feat: parliament daemon, login gate, peer context sync (0.9.13)

Login claims the chair, writes a session ticket, and starts a background
service for discovery plus revision-based context sync. Password Realm
opens require --login (or CST_REALM_PASSWORD); --service/--service-stop
manage the resident agent.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
WHC
2026-10-28 23:11:23 +08:00
co-authored by Cursor
parent de9ee28773
commit e853abac5e
13 changed files with 769 additions and 12 deletions
+18 -1
View File
@@ -15,9 +15,11 @@ typedef struct {
cst_realm_cert_t remote;
char host[64];
int port;
intptr_t sock; /* open until cst_peer_close */
} cst_peer_session_t;
/* Dial host:port, prove our cert, verify theirs. 0 on success. */
/* Dial host:port, prove our cert, verify theirs. 0 on success.
* Leaves sock open for post-handshake sync; call cst_peer_close. */
int cst_peer_dial(const char *host, int port, const cst_realm_cert_t *self,
const uint8_t self_sk[64], const uint8_t realm_pk[32],
int timeout_ms, cst_peer_session_t *out, char *err,
@@ -29,6 +31,21 @@ int cst_peer_accept(intptr_t listen_sock, const cst_realm_cert_t *self,
int timeout_ms, cst_peer_session_t *out, char *err,
size_t err_sz);
void cst_peer_close(cst_peer_session_t *s);
/* After handshake: exchange parliament revision/context. Higher revision wins
* and is written locally via the callbacks. Returns 0 on success. */
typedef struct {
unsigned long revision;
char parliament_id[64];
char project_id[64];
char chair_instance[64];
char *context; /* malloc'd when loading; freed by caller after sync */
} cst_peer_sync_bundle_t;
int cst_peer_sync(cst_peer_session_t *s, cst_peer_sync_bundle_t *local,
int timeout_ms, char *err, size_t err_sz);
#ifdef __cplusplus
}
#endif