Make live sync configurable

This commit is contained in:
Eric Wendland 2026-05-20 13:34:16 +02:00
commit 3eb6b623e7
6 changed files with 106 additions and 14 deletions

View file

@ -204,9 +204,10 @@ Roadmap items should be actionable and checkable:
`resource:ssh:revocations` for non-owner subjects. Authorized peers can pull
SSH certificate-flow metadata with `ssh_cert.sync` on `resource:ssh:certs` and
revocation metadata with `ssh_revocation.sync` on
`resource:ssh:revocations`. The daemon live-syncs known peers every 30
seconds using per-peer cursors. Conflicting records with already-known ids are
rejected during sync import; this is pull-only metadata sync, not yet a
`resource:ssh:revocations`. The daemon live-syncs known peers using per-peer
cursors; `[sync] live_sync_enabled` and `live_sync_interval_ms` in
`config.toml` control that loop. Conflicting records with already-known ids
are rejected during sync import; this is pull-only metadata sync, not yet a
signed CRDT/resource-log replication model.
- cr-sqlite apply, iroh-docs, iroh-blobs provider/fetch, Automerge sync,
broader auth enforcement, and Keyhive/BeeKEM-style authorization are future