release(v1.10.1): heartbeat auth fix, skills uninstall, compat mode

## Fixed

Heartbeat signature verification (Garry Tan bug report #1). The registry
client's signer captured d.identity at startup and signed every heartbeat
with the captured pointer. After key rotation, the heartbeat kept using
the stale key and the registry rejected it with "signature verification
failed", looping into re-register every 60 s with no peer connectivity.
The fix reads d.identity under d.identityMu on every signer call. Same
fix applied to the RotateKey-time re-bind for symmetry.

## Added

### Compat mode — tunnel Pilot over HTTPS/WSS

Daemons in UDP-blocked environments (Docker on Render/Railway/Vercel/
Lambda, restrictive corp networks) can now opt in with -transport=compat
to tunnel Pilot packets over a long-lived WebSocket Secure connection
to the beacon. Existing UDP daemons reach compat-mode peers transparently
via the beacon's relay path — no client change required for the UDP side.

Live at wss://beacon.pilotprotocol.network/v1/compat. End-to-end Ed25519
trust unchanged; TLS provides the daemon-to-beacon channel, Ed25519
still protects peer-to-peer identity.

  - pkg/daemon/transport: Transport interface + ErrClosed sentinel.
    *udpio.Socket satisfies it implicitly — zero behavior change to UDP.
  - pkg/daemon/transport/wss: WSS client transport via coder/websocket.
    Ed25519 challenge after upgrade. Reconnect with backoff.
  - pkg/beacon/wss: WSS server with per-peer auth, idle disconnect,
    capacity rejection, Prometheus-friendly metrics.
  - pkg/beacon/server.go: Tier-0 destination check in relay worker —
    relay packets for WSS-connected peers bypass the UDP sendmmsg batch.
    OnFrame ingests WSS frames into the existing handlePacket dispatch.
  - cmd/rendezvous: -wss-addr flag wires WSS bridge into production.
  - cmd/daemon: -transport, -compat-beacon, -tls-trust flags. All
    default to UDP behavior; compat is explicit opt-in.
  - cmd/pilot-ca: offline CA tool for the future production root cert.
  - internal/transport/compat: //go:embed root pool with dev placeholder.
  - pkg/registry: LookupPublicKey(nodeID) for in-process WSS auth.

### Skill injection — clean opt-out (Garry Tan bug report #3)

  - pilotctl skills disable: removes every file the daemon has ever
    written via the inject manifest. Strip-only on co-inhabited files
    (CLAUDE.md, AGENTS.md, AGENT.md, SOUL.md); delete in pilot-owned
    subdirs. OpenClaw plugin allow-list restored from .pilot-bak snapshot
    or inverse-merged. Idempotent. Persists opt-out in ~/.pilot/config.json.
  - pilotctl skills enable: re-enables + runs one reconcile pass.
  - Marker block self-disclosure: <!-- pilot:begin v=1 hash=...
       Inserted by pilot-daemon. Remove with: pilotctl skills disable
    --> so anyone opening their agent config in one read knows what
    the block is and how to remove it.
  - markerRE widened to match both old and new marker formats.
  - install.sh banner mentions skills disable / enable.

### dataexchange b64 (opt-in)

  - -dataexchange-b64 flag adds a lossless data_b64 field to inbox
    JSON for binary payloads (zlib-compressed envelopes, etc.).

### Swift SDK + CGo embedded

  - sdk/swift: new Swift package wrapping the CGo bindings.
  - sdk/cgo/embedded.go: embedded-daemon export for callers that link
    pilot directly rather than running a separate daemon process.

## Changed

  - macOS dev builds: MaxReusePortShards=1 so the beacon doesn't
    crash at startup when SO_REUSEPORT semantics differ from Linux.
  - .github/workflows/ci.yml: build cmd/pilot-ca alongside other binaries.

## Documentation

  - docs/SPEC-compat-mode.md: full design + rollout history.
  - docs/RUNBOOK-pilot-ca.md: operator procedure for future prod root mint.
  - web/src/pages/docs/firewalls.astro + plain mirror: user guide for
    running Pilot behind a firewall.
  - web/src/pages/docs/configuration.astro: new daemon flags.
  - web/src/pages/docs/cli-reference.astro: skills disable/enable.
  - docs/AGENT-APPS.md, docs/ANALYSIS-per-prompt-injection.md,
    docs/INVESTIGATION-cloudflare-workers.md,
    docs/SPEC-skillinject-openclaw-per-prompt.md: design notes.
  - Various other doc updates from the regen-plain pass.

## Tests

  - 40 new unit + integration tests across compat-mode packages.
  - tests/compat/: 4-cell transport matrix.
  - All packages green; daemon test suite preserved.

Author: teovl

.github/workflows/ci.yml

@@ -34,19 +34,20 @@ jobs:
           go build ./cmd/nameserver
           go build ./cmd/gateway
           go build ./cmd/updater
+          go build ./cmd/pilot-ca
 
       - name: Test
         # 300s matches the release workflow + pre-push hook. The tests/
         # integration suite reliably takes 120-140s on these runners
         # (lots of UDP socket churn), which was right at the prior 120s
         # ceiling and tipped over after some recent additions. Bumped
         # to the same budget as release.yml so the two surfaces agree.
-        run: go test -parallel 4 -count=1 -timeout 300s ./tests/ ./pkg/beacon/
+        run: go test -parallel 4 -count=1 -timeout 1200s ./tests/ ./pkg/beacon/
 
       - name: Coverage
         if: matrix.os == 'ubuntu-latest'
         run: |
-          cd tests && go test -parallel 4 -count=1 -coverprofile=coverage.out -covermode=atomic -timeout 300s
+          cd tests && go test -parallel 4 -count=1 -coverprofile=coverage.out -covermode=atomic -timeout 1200s
           go tool cover -func=coverage.out | tail -1
 
   website:

.github/workflows/release.yml

@@ -29,7 +29,12 @@ jobs:
         run: make build
 
       - name: Unit tests
-        run: go test -parallel 4 -count=1 -timeout 300s ./tests/ ./pkg/beacon/
+        # Bumped 300s → 600s → 1200s as tests/ grew past prior ceilings.
+        # Even 600s tripped on Ubuntu (tests queued 8 min waiting for
+        # `-parallel 4` slots). 1200s gives the suite enough wall-clock
+        # at current size. A real hang would manifest as the whole 1200s
+        # being burned; flakiness shows as ~10-15 min with completion.
+        run: go test -parallel 4 -count=1 -timeout 1200s ./tests/ ./pkg/beacon/
 
   build:
     name: Build (${{ matrix.goos }}/${{ matrix.goarch }})

CHANGELOG.md

@@ -7,6 +7,45 @@ project uses [Semantic Versioning](https://semver.org/).
 Detailed per-release notes are on the
 [GitHub Releases page](https://github.com/TeoSlayer/pilotprotocol/releases).
 
+## [1.10.1] - 2026-05-19
+
+### Fixed
+- **Heartbeat signature verification** (Garry Tan bug report #1): the registry-client
+  signer captured `d.identity` once at startup; after key rotation, heartbeats kept
+  signing with the stale identity and got rejected. Signer now reads `d.identity`
+  under `d.identityMu` on every call. Affected every daemon that rotated keys
+  after registration; symptom was a `"registry: signature verification failed"`
+  loop with re-register every 60 s and no peer connectivity.
+
+### Added
+- **Compat mode**: tunnel Pilot packets over WebSocket Secure to the beacon for
+  daemons in UDP-blocked environments (Docker on Render/Railway/Vercel/Lambda,
+  restrictive corp networks). Opt-in via `-transport=compat` on the daemon;
+  default behavior unchanged. Live at `wss://beacon.pilotprotocol.network/v1/compat`.
+  See [docs/SPEC-compat-mode.md](docs/SPEC-compat-mode.md) and
+  [docs/firewalls](https://pilotprotocol.network/docs/firewalls).
+- `pilotctl skills disable` / `enable` — safe removal of the daemon's auto-installed
+  agent skill files. Strip-only on co-inhabited files (`CLAUDE.md`, `AGENTS.md`,
+  `AGENT.md`, `SOUL.md`); delete in our own subdirs. OpenClaw plugin allow-list
+  restored from `.pilot-bak` snapshot. Idempotent.
+- Marker block self-disclosure: the `<!-- pilot:begin ... -->` comment now embeds
+  `Inserted by pilot-daemon. Remove with: pilotctl skills disable` so anyone
+  opening their agent config file in one read knows what it is and how to remove it.
+- `data_b64` field in dataexchange inbox messages (opt-in via `-dataexchange-b64`):
+  lossless base64 alongside the existing `data` string for binary payloads
+  (e.g. zlib-compressed HealthKit envelopes).
+- `cmd/pilot-ca` offline tool to mint the future production Pilot root CA and beacon
+  leaf certs; see [docs/RUNBOOK-pilot-ca.md](docs/RUNBOOK-pilot-ca.md).
+
+### Changed
+- `install.sh` post-install banner now points at `pilotctl skills disable` for users
+  who want to opt out of skill auto-injection.
+- Beacon's relay worker checks for a WSS-connected destination before the UDP
+  tier-1/2 lookups, so existing UDP daemons reach compat-mode peers transparently
+  (the bridging happens entirely on the beacon).
+- Registry `LookupPublicKey(nodeID)` exposed for in-process beacon to authenticate
+  WSS daemons against registered pubkeys.
+
 ## [1.9.1] - 2026-05-05
 
 - Rekey storm fix: `decryptFailDropGrace` (3 s) prevents tearing down a freshly-installed

cmd/daemon/main.go

@@ -67,12 +67,16 @@ func main() {
 	hostname := flag.String("hostname", "", "hostname for discovery (lowercase alphanumeric + hyphens, max 63 chars)")
 	noEcho := flag.Bool("no-echo", false, "disable built-in echo service (port 7)")
 	noDataExchange := flag.Bool("no-dataexchange", false, "disable built-in data exchange service (port 1001)")
+	dataExchangeB64 := flag.Bool("dataexchange-b64", false, "include raw base64 payload (`data_b64`) alongside `data` in inbox messages — needed only for binary payloads (e.g. zlib-compressed envelopes)")
 	noEventStream := flag.Bool("no-eventstream", false, "disable built-in event stream service (port 1002)")
 	webhookURL := flag.String("webhook", "", "HTTP(S) endpoint for event notifications (empty = disabled)")
 	adminToken := flag.String("admin-token", "", "admin token for network operations")
 	networks := flag.String("networks", "", "comma-separated network IDs to auto-join at startup")
 	trustAutoApprove := flag.Bool("trust-auto-approve", false, "automatically approve all incoming trust handshakes")
 	beaconRTTProbe := flag.Bool("beacon-rtt-probe", false, "probe beacon RTT before selection; override hash pick when >2× slower than best (ablation test, default off)")
+	transportMode := flag.String("transport", "udp", "tunnel transport: 'udp' (default) or 'compat' (WSS to beacon, opt-in, for UDP-blocked environments)")
+	compatBeacon := flag.String("compat-beacon", "wss://beacon.pilotprotocol.network/v1/compat", "beacon WSS URL for -transport=compat")
+	tlsTrust := flag.String("tls-trust", "system", "TLS trust store for -transport=compat: 'system' (OS trust store; current default while compat mode uses Let's Encrypt certs on beacon.pilotprotocol.network) or 'pinned' (Pilot CA root embedded in the daemon binary; will become the default in a future release once production root ships)")
 	showVersion := flag.Bool("version", false, "print version and exit")
 	logLevel := flag.String("log-level", "info", "log level (debug, info, warn, error)")
 	logFormat := flag.String("log-format", "text", "log format (text, json)")
@@ -140,6 +144,9 @@ func main() {
 		Version:               version,
 		TrustAutoApprove:      *trustAutoApprove,
 		BeaconRTTProbe:        *beaconRTTProbe,
+		TransportMode:         *transportMode,
+		CompatBeaconURL:       *compatBeacon,
+		CompatTLSTrust:        *tlsTrust,
 	})
 
 	// L11 plugin lifecycle (T7.1): composition root owns the
@@ -158,7 +165,9 @@ func main() {
 	}
 
 	if !*noDataExchange {
-		if err := rt.Register(dataexchange.NewService(dataexchange.ServiceConfig{})); err != nil {
+		if err := rt.Register(dataexchange.NewService(dataexchange.ServiceConfig{
+			IncludeBase64: *dataExchangeB64,
+		})); err != nil {
 			log.Fatalf("register dataexchange: %v", err)
 		}
 	}