feat(shipote): throughput + stats persistente + auth peer (fase P)

- FlowMeter (atomic u64 + rolling window 32 samples) en cada FlowChannel.
  flow_throughput() → (socket, bytes_total, bytes_per_sec). CLI:
  shipote flow throughput. Idle threshold 5s = rate 0.0.
- Snapshot v4 con stats_history persistente por workspace (cap 16).
  PersistedStats separado para evitar Instant. Restore hidrata el VecDeque
  con source="persisted".
- Auth SO_PEERCRED: daemon rechaza peers con uid distinto al propio.
  SHIPOTE_TRUST_ANYONE=1 = escape hatch documentado.

84 tests pasan (ente-incarnate 16, nouser-core 27, shipote-card 8,
shipote-core 25, shipote-discern 5, yahweh-provider-fs 3).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

This commit is contained in:

sergio

2026-05-11 13:58:41 +00:00

parent 1cce50b290

commit 3486949d24

8 changed files with 273 additions and 12 deletions

Cargo.lock

Generated

View File

@@ -9639,6 +9639,7 @@ dependencies = [
  "brahman-card",
  "brahman-sidecar",
  "ente-incarnate",
  "libc",
  "nix 0.29.0",
  "shipote-card",
  "shipote-core",