Skip to content

Conversation

@markwylde
Copy link
Member

  • Introduces zero-knowledge authentication handshake:
    • Handle auth_challenge and respond with HMAC-based proof.
    • Avoids sending raw key; adds proof, nonce, timestamp, and metadata fields.
  • CLI: waits briefly on child exit to allow buffered logs to flush when no readers are yet connected (configurable via OPENPULL_EXIT_DELAY_MS / OPENPULL_FLUSH_TIMEOUT_MS).
  • Docs: clarify connection string key usage and zero-knowledge handshake behavior.

This preserves existing behavior while improving auth security and log delivery reliability.

@markwylde markwylde merged commit feed99a into main Aug 21, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants