Add local pipe registry commands

docs/architecture.md

@@ -114,8 +114,12 @@ are lost when the daemon stops. This is deliberate: pubsub is a lossy wakeup and
 presence channel, not authoritative storage. Iroh-gossip replication, private
 topics, and capability enforcement are future work.
 
-`geth-pipe` and `geth-ssh-proxy` currently define types, command shape, and
-roadmap stubs.
+`geth-pipe` currently supports `pipe listen/connect` against a local
+daemon-lifetime registry. This is a control-plane scaffold for names and
+connection attempts only; it does not carry bytes, forward sockets, or use Iroh
+streams yet.
+
+`geth-ssh-proxy` currently defines types, command shape, and roadmap stubs.
 
 `geth-ssh-identity` defines SSH trust namespaces plus certificate request,
 approval, certificate import, and revocation-list data models. The bootstrap

docs/roadmap.md

@@ -251,11 +251,15 @@ authorization and durable-state boundaries clear.
 
 Goal: add authorized stream-oriented management workflows over Iroh.
 
-- `[ ]` Dumbpipe-style Iroh streams.
+- `[~]` Dumbpipe-style Iroh streams.
   Acceptance criteria:
-  - `geth pipe listen/connect` can connect two local test nodes.
-  - Pipe access requires `pipe.listen` or `pipe.connect`.
-  - Streams close cleanly and propagate errors.
+  - `[x]` `geth pipe listen/connect` works against a local daemon-lifetime
+    registry.
+  - `[x]` Tests cover local listener registration, local connect matching, and
+    daemon restart behavior.
+  - `[ ]` `geth pipe listen/connect` can connect two local test nodes over Iroh.
+  - `[ ]` Pipe access requires `pipe.listen` or `pipe.connect`.
+  - `[ ]` Streams close cleanly and propagate errors.
 
 - `[ ]` TCP forwarding.
   Acceptance criteria: