2 Commits

Author	SHA1	Message	Date
Kyle Isom	4b841cdd82	Step 14: SSH key auth for gRPC. ... Server: AuthInterceptor parses authorized_keys, extracts SSH signature from gRPC metadata (nonce + timestamp signed by client's SSH key), verifies against authorized public keys with 5-minute timestamp window. Client: SSHCredentials implements PerRPCCredentials, signs nonce+timestamp per request. LoadSigner resolves key from flag, ssh-agent, or default paths. 8 tests: valid auth, reject unauthenticated, reject unauthorized key, reject expired timestamp, metadata generation, plus 2 integration tests (authenticated succeeds, unauthenticated rejected). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-23 23:58:09 -07:00
Kyle Isom	525c3f0b4f	Step 13: Client library with Push, Pull, and Prune. ... Client orchestrates the two-step push/pull protocol: manifest exchange followed by chunked blob streaming. Push detects server-newer (returns ErrServerNewer) and up-to-date states. Pull computes missing blobs locally and streams only what's needed. Prune delegates to server RPC. 6 integration tests via in-process bufconn server. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-23 23:53:03 -07:00