feat: uncommitted working tree changes — pilotctl send-message flags, daemon/beacon/registry updates

Author: teovl

.gitignore

@@ -9,6 +9,7 @@ build/
 *.so
 *.dylib
 *-linux
+*.bin
 jetson
 
 # Root-level Go build outputs
@@ -63,10 +64,7 @@ web/scripts/local/
 # =============================================================================
 # Private / ops — lives in web4-private, never commit here
 # =============================================================================
-OBSERVABILITY_PLAN.md
-SECURITY_PLAN.md
 abpn/
-mention-exporter
 k8s/gcp-vms/
 k8s/pilot-exporter/
 k8s/pilot-install-canary/
@@ -184,9 +182,5 @@ survey*.mjs
 
 # Operational manifests — kept local, never committed
 k8s/
-
-# Test rerun outputs — should never have been committed
 tests/integration/local/logs.rerun*
-
-# Untracked sandboxes / personal scratch — never commit
 scripts/pilot-geo-exporter/

CHANGELOG.md

@@ -7,25 +7,6 @@ project uses [Semantic Versioning](https://semver.org/).
 Detailed per-release notes are on the
 [GitHub Releases page](https://github.com/TeoSlayer/pilotprotocol/releases).
 
-## [Unreleased] → 1.9.2
-
-### Removed
-- Task system (port 1003, `pilotctl task`, `pilot-task` binary, `TaskQueue`, `CmdSetTaskExec`)
-- Polo score from base protocol, managed networks, registry wire format, and website
-- `score` action and `peer_score` context from the policy engine
-- 14 shipped network configs whose only logic was score-based
-- 3 blog posts and doc pages for tasks and polo
-
-### Fixed
-- Relayed handshake path now checks `trustedagents.IsTrusted()` — NATed clients were getting
-  ~23% reply rates because the trusted-agent auto-approve only fired on direct paths
-- Beacon tests: pass `admin_token` in `beacon_register` (required since auth layer was added)
-- `trustedagents` parallel tests: replaced `Load()` mutations with `SetForTest()` to fix race
-
-### Added
-- 13 new integration test scripts (handshake, trust, message, pubsub coverage)
-- Architecture and package reference docs moved to `docs/`
-
 ## [1.9.1] - 2026-05-05
 
 - Rekey storm fix: `decryptFailDropGrace` (3 s) prevents tearing down a freshly-installed

articles.json

@@ -24,6 +24,7 @@ func main() {
 	peersFlag := flag.String("peers", "", "comma-separated peer beacon addresses for gossip")
 	healthAddr := flag.String("health", "", "health check HTTP address (e.g. :8080)")
 	registryAddr := flag.String("registry", "", "registry address for dynamic peer discovery (e.g. 10.128.0.12:9000)")
+	registryAdminToken := flag.String("registry-admin-token", "", "admin token for beacon_register auth (required when registry enforces SEC-002)")
 	logLevel := flag.String("log-level", "info", "log level (debug, info, warn, error)")
 	logFormat := flag.String("log-format", "text", "log format (text, json)")
 	flag.Parse()
@@ -56,6 +57,9 @@ func main() {
 	if *advertiseAddr != "" {
 		s.SetAdvertiseAddr(*advertiseAddr)
 	}
+	if *registryAdminToken != "" {
+		s.SetRegistryAdminToken(*registryAdminToken)
+	}
 
 	if *healthAddr != "" {
 		go func() {

cmd/beacon/main.go

@@ -72,6 +72,7 @@ func main() {
 	adminToken := flag.String("admin-token", "", "admin token for network operations")
 	networks := flag.String("networks", "", "comma-separated network IDs to auto-join at startup")
 	trustAutoApprove := flag.Bool("trust-auto-approve", false, "automatically approve all incoming trust handshakes")
+	beaconRTTProbe := flag.Bool("beacon-rtt-probe", false, "probe beacon RTT before selection; override hash pick when >2× slower than best (ablation test, default off)")
 	showVersion := flag.Bool("version", false, "print version and exit")
 	logLevel := flag.String("log-level", "info", "log level (debug, info, warn, error)")
 	logFormat := flag.String("log-format", "text", "log format (text, json)")
@@ -138,6 +139,7 @@ func main() {
 		Networks:              parseNetworkIDs(*networks),
 		Version:               version,
 		TrustAutoApprove:      *trustAutoApprove,
+		BeaconRTTProbe:        *beaconRTTProbe,
 	})
 
 	// L11 plugin lifecycle (T7.1): composition root owns the
@@ -167,18 +169,18 @@ func main() {
 		}
 	}
 
-	policySvc := policy.NewService(policy.NewDaemonRuntime(d))
+	policySvc := policy.NewService(runtime.NewPolicyRuntime(d))
 	if err := rt.Register(policySvc); err != nil {
 		log.Fatalf("register policy: %v", err)
 	}
 	d.RegisterPolicyManager(runtime.AsDaemonPolicyManager(policySvc.Manager()))
 
 	// Manual trust-handshake (port 444) — extracted from pkg/daemon in T3.3.
-	hsSvc := handshake.NewService(handshake.NewDaemonRuntime(d))
+	hsSvc := handshake.NewService(runtime.NewHandshakeRuntime(d))
 	if err := rt.Register(hsSvc); err != nil {
 		log.Fatalf("register handshake: %v", err)
 	}
-	d.RegisterHandshakeService(hsSvc.AsHandshakeService())
+	d.RegisterHandshakeService(runtime.NewHandshakeServiceAdapter(hsSvc))
 
 	// Webhook (T4.1): the daemon publishes events to the in-process
 	// bus, the plugin subscribes and POSTs to the configured URL. URL

cmd/daemon/main.go

@@ -15,13 +15,24 @@ import (
 	"syscall"
 
 	"github.com/TeoSlayer/pilotprotocol/pkg/config"
-	"github.com/TeoSlayer/pilotprotocol/plugins/gateway"
+	"github.com/TeoSlayer/pilotprotocol/pkg/driver"
 	"github.com/TeoSlayer/pilotprotocol/pkg/logging"
 	"github.com/TeoSlayer/pilotprotocol/pkg/protocol"
+	"github.com/TeoSlayer/pilotprotocol/plugins/gateway"
 )
 
 var version = "dev"
 
+// driverDialer wraps *driver.Driver so DialAddr returns net.Conn, satisfying
+// gateway.Dialer without importing pkg/driver from within plugins/gateway.
+type driverDialer struct{ d *driver.Driver }
+
+func (w driverDialer) DialAddr(dst protocol.Addr, port uint16) (net.Conn, error) {
+	return w.d.DialAddr(dst, port)
+}
+
+func (w driverDialer) Close() error { return w.d.Close() }
+
 func main() {
 	configPath := flag.String("config", "", "path to config file (JSON)")
 	socketPath := flag.String("socket", "/tmp/pilot.sock", "daemon socket path")
@@ -64,11 +75,15 @@ func main() {
 		}
 	}
 
+	d, err := driver.Connect(*socketPath)
+	if err != nil {
+		log.Fatalf("connect to daemon: %v", err)
+	}
+
 	gw, err := gateway.New(gateway.Config{
-		Subnet:     *subnet,
-		SocketPath: *socketPath,
-		Ports:      ports,
-	})
+		Subnet: *subnet,
+		Ports:  ports,
+	}, driverDialer{d})
 	if err != nil {
 		log.Fatalf("create gateway: %v", err)
 	}
@@ -77,20 +92,13 @@ func main() {
 	case "run":
 		cmdRun(gw, args[1:])
 	case "map":
-		if err := gw.Start(); err != nil {
-			log.Fatalf("start: %v", err)
-		}
 		cmdMap(gw, args[1:])
 	default:
 		usage()
 	}
 }
 
 func cmdRun(gw *gateway.Gateway, args []string) {
-	if err := gw.Start(); err != nil {
-		log.Fatalf("start gateway: %v", err)
-	}
-
 	// Map any addresses passed as arguments: <pilot-addr> [<local-ip>]
 	for i := 0; i < len(args); i += 2 {
 		pilotAddrStr := args[i]

cmd/gateway/main.go

@@ -5,13 +5,32 @@ package main
 import (
 	"flag"
 	"log"
+	"net"
+	"time"
 
 	"github.com/TeoSlayer/pilotprotocol/pkg/config"
 	"github.com/TeoSlayer/pilotprotocol/pkg/driver"
 	"github.com/TeoSlayer/pilotprotocol/pkg/logging"
+	"github.com/TeoSlayer/pilotprotocol/pkg/protocol"
 	"github.com/TeoSlayer/pilotprotocol/plugins/nameserver"
 )
 
+// driverPortListener wraps *driver.Driver so its Listen method satisfies
+// nameserver.PortListener (returns net.Listener rather than *driver.Listener).
+type driverPortListener struct{ d *driver.Driver }
+
+func (w driverPortListener) Listen(port uint16) (net.Listener, error) {
+	return w.d.Listen(port)
+}
+
+// driverDialer wraps *driver.Driver so DialAddrTimeout returns net.Conn,
+// satisfying nameserver.Dialer without importing pkg/driver from within the plugin.
+type driverDialer struct{ d *driver.Driver }
+
+func (w driverDialer) DialAddrTimeout(dst protocol.Addr, port uint16, timeout time.Duration) (net.Conn, error) {
+	return w.d.DialAddrTimeout(dst, port, timeout)
+}
+
 func main() {
 	log.Fatal("nameserver is currently disabled (WIP). Use hostname-based discovery via the registry instead.")
 
@@ -38,6 +57,6 @@ func main() {
 	}
 	defer d.Close()
 
-	ns := nameserver.New(d, *storePath)
+	ns := nameserver.New(driverPortListener{d}, *storePath)
 	log.Fatal(ns.ListenAndServe())
 }