Releases

Intercept/resolve/fall-through wrapper around `docker build` — cache-first via sui-cache, falling through to real docker on any miss (supa-charge-akeyless-ci Phase 2)

Migration-bridge nix wrapper — routes Working/SuiNative commands to sui, falls back to cppnix for the rest

Content-addressed evaluation cache for sui — hash-keyed memoization of Nix expressions

Typed multiplexed client for the sui graph-server protocol. Connects to a UDS, sends typed requests, dispatches typed responses by RequestId. Reusable by sui CLI, tend, future ops tools.

Nix builder with sandboxed execution, closure topo-sort, and reference scanning for the sui Rust-native runtime

Single source of truth for every wire type in the sui system: rkyv-over-UDS for daemon ↔ local CLI (zero-copy hot path), tonic + protobuf for cross-host (REAPI-shaped for fleet work-stealing, tvix-castore-shaped for substituter), async-nats for fleet pub/sub. Drift between client and daemon is a compile error.

Async frame codec for the rkyv-over-UDS local protocol. Reads/writes `[magic 4B][len u32 LE][rkyv body]` over any tokio AsyncRead+AsyncWrite. Reusable by server, client, tests, future tools.

Nix store abstraction with SeaORM-backed metadata for the sui Rust-native runtime

Built-in binary cache server and push pipeline for the sui Rust-native Nix runtime

Declarative Lisp-authored specs for CppNix-parity behaviors. Rust types are the hard boundary; Lisp forms are the free-middle authoring surface. Both engines (tree-walker + VM) drive the same spec, so they cannot drift.

WAFv2 service implementation for winterbaume

L1 content-addressed graph store for sui — redb index + rkyv-archived blobs on a ZFS-friendly layout. Replaces the SeaORM/SQLite path with mmap-and-cast zero-copy reads.

Clean-room Nix format and protocol compatibility layer (NAR, store paths, ATerm, derivations)

DuckDB-backed SQL engine backend for winterbaume Athena and Redshift Data

String interning for the sui Nix evaluator — Symbol(u32) handles for O(1) comparison

Rust client for the Artifact Keeper REST API

Ontology lint rules and diagnostic collection for OntoCore (ontocore-*)

Proc macros for Orbital component documentation and routing helpers

Ppoppo Chat System (PCS) External API client -- gRPC client for the External Developer Platform

Buran worker SDK: BWP worker-side loop for runtime modules

Verilog compiler driver for running safety-net passes

Ppoppo Accounts System (PAS) external SDK — OAuth2 PKCE, JWT verification port, Axum middleware, session liveness

Compiler pass infrastructure for safety-net

Buran Worker Protocol (BWP): framing and flat request encoding

Inkhaven — TUI literary work editor for Typst books

Horned-OWL facade for OntoCore (ontocore-*) axiom modeling and patch write-back

Internal shared primitives for the Ppoppo SDK family (pas-external, pas-plims, pcs-external) — verifier port, audit trait, session liveness port, OIDC discovery, perimeter Bearer-auth Layer kit, identity types. Not a stable public API; do not depend on this crate directly. Consume the SDK crates that re-export from it (e.g. `pas-external`).

Headless automation for agentic software engineering workflows

JWT (RFC 9068, EdDSA) issuance + verification engine for the Ppoppo ecosystem. Single deep module with a small interface (issue, verify) hiding RFC 8725 mitigations M01-M45, JWKS handling, and substrate ports (epoch, session, replay).

Universal Clock + Timer port for ppoppo workspace — chat-as-infrastructure primitive