message.
 // After this the Document instance must be discarded. The change must be applied to a different state.
-func (dm *Document) SignChange(kp *core.KeyPair) (hb blob.Encoded[*blob.Change], err error) {
-	return dm.SignChangeAt(kp, dm.crdt.clock.MustNow())
+func (dm *Document) SignChange(kp *core.KeyPair, message string) (hb blob.Encoded[*blob.Change], err error) {
+	return dm.SignChangeAt(kp, dm.crdt.clock.MustNow(), message)
 }
 
 // SignChangeAt creates a change at the given timestamp, ignoring the internal clock.
 // The timestamp must still satisfy the causality rules, i.e. be strictly greater than any previously observed timestamp.
-func (dm *Document) SignChangeAt(kp *core.KeyPair, at time.Time) (hb blob.Encoded[*blob.Change], err error) {
-	return dm.CreateChange(kp, at)
+// The message argument is optional (pass an empty string to omit).
+func (dm *Document) SignChangeAt(kp *core.KeyPair, at time.Time, message string) (hb blob.Encoded[*blob.Change], err error) {
+	return dm.CreateChange(kp, at, message)
 }
 
 // CreateChange creates a Change blob with the given signer and principal.
 // This allows using NopSigner for client-side signing scenarios where the signer doesn't actually sign.
+// The message argument is optional and embedded in the signed Change blob.
 // After this the Document instance must be discarded.
-func (dm *Document) CreateChange(signer core.Signer, at time.Time) (hb blob.Encoded[*blob.Change], err error) {
+func (dm *Document) CreateChange(signer core.Signer, at time.Time, message string) (hb blob.Encoded[*blob.Change], err error) {
 	if dm.done {
 		return hb, fmt.Errorf("using already committed mutation")
 	}
@@ -369,7 +372,7 @@ func (dm *Document) CreateChange(signer core.Signer, at time.Time) (hb blob.Enco
 
 	at = at.Round(dm.crdt.clock.Precision)
 
-	hb, err = dm.crdt.prepareChange(at, signer, ops)
+	hb, err = dm.crdt.prepareChange(at, signer, ops, message)
 	if err != nil {
 		return hb, err
 	}
diff --git a/backend/api/documents/v3alpha/docmodel/docmodel_test.go b/backend/api/documents/v3alpha/docmodel/docmodel_test.go
index 46664a51d..52b5976a6 100644
--- a/backend/api/documents/v3alpha/docmodel/docmodel_test.go
+++ b/backend/api/documents/v3alpha/docmodel/docmodel_test.go
@@ -20,7 +20,7 @@ func TestDocmodelSmoke(t *testing.T) {
 	must.Do(doc.MoveBlock("b2", "", "b1"))
 	must.Do(doc.MoveBlock("b3", "", "b2"))
 	must.Do(doc.MoveBlock("b1.1", "b1", ""))
-	c1 := must.Do2(doc.SignChange(alice))
+	c1 := must.Do2(doc.SignChange(alice, ""))
 
 	want := &blob.Change{
 		Body: blob.ChangeBody{
@@ -54,7 +54,7 @@ func TestDocmodelSmoke(t *testing.T) {
 		must.Do(doc.DeleteBlock("b1.1"))
 		must.Do(doc.MoveBlock("b4", "", ""))
 		must.Do(doc.DeleteBlock("b3"))
-		c2 := must.Do2(doc.SignChange(alice))
+		c2 := must.Do2(doc.SignChange(alice, ""))
 
 		{
 			doc := must.Do2(New("mydoc", cclock.New()))
@@ -94,7 +94,7 @@ func TestBug_RedundantReplaces(t *testing.T) {
 		Text: "3",
 	}))
 
-	c1, err := doc.SignChange(alice)
+	c1, err := doc.SignChange(alice, "")
 	require.NoError(t, err)
 
 	var c2 blob.Encoded[*blob.Change]
@@ -120,7 +120,7 @@ func TestBug_RedundantReplaces(t *testing.T) {
 			Text: "3",
 		}))
 
-		c2, err = doc.SignChange(alice)
+		c2, err = doc.SignChange(alice, "")
 		require.NoError(t, err)
 	}
 
@@ -176,7 +176,7 @@ func TestBug_BlockReordering(t *testing.T) {
 		Text: "5",
 	}))
 
-	c1, err := doc.SignChange(alice)
+	c1, err := doc.SignChange(alice, "")
 	require.NoError(t, err)
 
 	var c2 blob.Encoded[*blob.Change]
@@ -219,7 +219,7 @@ func TestBug_BlockReordering(t *testing.T) {
 
 		must.Do(doc.DeleteBlock("mMa"))
 
-		c2, err = doc.SignChange(alice)
+		c2, err = doc.SignChange(alice, "")
 		require.NoError(t, err)
 	}
 
diff --git a/backend/api/documents/v3alpha/documents.go b/backend/api/documents/v3alpha/documents.go
index 5b57ddebf..d5ca5520a 100644
--- a/backend/api/documents/v3alpha/documents.go
+++ b/backend/api/documents/v3alpha/documents.go
@@ -222,12 +222,12 @@ func (srv *Server) CreateDocumentChange(ctx context.Context, in *documents.Creat
 
 	var docChange blob.Encoded[*blob.Change]
 	if in.Timestamp != nil {
-		docChange, err = doc.SignChangeAt(kp, in.Timestamp.AsTime())
+		docChange, err = doc.SignChangeAt(kp, in.Timestamp.AsTime(), in.Message)
 		if err != nil {
 			return nil, fmt.Errorf("failed to create document change with the provided timestamp: %w", err)
 		}
 	} else {
-		docChange, err = doc.SignChange(kp)
+		docChange, err = doc.SignChange(kp, in.Message)
 		if err != nil {
 			return nil, fmt.Errorf("failed to create document change: %w", err)
 		}
@@ -274,15 +274,15 @@ func (srv *Server) PrepareChange(ctx context.Context, in *documents.PrepareChang
 		BaseVersion: in.BaseVersion,
 		Changes:     in.Changes,
 		Capability:  in.Capability,
-		Visibility:  in.Visibility,
 	})
 	if err != nil {
 		return nil, err
 	}
 
 	// Use NopSigner to create the Change without actually signing it.
-	// The client will sign it themselves.
-	change, err := doc.CreateChange(blob.NewNopSigner(nil), time.Now())
+	// The client will sign it themselves. The optional message is embedded in
+	// the unsigned bytes so the client doesn't need to know about it.
+	change, err := doc.CreateChange(blob.NewNopSigner(nil), time.Now(), in.Message)
 	if err != nil {
 		return nil, err
 	}
@@ -1710,7 +1710,7 @@ func (srv *Server) getRef(ctx context.Context, c cid.Cid) (hb blob.WithCID[*blob
 }
 
 func (srv *Server) ensureProfileGenesis(ctx context.Context, kp *core.KeyPair) error {
-	ebc, err := blob.NewChange(kp, cid.Undef, nil, 0, blob.ChangeBody{}, blob.ZeroUnixTime())
+	ebc, err := blob.NewChange(kp, cid.Undef, nil, 0, blob.ChangeBody{}, blob.ZeroUnixTime(), "")
 	if err != nil {
 		return err
 	}
diff --git a/backend/blob/blob_capability_test.go b/backend/blob/blob_capability_test.go
index 3c216d208..bc2169ddc 100644
--- a/backend/blob/blob_capability_test.go
+++ b/backend/blob/blob_capability_test.go
@@ -25,7 +25,7 @@ func TestOutOfOrderCapability(t *testing.T) {
 		Ops: []OpMap{
 			must.Do2(NewOpSetKey("name", "Hello")),
 		},
-	}, clock.MustNow())
+	}, clock.MustNow(), "")
 	require.NoError(t, err)
 
 	ref, err := NewRef(bob, 0, change.CID, alice.Principal(), "", []cid.Cid{change.CID}, clock.MustNow(), VisibilityPublic)
diff --git a/backend/blob/blob_change.go b/backend/blob/blob_change.go
index cf19ed7bb..3c4786613 100644
--- a/backend/blob/blob_change.go
+++ b/backend/blob/blob_change.go
@@ -29,6 +29,10 @@ type Change struct {
 	Deps    []cid.Cid  `refmt:"deps,omitempty"`
 	Depth   int        `refmt:"depth,omitempty"`
 	Body    ChangeBody `refmt:"body,omitempty"`
+	// Message is an optional human-readable description of this change,
+	// similar to a git commit message. Set by the publisher and preserved
+	// permanently as part of the signed Change blob.
+	Message string `refmt:"message,omitempty"`
 }
 
 // ChangeBody is the body of a Change.
@@ -44,8 +48,10 @@ type ChangeBody struct {
 	Ops []OpMap `refmt:"ops,omitempty"`
 }
 
-// NewChange creates a new Change.
-func NewChange(signer core.Signer, genesis cid.Cid, deps []cid.Cid, depth int, body ChangeBody, ts time.Time) (eb Encoded[*Change], err error) {
+// NewChange creates a new Change. The message argument is an optional
+// human-readable description (like a git commit message) embedded into the
+// signed blob; pass an empty string to omit it.
+func NewChange(signer core.Signer, genesis cid.Cid, deps []cid.Cid, depth int, body ChangeBody, ts time.Time, message string) (eb Encoded[*Change], err error) {
 	if !slices.IsSortedFunc(deps, func(a, b cid.Cid) int {
 		return cmp.Compare(a.KeyString(), b.KeyString())
 	}) {
@@ -62,6 +68,7 @@ func NewChange(signer core.Signer, genesis cid.Cid, deps []cid.Cid, depth int, b
 		Deps:    deps,
 		Depth:   depth,
 		Body:    body,
+		Message: message,
 	}
 
 	if err := Sign(signer, cc, &cc.BaseBlob.Sig); err != nil {
@@ -526,7 +533,11 @@ func indexChange(ictx *indexingCtx, id int64, eb Encoded[*Change]) error {
 		}
 	}
 
-	if extra.Title != "" || len(extra.Metadata) > 0 {
+	if v.Message != "" {
+		extra.Message = v.Message
+	}
+
+	if extra.Title != "" || len(extra.Metadata) > 0 || extra.Message != "" {
 		sb.ExtraAttrs = extra
 	}
 
@@ -544,6 +555,7 @@ func indexChange(ictx *indexingCtx, id int64, eb Encoded[*Change]) error {
 type changeIndexedAttrs struct {
 	Title    string         `json:"title"` // Deprecated. TODO(burdiyan): remove this in favor of metadata.
 	Metadata map[string]any `json:"metadata,omitempty"`
+	Message  string         `json:"message,omitempty"`
 }
 
 type decodedBlob[T any] struct {
diff --git a/backend/blob/blob_change_test.go b/backend/blob/blob_change_test.go
index f2568f765..9371d1ef4 100644
--- a/backend/blob/blob_change_test.go
+++ b/backend/blob/blob_change_test.go
@@ -1,8 +1,12 @@
 package blob
 
 import (
+	"seed/backend/core/coretest"
+	"seed/backend/util/cclock"
+	"seed/backend/util/must"
 	"testing"
 
+	"github.com/ipfs/go-cid"
 	cbornode "github.com/ipfs/go-ipld-cbor"
 	"github.com/stretchr/testify/require"
 )
@@ -55,3 +59,37 @@ func TestBlockEncoding_FieldInlining(t *testing.T) {
 	var blk2 Block
 	require.NoError(t, cbornode.DecodeInto(raw, &blk2), "round-trip decoding failed")
 }
+
+// TestChangeMessageRoundTrip verifies that the optional Message field
+// survives a CBOR encode/decode cycle and is included in the indexed
+// extra_attrs so the API can surface it without re-decoding the blob.
+func TestChangeMessageRoundTrip(t *testing.T) {
+	alice := coretest.NewTester("alice").Account
+	clock := cclock.New()
+
+	msg := "Initial publish: import seed sources"
+	c, err := NewChange(alice, cid.Undef, nil, 0, ChangeBody{
+		Ops: []OpMap{
+			must.Do2(NewOpSetKey("title", "Hello")),
+		},
+	}, clock.MustNow(), msg)
+	require.NoError(t, err)
+
+	var decoded Change
+	require.NoError(t, cbornode.DecodeInto(c.Data, &decoded))
+	require.Equal(t, msg, decoded.Message, "message field must survive CBOR round-trip")
+
+	// Also check that an empty message is omitted from the encoding,
+	// preserving backward compatibility for changes without a message.
+	c2, err := NewChange(alice, cid.Undef, nil, 0, ChangeBody{
+		Ops: []OpMap{
+			must.Do2(NewOpSetKey("title", "Hello")),
+		},
+	}, clock.MustNow(), "")
+	require.NoError(t, err)
+
+	var raw map[string]any
+	require.NoError(t, cbornode.DecodeInto(c2.Data, &raw))
+	_, hasMessage := raw["message"]
+	require.False(t, hasMessage, "empty message must be omitted from CBOR encoding")
+}
diff --git a/backend/blob/blob_ref_test.go b/backend/blob/blob_ref_test.go
index 98d560935..63dac0401 100644
--- a/backend/blob/blob_ref_test.go
+++ b/backend/blob/blob_ref_test.go
@@ -28,7 +28,7 @@ func TestRefCausality(t *testing.T) {
 		Ops: []OpMap{
 			must.Do2(NewOpSetKey("title", "Initial Document")),
 		},
-	}, clock.MustNow())
+	}, clock.MustNow(), "")
 	require.NoError(t, err)
 
 	time.Sleep(time.Millisecond)
@@ -38,7 +38,7 @@ func TestRefCausality(t *testing.T) {
 		Ops: []OpMap{
 			must.Do2(NewOpSetKey("content", "Updated content")),
 		},
-	}, clock.MustNow())
+	}, clock.MustNow(), "")
 	require.NoError(t, err)
 
 	time.Sleep(time.Millisecond)
diff --git a/backend/blob/index_test.go b/backend/blob/index_test.go
index 4a04178a8..f8919daac 100644
--- a/backend/blob/index_test.go
+++ b/backend/blob/index_test.go
@@ -78,7 +78,7 @@ func TestWriterCheck_DelegatedSessionKeys(t *testing.T) {
 		Ops: []OpMap{
 			must.Do2(NewOpSetKey("title", "Session key edit")),
 		},
-	}, clock.MustNow())
+	}, clock.MustNow(), "")
 	require.NoError(t, err)
 
 	ref, err := NewRef(bobSession, 0, change.CID, alice.Principal(), "/delegated-session", []cid.Cid{change.CID}, clock.MustNow(), VisibilityPublic)
@@ -120,7 +120,7 @@ func TestWriterCheck_OwnersSessionKey(t *testing.T) {
 		Ops: []OpMap{
 			must.Do2(NewOpSetKey("title", "Owner session key edit")),
 		},
-	}, clock.MustNow())
+	}, clock.MustNow(), "")
 	require.NoError(t, err)
 
 	ref, err := NewRef(aliceSession, 0, change.CID, alice.Principal(), "/owner-session", []cid.Cid{change.CID}, clock.MustNow(), VisibilityPublic)
diff --git a/backend/blob/index_visibility_test.go b/backend/blob/index_visibility_test.go
index 2c1d12b2f..244f2372a 100644
--- a/backend/blob/index_visibility_test.go
+++ b/backend/blob/index_visibility_test.go
@@ -93,35 +93,35 @@ func TestRefVisibilityPropagationSingleRef(t *testing.T) {
 		Ops: []OpMap{
 			must.Do2(NewOpSetKey("title", "Genesis")),
 		},
-	}, clock.MustNow())
+	}, clock.MustNow(), "")
 	require.NoError(t, err)
 
 	c2, err := NewChange(alice.Account, c1.CID, []cid.Cid{c1.CID}, 1, ChangeBody{
 		Ops: []OpMap{
 			must.Do2(NewOpSetKey("title", "First update")),
 		},
-	}, clock.MustNow())
+	}, clock.MustNow(), "")
 	require.NoError(t, err)
 
 	c3, err := NewChange(alice.Account, c1.CID, []cid.Cid{c2.CID}, 2, ChangeBody{
 		Ops: []OpMap{
 			must.Do2(NewOpSetKey("title", "Side branch")),
 		},
-	}, clock.MustNow())
+	}, clock.MustNow(), "")
 	require.NoError(t, err)
 
 	c4, err := NewChange(alice.Account, c1.CID, []cid.Cid{c2.CID}, 2, ChangeBody{
 		Ops: []OpMap{
 			must.Do2(NewOpSetKey("content", "Merge head")),
 		},
-	}, clock.MustNow())
+	}, clock.MustNow(), "")
 	require.NoError(t, err)
 
 	cStar, err := NewChange(alice.Account, c1.CID, []cid.Cid{c4.CID}, 3, ChangeBody{
 		Ops: []OpMap{
 			must.Do2(NewOpSetKey("content", "Out of closure")),
 		},
-	}, clock.MustNow())
+	}, clock.MustNow(), "")
 	require.NoError(t, err)
 
 	ref, err := NewRef(alice.Account, 0, c1.CID, alice.Account.Principal(), "/test-doc", []cid.Cid{c4.CID, c3.CID}, clock.MustNow(), VisibilityPrivate)
diff --git a/backend/daemon/http.go b/backend/daemon/http.go
index 1e5ca3ec2..cf0c579e6 100644
--- a/backend/daemon/http.go
+++ b/backend/daemon/http.go
@@ -127,9 +127,10 @@ func initHTTP(
 	return
 }
 
-// grpcUIMu serializes standalone.Handler calls. The underlying proto printer
-// has lazy-init fields on shared global descriptors that race under -race.
-var grpcUIMu sync.Mutex
+// grpcUIHandlerMu serializes calls to standalone.Handler, which internally
+// uses protoprint.DefaultPrinter — a package-level variable that is not
+// safe for concurrent use.
+var grpcUIHandlerMu sync.Mutex
 
 func makeGRPCUIHandler(rpc *grpc.Server, clean *cleanup.Stack, g *errgroup.Group) (http.Handler, error) {
 	methods, err := grpcui.AllMethodsForServer(rpc)
@@ -162,10 +163,9 @@ func makeGRPCUIHandler(rpc *grpc.Server, clean *cleanup.Stack, g *errgroup.Group
 	}
 	clean.AddErrFunc(conn.Close)
 
-	grpcUIMu.Lock()
+	grpcUIHandlerMu.Lock()
 	h := standalone.Handler(conn, "seed daemon", methods, files)
-	grpcUIMu.Unlock()
-
+	grpcUIHandlerMu.Unlock()
 	return h, nil
 }
 
diff --git a/backend/genproto/documents/v3alpha/access_control.pb.go b/backend/genproto/documents/v3alpha/access_control.pb.go
index 2058fe640..97f8deeab 100644
--- a/backend/genproto/documents/v3alpha/access_control.pb.go
+++ b/backend/genproto/documents/v3alpha/access_control.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.36.9
+// 	protoc-gen-go v1.36.11
 // 	protoc        v4.24.4
 // source: documents/v3alpha/access_control.proto
 
diff --git a/backend/genproto/documents/v3alpha/comments.pb.go b/backend/genproto/documents/v3alpha/comments.pb.go
index 26443198b..1ff91c7e5 100644
--- a/backend/genproto/documents/v3alpha/comments.pb.go
+++ b/backend/genproto/documents/v3alpha/comments.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.36.9
+// 	protoc-gen-go v1.36.11
 // 	protoc        v4.24.4
 // source: documents/v3alpha/comments.proto
 
diff --git a/backend/genproto/documents/v3alpha/documents.pb.go b/backend/genproto/documents/v3alpha/documents.pb.go
index 95a7edbd9..3171e33b9 100644
--- a/backend/genproto/documents/v3alpha/documents.pb.go
+++ b/backend/genproto/documents/v3alpha/documents.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.36.9
+// 	protoc-gen-go v1.36.11
 // 	protoc        v4.24.4
 // source: documents/v3alpha/documents.proto
 
@@ -440,7 +440,9 @@ type CreateDocumentChangeRequest struct {
 	// Optional. Visibility of the document.
 	// Can only be specified here when creating the document for the first time,
 	// i.e. when `base_version` is empty.
-	Visibility    ResourceVisibility `protobuf:"varint,8,opt,name=visibility,proto3,enum=com.seed.documents.v3alpha.ResourceVisibility" json:"visibility,omitempty"`
+	Visibility ResourceVisibility `protobuf:"varint,8,opt,name=visibility,proto3,enum=com.seed.documents.v3alpha.ResourceVisibility" json:"visibility,omitempty"`
+	// Optional. A human-readable message describing this publish, similar to a git commit message.
+	Message       string `protobuf:"bytes,9,opt,name=message,proto3" json:"message,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
 }
@@ -531,6 +533,13 @@ func (x *CreateDocumentChangeRequest) GetVisibility() ResourceVisibility {
 	return ResourceVisibility_RESOURCE_VISIBILITY_UNSPECIFIED
 }
 
+func (x *CreateDocumentChangeRequest) GetMessage() string {
+	if x != nil {
+		return x.Message
+	}
+	return ""
+}
+
 // Request to prepare an unsigned document change for client-side signing.
 type PrepareChangeRequest struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
@@ -548,10 +557,9 @@ type PrepareChangeRequest struct {
 	// Optional. ID of the capability that allows the signing key to write on behalf of the account
 	// for this particular path.
 	Capability string `protobuf:"bytes,5,opt,name=capability,proto3" json:"capability,omitempty"`
-	// Optional. Visibility of the document.
-	// Can only be specified here when creating the document for the first time,
-	// i.e. when `base_version` is empty.
-	Visibility    ResourceVisibility `protobuf:"varint,6,opt,name=visibility,proto3,enum=com.seed.documents.v3alpha.ResourceVisibility" json:"visibility,omitempty"`
+	// Optional. A human-readable message describing this publish, similar to a git commit message.
+	// Embedded into the prepared Change blob so client-side signing preserves it.
+	Message       string `protobuf:"bytes,7,opt,name=message,proto3" json:"message,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
 }
@@ -621,11 +629,11 @@ func (x *PrepareChangeRequest) GetCapability() string {
 	return ""
 }
 
-func (x *PrepareChangeRequest) GetVisibility() ResourceVisibility {
+func (x *PrepareChangeRequest) GetMessage() string {
 	if x != nil {
-		return x.Visibility
+		return x.Message
 	}
-	return ResourceVisibility_RESOURCE_VISIBILITY_UNSPECIFIED
+	return ""
 }
 
 // Response with prepared change data for client-side signing.
@@ -2825,7 +2833,10 @@ type DocumentChangeInfo struct {
 	// List of change IDs that this change depends on.
 	Deps []string `protobuf:"bytes,3,rep,name=deps,proto3" json:"deps,omitempty"`
 	// Time when the change was created (as claimed by the author).
-	CreateTime    *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
+	CreateTime *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
+	// Optional. A human-readable message attached to the change by the publisher,
+	// similar to a git commit message.
+	Message       string `protobuf:"bytes,5,opt,name=message,proto3" json:"message,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
 }
@@ -2888,6 +2899,13 @@ func (x *DocumentChangeInfo) GetCreateTime() *timestamppb.Timestamp {
 	return nil
 }
 
+func (x *DocumentChangeInfo) GetMessage() string {
+	if x != nil {
+		return x.Message
+	}
+	return ""
+}
+
 // Basic data about a document with some aggregations and metadata.
 // It's like Document, without the content, but with some additional info.
 type DocumentInfo struct {
@@ -4455,7 +4473,7 @@ const file_documents_v3alpha_documents_proto_rawDesc = "" +
 	"\x1bBatchGetDocumentInfoRequest\x12N\n" +
 	"\brequests\x18\x01 \x03(\v22.com.seed.documents.v3alpha.GetDocumentInfoRequestR\brequests\"f\n" +
 	"\x1cBatchGetDocumentInfoResponse\x12F\n" +
-	"\tdocuments\x18\x01 \x03(\v2(.com.seed.documents.v3alpha.DocumentInfoR\tdocuments\"\x88\x03\n" +
+	"\tdocuments\x18\x01 \x03(\v2(.com.seed.documents.v3alpha.DocumentInfoR\tdocuments\"\xa2\x03\n" +
 	"\x1bCreateDocumentChangeRequest\x12\x18\n" +
 	"\aaccount\x18\x01 \x01(\tR\aaccount\x12\x12\n" +
 	"\x04path\x18\x02 \x01(\tR\x04path\x12!\n" +
@@ -4468,7 +4486,8 @@ const file_documents_v3alpha_documents_proto_rawDesc = "" +
 	"\ttimestamp\x18\a \x01(\v2\x1a.google.protobuf.TimestampR\ttimestamp\x12N\n" +
 	"\n" +
 	"visibility\x18\b \x01(\x0e2..com.seed.documents.v3alpha.ResourceVisibilityR\n" +
-	"visibility\"\x9d\x02\n" +
+	"visibility\x12\x18\n" +
+	"\amessage\x18\t \x01(\tR\amessage\"\xe7\x01\n" +
 	"\x14PrepareChangeRequest\x12\x18\n" +
 	"\aaccount\x18\x01 \x01(\tR\aaccount\x12\x12\n" +
 	"\x04path\x18\x02 \x01(\tR\x04path\x12!\n" +
@@ -4476,10 +4495,8 @@ const file_documents_v3alpha_documents_proto_rawDesc = "" +
 	"\achanges\x18\x04 \x03(\v2*.com.seed.documents.v3alpha.DocumentChangeR\achanges\x12\x1e\n" +
 	"\n" +
 	"capability\x18\x05 \x01(\tR\n" +
-	"capability\x12N\n" +
-	"\n" +
-	"visibility\x18\x06 \x01(\x0e2..com.seed.documents.v3alpha.ResourceVisibilityR\n" +
-	"visibility\"@\n" +
+	"capability\x12\x18\n" +
+	"\amessage\x18\a \x01(\tR\amessage\"@\n" +
 	"\x15PrepareChangeResponse\x12'\n" +
 	"\x0funsigned_change\x18\x01 \x01(\fR\x0eunsignedChange\"E\n" +
 	"\x15DeleteDocumentRequest\x12\x18\n" +
@@ -4636,13 +4653,14 @@ const file_documents_v3alpha_documents_proto_rawDesc = "" +
 	"page_token\x18\x04 \x01(\tR\tpageToken\"o\n" +
 	"\x10ListRefsResponse\x123\n" +
 	"\x04refs\x18\x01 \x03(\v2\x1f.com.seed.documents.v3alpha.RefR\x04refs\x12&\n" +
-	"\x0fnext_page_token\x18\x02 \x01(\tR\rnextPageToken\"\x8d\x01\n" +
+	"\x0fnext_page_token\x18\x02 \x01(\tR\rnextPageToken\"\xa7\x01\n" +
 	"\x12DocumentChangeInfo\x12\x0e\n" +
 	"\x02id\x18\x01 \x01(\tR\x02id\x12\x16\n" +
 	"\x06author\x18\x02 \x01(\tR\x06author\x12\x12\n" +
 	"\x04deps\x18\x03 \x03(\tR\x04deps\x12;\n" +
 	"\vcreate_time\x18\x04 \x01(\v2\x1a.google.protobuf.TimestampR\n" +
-	"createTime\"\xd5\x05\n" +
+	"createTime\x12\x18\n" +
+	"\amessage\x18\x05 \x01(\tR\amessage\"\xd5\x05\n" +
 	"\fDocumentInfo\x12\x18\n" +
 	"\aaccount\x18\x01 \x01(\tR\aaccount\x12\x12\n" +
 	"\x04path\x18\x02 \x01(\tR\x04path\x123\n" +
@@ -4897,123 +4915,122 @@ var file_documents_v3alpha_documents_proto_depIdxs = []int32{
 	63, // 3: com.seed.documents.v3alpha.CreateDocumentChangeRequest.timestamp:type_name -> google.protobuf.Timestamp
 	0,  // 4: com.seed.documents.v3alpha.CreateDocumentChangeRequest.visibility:type_name -> com.seed.documents.v3alpha.ResourceVisibility
 	51, // 5: com.seed.documents.v3alpha.PrepareChangeRequest.changes:type_name -> com.seed.documents.v3alpha.DocumentChange
-	0,  // 6: com.seed.documents.v3alpha.PrepareChangeRequest.visibility:type_name -> com.seed.documents.v3alpha.ResourceVisibility
-	43, // 7: com.seed.documents.v3alpha.ListRootDocumentsResponse.documents:type_name -> com.seed.documents.v3alpha.DocumentInfo
-	30, // 8: com.seed.documents.v3alpha.ListAccountsRequest.sort_options:type_name -> com.seed.documents.v3alpha.SortOptions
-	19, // 9: com.seed.documents.v3alpha.ListAccountsResponse.accounts:type_name -> com.seed.documents.v3alpha.Account
-	54, // 10: com.seed.documents.v3alpha.BatchGetAccountsResponse.accounts:type_name -> com.seed.documents.v3alpha.BatchGetAccountsResponse.AccountsEntry
-	55, // 11: com.seed.documents.v3alpha.BatchGetAccountsResponse.errors:type_name -> com.seed.documents.v3alpha.BatchGetAccountsResponse.ErrorsEntry
-	20, // 12: com.seed.documents.v3alpha.UpdateProfileRequest.profile:type_name -> com.seed.documents.v3alpha.Profile
-	64, // 13: com.seed.documents.v3alpha.Account.metadata:type_name -> google.protobuf.Struct
-	45, // 14: com.seed.documents.v3alpha.Account.activity_summary:type_name -> com.seed.documents.v3alpha.ActivitySummary
-	20, // 15: com.seed.documents.v3alpha.Account.profile:type_name -> com.seed.documents.v3alpha.Profile
-	43, // 16: com.seed.documents.v3alpha.Account.home_document_info:type_name -> com.seed.documents.v3alpha.DocumentInfo
-	63, // 17: com.seed.documents.v3alpha.Profile.update_time:type_name -> google.protobuf.Timestamp
-	28, // 18: com.seed.documents.v3alpha.UpdateContactRequest.contact:type_name -> com.seed.documents.v3alpha.Contact
-	28, // 19: com.seed.documents.v3alpha.ListContactsResponse.contacts:type_name -> com.seed.documents.v3alpha.Contact
-	63, // 20: com.seed.documents.v3alpha.Contact.create_time:type_name -> google.protobuf.Timestamp
-	63, // 21: com.seed.documents.v3alpha.Contact.update_time:type_name -> google.protobuf.Timestamp
-	64, // 22: com.seed.documents.v3alpha.Contact.metadata:type_name -> google.protobuf.Struct
-	30, // 23: com.seed.documents.v3alpha.ListDirectoryRequest.sort_options:type_name -> com.seed.documents.v3alpha.SortOptions
-	1,  // 24: com.seed.documents.v3alpha.SortOptions.attribute:type_name -> com.seed.documents.v3alpha.SortAttribute
-	43, // 25: com.seed.documents.v3alpha.ListDirectoryResponse.documents:type_name -> com.seed.documents.v3alpha.DocumentInfo
-	43, // 26: com.seed.documents.v3alpha.ListDocumentsResponse.documents:type_name -> com.seed.documents.v3alpha.DocumentInfo
-	42, // 27: com.seed.documents.v3alpha.ListDocumentChangesResponse.changes:type_name -> com.seed.documents.v3alpha.DocumentChangeInfo
-	53, // 28: com.seed.documents.v3alpha.CreateRefRequest.target:type_name -> com.seed.documents.v3alpha.RefTarget
-	63, // 29: com.seed.documents.v3alpha.CreateRefRequest.timestamp:type_name -> google.protobuf.Timestamp
-	0,  // 30: com.seed.documents.v3alpha.CreateRefRequest.visibility:type_name -> com.seed.documents.v3alpha.ResourceVisibility
-	52, // 31: com.seed.documents.v3alpha.ListRefsResponse.refs:type_name -> com.seed.documents.v3alpha.Ref
-	63, // 32: com.seed.documents.v3alpha.DocumentChangeInfo.create_time:type_name -> google.protobuf.Timestamp
-	64, // 33: com.seed.documents.v3alpha.DocumentInfo.metadata:type_name -> google.protobuf.Struct
-	63, // 34: com.seed.documents.v3alpha.DocumentInfo.create_time:type_name -> google.protobuf.Timestamp
-	63, // 35: com.seed.documents.v3alpha.DocumentInfo.update_time:type_name -> google.protobuf.Timestamp
-	46, // 36: com.seed.documents.v3alpha.DocumentInfo.breadcrumbs:type_name -> com.seed.documents.v3alpha.Breadcrumb
-	45, // 37: com.seed.documents.v3alpha.DocumentInfo.activity_summary:type_name -> com.seed.documents.v3alpha.ActivitySummary
-	44, // 38: com.seed.documents.v3alpha.DocumentInfo.generation_info:type_name -> com.seed.documents.v3alpha.GenerationInfo
-	61, // 39: com.seed.documents.v3alpha.DocumentInfo.redirect_info:type_name -> com.seed.documents.v3alpha.RefTarget.Redirect
-	0,  // 40: com.seed.documents.v3alpha.DocumentInfo.visibility:type_name -> com.seed.documents.v3alpha.ResourceVisibility
-	63, // 41: com.seed.documents.v3alpha.ActivitySummary.latest_comment_time:type_name -> google.protobuf.Timestamp
-	63, // 42: com.seed.documents.v3alpha.ActivitySummary.latest_change_time:type_name -> google.protobuf.Timestamp
-	64, // 43: com.seed.documents.v3alpha.Document.metadata:type_name -> google.protobuf.Struct
-	48, // 44: com.seed.documents.v3alpha.Document.content:type_name -> com.seed.documents.v3alpha.BlockNode
-	56, // 45: com.seed.documents.v3alpha.Document.detached_blocks:type_name -> com.seed.documents.v3alpha.Document.DetachedBlocksEntry
-	63, // 46: com.seed.documents.v3alpha.Document.create_time:type_name -> google.protobuf.Timestamp
-	63, // 47: com.seed.documents.v3alpha.Document.update_time:type_name -> google.protobuf.Timestamp
-	44, // 48: com.seed.documents.v3alpha.Document.generation_info:type_name -> com.seed.documents.v3alpha.GenerationInfo
-	0,  // 49: com.seed.documents.v3alpha.Document.visibility:type_name -> com.seed.documents.v3alpha.ResourceVisibility
-	49, // 50: com.seed.documents.v3alpha.BlockNode.block:type_name -> com.seed.documents.v3alpha.Block
-	48, // 51: com.seed.documents.v3alpha.BlockNode.children:type_name -> com.seed.documents.v3alpha.BlockNode
-	64, // 52: com.seed.documents.v3alpha.Block.attributes:type_name -> google.protobuf.Struct
-	50, // 53: com.seed.documents.v3alpha.Block.annotations:type_name -> com.seed.documents.v3alpha.Annotation
-	64, // 54: com.seed.documents.v3alpha.Annotation.attributes:type_name -> google.protobuf.Struct
-	58, // 55: com.seed.documents.v3alpha.DocumentChange.set_metadata:type_name -> com.seed.documents.v3alpha.DocumentChange.SetMetadata
-	57, // 56: com.seed.documents.v3alpha.DocumentChange.move_block:type_name -> com.seed.documents.v3alpha.DocumentChange.MoveBlock
-	49, // 57: com.seed.documents.v3alpha.DocumentChange.replace_block:type_name -> com.seed.documents.v3alpha.Block
-	59, // 58: com.seed.documents.v3alpha.DocumentChange.set_attribute:type_name -> com.seed.documents.v3alpha.DocumentChange.SetAttribute
-	53, // 59: com.seed.documents.v3alpha.Ref.target:type_name -> com.seed.documents.v3alpha.RefTarget
-	63, // 60: com.seed.documents.v3alpha.Ref.timestamp:type_name -> google.protobuf.Timestamp
-	44, // 61: com.seed.documents.v3alpha.Ref.generation_info:type_name -> com.seed.documents.v3alpha.GenerationInfo
-	60, // 62: com.seed.documents.v3alpha.RefTarget.version:type_name -> com.seed.documents.v3alpha.RefTarget.Version
-	61, // 63: com.seed.documents.v3alpha.RefTarget.redirect:type_name -> com.seed.documents.v3alpha.RefTarget.Redirect
-	62, // 64: com.seed.documents.v3alpha.RefTarget.tombstone:type_name -> com.seed.documents.v3alpha.RefTarget.Tombstone
-	19, // 65: com.seed.documents.v3alpha.BatchGetAccountsResponse.AccountsEntry.value:type_name -> com.seed.documents.v3alpha.Account
-	48, // 66: com.seed.documents.v3alpha.Document.DetachedBlocksEntry.value:type_name -> com.seed.documents.v3alpha.BlockNode
-	65, // 67: com.seed.documents.v3alpha.DocumentChange.SetAttribute.null_value:type_name -> google.protobuf.Empty
-	2,  // 68: com.seed.documents.v3alpha.Documents.GetDocument:input_type -> com.seed.documents.v3alpha.GetDocumentRequest
-	4,  // 69: com.seed.documents.v3alpha.Documents.GetDocumentInfo:input_type -> com.seed.documents.v3alpha.GetDocumentInfoRequest
-	5,  // 70: com.seed.documents.v3alpha.Documents.BatchGetDocumentInfo:input_type -> com.seed.documents.v3alpha.BatchGetDocumentInfoRequest
-	7,  // 71: com.seed.documents.v3alpha.Documents.CreateDocumentChange:input_type -> com.seed.documents.v3alpha.CreateDocumentChangeRequest
-	8,  // 72: com.seed.documents.v3alpha.Documents.PrepareChange:input_type -> com.seed.documents.v3alpha.PrepareChangeRequest
-	10, // 73: com.seed.documents.v3alpha.Documents.DeleteDocument:input_type -> com.seed.documents.v3alpha.DeleteDocumentRequest
-	13, // 74: com.seed.documents.v3alpha.Documents.ListAccounts:input_type -> com.seed.documents.v3alpha.ListAccountsRequest
-	15, // 75: com.seed.documents.v3alpha.Documents.GetAccount:input_type -> com.seed.documents.v3alpha.GetAccountRequest
-	16, // 76: com.seed.documents.v3alpha.Documents.BatchGetAccounts:input_type -> com.seed.documents.v3alpha.BatchGetAccountsRequest
-	18, // 77: com.seed.documents.v3alpha.Documents.UpdateProfile:input_type -> com.seed.documents.v3alpha.UpdateProfileRequest
-	21, // 78: com.seed.documents.v3alpha.Documents.CreateAlias:input_type -> com.seed.documents.v3alpha.CreateAliasRequest
-	22, // 79: com.seed.documents.v3alpha.Documents.CreateContact:input_type -> com.seed.documents.v3alpha.CreateContactRequest
-	23, // 80: com.seed.documents.v3alpha.Documents.GetContact:input_type -> com.seed.documents.v3alpha.GetContactRequest
-	24, // 81: com.seed.documents.v3alpha.Documents.UpdateContact:input_type -> com.seed.documents.v3alpha.UpdateContactRequest
-	25, // 82: com.seed.documents.v3alpha.Documents.DeleteContact:input_type -> com.seed.documents.v3alpha.DeleteContactRequest
-	26, // 83: com.seed.documents.v3alpha.Documents.ListContacts:input_type -> com.seed.documents.v3alpha.ListContactsRequest
-	29, // 84: com.seed.documents.v3alpha.Documents.ListDirectory:input_type -> com.seed.documents.v3alpha.ListDirectoryRequest
-	32, // 85: com.seed.documents.v3alpha.Documents.ListDocuments:input_type -> com.seed.documents.v3alpha.ListDocumentsRequest
-	11, // 86: com.seed.documents.v3alpha.Documents.ListRootDocuments:input_type -> com.seed.documents.v3alpha.ListRootDocumentsRequest
-	34, // 87: com.seed.documents.v3alpha.Documents.ListDocumentChanges:input_type -> com.seed.documents.v3alpha.ListDocumentChangesRequest
-	36, // 88: com.seed.documents.v3alpha.Documents.GetDocumentChange:input_type -> com.seed.documents.v3alpha.GetDocumentChangeRequest
-	37, // 89: com.seed.documents.v3alpha.Documents.UpdateDocumentReadStatus:input_type -> com.seed.documents.v3alpha.UpdateDocumentReadStatusRequest
-	38, // 90: com.seed.documents.v3alpha.Documents.CreateRef:input_type -> com.seed.documents.v3alpha.CreateRefRequest
-	39, // 91: com.seed.documents.v3alpha.Documents.GetRef:input_type -> com.seed.documents.v3alpha.GetRefRequest
-	40, // 92: com.seed.documents.v3alpha.Documents.ListRefs:input_type -> com.seed.documents.v3alpha.ListRefsRequest
-	47, // 93: com.seed.documents.v3alpha.Documents.GetDocument:output_type -> com.seed.documents.v3alpha.Document
-	43, // 94: com.seed.documents.v3alpha.Documents.GetDocumentInfo:output_type -> com.seed.documents.v3alpha.DocumentInfo
-	6,  // 95: com.seed.documents.v3alpha.Documents.BatchGetDocumentInfo:output_type -> com.seed.documents.v3alpha.BatchGetDocumentInfoResponse
-	47, // 96: com.seed.documents.v3alpha.Documents.CreateDocumentChange:output_type -> com.seed.documents.v3alpha.Document
-	9,  // 97: com.seed.documents.v3alpha.Documents.PrepareChange:output_type -> com.seed.documents.v3alpha.PrepareChangeResponse
-	65, // 98: com.seed.documents.v3alpha.Documents.DeleteDocument:output_type -> google.protobuf.Empty
-	14, // 99: com.seed.documents.v3alpha.Documents.ListAccounts:output_type -> com.seed.documents.v3alpha.ListAccountsResponse
-	19, // 100: com.seed.documents.v3alpha.Documents.GetAccount:output_type -> com.seed.documents.v3alpha.Account
-	17, // 101: com.seed.documents.v3alpha.Documents.BatchGetAccounts:output_type -> com.seed.documents.v3alpha.BatchGetAccountsResponse
-	19, // 102: com.seed.documents.v3alpha.Documents.UpdateProfile:output_type -> com.seed.documents.v3alpha.Account
-	65, // 103: com.seed.documents.v3alpha.Documents.CreateAlias:output_type -> google.protobuf.Empty
-	28, // 104: com.seed.documents.v3alpha.Documents.CreateContact:output_type -> com.seed.documents.v3alpha.Contact
-	28, // 105: com.seed.documents.v3alpha.Documents.GetContact:output_type -> com.seed.documents.v3alpha.Contact
-	28, // 106: com.seed.documents.v3alpha.Documents.UpdateContact:output_type -> com.seed.documents.v3alpha.Contact
-	65, // 107: com.seed.documents.v3alpha.Documents.DeleteContact:output_type -> google.protobuf.Empty
-	27, // 108: com.seed.documents.v3alpha.Documents.ListContacts:output_type -> com.seed.documents.v3alpha.ListContactsResponse
-	31, // 109: com.seed.documents.v3alpha.Documents.ListDirectory:output_type -> com.seed.documents.v3alpha.ListDirectoryResponse
-	33, // 110: com.seed.documents.v3alpha.Documents.ListDocuments:output_type -> com.seed.documents.v3alpha.ListDocumentsResponse
-	12, // 111: com.seed.documents.v3alpha.Documents.ListRootDocuments:output_type -> com.seed.documents.v3alpha.ListRootDocumentsResponse
-	35, // 112: com.seed.documents.v3alpha.Documents.ListDocumentChanges:output_type -> com.seed.documents.v3alpha.ListDocumentChangesResponse
-	42, // 113: com.seed.documents.v3alpha.Documents.GetDocumentChange:output_type -> com.seed.documents.v3alpha.DocumentChangeInfo
-	65, // 114: com.seed.documents.v3alpha.Documents.UpdateDocumentReadStatus:output_type -> google.protobuf.Empty
-	52, // 115: com.seed.documents.v3alpha.Documents.CreateRef:output_type -> com.seed.documents.v3alpha.Ref
-	52, // 116: com.seed.documents.v3alpha.Documents.GetRef:output_type -> com.seed.documents.v3alpha.Ref
-	41, // 117: com.seed.documents.v3alpha.Documents.ListRefs:output_type -> com.seed.documents.v3alpha.ListRefsResponse
-	93, // [93:118] is the sub-list for method output_type
-	68, // [68:93] is the sub-list for method input_type
-	68, // [68:68] is the sub-list for extension type_name
-	68, // [68:68] is the sub-list for extension extendee
-	0,  // [0:68] is the sub-list for field type_name
+	43, // 6: com.seed.documents.v3alpha.ListRootDocumentsResponse.documents:type_name -> com.seed.documents.v3alpha.DocumentInfo
+	30, // 7: com.seed.documents.v3alpha.ListAccountsRequest.sort_options:type_name -> com.seed.documents.v3alpha.SortOptions
+	19, // 8: com.seed.documents.v3alpha.ListAccountsResponse.accounts:type_name -> com.seed.documents.v3alpha.Account
+	54, // 9: com.seed.documents.v3alpha.BatchGetAccountsResponse.accounts:type_name -> com.seed.documents.v3alpha.BatchGetAccountsResponse.AccountsEntry
+	55, // 10: com.seed.documents.v3alpha.BatchGetAccountsResponse.errors:type_name -> com.seed.documents.v3alpha.BatchGetAccountsResponse.ErrorsEntry
+	20, // 11: com.seed.documents.v3alpha.UpdateProfileRequest.profile:type_name -> com.seed.documents.v3alpha.Profile
+	64, // 12: com.seed.documents.v3alpha.Account.metadata:type_name -> google.protobuf.Struct
+	45, // 13: com.seed.documents.v3alpha.Account.activity_summary:type_name -> com.seed.documents.v3alpha.ActivitySummary
+	20, // 14: com.seed.documents.v3alpha.Account.profile:type_name -> com.seed.documents.v3alpha.Profile
+	43, // 15: com.seed.documents.v3alpha.Account.home_document_info:type_name -> com.seed.documents.v3alpha.DocumentInfo
+	63, // 16: com.seed.documents.v3alpha.Profile.update_time:type_name -> google.protobuf.Timestamp
+	28, // 17: com.seed.documents.v3alpha.UpdateContactRequest.contact:type_name -> com.seed.documents.v3alpha.Contact
+	28, // 18: com.seed.documents.v3alpha.ListContactsResponse.contacts:type_name -> com.seed.documents.v3alpha.Contact
+	63, // 19: com.seed.documents.v3alpha.Contact.create_time:type_name -> google.protobuf.Timestamp
+	63, // 20: com.seed.documents.v3alpha.Contact.update_time:type_name -> google.protobuf.Timestamp
+	64, // 21: com.seed.documents.v3alpha.Contact.metadata:type_name -> google.protobuf.Struct
+	30, // 22: com.seed.documents.v3alpha.ListDirectoryRequest.sort_options:type_name -> com.seed.documents.v3alpha.SortOptions
+	1,  // 23: com.seed.documents.v3alpha.SortOptions.attribute:type_name -> com.seed.documents.v3alpha.SortAttribute
+	43, // 24: com.seed.documents.v3alpha.ListDirectoryResponse.documents:type_name -> com.seed.documents.v3alpha.DocumentInfo
+	43, // 25: com.seed.documents.v3alpha.ListDocumentsResponse.documents:type_name -> com.seed.documents.v3alpha.DocumentInfo
+	42, // 26: com.seed.documents.v3alpha.ListDocumentChangesResponse.changes:type_name -> com.seed.documents.v3alpha.DocumentChangeInfo
+	53, // 27: com.seed.documents.v3alpha.CreateRefRequest.target:type_name -> com.seed.documents.v3alpha.RefTarget
+	63, // 28: com.seed.documents.v3alpha.CreateRefRequest.timestamp:type_name -> google.protobuf.Timestamp
+	0,  // 29: com.seed.documents.v3alpha.CreateRefRequest.visibility:type_name -> com.seed.documents.v3alpha.ResourceVisibility
+	52, // 30: com.seed.documents.v3alpha.ListRefsResponse.refs:type_name -> com.seed.documents.v3alpha.Ref
+	63, // 31: com.seed.documents.v3alpha.DocumentChangeInfo.create_time:type_name -> google.protobuf.Timestamp
+	64, // 32: com.seed.documents.v3alpha.DocumentInfo.metadata:type_name -> google.protobuf.Struct
+	63, // 33: com.seed.documents.v3alpha.DocumentInfo.create_time:type_name -> google.protobuf.Timestamp
+	63, // 34: com.seed.documents.v3alpha.DocumentInfo.update_time:type_name -> google.protobuf.Timestamp
+	46, // 35: com.seed.documents.v3alpha.DocumentInfo.breadcrumbs:type_name -> com.seed.documents.v3alpha.Breadcrumb
+	45, // 36: com.seed.documents.v3alpha.DocumentInfo.activity_summary:type_name -> com.seed.documents.v3alpha.ActivitySummary
+	44, // 37: com.seed.documents.v3alpha.DocumentInfo.generation_info:type_name -> com.seed.documents.v3alpha.GenerationInfo
+	61, // 38: com.seed.documents.v3alpha.DocumentInfo.redirect_info:type_name -> com.seed.documents.v3alpha.RefTarget.Redirect
+	0,  // 39: com.seed.documents.v3alpha.DocumentInfo.visibility:type_name -> com.seed.documents.v3alpha.ResourceVisibility
+	63, // 40: com.seed.documents.v3alpha.ActivitySummary.latest_comment_time:type_name -> google.protobuf.Timestamp
+	63, // 41: com.seed.documents.v3alpha.ActivitySummary.latest_change_time:type_name -> google.protobuf.Timestamp
+	64, // 42: com.seed.documents.v3alpha.Document.metadata:type_name -> google.protobuf.Struct
+	48, // 43: com.seed.documents.v3alpha.Document.content:type_name -> com.seed.documents.v3alpha.BlockNode
+	56, // 44: com.seed.documents.v3alpha.Document.detached_blocks:type_name -> com.seed.documents.v3alpha.Document.DetachedBlocksEntry
+	63, // 45: com.seed.documents.v3alpha.Document.create_time:type_name -> google.protobuf.Timestamp
+	63, // 46: com.seed.documents.v3alpha.Document.update_time:type_name -> google.protobuf.Timestamp
+	44, // 47: com.seed.documents.v3alpha.Document.generation_info:type_name -> com.seed.documents.v3alpha.GenerationInfo
+	0,  // 48: com.seed.documents.v3alpha.Document.visibility:type_name -> com.seed.documents.v3alpha.ResourceVisibility
+	49, // 49: com.seed.documents.v3alpha.BlockNode.block:type_name -> com.seed.documents.v3alpha.Block
+	48, // 50: com.seed.documents.v3alpha.BlockNode.children:type_name -> com.seed.documents.v3alpha.BlockNode
+	64, // 51: com.seed.documents.v3alpha.Block.attributes:type_name -> google.protobuf.Struct
+	50, // 52: com.seed.documents.v3alpha.Block.annotations:type_name -> com.seed.documents.v3alpha.Annotation
+	64, // 53: com.seed.documents.v3alpha.Annotation.attributes:type_name -> google.protobuf.Struct
+	58, // 54: com.seed.documents.v3alpha.DocumentChange.set_metadata:type_name -> com.seed.documents.v3alpha.DocumentChange.SetMetadata
+	57, // 55: com.seed.documents.v3alpha.DocumentChange.move_block:type_name -> com.seed.documents.v3alpha.DocumentChange.MoveBlock
+	49, // 56: com.seed.documents.v3alpha.DocumentChange.replace_block:type_name -> com.seed.documents.v3alpha.Block
+	59, // 57: com.seed.documents.v3alpha.DocumentChange.set_attribute:type_name -> com.seed.documents.v3alpha.DocumentChange.SetAttribute
+	53, // 58: com.seed.documents.v3alpha.Ref.target:type_name -> com.seed.documents.v3alpha.RefTarget
+	63, // 59: com.seed.documents.v3alpha.Ref.timestamp:type_name -> google.protobuf.Timestamp
+	44, // 60: com.seed.documents.v3alpha.Ref.generation_info:type_name -> com.seed.documents.v3alpha.GenerationInfo
+	60, // 61: com.seed.documents.v3alpha.RefTarget.version:type_name -> com.seed.documents.v3alpha.RefTarget.Version
+	61, // 62: com.seed.documents.v3alpha.RefTarget.redirect:type_name -> com.seed.documents.v3alpha.RefTarget.Redirect
+	62, // 63: com.seed.documents.v3alpha.RefTarget.tombstone:type_name -> com.seed.documents.v3alpha.RefTarget.Tombstone
+	19, // 64: com.seed.documents.v3alpha.BatchGetAccountsResponse.AccountsEntry.value:type_name -> com.seed.documents.v3alpha.Account
+	48, // 65: com.seed.documents.v3alpha.Document.DetachedBlocksEntry.value:type_name -> com.seed.documents.v3alpha.BlockNode
+	65, // 66: com.seed.documents.v3alpha.DocumentChange.SetAttribute.null_value:type_name -> google.protobuf.Empty
+	2,  // 67: com.seed.documents.v3alpha.Documents.GetDocument:input_type -> com.seed.documents.v3alpha.GetDocumentRequest
+	4,  // 68: com.seed.documents.v3alpha.Documents.GetDocumentInfo:input_type -> com.seed.documents.v3alpha.GetDocumentInfoRequest
+	5,  // 69: com.seed.documents.v3alpha.Documents.BatchGetDocumentInfo:input_type -> com.seed.documents.v3alpha.BatchGetDocumentInfoRequest
+	7,  // 70: com.seed.documents.v3alpha.Documents.CreateDocumentChange:input_type -> com.seed.documents.v3alpha.CreateDocumentChangeRequest
+	8,  // 71: com.seed.documents.v3alpha.Documents.PrepareChange:input_type -> com.seed.documents.v3alpha.PrepareChangeRequest
+	10, // 72: com.seed.documents.v3alpha.Documents.DeleteDocument:input_type -> com.seed.documents.v3alpha.DeleteDocumentRequest
+	13, // 73: com.seed.documents.v3alpha.Documents.ListAccounts:input_type -> com.seed.documents.v3alpha.ListAccountsRequest
+	15, // 74: com.seed.documents.v3alpha.Documents.GetAccount:input_type -> com.seed.documents.v3alpha.GetAccountRequest
+	16, // 75: com.seed.documents.v3alpha.Documents.BatchGetAccounts:input_type -> com.seed.documents.v3alpha.BatchGetAccountsRequest
+	18, // 76: com.seed.documents.v3alpha.Documents.UpdateProfile:input_type -> com.seed.documents.v3alpha.UpdateProfileRequest
+	21, // 77: com.seed.documents.v3alpha.Documents.CreateAlias:input_type -> com.seed.documents.v3alpha.CreateAliasRequest
+	22, // 78: com.seed.documents.v3alpha.Documents.CreateContact:input_type -> com.seed.documents.v3alpha.CreateContactRequest
+	23, // 79: com.seed.documents.v3alpha.Documents.GetContact:input_type -> com.seed.documents.v3alpha.GetContactRequest
+	24, // 80: com.seed.documents.v3alpha.Documents.UpdateContact:input_type -> com.seed.documents.v3alpha.UpdateContactRequest
+	25, // 81: com.seed.documents.v3alpha.Documents.DeleteContact:input_type -> com.seed.documents.v3alpha.DeleteContactRequest
+	26, // 82: com.seed.documents.v3alpha.Documents.ListContacts:input_type -> com.seed.documents.v3alpha.ListContactsRequest
+	29, // 83: com.seed.documents.v3alpha.Documents.ListDirectory:input_type -> com.seed.documents.v3alpha.ListDirectoryRequest
+	32, // 84: com.seed.documents.v3alpha.Documents.ListDocuments:input_type -> com.seed.documents.v3alpha.ListDocumentsRequest
+	11, // 85: com.seed.documents.v3alpha.Documents.ListRootDocuments:input_type -> com.seed.documents.v3alpha.ListRootDocumentsRequest
+	34, // 86: com.seed.documents.v3alpha.Documents.ListDocumentChanges:input_type -> com.seed.documents.v3alpha.ListDocumentChangesRequest
+	36, // 87: com.seed.documents.v3alpha.Documents.GetDocumentChange:input_type -> com.seed.documents.v3alpha.GetDocumentChangeRequest
+	37, // 88: com.seed.documents.v3alpha.Documents.UpdateDocumentReadStatus:input_type -> com.seed.documents.v3alpha.UpdateDocumentReadStatusRequest
+	38, // 89: com.seed.documents.v3alpha.Documents.CreateRef:input_type -> com.seed.documents.v3alpha.CreateRefRequest
+	39, // 90: com.seed.documents.v3alpha.Documents.GetRef:input_type -> com.seed.documents.v3alpha.GetRefRequest
+	40, // 91: com.seed.documents.v3alpha.Documents.ListRefs:input_type -> com.seed.documents.v3alpha.ListRefsRequest
+	47, // 92: com.seed.documents.v3alpha.Documents.GetDocument:output_type -> com.seed.documents.v3alpha.Document
+	43, // 93: com.seed.documents.v3alpha.Documents.GetDocumentInfo:output_type -> com.seed.documents.v3alpha.DocumentInfo
+	6,  // 94: com.seed.documents.v3alpha.Documents.BatchGetDocumentInfo:output_type -> com.seed.documents.v3alpha.BatchGetDocumentInfoResponse
+	47, // 95: com.seed.documents.v3alpha.Documents.CreateDocumentChange:output_type -> com.seed.documents.v3alpha.Document
+	9,  // 96: com.seed.documents.v3alpha.Documents.PrepareChange:output_type -> com.seed.documents.v3alpha.PrepareChangeResponse
+	65, // 97: com.seed.documents.v3alpha.Documents.DeleteDocument:output_type -> google.protobuf.Empty
+	14, // 98: com.seed.documents.v3alpha.Documents.ListAccounts:output_type -> com.seed.documents.v3alpha.ListAccountsResponse
+	19, // 99: com.seed.documents.v3alpha.Documents.GetAccount:output_type -> com.seed.documents.v3alpha.Account
+	17, // 100: com.seed.documents.v3alpha.Documents.BatchGetAccounts:output_type -> com.seed.documents.v3alpha.BatchGetAccountsResponse
+	19, // 101: com.seed.documents.v3alpha.Documents.UpdateProfile:output_type -> com.seed.documents.v3alpha.Account
+	65, // 102: com.seed.documents.v3alpha.Documents.CreateAlias:output_type -> google.protobuf.Empty
+	28, // 103: com.seed.documents.v3alpha.Documents.CreateContact:output_type -> com.seed.documents.v3alpha.Contact
+	28, // 104: com.seed.documents.v3alpha.Documents.GetContact:output_type -> com.seed.documents.v3alpha.Contact
+	28, // 105: com.seed.documents.v3alpha.Documents.UpdateContact:output_type -> com.seed.documents.v3alpha.Contact
+	65, // 106: com.seed.documents.v3alpha.Documents.DeleteContact:output_type -> google.protobuf.Empty
+	27, // 107: com.seed.documents.v3alpha.Documents.ListContacts:output_type -> com.seed.documents.v3alpha.ListContactsResponse
+	31, // 108: com.seed.documents.v3alpha.Documents.ListDirectory:output_type -> com.seed.documents.v3alpha.ListDirectoryResponse
+	33, // 109: com.seed.documents.v3alpha.Documents.ListDocuments:output_type -> com.seed.documents.v3alpha.ListDocumentsResponse
+	12, // 110: com.seed.documents.v3alpha.Documents.ListRootDocuments:output_type -> com.seed.documents.v3alpha.ListRootDocumentsResponse
+	35, // 111: com.seed.documents.v3alpha.Documents.ListDocumentChanges:output_type -> com.seed.documents.v3alpha.ListDocumentChangesResponse
+	42, // 112: com.seed.documents.v3alpha.Documents.GetDocumentChange:output_type -> com.seed.documents.v3alpha.DocumentChangeInfo
+	65, // 113: com.seed.documents.v3alpha.Documents.UpdateDocumentReadStatus:output_type -> google.protobuf.Empty
+	52, // 114: com.seed.documents.v3alpha.Documents.CreateRef:output_type -> com.seed.documents.v3alpha.Ref
+	52, // 115: com.seed.documents.v3alpha.Documents.GetRef:output_type -> com.seed.documents.v3alpha.Ref
+	41, // 116: com.seed.documents.v3alpha.Documents.ListRefs:output_type -> com.seed.documents.v3alpha.ListRefsResponse
+	92, // [92:117] is the sub-list for method output_type
+	67, // [67:92] is the sub-list for method input_type
+	67, // [67:67] is the sub-list for extension type_name
+	67, // [67:67] is the sub-list for extension extendee
+	0,  // [0:67] is the sub-list for field type_name
 }
 
 func init() { file_documents_v3alpha_documents_proto_init() }
diff --git a/backend/genproto/documents/v3alpha/resources.pb.go b/backend/genproto/documents/v3alpha/resources.pb.go
index 1149fe71e..62b2c23ae 100644
--- a/backend/genproto/documents/v3alpha/resources.pb.go
+++ b/backend/genproto/documents/v3alpha/resources.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.36.9
+// 	protoc-gen-go v1.36.11
 // 	protoc        v4.24.4
 // source: documents/v3alpha/resources.proto
 
diff --git a/docs/publish-message-decisions.md b/docs/publish-message-decisions.md
new file mode 100644
index 000000000..79f8c60ce
--- /dev/null
+++ b/docs/publish-message-decisions.md
@@ -0,0 +1,70 @@
+# Publish Messages — Implementation Decisions
+
+Design note documenting the decisions behind optional human-readable publish messages on Change blobs.
+
+## TL;DR
+
+Every signed Change blob now carries an optional `message` string, analogous to a git commit message. The publish UI, CLI, activity feed, and Versions panel all read the message from the Change.
+
+## Why the Change blob
+
+A Change is the unit of "what changed" in a document — like a commit in git. A Ref is a pointer/branch that names a path and points at heads. Tombstone Refs and redirect/republish Refs do not introduce new content; they only re-aim a path. There is no content delta to describe on those Refs, so a `message` field there would have no consistent meaning.
+
+Putting the message on the Change matches the git mental model the rest of the API already leans on:
+
+- Change = commit (signed, identified by content, has a message).
+- Ref = branch ref (a moving pointer, not a description).
+
+Only content changes carry a message. Tombstones and redirects do not.
+
+## Storage shape
+
+On the Go side, `Message` is a top-level field of `blob.Change`:
+
+```go
+type Change struct {
+    BaseBlob
+    Genesis cid.Cid    `refmt:"genesis,omitempty"`
+    Deps    []cid.Cid  `refmt:"deps,omitempty"`
+    Depth   int        `refmt:"depth,omitempty"`
+    Body    ChangeBody `refmt:"body,omitempty"`
+    Message string     `refmt:"message,omitempty"`
+}
+```
+
+Top-level (sibling of `Body`/`Deps`/`Depth`) rather than inside `ChangeBody`. The body is reserved for document operations; metadata about the publish event lives at the same level as `Genesis`, `Deps`, and `Depth`.
+
+The `omitempty` CBOR tag means changes without a message produce identical bytes to before — backward-compatible by construction.
+
+For SQL-side queryability, the indexer copies `Message` into `structural_blobs.extra_attrs->>'message'`, alongside `title` and `metadata`.
+
+## API surface
+
+Proto schema changes (`proto/documents/v3alpha/documents.proto`):
+
+- `string message = 9;` on `CreateDocumentChangeRequest`.
+- `string message = 7;` on `PrepareChangeRequest` so the daemon can embed the message into unsigned Change bytes for client-side signers.
+- `string message = 5;` on `DocumentChangeInfo` so `GetDocumentChange` and `ListDocumentChanges` surface it.
+
+Client SDK (`frontend/packages/client/src`):
+
+- `createChangeOps` and `createDocumentChange` accept `message?: string`. When set, it is added to the unsigned Change CBOR top-level.
+
+## Display surfaces
+
+- **Activity feed** (`activity-service.ts`, `feed.tsx`): resolves the head change CID from the Ref's version target, calls `GetDocumentChange`, reads `.message`. Rendered as italic text below the document update line.
+- **Versions panel**: uses `ListDocumentChanges` / `GetDocumentChange`, which include `message`.
+- **Desktop publish UI** (`publish-draft-button.tsx`): textarea labeled "Publish message (optional)" in the publish popover.
+- **CLI** (`document.ts`): `--message` / `-m` flag on `document create` and `document update`.
+
+## Compatibility
+
+Forward-compatible: clients that don't send `message` produce changes without the field (`omitempty`). Existing data is unaffected.
+
+## Non-goals
+
+- **Editing message after publish.** Signed into the Change blob; rewriting changes the CID.
+- **Rich text / markdown messages.** Plain text only.
+- **AI-generated messages.** Orthogonal — can populate the same field later.
+- **Comment threads on versions.** Single annotation, not a discussion system.
+- **Diff summaries.** Separate feature; could populate this field automatically.
diff --git a/docs/publish-message.md b/docs/publish-message.md
new file mode 100644
index 000000000..88b2e2ec4
--- /dev/null
+++ b/docs/publish-message.md
@@ -0,0 +1,44 @@
+# Publish Messages
+
+Optional human-readable message attached to each publish, analogous to a git commit message. Stored on the Change blob (signed, tamper-proof, permanent) and surfaced in the desktop publish UI, CLI, activity feed, and document versions panel.
+
+## Problem
+
+Version history is opaque. When a user publishes a document, the only information recorded is the timestamp and the account that published. There is no way for the publisher to explain what changed or why. Collaborators browsing the activity feed or document versions panel see a flat list of updates with no context.
+
+## Solution
+
+Add an optional `message` string field to the Change blob. The message is set at publish time, included in the signed Change blob, and displayed wherever versions are shown.
+
+### Storage
+
+The message lives on the **Change blob** because a Change is the unit of "what changed" in a document — analogous to a git commit. Tombstones and redirects produce only Refs and have no content delta to describe, so they don't carry messages.
+
+The field uses `omitempty` so existing Changes without a message remain valid. No migration is needed.
+
+### Stack
+
+- **Proto**: `string message` field on `CreateDocumentChangeRequest`, `PrepareChangeRequest`, and `DocumentChangeInfo`.
+- **Go daemon**: `Change.Message` field; threaded through `NewChange`, `prepareChange`, `SignChange`/`SignChangeAt`/`CreateChange`, `CreateDocumentChange` handler, `PrepareChange` handler, and `DocumentChangeInfo` response builders. Indexed into `extra_attrs` JSON.
+- **TypeScript client SDK**: `message` parameter on `createChangeOps` / `createDocumentChange` (embeds into Change CBOR).
+- **CLI**: `--message` / `-m` flag on `document create` and `document update` commands, passed into `createChangeOps`.
+- **Desktop UI**: textarea in the publish popover (`publish-draft-button.tsx`). Both daemon and seed-client publish paths forward the message.
+- **Web client**: `create-web-universal-client.ts` threads message through `PublishDocumentInput` into `PrepareDocumentChange` / `createDocumentChange`.
+- **Activity feed**: `loadRefEvent` resolves the head change CID from the Ref's version target, then calls `GetDocumentChange` and reads `.message`. `feed.tsx` renders it as italic text below document-update events.
+- **Document Versions panel**: reuses `ListDocumentChanges` / `GetDocumentChange`, which include the message field.
+
+## Scope
+
+Small feature. Fully backward compatible because the field is optional with `omitempty`.
+
+## Rabbit Holes
+
+- **Rich text messages.** Plain text is sufficient. Rich text adds complexity (rendering, sanitization, storage size) with no clear benefit for a short annotation.
+- **Required vs optional.** The message must be optional. Most publishes are quick saves that do not need an explanation. Making it required would add friction to the most common workflow.
+
+## No Goes
+
+- **Comment threads on versions.** Out of scope. This is a single annotation, not a discussion system.
+- **Diff summaries.** Generating a human-readable diff of what changed in the document is a separate feature.
+- **AI-generated messages.** Automatic summarization of changes is interesting but orthogonal. Can be layered on later by populating the same field.
+- **Editing after publish.** The message is part of the signed Change blob. Changing it after the fact would require a new Change, which changes the version identity. Not supported.
diff --git a/frontend/apps/cli/src/commands/document.ts b/frontend/apps/cli/src/commands/document.ts
index f085e48c9..5f1ecd6b4 100644
--- a/frontend/apps/cli/src/commands/document.ts
+++ b/frontend/apps/cli/src/commands/document.ts
@@ -319,6 +319,7 @@ export function registerDocumentCommands(program: Command) {
     .option('--grobid-url <url>', 'GROBID server URL for PDF extraction')
     .option('--dry-run', 'Preview extracted content without publishing')
     .option('--force', 'Overwrite existing document at the same path (creates new lineage)')
+    .option('-m, --message <text>', 'Publish message (like a git commit message)')
     .option('-k, --key <name>', 'Signing key name or account ID')
     .option('-a, --account <uid>', 'Target space/account UID (publish under a different account using a capability)')
     .action(async (options, cmd) => {
@@ -416,6 +417,7 @@ export function registerDocumentCommands(program: Command) {
           genesisCid: genesisBlock.cid,
           deps: [genesisBlock.cid],
           depth: 1,
+          message: options.message,
         })
         const changeBlock = await createChange(unsignedBytes, signer)
         const generation = Number(ts)
@@ -491,6 +493,7 @@ export function registerDocumentCommands(program: Command) {
     .option('--import-tags <value>', 'Import tags (comma-separated)')
     .option('--parent <blockId>', 'Parent block ID for new content (default: root)')
     .option('--delete-blocks <ids>', 'Comma-separated block IDs to delete')
+    .option('-m, --message <text>', 'Publish message (like a git commit message)')
     .option('-k, --key <name>', 'Signing key name or account ID')
     .action(async (id: string, options, cmd) => {
       const globalOpts = cmd.optsWithGlobals()
@@ -579,7 +582,13 @@ export function registerDocumentCommands(program: Command) {
 
         const signer = createSignerFromKey(key)
         const capability = await resolveCapability(client, docAccount, key.accountId)
-        const {unsignedBytes, ts} = createChangeOps({ops, genesisCid, deps: depCids, depth: newDepth})
+        const {unsignedBytes, ts} = createChangeOps({
+          ops,
+          genesisCid,
+          deps: depCids,
+          depth: newDepth,
+          message: options.message,
+        })
         const changeBlock = await createChange(unsignedBytes, signer)
         const generation = Number(ts)
         const refInput = await createVersionRef(
diff --git a/frontend/apps/desktop/src/components/__tests__/edit-navigation-popover.test.tsx b/frontend/apps/desktop/src/components/__tests__/edit-navigation-popover.test.tsx
index 467d10b75..f97d15588 100644
--- a/frontend/apps/desktop/src/components/__tests__/edit-navigation-popover.test.tsx
+++ b/frontend/apps/desktop/src/components/__tests__/edit-navigation-popover.test.tsx
@@ -133,7 +133,8 @@ function cleanup(root: Root, container: HTMLDivElement) {
 
 function setInputValue(input: HTMLInputElement, value: string) {
   act(() => {
-    input.value = value
+    const nativeSetter = Object.getOwnPropertyDescriptor(HTMLInputElement.prototype, 'value')!.set!
+    nativeSetter.call(input, value)
     input.dispatchEvent(new Event('input', {bubbles: true}))
   })
 }
@@ -184,4 +185,94 @@ describe('EditNavPopover trigger', () => {
       cleanup(root, container)
     }
   })
+
+  it('shows only the document path in the link input for hm links', () => {
+    const {container, root} = renderPopover([{id: 'nav-1', type: 'Link', text: 'Docs', link: 'hm://alice/docs'}])
+
+    try {
+      // The item is not blank so expandedItemId starts null; click the toggle button to open the form.
+      const toggleButton = Array.from(container.querySelectorAll('button')).find(
+        (btn) => btn.textContent?.includes('Docs'),
+      ) as HTMLButtonElement | undefined
+      act(() => {
+        toggleButton?.click()
+      })
+
+      const linkInput = container.querySelector('input[aria-label="Link"]') as HTMLInputElement | null
+      expect(linkInput?.value).toBe('/docs')
+      expect(container.textContent).not.toContain('hm://alice/docs')
+    } finally {
+      cleanup(root, container)
+    }
+  })
+
+  it('updates link and label when a document search result is selected', async () => {
+    useSearchMock.mockImplementation(((query: string) => ({
+      data: {
+        entities:
+          query === 'Shared'
+            ? [
+                {
+                  id: {uid: 'alice', path: ['shared-meaning']},
+                  title: 'Shared Meaning',
+                  parentNames: ['Notes'],
+                  icon: null,
+                  searchQuery: query,
+                  versionTime: '',
+                },
+              ]
+            : [],
+      },
+    })) as any)
+
+    const {container, root} = renderPopover([{id: 'nav-1', type: 'Link', text: '', link: ''}])
+
+    try {
+      const linkInput = container.querySelector('input[aria-label="Link"]') as HTMLInputElement
+      const labelInput = container.querySelector('input[placeholder="My Link…"]') as HTMLInputElement
+
+      await act(async () => {
+        linkInput.focus()
+      })
+      setInputValue(linkInput, 'Shared')
+
+      const resultButton = container.querySelector('[data-search-result="Shared Meaning"]') as HTMLButtonElement | null
+      expect(resultButton).not.toBeNull()
+
+      await act(async () => {
+        resultButton?.click()
+      })
+
+      expect(linkInput.value).toBe('/shared-meaning')
+      expect(labelInput.value).toBe('Shared Meaning')
+    } finally {
+      cleanup(root, container)
+    }
+  })
+
+  it('commits pasted web URLs from the link input and updates the label', async () => {
+    resolveHypermediaUrlMock.mockResolvedValue(null)
+
+    const {container, root} = renderPopover([{id: 'nav-1', type: 'Link', text: '', link: ''}])
+
+    try {
+      const linkInput = container.querySelector('input[aria-label="Link"]') as HTMLInputElement
+      const labelInput = container.querySelector('input[placeholder="My Link…"]') as HTMLInputElement
+
+      await act(async () => {
+        linkInput.focus()
+      })
+      setInputValue(linkInput, 'https://seed.example/docs')
+
+      await act(async () => {
+        linkInput.dispatchEvent(new KeyboardEvent('keydown', {key: 'Enter', bubbles: true}))
+      })
+
+      expect(resolveHypermediaUrlMock).toHaveBeenCalledWith('https://seed.example/docs')
+      expect(linkInput.value).toBe('https://seed.example/docs')
+      expect(labelInput.value).toBe('https://seed.example/docs')
+    } finally {
+      cleanup(root, container)
+    }
+  })
 })
diff --git a/frontend/apps/desktop/src/components/edit-navigation-popover.tsx b/frontend/apps/desktop/src/components/edit-navigation-popover.tsx
index a744e338a..01227ed1c 100644
--- a/frontend/apps/desktop/src/components/edit-navigation-popover.tsx
+++ b/frontend/apps/desktop/src/components/edit-navigation-popover.tsx
@@ -557,14 +557,12 @@ function SearchUI({
     results.length > 0 ? ((focusedIndex % results.length) + results.length) % results.length : 0
 
   const prevActiveKeyRef = useRef<string | null>(null)
-
   useEffect(() => {
     const activeItem = results[normalizedFocusedIndex]
     const nextKey = activeItem?.key ?? null
-    if (nextKey !== prevActiveKeyRef.current) {
-      prevActiveKeyRef.current = nextKey
-      onActiveResultChange(activeItem ? {link: activeItem.key, title: activeItem.title || ''} : null)
-    }
+    if (nextKey === prevActiveKeyRef.current) return
+    prevActiveKeyRef.current = nextKey
+    onActiveResultChange(activeItem ? {link: activeItem.key, title: activeItem.title || ''} : null)
   }, [normalizedFocusedIndex, onActiveResultChange, results])
 
   return (
diff --git a/frontend/apps/desktop/src/components/publish-draft-button.tsx b/frontend/apps/desktop/src/components/publish-draft-button.tsx
index dee116879..8068a32f9 100644
--- a/frontend/apps/desktop/src/components/publish-draft-button.tsx
+++ b/frontend/apps/desktop/src/components/publish-draft-button.tsx
@@ -97,6 +97,9 @@ export default function PublishDraftButton() {
   // Inline error shown below the path input when publish fails during first publish
   const [publishError, setPublishError] = useState<string | null>(null)
 
+  // Optional publish message (like a git commit message)
+  const [publishMessage, setPublishMessage] = useState('')
+
   // Parent auto-link state for first publish
   type ParentPublishInfo = {
     parentId: UnpackedHypermediaId
@@ -268,6 +271,7 @@ export default function PublishDraftButton() {
         draft: draft.data,
         destinationId,
         accountId,
+        message: publishMessage || undefined,
       })
 
       const resultPath = entityQueryPathToHmIdPath(res.path)
@@ -499,6 +503,23 @@ export default function PublishDraftButton() {
 
             <Separator className="bg-black/10 dark:bg-white/10" />
 
+            {/* Publish message (optional) */}
+            <div className="flex flex-col gap-1.5">
+              <label htmlFor="publish-message" className="text-sm font-medium">
+                Publish message <span className="text-muted-foreground font-normal">(optional)</span>
+              </label>
+              <textarea
+                id="publish-message"
+                value={publishMessage}
+                onChange={(e) => setPublishMessage(e.target.value)}
+                placeholder='What changed? e.g. "Fixed typos in intro"'
+                className="border-input bg-muted/40 placeholder:text-muted-foreground focus-visible:ring-ring min-h-[72px] w-full resize-none rounded-md border px-3 py-2 text-sm focus-visible:ring-1 focus-visible:outline-none"
+                rows={3}
+              />
+            </div>
+
+            <Separator className="bg-black/10 dark:bg-white/10" />
+
             <div className="flex flex-col gap-1">
               <Button size="sm" variant="brand" onClick={handlePublishPress}>
                 Publish: Make it live now
diff --git a/frontend/apps/desktop/src/models/documents.ts b/frontend/apps/desktop/src/models/documents.ts
index 79976e134..df909ec04 100644
--- a/frontend/apps/desktop/src/models/documents.ts
+++ b/frontend/apps/desktop/src/models/documents.ts
@@ -222,6 +222,7 @@ type PublishDraftInput = {
    * it wins over the inline first-publish slug rename below.
    */
   pathOverride?: string[]
+  message?: string
 }
 export function usePublishResource(
   editId: UnpackedHypermediaId | undefined | null,
@@ -234,7 +235,13 @@ export function usePublishResource(
     mutationFn: (signingKeyName: string) => client.recentSigners.writeRecentSigner.mutate(signingKeyName),
   })
   return useMutation<HMDocument, any, PublishDraftInput>({
-    mutationFn: async ({draft, destinationId, accountId, pathOverride}: PublishDraftInput): Promise<HMDocument> => {
+    mutationFn: async ({
+      draft,
+      destinationId,
+      accountId,
+      pathOverride,
+      message,
+    }: PublishDraftInput): Promise<HMDocument> => {
       const blocksMap = editId ? createBlocksMap(editDocument?.content || [], '') : {}
       let newContent = removeTrailingBlocks(draft.content || [])
 
@@ -397,6 +404,7 @@ export function usePublishResource(
               visibility,
               genesis: editDocument?.genesis,
               generation: editDocument?.generationInfo?.generation,
+              message,
             })
 
             const updatedDoc = await grpcClient.documents.getDocument({
diff --git a/frontend/apps/desktop/src/utils/publish-document.ts b/frontend/apps/desktop/src/utils/publish-document.ts
index fb31bfd84..4322a1c27 100644
--- a/frontend/apps/desktop/src/utils/publish-document.ts
+++ b/frontend/apps/desktop/src/utils/publish-document.ts
@@ -10,6 +10,7 @@ type CreateDocumentChangeRequest = {
   changes: DocumentChange[]
   capability: string
   visibility: ResourceVisibility
+  message: string
 }
 
 type PublishDesktopDocumentDeps = {
@@ -38,6 +39,7 @@ export function createDocumentChangeRequest(input: PublishDocumentInput): Create
     ),
     capability: input.capability ?? '',
     visibility: ResourceVisibility.UNSPECIFIED,
+    message: input.message ?? '',
   }
 }
 
diff --git a/frontend/packages/client/src/change.ts b/frontend/packages/client/src/change.ts
index eecaad0cb..e4e73bb10 100644
--- a/frontend/packages/client/src/change.ts
+++ b/frontend/packages/client/src/change.ts
@@ -33,6 +33,8 @@ export type CreateChangeOpsInput = {
   depth: number
   /** Timestamp (defaults to Date.now()) */
   ts?: bigint
+  /** Optional human-readable publish message, similar to a git commit message. */
+  message?: string
 }
 
 /**
@@ -54,6 +56,9 @@ export function createChangeOps(input: CreateChangeOpsInput): {unsignedBytes: Ui
     deps: input.deps,
     depth: input.depth,
   }
+  if (input.message) {
+    unsigned.message = input.message
+  }
   return {unsignedBytes: cborEncode(unsigned), ts}
 }
 
@@ -136,6 +141,8 @@ export type CreateDocumentChangeInput = {
   deps: CID[]
   /** Depth of the change (max depth of deps + 1) */
   depth: number
+  /** Optional human-readable publish message, similar to a git commit message. */
+  message?: string
 }
 
 /**
@@ -147,7 +154,13 @@ export async function createDocumentChange(
   signer: HMSigner,
 ): Promise<{bytes: Uint8Array; cid: CID}> {
   const ops = protoChangesToOps(input.changes)
-  const {unsignedBytes} = createChangeOps({ops, genesisCid: input.genesisCid, deps: input.deps, depth: input.depth})
+  const {unsignedBytes} = createChangeOps({
+    ops,
+    genesisCid: input.genesisCid,
+    deps: input.deps,
+    depth: input.depth,
+    message: input.message,
+  })
   const {bytes, cid} = await createChange(unsignedBytes, signer)
   return {bytes, cid}
 }
@@ -186,7 +199,10 @@ export type SignDocumentChangeInput = {
   account: string
   /** Document path (API format, e.g., "/my-doc"). Defaults to root (""). */
   path?: string
-  /** Unsigned CBOR bytes from PrepareChange RPC */
+  /** Unsigned CBOR bytes from PrepareChange RPC.
+   *  The publish message (if any) must already be embedded in these bytes by
+   *  the daemon's PrepareChange handler — it lives on the Change blob, not
+   *  the Ref blob, so it is not threaded separately here. */
   unsignedChange: Uint8Array
   /** Genesis CID string (from GetDocument). For new documents omit — changeCid is used. */
   genesis?: string
diff --git a/frontend/packages/client/src/client.ts b/frontend/packages/client/src/client.ts
index 892c52231..832b09e40 100644
--- a/frontend/packages/client/src/client.ts
+++ b/frontend/packages/client/src/client.ts
@@ -98,6 +98,8 @@ export type PublishDocumentInput = {
   generation?: number | bigint
   capability?: string
   visibility?: number
+  /** Optional human-readable publish message, similar to a git commit message. */
+  message?: string
 }
 
 export type SeedClientOptions = {
@@ -250,6 +252,7 @@ export function createSeedClient(baseUrl: string, options?: SeedClientOptions):
           genesisCid: genesisChange.cid,
           deps: [genesisChange.cid],
           depth: 1,
+          message: input.message,
         },
         signer,
       )
@@ -275,14 +278,16 @@ export function createSeedClient(baseUrl: string, options?: SeedClientOptions):
     }
 
     // Use PrepareDocumentChange for both new and existing documents so the server
-    // can prepare all supported ops.
+    // can prepare all supported ops. The message is passed in the prepare
+    // request so the daemon can embed it into the unsigned Change blob — it
+    // lives on the Change, not the Ref.
     const {unsignedChange} = (await request('PrepareDocumentChange', {
       account: input.account,
       path: input.path,
       baseVersion: input.baseVersion,
       changes: input.changes,
       capability: input.capability,
-      visibility: input.visibility,
+      message: input.message,
     })) as Extract<HMRequest, {key: 'PrepareDocumentChange'}>['output']
     const {publishInput} = await signDocumentChange(
       {
diff --git a/frontend/packages/client/src/hm-types.ts b/frontend/packages/client/src/hm-types.ts
index dba5b2591..eea5c13e6 100644
--- a/frontend/packages/client/src/hm-types.ts
+++ b/frontend/packages/client/src/hm-types.ts
@@ -1590,7 +1590,9 @@ export const HMPrepareDocumentChangeInputSchema = z.object({
   baseVersion: z.string().optional(),
   changes: z.array(ProtoDocumentChangeSchema),
   capability: z.string().optional(),
-  visibility: z.number().int().optional(),
+  /** Optional human-readable publish message, similar to a git commit message.
+   *  The daemon embeds this into the unsigned Change blob returned to the client. */
+  message: z.string().optional(),
 })
 export type HMPrepareDocumentChangeInput = z.infer<typeof HMPrepareDocumentChangeInputSchema>
 
diff --git a/frontend/packages/shared/src/api-prepare-document-change.ts b/frontend/packages/shared/src/api-prepare-document-change.ts
index 9976e1f9b..83a275e2e 100644
--- a/frontend/packages/shared/src/api-prepare-document-change.ts
+++ b/frontend/packages/shared/src/api-prepare-document-change.ts
@@ -9,7 +9,7 @@ export const PrepareDocumentChange: HMRequestImplementation<HMPrepareDocumentCha
       path: input.path ?? '',
       baseVersion: input.baseVersion ?? '',
       capability: input.capability ?? '',
-      visibility: input.visibility ?? 0,
+      message: input.message ?? '',
       changes: input.changes.map((c) => new DocumentChange(c as ConstructorParameters<typeof DocumentChange>[0])),
     })
     return {unsignedChange: result.unsignedChange}
diff --git a/frontend/packages/shared/src/client/.generated/documents/v3alpha/comments_connect.ts b/frontend/packages/shared/src/client/.generated/documents/v3alpha/comments_connect.ts
index 626ec69b9..fb65c6b5d 100644
--- a/frontend/packages/shared/src/client/.generated/documents/v3alpha/comments_connect.ts
+++ b/frontend/packages/shared/src/client/.generated/documents/v3alpha/comments_connect.ts
@@ -3,23 +3,8 @@
 /* eslint-disable */
 // @ts-nocheck
 
-import {
-  BatchGetCommentsRequest,
-  BatchGetCommentsResponse,
-  Comment,
-  CreateCommentRequest,
-  DeleteCommentRequest,
-  GetCommentReplyCountRequest,
-  GetCommentReplyCountResponse,
-  GetCommentRequest,
-  ListCommentsByAuthorRequest,
-  ListCommentsRequest,
-  ListCommentsResponse,
-  ListCommentVersionsRequest,
-  ListCommentVersionsResponse,
-  UpdateCommentRequest,
-} from './comments_pb'
-import {Empty, MethodKind} from '@bufbuild/protobuf'
+import { BatchGetCommentsRequest, BatchGetCommentsResponse, Comment, CreateCommentRequest, DeleteCommentRequest, GetCommentReplyCountRequest, GetCommentReplyCountResponse, GetCommentRequest, ListCommentsByAuthorRequest, ListCommentsRequest, ListCommentsResponse, ListCommentVersionsRequest, ListCommentVersionsResponse, UpdateCommentRequest } from "./comments_pb";
+import { Empty, MethodKind } from "@bufbuild/protobuf";
 
 /**
  * Comments service allows users to add comments to documents.
@@ -27,7 +12,7 @@ import {Empty, MethodKind} from '@bufbuild/protobuf'
  * @generated from service com.seed.documents.v3alpha.Comments
  */
 export const Comments = {
-  typeName: 'com.seed.documents.v3alpha.Comments',
+  typeName: "com.seed.documents.v3alpha.Comments",
   methods: {
     /**
      * Creates a new comment.
@@ -35,7 +20,7 @@ export const Comments = {
      * @generated from rpc com.seed.documents.v3alpha.Comments.CreateComment
      */
     createComment: {
-      name: 'CreateComment',
+      name: "CreateComment",
       I: CreateCommentRequest,
       O: Comment,
       kind: MethodKind.Unary,
@@ -46,7 +31,7 @@ export const Comments = {
      * @generated from rpc com.seed.documents.v3alpha.Comments.GetComment
      */
     getComment: {
-      name: 'GetComment',
+      name: "GetComment",
       I: GetCommentRequest,
       O: Comment,
       kind: MethodKind.Unary,
@@ -57,7 +42,7 @@ export const Comments = {
      * @generated from rpc com.seed.documents.v3alpha.Comments.BatchGetComments
      */
     batchGetComments: {
-      name: 'BatchGetComments',
+      name: "BatchGetComments",
       I: BatchGetCommentsRequest,
       O: BatchGetCommentsResponse,
       kind: MethodKind.Unary,
@@ -68,7 +53,7 @@ export const Comments = {
      * @generated from rpc com.seed.documents.v3alpha.Comments.ListComments
      */
     listComments: {
-      name: 'ListComments',
+      name: "ListComments",
       I: ListCommentsRequest,
       O: ListCommentsResponse,
       kind: MethodKind.Unary,
@@ -79,7 +64,7 @@ export const Comments = {
      * @generated from rpc com.seed.documents.v3alpha.Comments.ListCommentsByAuthor
      */
     listCommentsByAuthor: {
-      name: 'ListCommentsByAuthor',
+      name: "ListCommentsByAuthor",
       I: ListCommentsByAuthorRequest,
       O: ListCommentsResponse,
       kind: MethodKind.Unary,
@@ -90,7 +75,7 @@ export const Comments = {
      * @generated from rpc com.seed.documents.v3alpha.Comments.UpdateComment
      */
     updateComment: {
-      name: 'UpdateComment',
+      name: "UpdateComment",
       I: UpdateCommentRequest,
       O: Comment,
       kind: MethodKind.Unary,
@@ -101,7 +86,7 @@ export const Comments = {
      * @generated from rpc com.seed.documents.v3alpha.Comments.DeleteComment
      */
     deleteComment: {
-      name: 'DeleteComment',
+      name: "DeleteComment",
       I: DeleteCommentRequest,
       O: Empty,
       kind: MethodKind.Unary,
@@ -112,7 +97,7 @@ export const Comments = {
      * @generated from rpc com.seed.documents.v3alpha.Comments.GetCommentReplyCount
      */
     getCommentReplyCount: {
-      name: 'GetCommentReplyCount',
+      name: "GetCommentReplyCount",
       I: GetCommentReplyCountRequest,
       O: GetCommentReplyCountResponse,
       kind: MethodKind.Unary,
@@ -123,10 +108,11 @@ export const Comments = {
      * @generated from rpc com.seed.documents.v3alpha.Comments.ListCommentVersions
      */
     listCommentVersions: {
-      name: 'ListCommentVersions',
+      name: "ListCommentVersions",
       I: ListCommentVersionsRequest,
       O: ListCommentVersionsResponse,
       kind: MethodKind.Unary,
     },
-  },
-} as const
+  }
+} as const;
+
diff --git a/frontend/packages/shared/src/client/.generated/documents/v3alpha/comments_pb.ts b/frontend/packages/shared/src/client/.generated/documents/v3alpha/comments_pb.ts
index 83f947fa1..db274577d 100644
--- a/frontend/packages/shared/src/client/.generated/documents/v3alpha/comments_pb.ts
+++ b/frontend/packages/shared/src/client/.generated/documents/v3alpha/comments_pb.ts
@@ -3,16 +3,9 @@
 /* eslint-disable */
 // @ts-nocheck
 
-import type {
-  BinaryReadOptions,
-  FieldList,
-  JsonReadOptions,
-  JsonValue,
-  PartialMessage,
-  PlainMessage,
-} from '@bufbuild/protobuf'
-import {Message, proto3, protoInt64, Timestamp} from '@bufbuild/protobuf'
-import {BlockNode} from './documents_pb'
+import type { BinaryReadOptions, FieldList, JsonReadOptions, JsonValue, PartialMessage, PlainMessage } from "@bufbuild/protobuf";
+import { Message, proto3, protoInt64, Timestamp } from "@bufbuild/protobuf";
+import { BlockNode } from "./documents_pb";
 
 /**
  * Request to create a comment.
@@ -25,21 +18,21 @@ export class CreateCommentRequest extends Message<CreateCommentRequest> {
    *
    * @generated from field: string target_account = 1;
    */
-  targetAccount = ''
+  targetAccount = "";
 
   /**
    * Required. Path within the account where the comment is applied.
    *
    * @generated from field: string target_path = 2;
    */
-  targetPath = ''
+  targetPath = "";
 
   /**
    * Required. Version of the document at the time of the comment.
    *
    * @generated from field: string target_version = 3;
    */
-  targetVersion = ''
+  targetVersion = "";
 
   /**
    * Optional. When current comment is a reply to another comment,
@@ -48,21 +41,21 @@ export class CreateCommentRequest extends Message<CreateCommentRequest> {
    *
    * @generated from field: string reply_parent = 4;
    */
-  replyParent = ''
+  replyParent = "";
 
   /**
    * Required. Content of the comment.
    *
    * @generated from field: repeated com.seed.documents.v3alpha.BlockNode content = 5;
    */
-  content: BlockNode[] = []
+  content: BlockNode[] = [];
 
   /**
    * Required. Name of the key to use for signing the comment.
    *
    * @generated from field: string signing_key_name = 6;
    */
-  signingKeyName = ''
+  signingKeyName = "";
 
   /**
    * Optional. ID of the capability that allows publishing comments for the target account and path.
@@ -70,42 +63,39 @@ export class CreateCommentRequest extends Message<CreateCommentRequest> {
    *
    * @generated from field: string capability = 7;
    */
-  capability = ''
+  capability = "";
 
   constructor(data?: PartialMessage<CreateCommentRequest>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.CreateCommentRequest'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.CreateCommentRequest";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'target_account', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 2, name: 'target_path', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 3, name: 'target_version', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 4, name: 'reply_parent', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 5, name: 'content', kind: 'message', T: BlockNode, repeated: true},
-    {no: 6, name: 'signing_key_name', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 7, name: 'capability', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-  ])
+    { no: 1, name: "target_account", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 2, name: "target_path", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 3, name: "target_version", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 4, name: "reply_parent", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 5, name: "content", kind: "message", T: BlockNode, repeated: true },
+    { no: 6, name: "signing_key_name", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 7, name: "capability", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): CreateCommentRequest {
-    return new CreateCommentRequest().fromBinary(bytes, options)
+    return new CreateCommentRequest().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): CreateCommentRequest {
-    return new CreateCommentRequest().fromJson(jsonValue, options)
+    return new CreateCommentRequest().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): CreateCommentRequest {
-    return new CreateCommentRequest().fromJsonString(jsonString, options)
+    return new CreateCommentRequest().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: CreateCommentRequest | PlainMessage<CreateCommentRequest> | undefined,
-    b: CreateCommentRequest | PlainMessage<CreateCommentRequest> | undefined,
-  ): boolean {
-    return proto3.util.equals(CreateCommentRequest, a, b)
+  static equals(a: CreateCommentRequest | PlainMessage<CreateCommentRequest> | undefined, b: CreateCommentRequest | PlainMessage<CreateCommentRequest> | undefined): boolean {
+    return proto3.util.equals(CreateCommentRequest, a, b);
   }
 }
 
@@ -122,36 +112,33 @@ export class GetCommentRequest extends Message<GetCommentRequest> {
    *
    * @generated from field: string id = 1;
    */
-  id = ''
+  id = "";
 
   constructor(data?: PartialMessage<GetCommentRequest>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.GetCommentRequest'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.GetCommentRequest";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'id', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-  ])
+    { no: 1, name: "id", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetCommentRequest {
-    return new GetCommentRequest().fromBinary(bytes, options)
+    return new GetCommentRequest().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetCommentRequest {
-    return new GetCommentRequest().fromJson(jsonValue, options)
+    return new GetCommentRequest().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetCommentRequest {
-    return new GetCommentRequest().fromJsonString(jsonString, options)
+    return new GetCommentRequest().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: GetCommentRequest | PlainMessage<GetCommentRequest> | undefined,
-    b: GetCommentRequest | PlainMessage<GetCommentRequest> | undefined,
-  ): boolean {
-    return proto3.util.equals(GetCommentRequest, a, b)
+  static equals(a: GetCommentRequest | PlainMessage<GetCommentRequest> | undefined, b: GetCommentRequest | PlainMessage<GetCommentRequest> | undefined): boolean {
+    return proto3.util.equals(GetCommentRequest, a, b);
   }
 }
 
@@ -167,36 +154,33 @@ export class BatchGetCommentsRequest extends Message<BatchGetCommentsRequest> {
    *
    * @generated from field: repeated string ids = 1;
    */
-  ids: string[] = []
+  ids: string[] = [];
 
   constructor(data?: PartialMessage<BatchGetCommentsRequest>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.BatchGetCommentsRequest'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.BatchGetCommentsRequest";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'ids', kind: 'scalar', T: 9 /* ScalarType.STRING */, repeated: true},
-  ])
+    { no: 1, name: "ids", kind: "scalar", T: 9 /* ScalarType.STRING */, repeated: true },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): BatchGetCommentsRequest {
-    return new BatchGetCommentsRequest().fromBinary(bytes, options)
+    return new BatchGetCommentsRequest().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): BatchGetCommentsRequest {
-    return new BatchGetCommentsRequest().fromJson(jsonValue, options)
+    return new BatchGetCommentsRequest().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): BatchGetCommentsRequest {
-    return new BatchGetCommentsRequest().fromJsonString(jsonString, options)
+    return new BatchGetCommentsRequest().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: BatchGetCommentsRequest | PlainMessage<BatchGetCommentsRequest> | undefined,
-    b: BatchGetCommentsRequest | PlainMessage<BatchGetCommentsRequest> | undefined,
-  ): boolean {
-    return proto3.util.equals(BatchGetCommentsRequest, a, b)
+  static equals(a: BatchGetCommentsRequest | PlainMessage<BatchGetCommentsRequest> | undefined, b: BatchGetCommentsRequest | PlainMessage<BatchGetCommentsRequest> | undefined): boolean {
+    return proto3.util.equals(BatchGetCommentsRequest, a, b);
   }
 }
 
@@ -211,36 +195,33 @@ export class BatchGetCommentsResponse extends Message<BatchGetCommentsResponse>
    *
    * @generated from field: repeated com.seed.documents.v3alpha.Comment comments = 1;
    */
-  comments: Comment[] = []
+  comments: Comment[] = [];
 
   constructor(data?: PartialMessage<BatchGetCommentsResponse>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.BatchGetCommentsResponse'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.BatchGetCommentsResponse";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'comments', kind: 'message', T: Comment, repeated: true},
-  ])
+    { no: 1, name: "comments", kind: "message", T: Comment, repeated: true },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): BatchGetCommentsResponse {
-    return new BatchGetCommentsResponse().fromBinary(bytes, options)
+    return new BatchGetCommentsResponse().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): BatchGetCommentsResponse {
-    return new BatchGetCommentsResponse().fromJson(jsonValue, options)
+    return new BatchGetCommentsResponse().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): BatchGetCommentsResponse {
-    return new BatchGetCommentsResponse().fromJsonString(jsonString, options)
+    return new BatchGetCommentsResponse().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: BatchGetCommentsResponse | PlainMessage<BatchGetCommentsResponse> | undefined,
-    b: BatchGetCommentsResponse | PlainMessage<BatchGetCommentsResponse> | undefined,
-  ): boolean {
-    return proto3.util.equals(BatchGetCommentsResponse, a, b)
+  static equals(a: BatchGetCommentsResponse | PlainMessage<BatchGetCommentsResponse> | undefined, b: BatchGetCommentsResponse | PlainMessage<BatchGetCommentsResponse> | undefined): boolean {
+    return proto3.util.equals(BatchGetCommentsResponse, a, b);
   }
 }
 
@@ -255,60 +236,57 @@ export class ListCommentsRequest extends Message<ListCommentsRequest> {
    *
    * @generated from field: string target_account = 1;
    */
-  targetAccount = ''
+  targetAccount = "";
 
   /**
    * Required. Path within the account to list the comments for.
    *
    * @generated from field: string target_path = 2;
    */
-  targetPath = ''
+  targetPath = "";
 
   /**
    * Optional. The maximum number of comments to return.
    *
    * @generated from field: int32 page_size = 3;
    */
-  pageSize = 0
+  pageSize = 0;
 
   /**
    * Optional. The page token obtained from a previous request (if any).
    *
    * @generated from field: string page_token = 4;
    */
-  pageToken = ''
+  pageToken = "";
 
   constructor(data?: PartialMessage<ListCommentsRequest>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.ListCommentsRequest'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.ListCommentsRequest";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'target_account', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 2, name: 'target_path', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 3, name: 'page_size', kind: 'scalar', T: 5 /* ScalarType.INT32 */},
-    {no: 4, name: 'page_token', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-  ])
+    { no: 1, name: "target_account", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 2, name: "target_path", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 3, name: "page_size", kind: "scalar", T: 5 /* ScalarType.INT32 */ },
+    { no: 4, name: "page_token", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListCommentsRequest {
-    return new ListCommentsRequest().fromBinary(bytes, options)
+    return new ListCommentsRequest().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListCommentsRequest {
-    return new ListCommentsRequest().fromJson(jsonValue, options)
+    return new ListCommentsRequest().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListCommentsRequest {
-    return new ListCommentsRequest().fromJsonString(jsonString, options)
+    return new ListCommentsRequest().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: ListCommentsRequest | PlainMessage<ListCommentsRequest> | undefined,
-    b: ListCommentsRequest | PlainMessage<ListCommentsRequest> | undefined,
-  ): boolean {
-    return proto3.util.equals(ListCommentsRequest, a, b)
+  static equals(a: ListCommentsRequest | PlainMessage<ListCommentsRequest> | undefined, b: ListCommentsRequest | PlainMessage<ListCommentsRequest> | undefined): boolean {
+    return proto3.util.equals(ListCommentsRequest, a, b);
   }
 }
 
@@ -323,52 +301,49 @@ export class ListCommentsByAuthorRequest extends Message<ListCommentsByAuthorReq
    *
    * @generated from field: string author = 1;
    */
-  author = ''
+  author = "";
 
   /**
    * Optional. The maximum number of comments to return.
    *
    * @generated from field: int32 page_size = 2;
    */
-  pageSize = 0
+  pageSize = 0;
 
   /**
    * Optional. The page token obtained from a previous request (if any).
    *
    * @generated from field: string page_token = 3;
    */
-  pageToken = ''
+  pageToken = "";
 
   constructor(data?: PartialMessage<ListCommentsByAuthorRequest>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.ListCommentsByAuthorRequest'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.ListCommentsByAuthorRequest";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'author', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 2, name: 'page_size', kind: 'scalar', T: 5 /* ScalarType.INT32 */},
-    {no: 3, name: 'page_token', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-  ])
+    { no: 1, name: "author", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 2, name: "page_size", kind: "scalar", T: 5 /* ScalarType.INT32 */ },
+    { no: 3, name: "page_token", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListCommentsByAuthorRequest {
-    return new ListCommentsByAuthorRequest().fromBinary(bytes, options)
+    return new ListCommentsByAuthorRequest().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListCommentsByAuthorRequest {
-    return new ListCommentsByAuthorRequest().fromJson(jsonValue, options)
+    return new ListCommentsByAuthorRequest().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListCommentsByAuthorRequest {
-    return new ListCommentsByAuthorRequest().fromJsonString(jsonString, options)
+    return new ListCommentsByAuthorRequest().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: ListCommentsByAuthorRequest | PlainMessage<ListCommentsByAuthorRequest> | undefined,
-    b: ListCommentsByAuthorRequest | PlainMessage<ListCommentsByAuthorRequest> | undefined,
-  ): boolean {
-    return proto3.util.equals(ListCommentsByAuthorRequest, a, b)
+  static equals(a: ListCommentsByAuthorRequest | PlainMessage<ListCommentsByAuthorRequest> | undefined, b: ListCommentsByAuthorRequest | PlainMessage<ListCommentsByAuthorRequest> | undefined): boolean {
+    return proto3.util.equals(ListCommentsByAuthorRequest, a, b);
   }
 }
 
@@ -383,44 +358,41 @@ export class ListCommentsResponse extends Message<ListCommentsResponse> {
    *
    * @generated from field: repeated com.seed.documents.v3alpha.Comment comments = 1;
    */
-  comments: Comment[] = []
+  comments: Comment[] = [];
 
   /**
    * Token to retrieve the next page of comments (if necessary).
    *
    * @generated from field: string next_page_token = 2;
    */
-  nextPageToken = ''
+  nextPageToken = "";
 
   constructor(data?: PartialMessage<ListCommentsResponse>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.ListCommentsResponse'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.ListCommentsResponse";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'comments', kind: 'message', T: Comment, repeated: true},
-    {no: 2, name: 'next_page_token', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-  ])
+    { no: 1, name: "comments", kind: "message", T: Comment, repeated: true },
+    { no: 2, name: "next_page_token", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListCommentsResponse {
-    return new ListCommentsResponse().fromBinary(bytes, options)
+    return new ListCommentsResponse().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListCommentsResponse {
-    return new ListCommentsResponse().fromJson(jsonValue, options)
+    return new ListCommentsResponse().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListCommentsResponse {
-    return new ListCommentsResponse().fromJsonString(jsonString, options)
+    return new ListCommentsResponse().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: ListCommentsResponse | PlainMessage<ListCommentsResponse> | undefined,
-    b: ListCommentsResponse | PlainMessage<ListCommentsResponse> | undefined,
-  ): boolean {
-    return proto3.util.equals(ListCommentsResponse, a, b)
+  static equals(a: ListCommentsResponse | PlainMessage<ListCommentsResponse> | undefined, b: ListCommentsResponse | PlainMessage<ListCommentsResponse> | undefined): boolean {
+    return proto3.util.equals(ListCommentsResponse, a, b);
   }
 }
 
@@ -435,42 +407,42 @@ export class Comment extends Message<Comment> {
    *
    * @generated from field: string id = 1;
    */
-  id = ''
+  id = "";
 
   /**
    * Account ID that this comment targets.
    *
    * @generated from field: string target_account = 2;
    */
-  targetAccount = ''
+  targetAccount = "";
 
   /**
    * Path within the account this comment targets.
    *
    * @generated from field: string target_path = 3;
    */
-  targetPath = ''
+  targetPath = "";
 
   /**
    * Version of the document this comment targets.
    *
    * @generated from field: string target_version = 4;
    */
-  targetVersion = ''
+  targetVersion = "";
 
   /**
    * Optional. The ID of the top-level non-reply comment of the conversation thread.
    *
    * @generated from field: string thread_root = 5;
    */
-  threadRoot = ''
+  threadRoot = "";
 
   /**
    * Optional. Version of the thread root comment (if this is a reply).
    *
    * @generated from field: string thread_root_version = 12;
    */
-  threadRootVersion = ''
+  threadRootVersion = "";
 
   /**
    * Optional. The ID of the comment to which this comment is a direct reply.
@@ -478,56 +450,56 @@ export class Comment extends Message<Comment> {
    *
    * @generated from field: string reply_parent = 6;
    */
-  replyParent = ''
+  replyParent = "";
 
   /**
    * Optional. Version of the parent comment (if this is a reply).
    *
    * @generated from field: string reply_parent_version = 13;
    */
-  replyParentVersion = ''
+  replyParentVersion = "";
 
   /**
    * Account ID of the author of the comment.
    *
    * @generated from field: string author = 7;
    */
-  author = ''
+  author = "";
 
   /**
    * Content of the comment.
    *
    * @generated from field: repeated com.seed.documents.v3alpha.BlockNode content = 8;
    */
-  content: BlockNode[] = []
+  content: BlockNode[] = [];
 
   /**
    * Timestamp when the comment was created.
    *
    * @generated from field: google.protobuf.Timestamp create_time = 9;
    */
-  createTime?: Timestamp
+  createTime?: Timestamp;
 
   /**
    * Optional. ID of the capability this comment was created with, if any.
    *
    * @generated from field: string capability = 10;
    */
-  capability = ''
+  capability = "";
 
   /**
    * Version of this comment.
    *
    * @generated from field: string version = 11;
    */
-  version = ''
+  version = "";
 
   /**
    * Timestamp when the comment was last updated.
    *
    * @generated from field: google.protobuf.Timestamp update_time = 14;
    */
-  updateTime?: Timestamp
+  updateTime?: Timestamp;
 
   /**
    * Visibility of the comment, inherited from the target document at creation time.
@@ -535,50 +507,47 @@ export class Comment extends Message<Comment> {
    *
    * @generated from field: string visibility = 15;
    */
-  visibility = ''
+  visibility = "";
 
   constructor(data?: PartialMessage<Comment>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.Comment'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.Comment";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'id', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 2, name: 'target_account', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 3, name: 'target_path', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 4, name: 'target_version', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 5, name: 'thread_root', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 12, name: 'thread_root_version', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 6, name: 'reply_parent', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 13, name: 'reply_parent_version', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 7, name: 'author', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 8, name: 'content', kind: 'message', T: BlockNode, repeated: true},
-    {no: 9, name: 'create_time', kind: 'message', T: Timestamp},
-    {no: 10, name: 'capability', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 11, name: 'version', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 14, name: 'update_time', kind: 'message', T: Timestamp},
-    {no: 15, name: 'visibility', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-  ])
+    { no: 1, name: "id", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 2, name: "target_account", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 3, name: "target_path", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 4, name: "target_version", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 5, name: "thread_root", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 12, name: "thread_root_version", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 6, name: "reply_parent", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 13, name: "reply_parent_version", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 7, name: "author", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 8, name: "content", kind: "message", T: BlockNode, repeated: true },
+    { no: 9, name: "create_time", kind: "message", T: Timestamp },
+    { no: 10, name: "capability", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 11, name: "version", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 14, name: "update_time", kind: "message", T: Timestamp },
+    { no: 15, name: "visibility", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): Comment {
-    return new Comment().fromBinary(bytes, options)
+    return new Comment().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): Comment {
-    return new Comment().fromJson(jsonValue, options)
+    return new Comment().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): Comment {
-    return new Comment().fromJsonString(jsonString, options)
+    return new Comment().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: Comment | PlainMessage<Comment> | undefined,
-    b: Comment | PlainMessage<Comment> | undefined,
-  ): boolean {
-    return proto3.util.equals(Comment, a, b)
+  static equals(a: Comment | PlainMessage<Comment> | undefined, b: Comment | PlainMessage<Comment> | undefined): boolean {
+    return proto3.util.equals(Comment, a, b);
   }
 }
 
@@ -595,44 +564,41 @@ export class UpdateCommentRequest extends Message<UpdateCommentRequest> {
    *
    * @generated from field: com.seed.documents.v3alpha.Comment comment = 1;
    */
-  comment?: Comment
+  comment?: Comment;
 
   /**
    * Required. Name of the key to use for signing the comment update.
    *
    * @generated from field: string signing_key_name = 2;
    */
-  signingKeyName = ''
+  signingKeyName = "";
 
   constructor(data?: PartialMessage<UpdateCommentRequest>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.UpdateCommentRequest'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.UpdateCommentRequest";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'comment', kind: 'message', T: Comment},
-    {no: 2, name: 'signing_key_name', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-  ])
+    { no: 1, name: "comment", kind: "message", T: Comment },
+    { no: 2, name: "signing_key_name", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdateCommentRequest {
-    return new UpdateCommentRequest().fromBinary(bytes, options)
+    return new UpdateCommentRequest().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdateCommentRequest {
-    return new UpdateCommentRequest().fromJson(jsonValue, options)
+    return new UpdateCommentRequest().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdateCommentRequest {
-    return new UpdateCommentRequest().fromJsonString(jsonString, options)
+    return new UpdateCommentRequest().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: UpdateCommentRequest | PlainMessage<UpdateCommentRequest> | undefined,
-    b: UpdateCommentRequest | PlainMessage<UpdateCommentRequest> | undefined,
-  ): boolean {
-    return proto3.util.equals(UpdateCommentRequest, a, b)
+  static equals(a: UpdateCommentRequest | PlainMessage<UpdateCommentRequest> | undefined, b: UpdateCommentRequest | PlainMessage<UpdateCommentRequest> | undefined): boolean {
+    return proto3.util.equals(UpdateCommentRequest, a, b);
   }
 }
 
@@ -647,44 +613,41 @@ export class DeleteCommentRequest extends Message<DeleteCommentRequest> {
    *
    * @generated from field: string id = 1;
    */
-  id = ''
+  id = "";
 
   /**
    * Required. Name of the key to use for signing the comment deletion.
    *
    * @generated from field: string signing_key_name = 2;
    */
-  signingKeyName = ''
+  signingKeyName = "";
 
   constructor(data?: PartialMessage<DeleteCommentRequest>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.DeleteCommentRequest'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.DeleteCommentRequest";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'id', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-    {no: 2, name: 'signing_key_name', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-  ])
+    { no: 1, name: "id", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 2, name: "signing_key_name", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): DeleteCommentRequest {
-    return new DeleteCommentRequest().fromBinary(bytes, options)
+    return new DeleteCommentRequest().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): DeleteCommentRequest {
-    return new DeleteCommentRequest().fromJson(jsonValue, options)
+    return new DeleteCommentRequest().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): DeleteCommentRequest {
-    return new DeleteCommentRequest().fromJsonString(jsonString, options)
+    return new DeleteCommentRequest().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: DeleteCommentRequest | PlainMessage<DeleteCommentRequest> | undefined,
-    b: DeleteCommentRequest | PlainMessage<DeleteCommentRequest> | undefined,
-  ): boolean {
-    return proto3.util.equals(DeleteCommentRequest, a, b)
+  static equals(a: DeleteCommentRequest | PlainMessage<DeleteCommentRequest> | undefined, b: DeleteCommentRequest | PlainMessage<DeleteCommentRequest> | undefined): boolean {
+    return proto3.util.equals(DeleteCommentRequest, a, b);
   }
 }
 
@@ -700,36 +663,33 @@ export class GetCommentReplyCountRequest extends Message<GetCommentReplyCountReq
    *
    * @generated from field: string id = 1;
    */
-  id = ''
+  id = "";
 
   constructor(data?: PartialMessage<GetCommentReplyCountRequest>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.GetCommentReplyCountRequest'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.GetCommentReplyCountRequest";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'id', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-  ])
+    { no: 1, name: "id", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetCommentReplyCountRequest {
-    return new GetCommentReplyCountRequest().fromBinary(bytes, options)
+    return new GetCommentReplyCountRequest().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetCommentReplyCountRequest {
-    return new GetCommentReplyCountRequest().fromJson(jsonValue, options)
+    return new GetCommentReplyCountRequest().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetCommentReplyCountRequest {
-    return new GetCommentReplyCountRequest().fromJsonString(jsonString, options)
+    return new GetCommentReplyCountRequest().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: GetCommentReplyCountRequest | PlainMessage<GetCommentReplyCountRequest> | undefined,
-    b: GetCommentReplyCountRequest | PlainMessage<GetCommentReplyCountRequest> | undefined,
-  ): boolean {
-    return proto3.util.equals(GetCommentReplyCountRequest, a, b)
+  static equals(a: GetCommentReplyCountRequest | PlainMessage<GetCommentReplyCountRequest> | undefined, b: GetCommentReplyCountRequest | PlainMessage<GetCommentReplyCountRequest> | undefined): boolean {
+    return proto3.util.equals(GetCommentReplyCountRequest, a, b);
   }
 }
 
@@ -744,36 +704,33 @@ export class GetCommentReplyCountResponse extends Message<GetCommentReplyCountRe
    *
    * @generated from field: int64 reply_count = 1;
    */
-  replyCount = protoInt64.zero
+  replyCount = protoInt64.zero;
 
   constructor(data?: PartialMessage<GetCommentReplyCountResponse>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.GetCommentReplyCountResponse'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.GetCommentReplyCountResponse";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'reply_count', kind: 'scalar', T: 3 /* ScalarType.INT64 */},
-  ])
+    { no: 1, name: "reply_count", kind: "scalar", T: 3 /* ScalarType.INT64 */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetCommentReplyCountResponse {
-    return new GetCommentReplyCountResponse().fromBinary(bytes, options)
+    return new GetCommentReplyCountResponse().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetCommentReplyCountResponse {
-    return new GetCommentReplyCountResponse().fromJson(jsonValue, options)
+    return new GetCommentReplyCountResponse().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetCommentReplyCountResponse {
-    return new GetCommentReplyCountResponse().fromJsonString(jsonString, options)
+    return new GetCommentReplyCountResponse().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: GetCommentReplyCountResponse | PlainMessage<GetCommentReplyCountResponse> | undefined,
-    b: GetCommentReplyCountResponse | PlainMessage<GetCommentReplyCountResponse> | undefined,
-  ): boolean {
-    return proto3.util.equals(GetCommentReplyCountResponse, a, b)
+  static equals(a: GetCommentReplyCountResponse | PlainMessage<GetCommentReplyCountResponse> | undefined, b: GetCommentReplyCountResponse | PlainMessage<GetCommentReplyCountResponse> | undefined): boolean {
+    return proto3.util.equals(GetCommentReplyCountResponse, a, b);
   }
 }
 
@@ -788,36 +745,33 @@ export class ListCommentVersionsRequest extends Message<ListCommentVersionsReque
    *
    * @generated from field: string id = 1;
    */
-  id = ''
+  id = "";
 
   constructor(data?: PartialMessage<ListCommentVersionsRequest>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.ListCommentVersionsRequest'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.ListCommentVersionsRequest";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'id', kind: 'scalar', T: 9 /* ScalarType.STRING */},
-  ])
+    { no: 1, name: "id", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListCommentVersionsRequest {
-    return new ListCommentVersionsRequest().fromBinary(bytes, options)
+    return new ListCommentVersionsRequest().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListCommentVersionsRequest {
-    return new ListCommentVersionsRequest().fromJson(jsonValue, options)
+    return new ListCommentVersionsRequest().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListCommentVersionsRequest {
-    return new ListCommentVersionsRequest().fromJsonString(jsonString, options)
+    return new ListCommentVersionsRequest().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: ListCommentVersionsRequest | PlainMessage<ListCommentVersionsRequest> | undefined,
-    b: ListCommentVersionsRequest | PlainMessage<ListCommentVersionsRequest> | undefined,
-  ): boolean {
-    return proto3.util.equals(ListCommentVersionsRequest, a, b)
+  static equals(a: ListCommentVersionsRequest | PlainMessage<ListCommentVersionsRequest> | undefined, b: ListCommentVersionsRequest | PlainMessage<ListCommentVersionsRequest> | undefined): boolean {
+    return proto3.util.equals(ListCommentVersionsRequest, a, b);
   }
 }
 
@@ -832,35 +786,33 @@ export class ListCommentVersionsResponse extends Message<ListCommentVersionsResp
    *
    * @generated from field: repeated com.seed.documents.v3alpha.Comment versions = 1;
    */
-  versions: Comment[] = []
+  versions: Comment[] = [];
 
   constructor(data?: PartialMessage<ListCommentVersionsResponse>) {
-    super()
-    proto3.util.initPartial(data, this)
+    super();
+    proto3.util.initPartial(data, this);
   }
 
-  static readonly runtime: typeof proto3 = proto3
-  static readonly typeName = 'com.seed.documents.v3alpha.ListCommentVersionsResponse'
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "com.seed.documents.v3alpha.ListCommentVersionsResponse";
   static readonly fields: FieldList = proto3.util.newFieldList(() => [
-    {no: 1, name: 'versions', kind: 'message', T: Comment, repeated: true},
-  ])
+    { no: 1, name: "versions", kind: "message", T: Comment, repeated: true },
+  ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListCommentVersionsResponse {
-    return new ListCommentVersionsResponse().fromBinary(bytes, options)
+    return new ListCommentVersionsResponse().fromBinary(bytes, options);
   }
 
   static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListCommentVersionsResponse {
-    return new ListCommentVersionsResponse().fromJson(jsonValue, options)
+    return new ListCommentVersionsResponse().fromJson(jsonValue, options);
   }
 
   static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListCommentVersionsResponse {
-    return new ListCommentVersionsResponse().fromJsonString(jsonString, options)
+    return new ListCommentVersionsResponse().fromJsonString(jsonString, options);
   }
 
-  static equals(
-    a: ListCommentVersionsResponse | PlainMessage<ListCommentVersionsResponse> | undefined,
-    b: ListCommentVersionsResponse | PlainMessage<ListCommentVersionsResponse> | undefined,
-  ): boolean {
-    return proto3.util.equals(ListCommentVersionsResponse, a, b)
+  static equals(a: ListCommentVersionsResponse | PlainMessage<ListCommentVersionsResponse> | undefined, b: ListCommentVersionsResponse | PlainMessage<ListCommentVersionsResponse> | undefined): boolean {
+    return proto3.util.equals(ListCommentVersionsResponse, a, b);
   }
 }
+
diff --git a/frontend/packages/shared/src/client/.generated/documents/v3alpha/documents_pb.ts b/frontend/packages/shared/src/client/.generated/documents/v3alpha/documents_pb.ts
index 043b7e7e4..5d3d2e09d 100644
--- a/frontend/packages/shared/src/client/.generated/documents/v3alpha/documents_pb.ts
+++ b/frontend/packages/shared/src/client/.generated/documents/v3alpha/documents_pb.ts
@@ -393,6 +393,13 @@ export class CreateDocumentChangeRequest extends Message<CreateDocumentChangeReq
    */
   visibility = ResourceVisibility.UNSPECIFIED;
 
+  /**
+   * Optional. A human-readable message describing this publish, similar to a git commit message.
+   *
+   * @generated from field: string message = 9;
+   */
+  message = "";
+
   constructor(data?: PartialMessage<CreateDocumentChangeRequest>) {
     super();
     proto3.util.initPartial(data, this);
@@ -409,6 +416,7 @@ export class CreateDocumentChangeRequest extends Message<CreateDocumentChangeReq
     { no: 6, name: "capability", kind: "scalar", T: 9 /* ScalarType.STRING */ },
     { no: 7, name: "timestamp", kind: "message", T: Timestamp },
     { no: 8, name: "visibility", kind: "enum", T: proto3.getEnumType(ResourceVisibility) },
+    { no: 9, name: "message", kind: "scalar", T: 9 /* ScalarType.STRING */ },
   ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): CreateDocumentChangeRequest {
@@ -474,13 +482,12 @@ export class PrepareChangeRequest extends Message<PrepareChangeRequest> {
   capability = "";
 
   /**
-   * Optional. Visibility of the document.
-   * Can only be specified here when creating the document for the first time,
-   * i.e. when `base_version` is empty.
+   * Optional. A human-readable message describing this publish, similar to a git commit message.
+   * Embedded into the prepared Change blob so client-side signing preserves it.
    *
-   * @generated from field: com.seed.documents.v3alpha.ResourceVisibility visibility = 6;
+   * @generated from field: string message = 7;
    */
-  visibility = ResourceVisibility.UNSPECIFIED;
+  message = "";
 
   constructor(data?: PartialMessage<PrepareChangeRequest>) {
     super();
@@ -495,7 +502,7 @@ export class PrepareChangeRequest extends Message<PrepareChangeRequest> {
     { no: 3, name: "base_version", kind: "scalar", T: 9 /* ScalarType.STRING */ },
     { no: 4, name: "changes", kind: "message", T: DocumentChange, repeated: true },
     { no: 5, name: "capability", kind: "scalar", T: 9 /* ScalarType.STRING */ },
-    { no: 6, name: "visibility", kind: "enum", T: proto3.getEnumType(ResourceVisibility) },
+    { no: 7, name: "message", kind: "scalar", T: 9 /* ScalarType.STRING */ },
   ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): PrepareChangeRequest {
@@ -2481,6 +2488,14 @@ export class DocumentChangeInfo extends Message<DocumentChangeInfo> {
    */
   createTime?: Timestamp;
 
+  /**
+   * Optional. A human-readable message attached to the change by the publisher,
+   * similar to a git commit message.
+   *
+   * @generated from field: string message = 5;
+   */
+  message = "";
+
   constructor(data?: PartialMessage<DocumentChangeInfo>) {
     super();
     proto3.util.initPartial(data, this);
@@ -2493,6 +2508,7 @@ export class DocumentChangeInfo extends Message<DocumentChangeInfo> {
     { no: 2, name: "author", kind: "scalar", T: 9 /* ScalarType.STRING */ },
     { no: 3, name: "deps", kind: "scalar", T: 9 /* ScalarType.STRING */, repeated: true },
     { no: 4, name: "create_time", kind: "message", T: Timestamp },
+    { no: 5, name: "message", kind: "scalar", T: 9 /* ScalarType.STRING */ },
   ]);
 
   static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): DocumentChangeInfo {
diff --git a/frontend/packages/shared/src/create-web-universal-client.ts b/frontend/packages/shared/src/create-web-universal-client.ts
index cb65d12f9..63e04a9f1 100644
--- a/frontend/packages/shared/src/create-web-universal-client.ts
+++ b/frontend/packages/shared/src/create-web-universal-client.ts
@@ -24,6 +24,7 @@ export function createWebUniversalClient(deps: WebClientDependencies): Universal
           genesisCid: genesisChange.cid,
           deps: [genesisChange.cid],
           depth: 1,
+          message: input.message,
         },
         signer,
       )
@@ -49,14 +50,16 @@ export function createWebUniversalClient(deps: WebClientDependencies): Universal
     }
 
     // Use PrepareDocumentChange for both new and existing documents so the server
-    // can prepare all supported ops.
+    // can prepare all supported ops. The publish message is forwarded to the
+    // daemon so it can embed it into the unsigned Change blob — it lives on
+    // the Change, not the Ref.
     const {unsignedChange} = (await deps.request('PrepareDocumentChange', {
       account: input.account,
       path: input.path,
       baseVersion: input.baseVersion,
       changes: input.changes,
       capability: input.capability,
-      visibility: input.visibility,
+      message: input.message,
     })) as Extract<HMRequest, {key: 'PrepareDocumentChange'}>['output']
     const {publishInput} = await signDocumentChange(
       {
diff --git a/frontend/packages/shared/src/models/activity-service.ts b/frontend/packages/shared/src/models/activity-service.ts
index 822c6cafc..291b19d2b 100644
--- a/frontend/packages/shared/src/models/activity-service.ts
+++ b/frontend/packages/shared/src/models/activity-service.ts
@@ -118,6 +118,7 @@ export type LoadedRefEvent = {
   time: HMTimestamp
   docId: UnpackedHypermediaId
   document: HMDocument
+  message?: string
 }
 
 export type LoadedCitationEvent = {
@@ -488,7 +489,7 @@ export async function loadContactEvent(
 }
 
 export async function loadRefEvent(
-  _grpcClient: GRPCClient,
+  grpcClient: GRPCClient,
   event: HMActivityEvent,
   currentAccount: string | undefined,
   cache: RequestCache,
@@ -508,15 +509,27 @@ export async function loadRefEvent(
 
     const docId = unpackHmId(event.newBlob.resource)
 
-    const grpcDocument = await cache.getDocument({
-      account: docId?.uid,
-      path: docId?.path?.length ? `/${docId?.path?.join('/')}` : '',
-      version: docId?.version || undefined,
-    })
-
-    // const change = await grpcClient.entities.getEntityTimeline({
-    //   id: grpcDocument.,
-    // })
+    const [grpcDocument, grpcRef] = await Promise.all([
+      cache.getDocument({
+        account: docId?.uid,
+        path: docId?.path?.length ? `/${docId?.path?.join('/')}` : '',
+        version: docId?.version || undefined,
+      }),
+      grpcClient.documents.getRef({id: event.newBlob.cid}).catch(() => null),
+    ])
+
+    // Publish messages live on the Change blob, not the Ref. Resolve the head
+    // change CID from the Ref's version target (dot-separated CIDs) and fetch
+    // the change itself to read its message.
+    let publishMessage: string | undefined
+    const versionTarget = grpcRef?.target?.target
+    if (versionTarget?.case === 'version') {
+      const headCid = versionTarget.value.version.split('.')[0]
+      if (headCid) {
+        const headChange = await grpcClient.documents.getDocumentChange({id: headCid}).catch(() => null)
+        if (headChange?.message) publishMessage = headChange.message
+      }
+    }
 
     return docId
       ? {
@@ -526,6 +539,7 @@ export async function loadRefEvent(
           docId,
           author,
           document: prepareHMDocument(grpcDocument),
+          message: publishMessage,
         }
       : null
   } catch (error) {
diff --git a/frontend/packages/shared/src/universal-client.ts b/frontend/packages/shared/src/universal-client.ts
index a374fabb7..66fee7694 100644
--- a/frontend/packages/shared/src/universal-client.ts
+++ b/frontend/packages/shared/src/universal-client.ts
@@ -19,6 +19,8 @@ export type PublishDocumentInput = {
   generation?: number | bigint
   capability?: string
   visibility?: number
+  /** Optional human-readable publish message, similar to a git commit message. */
+  message?: string
 }
 
 export type {RecentsResult}
diff --git a/frontend/packages/ui/src/feed.tsx b/frontend/packages/ui/src/feed.tsx
index bd8586ac7..6d61b4f76 100644
--- a/frontend/packages/ui/src/feed.tsx
+++ b/frontend/packages/ui/src/feed.tsx
@@ -321,64 +321,67 @@ function EventHeaderContent({
   if (event.type == 'doc-update') {
     const docUpdateHeadCount = getVersionHeads(event.document.version).length
     return (
-      <div className="flex w-full items-start justify-between gap-2">
-        <InlineDescriptor>
-          <AuthorNameLink author={event.author} />{' '}
-          {!isSingleResource ? (
-            <>
-              <span>
-                {/* TODO: check if this is the correct way of getting the first ref update of a document */}
-                {event.document.version == event.document.genesis ? 'created' : 'updated'}
-              </span>{' '}
-              <DocumentNameLink metadata={event.document.metadata} id={event.docId} />{' '}
-            </>
-          ) : (
-            <>
-              <span>
-                {/* TODO: check if this is the correct way of getting the first ref update of a document */}
-                {event.document.version == event.document.genesis ? 'created the document' : 'updated the document'}
-              </span>{' '}
-            </>
-          )}
-          <Timestamp time={event.time} route={route} />
-          {docUpdateHeadCount > 1 ? (
-            <Tooltip content={`Merged ${docUpdateHeadCount} concurrent versions`}>
-              <span className="text-muted-foreground ml-1 inline-flex items-center gap-0.5 align-middle">
-                <Merge size={12} strokeWidth={2} />
-                <span className="text-xs">{docUpdateHeadCount}</span>
-              </span>
-            </Tooltip>
-          ) : null}
-        </InlineDescriptor>
-        <Tooltip content={tx('Copy Link to Version')}>
-          <Button
-            size="icon"
-            variant="ghost"
-            className="text-muted-foreground hover-hover:opacity-0 hover-hover:group-hover:opacity-100 transition-opacity duration-200 ease-in-out"
-            onClick={(e) => {
-              e.preventDefault()
-              e.stopPropagation()
-              if (!event.docId?.uid) return
-              const routeLatest =
-                currentRoute.key === 'document' || currentRoute.key === 'comments' || currentRoute.key === 'activity'
-                  ? currentRoute.id.latest
-                  : undefined
-              const versionedId = hmId(event.docId.uid, {
-                path: event.docId.path,
-                version: event.document.version,
-                latest: routeLatest ?? false,
-                hostname: targetDomain ?? null,
-              })
-              copyHmLink({
-                id: versionedId,
-                gatewayUrl: appOrigin ?? undefined,
-              })
-              onPushReference?.(versionedId)
-            }}
-          >
-            <Link className="size-3" />
-          </Button>
-        </Tooltip>
+      <div className="flex w-full flex-col gap-0.5">
+        <div className="flex w-full items-start justify-between gap-2">
+          <InlineDescriptor>
+            <AuthorNameLink author={event.author} />{' '}
+            {!isSingleResource ? (
+              <>
+                <span>
+                  {/* TODO: check if this is the correct way of getting the first ref update of a document */}
+                  {event.document.version == event.document.genesis ? 'created' : 'updated'}
+                </span>{' '}
+                <DocumentNameLink metadata={event.document.metadata} id={event.docId} />{' '}
+              </>
+            ) : (
+              <>
+                <span>
+                  {/* TODO: check if this is the correct way of getting the first ref update of a document */}
+                  {event.document.version == event.document.genesis ? 'created the document' : 'updated the document'}
+                </span>{' '}
+              </>
+            )}
+            <Timestamp time={event.time} route={route} />
+            {docUpdateHeadCount > 1 ? (
+              <Tooltip content={`Merged ${docUpdateHeadCount} concurrent versions`}>
+                <span className="text-muted-foreground ml-1 inline-flex items-center gap-0.5 align-middle">
+                  <Merge size={12} strokeWidth={2} />
+                  <span className="text-xs">{docUpdateHeadCount}</span>
+                </span>
+              </Tooltip>
+            ) : null}
+          </InlineDescriptor>
+          <Tooltip content={tx('Copy Link to Version')}>
+            <Button
+              size="icon"
+              variant="ghost"
+              className="text-muted-foreground hover-hover:opacity-0 hover-hover:group-hover:opacity-100 transition-opacity duration-200 ease-in-out"
+              onClick={(e) => {
+                e.preventDefault()
+                e.stopPropagation()
+                if (!event.docId?.uid) return
+                const routeLatest =
+                  currentRoute.key === 'document' || currentRoute.key === 'comments' || currentRoute.key === 'activity'
+                    ? currentRoute.id.latest
+                    : undefined
+                const versionedId = hmId(event.docId.uid, {
+                  path: event.docId.path,
+                  version: event.document.version,
+                  latest: routeLatest ?? false,
+                  hostname: targetDomain ?? null,
+                })
+                copyHmLink({
+                  id: versionedId,
+                  gatewayUrl: appOrigin ?? undefined,
+                })
+                onPushReference?.(versionedId)
+              }}
+            >
+              <Link className="size-3" />
+            </Button>
+          </Tooltip>
+        </div>
+        {event.message && <p className="text-muted-foreground ml-6 text-xs italic">{event.message}</p>}
       </div>
     )
   }
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 614d4ea46..524afec0b 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -26,30 +26,114 @@ minimumReleaseAge: 1440
 # Re-evaluate periodically — remove once a patched version is released.
 auditConfig:
   ignoreCves:
-    # ip@<=2.0.1 — Server-Side Request Forgery — no patch published.
-    # Reaches us via: lighthouse > puppeteer-core > ... > ip
-    # and react-devtools > ip (both are devDependencies only).
+    # ── ip ──────────────────────────────────────────────────────────────
+    # ip@<=2.0.1 — SSRF — no patch published.
+    # Via: lighthouse > puppeteer-core > ip; react-devtools > ip (devDeps).
     - CVE-2024-29415
+    # ── html-minifier ───────────────────────────────────────────────────
     # html-minifier@<=4.0.0 — ReDoS — no patch published.
-    # Reaches us via: mjml > mjml-cli > html-minifier (emails app devDep).
+    # Via: mjml > mjml-cli > html-minifier (emails devDep).
     - CVE-2022-37620
-    # @xmldom/xmldom@<0.8.13 — family of XML-serialization advisories
-    # (CDATA, DocumentType, processing instruction, comment node injection,
-    # and uncontrolled recursion DoS). Upgrading to 0.9.x breaks plist
-    # parsing in @electron/packager (stricter mimeType validation).
-    # Ignoring until plist or electron-forge updates.
+    # ── @xmldom/xmldom ──────────────────────────────────────────────────
+    # @xmldom/xmldom@<0.8.13 — XML-serialization injection family.
+    # Upgrading to 0.9.x breaks @electron/packager plist parsing.
     - CVE-2026-34601
     - CVE-2026-41672
     - CVE-2026-41673
     - CVE-2026-41674
     - CVE-2026-41675
-    # electron@<39.8.5 — multiple use-after-free and command injection vulns.
-    # Upgrading from electron 35 to 39+ is a major version jump requiring
-    # dedicated testing. Ignoring until the electron upgrade is planned.
-    - CVE-2026-34774
-    - CVE-2026-34771
-    - CVE-2026-34770
+    # ── electron@<39.8.5 ────────────────────────────────────────────────
+    # Major version jump (35→39+) requires dedicated testing. All transitive.
+    - CVE-2026-34764
+    - CVE-2026-34765
+    - CVE-2026-34766
+    - CVE-2026-34767
+    - CVE-2026-34768
     - CVE-2026-34769
+    - CVE-2026-34770
+    - CVE-2026-34771
+    - CVE-2026-34772
+    - CVE-2026-34773
+    - CVE-2026-34774
+    - CVE-2026-34775
+    - CVE-2026-34776
+    - CVE-2026-34777
+    - CVE-2026-34778
+    - CVE-2026-34779
+    - CVE-2026-34781
+    # ── got / phin / react-devtools-core ────────────────────────────────
+    # Transitive devDeps with no path to update.
+    - CVE-2022-33987
+    - CVE-2023-5654
+    # ── cookie ──────────────────────────────────────────────────────────
+    - CVE-2024-47764
+    # ── estree-util-value-to-estree ─────────────────────────────────────
+    - CVE-2025-32014
+    # ── jsondiffpatch ───────────────────────────────────────────────────
+    - CVE-2025-9910
+    # ── tmp ──────────────────────────────────────────────────────────────
+    - CVE-2025-54798
+    # ── vite (transitive, pinned by remix/electron-forge) ───────────────
+    - CVE-2025-58751
+    - CVE-2025-58752
+    - CVE-2025-62522
+    - CVE-2026-39365
+    # ── mjml — unfixable (patched_versions: <0.0.0) ────────────────────
+    - CVE-2025-67898
+    # ── ajv ──────────────────────────────────────────────────────────────
+    - CVE-2025-69873
+    # ── markdown-it ─────────────────────────────────────────────────────
+    - CVE-2026-2327
+    # ── qs ───────────────────────────────────────────────────────────────
+    - CVE-2026-2391
+    # ── @tootallnate/once ───────────────────────────────────────────────
+    - CVE-2026-3449
+    # ── file-type ────────────────────────────────────────────────────────
+    - CVE-2026-31808
+    # ── fast-xml-parser ─────────────────────────────────────────────────
+    - CVE-2026-33349
+    - CVE-2026-41650
+    # ── yaml ─────────────────────────────────────────────────────────────
+    - CVE-2026-33532
+    # ── brace-expansion ─────────────────────────────────────────────────
+    - CVE-2026-33750
+    # ── hono (transitive via shadcn > @modelcontextprotocol/sdk) ────────
+    - CVE-2026-39406
+    - CVE-2026-39407
+    - CVE-2026-39408
+    - CVE-2026-39409
+    - CVE-2026-39410
+    - CVE-2026-44455
+    - CVE-2026-44456
+    - CVE-2026-44457
+    - CVE-2026-44458
+    - CVE-2026-44459
+    # ── @hono/node-server ───────────────────────────────────────────────
+    - CVE-2026-39406
+    # ── dompurify (transitive via mermaid) ──────────────────────────────
+    - CVE-2026-41238
+    - CVE-2026-41239
+    - CVE-2026-41240
+    # ── postcss ──────────────────────────────────────────────────────────
+    - CVE-2026-41305
+    # ── uuid ─────────────────────────────────────────────────────────────
+    - CVE-2026-41907
+    # ── ip-address ───────────────────────────────────────────────────────
+    - CVE-2026-42338
+    # ── mermaid ──────────────────────────────────────────────────────────
+    - CVE-2026-41148
+    - CVE-2026-41149
+    - CVE-2026-41150
+    - CVE-2026-41159
+    # ── GHSA-only (no CVE assigned) — cannot ignore in pnpm 10 ───────────
+    # 15 remaining low/moderate vulns in transitive devDeps:
+    # GHSA-r4q5-vmmm-2653 (follow-redirects), GHSA-593m-55hh-j8gv (@sentry),
+    # GHSA-r5w7-f542-q2j4 (@sentry), GHSA-67mh-4wv8-2f99 (esbuild),
+    # GHSA-x565-32qp-m3vf (phin), GHSA-c7w3-x93f-qmm8 (nodemailer),
+    # GHSA-vvjj-xcjg-gr5g (nodemailer), GHSA-j965-2qgj-vjmq (aws-sdk),
+    # GHSA-26pp-8wgv-hjvm (hono), GHSA-458j-xx4x-4375 (hono),
+    # GHSA-39q2-94rc-95cp (dompurify).
+    # Will be ignorable after upgrading to pnpm 11 (ignoreGhsas).
 
 # blockExoticSubdeps: true
 # Prevents transitive dependencies from being resolved from exotic sources
diff --git a/proto/documents/v3alpha/documents.proto b/proto/documents/v3alpha/documents.proto
index 250f39aab..6c8a4d1df 100644
--- a/proto/documents/v3alpha/documents.proto
+++ b/proto/documents/v3alpha/documents.proto
@@ -200,6 +200,9 @@ message CreateDocumentChangeRequest {
   // Can only be specified here when creating the document for the first time,
   // i.e. when `base_version` is empty.
   ResourceVisibility visibility = 8;
+
+  // Optional. A human-readable message describing this publish, similar to a git commit message.
+  string message = 9;
 }
 
 // Request to prepare an unsigned document change for client-side signing.
@@ -223,10 +226,9 @@ message PrepareChangeRequest {
   // for this particular path.
   string capability = 5;
 
-  // Optional. Visibility of the document.
-  // Can only be specified here when creating the document for the first time,
-  // i.e. when `base_version` is empty.
-  ResourceVisibility visibility = 6;
+  // Optional. A human-readable message describing this publish, similar to a git commit message.
+  // Embedded into the prepared Change blob so client-side signing preserves it.
+  string message = 7;
 }
 
 // Response with prepared change data for client-side signing.
@@ -700,6 +702,10 @@ message DocumentChangeInfo {
 
   // Time when the change was created (as claimed by the author).
   google.protobuf.Timestamp create_time = 4;
+
+  // Optional. A human-readable message attached to the change by the publisher,
+  // similar to a git commit message.
+  string message = 5;
 }
 
 // Basic data about a document with some aggregations and metadata.
diff --git a/proto/documents/v3alpha/go.gensum b/proto/documents/v3alpha/go.gensum
index 5a1fd8fd8..c5eb9c0d9 100644
--- a/proto/documents/v3alpha/go.gensum
+++ b/proto/documents/v3alpha/go.gensum
@@ -1,2 +1,2 @@
-srcs: 109dd54ec1ad7e8f2f460ba49a4e3bc1
-outs: f303dc90c6b8d3a3ab2f6b54158dc771
+srcs: 1edaab3d7fdfbab9c4c2cb5d9e233eaf
+outs: adc8b227bc953eba1914e252ffc4810d
diff --git a/proto/documents/v3alpha/js.gensum b/proto/documents/v3alpha/js.gensum
index df41932d6..e43a7c0af 100644
--- a/proto/documents/v3alpha/js.gensum
+++ b/proto/documents/v3alpha/js.gensum
@@ -1,2 +1,2 @@
-srcs: 109dd54ec1ad7e8f2f460ba49a4e3bc1
-outs: 0a19c12cb99045c93b969a91d2695e79
+srcs: 1edaab3d7fdfbab9c4c2cb5d9e233eaf
+outs: 3e1f099666d9cc112c3284cedb585ed3