diff --git a/.github/workflows/host-packages.yml b/.github/workflows/host-packages.yml
new file mode 100644
index 00000000..26142182
--- /dev/null
+++ b/.github/workflows/host-packages.yml
@@ -0,0 +1,95 @@
+name: host-packages
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'js/packages/truapi-host-wasm/**'
+      - 'android/**'
+      - 'ios/**'
+      - 'rust/crates/truapi-server/**'
+      - 'rust/crates/truapi-platform/**'
+      - 'rust/crates/truapi-codegen/**'
+      - 'rust/crates/truapi-macros/**'
+      - 'rust/crates/truapi/**'
+  pull_request:
+    paths:
+      - 'js/packages/truapi-host-wasm/**'
+      - 'android/**'
+      - 'ios/**'
+      - 'rust/crates/truapi-server/**'
+      - 'rust/crates/truapi-platform/**'
+      - 'rust/crates/truapi-codegen/**'
+      - 'rust/crates/truapi-macros/**'
+      - 'rust/crates/truapi/**'
+
+jobs:
+  wasm-bundle-check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: wasm32-unknown-unknown
+      - uses: actions/setup-node@v4
+        with: { node-version: 22 }
+      - name: Install wasm-pack
+        run: cargo install wasm-pack
+      # Rebuilds the bundle from the current truapi-server source and runs the
+      # truapi-host-wasm node smoke test against those freshly-built artifacts, so a
+      # stale committed bundle cannot pass green. Byte-equality against the
+      # committed bundle is intentionally not asserted: wasm-pack output varies
+      # with the Rust toolchain and wasm-bindgen version, so cross-machine
+      # reproducibility is not achievable. The committed artifacts under
+      # js/packages/truapi-host-wasm/dist/wasm/ serve as a convenience for
+      # consumers that don't run Rust; regenerate locally with `make wasm`
+      # before changing truapi-server source.
+      - name: Rebuild WASM
+        run: make wasm
+      - name: Sanity-check artifact presence
+        run: |
+          test -s js/packages/truapi-host-wasm/dist/wasm/web/truapi_server_bg.wasm
+          test -s js/packages/truapi-host-wasm/dist/wasm/web/truapi_server.js
+          test -s js/packages/truapi-host-wasm/dist/wasm/node/truapi_server_bg.wasm
+          test -s js/packages/truapi-host-wasm/dist/wasm/node/truapi_server.js
+      - name: Build @parity/truapi-host (dep)
+        run: cd js/packages/truapi-host && npm install --no-fund --no-audit && npm run build
+      - name: Build @parity/truapi client (dep)
+        run: cd js/packages/truapi && npm install --no-fund --no-audit && npm run build
+      - name: Test @parity/truapi-host-wasm against the rebuilt bundle
+        run: cd js/packages/truapi-host-wasm && npm install --no-fund --no-audit && npm test
+  host-packages-js-tests:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with: { node-version: 22 }
+      - name: Build @parity/truapi-host (dep)
+        run: cd js/packages/truapi-host && npm install --no-fund --no-audit && npm run build
+      - name: Build @parity/truapi client (dep)
+        run: cd js/packages/truapi && npm install --no-fund --no-audit && npm run build
+      - name: Test @parity/truapi-host-wasm
+        run: cd js/packages/truapi-host-wasm && npm install --no-fund --no-audit && npm test
+  android-assemble:
+    # Smoke-builds the Android library + verifies the Maven publication
+    # can be assembled (writes to maven-local). No release happens here;
+    # distribution is via JitPack, which builds tagged commits per
+    # jitpack.yml and serves the io.parity:truapi-host-android artifact.
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: 17
+      - uses: gradle/actions/setup-gradle@v4
+      - name: Assemble truapi-host-android (release)
+        run: gradle :truapi-host:assembleRelease --no-daemon --stacktrace
+      - name: Build Maven publication into local repo
+        run: gradle :truapi-host:publishReleasePublicationToMavenLocal --no-daemon --stacktrace
+      - name: Sanity-check published artifacts
+        run: |
+          set -eux
+          base="$HOME/.m2/repository/io/parity/truapi-host-android/0.1.0"
+          test -s "$base/truapi-host-android-0.1.0.aar"
+          test -s "$base/truapi-host-android-0.1.0.pom"
+          test -s "$base/truapi-host-android-0.1.0-sources.jar"
diff --git a/.gitignore b/.gitignore
index 8237da52..473beda9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,6 +11,12 @@ lerna-debug.log*
 node_modules
 target
 
+# Gradle (Android workspace at repo root)
+/.gradle/
+/build/
+/android/*/build/
+local.properties
+
 # Editor / OS
 .vscode/*
 !.vscode/extensions.json
diff --git a/CLAUDE.md b/CLAUDE.md
index f7624763..0e637143 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -8,17 +8,48 @@ This repo is the single source of truth for the TrUAPI protocol. It vendors `dot
 
 ```
 rust/crates/
-  truapi/                Rust trait + type definitions for protocol versions v0.1 and v0.2
+  truapi/                Rust trait + type definitions for protocol versions v0.1 and v0.2 (canonical)
   truapi-codegen/        rustdoc JSON → TypeScript client + Rust dispatcher
   truapi-macros/         #[wire(id = N)] proc-macro
+  truapi-platform/       Host syscall traits (storage, navigation, consent, ...)
+  truapi-server/         Rust runtime hosts implement; ships as WASM (browser/node) and via UniFFI (iOS/Android)
+  uniffi-bindgen-cli/    Thin CLI wrapper around uniffi::uniffi_bindgen_main()
 js/packages/
-  truapi/         @parity/truapi TS package; generated TS lives under ignored paths
-playground/              Next.js interactive playground; deploys to truapi-playground.dot
-hosts/dotli/             dotli submodule
-docs/                    design docs, RFCs, feature proposals
-scripts/codegen.sh       regenerate the TS client from the Rust crate
+  truapi/                  @parity/truapi TS package; generated TS lives under ignored paths
+  truapi-host/             @parity/truapi-host host-side codegen + dispatcher (no shared core)
+  truapi-host-wasm/        @parity/truapi-host-wasm: WASM-backed host runtime. Subpath entries:
+                           `.` (core Provider + dispatcher + node runtime), `/web` (iframe + Web
+                           Worker), `/electron` (MessagePortMain), `/worker-runtime` (Worker entry).
+                           Pre-built WASM under dist/wasm/{web,node}/
+android/
+  truapi-host/             io.parity:truapi-host-android Maven library (AAR + UniFFI Kotlin bindings)
+ios/
+  truapi-host/             TrUAPIHost Swift Package (sources + UniFFI Swift bindings)
+playground/                Next.js interactive playground; deploys to truapi-playground.dot
+hosts/dotli/               dotli submodule
+docs/                      design docs, RFCs, feature proposals
+scripts/codegen.sh         regenerate the TS client from the Rust crate
 ```
 
+### Crate + binding invariants
+
+- `truapi` is canonical; runtime crates re-export rather than redefine. New
+  syscall traits and host-side runtime types live in `truapi-platform` and
+  `truapi-server`, not in `truapi`. Any additions to `truapi` itself are limited
+  to additive `Display` impls.
+- All types exposed by `truapi-platform` and `truapi-server` come from
+  `truapi::versioned::*` and `truapi::v01::*`. The runtime crates re-export
+  rather than redefine.
+- Pre-built `truapi-server` WASM artifacts are committed under
+  `js/packages/truapi-host-wasm/dist/wasm/{web,node}/`. Regenerate via
+  `make wasm` whenever `rust/crates/truapi-server/` changes. CI rebuilds the
+  bundle as a smoke check; exact byte-identity isn't enforced because
+  wasm-pack output depends on Rust/wasm-bindgen versions.
+- UniFFI bindings under `android/truapi-host/` and `ios/truapi-host/` are generated from the
+  `truapi-server` cdylib via `make uniffi`. The generated Swift modulemap may
+  need a one-time relocation into `Sources/truapi_serverFFI/include/`, the
+  `make uniffi` target prints a reminder.
+
 ## Code style
 
 - Every `pub` Rust item (functions, methods, types, traits, modules, constants) carries a doc comment (`///` or `//!`).
diff --git a/Cargo.lock b/Cargo.lock
index 7bb9e809..d511b60a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2,6 +2,43 @@
 # It is not intended for manual editing.
 version = 4
 
+[[package]]
+name = "addr2line"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b5d307320b3181d6d7954e663bd7c774a838b8220fe0593c86d9fb09f498b4b"
+dependencies = [
+ "gimli",
+]
+
+[[package]]
+name = "aead"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0"
+dependencies = [
+ "crypto-common",
+ "generic-array",
+]
+
+[[package]]
+name = "ahash"
+version = "0.8.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "version_check",
+ "zerocopy",
+]
+
+[[package]]
+name = "allocator-api2"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
+
 [[package]]
 name = "anstream"
 version = "1.0.0"
@@ -38,7 +75,7 @@ version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
 dependencies = [
- "windows-sys",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -49,7 +86,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
 dependencies = [
  "anstyle",
  "once_cell_polyfill",
- "windows-sys",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -59,602 +96,3974 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
 
 [[package]]
-name = "arrayvec"
-version = "0.7.6"
+name = "arbitrary"
+version = "1.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
+checksum = "c3d036a3c4ab069c7b410a2ce876bd74808d2d0888a82667669f8e783a898bf1"
 
 [[package]]
-name = "bitvec"
-version = "1.0.1"
+name = "arrayref"
+version = "0.3.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1bc2832c24239b0141d5674bb9174f9d68a8b5b3f2753311927c172ca46f7e9c"
-dependencies = [
- "funty",
- "radium",
- "tap",
- "wyz",
-]
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
 
 [[package]]
-name = "byte-slice-cast"
-version = "1.2.3"
+name = "arrayvec"
+version = "0.4.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7575182f7272186991736b70173b0ea045398f984bf5ebbb3804736ce1330c9d"
+checksum = "cd9fd44efafa8690358b7408d253adf110036b88f55672a933f01d616ad9b1b9"
+dependencies = [
+ "nodrop",
+]
 
 [[package]]
-name = "clap"
-version = "4.6.1"
+name = "arrayvec"
+version = "0.7.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1ddb117e43bbf7dacf0a4190fef4d345b9bad68dfc649cb349e7d17d28428e51"
-dependencies = [
- "clap_builder",
- "clap_derive",
-]
+checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
 
 [[package]]
-name = "clap_builder"
-version = "4.6.0"
+name = "askama"
+version = "0.13.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
+checksum = "5d4744ed2eef2645831b441d8f5459689ade2ab27c854488fbab1fbe94fce1a7"
 dependencies = [
- "anstream",
- "anstyle",
- "clap_lex",
- "strsim",
+ "askama_derive",
+ "itoa",
+ "percent-encoding",
+ "serde",
+ "serde_json",
 ]
 
 [[package]]
-name = "clap_derive"
-version = "4.6.1"
+name = "askama_derive"
+version = "0.13.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2ce8604710f6733aa641a2b3731eaa1e8b3d9973d5e3565da11800813f997a9"
+checksum = "d661e0f57be36a5c14c48f78d09011e67e0cb618f269cca9f2fd8d15b68c46ac"
 dependencies = [
- "heck",
+ "askama_parser",
+ "basic-toml",
+ "memchr",
  "proc-macro2",
  "quote",
+ "rustc-hash",
+ "serde",
+ "serde_derive",
  "syn",
 ]
 
 [[package]]
-name = "clap_lex"
-version = "1.1.0"
+name = "askama_parser"
+version = "0.13.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
+checksum = "cf315ce6524c857bb129ff794935cf6d42c82a6cff60526fe2a63593de4d0d4f"
+dependencies = [
+ "memchr",
+ "serde",
+ "serde_derive",
+ "winnow 0.7.15",
+]
 
 [[package]]
-name = "colorchoice"
-version = "1.0.5"
+name = "async-channel"
+version = "2.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+checksum = "924ed96dd52d1b75e9c1a3e6275715fd320f5f9439fb5a4a11fa51f4221158d2"
+dependencies = [
+ "concurrent-queue",
+ "event-listener-strategy",
+ "futures-core",
+ "pin-project-lite",
+]
 
 [[package]]
-name = "const_format"
-version = "0.2.36"
+name = "async-executor"
+version = "1.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4481a617ad9a412be3b97c5d403fef8ed023103368908b9c50af598ff467cc1e"
+checksum = "c96bf972d85afc50bf5ab8fe2d54d1586b4e0b46c97c50a0c9e71e2f7bcd812a"
 dependencies = [
- "const_format_proc_macros",
- "konst",
+ "async-task",
+ "concurrent-queue",
+ "fastrand",
+ "futures-lite",
+ "pin-project-lite",
+ "slab",
 ]
 
 [[package]]
-name = "const_format_proc_macros"
-version = "0.2.34"
+name = "async-fs"
+version = "2.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d57c2eccfb16dbac1f4e61e206105db5820c9d26c3c472bc17c774259ef7744"
+checksum = "8034a681df4aed8b8edbd7fbe472401ecf009251c8b40556b304567052e294c5"
 dependencies = [
- "proc-macro2",
- "quote",
- "unicode-xid",
+ "async-lock",
+ "blocking",
+ "futures-lite",
 ]
 
 [[package]]
-name = "convert_case"
-version = "0.6.0"
+name = "async-io"
+version = "2.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec182b0ca2f35d8fc196cf3404988fd8b8c739a4d270ff118a398feb0cbec1ca"
+checksum = "456b8a8feb6f42d237746d4b3e9a178494627745c3c56c6ea55d92ba50d026fc"
 dependencies = [
- "unicode-segmentation",
+ "autocfg",
+ "cfg-if",
+ "concurrent-queue",
+ "futures-io",
+ "futures-lite",
+ "parking",
+ "polling",
+ "rustix",
+ "slab",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
-name = "convert_case"
-version = "0.10.0"
+name = "async-lock"
+version = "3.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "633458d4ef8c78b72454de2d54fd6ab2e60f9e02be22f3c6104cdc8a4e0fceb9"
+checksum = "290f7f2596bd5b78a9fec8088ccd89180d7f9f55b94b0576823bbbdc72ee8311"
 dependencies = [
- "unicode-segmentation",
+ "event-listener",
+ "event-listener-strategy",
+ "pin-project-lite",
 ]
 
 [[package]]
-name = "derive_more"
-version = "2.1.1"
+name = "async-net"
+version = "2.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
+checksum = "b948000fad4873c1c9339d60f2623323a0cfd3816e5181033c6a5cb68b2accf7"
 dependencies = [
- "derive_more-impl",
+ "async-io",
+ "blocking",
+ "futures-lite",
 ]
 
 [[package]]
-name = "derive_more-impl"
-version = "2.1.1"
+name = "async-process"
+version = "2.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
+checksum = "fc50921ec0055cdd8a16de48773bfeec5c972598674347252c0399676be7da75"
 dependencies = [
- "convert_case 0.10.0",
- "proc-macro2",
- "quote",
- "rustc_version",
- "syn",
- "unicode-xid",
+ "async-channel",
+ "async-io",
+ "async-lock",
+ "async-signal",
+ "async-task",
+ "blocking",
+ "cfg-if",
+ "event-listener",
+ "futures-lite",
+ "rustix",
 ]
 
 [[package]]
-name = "equivalent"
-version = "1.0.2"
+name = "async-signal"
+version = "0.2.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+checksum = "52b5aaafa020cf5053a01f2a60e8ff5dccf550f0f77ec54a4e47285ac2bab485"
+dependencies = [
+ "async-io",
+ "async-lock",
+ "atomic-waker",
+ "cfg-if",
+ "futures-core",
+ "futures-io",
+ "rustix",
+ "signal-hook-registry",
+ "slab",
+ "windows-sys 0.61.2",
+]
 
 [[package]]
-name = "funty"
-version = "2.0.0"
+name = "async-task"
+version = "4.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c"
+checksum = "8b75356056920673b02621b35afd0f7dda9306d03c79a30f5c56c44cf256e3de"
 
 [[package]]
-name = "futures"
-version = "0.3.32"
+name = "async-trait"
+version = "0.1.89"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b147ee9d1f6d097cef9ce628cd2ee62288d963e16fb287bd9286455b241382d"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
 dependencies = [
- "futures-channel",
- "futures-core",
- "futures-executor",
- "futures-io",
- "futures-sink",
- "futures-task",
- "futures-util",
+ "proc-macro2",
+ "quote",
+ "syn",
 ]
 
 [[package]]
-name = "futures-channel"
-version = "0.3.32"
+name = "atomic-take"
+version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
-dependencies = [
- "futures-core",
- "futures-sink",
-]
+checksum = "a8ab6b55fe97976e46f91ddbed8d147d966475dc29b2032757ba47e02376fbc3"
 
 [[package]]
-name = "futures-core"
-version = "0.3.32"
+name = "atomic-waker"
+version = "1.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
 
 [[package]]
-name = "futures-executor"
-version = "0.3.32"
+name = "autocfg"
+version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
-dependencies = [
- "futures-core",
- "futures-task",
- "futures-util",
-]
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
 
 [[package]]
-name = "futures-io"
-version = "0.3.32"
+name = "base32"
+version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
+checksum = "022dfe9eb35f19ebbcb51e0b40a5ab759f46ad60cadf7297e0bd085afb50e076"
 
 [[package]]
-name = "futures-macro"
-version = "0.3.32"
+name = "base64"
+version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
 [[package]]
-name = "futures-sink"
-version = "0.3.32"
+name = "base64ct"
+version = "1.8.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
+checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
 
 [[package]]
-name = "futures-task"
-version = "0.3.32"
+name = "basic-toml"
+version = "0.1.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
+checksum = "ba62675e8242a4c4e806d12f11d136e626e6c8361d6b829310732241652a178a"
+dependencies = [
+ "serde",
+]
 
 [[package]]
-name = "futures-util"
-version = "0.3.32"
+name = "bip39"
+version = "2.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
+checksum = "90dbd31c98227229239363921e60fcf5e558e43ec69094d46fc4996f08d1d5bc"
 dependencies = [
- "futures-channel",
- "futures-core",
- "futures-io",
- "futures-macro",
- "futures-sink",
- "futures-task",
- "memchr",
- "pin-project-lite",
- "slab",
+ "bitcoin_hashes",
 ]
 
 [[package]]
-name = "hashbrown"
-version = "0.17.0"
+name = "bitcoin_hashes"
+version = "0.14.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4f467dd6dccf739c208452f8014c75c18bb8301b050ad1cfb27153803edb0f51"
+checksum = "26ec84b80c482df901772e931a9a681e26a1b9ee2302edeff23cb30328745c8b"
+dependencies = [
+ "hex-conservative",
+]
 
 [[package]]
-name = "heck"
-version = "0.5.0"
+name = "bitflags"
+version = "2.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+checksum = "c4512299f36f043ab09a583e57bceb5a5aab7a73db1805848e8fef3c9e8c78b3"
 
 [[package]]
-name = "hex"
-version = "0.4.3"
+name = "bitvec"
+version = "1.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+checksum = "1bc2832c24239b0141d5674bb9174f9d68a8b5b3f2753311927c172ca46f7e9c"
+dependencies = [
+ "funty",
+ "radium",
+ "tap",
+ "wyz",
+]
 
 [[package]]
-name = "impl-trait-for-tuples"
-version = "0.2.3"
+name = "blake2-rfc"
+version = "0.2.18"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a0eb5a3343abf848c0984fe4604b2b105da9539376e24fc0a3b0007411ae4fd9"
+checksum = "5d6d530bdd2d52966a6d03b7a964add7ae1a288d25214066fd4b600f0f796400"
 dependencies = [
- "proc-macro2",
- "quote",
- "syn",
+ "arrayvec 0.4.12",
+ "constant_time_eq",
 ]
 
 [[package]]
-name = "indexmap"
-version = "2.14.0"
+name = "block-buffer"
+version = "0.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"
+checksum = "4152116fd6e9dadb291ae18fc1ec3575ed6d84c29642d97890f4b4a3417297e4"
 dependencies = [
- "equivalent",
- "hashbrown",
+ "generic-array",
 ]
 
 [[package]]
-name = "indoc"
-version = "2.0.7"
+name = "block-buffer"
+version = "0.10.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "79cf5c93f93228cf8efb3ba362535fb11199ac548a09ce117c9b1adc3030d706"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
 dependencies = [
- "rustversion",
+ "generic-array",
 ]
 
 [[package]]
-name = "is_terminal_polyfill"
-version = "1.70.2"
+name = "blocking"
+version = "1.6.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+checksum = "e83f8d02be6967315521be875afa792a316e28d57b5a2d401897e2a7921b7f21"
+dependencies = [
+ "async-channel",
+ "async-task",
+ "futures-io",
+ "futures-lite",
+ "piper",
+]
 
 [[package]]
-name = "itoa"
-version = "1.0.18"
+name = "bs58"
+version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+checksum = "bf88ba1141d185c399bee5288d850d63b8369520c1eafc32a0430b5b6c287bf4"
+dependencies = [
+ "tinyvec",
+]
 
 [[package]]
-name = "konst"
-version = "0.2.20"
+name = "bumpalo"
+version = "3.20.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "128133ed7824fcd73d6e7b17957c5eb7bacb885649bd8c69708b2331a10bcefb"
+checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb"
 dependencies = [
- "konst_macro_rules",
+ "allocator-api2",
 ]
 
 [[package]]
-name = "konst_macro_rules"
-version = "0.2.19"
+name = "byte-slice-cast"
+version = "1.2.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a4933f3f57a8e9d9da04db23fb153356ecaf00cbd14aee46279c33dc80925c37"
+checksum = "7575182f7272186991736b70173b0ea045398f984bf5ebbb3804736ce1330c9d"
 
 [[package]]
-name = "memchr"
-version = "2.8.0"
+name = "byteorder"
+version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
 
 [[package]]
-name = "once_cell_polyfill"
-version = "1.70.2"
+name = "bytes"
+version = "1.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
 
 [[package]]
-name = "parity-scale-codec"
+name = "camino"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e629a66d692cb9ff1a1c664e41771b3dcaf961985a9774c0eb0bd1b51cf60a48"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "cargo-platform"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e35af189006b9c0f00a064685c727031e3ed2d8020f7ba284d78cc2671bd36ea"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "cargo_metadata"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd5eb614ed4c27c5d706420e4320fbe3216ab31fa1c33cd8246ac36dae4479ba"
+dependencies = [
+ "camino",
+ "cargo-platform",
+ "semver",
+ "serde",
+ "serde_json",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "cc"
+version = "1.2.62"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1dce859f0832a7d088c4f1119888ab94ef4b5d6795d1ce05afb7fe159d79f98"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "chacha20"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3613f74bd2eac03dad61bd53dbe620703d4371614fe0bc3b9f04dd36fe4e818"
+dependencies = [
+ "cfg-if",
+ "cipher",
+ "cpufeatures",
+]
+
+[[package]]
+name = "cipher"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773f3b9af64447d2ce9850330c473515014aa235e6a783b02db81ff39e4a3dad"
+dependencies = [
+ "crypto-common",
+ "inout",
+]
+
+[[package]]
+name = "clap"
+version = "4.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ddb117e43bbf7dacf0a4190fef4d345b9bad68dfc649cb349e7d17d28428e51"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2ce8604710f6733aa641a2b3731eaa1e8b3d9973d5e3565da11800813f997a9"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "clap_lex"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
+
+[[package]]
+name = "cobs"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fa961b519f0b462e3a3b4a34b64d119eeaca1d59af726fe450bbba07a9fc0a1"
+dependencies = [
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "colorchoice"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+
+[[package]]
+name = "concurrent-queue"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "console_error_panic_hook"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a06aeb73f470f66dcdbf7223caeebb85984942f22f1adb2a088cf9668146bbbc"
+dependencies = [
+ "cfg-if",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "const-oid"
+version = "0.9.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
+
+[[package]]
+name = "const_format"
+version = "0.2.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4481a617ad9a412be3b97c5d403fef8ed023103368908b9c50af598ff467cc1e"
+dependencies = [
+ "const_format_proc_macros",
+ "konst",
+]
+
+[[package]]
+name = "const_format_proc_macros"
+version = "0.2.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d57c2eccfb16dbac1f4e61e206105db5820c9d26c3c472bc17c774259ef7744"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-xid",
+]
+
+[[package]]
+name = "constant_time_eq"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "245097e9a4535ee1e3e3931fcfcd55a796a44c643e8596ff6566d68f09b87bbc"
+
+[[package]]
+name = "convert_case"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec182b0ca2f35d8fc196cf3404988fd8b8c739a4d270ff118a398feb0cbec1ca"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "convert_case"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "633458d4ef8c78b72454de2d54fd6ab2e60f9e02be22f3c6104cdc8a4e0fceb9"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "cranelift-assembler-x64"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44f81cede359311706057b689b91b59f464926de0316f389898a2b028cb494fa"
+dependencies = [
+ "cranelift-assembler-x64-meta",
+]
+
+[[package]]
+name = "cranelift-assembler-x64-meta"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa6ca11305de425ea08884097b913ebe1a83875253b3c0063ce28411e226bfdc"
+dependencies = [
+ "cranelift-srcgen",
+]
+
+[[package]]
+name = "cranelift-bforest"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7537341a9a4ba9812141927be733e7254bf2318aab6597d567af9cad90609f27"
+dependencies = [
+ "cranelift-entity",
+]
+
+[[package]]
+name = "cranelift-bitset"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d28a4ca5faf25ff821fcc768f26e68ffef505e9f71bb06e608862d941fa65086"
+dependencies = [
+ "serde",
+ "serde_derive",
+]
+
+[[package]]
+name = "cranelift-codegen"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d891057fe1b73910c41e73b32a70fa8454092fce65942b5fa6f72aa6d5487f8a"
+dependencies = [
+ "bumpalo",
+ "cranelift-assembler-x64",
+ "cranelift-bforest",
+ "cranelift-bitset",
+ "cranelift-codegen-meta",
+ "cranelift-codegen-shared",
+ "cranelift-control",
+ "cranelift-entity",
+ "cranelift-isle",
+ "gimli",
+ "hashbrown 0.15.5",
+ "log",
+ "pulley-interpreter",
+ "regalloc2",
+ "rustc-hash",
+ "serde",
+ "smallvec",
+ "target-lexicon",
+ "wasmtime-internal-math",
+]
+
+[[package]]
+name = "cranelift-codegen-meta"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c29a66028a78eedc534b3a94e5ebfbaeb4e1f6b09038afe41bb24afd614faa4b"
+dependencies = [
+ "cranelift-assembler-x64-meta",
+ "cranelift-codegen-shared",
+ "cranelift-srcgen",
+ "heck",
+ "pulley-interpreter",
+]
+
+[[package]]
+name = "cranelift-codegen-shared"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95809ad251fe9422087b4a72d61e584d6ab6eff44dee1335f93cfaea0bedc9ac"
+
+[[package]]
+name = "cranelift-control"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f79d0cacf063c297e5e8d5b73cb355b41b87f6d248e252d1b284e7a7b73673c2"
+dependencies = [
+ "arbitrary",
+]
+
+[[package]]
+name = "cranelift-entity"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2d73297a195ce3be55997c6307142c4b1e58dd0c2f18ceaa0179444024e312a"
+dependencies = [
+ "cranelift-bitset",
+ "serde",
+ "serde_derive",
+]
+
+[[package]]
+name = "cranelift-frontend"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3be38d1ae29ef7c5d611fc6cb694f698dc4ca44152dcaa112ec0fef8d4d34858"
+dependencies = [
+ "cranelift-codegen",
+ "log",
+ "smallvec",
+ "target-lexicon",
+]
+
+[[package]]
+name = "cranelift-isle"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6761926f6636209de7ac568be28b206890f2181761375b9722e0a1e7a7e1637a"
+
+[[package]]
+name = "cranelift-native"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0893472f73f0d530a28e9a573ada6d1f93b9659bb6734dfe17061ac967bd1830"
+dependencies = [
+ "cranelift-codegen",
+ "libc",
+ "target-lexicon",
+]
+
+[[package]]
+name = "cranelift-srcgen"
+version = "0.123.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1daccebabb1ccd034dbab0eacc0722af27d3cccc7929dea27a3546cb3562e40"
+
+[[package]]
+name = "crc32fast"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "crossbeam-queue"
+version = "0.3.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f58bbc28f91df819d0aa2a2c00cd19754769c2fad90579b3592b1c9ba7a3115"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-utils"
+version = "0.8.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
+
+[[package]]
+name = "crunchy"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "rand_core",
+ "typenum",
+]
+
+[[package]]
+name = "crypto-mac"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b584a330336237c1eecd3e94266efb216c56ed91225d634cb2991c5f3fd1aeab"
+dependencies = [
+ "generic-array",
+ "subtle",
+]
+
+[[package]]
+name = "curve25519-dalek"
+version = "4.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "curve25519-dalek-derive",
+ "digest 0.10.7",
+ "fiat-crypto",
+ "rustc_version",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "curve25519-dalek-derive"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "data-encoding"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4ae5f15dda3c708c0ade84bfee31ccab44a3da4f88015ed22f63732abe300c8"
+
+[[package]]
+name = "der"
+version = "0.7.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
+dependencies = [
+ "const-oid",
+ "pem-rfc7468",
+ "zeroize",
+]
+
+[[package]]
+name = "derive_more"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
+dependencies = [
+ "derive_more-impl",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
+dependencies = [
+ "convert_case 0.10.0",
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn",
+ "unicode-xid",
+]
+
+[[package]]
+name = "digest"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3dd60d1080a57a05ab032377049e0591415d2b31afd7028356dbf3cc6dcb066"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer 0.10.4",
+ "crypto-common",
+ "subtle",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "downcast-rs"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75b325c5dbd37f80359721ad39aca5a29fb04c89279657cffdda8736d0c0b9d2"
+
+[[package]]
+name = "ed25519"
+version = "2.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53"
+dependencies = [
+ "pkcs8",
+ "signature",
+]
+
+[[package]]
+name = "ed25519-zebra"
+version = "4.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "775765289f7c6336c18d3d66127527820dd45ffd9eb3b6b8ee4708590e6c20f5"
+dependencies = [
+ "curve25519-dalek",
+ "ed25519",
+ "hashbrown 0.16.1",
+ "pkcs8",
+ "rand_core",
+ "sha2 0.10.9",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "either"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
+
+[[package]]
+name = "embedded-io"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef1a6892d9eef45c8fa6b9e0086428a2cca8491aca8f787c534a3d6d0bcb3ced"
+
+[[package]]
+name = "embedded-io"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edd0f118536f44f5ccd48bcb8b111bdc3de888b58c74639dfb034a357d0f206d"
+
+[[package]]
+name = "encoding_rs"
+version = "0.8.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75030f3c4f45dafd7586dd6780965a8c7e8e285a5ecb86713e63a79c5b2766f3"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "event-listener"
+version = "5.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13b66accf52311f30a0db42147dadea9850cb48cd070028831ae5f5d4b856ab"
+dependencies = [
+ "concurrent-queue",
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "event-listener-strategy"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8be9f3dfaaffdae2972880079a491a1a8bb7cbed0b8dd7a347f668b4150a3b93"
+dependencies = [
+ "event-listener",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "fallible-iterator"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2acce4a10f12dc2fb14a218589d4f1f62ef011b2d0cc4b3cb1bba8e94da14649"
+
+[[package]]
+name = "fallible-streaming-iterator"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7360491ce676a36bf9bb3c56c1aa791658183a54d2744120f27285738d90465a"
+
+[[package]]
+name = "fastbloom"
+version = "0.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef975e30683b2d965054bb0a836f8973857c4ebf6acf274fe46617cd285060d8"
+dependencies = [
+ "foldhash 0.2.0",
+ "libm",
+ "portable-atomic",
+ "siphasher 1.0.3",
+]
+
+[[package]]
+name = "fastrand"
+version = "2.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f1f227452a390804cdb637b74a86990f2a7d7ba4b7d5693aac9b4dd6defd8d6"
+
+[[package]]
+name = "fiat-crypto"
+version = "0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d"
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
+
+[[package]]
+name = "foldhash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "fs-err"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88a41f105fe1d5b6b34b2055e3dc59bb79b46b48b2040b9e6c7b4b5de097aa41"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "funty"
+version = "2.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c"
+
+[[package]]
+name = "futures"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b147ee9d1f6d097cef9ce628cd2ee62288d963e16fb287bd9286455b241382d"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
+
+[[package]]
+name = "futures-lite"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f78e10609fe0e0b3f4157ffab1876319b5b0db102a2c60dc4626306dc46b44ad"
+dependencies = [
+ "fastrand",
+ "futures-core",
+ "futures-io",
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "futures-macro"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
+
+[[package]]
+name = "futures-task"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
+
+[[package]]
+name = "futures-timer"
+version = "3.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f288b0a4f20f9a56b5d1da57e2227c661b7b16168e2f72365f57b63326e29b24"
+dependencies = [
+ "gloo-timers",
+ "send_wrapper 0.4.0",
+]
+
+[[package]]
+name = "futures-util"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi",
+ "wasip2",
+ "wasip3",
+]
+
+[[package]]
+name = "getrandom_or_panic"
+version = "0.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ea1015b5a70616b688dc230cfe50c8af89d972cb132d5a622814d29773b10b9"
+dependencies = [
+ "rand_core",
+]
+
+[[package]]
+name = "gimli"
+version = "0.32.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e629b9b98ef3dd8afe6ca2bd0f89306cec16d43d907889945bc5d6687f2f13c7"
+dependencies = [
+ "fallible-iterator",
+ "indexmap",
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "glob"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cc23270f6e1808e30a928bdc84dea0b9b4136a8bc82338574f23baf47bbd280"
+
+[[package]]
+name = "gloo-timers"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b995a66bb87bebce9a0f4a95aed01daca4872c050bfcb21653361c03bc35e5c"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "goblin"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b363a30c165f666402fe6a3024d3bec7ebc898f96a4a23bd1c99f8dbf3f4f47"
+dependencies = [
+ "log",
+ "plain",
+ "scroll",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
+dependencies = [
+ "ahash",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.15.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
+dependencies = [
+ "foldhash 0.1.5",
+ "serde",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
+dependencies = [
+ "allocator-api2",
+ "equivalent",
+ "foldhash 0.2.0",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4f467dd6dccf739c208452f8014c75c18bb8301b050ad1cfb27153803edb0f51"
+
+[[package]]
+name = "hashlink"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ba4ff7128dee98c7dc9794b6a411377e1404dba1c97deb8d1a55297bd25d8af"
+dependencies = [
+ "hashbrown 0.14.5",
+]
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hermit-abi"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc0fef456e4baa96da950455cd02c081ca953b141298e41db3fc7e36b1da849c"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "hex-conservative"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fda06d18ac606267c40c04e41b9947729bf8b9efe74bd4e82b61a5f26a510b9f"
+dependencies = [
+ "arrayvec 0.7.6",
+]
+
+[[package]]
+name = "hmac"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "126888268dcc288495a26bf004b38c5fdbb31682f992c84ceb046a1f0fe38840"
+dependencies = [
+ "crypto-mac",
+ "digest 0.9.0",
+]
+
+[[package]]
+name = "hmac"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e"
+dependencies = [
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "hmac-drbg"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "17ea0a1394df5b6574da6e0c1ade9e78868c9fb0a4e5ef4428e32da4676b85b1"
+dependencies = [
+ "digest 0.9.0",
+ "generic-array",
+ "hmac 0.8.1",
+]
+
+[[package]]
+name = "http"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "icu_collections"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2984d1cd16c883d7935b9e07e44071dca8d917fd52ecc02c04d5fa0b5a3f191c"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "utf8_iter",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92219b62b3e2b4d88ac5119f8904c10f8f61bf7e95b640d25ba3075e6cac2c29"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c56e5ee99d6e3d33bd91c5d85458b6005a22140021cc324cea84dd0e72cff3b4"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da3be0ae77ea334f4da67c12f149704f19f81d1adf7c51cf482943e84a2bad38"
+
+[[package]]
+name = "icu_properties"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bee3b67d0ea5c2cca5003417989af8996f8604e34fb9ddf96208a033901e70de"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e2bbb201e0c04f7b4b3e14382af113e17ba4f63e2c9d2ee626b720cbce54a14"
+
+[[package]]
+name = "icu_provider"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "139c4cf31c8b5f33d7e199446eff9c1e02decfc2f0eec2c8d71f65befa45b421"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "id-arena"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d3067d79b975e8844ca9eb072e16b31c3c1c36928edf9c6789548c524d0d954"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb68373c0d6620ef8105e855e7745e18b0d00d3bdb07fb532e434244cdb9a714"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "impl-trait-for-tuples"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a0eb5a3343abf848c0984fe4604b2b105da9539376e24fc0a3b0007411ae4fd9"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.17.0",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "indoc"
+version = "2.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "79cf5c93f93228cf8efb3ba362535fb11199ac548a09ce117c9b1adc3030d706"
+dependencies = [
+ "rustversion",
+]
+
+[[package]]
+name = "inout"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itertools"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
+dependencies = [
+ "either",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "js-sys"
+version = "0.3.98"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67df7112613f8bfd9150013a0314e196f4800d3201ae742489d999db2f979f08"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "keccak"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb26cec98cce3a3d96cbb7bced3c4b16e3d13f27ec56dbd62cbc8f39cfb9d653"
+dependencies = [
+ "cpufeatures",
+]
+
+[[package]]
+name = "konst"
+version = "0.2.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "128133ed7824fcd73d6e7b17957c5eb7bacb885649bd8c69708b2331a10bcefb"
+dependencies = [
+ "konst_macro_rules",
+]
+
+[[package]]
+name = "konst_macro_rules"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4933f3f57a8e9d9da04db23fb153356ecaf00cbd14aee46279c33dc80925c37"
+
+[[package]]
+name = "leb128fmt"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2"
+
+[[package]]
+name = "libc"
+version = "0.2.186"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
+
+[[package]]
+name = "libm"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6d2cec3eae94f9f509c767b45932f1ada8350c4bdb85af2fcab4a3c14807981"
+
+[[package]]
+name = "libsecp256k1"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e79019718125edc905a079a70cfa5f3820bc76139fc91d6f9abc27ea2a887139"
+dependencies = [
+ "arrayref",
+ "base64",
+ "digest 0.9.0",
+ "hmac-drbg",
+ "libsecp256k1-core",
+ "libsecp256k1-gen-ecmult",
+ "libsecp256k1-gen-genmult",
+ "rand",
+ "serde",
+ "sha2 0.9.9",
+ "typenum",
+]
+
+[[package]]
+name = "libsecp256k1-core"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5be9b9bb642d8522a44d533eab56c16c738301965504753b03ad1de3425d5451"
+dependencies = [
+ "crunchy",
+ "digest 0.9.0",
+ "subtle",
+]
+
+[[package]]
+name = "libsecp256k1-gen-ecmult"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3038c808c55c87e8a172643a7d87187fc6c4174468159cb3090659d55bcb4809"
+dependencies = [
+ "libsecp256k1-core",
+]
+
+[[package]]
+name = "libsecp256k1-gen-genmult"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3db8d6ba2cec9eacc40e6e8ccc98931840301f1006e95647ceb2dd5c3aa06f7c"
+dependencies = [
+ "libsecp256k1-core",
+]
+
+[[package]]
+name = "libsqlite3-sys"
+version = "0.30.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e99fb7a497b1e3339bc746195567ed8d3e24945ecd636e3619d20b9de9e9149"
+dependencies = [
+ "cc",
+ "pkg-config",
+ "vcpkg",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "litemap"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92daf443525c4cce67b150400bc2316076100ce0b3686209eb8cf3c31612e6f0"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+
+[[package]]
+name = "lru"
+version = "0.16.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f66e8d5d03f609abc3a39e6f08e4164ebf1447a732906d39eb9b99b7919ef39"
+dependencies = [
+ "hashbrown 0.16.1",
+]
+
+[[package]]
+name = "mach2"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d640282b302c0bb0a2a8e0233ead9035e3bed871f0b7e81fe4a1ec829765db44"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "memchr"
+version = "2.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
+
+[[package]]
+name = "memfd"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad38eb12aea514a0466ea40a80fd8cc83637065948eb4a426e4aa46261175227"
+dependencies = [
+ "rustix",
+]
+
+[[package]]
+name = "merlin"
+version = "3.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "58c38e2799fc0978b65dfff8023ec7843e2330bb462f19198840b34b6582397d"
+dependencies = [
+ "byteorder",
+ "keccak",
+ "rand_core",
+ "zeroize",
+]
+
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
+[[package]]
+name = "mio"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50b7e5b27aa02a74bac8c3f23f448f8d87ff11f92d3aac1a6ed369ee08cc56c1"
+dependencies = [
+ "libc",
+ "wasi",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "multi-stash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "685a9ac4b61f4e728e1d2c6a7844609c16527aeb5e6c865915c08e619c16410f"
+
+[[package]]
+name = "nodrop"
+version = "0.1.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72ef4a56884ca558e5ddb05a1d1e7e1bfd9a68d9ed024c21704cc98872dae1bb"
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
+[[package]]
+name = "nom"
+version = "8.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df9761775871bdef83bee530e60050f7e54b1105350d6884eb0fb4f46c2f9405"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "num-bigint"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5e44f723f1133c9deac646763579fdb3ac745e418f2a7af9cd0c431da1f20b9"
+dependencies = [
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-integer"
+version = "0.1.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-rational"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f83d14da390562dca69fc84082e73e548e1ad308d24accdedd2720017cb37824"
+dependencies = [
+ "num-bigint",
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "object"
+version = "0.37.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe"
+dependencies = [
+ "crc32fast",
+ "hashbrown 0.15.5",
+ "indexmap",
+ "memchr",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "opaque-debug"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08d65885ee38876c4f86fa503fb49d7b507c2b62552df7c70b2fce627e06381"
+
+[[package]]
+name = "parity-scale-codec"
+version = "3.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "799781ae679d79a948e13d4824a40970bfa500058d245760dd857301059810fa"
+dependencies = [
+ "arrayvec 0.7.6",
+ "bitvec",
+ "byte-slice-cast",
+ "const_format",
+ "impl-trait-for-tuples",
+ "parity-scale-codec-derive",
+ "rustversion",
+ "serde",
+]
+
+[[package]]
+name = "parity-scale-codec-derive"
 version = "3.7.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "799781ae679d79a948e13d4824a40970bfa500058d245760dd857301059810fa"
+checksum = "34b4653168b563151153c9e4c08ebed57fb8262bebfa79711552fa983c623e7a"
+dependencies = [
+ "proc-macro-crate",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "parking"
+version = "2.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba"
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall",
+ "smallvec",
+ "windows-link",
+]
+
+[[package]]
+name = "pbkdf2"
+version = "0.12.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8ed6a7761f76e3b9f92dfb0a60a6a6477c61024b775147ff0973a02653abaf2"
+dependencies = [
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88b39c9bfcfc231068454382784bb460aae594343fb030d46e9f50a645418412"
+dependencies = [
+ "base64ct",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pin-project"
+version = "1.1.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2466b2336ed02bcdca6b294417127b90ec92038d1d5c4fbeac971a922e0e0924"
+dependencies = [
+ "pin-project-internal",
+]
+
+[[package]]
+name = "pin-project-internal"
+version = "1.1.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c96395f0a926bc13b1c17622aaddda1ecb55d49c8f1bf9777e4d877800a43f8b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "piper"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c835479a4443ded371d6c535cbfd8d31ad92c5d23ae9770a61bc155e4992a3c1"
+dependencies = [
+ "atomic-waker",
+ "fastrand",
+ "futures-io",
+]
+
+[[package]]
+name = "pkcs8"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7"
+dependencies = [
+ "der",
+ "spki",
+]
+
+[[package]]
+name = "pkg-config"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19f132c84eca552bf34cab8ec81f1c1dcc229b811638f9d283dceabe58c5569e"
+
+[[package]]
+name = "plain"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4596b6d070b27117e987119b4dac604f3c58cfb0b191112e24771b2faeac1a6"
+
+[[package]]
+name = "polling"
+version = "3.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d0e4f59085d47d8241c88ead0f274e8a0cb551f3625263c05eb8dd897c34218"
+dependencies = [
+ "cfg-if",
+ "concurrent-queue",
+ "hermit-abi",
+ "pin-project-lite",
+ "rustix",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "poly1305"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8159bd90725d2df49889a078b54f4f79e87f1f8a8444194cdca81d38f5393abf"
+dependencies = [
+ "cpufeatures",
+ "opaque-debug",
+ "universal-hash",
+]
+
+[[package]]
+name = "portable-atomic"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49"
+
+[[package]]
+name = "postcard"
+version = "1.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6764c3b5dd454e283a30e6dfe78e9b31096d9e32036b5d1eaac7a6119ccb9a24"
+dependencies = [
+ "cobs",
+ "embedded-io 0.4.0",
+ "embedded-io 0.6.1",
+ "serde",
+]
+
+[[package]]
+name = "potential_utf"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0103b1cef7ec0cf76490e969665504990193874ea05c85ff9bab8b911d0a0564"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "prettyplease"
+version = "0.2.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
+dependencies = [
+ "proc-macro2",
+ "syn",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "3.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e67ba7e9b2b56446f1d419b1d807906278ffa1a658a8a5d8a39dcb1f5a78614f"
+dependencies = [
+ "toml_edit",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "pulley-interpreter"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b78fdec962b639b921badfcfe77db7d18aa3c0c1e292ac2aa268c0efe8fe683"
+dependencies = [
+ "cranelift-bitset",
+ "log",
+ "pulley-macros",
+ "wasmtime-internal-math",
+]
+
+[[package]]
+name = "pulley-macros"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f718f4e8cd5fdfa08b3b1d2d25fe288350051be330544305f0a9b93a937b3d42"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
+[[package]]
+name = "radium"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
+
+[[package]]
+name = "rand"
+version = "0.8.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
+dependencies = [
+ "libc",
+ "rand_chacha",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+dependencies = [
+ "ppv-lite86",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+dependencies = [
+ "getrandom 0.2.17",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "regalloc2"
+version = "0.12.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5216b1837de2149f8bc8e6d5f88a9326b63b8c836ed58ce4a0a29ec736a59734"
+dependencies = [
+ "allocator-api2",
+ "bumpalo",
+ "hashbrown 0.15.5",
+ "log",
+ "rustc-hash",
+ "smallvec",
+]
+
+[[package]]
+name = "rusqlite"
+version = "0.32.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7753b721174eb8ff87a9a0e799e2d7bc3749323e773db92e0984debb00019d6e"
+dependencies = [
+ "bitflags",
+ "fallible-iterator",
+ "fallible-streaming-iterator",
+ "hashlink",
+ "libsqlite3-sys",
+ "smallvec",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94300abf3f1ae2e2b8ffb7b58043de3d399c73fa6f4b73826402a5c457614dbe"
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "ruzstd"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7c1c839d570d835527c9a5e4db7cb2198683a988cb9d7293fc8674e6bd58fc8"
+
+[[package]]
+name = "schnorrkel"
+version = "0.11.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e9fcb6c2e176e86ec703e22560d99d65a5ee9056ae45a08e13e84ebf796296f"
+dependencies = [
+ "aead",
+ "arrayref",
+ "arrayvec 0.7.6",
+ "curve25519-dalek",
+ "getrandom_or_panic",
+ "merlin",
+ "rand_core",
+ "serde_bytes",
+ "sha2 0.10.9",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "scroll"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ab8598aa408498679922eff7fa985c25d58a90771bd6be794434c5277eab1a6"
+dependencies = [
+ "scroll_derive",
+]
+
+[[package]]
+name = "scroll_derive"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1783eabc414609e28a5ba76aee5ddd52199f7107a0b24c2e9746a1ecc34a683d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "semver"
+version = "1.0.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "send_wrapper"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f638d531eccd6e23b980caf34876660d38e265409d8e99b397ab71eb3612fad0"
+
+[[package]]
+name = "send_wrapper"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd0b0ec5f1c1ca621c432a25813d8d60c88abe6d3e08a3eb9cf37d97a0fe3d73"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_bytes"
+version = "0.11.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5d440709e79d88e51ac01c4b72fc6cb7314017bb7da9eeff678aa94c10e3ea8"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.149"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "sha1"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha2"
+version = "0.9.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4d58a1e1bf39749807d89cf2d98ac2dfa0ff1cb3faa38fbb64dd88ac8013d800"
+dependencies = [
+ "block-buffer 0.9.0",
+ "cfg-if",
+ "cpufeatures",
+ "digest 0.9.0",
+ "opaque-debug",
+]
+
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha3"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77fd7028345d415a4034cf8777cd4f8ab1851274233b45f84e3d955502d93874"
+dependencies = [
+ "digest 0.10.7",
+ "keccak",
+]
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "signature"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
+
+[[package]]
+name = "siphasher"
+version = "0.3.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38b58827f4464d87d377d175e90bf58eb00fd8716ff0a62f80356b5e61555d0d"
+
+[[package]]
+name = "siphasher"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ee5873ec9cce0195efcb7a4e9507a04cd49aec9c83d0389df45b1ef7ba2e649"
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "smallvec"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "smawk"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c388c1b5e93756d0c740965c41e8822f866621d41acbdf6336a6a168f8840c"
+
+[[package]]
+name = "smol"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a33bd3e260892199c3ccfc487c88b2da2265080acb316cd920da72fdfd7c599f"
+dependencies = [
+ "async-channel",
+ "async-executor",
+ "async-fs",
+ "async-io",
+ "async-lock",
+ "async-net",
+ "async-process",
+ "blocking",
+ "futures-lite",
+]
+
+[[package]]
+name = "smoldot"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4b22238c3655a9e66285b5fc1a59aa914a3c09160caf5b9604f8c11de787d77f"
+dependencies = [
+ "arrayvec 0.7.6",
+ "async-lock",
+ "atomic-take",
+ "base32",
+ "base64",
+ "bip39",
+ "blake2-rfc",
+ "bs58",
+ "chacha20",
+ "crossbeam-queue",
+ "derive_more",
+ "ed25519-zebra",
+ "either",
+ "event-listener",
+ "fastbloom",
+ "fnv",
+ "futures-lite",
+ "futures-util",
+ "hashbrown 0.16.1",
+ "hex",
+ "hmac 0.12.1",
+ "itertools",
+ "libm",
+ "libsecp256k1",
+ "merlin",
+ "nom 8.0.0",
+ "num-bigint",
+ "num-rational",
+ "num-traits",
+ "parking_lot",
+ "pbkdf2",
+ "pin-project",
+ "poly1305",
+ "rand",
+ "rand_chacha",
+ "rusqlite",
+ "ruzstd",
+ "schnorrkel",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "sha3",
+ "siphasher 1.0.3",
+ "slab",
+ "smallvec",
+ "soketto",
+ "twox-hash",
+ "wasmi",
+ "wasmtime",
+ "x25519-dalek",
+ "zeroize",
+]
+
+[[package]]
+name = "smoldot-light"
+version = "1.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7ec52700b57df3f2a031873c5de7d44f2f8abae54b622ccf15ad9bc7c05a7c2"
+dependencies = [
+ "async-channel",
+ "async-lock",
+ "base64",
+ "blake2-rfc",
+ "bs58",
+ "derive_more",
+ "either",
+ "event-listener",
+ "fnv",
+ "futures-channel",
+ "futures-lite",
+ "futures-util",
+ "hashbrown 0.16.1",
+ "hex",
+ "itertools",
+ "log",
+ "lru",
+ "parking_lot",
+ "pin-project",
+ "rand",
+ "rand_chacha",
+ "serde",
+ "serde_json",
+ "siphasher 1.0.3",
+ "slab",
+ "smol",
+ "smoldot",
+ "zeroize",
+]
+
+[[package]]
+name = "socket2"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "soketto"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e859df029d160cb88608f5d7df7fb4753fd20fdfb4de5644f3d8b8440841721"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures",
+ "httparse",
+ "log",
+ "rand",
+ "sha1",
+]
+
+[[package]]
+name = "spin"
+version = "0.9.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"
+
+[[package]]
+name = "spki"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d"
+dependencies = [
+ "base64ct",
+ "der",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "static_assertions"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "syn"
+version = "2.0.117"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tap"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55937e1799185b12863d447f42597ed69d9928686b8d88a1df17376a097d8369"
+
+[[package]]
+name = "target-lexicon"
+version = "0.13.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
+
+[[package]]
+name = "tempfile"
+version = "3.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
+dependencies = [
+ "fastrand",
+ "getrandom 0.4.2",
+ "once_cell",
+ "rustix",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "termcolor"
+version = "1.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06794f8f6c5c898b3275aebefa6b8a1cb24cd2c6c79397ab15774837a0bc5755"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "textwrap"
+version = "0.16.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c13547615a44dc9c452a8a534638acdf07120d4b6847c8178705da06306a3057"
+dependencies = [
+ "smawk",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
+dependencies = [
+ "thiserror-impl 2.0.18",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8323304221c2a851516f22236c5722a72eaa19749016521d6dff0824447d96d"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e61e67053d25a4e82c844e8424039d9745781b3fc4f32b8d55ed50f5f667ef3"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.52.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "pin-project-lite",
+ "socket2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "385a6cb71ab9ab790c5fe8d67f1645e6c450a7ce006a33de03daa956cf70a496"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tokio-tungstenite"
+version = "0.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c83b561d025642014097b66e6c1bb422783339e0909e4429cde4749d1990bc38"
+dependencies = [
+ "futures-util",
+ "log",
+ "tokio",
+ "tungstenite",
+]
+
+[[package]]
+name = "toml"
+version = "0.5.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f4f7f0dd8d50a853a531c426359045b1998f04219d88799810762cd4ad314234"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "1.1.1+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3165f65f62e28e0115a00b2ebdd37eb6f3b641855f9d636d3cd4103767159ad7"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.25.11+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b59c4d22ed448339746c59b905d24568fcbb3ab65a500494f7b8c3e97739f2b"
+dependencies = [
+ "indexmap",
+ "toml_datetime",
+ "toml_parser",
+ "winnow 1.0.2",
+]
+
+[[package]]
+name = "toml_parser"
+version = "1.1.2+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2abe9b86193656635d2411dc43050282ca48aa31c2451210f4202550afb7526"
+dependencies = [
+ "winnow 1.0.2",
+]
+
+[[package]]
+name = "truapi"
+version = "0.3.0"
+dependencies = [
+ "derive_more",
+ "futures",
+ "hex",
+ "parity-scale-codec",
+ "truapi-macros",
+]
+
+[[package]]
+name = "truapi-codegen"
+version = "0.1.0"
+dependencies = [
+ "anyhow",
+ "clap",
+ "convert_case 0.6.0",
+ "indoc",
+ "serde",
+ "serde_json",
+ "tempfile",
+ "truapi",
+]
+
+[[package]]
+name = "truapi-macros"
+version = "0.1.0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "truapi-platform"
+version = "0.1.0"
+dependencies = [
+ "futures",
+ "truapi",
+]
+
+[[package]]
+name = "truapi-server"
+version = "0.1.0"
+dependencies = [
+ "async-trait",
+ "console_error_panic_hook",
+ "derive_more",
+ "futures",
+ "futures-timer",
+ "futures-util",
+ "getrandom 0.2.17",
+ "hex",
+ "js-sys",
+ "parity-scale-codec",
+ "pin-project",
+ "rand",
+ "send_wrapper 0.6.0",
+ "serde_json",
+ "smoldot",
+ "smoldot-light",
+ "thiserror 1.0.69",
+ "tokio",
+ "tokio-tungstenite",
+ "truapi",
+ "truapi-platform",
+ "unicode-normalization",
+ "uniffi",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "web-time",
+]
+
+[[package]]
+name = "tungstenite"
+version = "0.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ef1a641ea34f399a848dea702823bbecfb4c486f911735368f1f137cb8257e1"
+dependencies = [
+ "byteorder",
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "rand",
+ "sha1",
+ "thiserror 1.0.69",
+ "url",
+ "utf-8",
+]
+
+[[package]]
+name = "twox-hash"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ea3136b675547379c4bd395ca6b938e5ad3c3d20fad76e7fe85f9e0d011419c"
+
+[[package]]
+name = "typenum"
+version = "1.20.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40ce102ab67701b8526c123c1bab5cbe42d7040ccfd0f64af1a385808d2f43de"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "unicode-normalization"
+version = "0.1.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5fd4f6878c9cb28d874b009da9e8d183b5abc80117c40bbd187a1fde336be6e8"
+dependencies = [
+ "tinyvec",
+]
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9629274872b2bfaf8d66f5f15725007f635594914870f65218920345aa11aa8c"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "uniffi"
+version = "0.29.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3291800a6b06569f7d3e15bdb6dc235e0f0c8bd3eb07177f430057feb076415f"
+dependencies = [
+ "anyhow",
+ "camino",
+ "cargo_metadata",
+ "clap",
+ "uniffi_bindgen",
+ "uniffi_core",
+ "uniffi_macros",
+ "uniffi_pipeline",
+]
+
+[[package]]
+name = "uniffi-bindgen-cli"
+version = "0.1.0"
+dependencies = [
+ "uniffi",
+]
+
+[[package]]
+name = "uniffi_bindgen"
+version = "0.29.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a04b99fa7796eaaa7b87976a0dbdd1178dc1ee702ea00aca2642003aef9b669e"
+dependencies = [
+ "anyhow",
+ "askama",
+ "camino",
+ "cargo_metadata",
+ "fs-err",
+ "glob",
+ "goblin",
+ "heck",
+ "indexmap",
+ "once_cell",
+ "serde",
+ "tempfile",
+ "textwrap",
+ "toml",
+ "uniffi_internal_macros",
+ "uniffi_meta",
+ "uniffi_pipeline",
+ "uniffi_udl",
+]
+
+[[package]]
+name = "uniffi_core"
+version = "0.29.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f38a9a27529ccff732f8efddb831b65b1e07f7dea3fd4cacd4a35a8c4b253b98"
 dependencies = [
- "arrayvec",
- "bitvec",
- "byte-slice-cast",
- "const_format",
- "impl-trait-for-tuples",
- "parity-scale-codec-derive",
+ "anyhow",
+ "bytes",
+ "once_cell",
+ "static_assertions",
+]
+
+[[package]]
+name = "uniffi_internal_macros"
+version = "0.29.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09acd2ce09c777dd65ee97c251d33c8a972afc04873f1e3b21eb3492ade16933"
+dependencies = [
+ "anyhow",
+ "indexmap",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "uniffi_macros"
+version = "0.29.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5596f178c4f7aafa1a501c4e0b96236a96bc2ef92bdb453d83e609dad0040152"
+dependencies = [
+ "camino",
+ "fs-err",
+ "once_cell",
+ "proc-macro2",
+ "quote",
+ "serde",
+ "syn",
+ "toml",
+ "uniffi_meta",
+]
+
+[[package]]
+name = "uniffi_meta"
+version = "0.29.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "beadc1f460eb2e209263c49c4f5b19e9a02e00a3b2b393f78ad10d766346ecff"
+dependencies = [
+ "anyhow",
+ "siphasher 0.3.11",
+ "uniffi_internal_macros",
+ "uniffi_pipeline",
+]
+
+[[package]]
+name = "uniffi_pipeline"
+version = "0.29.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd76b3ac8a2d964ca9fce7df21c755afb4c77b054a85ad7a029ad179cc5abb8a"
+dependencies = [
+ "anyhow",
+ "heck",
+ "indexmap",
+ "tempfile",
+ "uniffi_internal_macros",
+]
+
+[[package]]
+name = "uniffi_udl"
+version = "0.29.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4319cf905911d70d5b97ce0f46f101619a22e9a189c8c46d797a9955e9233716"
+dependencies = [
+ "anyhow",
+ "textwrap",
+ "uniffi_meta",
+ "weedle2",
+]
+
+[[package]]
+name = "universal-hash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc1de2c688dc15305988b563c3854064043356019f97a4b46276fe734c4f07ea"
+dependencies = [
+ "crypto-common",
+ "subtle",
+]
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+]
+
+[[package]]
+name = "utf-8"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9"
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "vcpkg"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.3+wasi-0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20064672db26d7cdc89c7798c48a0fdfac8213434a1186e5ef29fd560ae223d6"
+dependencies = [
+ "wit-bindgen 0.57.1",
+]
+
+[[package]]
+name = "wasip3"
+version = "0.4.0+wasi-0.3.0-rc-2026-01-06"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5428f8bf88ea5ddc08faddef2ac4a67e390b88186c703ce6dbd955e1c145aca5"
+dependencies = [
+ "wit-bindgen 0.51.0",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.121"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49ace1d07c165b0864824eee619580c4689389afa9dc9ed3a4c75040d82e6790"
+dependencies = [
+ "cfg-if",
+ "once_cell",
  "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.71"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96492d0d3ffba25305a7dc88720d250b1401d7edca02cc3bcd50633b424673b8"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.121"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e68e6f4afd367a562002c05637acb8578ff2dea1943df76afb9e83d177c8578"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.121"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d95a9ec35c64b2a7cb35d3fead40c4238d0940c86d107136999567a4703259f2"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.121"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4e0100b01e9f0d03189a92b96772a1fb998639d981193d7dbab487302513441"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-encoder"
+version = "0.236.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "724fccfd4f3c24b7e589d333fc0429c68042897a7e8a5f8694f31792471841e7"
+dependencies = [
+ "leb128fmt",
+ "wasmparser 0.236.1",
+]
+
+[[package]]
+name = "wasm-encoder"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
+dependencies = [
+ "leb128fmt",
+ "wasmparser 0.244.0",
+]
+
+[[package]]
+name = "wasm-metadata"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
+dependencies = [
+ "anyhow",
+ "indexmap",
+ "wasm-encoder 0.244.0",
+ "wasmparser 0.244.0",
+]
+
+[[package]]
+name = "wasmi"
+version = "0.40.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a19af97fcb96045dd1d6b4d23e2b4abdbbe81723dbc5c9f016eb52145b320063"
+dependencies = [
+ "arrayvec 0.7.6",
+ "multi-stash",
+ "smallvec",
+ "spin",
+ "wasmi_collections",
+ "wasmi_core",
+ "wasmi_ir",
+ "wasmparser 0.221.3",
+]
+
+[[package]]
+name = "wasmi_collections"
+version = "0.40.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e80d6b275b1c922021939d561574bf376613493ae2b61c6963b15db0e8813562"
+
+[[package]]
+name = "wasmi_core"
+version = "0.40.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a8c51482cc32d31c2c7ff211cd2bedd73c5bd057ba16a2ed0110e7a96097c33"
+dependencies = [
+ "downcast-rs",
+ "libm",
+]
+
+[[package]]
+name = "wasmi_ir"
+version = "0.40.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e431a14c186db59212a88516788bd68ed51f87aa1e08d1df742522867b5289a"
+dependencies = [
+ "wasmi_core",
+]
+
+[[package]]
+name = "wasmparser"
+version = "0.221.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d06bfa36ab3ac2be0dee563380147a5b81ba10dd8885d7fbbc9eb574be67d185"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "wasmparser"
+version = "0.236.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9b1e81f3eb254cf7404a82cee6926a4a3ccc5aad80cc3d43608a070c67aa1d7"
+dependencies = [
+ "bitflags",
+ "hashbrown 0.15.5",
+ "indexmap",
+ "semver",
  "serde",
 ]
 
 [[package]]
-name = "parity-scale-codec-derive"
-version = "3.7.5"
+name = "wasmparser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe"
+dependencies = [
+ "bitflags",
+ "hashbrown 0.15.5",
+ "indexmap",
+ "semver",
+]
+
+[[package]]
+name = "wasmprinter"
+version = "0.236.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2df225df06a6df15b46e3f73ca066ff92c2e023670969f7d50ce7d5e695abbb1"
+dependencies = [
+ "anyhow",
+ "termcolor",
+ "wasmparser 0.236.1",
+]
+
+[[package]]
+name = "wasmtime"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b10306ead921db2c4645ff99867b7539b65e18afd8816d471547f5e6f3b09492"
+dependencies = [
+ "addr2line",
+ "anyhow",
+ "async-trait",
+ "bitflags",
+ "bumpalo",
+ "cc",
+ "cfg-if",
+ "encoding_rs",
+ "hashbrown 0.15.5",
+ "indexmap",
+ "libc",
+ "log",
+ "mach2",
+ "memfd",
+ "object",
+ "once_cell",
+ "postcard",
+ "pulley-interpreter",
+ "rustix",
+ "semver",
+ "serde",
+ "serde_derive",
+ "smallvec",
+ "target-lexicon",
+ "wasmparser 0.236.1",
+ "wasmtime-environ",
+ "wasmtime-internal-asm-macros",
+ "wasmtime-internal-component-macro",
+ "wasmtime-internal-component-util",
+ "wasmtime-internal-cranelift",
+ "wasmtime-internal-fiber",
+ "wasmtime-internal-jit-debug",
+ "wasmtime-internal-jit-icache-coherence",
+ "wasmtime-internal-math",
+ "wasmtime-internal-slab",
+ "wasmtime-internal-unwinder",
+ "wasmtime-internal-versioned-export-macros",
+ "wasmtime-internal-winch",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "wasmtime-environ"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7fb2c37ca263d444f33871bf0221e7de0707b2b2bb88165df6db6d58c73375f"
+dependencies = [
+ "anyhow",
+ "cranelift-bitset",
+ "cranelift-entity",
+ "gimli",
+ "indexmap",
+ "log",
+ "object",
+ "postcard",
+ "semver",
+ "serde",
+ "serde_derive",
+ "smallvec",
+ "target-lexicon",
+ "wasm-encoder 0.236.1",
+ "wasmparser 0.236.1",
+ "wasmprinter",
+ "wasmtime-internal-component-util",
+]
+
+[[package]]
+name = "wasmtime-internal-asm-macros"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19c6c0d3c8d2db554a3af8e8d413ff2815362ebce0911808ecfdaaa257438f93"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "wasmtime-internal-component-macro"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3e3f3752466eb0e1f97149e53bf15c0e18ff520fc0a98b4bee1680e6de1c6f0"
+dependencies = [
+ "anyhow",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasmtime-internal-component-util",
+ "wasmtime-internal-wit-bindgen",
+ "wit-parser 0.236.1",
+]
+
+[[package]]
+name = "wasmtime-internal-component-util"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f54018baf62f4e9c616c31f2aeadcf0c202ff691a390ad53e291ae7160b169e"
+
+[[package]]
+name = "wasmtime-internal-cranelift"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a2412f2afb0a5db2a4ac1cfff73247e240aeaa90bf41497ad0a5084b6a24eca"
+dependencies = [
+ "anyhow",
+ "cfg-if",
+ "cranelift-codegen",
+ "cranelift-control",
+ "cranelift-entity",
+ "cranelift-frontend",
+ "cranelift-native",
+ "gimli",
+ "itertools",
+ "log",
+ "object",
+ "pulley-interpreter",
+ "smallvec",
+ "target-lexicon",
+ "thiserror 2.0.18",
+ "wasmparser 0.236.1",
+ "wasmtime-environ",
+ "wasmtime-internal-math",
+ "wasmtime-internal-versioned-export-macros",
+]
+
+[[package]]
+name = "wasmtime-internal-fiber"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ecfdc460dd5d343d88ff1ffaf65ae019feeb6124ddcfd3f39d28331068d25b1f"
+dependencies = [
+ "anyhow",
+ "cc",
+ "cfg-if",
+ "libc",
+ "rustix",
+ "wasmtime-internal-asm-macros",
+ "wasmtime-internal-versioned-export-macros",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "wasmtime-internal-jit-debug"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5abb428a71827b7f90fc64406749883ccc6e58addf6d36974d5e06942011707"
+dependencies = [
+ "cc",
+ "wasmtime-internal-versioned-export-macros",
+]
+
+[[package]]
+name = "wasmtime-internal-jit-icache-coherence"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba6cc13f14c3fb83fb877cb1d5c605e93f7ec1bf7fc1a5e8b361209d2f8ca028"
+dependencies = [
+ "anyhow",
+ "cfg-if",
+ "libc",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "wasmtime-internal-math"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1cb209473a09f4dbd9c87bb9f18b8dcb0c9da30d12a260e3eacf7a1a53b41480"
+dependencies = [
+ "libm",
+]
+
+[[package]]
+name = "wasmtime-internal-slab"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aab4df5a04752106e1ecef9d40145ef28fa033b0d5dd3c839c9b208b2d522183"
+
+[[package]]
+name = "wasmtime-internal-unwinder"
+version = "36.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5359875d29bddb6f7e65e698157714d8d35ebd8ea2a92893d05d6b062147b639"
+dependencies = [
+ "anyhow",
+ "cfg-if",
+ "cranelift-codegen",
+ "log",
+ "object",
+]
+
+[[package]]
+name = "wasmtime-internal-versioned-export-macros"
+version = "36.0.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34b4653168b563151153c9e4c08ebed57fb8262bebfa79711552fa983c623e7a"
+checksum = "2e247bcdd69701743ba386c933b26ebad2ce912ff9cb68b5b71fdb29d39ba04a"
 dependencies = [
- "proc-macro-crate",
  "proc-macro2",
  "quote",
  "syn",
 ]
 
 [[package]]
-name = "pin-project-lite"
-version = "0.2.17"
+name = "wasmtime-internal-winch"
+version = "36.0.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+checksum = "d0298dfd9f57588222b5a92dcffe75894f1ead4e519850f176bde7fcfd105d54"
+dependencies = [
+ "anyhow",
+ "cranelift-codegen",
+ "gimli",
+ "object",
+ "target-lexicon",
+ "wasmparser 0.236.1",
+ "wasmtime-environ",
+ "wasmtime-internal-cranelift",
+ "winch-codegen",
+]
 
 [[package]]
-name = "proc-macro-crate"
-version = "3.5.0"
+name = "wasmtime-internal-wit-bindgen"
+version = "36.0.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e67ba7e9b2b56446f1d419b1d807906278ffa1a658a8a5d8a39dcb1f5a78614f"
+checksum = "1706803e83b9bae726a0f55e7c1bbf78a7421cf2da68c940c70978e91dfc0339"
 dependencies = [
- "toml_edit",
+ "anyhow",
+ "bitflags",
+ "heck",
+ "indexmap",
+ "wit-parser 0.236.1",
 ]
 
 [[package]]
-name = "proc-macro2"
-version = "1.0.106"
+name = "web-sys"
+version = "0.3.98"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+checksum = "4b572dff8bcf38bad0fa19729c89bb5748b2b9b1d8be70cf90df697e3a8f32aa"
 dependencies = [
- "unicode-ident",
+ "js-sys",
+ "wasm-bindgen",
 ]
 
 [[package]]
-name = "quote"
-version = "1.0.45"
+name = "web-time"
+version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
 dependencies = [
- "proc-macro2",
+ "js-sys",
+ "wasm-bindgen",
 ]
 
 [[package]]
-name = "radium"
-version = "0.7.0"
+name = "weedle2"
+version = "5.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
+checksum = "998d2c24ec099a87daf9467808859f9d82b61f1d9c9701251aea037f514eae0e"
+dependencies = [
+ "nom 7.1.3",
+]
 
 [[package]]
-name = "rustc_version"
-version = "0.4.1"
+name = "winapi-util"
+version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "semver",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
-name = "rustversion"
-version = "1.0.22"
+name = "winch-codegen"
+version = "36.0.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+checksum = "2e2d7ea2137be52644d9c42ca5a4899bba07c2ed2db1e66c4c1994adfe35d39e"
+dependencies = [
+ "anyhow",
+ "cranelift-assembler-x64",
+ "cranelift-codegen",
+ "gimli",
+ "regalloc2",
+ "smallvec",
+ "target-lexicon",
+ "thiserror 2.0.18",
+ "wasmparser 0.236.1",
+ "wasmtime-environ",
+ "wasmtime-internal-cranelift",
+ "wasmtime-internal-math",
+]
 
 [[package]]
-name = "semver"
-version = "1.0.28"
+name = "windows-link"
+version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
 
 [[package]]
-name = "serde"
-version = "1.0.228"
+name = "windows-sys"
+version = "0.60.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
 dependencies = [
- "serde_core",
- "serde_derive",
+ "windows-targets",
 ]
 
 [[package]]
-name = "serde_core"
-version = "1.0.228"
+name = "windows-sys"
+version = "0.61.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
 dependencies = [
- "serde_derive",
+ "windows-link",
 ]
 
 [[package]]
-name = "serde_derive"
-version = "1.0.228"
+name = "windows-targets"
+version = "0.53.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
 dependencies = [
- "proc-macro2",
- "quote",
- "syn",
+ "windows-link",
+ "windows_aarch64_gnullvm",
+ "windows_aarch64_msvc",
+ "windows_i686_gnu",
+ "windows_i686_gnullvm",
+ "windows_i686_msvc",
+ "windows_x86_64_gnu",
+ "windows_x86_64_gnullvm",
+ "windows_x86_64_msvc",
 ]
 
 [[package]]
-name = "serde_json"
-version = "1.0.149"
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "winnow"
+version = "0.7.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
 dependencies = [
- "itoa",
  "memchr",
- "serde",
- "serde_core",
- "zmij",
 ]
 
 [[package]]
-name = "slab"
-version = "0.4.12"
+name = "winnow"
+version = "1.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+checksum = "2ee1708bef14716a11bae175f579062d4554d95be2c6829f518df847b7b3fdd0"
+dependencies = [
+ "memchr",
+]
 
 [[package]]
-name = "strsim"
-version = "0.11.1"
+name = "wit-bindgen"
+version = "0.51.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
+dependencies = [
+ "wit-bindgen-rust-macro",
+]
 
 [[package]]
-name = "syn"
-version = "2.0.117"
+name = "wit-bindgen"
+version = "0.57.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
+
+[[package]]
+name = "wit-bindgen-core"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"
+dependencies = [
+ "anyhow",
+ "heck",
+ "wit-parser 0.244.0",
+]
+
+[[package]]
+name = "wit-bindgen-rust"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c566e0f4b284dd6561c786d9cb0142da491f46a9fbed79ea69cdad5db17f21"
+dependencies = [
+ "anyhow",
+ "heck",
+ "indexmap",
+ "prettyplease",
+ "syn",
+ "wasm-metadata",
+ "wit-bindgen-core",
+ "wit-component",
+]
+
+[[package]]
+name = "wit-bindgen-rust-macro"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c0f9bfd77e6a48eccf51359e3ae77140a7f50b1e2ebfe62422d8afdaffab17a"
 dependencies = [
+ "anyhow",
+ "prettyplease",
  "proc-macro2",
  "quote",
- "unicode-ident",
+ "syn",
+ "wit-bindgen-core",
+ "wit-bindgen-rust",
 ]
 
 [[package]]
-name = "tap"
-version = "1.0.1"
+name = "wit-component"
+version = "0.244.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "55937e1799185b12863d447f42597ed69d9928686b8d88a1df17376a097d8369"
+checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2"
+dependencies = [
+ "anyhow",
+ "bitflags",
+ "indexmap",
+ "log",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "wasm-encoder 0.244.0",
+ "wasm-metadata",
+ "wasmparser 0.244.0",
+ "wit-parser 0.244.0",
+]
 
 [[package]]
-name = "toml_datetime"
-version = "1.1.1+spec-1.1.0"
+name = "wit-parser"
+version = "0.236.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3165f65f62e28e0115a00b2ebdd37eb6f3b641855f9d636d3cd4103767159ad7"
+checksum = "16e4833a20cd6e85d6abfea0e63a399472d6f88c6262957c17f546879a80ba15"
 dependencies = [
- "serde_core",
+ "anyhow",
+ "id-arena",
+ "indexmap",
+ "log",
+ "semver",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "unicode-xid",
+ "wasmparser 0.236.1",
 ]
 
 [[package]]
-name = "toml_edit"
-version = "0.25.11+spec-1.1.0"
+name = "wit-parser"
+version = "0.244.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b59c4d22ed448339746c59b905d24568fcbb3ab65a500494f7b8c3e97739f2b"
+checksum = "ecc8ac4bc1dc3381b7f59c34f00b67e18f910c2c0f50015669dde7def656a736"
 dependencies = [
+ "anyhow",
+ "id-arena",
  "indexmap",
- "toml_datetime",
- "toml_parser",
- "winnow",
+ "log",
+ "semver",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "unicode-xid",
+ "wasmparser 0.244.0",
 ]
 
 [[package]]
-name = "toml_parser"
-version = "1.1.2+spec-1.1.0"
+name = "writeable"
+version = "0.6.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a2abe9b86193656635d2411dc43050282ca48aa31c2451210f4202550afb7526"
+checksum = "1ffae5123b2d3fc086436f8834ae3ab053a283cfac8fe0a0b8eaae044768a4c4"
+
+[[package]]
+name = "wyz"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f360fc0b24296329c78fda852a1e9ae82de9cf7b27dae4b7f62f118f77b9ed"
 dependencies = [
- "winnow",
+ "tap",
 ]
 
 [[package]]
-name = "truapi"
-version = "0.3.0"
+name = "x25519-dalek"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7e468321c81fb07fa7f4c636c3972b9100f0346e5b6a9f2bd0603a52f7ed277"
 dependencies = [
- "derive_more",
- "futures",
- "hex",
- "parity-scale-codec",
- "truapi-macros",
+ "curve25519-dalek",
+ "rand_core",
+ "serde",
+ "zeroize",
 ]
 
 [[package]]
-name = "truapi-codegen"
-version = "0.1.0"
+name = "yoke"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "abe8c5fda708d9ca3df187cae8bfb9ceda00dd96231bed36e445a1a48e66f9ca"
 dependencies = [
- "anyhow",
- "clap",
- "convert_case 0.6.0",
- "indoc",
- "serde",
- "serde_json",
- "truapi",
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
 ]
 
 [[package]]
-name = "truapi-macros"
-version = "0.1.0"
+name = "yoke-derive"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de844c262c8848816172cef550288e7dc6c7b7814b4ee56b3e1553f275f1858e"
 dependencies = [
  "proc-macro2",
  "quote",
  "syn",
+ "synstructure",
 ]
 
 [[package]]
-name = "unicode-ident"
-version = "1.0.24"
+name = "zerocopy"
+version = "0.8.48"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+checksum = "eed437bf9d6692032087e337407a86f04cd8d6a16a37199ed57949d415bd68e9"
+dependencies = [
+ "zerocopy-derive",
+]
 
 [[package]]
-name = "unicode-segmentation"
-version = "1.13.2"
+name = "zerocopy-derive"
+version = "0.8.48"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9629274872b2bfaf8d66f5f15725007f635594914870f65218920345aa11aa8c"
+checksum = "70e3cd084b1788766f53af483dd21f93881ff30d7320490ec3ef7526d203bad4"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
 
 [[package]]
-name = "unicode-xid"
-version = "0.2.6"
+name = "zerofrom"
+version = "0.1.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+checksum = "0ec05a11813ea801ff6d75110ad09cd0824ddba17dfe17128ea0d5f68e6c5272"
+dependencies = [
+ "zerofrom-derive",
+]
 
 [[package]]
-name = "utf8parse"
-version = "0.2.2"
+name = "zerofrom-derive"
+version = "0.1.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+checksum = "11532158c46691caf0f2593ea8358fed6bbf68a0315e80aae9bd41fbade684a1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
 
 [[package]]
-name = "windows-link"
-version = "0.2.1"
+name = "zeroize"
+version = "1.8.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+dependencies = [
+ "zeroize_derive",
+]
 
 [[package]]
-name = "windows-sys"
-version = "0.61.2"
+name = "zeroize_derive"
+version = "1.4.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+checksum = "85a5b4158499876c763cb03bc4e49185d3cccbabb15b33c627f7884f43db852e"
 dependencies = [
- "windows-link",
+ "proc-macro2",
+ "quote",
+ "syn",
 ]
 
 [[package]]
-name = "winnow"
-version = "1.0.2"
+name = "zerotrie"
+version = "0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2ee1708bef14716a11bae175f579062d4554d95be2c6829f518df847b7b3fdd0"
+checksum = "0f9152d31db0792fa83f70fb2f83148effb5c1f5b8c7686c3459e361d9bc20bf"
 dependencies = [
- "memchr",
+ "displaydoc",
+ "yoke",
+ "zerofrom",
 ]
 
 [[package]]
-name = "wyz"
-version = "0.5.1"
+name = "zerovec"
+version = "0.11.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "05f360fc0b24296329c78fda852a1e9ae82de9cf7b27dae4b7f62f118f77b9ed"
+checksum = "90f911cbc359ab6af17377d242225f4d75119aec87ea711a880987b18cd7b239"
 dependencies = [
- "tap",
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "625dc425cab0dca6dc3c3319506e6593dcb08a9f387ea3b284dbd52a92c40555"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
 ]
 
 [[package]]
diff --git a/Makefile b/Makefile
index 805635a5..ec278fe5 100644
--- a/Makefile
+++ b/Makefile
@@ -3,10 +3,11 @@
 # Run `make help` for the list of targets.
 
 .DEFAULT_GOAL := help
-.PHONY: help setup build codegen test check playground
+.PHONY: help setup build codegen test check playground wasm uniffi android-publish-local
 
 TRUAPI_PKG := js/packages/truapi
 PLAYGROUND := playground
+JS_PACKAGES := js/packages
 
 help: ## Show this help.
 	@awk 'BEGIN { FS = ":.*##"; printf "Usage: make <target>\n\nTargets:\n" } \
@@ -20,21 +21,59 @@ setup: ## First-time setup: submodules + JS dependencies.
 build: ## Build the Rust workspace and the TypeScript client.
 	cargo build --workspace
 	cd $(TRUAPI_PKG) && npm run build
+	cd $(JS_PACKAGES)/truapi-host-wasm && npm install --no-fund --no-audit && npm run build
 
 codegen: ## Regenerate the TypeScript client from the Rust crate.
 	./scripts/codegen.sh
 	cd $(PLAYGROUND) && rm -rf node_modules/@parity && yarn install
 
+wasm: ## Rebuild the truapi-server WASM artifacts under js/packages/truapi-host-wasm/dist/wasm/.
+	cd $(JS_PACKAGES)/truapi-host-wasm && npm run build:wasm
+
+UNIFFI_CDYLIB_DIR := target/release
+UNAME_S := $(shell uname -s)
+ifeq ($(UNAME_S),Darwin)
+UNIFFI_CDYLIB := $(UNIFFI_CDYLIB_DIR)/libtruapi_server.dylib
+else
+UNIFFI_CDYLIB := $(UNIFFI_CDYLIB_DIR)/libtruapi_server.so
+endif
+
+UNIFFI_SWIFT_TMP := target/uniffi-swift-out
+
+uniffi: ## Regenerate Kotlin + Swift bindings from truapi-server cdylib.
+	cargo build -p truapi-server --release --features ws-bridge
+	cargo run -p uniffi-bindgen-cli -- generate \
+		--library $(UNIFFI_CDYLIB) \
+		--language kotlin \
+		--out-dir android/truapi-host/src/main/kotlin/generated
+	rm -rf $(UNIFFI_SWIFT_TMP)
+	mkdir -p $(UNIFFI_SWIFT_TMP)
+	cargo run -p uniffi-bindgen-cli -- generate \
+		--library $(UNIFFI_CDYLIB) \
+		--language swift \
+		--out-dir $(UNIFFI_SWIFT_TMP)
+	cp $(UNIFFI_SWIFT_TMP)/truapi_server.swift \
+		ios/truapi-host/Sources/TrUAPIHost/truapi_server.swift
+	cp $(UNIFFI_SWIFT_TMP)/truapi_serverFFI.h \
+		ios/truapi-host/Sources/truapi_serverFFI/include/truapi_serverFFI.h
+	cp $(UNIFFI_SWIFT_TMP)/truapi_serverFFI.modulemap \
+		ios/truapi-host/Sources/truapi_serverFFI/include/module.modulemap
+
+android-publish-local: ## Publish io.parity:truapi-host-android to ~/.m2 (dev workflow).
+	gradle :truapi-host:publishReleasePublicationToMavenLocal --no-daemon
+
 test: ## Run Rust + TypeScript client tests.
-	cargo test --workspace
+	cargo test --workspace --features ws-bridge
 	cd $(TRUAPI_PKG) && npm test
+	cd $(JS_PACKAGES)/truapi-host-wasm && npm test
 
 check: ## Full verification suite (build, fmt, clippy, test, TS tests, playground build + lint).
 	cargo build --workspace
 	cargo +nightly fmt --check
 	cargo clippy --workspace --all-targets --all-features -- -D warnings
-	cargo test --workspace
+	cargo test --workspace --features ws-bridge
 	cd $(TRUAPI_PKG) && npm run build && npm test
+	cd $(JS_PACKAGES)/truapi-host-wasm && npm install --no-fund --no-audit && npm test
 	cd $(PLAYGROUND) && yarn build && yarn lint
 
 playground: ## Refresh the playground's @parity/truapi snapshot and rebuild.
diff --git a/README.md b/README.md
index a7a206b9..4de00dde 100644
--- a/README.md
+++ b/README.md
@@ -55,14 +55,47 @@ rust/crates/
   truapi/                Rust trait and type definitions (v01, v02)
   truapi-codegen/        rustdoc JSON to TypeScript client + Rust dispatcher
   truapi-macros/         #[wire(id = N)] proc-macro
+  truapi-platform/       Host syscall traits used by truapi-server (storage, navigation, consent, ...)
+  truapi-server/         Rust runtime that hosts implement: dispatcher, frames, SCALE, WASM + UniFFI surfaces
+  uniffi-bindgen-cli/    Thin CLI wrapper around uniffi::uniffi_bindgen_main() for the workspace
 js/packages/
-  truapi/                @parity/truapi TypeScript client
-playground/              Interactive Next.js playground (truapi-playground.dot)
-hosts/dotli/             dotli host, vendored as a submodule
-docs/                    Design docs, RFCs, feature proposals
-scripts/codegen.sh       Regenerate the TS client from the Rust source
+  truapi/                  @parity/truapi TypeScript client
+  truapi-host/             @parity/truapi-host host-side codegen and dispatcher (no shared core)
+  truapi-host-wasm/        @parity/truapi-host-wasm: WASM-backed host runtime; entries `.` (core),
+                           `/web` (iframe + Web Worker), `/electron` (MessagePortMain), `/worker-runtime`
+android/
+  truapi-host/             io.parity:truapi-host-android Maven library (AAR + UniFFI Kotlin bindings)
+ios/
+  truapi-host/             TrUAPIHost Swift Package (sources + UniFFI Swift bindings)
+playground/                Interactive Next.js playground (truapi-playground.dot)
+hosts/dotli/               dotli host, vendored as a submodule
+docs/                      Design docs, RFCs, feature proposals
+scripts/codegen.sh         Regenerate the TS client from the Rust source
 ```
 
+### Native + JS host SDKs
+
+JS hosts integrate the Rust core through [`@parity/truapi-host-wasm`](js/packages/truapi-host-wasm),
+a single package with tree-shakeable subpath entries (the separate
+`@parity/truapi-host`, with no shared core, is for hosts that bring their own runtime):
+
+- `@parity/truapi-host-wasm` (the `.` entry) ships the `truapi-server` WASM bundle, the
+  `Provider` factories that drive it, the dispatcher adapter, and `createNodeWasmProvider`.
+- `@parity/truapi-host-wasm/web` wires the WASM provider into a browser host: the iframe
+  MessageChannel handshake (`createIframeHost`) plus `createWebWorkerProvider`.
+- `@parity/truapi-host-wasm/electron` wraps an Electron `MessagePortMain` as a `Provider`.
+- `@parity/truapi-host-wasm/worker-runtime` is the Web Worker entrypoint so the WASM core can
+  run off the page main thread.
+
+Native shells sit one level under `android/` and `ios/` and ship as versioned packages from git tags:
+
+- [`android/truapi-host/`](android/truapi-host) builds the `io.parity:truapi-host-android` Maven artifact (AAR + POM + sources jar). Distributed via JitPack as `com.github.paritytech.truapi:truapi-host:<tag>`.
+- [`ios/truapi-host/`](ios/truapi-host) is a Swift Package consumed via `.package(url:)` or `.package(path:)`.
+
+The nested layout leaves room for additional packages alongside (e.g. `android/widgets/`, `ios/something-else/`) without re-shaping the top-level directories.
+
+Both link the `truapi-server` cdylib via UniFFI-generated bindings. The bindings are regenerated from the same Rust source via `make uniffi`.
+
 ## How it works
 
 1. The protocol is defined as Rust traits in [`rust/crates/truapi/`](rust/crates/truapi/), with each method tagged `#[wire(id = N)]` for a stable byte-level dispatch table. Every method's doc comment must carry a ` ```ts ` example, which codegen extracts into the playground's EXAMPLE tab; the build fails if any method is missing one.
@@ -78,9 +111,11 @@ Common tasks are wrapped in the top-level `Makefile`. Run `make help` for the fu
 
 ```bash
 make setup    # submodules + JS dependencies
-make build    # Rust workspace + TypeScript client
-make test     # Rust + TypeScript client tests
+make build    # Rust workspace + TypeScript client + @parity/truapi-host-* packages
+make test     # Rust + TypeScript client + @parity/truapi-host-* tests
 make check    # full suite: build, fmt, clippy, test, TS tests, playground build + lint
+make wasm     # rebuild truapi-server WASM artifacts under js/packages/truapi-host-wasm/dist/wasm/
+make uniffi   # regenerate UniFFI Kotlin + Swift bindings under android/truapi-host/ and ios/truapi-host/
 ```
 
 To run the playground locally:
diff --git a/android/.gitignore b/android/.gitignore
new file mode 100644
index 00000000..98778d9e
--- /dev/null
+++ b/android/.gitignore
@@ -0,0 +1,5 @@
+.gradle/
+build/
+local.properties
+*.iml
+.idea/
diff --git a/android/truapi-host/README.md b/android/truapi-host/README.md
new file mode 100644
index 00000000..6df39fb5
--- /dev/null
+++ b/android/truapi-host/README.md
@@ -0,0 +1,212 @@
+# TrUAPI Android host adapter
+
+*Kotlin wrapper around the TrUAPI Rust core (UniFFI). Wire decoding, request routing, and subscription lifecycle stay in the Rust core; products connect through the localhost WebSocket bridge.*
+
+Distributed as a Maven artifact built on demand from git tags by [JitPack](https://jitpack.io/), no Maven Central account required on either side.
+
+## Consume
+
+Add the JitPack Maven repository and the artifact to your app's Gradle build:
+
+```kotlin
+// settings.gradle.kts
+dependencyResolutionManagement {
+    repositories {
+        google()
+        mavenCentral()
+        maven { url = uri("https://jitpack.io") }
+    }
+}
+```
+
+```kotlin
+// app/build.gradle.kts
+dependencies {
+    implementation("com.github.paritytech.truapi:truapi-host:0.1.0")
+}
+```
+
+JitPack fetches the tag `0.1.0` from `paritytech/truapi`, runs `gradle :truapi-host:publishReleasePublicationToMavenLocal` against it (driven by `jitpack.yml` at the repo root), and serves the resulting AAR + POM + sources jar. First fetch takes ~1 minute while JitPack builds; subsequent consumers hit the cache.
+
+The artifact bundles the Kotlin host adapter (`io.parity.truapi.*`) and the generated UniFFI bindings (`uniffi.truapi_server.*`). It does **not** bundle the native `libtruapi_server.so` cdylib, integrators build that per Android ABI and drop it into their app's `src/main/jniLibs/<abi>/` (see "Linking the cdylib" below).
+
+### Compatibility
+
+- **minSdk**: 29 (Android 10). Aligns with the polkadot-app-android-v2 floor.
+- **AGP**: built with 8.5.2; AGP 8.5+ consumers are fine. AAR is forward-compatible with newer AGPs.
+- **Kotlin**: built with 1.9.24. Newer Kotlin compilers (2.x) read 1.9 metadata fine.
+- **Transitive dependency**: the AAR pulls `net.java.dev.jna:jna:5.14.0` (UniFFI's runtime). Consumers that don't already use JNA will see ~1.5MB added to their app.
+
+## Public surface
+
+The public surface lives in [`src/main/kotlin/io/parity/truapi/TrUAPIHost.kt`](src/main/kotlin/io/parity/truapi/TrUAPIHost.kt):
+
+- `HostBridge` - callback bundle the embedding app implements. Splits device permissions, remote permissions, navigation, push, feature support, and scoped storage.
+- `HostStorage` - read/write/clear interface the host backs with its own persistence.
+- `TrUAPIHostCore` - owning wrapper around the UniFFI-generated `NativeTrUApiCore`. Holds the bridge alive for the lifetime of the core, exposes session controls and the localhost WebSocket bridge.
+
+## Architecture
+
+```text
+product app in WebView
+  Uint8Array frames via @parity/truapi createWebSocketProvider
+           |
+           v   ws://127.0.0.1:<port>/?t=<token>
+TrUAPIHostCore.startWsBridge()
+  → libtruapi_server.so (tokio WS server)
+  → Rust dispatcher
+```
+
+The product running in the `WebView` opens a `WebSocket` to the localhost port + token returned by `startWsBridge`. From there the Rust core handles the wire protocol directly. Outbound responses and host-side capability callbacks (`navigateTo`, `pushNotification`, `devicePermission`, `remotePermission`, `featureSupported`, `storage`) reach the embedder through `HostBridge`.
+
+## Permissions split
+
+The core's `Permissions` platform trait has two methods, and so does the bridge:
+
+- `devicePermission(request)` - OS-scoped grants (camera, mic, location, push). `request` is a SCALE-encoded `v01::HostDevicePermissionRequest`.
+- `remotePermission(request)` - per-product capability bundles. `request` is a SCALE-encoded `v01::RemotePermissionRequest`.
+
+Both return a `Boolean` granted flag. SCALE decoding for the UI prompt is done by the `@parity/truapi` JS client (or any consumer that links the protocol crate's types directly).
+
+## Example
+
+> **Threading:** when the WS bridge is running, the Rust core invokes every
+> `HostBridge` callback on the dedicated `truapi-ws-bridge` worker thread, never
+> the UI thread. Marshal any UI work (navigation, prompts, notifications,
+> touching the `WebView`) onto the main thread with
+> `Handler(Looper.getMainLooper())` or a `Dispatchers.Main` `CoroutineScope`.
+> Permission callbacks return synchronously, so block the worker thread (e.g. a
+> `CountDownLatch`) until the main-thread prompt resolves.
+
+```kt
+import android.os.Handler
+import android.os.Looper
+import android.webkit.WebView
+import io.parity.truapi.HostBridge
+import io.parity.truapi.HostStorage
+import io.parity.truapi.TrUAPIHostCore
+import java.util.concurrent.CountDownLatch
+
+class MyStorage : HostStorage {
+    private val map = mutableMapOf<String, ByteArray>()
+    override fun read(key: String) = map[key]
+    override fun write(key: String, value: ByteArray) { map[key] = value }
+    override fun clear(key: String) { map.remove(key) }
+}
+
+class MyBridge(private val webView: WebView) : HostBridge {
+    private val main = Handler(Looper.getMainLooper())
+
+    override val storage = MyStorage()
+
+    override fun navigateTo(url: String) {
+        main.post { /* startActivity(Intent(ACTION_VIEW, Uri.parse(url))) */ }
+    }
+
+    override fun pushNotification(payload: ByteArray) {
+        main.post { /* show notification */ }
+    }
+
+    override fun devicePermission(request: ByteArray): Boolean {
+        // Called on the worker thread; prompt on the main thread and wait.
+        val latch = CountDownLatch(1)
+        var granted = false
+        main.post { /* show prompt, set granted, then */ latch.countDown() }
+        latch.await()
+        return granted
+    }
+
+    override fun remotePermission(request: ByteArray): Boolean = TODO("prompt user")
+    override fun featureSupported(request: ByteArray): Boolean = false
+}
+
+val webView: WebView = existingWebView
+val core = TrUAPIHostCore(MyBridge(webView))
+val endpoint = core.startWsBridge()
+val wsUrl = "ws://127.0.0.1:${endpoint.port.toInt()}/?t=${endpoint.token}"
+
+// Inject `wsUrl` into the product page; product JS calls
+// `@parity/truapi`'s `createWebSocketProvider(wsUrl)` to open the wire.
+webView.loadUrl("https://your-product.example/?truapi=${java.net.URLEncoder.encode(wsUrl, "UTF-8")}")
+```
+
+## Linking the cdylib
+
+The native runtime ships separately. JNA looks for `libtruapi_server.so` in the standard `jniLibs` paths; bundle the per-ABI builds under:
+
+```
+src/main/jniLibs/arm64-v8a/libtruapi_server.so
+src/main/jniLibs/armeabi-v7a/libtruapi_server.so
+src/main/jniLibs/x86_64/libtruapi_server.so
+```
+
+Cross-build the cdylib for each Android ABI from the truapi monorepo. Two options, pick whichever fits the host app's existing toolchain:
+
+**Option A: `mozilla-rust-android-gradle` plugin.** Recommended if the host app already uses it (polkadot-app-android-v2 does, for `bandersnatch-crypto`). Vendor `paritytech/truapi` as a git submodule, add a small Gradle module that points the plugin at `rust/crates/truapi-server`:
+
+```kotlin
+// app/build.gradle.kts (or a dedicated :truapi-cdylib module)
+plugins {
+    alias(libs.plugins.mozilla.rust.android)
+}
+
+cargo {
+    module = "<path>/truapi/rust/crates/truapi-server"
+    libname = "truapi_server"
+    targets = listOf("arm64", "arm", "x86_64")
+    profile = "release"
+    features { defaultAnd(arrayOf("ws-bridge")) }
+}
+
+tasks.matching { it.name.matches("merge.*JniLibFolders".toRegex()) }.configureEach {
+    inputs.dir(layout.buildDirectory.dir("rustJniLibs/android"))
+    dependsOn("cargoBuild")
+}
+```
+
+**Option B: `cargo-ndk` from the command line.** Standalone, no Gradle plugin required:
+
+```bash
+cargo install cargo-ndk
+cargo ndk -t arm64-v8a -t armeabi-v7a -t x86_64 \
+  -o app/src/main/jniLibs \
+  build --release -p truapi-server --features ws-bridge
+```
+
+Both options require the Android NDK installed and the matching Rust targets (`rustup target add aarch64-linux-android armv7-linux-androideabi x86_64-linux-android`).
+
+Pre-built per-ABI `.so` files bundled inside the AAR are tracked as a follow-up so consumers eventually don't need a Rust toolchain at all.
+
+## Maintainers: cutting a release
+
+JitPack builds on demand from any git tag in `paritytech/truapi`, so a release is just:
+
+1. Bump `publicationVersion` in `android/truapi-host/build.gradle.kts`.
+2. Commit. Open a PR. Merge.
+3. Tag the merge commit with the version: `git tag truapi-host-android@0.1.0 && git push origin truapi-host-android@0.1.0`.
+
+That's the entire release flow, the iOS Swift Package follows the same pattern. The first consumer to pull the tag will trigger JitPack to build the artifact; subsequent fetches hit the cache.
+
+For local development, publish into the dev `~/.m2`:
+
+```bash
+gradle :truapi-host:publishReleasePublicationToMavenLocal
+# or
+make android-publish-local
+```
+
+The artifact lands under `~/.m2/repository/io/parity/truapi-host-android/<version>/`. Consumers pointing at `mavenLocal()` can resolve it via `io.parity:truapi-host-android:<version>`. These local coordinates differ from the JitPack consumer coordinate (`com.github.paritytech.truapi:truapi-host:<tag>`): JitPack derives the group and artifactId from the repo and Gradle subproject, overriding the `io.parity:truapi-host-android` coordinates set in `build.gradle.kts`.
+
+## Regenerating the UniFFI bindings
+
+The committed Kotlin bindings under `src/main/kotlin/generated/uniffi/` are produced from the workspace `uniffi-bindgen-cli`:
+
+```bash
+cargo build -p truapi-server --release --features ws-bridge
+cargo run -p uniffi-bindgen-cli -- generate \
+  --library target/release/libtruapi_server.so \
+  --language kotlin \
+  --out-dir android/truapi-host/src/main/kotlin/generated
+```
+
+Or run `make uniffi` from the repo root.
diff --git a/android/truapi-host/build.gradle.kts b/android/truapi-host/build.gradle.kts
new file mode 100644
index 00000000..c79d8a3c
--- /dev/null
+++ b/android/truapi-host/build.gradle.kts
@@ -0,0 +1,118 @@
+// TrUAPI Android host adapter.
+//
+// Publishes `io.parity:truapi-host-android` to Maven. Products running in a
+// `WebView` connect to the Rust core via its localhost WebSocket bridge
+// (`TrUAPIHostCore.startWsBridge`); the Rust core (compiled to
+// `libtruapi_server.so`) handles wire decoding, routing, subscription
+// lifecycle, and host capability dispatch.
+
+plugins {
+    id("com.android.library")
+    id("org.jetbrains.kotlin.android")
+    id("maven-publish")
+}
+
+android {
+    namespace = "io.parity.truapi"
+    compileSdk = 34
+
+    defaultConfig {
+        // minSdk 29 matches the polkadot-app-android-v2 floor; raise here
+        // first and bump consumers' floors if we ever depend on a newer API.
+        minSdk = 29
+        consumerProguardFiles("consumer-rules.pro")
+    }
+
+    sourceSets {
+        getByName("main") {
+            java.srcDirs("src/main/kotlin")
+            manifest.srcFile("src/main/AndroidManifest.xml")
+        }
+    }
+
+    compileOptions {
+        sourceCompatibility = JavaVersion.VERSION_17
+        targetCompatibility = JavaVersion.VERSION_17
+    }
+
+    kotlinOptions {
+        jvmTarget = "17"
+    }
+
+    publishing {
+        singleVariant("release") {
+            withSourcesJar()
+            withJavadocJar()
+        }
+    }
+}
+
+dependencies {
+    // UniFFI Kotlin bindings use JNA for FFI.
+    api("net.java.dev.jna:jna:5.14.0@aar")
+}
+
+// Coordinates for the local Maven publication (`publishToMavenLocal`).
+// Distribution is via JitPack: a git tag drives `jitpack.yml`, and JitPack
+// derives the consumer coordinates from the repo + subproject as
+// `com.github.paritytech.truapi:truapi-host:<tag>`, overriding the group and
+// artifactId below. These fields only matter for local testing.
+val publicationGroup = "io.parity"
+val publicationArtifact = "truapi-host-android"
+val publicationVersion = "0.1.0"
+
+group = publicationGroup
+version = publicationVersion
+
+publishing {
+    publications {
+        register<MavenPublication>("release") {
+            groupId = publicationGroup
+            artifactId = publicationArtifact
+            version = publicationVersion
+
+            afterEvaluate {
+                from(components["release"])
+            }
+
+            pom {
+                name.set("TrUAPI Android host adapter")
+                description.set(
+                    "Kotlin wrapper around the TrUAPI Rust core (UniFFI). " +
+                        "Hosts integrating a `WebView`-based product link the " +
+                        "`libtruapi_server` cdylib and route product traffic " +
+                        "through the localhost WebSocket bridge."
+                )
+                url.set("https://github.com/paritytech/truapi")
+                licenses {
+                    license {
+                        name.set("MIT")
+                        url.set("https://github.com/paritytech/truapi/blob/main/LICENSE")
+                    }
+                }
+                scm {
+                    connection.set("scm:git:https://github.com/paritytech/truapi.git")
+                    developerConnection.set("scm:git:ssh://git@github.com/paritytech/truapi.git")
+                    url.set("https://github.com/paritytech/truapi")
+                }
+                developers {
+                    developer {
+                        name.set("Parity Technologies")
+                        email.set("admin@parity.io")
+                        organization.set("Parity Technologies")
+                        organizationUrl.set("https://parity.io")
+                    }
+                }
+            }
+        }
+    }
+
+    repositories {
+        // Maven Local for `gradle publishToMavenLocal` during development
+        // and for JitPack's build environment (see `jitpack.yml`).
+        // Consumers fetch the published artifact via JitPack at
+        // `com.github.paritytech.truapi:truapi-host:<tag>` after the
+        // repo is tagged.
+        mavenLocal()
+    }
+}
diff --git a/android/truapi-host/consumer-rules.pro b/android/truapi-host/consumer-rules.pro
new file mode 100644
index 00000000..759ad9b2
--- /dev/null
+++ b/android/truapi-host/consumer-rules.pro
@@ -0,0 +1,11 @@
+# ProGuard / R8 rules applied to consumers of `io.parity:truapi-host-android`.
+#
+# JNA reflects into our generated UniFFI types at runtime, so the bindings
+# package and the public Kotlin surface must survive shrinking.
+
+-keep class uniffi.truapi_server.** { *; }
+-keep class io.parity.truapi.** { *; }
+
+# JNA itself.
+-keep class com.sun.jna.** { *; }
+-keepclassmembers class * extends com.sun.jna.** { *; }
diff --git a/android/truapi-host/src/main/AndroidManifest.xml b/android/truapi-host/src/main/AndroidManifest.xml
new file mode 100644
index 00000000..8072ee00
--- /dev/null
+++ b/android/truapi-host/src/main/AndroidManifest.xml
@@ -0,0 +1,2 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest />
diff --git a/android/truapi-host/src/main/kotlin/generated/uniffi/truapi_server/truapi_server.kt b/android/truapi-host/src/main/kotlin/generated/uniffi/truapi_server/truapi_server.kt
new file mode 100644
index 00000000..6a12a4e8
--- /dev/null
+++ b/android/truapi-host/src/main/kotlin/generated/uniffi/truapi_server/truapi_server.kt
@@ -0,0 +1,2369 @@
+// This file was autogenerated by some hot garbage in the `uniffi` crate.
+// Trust me, you don't want to mess with it!
+
+@file:Suppress("NAME_SHADOWING")
+
+package uniffi.truapi_server
+
+// Common helper code.
+//
+// Ideally this would live in a separate .kt file where it can be unittested etc
+// in isolation, and perhaps even published as a re-useable package.
+//
+// However, it's important that the details of how this helper code works (e.g. the
+// way that different builtin types are passed across the FFI) exactly match what's
+// expected by the Rust code on the other side of the interface. In practice right
+// now that means coming from the exact some version of `uniffi` that was used to
+// compile the Rust component. The easiest way to ensure this is to bundle the Kotlin
+// helpers directly inline like we're doing here.
+
+import com.sun.jna.Library
+import com.sun.jna.IntegerType
+import com.sun.jna.Native
+import com.sun.jna.Pointer
+import com.sun.jna.Structure
+import com.sun.jna.Callback
+import com.sun.jna.ptr.*
+import java.nio.ByteBuffer
+import java.nio.ByteOrder
+import java.nio.CharBuffer
+import java.nio.charset.CodingErrorAction
+import java.util.concurrent.atomic.AtomicLong
+import java.util.concurrent.ConcurrentHashMap
+import java.util.concurrent.atomic.AtomicBoolean
+
+// This is a helper for safely working with byte buffers returned from the Rust code.
+// A rust-owned buffer is represented by its capacity, its current length, and a
+// pointer to the underlying data.
+
+/**
+ * @suppress
+ */
+@Structure.FieldOrder("capacity", "len", "data")
+open class RustBuffer : Structure() {
+    // Note: `capacity` and `len` are actually `ULong` values, but JVM only supports signed values.
+    // When dealing with these fields, make sure to call `toULong()`.
+    @JvmField var capacity: Long = 0
+    @JvmField var len: Long = 0
+    @JvmField var data: Pointer? = null
+
+    class ByValue: RustBuffer(), Structure.ByValue
+    class ByReference: RustBuffer(), Structure.ByReference
+
+   internal fun setValue(other: RustBuffer) {
+        capacity = other.capacity
+        len = other.len
+        data = other.data
+    }
+
+    companion object {
+        internal fun alloc(size: ULong = 0UL) = uniffiRustCall() { status ->
+            // Note: need to convert the size to a `Long` value to make this work with JVM.
+            UniffiLib.INSTANCE.ffi_truapi_server_rustbuffer_alloc(size.toLong(), status)
+        }.also {
+            if(it.data == null) {
+               throw RuntimeException("RustBuffer.alloc() returned null data pointer (size=${size})")
+           }
+        }
+
+        internal fun create(capacity: ULong, len: ULong, data: Pointer?): RustBuffer.ByValue {
+            var buf = RustBuffer.ByValue()
+            buf.capacity = capacity.toLong()
+            buf.len = len.toLong()
+            buf.data = data
+            return buf
+        }
+
+        internal fun free(buf: RustBuffer.ByValue) = uniffiRustCall() { status ->
+            UniffiLib.INSTANCE.ffi_truapi_server_rustbuffer_free(buf, status)
+        }
+    }
+
+    @Suppress("TooGenericExceptionThrown")
+    fun asByteBuffer() =
+        this.data?.getByteBuffer(0, this.len.toLong())?.also {
+            it.order(ByteOrder.BIG_ENDIAN)
+        }
+}
+
+/**
+ * The equivalent of the `*mut RustBuffer` type.
+ * Required for callbacks taking in an out pointer.
+ *
+ * Size is the sum of all values in the struct.
+ *
+ * @suppress
+ */
+class RustBufferByReference : ByReference(16) {
+    /**
+     * Set the pointed-to `RustBuffer` to the given value.
+     */
+    fun setValue(value: RustBuffer.ByValue) {
+        // NOTE: The offsets are as they are in the C-like struct.
+        val pointer = getPointer()
+        pointer.setLong(0, value.capacity)
+        pointer.setLong(8, value.len)
+        pointer.setPointer(16, value.data)
+    }
+
+    /**
+     * Get a `RustBuffer.ByValue` from this reference.
+     */
+    fun getValue(): RustBuffer.ByValue {
+        val pointer = getPointer()
+        val value = RustBuffer.ByValue()
+        value.writeField("capacity", pointer.getLong(0))
+        value.writeField("len", pointer.getLong(8))
+        value.writeField("data", pointer.getLong(16))
+
+        return value
+    }
+}
+
+// This is a helper for safely passing byte references into the rust code.
+// It's not actually used at the moment, because there aren't many things that you
+// can take a direct pointer to in the JVM, and if we're going to copy something
+// then we might as well copy it into a `RustBuffer`. But it's here for API
+// completeness.
+
+@Structure.FieldOrder("len", "data")
+internal open class ForeignBytes : Structure() {
+    @JvmField var len: Int = 0
+    @JvmField var data: Pointer? = null
+
+    class ByValue : ForeignBytes(), Structure.ByValue
+}
+/**
+ * The FfiConverter interface handles converter types to and from the FFI
+ *
+ * All implementing objects should be public to support external types.  When a
+ * type is external we need to import it's FfiConverter.
+ *
+ * @suppress
+ */
+public interface FfiConverter<KotlinType, FfiType> {
+    // Convert an FFI type to a Kotlin type
+    fun lift(value: FfiType): KotlinType
+
+    // Convert an Kotlin type to an FFI type
+    fun lower(value: KotlinType): FfiType
+
+    // Read a Kotlin type from a `ByteBuffer`
+    fun read(buf: ByteBuffer): KotlinType
+
+    // Calculate bytes to allocate when creating a `RustBuffer`
+    //
+    // This must return at least as many bytes as the write() function will
+    // write. It can return more bytes than needed, for example when writing
+    // Strings we can't know the exact bytes needed until we the UTF-8
+    // encoding, so we pessimistically allocate the largest size possible (3
+    // bytes per codepoint).  Allocating extra bytes is not really a big deal
+    // because the `RustBuffer` is short-lived.
+    fun allocationSize(value: KotlinType): ULong
+
+    // Write a Kotlin type to a `ByteBuffer`
+    fun write(value: KotlinType, buf: ByteBuffer)
+
+    // Lower a value into a `RustBuffer`
+    //
+    // This method lowers a value into a `RustBuffer` rather than the normal
+    // FfiType.  It's used by the callback interface code.  Callback interface
+    // returns are always serialized into a `RustBuffer` regardless of their
+    // normal FFI type.
+    fun lowerIntoRustBuffer(value: KotlinType): RustBuffer.ByValue {
+        val rbuf = RustBuffer.alloc(allocationSize(value))
+        try {
+            val bbuf = rbuf.data!!.getByteBuffer(0, rbuf.capacity).also {
+                it.order(ByteOrder.BIG_ENDIAN)
+            }
+            write(value, bbuf)
+            rbuf.writeField("len", bbuf.position().toLong())
+            return rbuf
+        } catch (e: Throwable) {
+            RustBuffer.free(rbuf)
+            throw e
+        }
+    }
+
+    // Lift a value from a `RustBuffer`.
+    //
+    // This here mostly because of the symmetry with `lowerIntoRustBuffer()`.
+    // It's currently only used by the `FfiConverterRustBuffer` class below.
+    fun liftFromRustBuffer(rbuf: RustBuffer.ByValue): KotlinType {
+        val byteBuf = rbuf.asByteBuffer()!!
+        try {
+           val item = read(byteBuf)
+           if (byteBuf.hasRemaining()) {
+               throw RuntimeException("junk remaining in buffer after lifting, something is very wrong!!")
+           }
+           return item
+        } finally {
+            RustBuffer.free(rbuf)
+        }
+    }
+}
+
+/**
+ * FfiConverter that uses `RustBuffer` as the FfiType
+ *
+ * @suppress
+ */
+public interface FfiConverterRustBuffer<KotlinType>: FfiConverter<KotlinType, RustBuffer.ByValue> {
+    override fun lift(value: RustBuffer.ByValue) = liftFromRustBuffer(value)
+    override fun lower(value: KotlinType) = lowerIntoRustBuffer(value)
+}
+// A handful of classes and functions to support the generated data structures.
+// This would be a good candidate for isolating in its own ffi-support lib.
+
+internal const val UNIFFI_CALL_SUCCESS = 0.toByte()
+internal const val UNIFFI_CALL_ERROR = 1.toByte()
+internal const val UNIFFI_CALL_UNEXPECTED_ERROR = 2.toByte()
+
+@Structure.FieldOrder("code", "error_buf")
+internal open class UniffiRustCallStatus : Structure() {
+    @JvmField var code: Byte = 0
+    @JvmField var error_buf: RustBuffer.ByValue = RustBuffer.ByValue()
+
+    class ByValue: UniffiRustCallStatus(), Structure.ByValue
+
+    fun isSuccess(): Boolean {
+        return code == UNIFFI_CALL_SUCCESS
+    }
+
+    fun isError(): Boolean {
+        return code == UNIFFI_CALL_ERROR
+    }
+
+    fun isPanic(): Boolean {
+        return code == UNIFFI_CALL_UNEXPECTED_ERROR
+    }
+
+    companion object {
+        fun create(code: Byte, errorBuf: RustBuffer.ByValue): UniffiRustCallStatus.ByValue {
+            val callStatus = UniffiRustCallStatus.ByValue()
+            callStatus.code = code
+            callStatus.error_buf = errorBuf
+            return callStatus
+        }
+    }
+}
+
+class InternalException(message: String) : kotlin.Exception(message)
+
+/**
+ * Each top-level error class has a companion object that can lift the error from the call status's rust buffer
+ *
+ * @suppress
+ */
+interface UniffiRustCallStatusErrorHandler<E> {
+    fun lift(error_buf: RustBuffer.ByValue): E;
+}
+
+// Helpers for calling Rust
+// In practice we usually need to be synchronized to call this safely, so it doesn't
+// synchronize itself
+
+// Call a rust function that returns a Result<>.  Pass in the Error class companion that corresponds to the Err
+private inline fun <U, E: kotlin.Exception> uniffiRustCallWithError(errorHandler: UniffiRustCallStatusErrorHandler<E>, callback: (UniffiRustCallStatus) -> U): U {
+    var status = UniffiRustCallStatus()
+    val return_value = callback(status)
+    uniffiCheckCallStatus(errorHandler, status)
+    return return_value
+}
+
+// Check UniffiRustCallStatus and throw an error if the call wasn't successful
+private fun<E: kotlin.Exception> uniffiCheckCallStatus(errorHandler: UniffiRustCallStatusErrorHandler<E>, status: UniffiRustCallStatus) {
+    if (status.isSuccess()) {
+        return
+    } else if (status.isError()) {
+        throw errorHandler.lift(status.error_buf)
+    } else if (status.isPanic()) {
+        // when the rust code sees a panic, it tries to construct a rustbuffer
+        // with the message.  but if that code panics, then it just sends back
+        // an empty buffer.
+        if (status.error_buf.len > 0) {
+            throw InternalException(FfiConverterString.lift(status.error_buf))
+        } else {
+            throw InternalException("Rust panic")
+        }
+    } else {
+        throw InternalException("Unknown rust call status: $status.code")
+    }
+}
+
+/**
+ * UniffiRustCallStatusErrorHandler implementation for times when we don't expect a CALL_ERROR
+ *
+ * @suppress
+ */
+object UniffiNullRustCallStatusErrorHandler: UniffiRustCallStatusErrorHandler<InternalException> {
+    override fun lift(error_buf: RustBuffer.ByValue): InternalException {
+        RustBuffer.free(error_buf)
+        return InternalException("Unexpected CALL_ERROR")
+    }
+}
+
+// Call a rust function that returns a plain value
+private inline fun <U> uniffiRustCall(callback: (UniffiRustCallStatus) -> U): U {
+    return uniffiRustCallWithError(UniffiNullRustCallStatusErrorHandler, callback)
+}
+
+internal inline fun<T> uniffiTraitInterfaceCall(
+    callStatus: UniffiRustCallStatus,
+    makeCall: () -> T,
+    writeReturn: (T) -> Unit,
+) {
+    try {
+        writeReturn(makeCall())
+    } catch(e: kotlin.Exception) {
+        callStatus.code = UNIFFI_CALL_UNEXPECTED_ERROR
+        callStatus.error_buf = FfiConverterString.lower(e.toString())
+    }
+}
+
+internal inline fun<T, reified E: Throwable> uniffiTraitInterfaceCallWithError(
+    callStatus: UniffiRustCallStatus,
+    makeCall: () -> T,
+    writeReturn: (T) -> Unit,
+    lowerError: (E) -> RustBuffer.ByValue
+) {
+    try {
+        writeReturn(makeCall())
+    } catch(e: kotlin.Exception) {
+        if (e is E) {
+            callStatus.code = UNIFFI_CALL_ERROR
+            callStatus.error_buf = lowerError(e)
+        } else {
+            callStatus.code = UNIFFI_CALL_UNEXPECTED_ERROR
+            callStatus.error_buf = FfiConverterString.lower(e.toString())
+        }
+    }
+}
+// Map handles to objects
+//
+// This is used pass an opaque 64-bit handle representing a foreign object to the Rust code.
+internal class UniffiHandleMap<T: Any> {
+    private val map = ConcurrentHashMap<Long, T>()
+    private val counter = java.util.concurrent.atomic.AtomicLong(0)
+
+    val size: Int
+        get() = map.size
+
+    // Insert a new object into the handle map and get a handle for it
+    fun insert(obj: T): Long {
+        val handle = counter.getAndAdd(1)
+        map.put(handle, obj)
+        return handle
+    }
+
+    // Get an object from the handle map
+    fun get(handle: Long): T {
+        return map.get(handle) ?: throw InternalException("UniffiHandleMap.get: Invalid handle")
+    }
+
+    // Remove an entry from the handlemap and get the Kotlin object back
+    fun remove(handle: Long): T {
+        return map.remove(handle) ?: throw InternalException("UniffiHandleMap: Invalid handle")
+    }
+}
+
+// Contains loading, initialization code,
+// and the FFI Function declarations in a com.sun.jna.Library.
+@Synchronized
+private fun findLibraryName(componentName: String): String {
+    val libOverride = System.getProperty("uniffi.component.$componentName.libraryOverride")
+    if (libOverride != null) {
+        return libOverride
+    }
+    return "truapi_server"
+}
+
+private inline fun <reified Lib : Library> loadIndirect(
+    componentName: String
+): Lib {
+    return Native.load<Lib>(findLibraryName(componentName), Lib::class.java)
+}
+
+// Define FFI callback types
+internal interface UniffiRustFutureContinuationCallback : com.sun.jna.Callback {
+    fun callback(`data`: Long,`pollResult`: Byte,)
+}
+internal interface UniffiForeignFutureFree : com.sun.jna.Callback {
+    fun callback(`handle`: Long,)
+}
+internal interface UniffiCallbackInterfaceFree : com.sun.jna.Callback {
+    fun callback(`handle`: Long,)
+}
+@Structure.FieldOrder("handle", "free")
+internal open class UniffiForeignFuture(
+    @JvmField internal var `handle`: Long = 0.toLong(),
+    @JvmField internal var `free`: UniffiForeignFutureFree? = null,
+) : Structure() {
+    class UniffiByValue(
+        `handle`: Long = 0.toLong(),
+        `free`: UniffiForeignFutureFree? = null,
+    ): UniffiForeignFuture(`handle`,`free`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFuture) {
+        `handle` = other.`handle`
+        `free` = other.`free`
+    }
+
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructU8(
+    @JvmField internal var `returnValue`: Byte = 0.toByte(),
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Byte = 0.toByte(),
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructU8(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructU8) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteU8 : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructU8.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructI8(
+    @JvmField internal var `returnValue`: Byte = 0.toByte(),
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Byte = 0.toByte(),
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructI8(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructI8) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteI8 : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructI8.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructU16(
+    @JvmField internal var `returnValue`: Short = 0.toShort(),
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Short = 0.toShort(),
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructU16(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructU16) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteU16 : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructU16.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructI16(
+    @JvmField internal var `returnValue`: Short = 0.toShort(),
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Short = 0.toShort(),
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructI16(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructI16) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteI16 : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructI16.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructU32(
+    @JvmField internal var `returnValue`: Int = 0,
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Int = 0,
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructU32(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructU32) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteU32 : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructU32.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructI32(
+    @JvmField internal var `returnValue`: Int = 0,
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Int = 0,
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructI32(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructI32) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteI32 : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructI32.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructU64(
+    @JvmField internal var `returnValue`: Long = 0.toLong(),
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Long = 0.toLong(),
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructU64(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructU64) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteU64 : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructU64.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructI64(
+    @JvmField internal var `returnValue`: Long = 0.toLong(),
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Long = 0.toLong(),
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructI64(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructI64) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteI64 : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructI64.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructF32(
+    @JvmField internal var `returnValue`: Float = 0.0f,
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Float = 0.0f,
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructF32(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructF32) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteF32 : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructF32.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructF64(
+    @JvmField internal var `returnValue`: Double = 0.0,
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Double = 0.0,
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructF64(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructF64) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteF64 : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructF64.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructPointer(
+    @JvmField internal var `returnValue`: Pointer = Pointer.NULL,
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: Pointer = Pointer.NULL,
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructPointer(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructPointer) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompletePointer : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructPointer.UniffiByValue,)
+}
+@Structure.FieldOrder("returnValue", "callStatus")
+internal open class UniffiForeignFutureStructRustBuffer(
+    @JvmField internal var `returnValue`: RustBuffer.ByValue = RustBuffer.ByValue(),
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `returnValue`: RustBuffer.ByValue = RustBuffer.ByValue(),
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructRustBuffer(`returnValue`,`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructRustBuffer) {
+        `returnValue` = other.`returnValue`
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteRustBuffer : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructRustBuffer.UniffiByValue,)
+}
+@Structure.FieldOrder("callStatus")
+internal open class UniffiForeignFutureStructVoid(
+    @JvmField internal var `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+) : Structure() {
+    class UniffiByValue(
+        `callStatus`: UniffiRustCallStatus.ByValue = UniffiRustCallStatus.ByValue(),
+    ): UniffiForeignFutureStructVoid(`callStatus`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiForeignFutureStructVoid) {
+        `callStatus` = other.`callStatus`
+    }
+
+}
+internal interface UniffiForeignFutureCompleteVoid : com.sun.jna.Callback {
+    fun callback(`callbackData`: Long,`result`: UniffiForeignFutureStructVoid.UniffiByValue,)
+}
+internal interface UniffiCallbackInterfaceHostCallbacksMethod0 : com.sun.jna.Callback {
+    fun callback(`uniffiHandle`: Long,`marker`: RustBuffer.ByValue,`detail`: RustBuffer.ByValue,`uniffiOutReturn`: Pointer,uniffiCallStatus: UniffiRustCallStatus,)
+}
+internal interface UniffiCallbackInterfaceHostCallbacksMethod1 : com.sun.jna.Callback {
+    fun callback(`uniffiHandle`: Long,`url`: RustBuffer.ByValue,`uniffiOutReturn`: Pointer,uniffiCallStatus: UniffiRustCallStatus,)
+}
+internal interface UniffiCallbackInterfaceHostCallbacksMethod2 : com.sun.jna.Callback {
+    fun callback(`uniffiHandle`: Long,`payload`: RustBuffer.ByValue,`uniffiOutReturn`: Pointer,uniffiCallStatus: UniffiRustCallStatus,)
+}
+internal interface UniffiCallbackInterfaceHostCallbacksMethod3 : com.sun.jna.Callback {
+    fun callback(`uniffiHandle`: Long,`request`: RustBuffer.ByValue,`uniffiOutReturn`: ByteByReference,uniffiCallStatus: UniffiRustCallStatus,)
+}
+internal interface UniffiCallbackInterfaceHostCallbacksMethod4 : com.sun.jna.Callback {
+    fun callback(`uniffiHandle`: Long,`request`: RustBuffer.ByValue,`uniffiOutReturn`: ByteByReference,uniffiCallStatus: UniffiRustCallStatus,)
+}
+internal interface UniffiCallbackInterfaceHostCallbacksMethod5 : com.sun.jna.Callback {
+    fun callback(`uniffiHandle`: Long,`request`: RustBuffer.ByValue,`uniffiOutReturn`: ByteByReference,uniffiCallStatus: UniffiRustCallStatus,)
+}
+internal interface UniffiCallbackInterfaceHostCallbacksMethod6 : com.sun.jna.Callback {
+    fun callback(`uniffiHandle`: Long,`key`: RustBuffer.ByValue,`uniffiOutReturn`: RustBuffer,uniffiCallStatus: UniffiRustCallStatus,)
+}
+internal interface UniffiCallbackInterfaceHostCallbacksMethod7 : com.sun.jna.Callback {
+    fun callback(`uniffiHandle`: Long,`key`: RustBuffer.ByValue,`value`: RustBuffer.ByValue,`uniffiOutReturn`: Pointer,uniffiCallStatus: UniffiRustCallStatus,)
+}
+internal interface UniffiCallbackInterfaceHostCallbacksMethod8 : com.sun.jna.Callback {
+    fun callback(`uniffiHandle`: Long,`key`: RustBuffer.ByValue,`uniffiOutReturn`: Pointer,uniffiCallStatus: UniffiRustCallStatus,)
+}
+@Structure.FieldOrder("onCoreLog", "navigateTo", "pushNotification", "devicePermission", "remotePermission", "featureSupported", "localStorageRead", "localStorageWrite", "localStorageClear", "uniffiFree")
+internal open class UniffiVTableCallbackInterfaceHostCallbacks(
+    @JvmField internal var `onCoreLog`: UniffiCallbackInterfaceHostCallbacksMethod0? = null,
+    @JvmField internal var `navigateTo`: UniffiCallbackInterfaceHostCallbacksMethod1? = null,
+    @JvmField internal var `pushNotification`: UniffiCallbackInterfaceHostCallbacksMethod2? = null,
+    @JvmField internal var `devicePermission`: UniffiCallbackInterfaceHostCallbacksMethod3? = null,
+    @JvmField internal var `remotePermission`: UniffiCallbackInterfaceHostCallbacksMethod4? = null,
+    @JvmField internal var `featureSupported`: UniffiCallbackInterfaceHostCallbacksMethod5? = null,
+    @JvmField internal var `localStorageRead`: UniffiCallbackInterfaceHostCallbacksMethod6? = null,
+    @JvmField internal var `localStorageWrite`: UniffiCallbackInterfaceHostCallbacksMethod7? = null,
+    @JvmField internal var `localStorageClear`: UniffiCallbackInterfaceHostCallbacksMethod8? = null,
+    @JvmField internal var `uniffiFree`: UniffiCallbackInterfaceFree? = null,
+) : Structure() {
+    class UniffiByValue(
+        `onCoreLog`: UniffiCallbackInterfaceHostCallbacksMethod0? = null,
+        `navigateTo`: UniffiCallbackInterfaceHostCallbacksMethod1? = null,
+        `pushNotification`: UniffiCallbackInterfaceHostCallbacksMethod2? = null,
+        `devicePermission`: UniffiCallbackInterfaceHostCallbacksMethod3? = null,
+        `remotePermission`: UniffiCallbackInterfaceHostCallbacksMethod4? = null,
+        `featureSupported`: UniffiCallbackInterfaceHostCallbacksMethod5? = null,
+        `localStorageRead`: UniffiCallbackInterfaceHostCallbacksMethod6? = null,
+        `localStorageWrite`: UniffiCallbackInterfaceHostCallbacksMethod7? = null,
+        `localStorageClear`: UniffiCallbackInterfaceHostCallbacksMethod8? = null,
+        `uniffiFree`: UniffiCallbackInterfaceFree? = null,
+    ): UniffiVTableCallbackInterfaceHostCallbacks(`onCoreLog`,`navigateTo`,`pushNotification`,`devicePermission`,`remotePermission`,`featureSupported`,`localStorageRead`,`localStorageWrite`,`localStorageClear`,`uniffiFree`,), Structure.ByValue
+
+   internal fun uniffiSetValue(other: UniffiVTableCallbackInterfaceHostCallbacks) {
+        `onCoreLog` = other.`onCoreLog`
+        `navigateTo` = other.`navigateTo`
+        `pushNotification` = other.`pushNotification`
+        `devicePermission` = other.`devicePermission`
+        `remotePermission` = other.`remotePermission`
+        `featureSupported` = other.`featureSupported`
+        `localStorageRead` = other.`localStorageRead`
+        `localStorageWrite` = other.`localStorageWrite`
+        `localStorageClear` = other.`localStorageClear`
+        `uniffiFree` = other.`uniffiFree`
+    }
+
+}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+// For large crates we prevent `MethodTooLargeException` (see #2340)
+// N.B. the name of the extension is very misleading, since it is 
+// rather `InterfaceTooLargeException`, caused by too many methods 
+// in the interface for large crates.
+//
+// By splitting the otherwise huge interface into two parts
+// * UniffiLib 
+// * IntegrityCheckingUniffiLib (this)
+// we allow for ~2x as many methods in the UniffiLib interface.
+// 
+// The `ffi_uniffi_contract_version` method and all checksum methods are put 
+// into `IntegrityCheckingUniffiLib` and these methods are called only once,
+// when the library is loaded.
+internal interface IntegrityCheckingUniffiLib : Library {
+    // Integrity check functions only
+    fun uniffi_truapi_server_checksum_method_nativetruapicore_clear_active_session(
+): Short
+fun uniffi_truapi_server_checksum_method_nativetruapicore_set_active_session(
+): Short
+fun uniffi_truapi_server_checksum_method_nativetruapicore_start_ws_bridge(
+): Short
+fun uniffi_truapi_server_checksum_method_nativetruapicore_stop_ws_bridge(
+): Short
+fun uniffi_truapi_server_checksum_constructor_nativetruapicore_new(
+): Short
+fun uniffi_truapi_server_checksum_method_hostcallbacks_on_core_log(
+): Short
+fun uniffi_truapi_server_checksum_method_hostcallbacks_navigate_to(
+): Short
+fun uniffi_truapi_server_checksum_method_hostcallbacks_push_notification(
+): Short
+fun uniffi_truapi_server_checksum_method_hostcallbacks_device_permission(
+): Short
+fun uniffi_truapi_server_checksum_method_hostcallbacks_remote_permission(
+): Short
+fun uniffi_truapi_server_checksum_method_hostcallbacks_feature_supported(
+): Short
+fun uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_read(
+): Short
+fun uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_write(
+): Short
+fun uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_clear(
+): Short
+fun ffi_truapi_server_uniffi_contract_version(
+): Int
+
+}
+
+// A JNA Library to expose the extern-C FFI definitions.
+// This is an implementation detail which will be called internally by the public API.
+internal interface UniffiLib : Library {
+    companion object {
+        internal val INSTANCE: UniffiLib by lazy {
+            val componentName = "truapi_server"
+            // For large crates we prevent `MethodTooLargeException` (see #2340)
+            // N.B. the name of the extension is very misleading, since it is 
+            // rather `InterfaceTooLargeException`, caused by too many methods 
+            // in the interface for large crates.
+            //
+            // By splitting the otherwise huge interface into two parts
+            // * UniffiLib (this)
+            // * IntegrityCheckingUniffiLib
+            // And all checksum methods are put into `IntegrityCheckingUniffiLib`
+            // we allow for ~2x as many methods in the UniffiLib interface.
+            // 
+            // Thus we first load the library with `loadIndirect` as `IntegrityCheckingUniffiLib`
+            // so that we can (optionally!) call `uniffiCheckApiChecksums`...
+            loadIndirect<IntegrityCheckingUniffiLib>(componentName)
+                .also { lib: IntegrityCheckingUniffiLib ->
+                    uniffiCheckContractApiVersion(lib)
+                    uniffiCheckApiChecksums(lib)
+                }
+            // ... and then we load the library as `UniffiLib`
+            // N.B. we cannot use `loadIndirect` once and then try to cast it to `UniffiLib`
+            // => results in `java.lang.ClassCastException: com.sun.proxy.$Proxy cannot be cast to ...`
+            // error. So we must call `loadIndirect` twice. For crates large enough
+            // to trigger this issue, the performance impact is negligible, running on
+            // a macOS M1 machine the `loadIndirect` call takes ~50ms.
+            val lib = loadIndirect<UniffiLib>(componentName)
+            // No need to check the contract version and checksums, since 
+            // we already did that with `IntegrityCheckingUniffiLib` above.
+            uniffiCallbackInterfaceHostCallbacks.register(lib)
+            // Loading of library with integrity check done.
+            lib
+        }
+        
+        // The Cleaner for the whole library
+        internal val CLEANER: UniffiCleaner by lazy {
+            UniffiCleaner.create()
+        }
+    }
+
+    // FFI functions
+    fun uniffi_truapi_server_fn_clone_nativetruapicore(`ptr`: Pointer,uniffi_out_err: UniffiRustCallStatus, 
+): Pointer
+fun uniffi_truapi_server_fn_free_nativetruapicore(`ptr`: Pointer,uniffi_out_err: UniffiRustCallStatus, 
+): Unit
+fun uniffi_truapi_server_fn_constructor_nativetruapicore_new(`callbacks`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Pointer
+fun uniffi_truapi_server_fn_method_nativetruapicore_clear_active_session(`ptr`: Pointer,uniffi_out_err: UniffiRustCallStatus, 
+): Unit
+fun uniffi_truapi_server_fn_method_nativetruapicore_set_active_session(`ptr`: Pointer,`pubkey`: RustBuffer.ByValue,`liteUsername`: RustBuffer.ByValue,`fullUsername`: RustBuffer.ByValue,uniffi_out_err: UniffiRustCallStatus, 
+): Byte
+fun uniffi_truapi_server_fn_method_nativetruapicore_start_ws_bridge(`ptr`: Pointer,`bindPort`: Short,uniffi_out_err: UniffiRustCallStatus, 
+): RustBuffer.ByValue
+fun uniffi_truapi_server_fn_method_nativetruapicore_stop_ws_bridge(`ptr`: Pointer,uniffi_out_err: UniffiRustCallStatus, 
+): Unit
+fun uniffi_truapi_server_fn_init_callback_vtable_hostcallbacks(`vtable`: UniffiVTableCallbackInterfaceHostCallbacks,
+): Unit
+fun ffi_truapi_server_rustbuffer_alloc(`size`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): RustBuffer.ByValue
+fun ffi_truapi_server_rustbuffer_from_bytes(`bytes`: ForeignBytes.ByValue,uniffi_out_err: UniffiRustCallStatus, 
+): RustBuffer.ByValue
+fun ffi_truapi_server_rustbuffer_free(`buf`: RustBuffer.ByValue,uniffi_out_err: UniffiRustCallStatus, 
+): Unit
+fun ffi_truapi_server_rustbuffer_reserve(`buf`: RustBuffer.ByValue,`additional`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): RustBuffer.ByValue
+fun ffi_truapi_server_rust_future_poll_u8(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_u8(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_u8(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_u8(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Byte
+fun ffi_truapi_server_rust_future_poll_i8(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_i8(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_i8(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_i8(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Byte
+fun ffi_truapi_server_rust_future_poll_u16(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_u16(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_u16(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_u16(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Short
+fun ffi_truapi_server_rust_future_poll_i16(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_i16(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_i16(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_i16(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Short
+fun ffi_truapi_server_rust_future_poll_u32(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_u32(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_u32(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_u32(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Int
+fun ffi_truapi_server_rust_future_poll_i32(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_i32(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_i32(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_i32(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Int
+fun ffi_truapi_server_rust_future_poll_u64(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_u64(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_u64(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_u64(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Long
+fun ffi_truapi_server_rust_future_poll_i64(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_i64(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_i64(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_i64(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Long
+fun ffi_truapi_server_rust_future_poll_f32(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_f32(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_f32(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_f32(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Float
+fun ffi_truapi_server_rust_future_poll_f64(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_f64(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_f64(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_f64(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Double
+fun ffi_truapi_server_rust_future_poll_pointer(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_pointer(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_pointer(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_pointer(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Pointer
+fun ffi_truapi_server_rust_future_poll_rust_buffer(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_rust_buffer(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_rust_buffer(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_rust_buffer(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): RustBuffer.ByValue
+fun ffi_truapi_server_rust_future_poll_void(`handle`: Long,`callback`: UniffiRustFutureContinuationCallback,`callbackData`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_cancel_void(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_free_void(`handle`: Long,
+): Unit
+fun ffi_truapi_server_rust_future_complete_void(`handle`: Long,uniffi_out_err: UniffiRustCallStatus, 
+): Unit
+
+}
+
+private fun uniffiCheckContractApiVersion(lib: IntegrityCheckingUniffiLib) {
+    // Get the bindings contract version from our ComponentInterface
+    val bindings_contract_version = 29
+    // Get the scaffolding contract version by calling the into the dylib
+    val scaffolding_contract_version = lib.ffi_truapi_server_uniffi_contract_version()
+    if (bindings_contract_version != scaffolding_contract_version) {
+        throw RuntimeException("UniFFI contract version mismatch: try cleaning and rebuilding your project")
+    }
+}
+@Suppress("UNUSED_PARAMETER")
+private fun uniffiCheckApiChecksums(lib: IntegrityCheckingUniffiLib) {
+    if (lib.uniffi_truapi_server_checksum_method_nativetruapicore_clear_active_session() != 49688.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_nativetruapicore_set_active_session() != 33211.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_nativetruapicore_start_ws_bridge() != 64697.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_nativetruapicore_stop_ws_bridge() != 16007.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_constructor_nativetruapicore_new() != 3488.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_hostcallbacks_on_core_log() != 50767.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_hostcallbacks_navigate_to() != 30730.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_hostcallbacks_push_notification() != 8367.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_hostcallbacks_device_permission() != 3079.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_hostcallbacks_remote_permission() != 1103.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_hostcallbacks_feature_supported() != 22483.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_read() != 16214.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_write() != 61540.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_clear() != 19429.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+}
+
+/**
+ * @suppress
+ */
+public fun uniffiEnsureInitialized() {
+    UniffiLib.INSTANCE
+}
+
+// Async support
+
+// Public interface members begin here.
+
+
+// Interface implemented by anything that can contain an object reference.
+//
+// Such types expose a `destroy()` method that must be called to cleanly
+// dispose of the contained objects. Failure to call this method may result
+// in memory leaks.
+//
+// The easiest way to ensure this method is called is to use the `.use`
+// helper method to execute a block and destroy the object at the end.
+interface Disposable {
+    fun destroy()
+    companion object {
+        fun destroy(vararg args: Any?) {
+            for (arg in args) {
+                when (arg) {
+                    is Disposable -> arg.destroy()
+                    is ArrayList<*> -> {
+                        for (idx in arg.indices) {
+                            val element = arg[idx]
+                            if (element is Disposable) {
+                                element.destroy()
+                            }
+                        }
+                    }
+                    is Map<*, *> -> {
+                        for (element in arg.values) {
+                            if (element is Disposable) {
+                                element.destroy()
+                            }
+                        }
+                    }
+                    is Iterable<*> -> {
+                        for (element in arg) {
+                            if (element is Disposable) {
+                                element.destroy()
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+
+/**
+ * @suppress
+ */
+inline fun <T : Disposable?, R> T.use(block: (T) -> R) =
+    try {
+        block(this)
+    } finally {
+        try {
+            // N.B. our implementation is on the nullable type `Disposable?`.
+            this?.destroy()
+        } catch (e: Throwable) {
+            // swallow
+        }
+    }
+
+/** 
+ * Used to instantiate an interface without an actual pointer, for fakes in tests, mostly.
+ *
+ * @suppress
+ * */
+object NoPointer// Magic number for the Rust proxy to call using the same mechanism as every other method,
+// to free the callback once it's dropped by Rust.
+internal const val IDX_CALLBACK_FREE = 0
+// Callback return codes
+internal const val UNIFFI_CALLBACK_SUCCESS = 0
+internal const val UNIFFI_CALLBACK_ERROR = 1
+internal const val UNIFFI_CALLBACK_UNEXPECTED_ERROR = 2
+
+/**
+ * @suppress
+ */
+public abstract class FfiConverterCallbackInterface<CallbackInterface: Any>: FfiConverter<CallbackInterface, Long> {
+    internal val handleMap = UniffiHandleMap<CallbackInterface>()
+
+    internal fun drop(handle: Long) {
+        handleMap.remove(handle)
+    }
+
+    override fun lift(value: Long): CallbackInterface {
+        return handleMap.get(value)
+    }
+
+    override fun read(buf: ByteBuffer) = lift(buf.getLong())
+
+    override fun lower(value: CallbackInterface) = handleMap.insert(value)
+
+    override fun allocationSize(value: CallbackInterface) = 8UL
+
+    override fun write(value: CallbackInterface, buf: ByteBuffer) {
+        buf.putLong(lower(value))
+    }
+}
+/**
+ * The cleaner interface for Object finalization code to run.
+ * This is the entry point to any implementation that we're using.
+ *
+ * The cleaner registers objects and returns cleanables, so now we are
+ * defining a `UniffiCleaner` with a `UniffiClenaer.Cleanable` to abstract the
+ * different implmentations available at compile time.
+ *
+ * @suppress
+ */
+interface UniffiCleaner {
+    interface Cleanable {
+        fun clean()
+    }
+
+    fun register(value: Any, cleanUpTask: Runnable): UniffiCleaner.Cleanable
+
+    companion object
+}
+
+// The fallback Jna cleaner, which is available for both Android, and the JVM.
+private class UniffiJnaCleaner : UniffiCleaner {
+    private val cleaner = com.sun.jna.internal.Cleaner.getCleaner()
+
+    override fun register(value: Any, cleanUpTask: Runnable): UniffiCleaner.Cleanable =
+        UniffiJnaCleanable(cleaner.register(value, cleanUpTask))
+}
+
+private class UniffiJnaCleanable(
+    private val cleanable: com.sun.jna.internal.Cleaner.Cleanable,
+) : UniffiCleaner.Cleanable {
+    override fun clean() = cleanable.clean()
+}
+
+
+// We decide at uniffi binding generation time whether we were
+// using Android or not.
+// There are further runtime checks to chose the correct implementation
+// of the cleaner.
+private fun UniffiCleaner.Companion.create(): UniffiCleaner =
+    try {
+        // For safety's sake: if the library hasn't been run in android_cleaner = true
+        // mode, but is being run on Android, then we still need to think about
+        // Android API versions.
+        // So we check if java.lang.ref.Cleaner is there, and use that…
+        java.lang.Class.forName("java.lang.ref.Cleaner")
+        JavaLangRefCleaner()
+    } catch (e: ClassNotFoundException) {
+        // … otherwise, fallback to the JNA cleaner.
+        UniffiJnaCleaner()
+    }
+
+private class JavaLangRefCleaner : UniffiCleaner {
+    val cleaner = java.lang.ref.Cleaner.create()
+
+    override fun register(value: Any, cleanUpTask: Runnable): UniffiCleaner.Cleanable =
+        JavaLangRefCleanable(cleaner.register(value, cleanUpTask))
+}
+
+private class JavaLangRefCleanable(
+    val cleanable: java.lang.ref.Cleaner.Cleanable
+) : UniffiCleaner.Cleanable {
+    override fun clean() = cleanable.clean()
+}
+
+/**
+ * @suppress
+ */
+public object FfiConverterUShort: FfiConverter<UShort, Short> {
+    override fun lift(value: Short): UShort {
+        return value.toUShort()
+    }
+
+    override fun read(buf: ByteBuffer): UShort {
+        return lift(buf.getShort())
+    }
+
+    override fun lower(value: UShort): Short {
+        return value.toShort()
+    }
+
+    override fun allocationSize(value: UShort) = 2UL
+
+    override fun write(value: UShort, buf: ByteBuffer) {
+        buf.putShort(value.toShort())
+    }
+}
+
+/**
+ * @suppress
+ */
+public object FfiConverterBoolean: FfiConverter<Boolean, Byte> {
+    override fun lift(value: Byte): Boolean {
+        return value.toInt() != 0
+    }
+
+    override fun read(buf: ByteBuffer): Boolean {
+        return lift(buf.get())
+    }
+
+    override fun lower(value: Boolean): Byte {
+        return if (value) 1.toByte() else 0.toByte()
+    }
+
+    override fun allocationSize(value: Boolean) = 1UL
+
+    override fun write(value: Boolean, buf: ByteBuffer) {
+        buf.put(lower(value))
+    }
+}
+
+/**
+ * @suppress
+ */
+public object FfiConverterString: FfiConverter<String, RustBuffer.ByValue> {
+    // Note: we don't inherit from FfiConverterRustBuffer, because we use a
+    // special encoding when lowering/lifting.  We can use `RustBuffer.len` to
+    // store our length and avoid writing it out to the buffer.
+    override fun lift(value: RustBuffer.ByValue): String {
+        try {
+            val byteArr = ByteArray(value.len.toInt())
+            value.asByteBuffer()!!.get(byteArr)
+            return byteArr.toString(Charsets.UTF_8)
+        } finally {
+            RustBuffer.free(value)
+        }
+    }
+
+    override fun read(buf: ByteBuffer): String {
+        val len = buf.getInt()
+        val byteArr = ByteArray(len)
+        buf.get(byteArr)
+        return byteArr.toString(Charsets.UTF_8)
+    }
+
+    fun toUtf8(value: String): ByteBuffer {
+        // Make sure we don't have invalid UTF-16, check for lone surrogates.
+        return Charsets.UTF_8.newEncoder().run {
+            onMalformedInput(CodingErrorAction.REPORT)
+            encode(CharBuffer.wrap(value))
+        }
+    }
+
+    override fun lower(value: String): RustBuffer.ByValue {
+        val byteBuf = toUtf8(value)
+        // Ideally we'd pass these bytes to `ffi_bytebuffer_from_bytes`, but doing so would require us
+        // to copy them into a JNA `Memory`. So we might as well directly copy them into a `RustBuffer`.
+        val rbuf = RustBuffer.alloc(byteBuf.limit().toULong())
+        rbuf.asByteBuffer()!!.put(byteBuf)
+        return rbuf
+    }
+
+    // We aren't sure exactly how many bytes our string will be once it's UTF-8
+    // encoded.  Allocate 3 bytes per UTF-16 code unit which will always be
+    // enough.
+    override fun allocationSize(value: String): ULong {
+        val sizeForLength = 4UL
+        val sizeForString = value.length.toULong() * 3UL
+        return sizeForLength + sizeForString
+    }
+
+    override fun write(value: String, buf: ByteBuffer) {
+        val byteBuf = toUtf8(value)
+        buf.putInt(byteBuf.limit())
+        buf.put(byteBuf)
+    }
+}
+
+/**
+ * @suppress
+ */
+public object FfiConverterByteArray: FfiConverterRustBuffer<ByteArray> {
+    override fun read(buf: ByteBuffer): ByteArray {
+        val len = buf.getInt()
+        val byteArr = ByteArray(len)
+        buf.get(byteArr)
+        return byteArr
+    }
+    override fun allocationSize(value: ByteArray): ULong {
+        return 4UL + value.size.toULong()
+    }
+    override fun write(value: ByteArray, buf: ByteBuffer) {
+        buf.putInt(value.size)
+        buf.put(value)
+    }
+}
+
+
+// This template implements a class for working with a Rust struct via a Pointer/Arc<T>
+// to the live Rust struct on the other side of the FFI.
+//
+// Each instance implements core operations for working with the Rust `Arc<T>` and the
+// Kotlin Pointer to work with the live Rust struct on the other side of the FFI.
+//
+// There's some subtlety here, because we have to be careful not to operate on a Rust
+// struct after it has been dropped, and because we must expose a public API for freeing
+// theq Kotlin wrapper object in lieu of reliable finalizers. The core requirements are:
+//
+//   * Each instance holds an opaque pointer to the underlying Rust struct.
+//     Method calls need to read this pointer from the object's state and pass it in to
+//     the Rust FFI.
+//
+//   * When an instance is no longer needed, its pointer should be passed to a
+//     special destructor function provided by the Rust FFI, which will drop the
+//     underlying Rust struct.
+//
+//   * Given an instance, calling code is expected to call the special
+//     `destroy` method in order to free it after use, either by calling it explicitly
+//     or by using a higher-level helper like the `use` method. Failing to do so risks
+//     leaking the underlying Rust struct.
+//
+//   * We can't assume that calling code will do the right thing, and must be prepared
+//     to handle Kotlin method calls executing concurrently with or even after a call to
+//     `destroy`, and to handle multiple (possibly concurrent!) calls to `destroy`.
+//
+//   * We must never allow Rust code to operate on the underlying Rust struct after
+//     the destructor has been called, and must never call the destructor more than once.
+//     Doing so may trigger memory unsafety.
+//
+//   * To mitigate many of the risks of leaking memory and use-after-free unsafety, a `Cleaner`
+//     is implemented to call the destructor when the Kotlin object becomes unreachable.
+//     This is done in a background thread. This is not a panacea, and client code should be aware that
+//      1. the thread may starve if some there are objects that have poorly performing
+//     `drop` methods or do significant work in their `drop` methods.
+//      2. the thread is shared across the whole library. This can be tuned by using `android_cleaner = true`,
+//         or `android = true` in the [`kotlin` section of the `uniffi.toml` file](https://mozilla.github.io/uniffi-rs/kotlin/configuration.html).
+//
+// If we try to implement this with mutual exclusion on access to the pointer, there is the
+// possibility of a race between a method call and a concurrent call to `destroy`:
+//
+//    * Thread A starts a method call, reads the value of the pointer, but is interrupted
+//      before it can pass the pointer over the FFI to Rust.
+//    * Thread B calls `destroy` and frees the underlying Rust struct.
+//    * Thread A resumes, passing the already-read pointer value to Rust and triggering
+//      a use-after-free.
+//
+// One possible solution would be to use a `ReadWriteLock`, with each method call taking
+// a read lock (and thus allowed to run concurrently) and the special `destroy` method
+// taking a write lock (and thus blocking on live method calls). However, we aim not to
+// generate methods with any hidden blocking semantics, and a `destroy` method that might
+// block if called incorrectly seems to meet that bar.
+//
+// So, we achieve our goals by giving each instance an associated `AtomicLong` counter to track
+// the number of in-flight method calls, and an `AtomicBoolean` flag to indicate whether `destroy`
+// has been called. These are updated according to the following rules:
+//
+//    * The initial value of the counter is 1, indicating a live object with no in-flight calls.
+//      The initial value for the flag is false.
+//
+//    * At the start of each method call, we atomically check the counter.
+//      If it is 0 then the underlying Rust struct has already been destroyed and the call is aborted.
+//      If it is nonzero them we atomically increment it by 1 and proceed with the method call.
+//
+//    * At the end of each method call, we atomically decrement and check the counter.
+//      If it has reached zero then we destroy the underlying Rust struct.
+//
+//    * When `destroy` is called, we atomically flip the flag from false to true.
+//      If the flag was already true we silently fail.
+//      Otherwise we atomically decrement and check the counter.
+//      If it has reached zero then we destroy the underlying Rust struct.
+//
+// Astute readers may observe that this all sounds very similar to the way that Rust's `Arc<T>` works,
+// and indeed it is, with the addition of a flag to guard against multiple calls to `destroy`.
+//
+// The overall effect is that the underlying Rust struct is destroyed only when `destroy` has been
+// called *and* all in-flight method calls have completed, avoiding violating any of the expectations
+// of the underlying Rust code.
+//
+// This makes a cleaner a better alternative to _not_ calling `destroy()` as
+// and when the object is finished with, but the abstraction is not perfect: if the Rust object's `drop`
+// method is slow, and/or there are many objects to cleanup, and it's on a low end Android device, then the cleaner
+// thread may be starved, and the app will leak memory.
+//
+// In this case, `destroy`ing manually may be a better solution.
+//
+// The cleaner can live side by side with the manual calling of `destroy`. In the order of responsiveness, uniffi objects
+// with Rust peers are reclaimed:
+//
+// 1. By calling the `destroy` method of the object, which calls `rustObject.free()`. If that doesn't happen:
+// 2. When the object becomes unreachable, AND the Cleaner thread gets to call `rustObject.free()`. If the thread is starved then:
+// 3. The memory is reclaimed when the process terminates.
+//
+// [1] https://stackoverflow.com/questions/24376768/can-java-finalize-an-object-when-it-is-still-in-scope/24380219
+//
+
+
+/**
+ * UniFFI object exposing the TrUAPI core to native hosts.
+ */
+public interface NativeTrUApiCoreInterface {
+    
+    /**
+     * Drop the currently-paired session. Mirrors the JS
+     * `clearActiveSession`.
+     */
+    fun `clearActiveSession`()
+    
+    /**
+     * Push the currently-paired session into the core. Mirrors the JS
+     * `setActiveSession`. `pubkey` must be exactly 32 bytes (sr25519 root
+     * public key).
+     */
+    fun `setActiveSession`(`pubkey`: kotlin.ByteArray, `liteUsername`: kotlin.String?, `fullUsername`: kotlin.String?): kotlin.Boolean
+    
+    /**
+     * Start the localhost WebSocket bridge. Returns the descriptor the
+     * host hands to the product so it can dial back in.
+     */
+    fun `startWsBridge`(`bindPort`: kotlin.UShort): WsBridgeEndpoint
+    
+    /**
+     * Stop the localhost WebSocket bridge (if running).
+     */
+    fun `stopWsBridge`()
+    
+    companion object
+}
+
+/**
+ * UniFFI object exposing the TrUAPI core to native hosts.
+ */
+open class NativeTrUApiCore: Disposable, AutoCloseable, NativeTrUApiCoreInterface
+{
+
+    constructor(pointer: Pointer) {
+        this.pointer = pointer
+        this.cleanable = UniffiLib.CLEANER.register(this, UniffiCleanAction(pointer))
+    }
+
+    /**
+     * This constructor can be used to instantiate a fake object. Only used for tests. Any
+     * attempt to actually use an object constructed this way will fail as there is no
+     * connected Rust object.
+     */
+    @Suppress("UNUSED_PARAMETER")
+    constructor(noPointer: NoPointer) {
+        this.pointer = null
+        this.cleanable = UniffiLib.CLEANER.register(this, UniffiCleanAction(pointer))
+    }
+    /**
+     * Construct the core from a callback object. The native shell hands
+     * over its [`HostCallbacks`] trait object; the core wraps it in a
+     * [`CallbackPlatform`] and feeds the result into
+     * [`TrUApiCore::from_platform`].
+     *
+     * Subscriptions registered through this core run on a shared
+     * `futures::executor::ThreadPool`. The pool sticks around for the
+     * lifetime of the core; new subscriptions never spawn a fresh OS
+     * thread each.
+     */
+    constructor(`callbacks`: HostCallbacks) :
+        this(
+    uniffiRustCall() { _status ->
+    UniffiLib.INSTANCE.uniffi_truapi_server_fn_constructor_nativetruapicore_new(
+        FfiConverterTypeHostCallbacks.lower(`callbacks`),_status)
+}
+    )
+
+    protected val pointer: Pointer?
+    protected val cleanable: UniffiCleaner.Cleanable
+
+    private val wasDestroyed = AtomicBoolean(false)
+    private val callCounter = AtomicLong(1)
+
+    override fun destroy() {
+        // Only allow a single call to this method.
+        // TODO: maybe we should log a warning if called more than once?
+        if (this.wasDestroyed.compareAndSet(false, true)) {
+            // This decrement always matches the initial count of 1 given at creation time.
+            if (this.callCounter.decrementAndGet() == 0L) {
+                cleanable.clean()
+            }
+        }
+    }
+
+    @Synchronized
+    override fun close() {
+        this.destroy()
+    }
+
+    internal inline fun <R> callWithPointer(block: (ptr: Pointer) -> R): R {
+        // Check and increment the call counter, to keep the object alive.
+        // This needs a compare-and-set retry loop in case of concurrent updates.
+        do {
+            val c = this.callCounter.get()
+            if (c == 0L) {
+                throw IllegalStateException("${this.javaClass.simpleName} object has already been destroyed")
+            }
+            if (c == Long.MAX_VALUE) {
+                throw IllegalStateException("${this.javaClass.simpleName} call counter would overflow")
+            }
+        } while (! this.callCounter.compareAndSet(c, c + 1L))
+        // Now we can safely do the method call without the pointer being freed concurrently.
+        try {
+            return block(this.uniffiClonePointer())
+        } finally {
+            // This decrement always matches the increment we performed above.
+            if (this.callCounter.decrementAndGet() == 0L) {
+                cleanable.clean()
+            }
+        }
+    }
+
+    // Use a static inner class instead of a closure so as not to accidentally
+    // capture `this` as part of the cleanable's action.
+    private class UniffiCleanAction(private val pointer: Pointer?) : Runnable {
+        override fun run() {
+            pointer?.let { ptr ->
+                uniffiRustCall { status ->
+                    UniffiLib.INSTANCE.uniffi_truapi_server_fn_free_nativetruapicore(ptr, status)
+                }
+            }
+        }
+    }
+
+    fun uniffiClonePointer(): Pointer {
+        return uniffiRustCall() { status ->
+            UniffiLib.INSTANCE.uniffi_truapi_server_fn_clone_nativetruapicore(pointer!!, status)
+        }
+    }
+
+    
+    /**
+     * Drop the currently-paired session. Mirrors the JS
+     * `clearActiveSession`.
+     */override fun `clearActiveSession`()
+        = 
+    callWithPointer {
+    uniffiRustCall() { _status ->
+    UniffiLib.INSTANCE.uniffi_truapi_server_fn_method_nativetruapicore_clear_active_session(
+        it, _status)
+}
+    }
+    
+    
+
+    
+    /**
+     * Push the currently-paired session into the core. Mirrors the JS
+     * `setActiveSession`. `pubkey` must be exactly 32 bytes (sr25519 root
+     * public key).
+     */override fun `setActiveSession`(`pubkey`: kotlin.ByteArray, `liteUsername`: kotlin.String?, `fullUsername`: kotlin.String?): kotlin.Boolean {
+            return FfiConverterBoolean.lift(
+    callWithPointer {
+    uniffiRustCall() { _status ->
+    UniffiLib.INSTANCE.uniffi_truapi_server_fn_method_nativetruapicore_set_active_session(
+        it, FfiConverterByteArray.lower(`pubkey`),FfiConverterOptionalString.lower(`liteUsername`),FfiConverterOptionalString.lower(`fullUsername`),_status)
+}
+    }
+    )
+    }
+    
+
+    
+    /**
+     * Start the localhost WebSocket bridge. Returns the descriptor the
+     * host hands to the product so it can dial back in.
+     */
+    @Throws(WsBridgeStartException::class)override fun `startWsBridge`(`bindPort`: kotlin.UShort): WsBridgeEndpoint {
+            return FfiConverterTypeWsBridgeEndpoint.lift(
+    callWithPointer {
+    uniffiRustCallWithError(WsBridgeStartException) { _status ->
+    UniffiLib.INSTANCE.uniffi_truapi_server_fn_method_nativetruapicore_start_ws_bridge(
+        it, FfiConverterUShort.lower(`bindPort`),_status)
+}
+    }
+    )
+    }
+    
+
+    
+    /**
+     * Stop the localhost WebSocket bridge (if running).
+     */override fun `stopWsBridge`()
+        = 
+    callWithPointer {
+    uniffiRustCall() { _status ->
+    UniffiLib.INSTANCE.uniffi_truapi_server_fn_method_nativetruapicore_stop_ws_bridge(
+        it, _status)
+}
+    }
+    
+    
+
+    
+
+    
+    
+    companion object
+    
+}
+
+/**
+ * @suppress
+ */
+public object FfiConverterTypeNativeTrUApiCore: FfiConverter<NativeTrUApiCore, Pointer> {
+
+    override fun lower(value: NativeTrUApiCore): Pointer {
+        return value.uniffiClonePointer()
+    }
+
+    override fun lift(value: Pointer): NativeTrUApiCore {
+        return NativeTrUApiCore(value)
+    }
+
+    override fun read(buf: ByteBuffer): NativeTrUApiCore {
+        // The Rust code always writes pointers as 8 bytes, and will
+        // fail to compile if they don't fit.
+        return lift(Pointer(buf.getLong()))
+    }
+
+    override fun allocationSize(value: NativeTrUApiCore) = 8UL
+
+    override fun write(value: NativeTrUApiCore, buf: ByteBuffer) {
+        // The Rust code always expects pointers written as 8 bytes,
+        // and will fail to compile if they don't fit.
+        buf.putLong(Pointer.nativeValue(lower(value)))
+    }
+}
+
+
+
+/**
+ * Per-session descriptor returned to the host: product uses `port + token`
+ * to build its WebSocket URL (e.g. `ws://127.0.0.1:<port>/?t=<token>`).
+ */
+data class WsBridgeEndpoint (
+    /**
+     * Localhost port the bridge is listening on.
+     */
+    var `port`: kotlin.UShort, 
+    /**
+     * Session token; the connecting client must supply this as the
+     * `?t=<token>` query parameter to be accepted.
+     */
+    var `token`: kotlin.String
+) {
+    
+    companion object
+}
+
+/**
+ * @suppress
+ */
+public object FfiConverterTypeWsBridgeEndpoint: FfiConverterRustBuffer<WsBridgeEndpoint> {
+    override fun read(buf: ByteBuffer): WsBridgeEndpoint {
+        return WsBridgeEndpoint(
+            FfiConverterUShort.read(buf),
+            FfiConverterString.read(buf),
+        )
+    }
+
+    override fun allocationSize(value: WsBridgeEndpoint) = (
+            FfiConverterUShort.allocationSize(value.`port`) +
+            FfiConverterString.allocationSize(value.`token`)
+    )
+
+    override fun write(value: WsBridgeEndpoint, buf: ByteBuffer) {
+            FfiConverterUShort.write(value.`port`, buf)
+            FfiConverterString.write(value.`token`, buf)
+    }
+}
+
+
+
+
+
+/**
+ * Native-friendly navigation error.
+ */
+sealed class HostNavigateRejection: kotlin.Exception() {
+    
+    /**
+     * User declined the navigation.
+     */
+    class PermissionDenied(
+        ) : HostNavigateRejection() {
+        override val message
+            get() = ""
+    }
+    
+    /**
+     * Catch-all.
+     */
+    class Unknown(
+        
+        /**
+         * Human-readable reason.
+         */
+        val `reason`: kotlin.String
+        ) : HostNavigateRejection() {
+        override val message
+            get() = "reason=${ `reason` }"
+    }
+    
+
+    companion object ErrorHandler : UniffiRustCallStatusErrorHandler<HostNavigateRejection> {
+        override fun lift(error_buf: RustBuffer.ByValue): HostNavigateRejection = FfiConverterTypeHostNavigateRejection.lift(error_buf)
+    }
+
+    
+}
+
+/**
+ * @suppress
+ */
+public object FfiConverterTypeHostNavigateRejection : FfiConverterRustBuffer<HostNavigateRejection> {
+    override fun read(buf: ByteBuffer): HostNavigateRejection {
+        
+
+        return when(buf.getInt()) {
+            1 -> HostNavigateRejection.PermissionDenied()
+            2 -> HostNavigateRejection.Unknown(
+                FfiConverterString.read(buf),
+                )
+            else -> throw RuntimeException("invalid error enum value, something is very wrong!!")
+        }
+    }
+
+    override fun allocationSize(value: HostNavigateRejection): ULong {
+        return when(value) {
+            is HostNavigateRejection.PermissionDenied -> (
+                // Add the size for the Int that specifies the variant plus the size needed for all fields
+                4UL
+            )
+            is HostNavigateRejection.Unknown -> (
+                // Add the size for the Int that specifies the variant plus the size needed for all fields
+                4UL
+                + FfiConverterString.allocationSize(value.`reason`)
+            )
+        }
+    }
+
+    override fun write(value: HostNavigateRejection, buf: ByteBuffer) {
+        when(value) {
+            is HostNavigateRejection.PermissionDenied -> {
+                buf.putInt(1)
+                Unit
+            }
+            is HostNavigateRejection.Unknown -> {
+                buf.putInt(2)
+                FfiConverterString.write(value.`reason`, buf)
+                Unit
+            }
+        }.let { /* this makes the `when` an expression, which ensures it is exhaustive */ }
+    }
+
+}
+
+
+
+
+
+/**
+ * Native-friendly rejection error returned by callback methods that map
+ * onto [`truapi::v01::GenericError`].
+ */
+sealed class HostRejection: kotlin.Exception() {
+    
+    /**
+     * Caller rejected the operation.
+     */
+    class Rejected(
+        
+        /**
+         * Human-readable rejection reason.
+         */
+        val `reason`: kotlin.String
+        ) : HostRejection() {
+        override val message
+            get() = "reason=${ `reason` }"
+    }
+    
+
+    companion object ErrorHandler : UniffiRustCallStatusErrorHandler<HostRejection> {
+        override fun lift(error_buf: RustBuffer.ByValue): HostRejection = FfiConverterTypeHostRejection.lift(error_buf)
+    }
+
+    
+}
+
+/**
+ * @suppress
+ */
+public object FfiConverterTypeHostRejection : FfiConverterRustBuffer<HostRejection> {
+    override fun read(buf: ByteBuffer): HostRejection {
+        
+
+        return when(buf.getInt()) {
+            1 -> HostRejection.Rejected(
+                FfiConverterString.read(buf),
+                )
+            else -> throw RuntimeException("invalid error enum value, something is very wrong!!")
+        }
+    }
+
+    override fun allocationSize(value: HostRejection): ULong {
+        return when(value) {
+            is HostRejection.Rejected -> (
+                // Add the size for the Int that specifies the variant plus the size needed for all fields
+                4UL
+                + FfiConverterString.allocationSize(value.`reason`)
+            )
+        }
+    }
+
+    override fun write(value: HostRejection, buf: ByteBuffer) {
+        when(value) {
+            is HostRejection.Rejected -> {
+                buf.putInt(1)
+                FfiConverterString.write(value.`reason`, buf)
+                Unit
+            }
+        }.let { /* this makes the `when` an expression, which ensures it is exhaustive */ }
+    }
+
+}
+
+
+
+
+
+/**
+ * Native-friendly storage error. Mirrors the v0.1 wire shape so the
+ * callback surface stays SCALE-free.
+ */
+sealed class HostStorageException: kotlin.Exception() {
+    
+    /**
+     * Quota exhausted.
+     */
+    class Full(
+        ) : HostStorageException() {
+        override val message
+            get() = ""
+    }
+    
+    /**
+     * Catch-all.
+     */
+    class Unknown(
+        
+        /**
+         * Human-readable failure reason.
+         */
+        val `reason`: kotlin.String
+        ) : HostStorageException() {
+        override val message
+            get() = "reason=${ `reason` }"
+    }
+    
+
+    companion object ErrorHandler : UniffiRustCallStatusErrorHandler<HostStorageException> {
+        override fun lift(error_buf: RustBuffer.ByValue): HostStorageException = FfiConverterTypeHostStorageError.lift(error_buf)
+    }
+
+    
+}
+
+/**
+ * @suppress
+ */
+public object FfiConverterTypeHostStorageError : FfiConverterRustBuffer<HostStorageException> {
+    override fun read(buf: ByteBuffer): HostStorageException {
+        
+
+        return when(buf.getInt()) {
+            1 -> HostStorageException.Full()
+            2 -> HostStorageException.Unknown(
+                FfiConverterString.read(buf),
+                )
+            else -> throw RuntimeException("invalid error enum value, something is very wrong!!")
+        }
+    }
+
+    override fun allocationSize(value: HostStorageException): ULong {
+        return when(value) {
+            is HostStorageException.Full -> (
+                // Add the size for the Int that specifies the variant plus the size needed for all fields
+                4UL
+            )
+            is HostStorageException.Unknown -> (
+                // Add the size for the Int that specifies the variant plus the size needed for all fields
+                4UL
+                + FfiConverterString.allocationSize(value.`reason`)
+            )
+        }
+    }
+
+    override fun write(value: HostStorageException, buf: ByteBuffer) {
+        when(value) {
+            is HostStorageException.Full -> {
+                buf.putInt(1)
+                Unit
+            }
+            is HostStorageException.Unknown -> {
+                buf.putInt(2)
+                FfiConverterString.write(value.`reason`, buf)
+                Unit
+            }
+        }.let { /* this makes the `when` an expression, which ensures it is exhaustive */ }
+    }
+
+}
+
+
+
+
+
+/**
+ * Failure modes returned from host-facing `start_ws_bridge` wrappers.
+ */
+sealed class WsBridgeStartException(message: String): kotlin.Exception(message) {
+        
+    /**
+     * A bridge is already running for this host.
+     */
+        class AlreadyRunning(message: String) : WsBridgeStartException(message)
+        
+    /**
+     * Anything else (bind failure, runtime spin-up failure, ...).
+     */
+        class Io(message: String) : WsBridgeStartException(message)
+        
+
+    companion object ErrorHandler : UniffiRustCallStatusErrorHandler<WsBridgeStartException> {
+        override fun lift(error_buf: RustBuffer.ByValue): WsBridgeStartException = FfiConverterTypeWsBridgeStartError.lift(error_buf)
+    }
+}
+
+/**
+ * @suppress
+ */
+public object FfiConverterTypeWsBridgeStartError : FfiConverterRustBuffer<WsBridgeStartException> {
+    override fun read(buf: ByteBuffer): WsBridgeStartException {
+        
+            return when(buf.getInt()) {
+            1 -> WsBridgeStartException.AlreadyRunning(FfiConverterString.read(buf))
+            2 -> WsBridgeStartException.Io(FfiConverterString.read(buf))
+            else -> throw RuntimeException("invalid error enum value, something is very wrong!!")
+        }
+        
+    }
+
+    override fun allocationSize(value: WsBridgeStartException): ULong {
+        return 4UL
+    }
+
+    override fun write(value: WsBridgeStartException, buf: ByteBuffer) {
+        when(value) {
+            is WsBridgeStartException.AlreadyRunning -> {
+                buf.putInt(1)
+                Unit
+            }
+            is WsBridgeStartException.Io -> {
+                buf.putInt(2)
+                Unit
+            }
+        }.let { /* this makes the `when` an expression, which ensures it is exhaustive */ }
+    }
+
+}
+
+
+
+
+
+/**
+ * Callback surface that iOS and Android implement. The Rust core invokes
+ * these synchronously from `async` trait methods, which is acceptable for
+ * UniFFI because every callback hop is short-lived and reentrant.
+ */
+public interface HostCallbacks {
+    
+    /**
+     * Lifecycle logger. Marker is a stable slug, detail is free-form.
+     */
+    fun `onCoreLog`(`marker`: kotlin.String, `detail`: kotlin.String)
+    
+    /**
+     * Open a URL in the system browser.
+     */
+    fun `navigateTo`(`url`: kotlin.String)
+    
+    /**
+     * Deliver a push notification. The payload is the SCALE-encoded
+     * [`v01::HostPushNotificationRequest`].
+     */
+    fun `pushNotification`(`payload`: kotlin.ByteArray)
+    
+    /**
+     * Prompt the user for a device-level permission (camera, mic, ...).
+     * `request` is the SCALE-encoded
+     * [`v01::HostDevicePermissionRequest`]; the host returns whether the
+     * permission was granted.
+     */
+    fun `devicePermission`(`request`: kotlin.ByteArray): kotlin.Boolean
+    
+    /**
+     * Prompt the user for a remote (product-scoped) permission bundle.
+     * `request` is the SCALE-encoded [`v01::RemotePermissionRequest`].
+     */
+    fun `remotePermission`(`request`: kotlin.ByteArray): kotlin.Boolean
+    
+    /**
+     * Answer a feature-support query. `request` is the SCALE-encoded
+     * [`HostFeatureSupportedRequest`].
+     */
+    fun `featureSupported`(`request`: kotlin.ByteArray): kotlin.Boolean
+    
+    /**
+     * Read a value from the host's scoped key-value store.
+     */
+    fun `localStorageRead`(`key`: kotlin.String): kotlin.ByteArray?
+    
+    /**
+     * Write a value to the host's scoped key-value store.
+     */
+    fun `localStorageWrite`(`key`: kotlin.String, `value`: kotlin.ByteArray)
+    
+    /**
+     * Clear a value from the host's scoped key-value store.
+     */
+    fun `localStorageClear`(`key`: kotlin.String)
+    
+    companion object
+}
+
+
+
+// Put the implementation in an object so we don't pollute the top-level namespace
+internal object uniffiCallbackInterfaceHostCallbacks {
+    internal object `onCoreLog`: UniffiCallbackInterfaceHostCallbacksMethod0 {
+        override fun callback(`uniffiHandle`: Long,`marker`: RustBuffer.ByValue,`detail`: RustBuffer.ByValue,`uniffiOutReturn`: Pointer,uniffiCallStatus: UniffiRustCallStatus,) {
+            val uniffiObj = FfiConverterTypeHostCallbacks.handleMap.get(uniffiHandle)
+            val makeCall = { ->
+                uniffiObj.`onCoreLog`(
+                    FfiConverterString.lift(`marker`),
+                    FfiConverterString.lift(`detail`),
+                )
+            }
+            val writeReturn = { _: Unit -> Unit }
+            uniffiTraitInterfaceCall(uniffiCallStatus, makeCall, writeReturn)
+        }
+    }
+    internal object `navigateTo`: UniffiCallbackInterfaceHostCallbacksMethod1 {
+        override fun callback(`uniffiHandle`: Long,`url`: RustBuffer.ByValue,`uniffiOutReturn`: Pointer,uniffiCallStatus: UniffiRustCallStatus,) {
+            val uniffiObj = FfiConverterTypeHostCallbacks.handleMap.get(uniffiHandle)
+            val makeCall = { ->
+                uniffiObj.`navigateTo`(
+                    FfiConverterString.lift(`url`),
+                )
+            }
+            val writeReturn = { _: Unit -> Unit }
+            uniffiTraitInterfaceCallWithError(
+                uniffiCallStatus,
+                makeCall,
+                writeReturn,
+                { e: HostNavigateRejection -> FfiConverterTypeHostNavigateRejection.lower(e) }
+            )
+        }
+    }
+    internal object `pushNotification`: UniffiCallbackInterfaceHostCallbacksMethod2 {
+        override fun callback(`uniffiHandle`: Long,`payload`: RustBuffer.ByValue,`uniffiOutReturn`: Pointer,uniffiCallStatus: UniffiRustCallStatus,) {
+            val uniffiObj = FfiConverterTypeHostCallbacks.handleMap.get(uniffiHandle)
+            val makeCall = { ->
+                uniffiObj.`pushNotification`(
+                    FfiConverterByteArray.lift(`payload`),
+                )
+            }
+            val writeReturn = { _: Unit -> Unit }
+            uniffiTraitInterfaceCallWithError(
+                uniffiCallStatus,
+                makeCall,
+                writeReturn,
+                { e: HostRejection -> FfiConverterTypeHostRejection.lower(e) }
+            )
+        }
+    }
+    internal object `devicePermission`: UniffiCallbackInterfaceHostCallbacksMethod3 {
+        override fun callback(`uniffiHandle`: Long,`request`: RustBuffer.ByValue,`uniffiOutReturn`: ByteByReference,uniffiCallStatus: UniffiRustCallStatus,) {
+            val uniffiObj = FfiConverterTypeHostCallbacks.handleMap.get(uniffiHandle)
+            val makeCall = { ->
+                uniffiObj.`devicePermission`(
+                    FfiConverterByteArray.lift(`request`),
+                )
+            }
+            val writeReturn = { value: kotlin.Boolean -> uniffiOutReturn.setValue(FfiConverterBoolean.lower(value)) }
+            uniffiTraitInterfaceCallWithError(
+                uniffiCallStatus,
+                makeCall,
+                writeReturn,
+                { e: HostRejection -> FfiConverterTypeHostRejection.lower(e) }
+            )
+        }
+    }
+    internal object `remotePermission`: UniffiCallbackInterfaceHostCallbacksMethod4 {
+        override fun callback(`uniffiHandle`: Long,`request`: RustBuffer.ByValue,`uniffiOutReturn`: ByteByReference,uniffiCallStatus: UniffiRustCallStatus,) {
+            val uniffiObj = FfiConverterTypeHostCallbacks.handleMap.get(uniffiHandle)
+            val makeCall = { ->
+                uniffiObj.`remotePermission`(
+                    FfiConverterByteArray.lift(`request`),
+                )
+            }
+            val writeReturn = { value: kotlin.Boolean -> uniffiOutReturn.setValue(FfiConverterBoolean.lower(value)) }
+            uniffiTraitInterfaceCallWithError(
+                uniffiCallStatus,
+                makeCall,
+                writeReturn,
+                { e: HostRejection -> FfiConverterTypeHostRejection.lower(e) }
+            )
+        }
+    }
+    internal object `featureSupported`: UniffiCallbackInterfaceHostCallbacksMethod5 {
+        override fun callback(`uniffiHandle`: Long,`request`: RustBuffer.ByValue,`uniffiOutReturn`: ByteByReference,uniffiCallStatus: UniffiRustCallStatus,) {
+            val uniffiObj = FfiConverterTypeHostCallbacks.handleMap.get(uniffiHandle)
+            val makeCall = { ->
+                uniffiObj.`featureSupported`(
+                    FfiConverterByteArray.lift(`request`),
+                )
+            }
+            val writeReturn = { value: kotlin.Boolean -> uniffiOutReturn.setValue(FfiConverterBoolean.lower(value)) }
+            uniffiTraitInterfaceCallWithError(
+                uniffiCallStatus,
+                makeCall,
+                writeReturn,
+                { e: HostRejection -> FfiConverterTypeHostRejection.lower(e) }
+            )
+        }
+    }
+    internal object `localStorageRead`: UniffiCallbackInterfaceHostCallbacksMethod6 {
+        override fun callback(`uniffiHandle`: Long,`key`: RustBuffer.ByValue,`uniffiOutReturn`: RustBuffer,uniffiCallStatus: UniffiRustCallStatus,) {
+            val uniffiObj = FfiConverterTypeHostCallbacks.handleMap.get(uniffiHandle)
+            val makeCall = { ->
+                uniffiObj.`localStorageRead`(
+                    FfiConverterString.lift(`key`),
+                )
+            }
+            val writeReturn = { value: kotlin.ByteArray? -> uniffiOutReturn.setValue(FfiConverterOptionalByteArray.lower(value)) }
+            uniffiTraitInterfaceCallWithError(
+                uniffiCallStatus,
+                makeCall,
+                writeReturn,
+                { e: HostStorageException -> FfiConverterTypeHostStorageError.lower(e) }
+            )
+        }
+    }
+    internal object `localStorageWrite`: UniffiCallbackInterfaceHostCallbacksMethod7 {
+        override fun callback(`uniffiHandle`: Long,`key`: RustBuffer.ByValue,`value`: RustBuffer.ByValue,`uniffiOutReturn`: Pointer,uniffiCallStatus: UniffiRustCallStatus,) {
+            val uniffiObj = FfiConverterTypeHostCallbacks.handleMap.get(uniffiHandle)
+            val makeCall = { ->
+                uniffiObj.`localStorageWrite`(
+                    FfiConverterString.lift(`key`),
+                    FfiConverterByteArray.lift(`value`),
+                )
+            }
+            val writeReturn = { _: Unit -> Unit }
+            uniffiTraitInterfaceCallWithError(
+                uniffiCallStatus,
+                makeCall,
+                writeReturn,
+                { e: HostStorageException -> FfiConverterTypeHostStorageError.lower(e) }
+            )
+        }
+    }
+    internal object `localStorageClear`: UniffiCallbackInterfaceHostCallbacksMethod8 {
+        override fun callback(`uniffiHandle`: Long,`key`: RustBuffer.ByValue,`uniffiOutReturn`: Pointer,uniffiCallStatus: UniffiRustCallStatus,) {
+            val uniffiObj = FfiConverterTypeHostCallbacks.handleMap.get(uniffiHandle)
+            val makeCall = { ->
+                uniffiObj.`localStorageClear`(
+                    FfiConverterString.lift(`key`),
+                )
+            }
+            val writeReturn = { _: Unit -> Unit }
+            uniffiTraitInterfaceCallWithError(
+                uniffiCallStatus,
+                makeCall,
+                writeReturn,
+                { e: HostStorageException -> FfiConverterTypeHostStorageError.lower(e) }
+            )
+        }
+    }
+
+    internal object uniffiFree: UniffiCallbackInterfaceFree {
+        override fun callback(handle: Long) {
+            FfiConverterTypeHostCallbacks.handleMap.remove(handle)
+        }
+    }
+
+    internal var vtable = UniffiVTableCallbackInterfaceHostCallbacks.UniffiByValue(
+        `onCoreLog`,
+        `navigateTo`,
+        `pushNotification`,
+        `devicePermission`,
+        `remotePermission`,
+        `featureSupported`,
+        `localStorageRead`,
+        `localStorageWrite`,
+        `localStorageClear`,
+        uniffiFree,
+    )
+
+    // Registers the foreign callback with the Rust side.
+    // This method is generated for each callback interface.
+    internal fun register(lib: UniffiLib) {
+        lib.uniffi_truapi_server_fn_init_callback_vtable_hostcallbacks(vtable)
+    }
+}
+
+/**
+ * The ffiConverter which transforms the Callbacks in to handles to pass to Rust.
+ *
+ * @suppress
+ */
+public object FfiConverterTypeHostCallbacks: FfiConverterCallbackInterface<HostCallbacks>()
+
+
+
+
+/**
+ * @suppress
+ */
+public object FfiConverterOptionalString: FfiConverterRustBuffer<kotlin.String?> {
+    override fun read(buf: ByteBuffer): kotlin.String? {
+        if (buf.get().toInt() == 0) {
+            return null
+        }
+        return FfiConverterString.read(buf)
+    }
+
+    override fun allocationSize(value: kotlin.String?): ULong {
+        if (value == null) {
+            return 1UL
+        } else {
+            return 1UL + FfiConverterString.allocationSize(value)
+        }
+    }
+
+    override fun write(value: kotlin.String?, buf: ByteBuffer) {
+        if (value == null) {
+            buf.put(0)
+        } else {
+            buf.put(1)
+            FfiConverterString.write(value, buf)
+        }
+    }
+}
+
+
+
+
+/**
+ * @suppress
+ */
+public object FfiConverterOptionalByteArray: FfiConverterRustBuffer<kotlin.ByteArray?> {
+    override fun read(buf: ByteBuffer): kotlin.ByteArray? {
+        if (buf.get().toInt() == 0) {
+            return null
+        }
+        return FfiConverterByteArray.read(buf)
+    }
+
+    override fun allocationSize(value: kotlin.ByteArray?): ULong {
+        if (value == null) {
+            return 1UL
+        } else {
+            return 1UL + FfiConverterByteArray.allocationSize(value)
+        }
+    }
+
+    override fun write(value: kotlin.ByteArray?, buf: ByteBuffer) {
+        if (value == null) {
+            buf.put(0)
+        } else {
+            buf.put(1)
+            FfiConverterByteArray.write(value, buf)
+        }
+    }
+}
+
diff --git a/android/truapi-host/src/main/kotlin/io/parity/truapi/TrUAPIHost.kt b/android/truapi-host/src/main/kotlin/io/parity/truapi/TrUAPIHost.kt
new file mode 100644
index 00000000..3b503908
--- /dev/null
+++ b/android/truapi-host/src/main/kotlin/io/parity/truapi/TrUAPIHost.kt
@@ -0,0 +1,205 @@
+// TrUAPIHost - Android host adapter.
+//
+// The Rust core (compiled to `libtruapi_server.so` and surfaced via UniFFI in
+// `src/main/kotlin/generated/uniffi/truapi_server/truapi_server.kt`) owns the
+// wire protocol, request routing, subscription lifecycle, and platform trait
+// dispatch.
+//
+// This file exposes:
+//
+//   * `HostBridge` - the Kotlin-friendly callback interface the embedding app
+//     implements. It splits device and remote permissions, mirroring the
+//     `Permissions` platform trait in the Rust core.
+//   * `TrUAPIHostCore` - owning wrapper around the UniFFI-generated
+//     `NativeTrUApiCore`. Holds the bridge alive for the lifetime of the
+//     core and exposes session + WS-bridge controls.
+//
+// Products running inside a `WebView` connect to the Rust core via the
+// localhost WebSocket bridge. Start it with `core.startWsBridge()` and load
+// the product page with the resulting `ws://127.0.0.1:<port>/?t=<token>` URL
+// passed through to the product's `@parity/truapi` `createWebSocketProvider`
+// call.
+
+package io.parity.truapi
+
+import uniffi.truapi_server.HostCallbacks
+import uniffi.truapi_server.HostNavigateRejection
+import uniffi.truapi_server.HostRejection
+import uniffi.truapi_server.HostStorageException
+import uniffi.truapi_server.NativeTrUApiCore
+import uniffi.truapi_server.WsBridgeEndpoint
+import uniffi.truapi_server.WsBridgeStartException
+
+/** Package metadata. */
+object TrUAPIHost {
+    const val VERSION = "0.1.0"
+}
+
+/**
+ * Storage backend the host provides to the Rust core. Throws
+ * [HostStorageException] to signal quota exhaustion or unknown failure; the
+ * core maps both onto the v0.1 `HostLocalStorageReadError` wire shape.
+ */
+interface HostStorage {
+    @Throws(HostStorageException::class)
+    fun read(key: String): ByteArray?
+
+    @Throws(HostStorageException::class)
+    fun write(key: String, value: ByteArray)
+
+    @Throws(HostStorageException::class)
+    fun clear(key: String)
+}
+
+/**
+ * Host-side callback bundle that the Rust core invokes for capabilities the
+ * native shell owns. The interface mirrors the underlying UniFFI surface
+ * but keeps the permission split explicit:
+ *
+ *   * [devicePermission] handles camera / mic / push prompts and similar
+ *     OS-scoped grants. `request` is a SCALE-encoded
+ *     `v01::HostDevicePermissionRequest`.
+ *   * [remotePermission] handles per-product capability bundles requested
+ *     by the application running inside the WebView. `request` is a
+ *     SCALE-encoded `v01::RemotePermissionRequest`.
+ *
+ * Embedders typically wire the SCALE payloads through the generated
+ * `@parity/truapi` client running on the JS side for UI rendering, then
+ * report the user's decision as a `Boolean`.
+ *
+ * Threading: when the WS bridge is running, the Rust core invokes every
+ * callback on the dedicated `truapi-ws-bridge` worker thread, never the UI
+ * (main) thread. Any UI work an implementation does (navigation, prompts,
+ * notifications) MUST be marshalled onto the main thread, e.g. with
+ * `Handler(Looper.getMainLooper()).post { ... }` or a `CoroutineScope` bound
+ * to `Dispatchers.Main`. Touching views or the `WebView` directly from a
+ * callback throws `CalledFromWrongThreadException`.
+ */
+interface HostBridge {
+    /** Lifecycle logger. Marker is a stable slug, detail is free-form. */
+    fun onCoreLog(marker: String, detail: String) {}
+
+    /**
+     * Open a URL in the system browser. Invoked on the `truapi-ws-bridge`
+     * worker thread; marshal the UI launch (e.g. `startActivity`) to the main
+     * thread.
+     */
+    @Throws(HostNavigateRejection::class)
+    fun navigateTo(url: String)
+
+    /**
+     * Deliver a push notification (SCALE-encoded `HostPushNotificationRequest`).
+     * Invoked on the `truapi-ws-bridge` worker thread; marshal any UI work to
+     * the main thread.
+     */
+    @Throws(HostRejection::class)
+    fun pushNotification(payload: ByteArray)
+
+    /**
+     * Prompt for a device-level permission. Returns whether it was granted.
+     * Invoked on the `truapi-ws-bridge` worker thread; present the prompt on
+     * the main thread and block this thread until the user decides.
+     */
+    @Throws(HostRejection::class)
+    fun devicePermission(request: ByteArray): Boolean
+
+    /**
+     * Prompt for a remote (product-scoped) permission bundle. Invoked on the
+     * `truapi-ws-bridge` worker thread; present the prompt on the main thread
+     * and block this thread until the user decides.
+     */
+    @Throws(HostRejection::class)
+    fun remotePermission(request: ByteArray): Boolean
+
+    /**
+     * Answer a feature-support query. Invoked on the `truapi-ws-bridge` worker
+     * thread.
+     */
+    @Throws(HostRejection::class)
+    fun featureSupported(request: ByteArray): Boolean
+
+    /** Scoped key-value storage for the Rust core. */
+    val storage: HostStorage
+}
+
+/**
+ * Adapter from the public [HostBridge] surface to the generated UniFFI
+ * [HostCallbacks] interface. Keeps the public API stable even if uniffi-bindgen
+ * renames generated symbols.
+ */
+private class HostCallbackAdapter(private val bridge: HostBridge) : HostCallbacks {
+    override fun onCoreLog(marker: String, detail: String) =
+        bridge.onCoreLog(marker, detail)
+
+    override fun navigateTo(url: String) =
+        bridge.navigateTo(url)
+
+    override fun pushNotification(payload: ByteArray) =
+        bridge.pushNotification(payload)
+
+    override fun devicePermission(request: ByteArray): Boolean =
+        bridge.devicePermission(request)
+
+    override fun remotePermission(request: ByteArray): Boolean =
+        bridge.remotePermission(request)
+
+    override fun featureSupported(request: ByteArray): Boolean =
+        bridge.featureSupported(request)
+
+    override fun localStorageRead(key: String): ByteArray? =
+        bridge.storage.read(key)
+
+    override fun localStorageWrite(key: String, value: ByteArray) =
+        bridge.storage.write(key, value)
+
+    override fun localStorageClear(key: String) =
+        bridge.storage.clear(key)
+}
+
+/**
+ * Owning wrapper around the Rust-backed [NativeTrUApiCore]. Holds the bridge
+ * alive for the lifetime of the core and exposes session + WS-bridge
+ * controls.
+ *
+ * Hosts integrating with a `WebView`-based product call [startWsBridge] and
+ * pass the resulting `ws://127.0.0.1:<port>/?t=<token>` URL to the product
+ * (typically via a query string or page-bootstrap hook). The product wires
+ * that URL into `@parity/truapi`'s `createWebSocketProvider`.
+ */
+class TrUAPIHostCore(bridge: HostBridge) : AutoCloseable {
+    // Co-owns the adapter alongside the generated FfiConverter handle map,
+    // which is what actually keeps the callback object alive for the core.
+    private val callbackRetainer: HostCallbacks = HostCallbackAdapter(bridge)
+    private val inner: NativeTrUApiCore = NativeTrUApiCore(callbackRetainer)
+
+    /** Set the currently-paired session. `pubkey` must be exactly 32 bytes. */
+    fun setActiveSession(
+        pubkey: ByteArray,
+        liteUsername: String? = null,
+        fullUsername: String? = null,
+    ): Boolean = inner.setActiveSession(pubkey, liteUsername, fullUsername)
+
+    /** Drop the currently-paired session. */
+    fun clearActiveSession() {
+        inner.clearActiveSession()
+    }
+
+    /**
+     * Start the localhost WebSocket bridge (requires the `ws-bridge` feature
+     * in the cdylib). The returned [WsBridgeEndpoint] carries the port and
+     * session token; build a `ws://127.0.0.1:<port>/?t=<token>` URL and pass
+     * it to the product's `createWebSocketProvider` call.
+     */
+    @Throws(WsBridgeStartException::class)
+    fun startWsBridge(bindPort: UShort = 0u): WsBridgeEndpoint =
+        inner.startWsBridge(bindPort)
+
+    /** Stop the localhost WebSocket bridge (if running). */
+    fun stopWsBridge() {
+        inner.stopWsBridge()
+    }
+
+    override fun close() {
+        inner.close()
+    }
+}
diff --git a/build.gradle.kts b/build.gradle.kts
new file mode 100644
index 00000000..ab7c47e3
--- /dev/null
+++ b/build.gradle.kts
@@ -0,0 +1,8 @@
+// Empty root project. All build logic lives in the `:truapi-host` module
+// under `android/`. This file exists so `./gradlew` finds a build script at
+// the workspace root.
+
+plugins {
+    id("com.android.library") version "8.5.2" apply false
+    id("org.jetbrains.kotlin.android") version "1.9.24" apply false
+}
diff --git a/docs/design/dotli-architecture-change.md b/docs/design/dotli-architecture-change.md
new file mode 100644
index 00000000..9a58f4d8
--- /dev/null
+++ b/docs/design/dotli-architecture-change.md
@@ -0,0 +1,300 @@
+# Dotli architecture change, visual reference
+
+Companion to [dotli-rust-core-proposal.md](./dotli-rust-core-proposal.md). Shown as diagrams plus a deep dive on how the host-callback surface maps to the shared-core SDK vision.
+
+The point of these diagrams: justify what is **in scope** for the dotli migration diff and what is explicitly **deferred**. The migration replaces the novasamatech/host-api stack with the TrUAPI Rust core; nothing else.
+
+---
+
+## 1. Where protocol logic lives (the headline change)
+
+```
+                       BEFORE (origin/main)
+   ┌─────────────────────────────────────────────────────────────┐
+   │ Product iframe (sandbox)                                    │
+   │   @novasamatech/host-papp ─── product client                │
+   └──────────────────────┬──────────────────────────────────────┘
+                          │  postMessage (host-container wire)
+                          ▼
+   ┌─────────────────────────────────────────────────────────────┐
+   │ dot.li main thread                                          │
+   │ ┌─────────────────────────────────────────────────────────┐ │
+   │ │ container.ts  +  statement-store-mapping.ts             │ │
+   │ │ ─────────────────────────────────────────────────────── │ │
+   │ │  routing • codecs • subscriptions • permissions service │ │
+   │ │  topic encoding • statement mapping • dotns parsing     │ │
+   │ │  rate limiting • feature flags • etc.                   │ │
+   │ │            ALL OF THIS IS RE-IMPLEMENTED                │ │
+   │ │            ON iOS / Android / Electron TOO              │ │
+   │ └────────────────────────────┬────────────────────────────┘ │
+   │                              │                              │
+   │             OS primitives  (modals, localStorage,           │
+   │             smoldot, host-papp, fetch, Notification API)    │
+   └─────────────────────────────────────────────────────────────┘
+
+
+                       AFTER (this refactor)
+   ┌─────────────────────────────────────────────────────────────┐
+   │ Product iframe ── origin: <cid>.app.dot.li ── (per-CID)     │
+   │   @parity/truapi (codegen) ─── product client               │
+   └──────────────────────┬──────────────────────────────────────┘
+                          │  MessageChannel (TrUAPI wire bytes)
+                          │  port handed off via the host shell
+                          │  during the `truapi-init` handshake
+                          ▼
+   ┌─────────────────────────────────────────────────────────────┐
+   │ Host shell ── origin: dot.li ── (user-visible UI)           │
+   │ - top bar, modal prompts                                    │
+   │ - creates the protocol iframe + product iframe              │
+   │ - relays MessagePorts between them (no protocol logic)      │
+   └──────────────────────┬──────────────────────────────────────┘
+                          │  MessageChannel port (transferred)
+                          ▼
+   ┌─────────────────────────────────────────────────────────────┐
+   │ Protocol iframe ── origin: host.dot.li ── (STABLE origin)   │
+   │ (hidden iframe embedded by every dot.li tab)                │
+   │                                                             │
+   │  thin JS shim:                                              │
+   │  - constructs the SharedWorker below                        │
+   │  - exposes platform callbacks the WASM core can't make      │
+   │    directly from a worker (modal UI prompts are routed      │
+   │    back through the host shell at dot.li)                   │
+   │  - migrates legacy localStorage sessions into IndexedDB     │
+   │                                                             │
+   │           ┌────────── SharedWorker (host.dot.li) ─────────┐ │
+   │           │                                               │ │
+   │           │  truapi-server (Rust → WASM)                  │ │
+   │           │  ──────────────────────────                   │ │
+   │           │  routing • SCALE codecs • subscriptions       │ │
+   │           │  permissions service                          │ │
+   │           │  statement mapping                            │ │
+   │           │  dotns parsing • rate limit                   │ │
+   │           │  embedded smoldot ── chain provider           │ │
+   │           │  session state                                │ │
+   │           │                                               │ │
+   │           │  storage: IndexedDB on host.dot.li            │ │
+   │           │  (stable across product CID changes; shared   │ │
+   │           │   across every tab via SharedWorker semantics)│ │
+   │           └───────────────────────────────────────────────┘ │
+   └─────────────────────────────────────────────────────────────┘
+
+   Same logic, written once in Rust, shared across iOS / Android / web.
+```
+
+### Origin model, why host.dot.li
+
+Production nginx routes (see `dotli/nginx/nginx.polkadot`):
+
+| Hostname                  | Build       | Role                                                              |
+|---------------------------|-------------|-------------------------------------------------------------------|
+| `dot.li` and `*.dot.li`   | host        | Main shell, user-visible UI, top bar, dApp loader               |
+| `<cid>.app.dot.li`        | sandbox     | Product iframes, origin changes every CID update                |
+| `host.dot.li`             | protocol    | Stable-origin protocol iframe, hidden, embedded by every tab    |
+
+Product iframes can't host the protocol core: their origin changes with every app CID, so any `localStorage` / IndexedDB / OPFS state would be lost on every update. The host shell at `dot.li` is stable but cohabits with user-facing UI; running heavy crypto + smoldot there would block paint frames.
+
+The protocol iframe at `host.dot.li` has neither problem: it's a stable origin and it has no UI, so a same-origin worker constructed from it runs the WASM core off the main thread while keeping `truapi`'s persistent state on a stable origin.
+
+> The shipped `@parity/truapi-host-wasm/worker-runtime` entrypoint is a plain per-tab dedicated Web Worker. The `SharedWorker` topology drawn in these diagrams is the recommended target (see Option 2 in the companion proposal), not yet implemented. Read every `SharedWorker` mention below as the future shape.
+
+`SharedWorker` semantics give two further wins:
+
+- **One core per browser, not per tab.** Session state, permission grants, and chain connections are implicit cross-tab state. Replaces the existing `BroadcastChannel` glue for shared auth.
+- **Embedded smoldot.** Since the SharedWorker is already the single per-origin core, smoldot lives inside it. Dotli's separate `protocol-shared-worker.ts` smoldot SharedWorker collapses into this one.
+
+`SharedWorker` does not expose `localStorage` (main-thread only). The `truapi-platform::Storage` impl persists to **IndexedDB** on the `host.dot.li` origin. The thin JS shim in the protocol iframe runs a one-time migration of the existing `PAPP_${siteId}_*` localStorage keys into IDB so sessions survive the cutover.
+
+---
+
+## 2. Module-level diff in `@dotli/ui`
+
+```
+   ──── DELETED ────                ──── NEW ─────────────────────────
+
+   container.ts            930 LOC  host-callbacks/
+   statement-store-mapping  170 LOC    ├─ Account.ts          host-papp
+                                       ├─ Chain.ts            smoldot/RPC
+                                       ├─ LocalStorage.ts     localStorage
+   ──── DEPS DROPPED ───               ├─ OpenUrl.ts          window.open
+                                       ├─ Preimage.ts         Helia (IPFS)
+   @novasamatech/host-api              ├─ PromptPermission.ts modal
+   @novasamatech/host-container        ├─ PushNotification.ts Notification
+   @novasamatech/sdk-statement         ├─ Signing.ts          host-papp
+   @novasamatech/statement-store       ├─ StatementStore.ts   sub-store
+                                       └─ handlers.ts         glue
+
+   ──── DEPS ADDED ────
+
+   @parity/truapi-host-wasm        SharedWorker entrypoint that imports
+                                   the WASM core (smoldot embedded)
+   @parity/truapi-host-wasm/web    protocol-iframe shim: constructs the
+                                   SharedWorker, exposes the platform
+                                   callbacks the worker can't make from
+                                   its own context (modal UI, etc.),
+                                   relays MessagePort handoffs from the
+                                   host shell at dot.li
+   @parity/truapi                  types from codegen
+
+   ──── KEPT ──────────
+
+   bridge.ts                rewritten: ~80 LOC, was ~120 LOC
+   permissions.ts           kept (per-dApp grant storage)
+   permission-modal.ts      kept (UI primitive)
+   render.ts                kept (no-op for non-iframe content)
+   topbar.ts                kept (UI)
+   @novasamatech/host-papp  kept (account/signing; retired in D1)
+```
+
+---
+
+## 3. The shrinking host-callback surface
+
+```
+                 BEFORE                            AFTER
+              (15+ handlers,                  (6 host-facing
+               JS owns the logic)              capability traits
+                                                the core can't
+                                                make itself)
+
+  ┌──────────────────────────┐         ┌──────────────────────────┐
+  │ accountGet               │ ──────► │ accountGet      (D1*)    │
+  │ accountGetAlias          │ ──────► │ accountGetAlias (D1*)    │
+  │ getNonProductAccounts    │ ──────► │ getNonProduct…  (D1*)    │
+  │ getUserId                │ ──────► │ getUserId       (D1*)    │
+  │ accountConnectionStatus… │ ──────► │ accountConn…    (D1*)    │
+  │ signPayload              │ ──────► │ signPayload     (D1*)    │
+  │ signRaw                  │ ──────► │ signRaw         (D1*)    │
+  │ statementStoreSubmit     │ ──────► │ statementStore… (D2*)    │
+  │ statementStoreSubscribe  │ ──────► │ statementStore… (D2*)    │
+  │ statementStoreCreateProof│ ──────► │ statementStore… (D2*)    │
+  │ preimageLookupSubscribe  │ ──────► │ preimageLookup… (D2*)    │
+  │                          │         ├──────────────────────────┤
+  │ devicePermission ────────┼─────►   │ devicePermission         │
+  │ remotePermission ────────┼─────►   │ remotePermission         │
+  │ navigateTo (parsing) ────┼─────►   │ navigateTo (parsed core) │
+  │ featureSupported         │ ──────► │ featureSupported         │
+  │ localStorage*            │ ──────► │ Storage read/write/clear │
+  │ pushNotification         │ ──────► │ pushNotification         │
+  │ chainConnection          │ ──────► │ chainConnect    (E1*)    │
+  │ themeSubscribe (#366)    │ ──X     │ (out of scope)           │
+  └──────────────────────────┘         └──────────────────────────┘
+
+   * (D1/D2/E1) = host-papp, libp2p, layer-2 retirement issues already
+                  documented in tracking issues, NOT this PR.
+   The AFTER column names match the `truapi-platform` traits as shipped:
+   `Permissions` keeps the two-call device/remote split per v0.1,
+   `Navigation` receives URLs already parsed by the core, `Features`,
+   `Storage`, `Notifications`, and `ChainProvider` cover the rest.
+```
+
+---
+
+## 4. Mapping host callbacks to `truapi-platform` traits
+
+Every row in the middle block of diagram §3 is one piece of "logic that used to live in JS, now lives in Rust." Each maps to one of the **capability traits** the host implements in `truapi-platform` (`Storage`, `Navigation`, `Notifications`, `Permissions`, `Features`, `ChainProvider`); everything else gets pulled out of the host into the core. Where a section below describes a single consolidated prompt or a different trait vocabulary, it is calling out a **proposed future shape**, not the shipped surface; the shipped names are the six above.
+
+### 4.1 `devicePermission` + `remotePermission` (shipped split; consolidation proposed)
+
+**Before, host did the policy work.** Two separate callbacks:
+
+- `devicePermission(name)`, for browser-mediated permissions (camera, mic, geolocation, push). The JS host:
+  1. Maintained the per-dApp grant cache in `localStorage`.
+  2. Classified which device permissions were even *enforceable* in a browser iframe (notifications and `openUrl` are not really gateable from a sandboxed iframe; mic and camera are).
+  3. Showed the consent modal, persisted the result, dispatched a "permission changed" event so the iframe could reload with the updated `allow` attribute.
+- `remotePermission(req)`, for protocol-level permissions (`TransactionSubmit`, `StatementSubmit`, `ChainSubmit`, `WebRtc`, a wildcard `Remote` variant). The JS host:
+  1. Mapped `TransactionSubmit` → user-friendly "Sign Transactions" label.
+  2. Decided which `Remote` variants were gated vs. auto-granted.
+  3. Showed a different modal flow (the now-deleted `showRemotePermissionModal`).
+  4. Rate-limited.
+
+That is policy: classification, mapping, caching, rate limiting. By the test "why can't the Rust core do this directly?", none of it is a syscall.
+
+**Shipped today: the `Permissions` trait keeps the two-call split.** Per v0.1, `truapi-platform::Permissions` has `device_permission(HostDevicePermissionRequest)` and `remote_permission(RemotePermissionRequest)`, mirrored by the dotli adapter and the iOS/Android bridges. The host renders one modal flow per call and returns the response.
+
+**Proposed future shape: collapse both into one prompt.** A single host trait of the form `prompt_permission(HostPermission) -> bool` would let the Rust permissions service in core:
+
+- Know the canonical wire tags and their human labels.
+- Check the cached decision (via `Storage::read`) before calling back.
+- Decide whether the permission is enforceable; auto-grant the unenforceable ones without bothering the host.
+- Rate-limit.
+- Only when *the user must actually be asked*, dispatch the prompt and wait for the boolean.
+
+In dotli that consolidated callback would be a single `host-callbacks/PromptPermission.ts` whose sole job is to render the modal and return `true` on grant, `false` on deny, with the same trait implemented by Swift on iOS and Kotlin on Android. None of them would re-implement the cache, the rate limiter, or the wire-tag mapping. This consolidation is not yet in core; it is the direction this section argues for.
+
+The dotli adapter references `getPermissionStatus` / `setPermissionStatus` against a local `permissions.ts` store. Once the grant cache moves into the core's `Storage`, `permissions.ts` can disappear from the dotli tree entirely.
+
+### 4.2 `navigateTo (parsing)` → `Navigation::navigate_to (already parsed)`
+
+**Before, host was a URL parser.** `navigateTo(url)` handed a raw string to the host. JS had to:
+
+1. Detect a `.dot` deep link (`testingout.dot/some/path`) → drive the dotli internal router (DOTNS resolution, swap iframe contents, push history state).
+2. Detect a normal `https://` URL → `window.open(url, "_blank")`.
+3. Detect malformed input → reject.
+
+That is a parser plus a deep-link dispatcher. Three platforms, three parsers, three places to drift.
+
+**After, host owns one trait: "hand this URL to the OS browser."** Two distinct surfaces split in the core:
+
+- Internal routing (deep links to other `.dot` apps) is handled entirely inside the core. It dispatches itself, no host roundtrip.
+- External navigation surfaces as `Navigation::navigate_to(url)`, and `url` is *already validated* by the core. The host treats it as opaque.
+
+In dotli, this is the host's `Navigation` impl, which is essentially `window.open(url, "_blank")`. The shipped `truapi-platform::Navigation` trait has the single `navigate_to` method; there is no separate deep-link callback because the core already knows the dApp graph and dispatches deep links directly.
+
+### 4.3 `featureSupported` (kept; planned for removal)
+
+`featureSupported(genesisHash)` lets the core ask "does this host know about this chain?" before letting a product call it. The host answers yes/no from its supported-chain catalog.
+
+The plan, tracked separately, is to drop this callback. The Rust core will bundle the chain catalog itself, so there is no question for the host to answer. That fits the "why can't the Rust core do this directly?" test, the answer for `featureSupported` is "it can," so the callback should not exist.
+
+### 4.4 `localStorage*` → `Storage::read` / `Storage::write` / `Storage::clear`
+
+**Before, implicit, scattered.** The novasamatech protocol had several scoped storage callbacks (one per dApp namespace), and the JS host computed prefixes (`dotli:<label>:<key>`), guarded against quota errors, and decided what counted as "scoped" vs. "global" state. The core did not own a storage abstraction; it asked the host for what it needed and trusted the host's scoping.
+
+**After, three flat ops, no scoping in the host.** The shipped `truapi-platform::Storage` trait:
+
+```rust
+pub trait Storage: Send + Sync {
+    fn read(&self, key: String)
+        -> impl Future<Output = Result<Option<Vec<u8>>, HostLocalStorageReadError>> + Send;
+    fn write(&self, key: String, value: Vec<u8>)
+        -> impl Future<Output = Result<(), HostLocalStorageReadError>> + Send;
+    fn clear(&self, key: String)
+        -> impl Future<Output = Result<(), HostLocalStorageReadError>> + Send;
+}
+```
+
+Three methods. The core:
+
+- Owns the namespacing convention (`truapi:…` for core-owned state, per-dApp prefixes computed in core before calling back).
+- Owns the cache invalidation rules.
+- Owns the schema for any structured value stored.
+
+The host, `host-callbacks/LocalStorage.ts` in dotli, just plumbs to `window.localStorage.getItem` / `setItem` / `removeItem`. On iOS that is `NSUserDefaults`. On Android `SharedPreferences`. None of those hosts cares what the keys mean; they just store bytes against strings.
+
+This is also what makes the permission-cache cleanup in §4.1 tractable: once permissions migrate fully to `Storage::read`/`Storage::write`, the dotli adapter loses `permissions.ts` entirely and the core owns the grant cache the way it owns every other piece of state.
+
+---
+
+## 5. Mapping dotli `host-callbacks/` to `truapi-platform` traits
+
+Each `host-callbacks/*.ts` file in dotli implements one capability trait:
+
+| dotli file              | `truapi-platform` trait | core owns                           | host owns              |
+|-------------------------|-------------------------|-------------------------------------|------------------------|
+| `LocalStorage.ts`       | `Storage`               | namespacing, schema, invalidation   | `window.localStorage`  |
+| `OpenUrl.ts`            | `Navigation`            | URL parsing, deep-link dispatch     | `window.open`          |
+| `PushNotification.ts`   | `Notifications`         | rate limiting, dedupe, payload fmt  | `Notification` API     |
+| `PromptPermission.ts`   | `Permissions`           | classification, cache, mapping      | the consent modal(s)   |
+| `Chain.ts`              | `ChainProvider`         | chainHead state machine, RPC fan-in | smoldot / RPC socket   |
+
+`Permissions` is shipped as the two-call device/remote split (§4.1); `Features` (`featureSupported`) is the sixth host-facing trait and is planned for removal (§4.3). The "before" column for each row was a handler in `container.ts` that mixed all three concerns, protocol logic, policy, *and* the OS call, in JS. The refactor's whole purpose is to leave only the third column on the host side, and that is what makes iOS/Android able to share the rest with web.
+
+The remaining dotli callbacks (`Account.ts`, `Signing.ts`, `StatementStore.ts`, `Preimage.ts`) are the ones marked `(D1*)`, `(D2*)` in diagram §3. They are not part of the `truapi-platform` trait set: account, signing, statement-store and preimage flows live in the Rust core itself, and these callbacks currently rely on JS-only libraries (`host-papp` for accounts/signing, sub-store, Helia). Each retirement issue describes how the underlying capability moves into Rust so the dotli callback can be dropped, leaving only the host-facing capability traits above.
+
+---
+
+## 6. What this justifies about the migration diff
+
+- **In scope:** anything between BEFORE and AFTER in §1 and §2 (delete `container.ts` / `statement-store-mapping.ts`, add `host-callbacks/`, swap `bridge.ts`, swap deps).
+- **Out of scope, deferred to issues:** anything marked `(D1*)` / `(D2*)` / `(E1*)` in §3.
+- **Out of scope and not coming back:** `themeSubscribe`, `requestLogin(reason, label)`, the remote-permission modal, these are #366 features that targeted the deleted `container.ts` and would need to be re-modeled as new Rust traits, not patched into the syscall layer.
diff --git a/docs/design/dotli-rust-core-proposal.md b/docs/design/dotli-rust-core-proposal.md
new file mode 100644
index 00000000..10868ad3
--- /dev/null
+++ b/docs/design/dotli-rust-core-proposal.md
@@ -0,0 +1,284 @@
+# dot.li with a single Rust core, proposed architectures
+
+Companion to [dotli-architecture-change.md](./dotli-architecture-change.md). This doc documents what dot.li runs today (host page + protocol iframe at `host.dot.li` + per-CID app subdomain iframe + product iframe) and explores how the topology changes if we adopt a single Rust core as the runtime, and what it would take to drop the per-CID app subdomain iframe.
+
+## Goal
+
+The current dot.li architecture predates TrUAPI's "Rust core is the application" stance. It carries a four-frame topology that grew out of layer-2 isolation requirements, content-delivery sandboxing, and JS-side smoldot ownership. Each frame carries weight: a vite bundle, a wildcard DNS record, an OOPIF process, and at least one postMessage hop on every host-API call.
+
+If the Rust core owns *all* protocol logic, chain access (smoldot + RPC), DOTNS resolution, content fetching from IPFS, per-product storage, permission gating, most of what the app subdomain iframe gives us either becomes redundant or moves into the core. This doc explores what that endpoint looks like.
+
+The two specific questions this doc answers:
+
+1. Can we eliminate the app subdomain iframe (`<cid>.app.dot.li`)?
+2. Can the Rust core load directly in the protocol iframe (`host.dot.li`) instead of in a Web Worker spawned by the host page?
+
+## What the app subdomain iframe gives us today
+
+Two things, doing each well:
+
+1. **Origin isolation per dApp.** Each `.dot` product gets a unique DNS subdomain `<cid>.app.dot.li`. The browser scopes localStorage, IndexedDB, cookies, service workers, and the iframe's Permissions Policy storage to that origin. Product A cannot read Product B's storage even when they're loaded in adjacent iframes of the same dot.li tab.
+
+2. **Content fetching + sandboxed mount.** `apps/sandbox` reads the CID from its own subdomain, fetches the archive over P2P/Helia, decrypts, packs into a `Blob`, and mounts the product iframe at `blob:https://<cid>.app.dot.li/...`. The blob URL inherits the sandbox's origin, so the product iframe is same-origin with the sandbox, isolated from everything else.
+
+Removing the app subdomain iframe means losing both. So: how much of (1) and (2) do we still need in a Rust-core-centric world, and where does the rest go?
+
+## What origin isolation actually buys, and what replaces it
+
+Per-product origin separation today gives products:
+
+| What | Today | If core owns it |
+|---|---|---|
+| `localStorage` per product | scoped by `<cid>.app.dot.li` origin | core's `host_local_storage_*` syscalls, namespaced by product label |
+| IndexedDB per product | per-origin DB | core's KV (extends `Storage` trait if needed) |
+| Cookies per product | per-origin | products don't use cookies in the TrUAPI model |
+| Service Worker per product | per-origin SW registration | products are static content; SW is replaced by core-side caching |
+| Cache API per product | per-origin Cache | core fetches and caches |
+| Permissions Policy | per-origin `allow=…` attribute | iframe gets a generic `allow` attribute set by the host; core's `prompt_permission` is the actual gate |
+| `postMessage` security | products can address each other only via `targetOrigin` | products can't address each other at all (no shared parent) |
+| Cross-product storage leak | impossible (different origins) | impossible if products are forced through the core (see below) |
+
+The pivot: in the Rust-core model, **origin separation isn't the security boundary anymore, the core is**. The browser-level origin still has to be *something* (every iframe has an origin), but it can be the same for every product as long as products can't bypass the core's API for storage, fetch, permissions, etc.
+
+The mechanism for "products can't bypass the core's API" is the iframe `sandbox` attribute *without* `allow-same-origin`, which gives the iframe an **opaque origin**. Calls to `localStorage`, `indexedDB`, `Cache`, `serviceWorker.register`, etc. all throw or no-op on opaque origins. Network `fetch` still works (subject to CSP), but if we tighten CSP via the iframe's `csp` attribute we can restrict that too.
+
+So the trade is: drop per-CID DNS subdomains, accept opaque origin for products, route all persistence and (where needed) fetch through the core.
+
+This matches the shared-core model in the companion architecture doc. It's also the only way to keep the architecture meaningful on native (iOS/Android), where DNS subdomains aren't a thing, products there already go through the core for everything.
+
+## Content delivery without `<cid>.app.dot.li`
+
+If the app subdomain iframe goes away, who fetches and unpacks the dApp archive, and how does it become an iframe?
+
+Three viable options:
+
+### Delivery option A, Service Worker on `host.dot.li`
+
+Register a service worker on `host.dot.li` that intercepts fetch requests matching a path scheme, e.g. `/__product/<cid>/*`. The product iframe is mounted with `src="https://host.dot.li/__product/<cid>/index.html"`. The SW intercepts, asks the Rust core for the file, returns it.
+
+Origin of the product iframe: `https://host.dot.li`. To prevent cross-product leakage on shared storage, also set `sandbox` without `allow-same-origin` → opaque origin → storage APIs no-op.
+
+Pros:
+- Product loads via a normal `src` URL; existing dApp tooling that expects a "real" load works.
+- The SW gives us a uniform fetch interception layer, including for nested resources the dApp loads (CSS, sub-pages, images).
+- Service Worker is broadly supported (yes Safari).
+
+Cons:
+- Service worker registration is per-origin and async; must be resolved before any product iframe loads.
+- Range requests, streaming, Content-Type sniffing all have to be handled by the SW.
+- The SW becomes a long-lived dependency on the host.dot.li origin; updates must be carefully coordinated.
+
+### Delivery option B, Blob URL from the protocol iframe
+
+The protocol iframe at `host.dot.li` runs the Rust core, which fetches the archive. JS in that iframe creates a `Blob` from the unpacked HTML and assigns the blob URL to the product iframe's `src`. Origin of the blob URL = `host.dot.li`.
+
+Pros:
+- No service worker. Simpler bootstrap.
+- Blob URLs work everywhere.
+
+Cons:
+- Sub-resources (CSS, JS, images) loaded by relative URL inside the dApp resolve against the blob's URL, which is opaque. Either the dApp must inline everything (works for a static SPA bundle) or we add another mechanism for sub-resources.
+- For dApps with non-trivial asset trees, this breaks down.
+
+### Delivery option C, Service Worker on the product iframe's origin
+
+Mount the product iframe at a URL on `host.dot.li`, register a service worker scoped to that path, let the SW handle content. Functionally the same as option A; differs only in scoping (per-product vs shared).
+
+Trade-off: per-product SWs cost more (registration overhead, browser-quota implications) but contain failures.
+
+**Recommended**: option A (single SW on host.dot.li) for non-trivial dApps; option B as a fast path for archive-of-one-HTML-file products. The two can coexist, the host shell picks based on archive shape.
+
+## Architecture options
+
+Four placements for the Rust core, in increasing ambition. All four eliminate `<cid>.app.dot.li` and use opaque-origin product iframes via `sandbox` without `allow-same-origin`.
+
+### Option 1, Rust core in the protocol iframe (per-tab)
+
+The core lives inside a Web Worker spawned by the protocol iframe at `host.dot.li`. Product iframes are mounted as children of the protocol iframe (the protocol iframe becomes the visible surface; the host page renders the topbar via overlay or via a small wrapper layout above the iframe).
+
+```
+┌─ tab @ dot.li ──────────────────────────────────────────────────────────┐
+│  apps/host, topbar + label parsing (thin shell)                        │
+│                                                                         │
+│  ┌─ protocol iframe @ host.dot.li (visible, full-bleed) ────────────┐   │
+│  │  apps/protocol, orchestrates Rust core + product mount          │   │
+│  │  ┌─ Web Worker (host.dot.li) ─ Rust core ─────────────────────┐  │   │
+│  │  │  smoldot · DOTNS · content fetch · per-product storage     │  │   │
+│  │  │  permission gate · all host-API methods                    │  │   │
+│  │  └────────────────────────────────────────────────────────────┘  │   │
+│  │                                                                  │   │
+│  │  ┌─ product iframe (opaque origin via sandbox) ──────────────┐   │   │
+│  │  │  src = "host.dot.li/__product/<cid>/..." (SW intercepts)  │   │   │
+│  │  │  ↕ MessageChannel ↔ Web Worker (Rust core)                │   │   │
+│  │  └───────────────────────────────────────────────────────────┘   │   │
+│  └──────────────────────────────────────────────────────────────────┘   │
+└─────────────────────────────────────────────────────────────────────────┘
+```
+
+**Trade-offs:**
+
+- One Rust core per tab. Smoldot runs once per tab.
+- All chain state (smoldot warm-start IndexedDB, persisted permissions, content cache) lives on `host.dot.li`, isolated from `dot.li`'s storage.
+- Product iframe parents the protocol iframe → direct postMessage / MessageChannel; host page is not in the message path.
+- Layout: protocol iframe is positioned full-viewport with the host page rendering only the topbar above (z-indexed or via a flex layout where the topbar is in the host page DOM and the iframe occupies the content area).
+- N concurrent tabs = N Rust cores = N smoldots. Same drawback as documented in the E2 chain-provider unification work.
+
+### Option 2, Rust core in a SharedWorker (cross-tab)
+
+Move the Rust core into a `SharedWorker` scoped to `host.dot.li`. The protocol iframe in each tab becomes a thin relay that connects to the SharedWorker via `MessagePort` and forwards product → core traffic.
+
+```
+┌─ tab A @ dot.li ───────────────┐    ┌─ tab B @ dot.li ───────────────┐
+│  apps/host, topbar            │    │  apps/host, topbar            │
+│  ┌─ protocol iframe ─────────┐ │    │  ┌─ protocol iframe ─────────┐ │
+│  │ (host.dot.li, thin relay) │ │    │  │ (host.dot.li, thin relay) │ │
+│  │ ┌─ product iframe ──────┐ │ │    │  │ ┌─ product iframe ──────┐ │ │
+│  │ │ opaque origin         │ │ │    │  │ │ opaque origin         │ │ │
+│  │ └───────────────────────┘ │ │    │  │ └───────────────────────┘ │ │
+│  └──────┬────────────────────┘ │    │  └──────┬────────────────────┘ │
+└─────────┼──────────────────────┘    └─────────┼──────────────────────┘
+          │                                     │
+          └──────────────┬──────────────────────┘  MessagePort
+                         ▼
+┌─ SharedWorker @ host.dot.li ──────────────────────────────────────────┐
+│  Rust core: smoldot · DOTNS · content fetch · per-product storage     │
+│             permission gate · all host-API methods                    │
+└───────────────────────────────────────────────────────────────────────┘
+```
+
+**Trade-offs:**
+
+- One Rust core per origin (across all tabs). Smoldot syncs once for the user, not once per tab.
+- Cross-tab session sync becomes a feature for free (same core sees all products on all tabs).
+- Shared content cache, shared chain warm-start.
+- The lifetime of the SharedWorker is "while at least one same-origin context is open", when all dot.li tabs close, the core terminates. Chain warm-start state must live in IndexedDB to survive.
+- **Browser support:** SharedWorker is now broadly available, Chrome, Firefox, Safari macOS, and Safari iOS 16.0+ all support it. The remaining caveat is iOS-specific lifecycle: iOS aggressively suspends backgrounded tabs, and a SharedWorker with no visible client is a candidate for termination. The amortization benefit ("one smoldot for the whole session") still holds while the user has at least one foreground tab; when all tabs are backgrounded the worker may die and re-sync on resume. This isn't worse than per-tab Workers (which die with their tab on iOS too), but the cross-tab payoff is smaller on iOS than on desktop.
+
+### Option 3, Rust core in a Web Worker on the host page (`dot.li`)
+
+Skip the protocol iframe entirely. The host page at `dot.li` directly spawns a Web Worker containing the Rust core. Product iframes are children of the host page.
+
+```
+┌─ tab @ dot.li ──────────────────────────────────────────────────────────┐
+│  apps/host, topbar + Rust core orchestration                           │
+│                                                                         │
+│  ┌─ Web Worker (dot.li) ─ Rust core ──────────────────────────────────┐ │
+│  │  smoldot · DOTNS · content fetch · per-product storage             │ │
+│  │  permission gate · all host-API methods                            │ │
+│  └────────────────────────────────────────────────────────────────────┘ │
+│                                                                         │
+│  ┌─ product iframe (opaque origin via sandbox) ──────────────────────┐  │
+│  │  src = "dot.li/__product/<cid>/..." (SW intercepts)               │  │
+│  │  ↕ MessageChannel ↔ Web Worker (Rust core)                        │  │
+│  └───────────────────────────────────────────────────────────────────┘  │
+└─────────────────────────────────────────────────────────────────────────┘
+```
+
+**Trade-offs:**
+
+- Simplest. One frame, one origin, one worker.
+- Smoldot's chain-state IndexedDB and WebSocket connections live on the user-visible `dot.li` origin. Slight UX wart (DevTools shows weird WSs on the user-visible domain) and a hosting concern (CDN behavior on `dot.li` storage).
+- Cross-tab: per-tab core unless we promote the worker to a SharedWorker on `dot.li`.
+- Removes the host.dot.li origin entirely from the topology. Simplifies DNS / nginx; removes a vite build.
+- Topbar UI and chain state share an origin → topbar JS could (in principle) read the core's state directly without going through postMessage. Convenient but blurs the API/UI separation.
+
+### Option 4, Hybrid: per-tab Rust core, chain core in SharedWorker
+
+Two cores. The per-tab Rust core handles product-specific work (account, signing, storage, permissions, content). It connects to a separate SharedWorker that owns *only* chain access (smoldot/RPC) and DOTNS resolution.
+
+```
+┌─ tab A @ dot.li ──────────────────────────┐
+│  ┌─ protocol iframe @ host.dot.li ──────┐ │
+│  │  ┌─ Web Worker, per-tab Rust core ┐ │ │     ┌─ SharedWorker @ host.dot.li ─┐
+│  │  │  account · signing · storage     │ │ │     │  Rust core (chain only):     │
+│  │  │  permissions · content delivery  │ │ │     │   • smoldot                  │
+│  │  │  remote_chain_* ─ port ──────────┼─┼─┼────▶│   • DOTNS resolver           │
+│  │  └──────────────────────────────────┘ │ │     │   • content fetch (IPFS)     │
+│  │  ┌─ product iframe ─────────────────┐ │ │     └──────────────────────────────┘
+│  │  │ opaque origin                    │ │ │             ▲
+│  │  └──────────────────────────────────┘ │ │             │ same SW from
+│  └───────────────────────────────────────┘ │             │ other tabs
+└────────────────────────────────────────────┘             │
+┌─ tab B @ dot.li ──────────────────────────┐              │
+│  (same shape) ────────────────────────────┼──────────────┘
+└────────────────────────────────────────────┘
+```
+
+**Trade-offs:**
+
+- Best-of-both-worlds: chain expense shared across tabs (the heavy thing), per-product state isolated per-tab (the light thing).
+- Two Rust cores compiled and shipped, but they can share the same source crate with feature flags ("chain-only" vs "products"). Bundle size goes up but not by much; chain core has most of the LOC anyway.
+- Two postMessage hops for chain methods (product → per-tab core → shared core). Throughput is fine; latency is two `postMessage` (~0.1ms each on modern browsers).
+- Lifetime: SharedWorker survives across tab closes; per-tab core dies with the tab.
+- iOS lifecycle: as in Option 2, the SharedWorker's amortization benefit shrinks when all tabs are backgrounded (iOS may suspend it). No special fallback needed, the per-tab core handles its own work either way.
+- Most complex of the four. Justified only if Option 1's per-tab smoldot cost is measured to be a real problem.
+
+## Comparison
+
+| Axis | Option 1 (per-tab core in protocol iframe) | Option 2 (SharedWorker core on host.dot.li) | Option 3 (per-tab core on dot.li) | Option 4 (hybrid) |
+|---|---|---|---|---|
+| Frames | host + protocol + product | host + protocol(thin) + product | host + product | host + protocol + product |
+| Rust cores per origin | 1 per tab | 1 across all tabs | 1 per tab | 1 per tab + 1 shared |
+| Smoldot instances | N (per tab) | 1 (across all tabs) | N (per tab) | 1 (across all tabs) |
+| host.dot.li used | yes (visible iframe) | yes (SW host) | no | yes (both) |
+| Cross-tab session/chain sync | manual (BroadcastChannel) | automatic (one core sees all tabs) | manual | automatic for chain, manual for session |
+| Safari iOS path | works as-is | works (16.0+); cross-tab benefit reduced when all tabs backgrounded | works | works (16.0+); same iOS caveat as Option 2 |
+| Complexity | low | medium | low | high |
+| Eliminates `*.app.dot.li` | yes | yes | yes | yes |
+| Eliminates `host.dot.li` | no | no | yes | no |
+
+## Recommendation
+
+**Land Option 2: the Rust core lives in a SharedWorker scoped to `host.dot.li`.** The protocol iframe in each tab becomes a thin shim that constructs the SharedWorker once per browser, exposes the small set of platform callbacks the worker can't make from its own context (modal UI prompts routed back via postMessage), and relays MessagePorts from the host shell at `dot.li` to the worker.
+
+> The shipped `@parity/truapi-host-wasm/worker-runtime` entrypoint is a plain per-tab dedicated Web Worker (Option 1's worker model). SharedWorker is the recommended target here but is not yet implemented.
+
+Reasons:
+
+1. **Stable origin for persistent state.** `host.dot.li` is the only origin in the topology that doesn't change with every CID update. `truapi-platform::Storage` lives in IndexedDB on that origin so granted permissions, session state, content caches, and chain warm-start data survive product upgrades.
+
+2. **One core per browser, not per tab.** SharedWorker semantics make session state, permission grants, and chain connections implicit cross-tab state. This replaces dotli's current `BroadcastChannel` glue for shared auth, and folds the existing standalone `protocol-shared-worker.ts` smoldot worker into the same process: smoldot is embedded inside `truapi-server`, not a parallel SharedWorker.
+
+3. **No protocol logic on the user-visible thread.** The host shell at `dot.li` renders the top bar and modals; it never decodes a TrUAPI frame. Heavy crypto + smoldot + libp2p stay off any paint-frame budget.
+
+4. **Falls back cleanly when SharedWorker isn't available.** Feature-detect (`typeof SharedWorker !== "undefined"`) and downgrade to a per-tab `Worker` (Option 1 behavior). The same `@parity/truapi-host-wasm/worker-runtime` entry point covers both, only the constructor differs. Safari 16+ ships SharedWorker, so the fallback is only for very old engines.
+
+5. **iOS lifecycle is acceptable.** iOS may suspend a SharedWorker when all tabs are backgrounded. The amortization benefit shrinks but isn't worse than a per-tab Worker (which also dies with its tab on iOS). Cross-tab payoff is still real on desktop and is a no-cost win when the browser keeps the worker alive.
+
+Options 1 (per-tab worker in protocol iframe), 3 (worker on the user-visible `dot.li` origin), and 4 (hybrid) remain in the comparison table for context; Option 2 supersedes them.
+
+## Migration considerations
+
+To get from today's topology to Option 2:
+
+1. **Ship `truapi-server` WASM as a SharedWorker entrypoint.** Today `@parity/truapi-host-wasm/worker-runtime` runs as a per-tab dedicated `Worker`; this step promotes the same entrypoint to `new SharedWorker(...)` from the protocol iframe at `host.dot.li`. Smoldot is embedded inside the WASM, so dotli's existing `apps/protocol/src/protocol-shared-worker.ts` retires in the same step.
+
+2. **Migrate auth-storage from localStorage to IndexedDB.** The current `apps/protocol/src/main.ts` shared-auth handler writes `PAPP_${siteId}_${key}` keys to `localStorage`. SharedWorkers have no `localStorage`; persistent state lives in IDB. The protocol-iframe shim runs a one-shot migration: enumerate `localStorage` for `PAPP_*` keys, write them into IDB, then clear localStorage. Cross-tab notifications switch from `BroadcastChannel` to the SharedWorker fan-out.
+
+3. **Move content fetching into the Rust core.** Today `apps/sandbox` does P2P/Helia in the product iframe. Port that to Rust (libp2p-in-WASM, or HTTP gateway behind a feature flag). Add `content_fetch(cid) → bytes` to the protocol surface.
+
+4. **Add a service worker on `host.dot.li`** that intercepts `/__product/<cid>/*` and serves from the core's content cache. Register at protocol-iframe boot.
+
+5. **Switch the product iframe to opaque origin.** Use `sandbox="allow-scripts allow-forms allow-pointer-lock allow-popups"` (no `allow-same-origin`). Verify products handle the storage no-op correctly, they should already, in the TrUAPI model.
+
+6. **Render the product iframe inside the protocol iframe.** The protocol iframe goes from `display: none` to full-viewport; the host page's topbar overlays it (or wraps via flex layout).
+
+7. **Retire `apps/sandbox` and `*.app.dot.li`.** Drop the vite build, the nginx wildcard route, and the DNS record.
+
+8. **DOTNS resolution moves into the core** (also covered by the layer-2 ownership work).
+
+Order: steps 1 and 2 are blocking, without IDB-backed storage and the SharedWorker entrypoint, the rest can't migrate. 3, 4 can land independently and behind feature flags. 5, 6 require previous steps in production. 7, 8 are parallel to 1.
+
+## What native (iOS / Android) keeps in mind
+
+Native dotli runs the Rust core in-process via UniFFI. There are no iframes; the product runs in a WebView. The architecture decisions above are web-specific. Native parity is mostly automatic, UniFFI generates Swift/Kotlin bindings for the same `Platform` trait, the WebView talks to the in-process core via a local-loopback transport. The thing native doesn't get for free is **per-tab vs cross-tab smoldot sharing**, that's not a concept on mobile (one app instance), so the question is moot. Native always behaves like "one core per app instance", same as Option 3 conceptually.
+
+## Open questions for the team
+
+1. **Content fetching in Rust-WASM.** Do we want libp2p/Helia in the Rust core, or do we keep an HTTP gateway path? libp2p in Rust-WASM is doable but adds significant binary size. HTTP gateway is simpler but adds a server dependency.
+
+2. **Service worker scope on `host.dot.li`.** A per-cid SW (option C in the delivery section) gives us tighter quota / failure isolation but more registrations. A single SW is simpler. Decide based on observed product behavior.
+
+3. **Topbar layout.** Today the topbar is host-page DOM. If the protocol iframe goes full-viewport, the topbar either (a) stays on the host page and z-indexes above the iframe, or (b) the topbar moves into the protocol iframe and the host page becomes a degenerate wrapper. Option (a) is simpler but means the topbar can't read core state directly (has to postMessage in). Option (b) collapses host page → protocol iframe but raises questions about deep linking and URL parsing.
+
+4. **Cross-product UX features.** If the user expects products to share auth (logged in once, all products see the session), that needs explicit support whether the core is per-tab or shared. Shared state via the core's KV; cross-tab sync via BroadcastChannel or SharedWorker. Decide before committing to per-tab vs shared.
diff --git a/docs/design/host-contract-and-core-impl/A - host-primitives.md b/docs/design/host-contract-and-core-impl/A - host-primitives.md
new file mode 100644
index 00000000..6489aee2
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/A - host-primitives.md	
@@ -0,0 +1,171 @@
+# A - Host primitives (`truapi-platform`)
+
+> Part of the [host-contract & core-impl spec](<index.md>).
+
+SSO pairing, transaction/raw signing, transaction construction, ring-VRF alias, and the product
+statement store all ride **one** mechanism: the People-chain statement store, reached through the
+**existing `ChainProvider`** trait, with the protocol run **in the core** ([H](<H - sso-pairing-protocol.md>)).
+That leaves exactly **one** genuinely new host primitive for the SSO protocol: a QR presenter.
+
+Replacing dotli's current `@novasamatech/host-container` bridge still requires a few host/platform
+surfaces for behavior that is already implemented in the current dotli checkout or required by the
+core-owned session model: scheduled notifications, theme subscription, preimage submit/lookup,
+resource-allocation confirmation UI, host-global session persistence, and static product identity. Those
+are not SSO protocol primitives, but they are part of current dotli feature parity or secure restore. For
+the trait conventions and the five-layer wiring recipe, see the [annex](<G - annex.md>).
+
+## A0. Delta from PR 104's platform surface
+
+PR 104 currently ships `truapi-platform` with:
+
+- `Storage`, `Navigation`, `Notifications`, `Permissions`, `Features`, `ChainProvider`, and
+  `JsonRpcConnection`;
+- no runtime product config object;
+- no SSO QR presenter;
+- no host-global `SessionStore`;
+- no theme/preimage/resource-allocation-confirmation traits;
+- a `Notifications` trait that can push but cannot return a notification id or cancel scheduled
+  notifications.
+
+This spec keeps `Storage`, `Navigation`, `Permissions`, `Features`, and `ChainProvider` as real host
+capabilities. It extends or adds only the host surfaces listed below. Account, signing, transaction
+construction, alias, statement-store submit/subscribe/proof, entropy, and logout are **not** host
+callbacks in the final architecture.
+
+## A0.1. Portability rules
+
+No method in `truapi-server` may depend on dotli-only APIs, package names, storage keys, browser globals,
+or UI components. dotli supplies those details through its adapter layer and `RuntimeConfig`; the Rust core
+sees only platform traits and opaque configuration values.
+
+The same host contract must be usable from:
+
+- **dotli web/Electron:** WASM worker runtime; QR, modals, notifications, preimage, theme, and
+  host-global `SessionStore` backed by web/Electron APIs.
+- **iOS/Android:** UniFFI/native runtime; the same QR/deeplink, session-store, notification, chain, and UI
+  confirmation capabilities implemented with native platform APIs.
+- **future hosts:** one new platform implementation plus product config. No forked SSO protocol, no
+  host-owned signing proxy, and no separate wallet connection.
+
+## A1. `PairingPresenter`: show the QR/deeplink **(S–M)**
+
+**What:** display the `polkadotapp://pair?handshake=<hex>` deeplink the core builds during
+`request_login`, as a QR (or open-url), and report user-initiated cancel. No protocol knowledge: it
+renders a string the core produced ([H §1](<H - sso-pairing-protocol.md>)).
+
+**Proposed trait** (lib.rs):
+```rust
+pub trait PairingPresenter: Send + Sync {
+    /// Show the pairing deeplink/QR. The future resolves when the user dismisses/cancels.
+    /// The core drops it on success/abort, which the host treats as "close the modal".
+    fn present(&self, deeplink: String) -> impl Future<Output = ()> + Send;
+}
+```
+The drop-to-close, resolve-on-cancel shape lets `request_login` `select!` over {handshake statement
+arrives, present-future resolves (cancel), `cx.cancel()`}.
+
+**Bridge:** `present` takes a `String` (like `navigate_to`) but must resolve on cancel, so it needs a
+bespoke invoker: a JS callback returning a `Promise<void>` that resolves only when the user closes the
+QR. **dotli mapping:** `topbar.ts` renders it via `QRCode.toCanvas(payload)`; the modal's close button
+resolves the promise. **Acceptance:** the core drives show/close; closing the modal aborts pairing.
+
+## A2. `RuntimeConfig`: static product and pairing inputs **(S)**
+
+Each product iframe/runtime needs values that are fixed before the core can answer product-scoped
+methods or build the pairing QR:
+
+```rust
+pub struct RuntimeConfig {
+    pub calling_product_id: String,
+    pub product_label: String,
+    pub pairing_metadata_url: String,
+    pub people_chain_genesis_hash: [u8; 32],
+    pub pairing_deeplink_scheme: PairingDeeplinkScheme, // polkadotapp:// or polkadotappdev://
+}
+```
+
+This is constructor/configuration state on `PlatformRuntimeHost`, WASM, UniFFI, and the JS worker package,
+not a host callback and not part of every request payload. Current dotli creates one container per
+product label and derives the product id with `labelToProductIdentifier(label)` in
+`~/github/dotli/packages/ui/src/container.ts`. The same value is used by `get_legacy_accounts`, alias
+permission prompts, signing validation, resource allocation, and product entropy derivation, so the Rust
+runtime should be instantiated per product with this identity already known. Nested dApps are not a
+separate runtime/config boundary for v1; if dotli keeps nested message forwarding, nested traffic uses the
+same Rust core and product identity as the containing product. The current JS nested bridge behavior and
+its possible future value are tracked separately in [I](<I - nested-dapps.md>).
+
+dotli computes `pairing_metadata_url` with the same rule it uses today in
+`~/github/dotli/packages/auth/src/auth.ts`: production uses `${window.location.origin}/metadata.json`;
+localhost maps to the public `https://<subdomain>dot.li/metadata.json` URL the phone can fetch. The core
+validates the URL is HTTPS except for any explicit test-only mode.
+
+## A3. Current host-container parity surfaces **(S-M)**
+
+These are platform traits or host callbacks needed only because the current dotli bridge already exposes
+them to products through `@novasamatech/host-container`.
+
+- **Notifications:** `push_notification` must return the host-api notification id and `cancel` must be
+  exposed. Current `truapi-platform::Notifications` only returns `Result<(), GenericError>`, so it needs
+  the wire-visible id/cancel shape before dotli can drop `handlePushNotification` /
+  `handlePushNotificationCancel`.
+- **Theme:** expose a subscription that emits the current `{ name, variant }` and future changes. Current
+  dotli maps browser light/dark state into the host-api `Default` theme.
+- **Preimage:** keep preimage host-side for v1, but expose submit and lookup subscription through Rust so
+  the JS container handler can be removed.
+- **Resource allocation confirmation:** current dotli shows an allowance modal before sending the SSO
+  `resourceAllocationRequest` over SSO. The core owns the encrypted SSO session request, but calls a
+  dedicated host UI confirmation hook first and maps dismissal to the same typed error path. Do not overload
+  `Permissions::remote_permission`: allocation confirmation wraps an SSO round-trip and retry-capable
+  modal, while remote permission is just a permission decision.
+- **SessionStore:** persist one optional opaque core-encoded blob for the full `SessionInfo` in
+  host-global secret storage. Do not reuse product-scoped `Storage`: the SSO session is shared across
+  product runtimes and contains `ss_secret` plus ECDH/session-channel material. The host does not see
+  typed session fields, and v1 does not preserve host-papp's multi-session list shape. Rust does not add
+  blob-level encryption/MAC; confidentiality and tamper resistance are the host storage layer's
+  responsibility. It must also support current-then-changes change notifications for both same-runtime
+  writes/clears and cross-tab/process changes so logout or re-pair updates all live runtimes without a
+  read/subscribe race. Notifications are coarse: the core receives a tick and calls `read()` to fetch and
+  validate the current blob.
+
+**Proposed trait**:
+```rust
+pub trait SessionStore: Send + Sync {
+    fn read(&self) -> impl Future<Output = Result<Option<Vec<u8>>, GenericError>> + Send;
+    fn write(&self, value: Vec<u8>) -> impl Future<Output = Result<(), GenericError>> + Send;
+    fn clear(&self) -> impl Future<Output = Result<(), GenericError>> + Send;
+    /// Emits once immediately, then once per future local or cross-runtime change.
+    /// The core calls `read()` after each tick.
+    fn subscribe(&self) -> BoxStream<'static, Result<(), GenericError>>;
+}
+```
+
+Signing, transaction construction, alias, pairing, and statement-store operations are not in this list
+because they are core protocol over the statement store.
+
+## Not host primitives (core protocol over the statement store)
+
+Earlier drafts modeled a pairing transport, a wallet-signing proxy, and a ring-VRF proxy as host
+primitives. The real protocol ([H](<H - sso-pairing-protocol.md>)) makes them **core logic**, not
+platform traits:
+
+- **Transport** is the People-chain statement store, reached via the **existing `ChainProvider`** trait
+  (`connect(genesis_hash) -> JsonRpcConnection`, then `statement_submit` /
+  `statement_subscribeStatement`). No new transport primitive.
+- **`sign_payload` / `sign_raw` / legacy variants / `create_transaction`** are `signingRequest` messages
+  the core sends over the encrypted session channel; the wallet signs and replies ([B](<B - core-impls.md>)).
+- **`request_resource_allocation`** is likewise an SSO session-channel request in current dotli, with
+  host-side confirmation before send and secret stripping around the result.
+- **`get_account_alias`** is an `aliasRequest` message over the same channel. **`create_account_proof`**
+  needs a full ring-VRF proof and is a separate Tier-4 decision ([E3](<E - open-questions.md>)); current
+  dotli code only calls the alias path.
+- **Statement-store `create_proof` / `subscribe` / `submit`** are core-native: the core already speaks
+  the statement store for pairing, and signs proofs with its own session key.
+
+## Identity: no new primitive
+
+`get_user_id` / `get_legacy_accounts` answer from `SessionState` (the wallet account ids learned at
+pairing, [C](<C - session-contract.md>)) plus product runtime config. Current dotli's
+`get_legacy_accounts` returns the product-derived `(calling_product_id, 0)` account, not the root account.
+`get_user_id` is additionally gated by the product-scoped `UserId` permission. Usernames, if surfaced,
+come from an on-chain People-chain identity lookup over the same `ChainProvider` connection and are
+**not** part of the pairing handshake.
diff --git a/docs/design/host-contract-and-core-impl/B - core-impls.md b/docs/design/host-contract-and-core-impl/B - core-impls.md
new file mode 100644
index 00000000..b87960c2
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/B - core-impls.md	
@@ -0,0 +1,291 @@
+# B - Core implementations (`truapi-server` wire methods)
+
+> Part of the [host-contract & core-impl spec](<index.md>).
+
+Implement the stubbed wire methods on `PlatformRuntimeHost<P>` (`runtime.rs`). `Signing`,
+`StatementStore`, `Preimage`, `ResourceAllocation`, `Entropy`, `Theme`, and `Payment` are empty `impl`
+blocks today (`runtime.rs:341-553`); `Notifications` is explicitly unavailable; `Account` is partially
+overridden (`runtime.rs:321-339`). Every un-overridden method falls back to the trait default
+`Err(CallError::unavailable())` / `Subscription::empty()`.
+
+Use the [override template + error-mapping rules in the annex](<G - annex.md>) for the per-method
+implementation shape (destructure `::V1`, UFCS-call the platform, map domain errors to
+`CallError::Domain`), where new in-core state and `host_logic/` modules go, and the
+`PermissionsService` pattern for multi-step logic.
+
+Strategy tags below: **pure-core** (no host help) · **core+session** (reads `SessionState`) · **core+chan**
+(a request/response over the SSO session channel, [H §5](<H - sso-pairing-protocol.md>)) · **core protocol**
+(the pairing handshake or the statement-store client).
+
+| Wire method (id) | Strategy | Tier |
+|---|---|---|
+| `get_legacy_accounts`(28), `get_user_id`(110) | core+session + runtime product config | 1 |
+| `get_account`(22) | pure-core + crypto | 1 |
+| `request_login`(112) | core protocol (SSO handshake, [H](<H - sso-pairing-protocol.md>)) | 2 |
+| `sign_payload`(116), `sign_raw`(114), `sign_*_with_legacy_account`(34/36) | core+chan (signingRequest) | 3 |
+| `create_transaction`(30), `create_transaction_with_legacy_account`(32) | core+chan (createTransactionRequest) | 3 |
+| `create_proof`(60), `create_proof_authorized`(132) | core+session + crypto | 3 |
+| `get_account_alias`(24) | core+chan (aliasRequest) | 3 |
+| `subscribe`(56), `submit`(62) | core-native (statement client) | 3 |
+| `ResourceAllocation::request`(130) | host-confirm + core+chan (resourceAllocationRequest) | 3 |
+| `Entropy::derive`(108) | core+session + crypto | 3.5 |
+| `Theme::subscribe`(104) | host-side primitive/subscription | 3.5 |
+| `Notifications::send_push_notification`(4), `cancel_push_notification`(134) | host-side primitive, extend current trait | 3.5 |
+| `lookup_subscribe`(64), `submit`(68) [preimage] | host-side primitive/callback | 3.5 |
+| `create_account_proof`(26) | core+chan (full ring-VRF; needs new message) | deferred (unimplemented by dotli) |
+| `Payment::*` | intentionally unavailable | deferred (dotli returns typed "not implemented" errors) |
+
+---
+
+## Tier 1: account reads + derivation
+
+### `get_legacy_accounts` (#28) · `get_user_id` (#110): core+session **(S)**
+
+Read `self.session_state.current()` (returns `Option<SessionInfo>`) and the runtime
+`calling_product_id` / label config. No session => `HostAccountGetError::NotConnected` /
+`HostGetUserIdError::NotConnected`.
+
+- `get_legacy_accounts` → `HostGetLegacyAccountsResponse { accounts: vec![LegacyAccount { public_key:
+  product_public_key.to_vec(), name: info.lite_username }] }`. Current dotli returns the single
+  product-derived `(calling_product_id, 0)` account, not the wallet root
+  (`~/github/dotli/packages/ui/src/container.ts:222-233`).
+- `get_user_id` → `HostGetUserIdResponse { primary_username: info.full_username.or(info.lite_username)
+  .ok_or(NotConnected)? }`, gated by the product-scoped `UserId` permission like current dotli
+  (`~/github/dotli/packages/ui/src/container.ts:242-261`).
+
+Both have **unit** versioned requests (no payload). **Acceptance:** with a session set,
+`get_legacy_accounts` returns the product-derived account and `get_user_id` returns the permitted
+username; without one, they match current dotli's not-connected/empty behavior.
+
+### `get_account` (#22): pure-core + crypto **(S–M)**
+
+```rust
+async fn get_account(&self, _cx, request: HostAccountGetRequest)
+    -> Result<HostAccountGetResponse, CallError<HostAccountGetError>>
+// req:  v01::HostAccountGetRequest  { product_account_id: ProductAccountId }
+//       ProductAccountId { dot_ns_identifier: String, derivation_index: u32 }
+// resp: v01::HostAccountGetResponse { account: ProductAccount { public_key: Vec<u8> } }
+// err:  NotConnected | Rejected | DomainNotValid | Unknown { reason }
+```
+
+Read the session root pubkey (`info.public_key`), derive the product public key per
+[D](<D - crypto-foundation.md>) (sr25519 soft-derivation over junctions `["product", dot_ns_identifier,
+String(derivation_index)]`), return it. No session => `NotConnected`; invalid dotNS => `DomainNotValid`.
+**Acceptance:** byte-identical to dotli's `deriveProductPublicKey` for shared `(root, dotNS, index)`
+golden vectors.
+
+---
+
+## Tier 2: pairing in the core
+
+### `request_login` (#112): core protocol (SSO handshake) **(L)**
+
+Replace the current override body (`runtime.rs:321-339`). `request_login` runs the SSO pairing handshake
+over the People-chain statement store and establishes the session. The full protocol (QR payload, topic
+derivation, channel encryption, handshake messages) is in [H](<H - sso-pairing-protocol.md>); below is
+the wire contract + control flow.
+
+```rust
+async fn request_login(&self, cx, request: HostRequestLoginRequest)
+    -> Result<HostRequestLoginResponse, CallError<HostRequestLoginError>>
+// req:  v01::HostRequestLoginRequest { reason: Option<String> }
+// resp: enum { Success, AlreadyConnected, Rejected }
+// err:  HostRequestLoginError::Unknown { reason }
+```
+
+Control flow (see [H §1-§3](<H - sso-pairing-protocol.md>) for the byte-level steps):
+
+```
+  session already present? --> AlreadyConnected
+  mint session sr25519 + P-256 keypairs ; read RuntimeConfig ; build HostHandshakeData -> deeplink
+  A1.present(deeplink) ; subscribe(bootstrap topic) on the People-chain statement store
+  select! {
+     handshake statement -> verify sr25519 proof ; ECDH-decrypt the answer ;
+                            derive SessionState{ public_key = root_user_account_id, ss_secret,
+                                                 peer keys, session ids } ;
+                            persist (C) ; set_session -> Connected -> Success
+     A1 present resolves (user closed the QR) -> Rejected
+     cx.cancel() (product cancelled) -> abort
+  }
+```
+
+Depends on the Tier-2 statement-store client (submit/subscribe over `ChainProvider`) and the runtime
+pairing config ([A2](<A - host-primitives.md>)). The crypto byte contract is specified in
+[H](<H - sso-pairing-protocol.md>) + [D](<D - crypto-foundation.md>) and must be pinned by vectors before
+implementation. **Acceptance:** a real wallet pairs and `connection_status` flips to Connected carrying
+the wallet's `root_user_account_id`; a handshake statement with a bad proof or wrong signer is rejected;
+closing the QR aborts cleanly.
+
+---
+
+## Tier 3: message-exchange ops + statement proofs
+
+### `sign_payload` (#116) · `sign_raw` (#114) · legacy variants (#34/#36): core+chan (signingRequest) **(M)**
+
+```rust
+// sign_payload req: v01::HostSignPayloadRequest { account: ProductAccountId, payload: HostSignPayloadData }
+// sign_raw     req: v01::HostSignRawRequest     { account: ProductAccountId, payload: RawPayload }
+// resp (both):     v01::HostSignPayloadResponse { signature: Vec<u8>, signed_transaction: Option<Vec<u8>> }
+// err  (both):     FailedToDecode | Rejected | PermissionDenied | Unknown { reason }
+```
+
+Enforce product-account validity and the `ChainSubmit` remote permission via the existing `Permissions`
+trait first (denied => `CallError::Domain(PermissionDenied)`), then send a
+`signingRequest(transaction | rawPayload)` over the SSO session channel ([H §5](<H - sso-pairing-protocol.md>))
+and await the `signingResponse`. The wallet signs with its `/product/<dotNs>/<idx>` key and returns
+`Signature { raw_signature, signed_transaction? }`. Current dotli's host modal maps local cancel before
+dispatch to `Rejected`; `session.signPayload` / `session.signRaw` `Err(message)`, transport teardown, and
+host-papp's 180s queue timeout map to `Unknown { reason }`. dotli's modal also wraps the call in a 300s
+outer fallback, but the session-layer timeout should win for normal no-response cases. No active session
+maps to `Rejected` in the current signing handlers, and invalid product account / denied `ChainSubmit`
+maps to `PermissionDenied`. The legacy variants re-derive `(calling_product_id, 0)`, verify the provided
+legacy signer matches that derived account, and then route through the same product-account request.
+**Acceptance:** signature
+matches today's dotli path; ungranted `ChainSubmit` => `PermissionDenied`; host-modal cancel =>
+`Rejected`; SSO/session failure => `Unknown { reason }`; signer mismatch maps to `Unknown` like current
+dotli.
+
+### `create_transaction` (#30) · `create_transaction_with_legacy_account` (#32): core+chan **(M)**
+
+Current dotli implements both (`~/github/dotli/packages/ui/src/container.ts:413-461`,
+`:594-664`). Product-account `create_transaction` validates `signer`, checks `ChainSubmit`, then sends
+`createTransactionRequest` over the SSO channel. The legacy variant re-derives `(calling_product_id, 0)`,
+checks the raw signer public key, then sends the same SSO request with synthetic product signer
+`[calling_product_id, 0]`. **Acceptance:** returns the encoded signed transaction bytes from the wallet;
+permission denial, no-session rejection, host-modal cancel, signer mismatch, SSO/session failure, and the
+host-papp 180s queue timeout match current dotli behavior (`Rejected` for no session or local cancel,
+`PermissionDenied` for product/permission failure, `Unknown { reason }` for signer mismatch,
+session-channel failure, or timeout). The current UI wrapper also has a 300s outer fallback.
+
+### `create_proof` (#60) · `create_proof_authorized` (#132): core+session + crypto **(L)**
+
+```rust
+// create_proof            req: v01::RemoteStatementStoreCreateProofRequest { product_account_id, statement: Statement }
+// create_proof_authorized req: v01::Statement  (bare; uses a pre-allocated allowance account)
+// resp (both):                 RemoteStatementStoreCreateProofResponse { proof: StatementProof }
+// err  (both):                 UnableToSign | UnknownAccount | Unknown { reason }
+```
+
+Sign the `Statement` in-core with the session `ssSecret` (schnorrkel sr25519), producing
+`StatementProof::Sr25519 { signature:[u8;64], signer:[u8;32] }` where `signer` is the **session
+statement-store pubkey** (the core's own session sr25519 key, which the wallet granted statement-store
+allowance to during pairing, **not** the wallet root). dotli reads this same key as `ssSecret` via
+`secrets.read`. No session/secret => `UnableToSign`. The `Statement` field ordering fed to the proof is
+known from current `@novasamatech/sdk-statement`: encode the unsigned statement, strip the leading
+compact length prefix, and sign the remaining SCALE payload with the 64-byte expanded `ssSecret`
+([D3](<D - crypto-foundation.md>)).
+**Acceptance:** proof bytes match `createSr25519Prover(ssSecret).generateMessageProof(statement)` golden
+vectors.
+
+### `get_account_alias` (#24): core+chan (aliasRequest) **(M)**
+
+Send an `aliasRequest { product_account_id, calling_product_id }` over the SSO channel; the wallet
+derives the bandersnatch alias for `context = blake2b(utf8("/product/<dotNs>/<idx>"))` and replies
+`ContextualAlias { context:[u8;32], alias }` ([H §5](<H - sso-pairing-protocol.md>)). Map to
+`HostAccountGetAliasResponse { context, alias }`; on cross-domain alias requests the host shows the
+alias-permission prompt (today via dotli; in-core this is a `Permissions` check). Current dotli does not
+add a local timeout around `session.getRingVrfAlias`; no session maps to `NotConnected`, invalid product
+identifier to `DomainNotValid`, permission-prompt cancel to `Rejected`, and session-channel errors to
+`Unknown { reason }`. **Acceptance:** `get_account_alias` returns `{ context, alias }` matching today.
+
+### `ResourceAllocation::request` (#130): host-confirm + core+chan **(M)**
+
+Current dotli prompts, then calls `session.requestResourceAllocation`
+(`~/github/dotli/packages/ui/src/container.ts:666-724`). The core should send
+`resourceAllocationRequest { calling_product_id, resources, on_existing }` over the SSO channel only
+after a host UI confirmation callback accepts the request. Dismissal/cancel maps to the typed unknown
+error path dotli uses today. This is a dedicated confirmation trait/callback, not
+`Permissions::remote_permission`, because current dotli's modal owns retry behavior around the SSO
+round-trip: a failed allocation attempt leaves the modal open and lets the user retry. Dotli does not add
+a separate UI-level timeout around `requestResourceAllocation`; it relies on session-channel request
+machinery, which has the host-papp 180s queue timeout for this operation. No active session,
+host dismissal/cancel, and SSO/session errors all map to
+`ResourceAllocationErr.Unknown { reason }`. Map the host-api 0.8 `BulletinAllowance` tag to the SSO
+peer's current `BulletInAllowance` dialect if still required by vectors. Strip secret material from
+`Allocated` outcomes before returning to the product, as dotli does today. **Acceptance:** requesting
+statement/bulletin allowances shows host confirmation, allows retry after SSO failure, succeeds with the
+paired SSO peer after approval, and does not expose returned secrets to the product.
+
+---
+
+### `subscribe` (#56) · `submit` (#62) [statement-store]: core-native **(M, was XL)**
+
+These are part of current dotli feature parity because dotli wires `handleStatementStoreSubscribe` and
+`handleStatementStoreSubmit` through `@novasamatech/statement-store` today
+(`~/github/dotli/packages/ui/src/container.ts:981-1041`). They therefore block removing
+`statement-store` / `sdk-statement`, even though the heavy transport work is already done by the Tier-2
+statement-store client.
+
+```rust
+// subscribe req: RemoteStatementStoreSubscribeRequest = MatchAll(Vec<[u8;32]>) | MatchAny(Vec<[u8;32]>)
+//           item: RemoteStatementStoreSubscribeItem { statements: Vec<SignedStatement>, is_complete: bool }
+// submit    req: v01::SignedStatement (bare) ; resp: () ; err: v01::GenericError
+```
+
+These reuse the **same statement-store client** built for pairing (Tier 2): the core already submits and
+subscribes to statements on the People-chain connection. `submit` posts the `SignedStatement`; `subscribe`
+filters by topic and streams pages. **Paging contract** (RFC-0008) the implementation must preserve:
+
+```
+  is_complete:  false   false   false   |   true     true     true   ...
+                \___ historical dump ___/  ^first true = "synced"   \_ live, new statements only _/
+                (more pages follow)        (all subsequent pages are true)
+  topic limits: MatchAll <= 4, MatchAny <= 128 ; subscribe filters to statements with a proof
+```
+
+The on-chain `Statement` SCALE shape + the `statement_submit`/`statement_subscribeStatement` RPC are
+known from the iOS peer ([H](<H - sso-pairing-protocol.md>)). Because the pairing client already exists,
+this is no longer an XL pallet port; the remaining work is the product-facing topic-filtered subscription
++ the dump-then-live paging. [E1](<E - open-questions.md>) resolves this in-core.
+
+---
+
+## Tier 3.5: implemented host-side dotli behavior
+
+### `Entropy::derive` (#108): core+session + crypto **(S-M)**
+
+Current dotli reads `ssSecret` and calls `deriveProductEntropy(secret, "${label}.dot", key)`
+(`~/github/dotli/packages/ui/src/container.ts:769-794`). Implement in-core using the same algorithm from
+`@novasamatech/host-container` vectors and the runtime `product_label` parity input. No session/secret =>
+`Unknown { reason:"Not connected" }` / `"Session secret missing"` parity unless the Rust error type is
+more specific.
+
+### `Theme::subscribe` (#104): host-side **(S)**
+
+Current dotli emits `{ name: Default, variant: Light|Dark }` and listens for
+`dotli:theme-changed` (`~/github/dotli/packages/ui/src/container.ts:1194-1214`). Add a small platform
+theme subscription or a runtime host callback; this is not Nova-specific, but it is implemented dotli
+behavior once `host-container` is removed.
+
+### Notifications (#4/#134): extend platform primitive **(M)**
+
+Current dotli schedules/cancels local notifications and returns a host-assigned id
+(`~/github/dotli/packages/ui/src/container.ts:929-975`). `truapi-platform::Notifications` currently only
+has `push_notification(...) -> Result<(), GenericError>`, while the TrUAPI wire requires
+`HostPushNotificationResponse { id }` and `cancel_push_notification`. Extend the platform trait/bridge so
+the host can return ids and cancel scheduled notifications.
+
+### `lookup_subscribe` (#64) · `submit` (#68) [preimage]: host-side **(M)**
+
+Current dotli implements preimage submit/lookup with the selected content backend and local cache
+(`~/github/dotli/packages/ui/src/container.ts:1081-1192`). It does not use Nova packages, but it must still
+be exposed through the Rust host once `host-container` is removed. Keep the implementation host-side for
+v1 ([E4](<E - open-questions.md>)); add platform callbacks/traits rather than moving IPFS/Bulletin logic
+into `truapi-server`.
+
+---
+
+## Tier 4: remaining
+
+### `create_account_proof` (#26): core+chan (ring-VRF): deferred
+
+Req `RingLocation { genesis_hash, ring_root_hash, hints }` + `context`, resp `{ proof: Vec<u8> }`. This
+is a **full ring-VRF proof**, but the SSO channel exposes `deriveAlias` only today (the wallet's
+`BandersnatchKeyManaging.createProof` is not wired to a message). Carrying it needs a new message type or
+an in-core bandersnatch path ([E3](<E - open-questions.md>)).
+
+### `Payment::*`: intentionally unavailable
+
+Current dotli registers typed "not implemented" payment responses
+(`~/github/dotli/packages/ui/src/container.ts:1216-1243`). Leave Payment unavailable for this milestone;
+it only becomes relevant when another host/product needs real payment rails.
diff --git a/docs/design/host-contract-and-core-impl/C - session-contract.md b/docs/design/host-contract-and-core-impl/C - session-contract.md
new file mode 100644
index 00000000..8c9b6a65
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/C - session-contract.md	
@@ -0,0 +1,120 @@
+# C - Session / identity contract
+
+> Part of the [host-contract & core-impl spec](<index.md>).
+
+The core establishes the session by running pairing ([`request_login`](<B - core-impls.md>) /
+[H](<H - sso-pairing-protocol.md>)), so it owns `SessionState`. This doc covers the `SessionInfo`
+extension and core-owned persistence/restore.
+
+## C1. Extend `SessionInfo` for a core-run session **(S-M)**
+
+`SessionState` / `SessionInfo` live in `host_logic/session.rs`. Today:
+
+```rust
+pub struct SessionInfo { pub public_key: [u8; 32], pub lite_username: Option<String>, pub full_username: Option<String> }   // session.rs:15-23
+pub struct SessionState { /* Mutex<{ current: Option<SessionInfo>, subscribers: Vec<UnboundedSender<..>> }> */ }            // session.rs:27-36
+```
+
+`SessionState`'s machinery is already right: `set_session` broadcasts `Connected` only on a
+no-session->session transition; `clear_session` broadcasts `Disconnected` only if one was present;
+`subscribe()` emits current-then-transitions; `current()` snapshots (session.rs:46-93). This drives
+`connection_status_subscribe`(18) via the override at `runtime.rs:325-330`.
+
+Because the core now runs pairing, `SessionInfo` carries the material the handshake produces
+([H §3](<H - sso-pairing-protocol.md>)):
+
+```rust
+pub struct SessionInfo {
+    pub public_key: [u8; 32],           // wallet root_user_account_id; the product-account derivation root
+    pub ss_secret: [u8; 32],            // core's OWN session sr25519 statement-store secret (signs statement proofs)
+    pub enc_secret: [u8; 32],           // core's P-256 ECDH private key (channel encryption)
+    pub peer_enc_pubkey: [u8; 65],      // wallet persistent P-256 pubkey
+    pub identity_account_id: [u8; 32],  // wallet identity pubkey
+    pub session_id_own: [u8; 32],       // derived request/response topics
+    pub session_id_peer: [u8; 32],
+    pub lite_username: Option<String>,  // from on-chain identity, NOT the handshake
+    pub full_username: Option<String>,
+}
+```
+
+`ss_secret` is the core's own session statement-store key, **generated by the core** during pairing (the
+wallet never sends a secret, [H](<H - sso-pairing-protocol.md>)); it signs the core's statements and the
+product statement proofs ([B create_proof](<B - core-impls.md>)). None of these secrets leave the core.
+Account-only injection APIs such as `set_active_session(pubkey, lite, full)` are not part of this plan:
+they cannot rehydrate `ss_secret`, ECDH material, peer keys, or derived session ids. Real v1 restore uses
+the core-owned persisted session blob in C2. Usernames are filled by a separate on-chain People-chain
+identity lookup keyed by `public_key`.
+
+## C2. Persistence + restore **(M)**
+
+```
+  request_login succeeds                         core init (cold start)
+        |                                              |
+        v                                              v
+  SessionState.set_session(info)                 SessionStore.subscribe()
+        |  Connected broadcast                          |  first tick is current-state signal
+        v                                              v
+  SessionStore.write(encode(info))               SessionStore.read()
+        |                                             Some(blob) -> decode -> set/replace session
+        v                                             None       -> clear_session / stay Disconnected
+  (new successful pairing replaces old blob)     future ticks repeat read/decode
+        ...
+  logout: clear_session + SessionStore.clear()
+```
+
+The core writes opaque encoded bytes for the full `SessionInfo` via a dedicated host/global
+`SessionStore` capability on establish, and subscribes to the store on init to re-hydrate `SessionState`.
+Do **not** reuse the existing `Storage` trait: that is product-scoped local storage semantics, while the
+wallet session is host-global, secret-bearing, and shared across product runtimes. The host does not see
+typed session fields; Rust owns the schema, versioning, migration, and validation. V1 is **single-session
+only**: `SessionStore` exposes at most one blob and a new successful pairing replaces the old blob.
+If the blob is missing, unreadable, fails version/schema validation, or fails decode, the core
+clears `SessionStore`, logs/emits diagnostics, and stays `Disconnected`; it must not start with a partial
+session.
+Rust does not encrypt or MAC the persisted blob itself; confidentiality and tamper resistance are the
+host storage layer's responsibility. The core still validates the bytes before restoring a session.
+For dotli web, back `SessionStore` with the same shared host-origin storage path used by current auth
+(`host.<root-domain>` localStorage via the protocol iframe), but use a new Rust-owned key/prefix such as
+`TRUAPI_SESSION_<siteId>`. Do not reuse `PAPP_*` or `SsoSessions`; those names imply host-papp's
+multi-session `Vec<Session>` encoding.
+`SessionStore.subscribe()` emits one tick immediately, then future change ticks for both same-runtime
+writes/clears and cross-tab/process changes. The notification carries no session bytes; after each tick the
+core calls `read()` and validates the current blob. That avoids a read-then-subscribe race and keeps every
+runtime on the same path: a clear yields `None`, clears in-memory `SessionState`, and broadcasts
+`Disconnected`; a valid replacement blob is decoded, replaces in-memory `SessionState`, and broadcasts the
+normal connection transition. The core should dedupe equivalent blobs/session ids before rebroadcasting if
+the host emits after a local write that the core already applied. dotli web should implement this with the
+same local emit plus protocol-iframe BroadcastChannel-style shared-storage notifications it uses today.
+The persisted format is **core-defined**; the cutover from `@novasamatech` sessions intentionally
+requires a one-time re-pair ([E5](<E - open-questions.md>)). Logout clears both in-memory state and the
+persisted blob through the same core-owned session store.
+
+## C3. Public logout / disconnect API **(S)**
+
+dotli UI needs a direct host->core logout action. Expose a public core API such as `disconnect()` /
+`logout()` through WASM, UniFFI, and the JS worker package. Hosts should call this API, not
+`SessionStore.clear()` directly.
+
+Core behavior:
+
+- best-effort send SSO session-channel `disconnected` over the People-chain statement-store protocol if
+  the session channel is currently usable; do not wait indefinitely and do not fail logout if this send
+  fails;
+- stop/tear down active session-channel subscriptions and pending request waiters; in-flight
+  request/response operations must resolve as failures rather than hanging. Current dotli delegates this
+  to `host-papp`'s session manager (`adapter.sessions.disconnect(session)`), whose debug contract reports
+  channel teardown as `session:host_action_failed`; the Rust core should make that lifecycle explicit.
+- clear in-memory `SessionState` and broadcast `Disconnected`;
+- clear the single persisted session blob through `SessionStore.clear()`;
+- tolerate repeated logout when already disconnected.
+
+Peer-originated `disconnected` messages over the SSO session channel route through the same internal
+cleanup path, including `SessionStore.clear()`. Do not keep a persisted session after the SSO peer says the
+session is disconnected.
+
+Current `host-papp@0.7.9` has a 180s session request-queue timeout for `signPayload`, `signRaw`,
+`createTransaction`, and `requestResourceAllocation`; dotli's signing/transaction UI wrappers add a 300s
+outer fallback after the user confirms the modal. `getRingVrfAlias` does not add a separate timeout in the
+current checkout. Preserve the same user-visible failure shape in Rust: peer decline maps to the method's
+domain rejection/unknown path, transport teardown maps to `Unknown { reason }` where the host-api type
+lacks a dedicated disconnected variant, and no operation waits forever after local or peer disconnect.
diff --git a/docs/design/host-contract-and-core-impl/D - crypto-foundation.md b/docs/design/host-contract-and-core-impl/D - crypto-foundation.md
new file mode 100644
index 00000000..ad2ee31e
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/D - crypto-foundation.md	
@@ -0,0 +1,150 @@
+# D - Crypto & dependency foundation
+
+> Part of the [host-contract & core-impl spec](<index.md>).
+
+`truapi-server` has no crypto deps today (grep for `schnorrkel`/`blake2` in the workspace `Cargo.toml`s
+returns nothing). This doc specifies the deps, the one fully-portable algorithm (`get_account`
+derivation), the proof scheme that must be extracted from source, and the golden-vector harness that
+gates all of it.
+
+Implementation shape: use `~/github/useragent-kit` as implementation precedent only, especially
+`crates/host-wallet/src/crypto.rs`, `crates/host-encoding/src/statement_store.rs`, and
+`crates/host-wallet/tests/pinned_vectors.rs`: keep pure protocol crypto in a narrow WASM-safe
+module/crate, use existing Rust crypto crates for primitives, provide deterministic helpers for vectors
+(for example fixed AES-GCM nonces), and test the same vectors on native and wasm. Do **not** hand-roll
+crypto primitives. `useragent-kit` has broader scope and is not a protocol source of truth for TrUAPI
+SSO bytes; consult it when we need examples of similar Novasama-codepath migrations to Rust.
+
+## D0. Tier 1.5 crypto/vector gate
+
+Before Tier 2 pairing I/O starts, add a focused crypto module/crate and pinned vectors for:
+
+- `get_account` public HDKD derivation.
+- Statement signing payload encoding and sr25519 proof sign/verify.
+- QR handshake SCALE encoding and deeplink bytes.
+- P-256 ECDH -> HKDF -> AES-GCM encrypt/decrypt with fixed inputs/nonces.
+- Topic/channel/session-id derivation.
+
+This gate produces tests, not the full `request_login` flow. Tier 2 starts only after those tests pass on
+native and `wasm32-unknown-unknown`.
+
+`useragent-kit` is a dependency/style reference, not a protocol source of truth. Its scope is broader and
+may include a different pairing dialect. The vector capture must compare against the pinned
+`@novasamatech/host-papp` package and the wallet peer.
+
+## D1. Dependencies (must build for `wasm32-unknown-unknown`)
+
+Two crypto layers, with constants read from the current dotli-installed `@novasamatech` packages and
+locked by the Tier 1.5 vectors ([H](<H - sso-pairing-protocol.md>)):
+
+- **Statements + accounts (sr25519):** `schnorrkel` for statement-proof sign/verify and `get_account`
+  HDKD soft derivation. SCALE (`parity-scale-codec`, already a dep) for chain-code + statement encoding.
+- **The SSO channel (P-256 ECIES):** NIST P-256 ECDH + HKDF-SHA256 + AES-GCM. RustCrypto stack:
+  `p256` (key agreement), `hkdf` + `sha2`, `aes-gcm`. Current dotli uses HKDF-SHA256 with empty
+  `salt`/`info`, `dkLen=32`, AES-GCM with a random 12-byte nonce prepended to ciphertext+tag.
+- **Topic / channel / session-id derivation:** keyed **BLAKE2b-256** (`blake2`, keyed mode). Current
+  dotli's `khash(secret, message)` is `blake2b(message, { dkLen: 32, key: secret })`; it is used for the
+  handshake topic, session ids, and request/response channels.
+- `bandersnatch_vrfs` / `ark-*`: only if `create_account_proof` / ring-VRF moves in-core
+  ([E3](<E - open-questions.md>)); the alias itself is proxied to the wallet.
+
+Add behind the existing wasm build and confirm `make wasm` + `cargo build -p truapi-server
+--target wasm32-unknown-unknown` succeed (schnorrkel + p256 need `getrandom`'s `js` feature on wasm).
+
+## D2. `get_account` product-account derivation: fully specified, portable now
+
+This is pure (no secret) and is the cleanest in-core port. Current dotli's reference is
+`~/github/dotli/packages/auth/src/account.ts` using `@scure/sr25519` `HDKD.publicSoft`. Reproduce
+exactly:
+
+```
+ root_pk = SessionInfo.public_key      (= session.remoteAccount.accountId, 32 bytes)
+ junctions = ["product", dot_ns_identifier, String(derivation_index)]   // always these 3, in order
+
+   root_pk --publicSoft(cc("product"))--> pk1 --publicSoft(cc(dotNS))--> pk2 --publicSoft(cc(idxStr))--> product_pk
+   (left fold: junctions.reduce((pk, j) => HDKD.publicSoft(pk, cc(j)), root_pk))
+```
+
+Chain code `cc(code)`: a **32-byte buffer, zero-initialised**, after encoding/compression:
+
+```
+  if code matches /^\d+$/: encoded = SCALE u64(BigInt(code))
+  else:                    encoded = SCALE str(code)  (compact-length byte + UTF-8)
+
+  if encoded.len > 32:     bytes = blake2b(encoded, dkLen=32)
+  else:                    bytes[0..encoded.len] = encoded; remaining bytes stay zero
+```
+
+So `"product"` and the dotNS go through the `str` branch; `String(derivation_index)` (always numeric)
+goes through the `u64` branch. In Rust: build the `[u8;32]`, use schnorrkel public soft derivation
+(`PublicKey` soft-derive with that chain code), fold over the three junctions. This must be vector-tested
+against current dotli because `u32` would produce the wrong product account for every numeric derivation
+index.
+
+**Note:** product accounts have no per-product secret today; the matching `deriveProductSecretKey`
+(`HDKD.secretSoft`) is intentionally disabled in dotli (`account.ts:28-42`) because derived accounts have
+no People-chain allowance yet. The core derives the product **public** key for `get_account` but signs
+statement proofs with the **session statement-store** key (`ss_secret`, see D3), not a product key.
+
+**Acceptance:** golden vectors: for fixed `(root_pk, dotNS, index)` tuples, the Rust output equals
+`HDKD.publicSoft`-folded output byte-for-byte.
+
+## D3. Statement-proof signing
+
+Current dotli signs with `createSr25519Prover(ssSecret).generateMessageProof(statement)` in
+`~/github/dotli/packages/ui/src/container.ts` (`handleStatementStoreCreateProof`). `ssSecret` is the
+core's session statement-store sr25519 secret; the output is
+`StatementProof::Sr25519 { signature:[u8;64], signer:[u8;32] }` with `signer` = the session statement
+pubkey (allowance-granted by the wallet).
+
+The **message framing is known** from current dotli packages: `@novasamatech/sdk-statement` encodes the
+unsigned `Statement`, strips the leading compact length prefix from the encoded bytes, and signs the
+remaining SCALE payload. `@novasamatech/statement-store` then sets
+`proof = sr25519 { signature, signer }`. The secret passed to the signer is the 64-byte
+Ed25519-expanded/scure HDKD secret returned by `createSr25519Secret`; the package's substrate sr25519
+wrapper calls `@polkadot-labs/schnorrkel-wasm` `sr25519_sign(publicKey, secret, message)` with no
+explicit context parameter.
+
+**Acceptance:** for a fixed `(ssSecret, statement)`, the Rust `{signature, signer}` equals
+`generateMessageProof`'s output (signatures are randomised, so verify with the public key + compare
+`signer`, or seed the RNG when capturing vectors).
+
+## D4. SSO channel crypto (host-papp + wallet-peer vectors)
+
+The current dotli web path is explicit:
+
+- `createEncrSecret(entropy)`: convert entropy to a mini-secret, zero-extend to a 48-byte seed, then
+  `p256.keygen(seed).secretKey`.
+- `getEncrPub(secret)`: uncompressed P-256 public key, 65 bytes.
+- `createSharedSecret(secret, publicKey)`: `p256.getSharedSecret(secret, publicKey).slice(1, 33)`, i.e.
+  the X coordinate from the uncompressed ECDH output.
+- bootstrap decrypt: `createSharedSecret(core_encr_secret, wallet_tmp_key)`.
+- steady-state shared secret: `createSharedSecret(core_encr_secret, shared_secret_derivation_key)`, where
+  `shared_secret_derivation_key` is the SSO peer's persistent P-256 public key from the sensitive
+  handshake response.
+- encryption: `createEncryption(sharedSecret)` derives `aesKey = HKDF-SHA256(sharedSecret, salt=[], info=[], len=32)`;
+  encrypt prepends a random 12-byte nonce to AES-GCM ciphertext+tag; decrypt splits the first 12 bytes as
+  nonce.
+- handshake topic: `khash(ss_public_key, encr_public_key || "topic")`.
+- session id: `khash(sharedSecret, "session" || accountA.accountId || accountB.accountId || pinA || pinB)`,
+  where each missing pin contributes the separator byte/string `"/"`.
+- request/response channels: `khash(session_id, "request")` and `khash(session_id, "response")`.
+
+The vector gate remains mandatory because it catches byte-order/SCALE/nonce mistakes, not because these
+choices are still open.
+
+## D5. Golden-vector harness
+
+The `@novasamatech` packages are pinned in the current dotli checkout: `host-api` `0.8.2`,
+`host-container` `0.8.2`, `host-papp` `0.7.9`, `statement-store` `0.8.2`, `sdk-statement` `^0.6.0`,
+and `storage-adapter` `0.8.2`. To capture vectors: use `~/github/dotli` or a scratch workspace with the
+same package versions, then snapshot into a Rust test fixture:
+
+- `HDKD.publicSoft` fold outputs for several `(root, dotNS, index)` tuples (D2).
+- `createSr25519Prover(secret).generateMessageProof(statement)` `{signature, signer}` for fixed inputs (D3).
+- QR handshake SCALE/deeplink bytes for fixed public keys + metadata URL.
+- P-256 ECDH -> HKDF -> AES-GCM round-trip + topic/session-id derivation for fixed inputs (D4),
+  cross-checked against the iOS `SsoTestData` fixtures and host-papp outputs.
+
+Commit the vectors as test data and assert the Rust implementations reproduce them. This harness is the
+acceptance gate for Tiers 1-3; do it before, not after, implementing the crypto.
diff --git a/docs/design/host-contract-and-core-impl/E - open-questions.md b/docs/design/host-contract-and-core-impl/E - open-questions.md
new file mode 100644
index 00000000..ba74e0e8
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/E - open-questions.md	
@@ -0,0 +1,166 @@
+# E - Decision log / deferred questions
+
+> Part of the [host-contract & core-impl spec](<index.md>).
+
+Resolved branches from the plan audit, plus deferred items that are not required for current dotli parity.
+The rest of the spec assumes these decisions for v1.
+
+## E1. StatementStore `subscribe`/`submit` transport: RESOLVED
+
+The core builds a minimal People-chain statement submit/subscribe client for pairing anyway
+([H](<H - sso-pairing-protocol.md>), Tier 2), so the product-facing `subscribe`/`submit` reuse it rather
+than being a fresh pallet port. The resolved choice is where the **product-facing paging semantics**
+(topic-filtered subscription, historical-dump-then-live driving `is_complete`) live. **Decision:**
+in-core now that the client exists; the on-chain `Statement`
+SCALE is known from the iOS peer. This is part of the `@novasamatech` removal critical path because
+dotli exposes product-facing statement-store callbacks through `@novasamatech/statement-store` today.
+Gates [B subscribe/submit](<B - core-impls.md>).
+
+## E2. Wallet channel ownership (signing model): RESOLVED
+
+Resolved by [H](<H - sso-pairing-protocol.md>): there is no separate wallet channel. Signing, ring-VRF
+alias, and create-transaction are request/response messages the **core** sends over the encrypted SSO
+session channel on the People-chain statement store; the wallet signs and replies. So the wallet
+sign-protocol is **core-owned**, and `host-papp` has no residual client to keep. Sub-decision retained:
+the `ChainSubmit` permission gate is enforced in the core via the existing `Permissions` trait before the
+`signingRequest` is sent.
+
+## E3. `create_account_proof` ring-VRF (full proof)
+
+The alias (`get_account_alias`) is an `aliasRequest` the wallet answers with `deriveAlias` over the SSO
+channel ([H §5](<H - sso-pairing-protocol.md>)). `create_account_proof` (#26) needs a **full ring-VRF
+proof**, which the channel does not expose today (the wallet has `BandersnatchKeyManaging.createProof` but
+no message routes to it). Options: add a new SSO message type the wallet answers, or compute it in-core
+(`bandersnatch_vrfs`/`ark-*` + ring membership from the Chain runtime, XL). **Recommendation:** add an SSO
+message (keeps the ring secret in the wallet). This is not a current dotli parity blocker because current
+dotli does not implement `handleAccountCreateProof`, and `host-papp@0.7.9`'s `RemoteMessageCodec` has no
+full ring-VRF proof request/response variant.
+
+## E4. Preimage: RESOLVED
+
+Keep host-side (dotli polls an IPFS/Helia gateway; no `@novasamatech`), or move CID compute + poll
+in-core with a content-fetch host callback. **Decision:** host-side for v1. Because current dotli does
+implement preimage submit/lookup through the `host-container` bridge, Rust must still expose host-side
+preimage callbacks before `host-container` can be removed; the IPFS/Bulletin implementation itself stays
+out of `truapi-server`.
+
+## E5. Session-persistence encoding: RESOLVED
+
+The core defines its own persisted `SessionInfo` format (forces a one-time re-pair on cutover), or
+matches `@novasamatech` byte-for-byte (the `SsoSessions` / `PAPP_<siteId>_<key>` keys and the
+`EMPTY_SHARED_AUTH_SESSION_LIST = "0x00"` SCALE `Vec<Session>` sentinel, `auth-storage.ts:10,16,53-55`) so
+already-logged-in users survive. The full `Vec<Session>` layout is host-papp-internal.
+**Decision:** core-defined. A one-time re-pair on cutover is acceptable, so the implementation does not
+need to reverse-engineer or preserve host-papp's internal session list encoding. Gates
+[C persistence](<C - session-contract.md>) and the `auth-storage.ts` cleanup in [F](<F - novasamatech-removal.md>).
+
+## E6. Relay endpoint + deeplink format: RESOLVED
+
+There is no relay endpoint: the transport is the People-chain statement store reached via `ChainProvider`,
+and the deeplink is `polkadotapp://pair?handshake=<hex(SCALE HostHandshakeData)>`
+([H §1](<H - sso-pairing-protocol.md>)). Both are core-owned protocol constants; the only host input is the
+People-chain genesis hash for `ChainProvider::connect` and the dApp metadata URL.
+
+## E7. Resource allocation confirmation: RESOLVED
+
+Current dotli shows a dedicated allowance modal before calling `session.requestResourceAllocation`; errors
+from the SSO allocation attempt keep the modal open for retry. **Decision:** model this as a dedicated
+host confirmation callback/trait before the core sends the encrypted `resourceAllocationRequest` over the
+SSO session channel. Do not overload `Permissions::remote_permission`, which is a permission decision
+surface rather than retry-capable operation UI.
+
+## E8. Nested dApps: RESOLVED
+
+Current dotli can create extra JS host-container bridges for nested iframe sources. **Decision:** do not
+model nested dApps as separate Rust runtimes, sessions, product identities, or storage namespaces for v1.
+Nested traffic, if forwarded at all, uses the shared top-level product core. Track the usefulness and any
+future independent nested-product model in [I](<I - nested-dapps.md>).
+
+## E9. Account-only session injection: RESOLVED
+
+Existing `setActiveSession(pubkey, lite, full)`-style APIs cannot restore a channel-capable core session:
+they omit `ss_secret`, P-256 key material, peer keys, and derived session ids. **Decision:** remove
+`setActiveSession`/`clearActiveSession` worker-plumbing from the migration plan. Real restore/logout uses
+the core-owned persisted `SessionInfo` store; cutover still requires one-time re-pair.
+
+## E10. Session persistence storage surface: RESOLVED
+
+The existing `Storage` trait is product-scoped local storage. A wallet session is host-global,
+secret-bearing, and shared across product runtimes. **Decision:** add/use a separate host-global
+`SessionStore` capability for opaque core-encoded bytes. Rust owns the `SessionInfo` schema/versioning;
+the host only implements `read()`, `write(Vec<u8>)`, and `clear()`. Do not persist `ss_secret` or ECDH
+material through product-scoped `Storage`, and do not expose typed session fields to JS/UniFFI.
+
+## E11. Session cardinality: RESOLVED
+
+Current dotli reads host-papp's `sessions` list but effectively restores the first session
+(`sessions[0]`). **Decision:** v1 `SessionStore` is single-session only: one optional opaque blob, replaced
+on successful pairing and cleared on logout. Do not preserve host-papp's multi-session `Vec<Session>` shape
+as part of the migration.
+
+## E12. Corrupted persisted sessions: RESOLVED
+
+If `SessionStore.read()` returns bytes that are unreadable, schema/version-invalid, or fail decode,
+the core clears the store, logs/emits diagnostics, and remains disconnected. **Decision:** invalid
+persisted session data behaves like no session; it must not brick startup or create a partial connected
+state.
+
+## E13. Persisted-session encryption: RESOLVED
+
+The persisted session blob contains secret material, but v1 relies on host storage security rather than
+adding Rust-side encryption/MAC around the blob. **Decision:** `SessionStore` is a host trust boundary:
+the host is responsible for confidentiality and tamper resistance. Rust owns schema encoding and restore
+validation, but writes the opaque encoded blob as-is.
+
+## E14. dotli web SessionStore key/path: RESOLVED
+
+Current dotli routes host-papp storage through the shared host-origin path
+(`host.<root-domain>` localStorage via the protocol iframe) using `PAPP_<siteId>_<key>` keys such as
+`SsoSessions`. **Decision:** reuse the shared host-origin storage route for dotli web, but use a new
+Rust-owned key/prefix such as `TRUAPI_SESSION_<siteId>`. Do not reuse `PAPP_*` or `SsoSessions`, because
+the Rust session blob is single-session and core-defined.
+
+## E15. SessionStore cross-tab updates: RESOLVED
+
+Current dotli's storage adapter preserves cross-tab updates through `subscribeSharedAuthStorage` /
+BroadcastChannel behavior. **Decision:** v1 `SessionStore` supports current-then-changes coarse change
+notifications for both same-runtime writes/clears and cross-tab/process changes. The first tick tells the
+core to call `read()` for startup state; future ticks do the same. Clear therefore maps to
+`read() == None` -> in-memory `clear_session` + `Disconnected`; valid write replaces the current in-memory
+session. Invalid read follows E12. The core may dedupe equivalent blobs/session ids before rebroadcasting.
+
+## E16. Logout API ownership: RESOLVED
+
+Hosts need a direct UI action for disconnect/logout. **Decision:** expose a public core logout/disconnect
+API through WASM, UniFFI, and JS worker surfaces. The core owns lifecycle policy: tear down session-channel
+subscriptions and pending request waiters, clear in-memory `SessionState`, clear `SessionStore`, broadcast
+`Disconnected`, and tolerate idempotent logout. Hosts should not call `SessionStore.clear()` directly as
+the public logout path.
+
+## E17. SSO logout message: RESOLVED
+
+The SSO message enum already has `disconnected`. There is no separate wallet channel or connection:
+pairing and post-pairing peer communication happen only through the SSO session protocol over the
+People-chain statement store. **Decision:** local public logout best-effort sends an SSO session-channel
+`disconnected` message before teardown when the session channel is usable, but local cleanup must not hang
+or fail if the SSO send fails.
+
+## E18. Peer-originated SSO disconnect cleanup: RESOLVED
+
+When the SSO peer sends `disconnected`, the core should not preserve the persisted session. **Decision:**
+peer-originated SSO disconnect routes through the same cleanup path as local logout: tear down SSO channel
+state, clear in-memory `SessionState`, clear `SessionStore`, and broadcast `Disconnected`.
+
+## E19. Pending SSO requests on disconnect: RESOLVED
+
+Current dotli does not maintain a separate UI-level cancel token for session-channel work. Local logout
+calls `adapter.sessions.disconnect(session)` and then sets auth state to idle; dotli's debug contract says
+session-channel teardown produces `session:host_action_failed` for host-originated actions and
+`session:terminated` stops further peer/host actions for that session. The exact `host-papp@0.7.9`
+session wrapper also applies a 180s queue timeout to signing, raw signing, create-transaction, and
+resource-allocation requests; dotli's signing/transaction modals add a 300s outer fallback. Alias adds no
+separate timeout in current dotli. Resource allocation keeps its modal open for retry after an SSO
+failure. **Decision:** Rust owns this lifecycle explicitly: local logout or peer `disconnected` tears down
+subscriptions and pending waiters so no operation can hang forever; per-method errors preserve current
+dotli's typed shape (`Rejected` for local signing/transaction modal cancel, `Unknown { reason }` for
+session-channel failure where no narrower host-api error exists).
diff --git a/docs/design/host-contract-and-core-impl/F - novasamatech-removal.md b/docs/design/host-contract-and-core-impl/F - novasamatech-removal.md
new file mode 100644
index 00000000..e4ead93c
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/F - novasamatech-removal.md	
@@ -0,0 +1,97 @@
+# F - `@novasamatech` removal checklist (dotli side)
+
+> Part of the [host-contract & core-impl spec](<index.md>).
+
+Source of truth for this checklist is the current dotli checkout at `~/github/dotli` (`85c9733`, dirty
+worktree ignored). Do not use the `hosts/dotli` submodule for parity decisions.
+
+Current dotli depends on:
+
+- `@novasamatech/host-api` `0.8.2`
+- `@novasamatech/host-container` `0.8.2`
+- `@novasamatech/host-papp` `0.7.9`
+- `@novasamatech/statement-store` `0.8.2`
+- `@novasamatech/sdk-statement` `^0.6.0`
+- `@novasamatech/storage-adapter` `0.8.2`
+
+Handlers that current dotli explicitly leaves unimplemented, such as payment and full
+`create_account_proof`, are not blockers for this removal. They stay unavailable until another host needs
+them.
+
+## Order of removal
+
+```
+  Tier 1-3.5 land  ->  all Nova packages drop together:
+                       host-api + host-container                         (Rust host wire + generated
+                          TrUAPI codecs replace the JS container)
+                       host-papp                                          (pairing, signing,
+                          transaction construction, alias, resource
+                          allocation, entropy move to core/session channel)
+                       statement-store + sdk-statement                    (submit/subscribe/proof and
+                          mappings move to core + @parity/truapi types)
+                       storage-adapter                                    (local shared-auth storage
+                          interface becomes dotli/core-defined)
+```
+
+## Checklist (exact refs)
+
+- [ ] `packages/ui/src/container.ts`: replace `createIframeProvider`, `createContainer`,
+      `createRateLimiter`, `deriveProductEntropy`, `Container`, `Provider`, and all `host-api` error/type
+      imports with the Rust worker bridge and generated TrUAPI codecs. This file is the active current
+      dotli bridge.
+- [ ] Nested dApps: do not port `setupNestedBridgeDetector` as separate Rust runtimes/sessions/product
+      identities for v1. If nested message forwarding remains, route it through the shared top-level Rust
+      core. Track future nested-product usefulness in [I](<I - nested-dapps.md>).
+- [ ] Preserve current `container.ts` handler coverage in Rust before removing the JS handlers:
+      account get/legacy/user-id/login/alias, signing, legacy signing, `create_transaction`, resource
+      allocation, local storage, entropy, navigation, device/product permissions, notifications,
+      statement-store submit/subscribe/proof, preimage submit/lookup, theme subscription, feature support,
+      and chain connection/status.
+- [ ] `js/packages/truapi-host-wasm`: delete transitional raw callback routes for methods now owned by
+      Rust (`accountGet`, `accountGetAlias`, `accountCreateProof` if still unavailable, `getLegacyAccounts`,
+      `getUserId`, `signPayload`, `signRaw`, `statementStoreSubscribe`, `statementStoreSubmit`,
+      `statementStoreCreateProof`, and any preimage route that has moved behind the final host-side
+      primitive). The final bridge should expose only true platform callbacks plus `chainConnect` and
+      frame transport.
+- [ ] `truapi-server` WASM/UniFFI surfaces: remove `setActiveSession` / `clearActiveSession` as product
+      lifecycle APIs after core-owned SSO restore/logout lands. They are account-only PR-104 scaffolding
+      and cannot restore `ss_secret`, P-256 key material, peer keys, or session topics.
+- [ ] Keep explicit unavailable behavior for current dotli-unimplemented handlers: payment and full
+      `create_account_proof`.
+- [ ] `packages/auth/src/auth.ts`: remove `createPappAdapter`, `PappAdapter`, `PairingStatus`,
+      `Identity`, `UserSession`, `createLazyClient`, `createPapiStatementStoreAdapter`,
+      `StatementStoreAdapter`, `Statement`, and `toHex` once pairing/session restore/statement-store are
+      core-owned. Keep only dotli UI state wiring or replace it with the Rust session facade.
+- [ ] dotli logout/disconnect UI: call the Rust core public logout/disconnect API. Do not clear the
+      `SessionStore` directly from UI code; core owns teardown, storage clear, and `Disconnected`
+      broadcast.
+- [ ] `packages/auth/src/signing.ts`: remove `UserSession` and `host-api` error/type imports once signing,
+      legacy signing, and `create_transaction` are core session-channel requests. Keep or rewrite only the
+      dotli confirmation modals if they remain host UI around core calls.
+- [ ] `packages/auth/src/account.ts`: port product account derivation to Rust and vector-test it. Match the
+      current chain-code rule exactly: numeric junctions use SCALE `u64`, string junctions use SCALE `str`,
+      values longer than 32 bytes are `blake2b(..., dkLen=32)`, and shorter values are right-padded to 32.
+- [ ] `packages/auth/src/shared-storage.ts`: replace the type-only `StorageAdapter` import with a local or
+      core-owned storage interface. Core session persistence is not host-papp session-list compatible and
+      cutover requires one-time re-pair ([E5](<E - open-questions.md>)).
+- [ ] `packages/ui/src/statement-store-mapping.ts`: delete the SDK<->host mapping once Rust emits/accepts
+      the final TrUAPI statement-store wire types directly.
+- [ ] `packages/ui/src/permissions.ts`, `packages/ui/src/allocation-modal.ts`, and any modal code importing
+      `@novasamatech/host-api`: replace SDK enum/error/types with generated Rust/TrUAPI-facing types.
+- [ ] `packages/ui/src/topbar.ts`: remove type-only `Identity`, `__NOVASAMATECH_VERSIONS__`, and the
+      `NOVASAMATECH_ALLOWLIST` diagnostics once auth/debug data comes from the Rust bridge.
+- [ ] `packages/truapi-debug`: replace `onHostApiDebugMessage` and `onHostPappDebugMessage` with Rust
+      bridge debug events, then drop the debug package dependencies on `host-api`, `host-container`, and
+      `host-papp`.
+- [ ] `apps/host/vite.config.ts`: delete `define.__NOVASAMATECH_VERSIONS__` and the `manualChunks` branch
+      that returns `"nova-scale"` for `@novasamatech/scale`.
+- [ ] `packages/protocol/src/auth-storage.ts`: delete `EMPTY_SHARED_AUTH_SESSION_LIST = "0x00"` and
+      host-papp session-list compatibility notes; the core uses its own persisted `SessionInfo` through a
+      host-global `SessionStore`, not product-scoped local storage. dotli web should keep the shared
+      host-origin storage route but move to a Rust-owned key/prefix such as `TRUAPI_SESSION_<siteId>`,
+      not `PAPP_*` / `SsoSessions`, and preserve cross-tab change notifications for logout/re-pair.
+- [ ] `package.json` deps: remove `@novasamatech/host-api`, `host-container`, `host-papp`,
+      `sdk-statement`, `statement-store`, and `storage-adapter` from `packages/ui`, `packages/auth`, and
+      `packages/truapi-debug` when no `rg "@novasamatech"` value/type imports remain.
+- [ ] Docs and README: update `README.md` host-container/debug descriptions and any dotli migration notes
+      to describe the Rust bridge and core-owned SSO/session protocol.
diff --git a/docs/design/host-contract-and-core-impl/G - annex.md b/docs/design/host-contract-and-core-impl/G - annex.md
new file mode 100644
index 00000000..4c838fcf
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/G - annex.md	
@@ -0,0 +1,158 @@
+# G - Annex: conventions & wiring reference
+
+> Part of the [host-contract & core-impl spec](<index.md>). Shared mechanics referenced by
+> [A](<A - host-primitives.md>) (host primitives) and [B](<B - core-impls.md>) (wire methods). Read the
+> relevant spec first; come here for the recipe.
+
+## Platform trait conventions
+
+`truapi-platform` currently defines seven capability traits (`Storage`, `Navigation`, `Notifications`,
+`Permissions`, `Features`, `ChainProvider`, `JsonRpcConnection`) plus a `Platform` supertrait
+blanket-impl'd over the first six (`truapi-platform/src/lib.rs:31-130`). This plan adds more traits,
+including host-global `SessionStore`. A new capability trait must:
+
+- **Be RPITIT async, not `async-trait`:** `fn name(&self, ...) -> impl Future<Output = Result<T, E>> + Send;`.
+- **Be bound `: Send + Sync`** and added to the `Platform` supertrait + its blanket impl (lib.rs:122-130).
+- **Use concrete `truapi::v01` / `versioned` error types** (re-exported at lib.rs:25-27), never
+  `CallError`; the runtime maps them to `CallError`.
+- **Reuse existing `v01` payload types** where one fits, so the byte bridge needs no new SCALE type.
+
+## Adding a host primitive: the five layers
+
+Use this recipe only for capabilities the Rust core **cannot** perform itself: UI presentation, OS
+services, persistence, and chain connections. Do **not** use it for account reads, signing, transaction
+construction, alias, product statement-store, or SSO pairing internals; those are core methods in
+[B](<B - core-impls.md>) and should remove the transitional raw JS callbacks that PR 104 shipped.
+
+```
+ (1) truapi-platform/src/lib.rs        trait method  + add to Platform supertrait (lib.rs:122-130)
+ (2) truapi-server/src/runtime.rs      PlatformRuntimeHost calls it via UFCS alias, maps -> CallError
+ (3a) truapi-server/src/wasm.rs        JsBridge field + from_js("camelName") + WasmPlatform impl + invoker
+ (3b) truapi-server/src/native.rs      HostCallbacks method + CallbackPlatform impl   (run `make uniffi`)
+ (4) js .../truapi-host-wasm           WasmRawCallbacks field + createUnavailableCallbacks stub
+                                       + worker-protocol CallbackName + worker-runtime forward + main dispatch
+ (5) host (dotli)                      supply the callback in the object passed to the core
+```
+
+Callback round-trip across the Web Worker boundary (trace of `localStorageRead`):
+
+```
+ WASM core (in worker)              worker-runtime.ts            main thread (create-worker-host-runtime)
+   raw.localStorageRead(key) --> callbackRequest(name,args) --> { kind:"callbackRequest", id, name, args }
+        ^                            stores resolver in                       |
+        |                            pendingCallbacks[id]            state.rawCallbacks[name](...args)
+   Promise resolves <-- pendingCallbacks[id].resolve <-- { kind:"callbackResponse", id, ok, value/error }
+```
+
+PR 104's JS package still exposes byte-oriented `WasmRawCallbacks`, including transitional
+`accountGet`/`signPayload`/`statementStore*`/`preimageLookupSubscribe` callbacks. Treat those as
+scaffolding for unsupported methods, not the destination. For any method moved into the Rust core, delete
+the corresponding raw callback name from:
+
+- `js/packages/truapi-host-wasm/src/runtime.ts` (`WasmRawCallbacks`, `createUnavailableCallbacks`);
+- `js/packages/truapi-host-wasm/src/worker-protocol.ts` (`CallbackName` / `SubscriptionName`);
+- `js/packages/truapi-host-wasm/src/worker-runtime.ts` forwarding;
+- `js/packages/truapi-host-wasm/src/web/create-worker-host-runtime.ts` main-thread dispatch;
+- dotli's callback object.
+
+For genuine host primitives, request callbacks pass/return raw SCALE bytes (`Uint8Array`) or `boolean`;
+the typed->raw SCALE adapter is intentionally **not** in the JS package (`runtime.ts:3-11`), so a host
+currently supplies byte-oriented callbacks directly. Rust invokers today include `invoke_unit` (bytes in /
+void), `invoke_bool` (bytes in / bool), `invoke_local_storage_read` (key in / `Option<Vec<u8>>`), and the
+`chainConnect` bridge for bidirectional JSON-RPC. Add only the minimum invoker shape required by the new
+primitive.
+
+Per-primitive checklist:
+
+- [ ] Trait in `truapi-platform/src/lib.rs`; add to `Platform` supertrait + blanket impl (lib.rs:122-130).
+- [ ] `WasmPlatform` impl (wasm.rs:95-254) + `JsBridge` field (wasm.rs:36-51) + `from_js` key (wasm.rs:54-68) + invoker.
+- [ ] `HostCallbacks` method (native.rs:100-132) + `CallbackPlatform` impl (native.rs:263-374); run `make uniffi`; re-implement on iOS/Android.
+- [ ] `WasmRawCallbacks` field (runtime.ts:63-98) + `createUnavailableCallbacks` stub (runtime.ts:106-138).
+- [ ] `CallbackName`/`SubscriptionName` (worker-protocol.ts:12-44) + `worker-runtime.ts` forward + main `handleCallbackRequest` (create-worker-host-runtime.ts:27-73).
+- [ ] Update both test stubs (runtime.rs:600-679, core.rs:151-229) so they still satisfy `Platform`.
+- [ ] Wire the `truapi::api::*` method to the new trait in `runtime.rs` (the [B](<B - core-impls.md>) side).
+
+## Implementing a core-owned wire method
+
+For account/signing/statement-store methods, the work is different from adding a host primitive:
+
+1. Add core state or helpers under `truapi-server/src/host_logic/` (`sso`, `statement_store`,
+   `message_exchange`, `proofs`, `key_derivation`, etc.).
+2. Add fields to `PlatformRuntimeHost<P>` for the shared state/service handles, not JS callbacks.
+3. Override the relevant `truapi::api::*` trait method in `runtime.rs`, preserving versioned request/response
+   wrappers and domain error mapping.
+4. If the method needs host UI or storage, call a small platform capability from [A](<A - host-primitives.md>)
+   (`PairingPresenter`, `SessionStore`, resource allocation confirmation), then continue protocol logic
+   in Rust.
+5. Remove the matching transitional `WasmRawCallbacks`/worker/dotli callback route.
+
+This is the path for `request_login`, `get_account`, signing, create transaction, alias,
+statement-store submit/subscribe/proof, entropy, and core-owned logout.
+
+## Adding runtime configuration
+
+Static values that are known when the host runtime is constructed are not platform traits. Thread them as
+constructor/config state instead:
+
+- `truapi-server/src/runtime.rs`: add a config field to `PlatformRuntimeHost<P>` and pass it through
+  `new` / `TrUApiCore::from_platform`.
+- `truapi-server/src/wasm.rs`: accept the config from JS when constructing the WASM core; validate byte
+  lengths and URL invariants at the boundary.
+- `truapi-server/src/native.rs`: expose equivalent UniFFI constructor/config fields.
+- `js/packages/truapi-host-wasm`: add the config to in-process, Node, and worker runtime creation options;
+  forward it in the worker init frame.
+- dotli: create one runtime per top-level product iframe/container. Pass `calling_product_id`
+  (`labelToProductIdentifier(label)` parity), `product_label`, `pairing_metadata_url` computed from the
+  current origin using the existing host-papp rule, the People-chain genesis hash, and the production/dev
+  deeplink scheme. Nested dApps are not separate Rust runtime instances for v1; if the host keeps nested
+  message forwarding, route those messages through the same core/product context. Track the usefulness and
+  any future independent nested-product model in [I](<I - nested-dapps.md>).
+
+Current-parity host-container surfaces ([A3](<A - host-primitives.md>)) use the five-layer primitive
+recipe above rather than runtime config:
+
+- SessionStore is a host-global secret persistence capability for opaque core-owned bytes encoding the
+  full `SessionInfo`; keep it separate from product-scoped `Storage` and do not expose typed session
+  fields across JS/UniFFI. It includes a current-then-changes coarse notification stream for same-runtime
+  writes/clears and cross-tab/process logout/re-pair propagation; each tick causes the core to call
+  `read()`, with core-side dedupe for equivalent blobs/session ids. Wire it like other host-to-core
+  streams rather than as a one-shot callback.
+- Notifications need a response id plus cancel support, so the existing `Notifications` trait shape must
+  change.
+- Theme needs a subscription callback/channel.
+- Preimage submit/lookup should stay host-side but be routed through Rust once the JS container is gone.
+- Resource allocation needs a dedicated host confirmation UI callback before the core sends the
+  SSO session request. Keep it separate from `Permissions::remote_permission`; it is approval UI around a
+  retry-capable SSO operation, not a cached permission decision.
+
+## Implementing a wire method: the override template
+
+Wire methods are implemented on `PlatformRuntimeHost<P>` (`runtime.rs`). Copy this shape (from
+`LocalStorage::read`, `runtime.rs:269-281`): destructure the versioned request, call the platform via the
+UFCS alias, wrap the response `V1`, map the error.
+
+```rust
+async fn read(
+    &self, _cx: &CallContext, request: HostLocalStorageReadRequest,
+) -> Result<HostLocalStorageReadResponse, CallError<HostLocalStorageReadError>> {
+    let HostLocalStorageReadRequest::V1(v01::HostLocalStorageReadRequest { key }) = request;
+    PlatformStorage::read(self.platform.as_ref(), key)
+        .await
+        .map(|value| HostLocalStorageReadResponse::V1(v01::HostLocalStorageReadResponse { value }))
+        .map_err(|err| CallError::Domain(HostLocalStorageReadError::V1(err)))
+}
+```
+
+Rules:
+
+- Platform traits are imported under aliases (`Storage as PlatformStorage`, etc., runtime.rs:68-71) to
+  avoid clashing with `truapi::api::*`.
+- Domain errors map to `CallError::Domain(Err::V1(inner))`; infra failures to
+  `CallError::HostFailure { reason }`; not-yet-wired to `CallError::unavailable()`.
+- For multi-step host logic, follow `PermissionsService` (a struct over `&` platform borrows,
+  permissions.rs:36) and the `request_remote_permission` override (runtime.rs:241-258).
+- New in-core state goes on `PlatformRuntimeHost<P>` (runtime.rs:75-84) + `new` (runtime.rs:90-100); new
+  host-logic modules under `host_logic/` declared in `host_logic/mod.rs`.
+- The `Foo::V1(inner)` destructure is irrefutable while a domain stays single-version. Multi-version
+  envelopes (post-merge `versioned_type!`) use `Versioned`/`IntoLatest`/`FromLatest`; out of scope for
+  the v0.1 tickets here.
diff --git a/docs/design/host-contract-and-core-impl/H - sso-pairing-protocol.md b/docs/design/host-contract-and-core-impl/H - sso-pairing-protocol.md
new file mode 100644
index 00000000..e65808a9
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/H - sso-pairing-protocol.md	
@@ -0,0 +1,217 @@
+# H - SSO pairing & message-exchange protocol
+
+> Part of the [host-contract & core-impl spec](<index.md>). Foundational: `request_login`, signing,
+> transaction construction, resource allocation, ring-VRF alias, and the product statement store all ride
+> this one mechanism. Read this before
+> [A](<A - host-primitives.md>) / [B](<B - core-impls.md>).
+>
+> Source of truth for the protocol below is current dotli's pinned `@novasamatech/host-papp@0.7.9` /
+> `@novasamatech/statement-store@0.8.2` web code plus the iOS wallet
+> (`~/github/polkadot-app-ios-v2`), the peer that implements the other side in readable Swift. We define
+> the **web/core** side.
+
+## Why (before the what)
+
+A sandboxed web product must act for a user whose signing keys live in a phone wallet, with **no shared
+backend** between them. The solution: both sides rendezvous on the **People-chain statement store** (a
+gossip pallet that distributes signed SCALE `Statement`s P2P) and talk over it with an
+application-layer-encrypted channel. A QR code bootstraps the rendezvous.
+
+```
+   web product  <--- encrypted SCALE statements on derived topics --->  phone wallet
+                     (People-chain statement-store pallet, P2P gossip)
+                            ^ no relay server, no shared backend
+```
+
+Three consequences shape the core API:
+
+1. **There is exactly one transport.** Pairing, transaction/raw signing, ring-VRF alias, resource
+   allocation, and the product-facing statement store are all carried as statements on the same
+   People-chain connection. The core reaches it through the **existing `ChainProvider`** platform trait
+   (connect to People-chain, then `statement_submit` / `statement_subscribeStatement` JSON-RPC). No new
+   transport primitive is needed.
+2. **The wallet keeps every signing key and only ever signs on request.** During the handshake it sends
+   *public* keys + account ids, never a secret (confirmed in the iOS source). Transaction signing and
+   ring-VRF run as request/response messages over the channel: the core asks, the wallet signs, the
+   wallet replies. So signing is **not** a host primitive that "reaches the wallet"; it is core protocol.
+3. **It is a cryptographic protocol, so the core owns it.** Challenge keys, ECDH, channel encryption,
+   topic derivation, and proof verification are protocol logic. The host's only job is to **render the
+   QR** ([A1](<A - host-primitives.md>)) and provide the chain connection (`ChainProvider`). The core
+   cannot be lied to about identity because it verifies the statements itself.
+
+Net effect on the SSO host contract: the only new protocol primitive is the QR presenter. `host-papp` is
+fully replaceable by core message-exchange logic, which resolves [E2](<E - open-questions.md>). Separate
+host-container parity surfaces such as notifications, theme, and preimage are covered in
+[A3](<A - host-primitives.md>).
+
+## What the core holds vs. what the wallet holds
+
+| Generated/held by the **core** (web side) | Generated/held by the **wallet** |
+|---|---|
+| session **sr25519 statement-store keypair** (signs all the core's outgoing statements; its secret is the `ssSecret`) | root + identity **sr25519 keypairs** (sign transactions; never leave the device) |
+| **P-256 (secp256r1) ECDH keypair** (channel encryption; `encryptionPublicKey` = X9.63 uncompressed, 65 bytes) | persistent **P-256 chat keypair** (`sharedSecretDerivationKey`, the public half is sent in the handshake) |
+| derived session ids + channel ids; the peer's public keys + account ids | the ring (bandersnatch) secret (ring-VRF alias derivation) |
+
+The wallet grants the core's statement-store account **allowance** to submit (a `resourceAllocation`
+message), which is why the core can submit product statement proofs signed by its own session key.
+
+## The protocol
+
+### Statement wire format (People-chain statement store)
+
+A `Statement` is a SCALE struct of indexed `StatementField`s, sorted by index before signing:
+`proof`(0) = `Sr25519 { signature:[u8;64], signer:[u8;32] }`, `expiry`(2):u64, `channel`(3):[u8;32],
+`topic1..4`(4..7):[u8;32], `scaleEncodedPayload`(8):bytes. The `proof` is an sr25519 signature over the
+SCALE of every field except the proof; `signer` is the submitter's 32-byte sr25519 public key. `expiry`
+doubles as priority (`0xFFFF_FFFF_0000_0000 | (unixSecs - EPOCH)`, monotonic) so a newer statement
+replaces an older one on the same topic+channel. RPC: `statement_submit(hex)` /
+`statement_subscribeStatement({topic_filter:{matchAll:[topic]}})` / `statement_unsubscribeStatement`.
+
+### 1. Handshake bootstrap (the QR)
+
+The core mints a session statement-store sr25519 keypair and a P-256 ECDH keypair, reads the static
+pairing runtime config ([A2](<A - host-primitives.md>)), then builds the deeplink the QR encodes:
+
+```
+HostHandshakeData::V1 {            # SCALE enum, index 0
+    statement_store_public_key: [u8;32]   # core session sr25519 account id
+    encryption_public_key:      [u8;65]   # core P-256 pubkey, X9.63 uncompressed
+    metadata:                   String    # runtime-configured https URL -> {name, icon} fetched off-band by the wallet
+}
+deeplink = runtime_config.scheme + "pair?handshake=" + hex(SCALE(HostHandshakeData))
+```
+
+The bootstrap topic is keyed BLAKE2b-256 with key = the core's statement-store pubkey. Current dotli web
+subscribes with `matchAll: [topic]` and does not filter the handshake response by a separate bootstrap
+channel:
+
+```
+topic = blake2b_256_keyed(key = ss_pubkey, msg = enc_pubkey ++ b"topic")
+```
+
+The core renders the QR via [A1 `PairingPresenter`](<A - host-primitives.md>) and subscribes to `topic`.
+
+### 2. Wallet answer
+
+The wallet scans, decodes `HostHandshakeData`, fetches `metadata` for display, and on user approval
+submits one statement to `(topic, channel)`, signed by its sr25519 key:
+
+```
+AppHandshakeData::V1 {             # SCALE enum, index 0
+    encrypted_message: bytes       # AES-GCM(ephemeral ECDH) of the sensitive answer (below)
+    public_key:        [u8;65]     # the wallet's EPHEMERAL P-256 pubkey (X9.63)
+}
+# encrypted_message decrypts to:
+SSOHandshakeAnswerSensitiveData {  # SCALE, all fixed-size raw
+    shared_secret_derivation_key: [u8;65]   # wallet's PERSISTENT P-256 pubkey (for the steady-state secret)
+    root_user_account_id:         [u8;32]   # wallet root sr25519 pubkey (product-account derivation root)
+    identity_account_id:          [u8;32]   # wallet identity sr25519 pubkey
+}
+```
+
+The core receives the statement (verifying its sr25519 proof), runs ECDH(`core_enc_priv`,
+`ephemeral_pubkey`) -> HKDF-SHA256 -> AES-GCM to decrypt, and now knows the wallet's persistent ECDH key
++ both account ids. The current web construction is in [D4](<D - crypto-foundation.md>): ECDH uses the
+X coordinate from P-256 `getSharedSecret`, HKDF-SHA256 uses empty `salt`/`info` and `len=32`, and
+AES-GCM prepends a 12-byte nonce to ciphertext+tag.
+
+### 3. Session establishment
+
+A steady-state shared secret is derived by ECDH between the persistent P-256 keys
+(`core_enc_priv` x `shared_secret_derivation_key`). From it, directional 32-byte session ids and the
+channel ids:
+
+```
+session_id.own  = H(key = shared_secret, msg = b"session" ++ own_acct ++ peer_acct ++ pin(own) ++ pin(peer))
+session_id.peer = H(key = shared_secret, msg = b"session" ++ peer_acct ++ own_acct ++ pin(peer) ++ pin(own))
+request_channel  = H(key = session_id.own,  msg = b"request")    # core -> wallet
+response_channel = H(key = session_id.own,  msg = b"response")   # wallet ACK / response to core request
+peer_request_ch  = H(key = session_id.peer, msg = b"request")    # wallet -> core (filter)
+```
+
+`H` is keyed BLAKE2b-256 (`blake2b(message, { dkLen: 32, key })`). A missing pin contributes the
+separator string `"/"` in current dotli's `createSessionId`.
+
+The core subscribes `topic1 == session_id.peer` (filtered to the wallet's account id as the only valid
+signer) for inbound, and submits with `topic1 == session_id.own`.
+
+### 4. Encrypted message framing
+
+Steady-state messages are AES-GCM encrypted under the session key and wrapped:
+
+```
+inner   = SCALE(StatementData)                 # enum: 0=request{request_id:String, messages:[Msg]}, 1=response{request_id:String, code:u8}
+sealed  = AES_GCM_seal(inner)                  # = nonce(12) ++ ciphertext ++ tag(16)
+payload = SCALE(sealed as bytes)               # length-prefixed -> the statement's scaleEncodedPayload(8)
+```
+
+The application messages are `PolkadotHostRemoteMessage { message_id: String, content: V1(ContentV1) }`
+where `ContentV1` is a SCALE-tagged enum: `disconnected`(0), `signingRequest`(1)/`signingResponse`(2),
+`aliasRequest`(3)/`aliasResponse`(4), `resourceAllocationRequest`(5)/`response`(6),
+`createTransactionRequest`(7)/`response`(8). Responses carry `request_message_id` + `HostResult<T>`
+(`success(T)`=0 / `failure(String)`=1).
+
+### 5. Operations after pairing (mapped to wire methods)
+
+| Wire method | Message | Notes |
+|---|---|---|
+| `sign_payload`(116) | `signingRequest(transaction(SignTransactionPayload))` -> `Signature { raw_signature, signed_transaction? }` | wallet resolves `/product/<dotNs>/<idx>`, signs sr25519 |
+| `sign_raw`(114) | `signingRequest(rawPayload(SigningRawPayload))` | `.bytes` or `.payload` (string wrapped `<Bytes>…</Bytes>`) |
+| `sign_payload_with_legacy_account` / `sign_raw_with_legacy_account` | same signing messages with product-derived account tuple | current dotli validates the legacy signer/address against `(calling_product_id, 0)` before forwarding |
+| `create_transaction`(30) | `createTransactionRequest` | wallet assembles + signs the extrinsic |
+| `create_transaction_with_legacy_account` | same create-transaction message with product-derived signer tuple | current dotli implements this and should remain parity |
+| `get_account_alias`(24) | `aliasRequest { product_account_id, calling_product_id }` -> `ContextualAlias { context:[u8;32], alias }` | bandersnatch `deriveAlias`, auto-handled (no prompt) |
+| `create_account_proof`(26) | (full ring-VRF proof) | current dotli has no full-proof message; the SSO channel exposes `deriveAlias` only today |
+| `create_proof`(60) / `_authorized`(132) | none (in-core) | core signs the product `Statement` with its session sr25519 key (`ssSecret`); signer = the allowance-granted session account |
+| `subscribe`(56) / `submit`(62) | none (in-core) | product statements over the same People-chain store the core is already on |
+| `request_resource_allocation` | `resourceAllocationRequest` -> response | current dotli prompts, sends `callingProductId`, maps allowance dialects, and strips secret material from allocated results |
+| public logout/disconnect | `disconnected` | best-effort send SSO peer message over the statement-store session channel, then tear down local session regardless of send result; peer-originated `disconnected` clears memory + `SessionStore`; any pending request/response waiters fail instead of waiting for a response |
+
+### Full sequence
+
+```
+ Web product / Core                 People-chain statement store              Wallet
+   request_login()
+   mint session sr25519 kp + P256 kp
+   build HostHandshakeData; A1.present(QR) ------------------ scan -------------->| decode; fetch metadata
+   subscribe(topic = H(ss_pub, enc_pub++"topic"))                                 | approve
+                            <--- submit(topic, channel, AppHandshakeData{enc, ephPub}) ---|
+   verify proof; ECDH(enc_priv, ephPub)->decrypt
+     -> wallet persistent P256 pub, root_acct, identity_acct
+   shared_secret = ECDH(enc_priv, persistent_pub)
+   session_id.own/peer = H(shared_secret, "session"++..)
+   SessionState{ public_key=root_acct, ss_secret, ... }; persist; broadcast Connected
+   request_login -> Success
+ ---- steady state (signing) ----
+   sign_payload: submit(topic1=own, request_channel, enc(signingRequest)) ------>| sign /product/..
+                            <--- submit(topic1=wallet_own, response_channel, enc(signingResponse)) ---|
+   disconnect: best-effort submit(enc(disconnected)); stop subscriptions; fail pending waits; clear store
+```
+
+## What `SessionState` must hold (-> [C](<C - session-contract.md>))
+
+session sr25519 statement keypair (pub + secret = `ssSecret`); P-256 ECDH keypair; the wallet's
+`root_user_account_id` (= `public_key`, the product-account derivation root) and `identity_account_id`;
+the persistent peer P-256 pubkey; derived `session_id.own/peer`. Usernames are **not** in the handshake;
+they come from a separate on-chain People-chain identity lookup keyed by `root_user_account_id`.
+
+## Crypto inventory (-> [D](<D - crypto-foundation.md>))
+
+sr25519 (schnorrkel): statement proof sign + peer-proof verify, product-account HDKD. **P-256
+(secp256r1) ECDH + HKDF-SHA256 + AES-GCM**: the channel. **Keyed BLAKE2b-256**: handshake topic,
+session ids, and request/response channels. `useragent-kit` is useful implementation precedent for
+similar Rust migrations, not a protocol authority for this byte contract. All must build for `wasm32`.
+
+## Vector-gated items
+
+These are no longer design questions for current dotli parity, but they still need golden vectors before
+implementation to catch byte-level mistakes:
+
+1. QR handshake SCALE/deeplink bytes, including optional host metadata fields.
+2. P-256 key generation from entropy-derived seed, ECDH X-coordinate extraction, HKDF-SHA256
+   empty-salt/info AES-GCM key derivation, and nonce+ciphertext framing.
+3. Keyed BLAKE2b-256 handshake topic, session id, and request/response channel derivation.
+4. Statement proof signing bytes: unsigned statement SCALE with compact length prefix stripped, 64-byte
+   expanded `ssSecret`, and `sr25519_sign(publicKey, secret, message)`.
+5. `create_account_proof`(26) remains deferred: current `RemoteMessageCodec` has alias request/response
+   messages only, not a full ring-VRF proof message.
diff --git a/docs/design/host-contract-and-core-impl/I - nested-dapps.md b/docs/design/host-contract-and-core-impl/I - nested-dapps.md
new file mode 100644
index 00000000..011cbc0f
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/I - nested-dapps.md	
@@ -0,0 +1,39 @@
+# I - Nested dApps note
+
+> Part of the [host-contract & core-impl spec](<index.md>). This is a non-blocking design note, not a v1
+> parity gate.
+
+Current dotli has a nested bridge detector in `~/github/dotli/packages/ui/src/container.ts`
+(`setupNestedBridgeDetector`). When a child iframe posts host-container bytes to `window.top`, dotli
+creates another JS `Container` for that source window.
+
+Observed current behavior:
+
+- The nested bridge gets a synthetic debug/container id like `<label>:nested-<n>`.
+- Handler wiring still receives the parent `label`, so account derivation, signing, aliases, entropy,
+  resource allocation, and permission prompts all use the parent product identity.
+- Local storage is the exception: nested bridges get a separate prefix,
+  `dotli:<label>:nested-<n>:`.
+
+## V1 Rust Migration Decision
+
+Nested dApps should use the shared Rust core. Do not create separate nested Rust runtimes, sessions,
+product identities, or storage namespaces as part of the `@novasamatech` removal milestone.
+
+If dotli keeps nested message forwarding during the migration, route nested messages into the same
+top-level product core/provider context. This preserves the important security property that nested
+content cannot silently become a different product identity, and avoids treating current JS storage-prefix
+behavior as a protocol contract.
+
+## Why Track It Separately
+
+The nested bridge may still be useful later:
+
+- product marketplaces embedding other products;
+- widgets that expect `window.top` host API access;
+- migration compatibility for existing products that already embed dApps;
+- future per-embedded-product permission and storage isolation.
+
+Those are broader product/runtime-policy questions, not prerequisites for current dotli feature parity.
+A future design can define an explicit nested-product identity model, including storage ownership,
+permission prompts, origin checks, and whether nested products get their own wallet-derived account path.
diff --git a/docs/design/host-contract-and-core-impl/J - implementation-plan.md b/docs/design/host-contract-and-core-impl/J - implementation-plan.md
new file mode 100644
index 00000000..e92d01c3
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/J - implementation-plan.md	
@@ -0,0 +1,84 @@
+# J - Implementation plan
+
+> Part of the [host-contract & core-impl spec](<index.md>). This is the concrete build order for turning
+> PR 104's shared-core runtime substrate into a dotli-compatible Rust core with no `@novasamatech`
+> runtime dependencies.
+
+## Dependency graph
+
+```
+PR 104 runtime substrate
+  |
+  v
+RuntimeConfig + host primitive deltas
+  |
+  v
+Crypto/vector gate -----> product-account derivation
+  |                              |
+  v                              v
+Statement-store client ----> account reads
+  |
+  v
+SSO pairing + SessionStore restore/logout
+  |
+  v
+Session-channel request/response ops
+  |
+  +--> signing / create_transaction / alias / resource allocation
+  +--> statement-store proof / submit / subscribe
+  +--> entropy
+  |
+  v
+dotli bridge deletion + Nova dependency removal
+```
+
+## Work packages
+
+| WP | Scope | Deliverables | Verification |
+|---|---|---|---|
+| 0 | Lock the transition boundary from PR 104 | Mark `setActiveSession` / `clearActiveSession` and raw account/signing/statement callbacks as transitional; no new feature should depend on them | `rg "setActiveSession|clearActiveSession"` shows only compatibility/removal notes until WP 3 removes the APIs |
+| 1 | Runtime construction config | Add `RuntimeConfig` to `PlatformRuntimeHost`, WASM constructors, UniFFI constructors, and JS worker init; dotli passes product id/label, metadata URL, People genesis, deeplink scheme | Unit tests for config validation; worker protocol test proves config reaches WASM |
+| 2 | Host primitive deltas | Add `PairingPresenter`, `SessionStore`, resource allocation confirmation, theme subscription, preimage callbacks, notification id/cancel shape | `truapi-platform` bounds tests; WASM/native callback tests; generated TS/Kotlin/Swift bindings updated; same capability surface exists for WASM and UniFFI |
+| 3 | Crypto/vector gate | Add narrow WASM-safe crypto module/crate; capture JS/iOS vectors for HDKD, statement proof, QR SCALE, P-256/HKDF/AES-GCM, keyed BLAKE2b topics/session ids | Native + `wasm32-unknown-unknown` vector tests pass before pairing I/O starts |
+| 4 | Statement-store client | Implement People-chain `statement_submit`, `statement_subscribeStatement`, query/dump/live subscription plumbing over `ChainProvider` | Mock JSON-RPC tests for submit, historical dump, live stream, unsubscribe, topic limits |
+| 5 | SSO pairing, restore, logout | Implement `request_login`, QR presentation, handshake validation/decrypt, `SessionInfo` persistence through `SessionStore`, current-then-change restore, public logout/disconnect | Pairing integration test with captured fixtures or wallet test peer; corrupted blob clears; cross-runtime store tick updates; logout clears store and pending waiters |
+| 6 | Account + identity methods | Implement `get_account`, `get_legacy_accounts`, `get_user_id`, connection status from real restored session | Dotli parity vectors for product account derivation; permission-gated user id tests |
+| 7 | Session-channel operations | Implement sign/raw sign, legacy signing, create transaction, alias, resource allocation; preserve current dotli error mapping and 180s request timeout semantics | Mock SSO peer tests for success/failure/timeout/disconnect; signer mismatch and permission denial tests |
+| 8 | Product statement-store methods | Implement `create_proof`, `create_proof_authorized`, `subscribe`, `submit` using the same client/session key | Proof vectors match `createSr25519Prover`; subscription paging preserves `is_complete` semantics |
+| 9 | Tier 3.5 dotli parity | Implement entropy, notification id/cancel, theme subscription, preimage host callbacks | Dotli handler parity tests for each currently implemented handler |
+| 10 | dotli integration + dependency removal | Replace `packages/ui/src/container.ts` bridge with Rust worker bridge; remove Nova packages, mappings, debug hooks, auth/session adapter, raw callback routes | `rg "@novasamatech"` has no runtime value/type imports in dotli packages; dotli login/sign/statement/preimage/manual flows pass |
+
+## Review slicing
+
+Keep each PR independently useful and reviewable:
+
+1. **Config + primitive surfaces:** WPs 1-2, no SSO crypto yet.
+2. **Crypto vectors:** WP 3 only; no network I/O.
+3. **Statement client + pairing:** WPs 4-5; core can pair/restore/logout but not yet sign.
+4. **Account/signing/message exchange:** WPs 6-7.
+5. **Statement-store + Tier 3.5 parity:** WPs 8-9.
+6. **dotli cutover:** WP 10, deleting JS/Nova code after the Rust path is proven.
+
+## Acceptance gates for the milestone
+
+- `make check`.
+- `cargo test --workspace --features ws-bridge`.
+- `cargo check -p truapi-server --target wasm32-unknown-unknown`.
+- `./scripts/codegen.sh && git diff --exit-code` for generated dispatcher/client/callback artifacts.
+- Native and wasm crypto vector tests pass.
+- dotli web can pair through SSO, restore across reload, logout, sign payload/raw, create transaction,
+  derive alias/account, submit/subscribe statements, create statement proofs, request resource allocation,
+  derive entropy, use preimage, receive/cancel notifications, and receive theme updates.
+- `truapi-server` has no dotli package imports, browser-global assumptions, host storage-key constants, or
+  UI component dependencies; dotli-specific behavior is confined to the dotli adapter/runtime config.
+- WASM and UniFFI expose the same core lifecycle: construct with `RuntimeConfig`, provide the same host
+  primitive set, restore through `SessionStore`, pair through `PairingPresenter`, and logout through the
+  core API.
+- dotli no longer has runtime dependencies on `@novasamatech/host-api`, `host-container`, `host-papp`,
+  `statement-store`, `sdk-statement`, or `storage-adapter`.
+
+## Deferred by design
+
+- Payment, Chat, CoinPayment, and full `create_account_proof` remain unavailable for current dotli parity.
+- Independent nested-product runtimes/sessions remain deferred; nested traffic, if kept, uses the shared
+  top-level Rust core for v1.
diff --git a/docs/design/host-contract-and-core-impl/index.md b/docs/design/host-contract-and-core-impl/index.md
new file mode 100644
index 00000000..c370817d
--- /dev/null
+++ b/docs/design/host-contract-and-core-impl/index.md
@@ -0,0 +1,204 @@
+# TrUAPI host-contract additions & core-implementation spec
+
+**Status:** draft for review · **Goal:** run dotli on the Rust core with current dotli feature parity and
+no `@novasamatech` dependency, by defining the host primitives, core implementations, and package changes
+that close the gap. "Feature parity" here means the handlers implemented in the current dotli checkout
+(`~/github/dotli`, observed at `85c9733`); handlers dotli currently leaves unimplemented stay out of scope
+until other hosts need them.
+
+This is the high-level overview. Each detail doc is written so a senior Rust engineer can pick it up as
+a ticket: exact signatures, file anchors, an implementation sketch, and acceptance criteria.
+
+## Relationship to PR 104
+
+PR 104 lands the shared-core **runtime substrate**: generated product clients, Rust dispatcher,
+`truapi-platform` traits, WASM/UniFFI/native bridges, and the first dotli architecture notes. It
+intentionally leaves account management, signing, statement-store, and preimage business logic
+unsupported or bridged through transitional byte callbacks.
+
+This spec is the follow-up implementation plan that turns that runtime substrate into the final shared
+Rust core used by dotli:
+
+- remove account-only session injection (`setActiveSession` / `clearActiveSession`) as a real lifecycle
+  path;
+- remove JS-owned account/signing/statement-store/raw preimage callback shims from the final dotli bridge;
+- add the missing host primitives the core genuinely cannot perform itself (`PairingPresenter`,
+  `SessionStore`, theme, notification id/cancel, preimage host content backend, allocation confirmation);
+- implement current-dotli parity inside `truapi-server` so `@novasamatech/host-container`,
+  `host-papp`, `statement-store`, `sdk-statement`, `host-api`, and `storage-adapter` can all disappear.
+
+The older PR docs (`docs/design/dotli-rust-core-proposal.md` and
+`docs/design/dotli-architecture-change.md`) describe the broad shared-core topology. Where they still
+show `(D1*)` account/signing/statement callbacks or session handoff as transitional steps, this directory
+is the more specific successor: those callbacks are removed once the core implementations in [B](<B - core-impls.md>)
+land.
+
+| Doc | Covers |
+|---|---|
+| [H - SSO pairing protocol](<H - sso-pairing-protocol.md>) | **Foundational.** The one transport (People-chain statement store) that pairing + signing + transaction construction + resource allocation + ring-VRF + statements all ride |
+| [A - Host primitives](<A - host-primitives.md>) | The new SSO callback (QR presenter), runtime product config, and host-container parity surfaces |
+| [B - Core implementations](<B - core-impls.md>) | The stubbed wire methods, per-method ticket + diagrams |
+| [C - Session contract](<C - session-contract.md>) | `SessionState` extension, persistence/restore, the JS package gap |
+| [D - Crypto foundation](<D - crypto-foundation.md>) | wasm32 deps, the `get_account` derivation, the proof scheme, golden vectors |
+| [E - Decision log / deferred questions](<E - open-questions.md>) | Resolved audit decisions plus non-parity deferred items |
+| [F - `@novasamatech` removal](<F - novasamatech-removal.md>) | dotli-side cleanup, exact file:line list |
+| [G - Annex](<G - annex.md>) | Shared mechanics: trait conventions, the 5-layer wiring recipe, the override template |
+| [I - Nested dApps note](<I - nested-dapps.md>) | Current nested bridge behavior, usefulness, and why it is non-blocking for v1 |
+| [J - Implementation plan](<J - implementation-plan.md>) | Ordered work packages, review slicing, and acceptance gates |
+
+---
+
+## Architecture
+
+```
+  Product (sandboxed page / iframe / worker)
+     |  SCALE wire frames  (versioned v0.1 / v0.2)
+     v
+  +-------------------------------------------------------------+
+  | truapi-server  (the core; ships as WASM and via UniFFI)     |
+  |   generated dispatcher  ->  api::{Account,Signing,            |   <- protocol authority:
+  |                               StatementStore,Preimage,...}    |      pairing handshake + verify,
+  |   host_logic/  session . sso-pairing . message-exchange .     |      channel encryption, proof
+  |                proofs . key-derivation                        |      signing, session state
+  +----------------------+--------------------------------------+
+       platform traits   |  (truapi-platform, RPITIT async)
+                         v
+  +-------------------------------------------------------------+
+  | host shell  (dotli: web worker / electron / iOS / Android)  |
+  |   Storage Navigation Notifications Permissions Features      |   <- OS/UI primitives
+  |   ChainProvider Theme Preimage SessionStore                   |
+  |   PairingPresenter (QR UI)                                    |
+  |   ResourceAllocationConfirm                                   |
+  |   RuntimeConfig { calling_product_id, pairing inputs }        |
+  +----------------------+--------------------------------------+
+                         |  ChainProvider connection
+                         v
+            People-chain statement store  (statement_submit / _subscribe)
+                         ^  encrypted SCALE statements on derived topics (P2P gossip)
+                         v
+                 SSO peer / phone wallet  (holds root signing key + ring secret; signs on request)
+```
+
+The core is the protocol authority; the host is reduced to OS primitives. The load-bearing
+consequences:
+
+1. **One transport for the SSO session protocol.** Pairing, transaction/raw signing, transaction
+   construction, resource allocation, ring-VRF alias, and the product statement store are all SCALE
+   statements on the People-chain statement store, reached through the existing `ChainProvider` trait. The
+   core runs the SSO + message-exchange protocol itself ([H](<H - sso-pairing-protocol.md>)); there is no
+   relay server and no separate wallet socket.
+2. **Signing authority stays in the wallet, but signing is core protocol, not a host primitive.** The
+   wallet keeps the root key and signs on request; the core sends `signingRequest`/`aliasRequest`
+   messages over the encrypted SSO session channel and the wallet replies through the same protocol. This
+   resolves the old "who holds the wallet channel" question: there is no separate wallet channel; the core
+   owns the SSO protocol over the statement store ([E2](<E - open-questions.md>)).
+3. **Pairing is core-verified.** The core mints the session keys, builds the QR, verifies the wallet's
+   signed handshake statement, and derives the session. The host only renders the QR
+   ([A1](<A - host-primitives.md>)); it cannot assert a false identity.
+4. **The core owns `SessionState`, including the session `ssSecret`.** The `ssSecret` is the core's own
+   session statement-store key (the wallet never sends a secret); the core signs statement proofs and
+   derives product-account public keys in-core, no host round-trip.
+5. **All wire types already exist** (`truapi/src/v01` + `versioned`). The gap is implementations, never
+   type definitions.
+
+6. **Nested dApps share the Rust core in v1.** Do not introduce separate nested runtime/session/product
+   identities as part of this migration. The current dotli nested bridge behavior is documented as a
+   future-design note in [I](<I - nested-dapps.md>).
+
+The only new SSO protocol primitive is the QR presenter ([A1](<A - host-primitives.md>)). Separately,
+removing dotli's current `host-container` bridge and restoring core-owned sessions requires platform
+surfaces for notifications, theme, preimage, host-global session persistence, resource-allocation
+confirmation, and product runtime config ([A3](<A - host-primitives.md>)). The pairing/signing crypto
+internals are read from current dotli's pinned `@novasamatech` package sources plus the iOS peer, then
+vector-gated; see [H](<H - sso-pairing-protocol.md>) and [D](<D - crypto-foundation.md>).
+
+---
+
+## Host portability contract
+
+dotli is the first migration target, not the architecture boundary. The reusable boundary is:
+
+- `truapi-server` owns protocol and product-visible behavior: SSO pairing, channel encryption,
+  request/response routing, account derivation, statement-store proof/submit/subscribe, error mapping,
+  timeout behavior, session restore/logout, and wire method dispatch.
+- `truapi-platform` plus `RuntimeConfig` owns host-specific capabilities: storage, chain connection,
+  navigation, notifications, theme, preimage backend, resource allocation confirmation UI, QR/deeplink
+  presentation, and opaque session persistence.
+- The same core APIs and crypto vectors must pass on WASM hosts (dotli web/Electron worker) and UniFFI
+  hosts (iOS/Android). Host bindings may differ, but they cannot fork SSO, signing, statement-store,
+  derivation, or session semantics.
+- dotli-specific details such as `localStorage` route names, public metadata URL rewriting, modal
+  components, and product-label lookup live in the dotli adapter/runtime config. They are not allowed to
+  leak into `truapi-server`.
+
+Adding another host should mean implementing the platform traits, providing `RuntimeConfig`, and wiring the
+embedding transport. It must not mean reimplementing pairing, wallet signing proxy messages, statement
+proof signing, or session persistence semantics outside Rust.
+
+---
+
+## The gap at a glance
+
+| Domain | Stubbed wire methods (`CallError::unavailable()`) | Live today |
+|---|---|---|
+| `Account` | `get_account`(22), `get_account_alias`(24), `create_account_proof`(26), `get_legacy_accounts`(28), `get_user_id`(110), `request_login`(112) | `connection_status_subscribe`(18) |
+| `Signing` | `create_transaction`(30), `create_transaction_with_legacy_account`(32), `sign_payload`(116), `sign_payload_with_legacy_account`(36), `sign_raw`(114), `sign_raw_with_legacy_account`(34) | none |
+| `StatementStore` | `subscribe`(56), `submit`(62), `create_proof`(60), `create_proof_authorized`(132) | none |
+| `ResourceAllocation` | `request`(130) | none |
+| `Entropy` | `derive`(108) | none |
+| `Theme` | `subscribe`(104) | none (`Subscription::empty()`) |
+| `Notifications` | `send_push_notification`(4), `cancel_push_notification`(134) | none (`unavailable`) |
+| `Preimage` | `lookup_subscribe`(64), `submit`(68) | none |
+| `Payment` | `balance_subscribe`(118), `top_up`(122), `request`(124), `status_subscribe`(126) | none, and dotli intentionally returns typed "not implemented" errors |
+
+`Signing`, `StatementStore`, `Preimage`, `ResourceAllocation`, `Entropy`, `Theme`, and `Payment` are empty
+`impl` blocks today (`runtime.rs:341-553`), so their methods fall through to trait defaults. `Notifications`
+spells out unavailable stubs because the trait has no defaults. `Account` is partially overridden
+(`connection_status_subscribe`, `request_login`); the rest use defaults.
+
+Current dotli backs its host bridge with `@novasamatech/host-api` + `host-container`, and auth/session
+flows with `host-papp`, `statement-store`, `sdk-statement`, and `storage-adapter`. The packages are **not
+part of the Rust repo**, but current `~/github/dotli/node_modules/.bun` contains the pinned JS sources.
+Pairing, message-exchange, proof, and derivation internals are therefore extract-from-source/vector tasks;
+see [D](<D - crypto-foundation.md>).
+
+---
+
+## Roadmap
+
+| Tier | Scope | Detail |
+|---|---|---|
+| 0 | Runtime construction plumbing (S): pass `RuntimeConfig` through Rust, WASM, UniFFI, and JS worker creation; no account-only session injection APIs. Zero crypto. | [A](<A - host-primitives.md>), [G](<G - annex.md>) |
+| 1 | Pure-core accounts (S–M): add the crypto baseline + golden vectors; `get_account` (in-core sr25519 derivation); `get_legacy_accounts`, `get_user_id` (read `SessionState`). | [B](<B - core-impls.md>), [D](<D - crypto-foundation.md>) |
+| 1.5 | Protocol crypto/vector gate (M): build the narrow WASM-safe crypto module/crate, leaning on existing Rust crypto crates and using `useragent-kit` only as implementation precedent for similar migrations; capture vectors for HDKD, statement proof, handshake/channel encryption, and topic/session derivation. No pairing I/O yet. | [D](<D - crypto-foundation.md>) |
+| 2 | Statement-store client + pairing (L): a minimal People-chain statement submit/subscribe client over `ChainProvider`, then the `request_login` SSO handshake ([H](<H - sso-pairing-protocol.md>)) + the `PairingPresenter` (A1); extend `SessionInfo`; persist/restore through `SessionStore`; expose public logout/disconnect. The keystone. | [H](<H - sso-pairing-protocol.md>), [A](<A - host-primitives.md>), [B](<B - core-impls.md>), [C](<C - session-contract.md>) |
+| 3 | Message-exchange ops + statement-store parity: `sign_payload`/`sign_raw`, `create_transaction`, and legacy signing/create-transaction over the SSO session channel; `create_proof`/`_authorized` (in-core, session `ssSecret`); product statement `subscribe`/`submit` (same client as Tier 2); `get_account_alias` (aliasRequest); resource allocation host confirmation + SSO request. | [H](<H - sso-pairing-protocol.md>), [B](<B - core-impls.md>) |
+| 3.5 | Non-Nova but implemented dotli host behavior needed once host-container is gone: preimage host callbacks, scheduled/cancellable notifications, theme subscription, and entropy derivation from `ssSecret`. | [B](<B - core-impls.md>), [A](<A - host-primitives.md>) |
+| 4 | Remaining TrUAPI surface not required for current dotli parity: full `create_account_proof`, Payment, Chat, CoinPayment, and any future move of preimage fully in-core. | [B](<B - core-impls.md>), [E](<E - open-questions.md>) |
+
+The protocol crypto/vector gate (Tier 1.5) keeps byte-level compatibility failures out of the pairing
+I/O path. The statement-store client (Tier 2) is the keystone: it unlocks pairing, signing-proxy,
+ring-VRF, and the product statement store, all over one People-chain connection. After Tier 3.5, the dotli
+bridge no longer depends on any Nova package: `host-api`, `host-container`, `host-papp`,
+`statement-store`, `sdk-statement`, and `storage-adapter` all drop. Full checklist in
+[F](<F - novasamatech-removal.md>); concrete work packages and review slices are in
+[J](<J - implementation-plan.md>).
+
+## Landing checklist
+
+Use this checklist to review whether the spec is complete enough to implement:
+
+- The architecture has one protocol owner: `truapi-server`; hosts provide only OS/UI/storage/chain
+  capabilities.
+- Current dotli parity is defined from `~/github/dotli`, not from the stale submodule.
+- Every currently implemented dotli handler is either assigned to an in-core implementation, assigned to a
+  true host primitive, or explicitly deferred because dotli does not implement it today.
+- PR 104 transitional surfaces are named and have a removal path: raw account/signing/statement callbacks
+  and account-only session injection cannot become permanent architecture.
+- SSO pairing, signing, transaction construction, alias, resource allocation, statement proofs, and
+  product statement-store all use the same People-chain statement-store protocol.
+- Session persistence is core-owned, single-session, host-global, and not host-papp compatible; cutover
+  requires one-time re-pair.
+- Crypto constants are sourced from current dotli package code and gated by native + wasm vectors before
+  pairing I/O lands.
+- The dotli removal checklist ends with no runtime dependency on any `@novasamatech/*` package.
diff --git a/gradle.properties b/gradle.properties
new file mode 100644
index 00000000..7ce28a0f
--- /dev/null
+++ b/gradle.properties
@@ -0,0 +1,5 @@
+android.useAndroidX=true
+kotlin.code.style=official
+org.gradle.jvmargs=-Xmx2g -Dfile.encoding=UTF-8
+org.gradle.parallel=true
+org.gradle.caching=true
diff --git a/ios/truapi-host/.gitignore b/ios/truapi-host/.gitignore
new file mode 100644
index 00000000..11cc1dd7
--- /dev/null
+++ b/ios/truapi-host/.gitignore
@@ -0,0 +1,4 @@
+.build/
+DerivedData/
+*.xcodeproj/xcuserdata/
+Package.resolved
diff --git a/ios/truapi-host/Package.swift b/ios/truapi-host/Package.swift
new file mode 100644
index 00000000..d96ddd88
--- /dev/null
+++ b/ios/truapi-host/Package.swift
@@ -0,0 +1,35 @@
+// swift-tools-version: 5.9
+//
+// TrUAPI iOS host package.
+//
+// The `truapi_serverFFI` target wraps the UniFFI-generated C header + module
+// map so the generated Swift bindings can `import truapi_serverFFI`. The
+// `TrUAPIHost` target contains both the generated Swift bindings and the
+// thin host shell defined in `TrUAPIHost.swift`.
+//
+// Consumers must link a prebuilt `libtruapi_server` static or dynamic
+// library when integrating into their app target. This package does not
+// vendor the binary itself; see README.md for build instructions.
+
+import PackageDescription
+
+let package = Package(
+    name: "TrUAPIHost",
+    platforms: [.iOS(.v16), .macOS(.v13)],
+    products: [
+        .library(name: "TrUAPIHost", targets: ["TrUAPIHost"]),
+    ],
+    targets: [
+        .systemLibrary(
+            name: "truapi_serverFFI",
+            path: "Sources/truapi_serverFFI",
+            pkgConfig: nil,
+            providers: []
+        ),
+        .target(
+            name: "TrUAPIHost",
+            dependencies: ["truapi_serverFFI"],
+            path: "Sources/TrUAPIHost"
+        ),
+    ]
+)
diff --git a/ios/truapi-host/README.md b/ios/truapi-host/README.md
new file mode 100644
index 00000000..edf92e21
--- /dev/null
+++ b/ios/truapi-host/README.md
@@ -0,0 +1,138 @@
+# TrUAPI iOS host adapter
+
+*Thin Swift shell over the Rust TrUAPI core (UniFFI). Wire decoding, request routing, and subscription lifecycle stay in the Rust core; products connect through the localhost WebSocket bridge.*
+
+## What this package is for
+
+The public surface lives in [`Sources/TrUAPIHost/TrUAPIHost.swift`](Sources/TrUAPIHost/TrUAPIHost.swift):
+
+- `HostBridge` - callback bundle the embedding app implements. Split into device permissions, remote permissions, navigation, push, feature support, and scoped storage.
+- `HostStorageBackend` - simple read/write/clear protocol the host backs with its own persistence.
+- `TrUAPIHostCore` - owning wrapper around the UniFFI-generated `NativeTrUApiCore`. Holds the bridge alive for the lifetime of the core, exposes session controls and the localhost WebSocket bridge.
+- `LocalhostBridgeBootstrap` - helper that produces a JS snippet publishing the WS bridge endpoint to the product page so it can dial back in.
+
+The generated UniFFI bindings live alongside the shell in `Sources/TrUAPIHost/truapi_server.swift` and the C header / module map in `Sources/truapi_serverFFI/include/`. They are committed (they're large and consumers should not need a Rust toolchain).
+
+## Architecture
+
+```text
+product app in WKWebView
+  Uint8Array frames via @parity/truapi createWebSocketProvider
+           |
+           v   ws://127.0.0.1:<port>/?t=<token>
+TrUAPIHostCore.startWsBridge()
+  → libtruapi_server (tokio WS server)
+  → Rust dispatcher
+```
+
+The product running in the `WKWebView` opens a `WebSocket` to the localhost port + token returned by `startWsBridge`. From there the Rust core handles the wire protocol directly. Outbound responses and host-side capability callbacks (`navigateTo`, `pushNotification`, `devicePermission`, `remotePermission`, `featureSupported`, `storage`) reach the embedder through `HostBridge`.
+
+## Permissions split
+
+The core's `Permissions` platform trait has two methods, and so does the bridge:
+
+- `devicePermission(request:)` - OS-scoped grants (camera, mic, location, push). `request` is a SCALE-encoded `v01::HostDevicePermissionRequest`.
+- `remotePermission(request:)` - per-product capability bundles. `request` is a SCALE-encoded `v01::RemotePermissionRequest`.
+
+Both return a `Bool` granted flag. SCALE decoding for the UI prompt is done by the `@parity/truapi` JS client (or any consumer that links the protocol crate's types directly).
+
+## Example
+
+> **Threading:** when the WS bridge is running, the Rust core invokes every
+> `HostBridge` callback on the dedicated `truapi-ws-bridge` worker thread, never
+> the main thread. Hop to the main thread (`DispatchQueue.main` / `MainActor`)
+> before touching UIKit, WebKit, or the `WKWebView`. Permission callbacks return
+> synchronously, so use `DispatchQueue.main.sync` (or a semaphore) to present
+> the prompt on the main thread and block the worker until the user decides.
+
+```swift
+import Foundation
+import WebKit
+import TrUAPIHost
+
+final class MyStorage: HostStorageBackend, @unchecked Sendable {
+    private var map: [String: Data] = [:]
+    func read(key: String) throws -> Data? { map[key] }
+    func write(key: String, value: Data) throws { map[key] = value }
+    func clear(key: String) throws { map.removeValue(forKey: key) }
+}
+
+final class MyBridge: HostBridge, @unchecked Sendable {
+    let storage: HostStorageBackend = MyStorage()
+
+    // Callbacks arrive on the `truapi-ws-bridge` worker thread, never the main
+    // thread. Hop to the main thread before touching UIKit/WebKit.
+    func navigateTo(url: String) throws {
+        DispatchQueue.main.async { /* UIApplication.shared.open(...) */ }
+    }
+
+    func pushNotification(payload: Data) throws {
+        DispatchQueue.main.async { /* schedule notification */ }
+    }
+
+    func devicePermission(request: Data) throws -> Bool {
+        // Present synchronously on the main thread and return the decision.
+        DispatchQueue.main.sync { /* show prompt; */ false }
+    }
+
+    func remotePermission(request: Data) throws -> Bool {
+        DispatchQueue.main.sync { /* show prompt; */ false }
+    }
+
+    func featureSupported(request: Data) throws -> Bool { false }
+}
+
+let bridge = MyBridge()
+let core = TrUAPIHostCore(bridge: bridge)
+let endpoint = try core.startWsBridge()
+
+let contentController = WKUserContentController()
+let bootstrapScript = LocalhostBridgeBootstrap.script(port: endpoint.port, token: endpoint.token)
+let userScript = WKUserScript(
+    source: bootstrapScript,
+    injectionTime: .atDocumentStart,
+    forMainFrameOnly: true
+)
+contentController.addUserScript(userScript)
+
+let configuration = WKWebViewConfiguration()
+configuration.userContentController = contentController
+let webView = WKWebView(frame: .zero, configuration: configuration)
+webView.load(URLRequest(url: URL(string: "https://your-product.example/")!))
+```
+
+The product page reads `window.__truapi_localhost.url` (set by the bootstrap script) and passes it to `@parity/truapi`'s `createWebSocketProvider(url)`.
+
+## Linking the cdylib
+
+This package does not vendor `libtruapi_server` - integrators link a prebuilt static or dynamic library when building the app target. Typical workflow:
+
+```bash
+cargo build -p truapi-server --release --features ws-bridge \
+  --target aarch64-apple-ios
+cargo build -p truapi-server --release --features ws-bridge \
+  --target aarch64-apple-ios-sim
+```
+
+Then either bundle the `.a` files as a `.xcframework` and add it under "Frameworks, Libraries, and Embedded Content" in the app target, or link directly via `OTHER_LDFLAGS`.
+
+## Regenerating the bindings
+
+The committed bindings under `Sources/TrUAPIHost/truapi_server.swift` and `Sources/truapi_serverFFI/include/` are produced from the workspace `uniffi-bindgen-cli`. The CLI emits `truapi_server.swift`, `truapi_serverFFI.h`, and `truapi_serverFFI.modulemap` into a single output directory; the modulemap is renamed to `module.modulemap` and the header is colocated under `Sources/truapi_serverFFI/include/` so SwiftPM's `systemLibrary` target picks them up.
+
+```bash
+cargo build -p truapi-server --release --features ws-bridge
+mkdir -p /tmp/uniffi-swift-out
+cargo run -p uniffi-bindgen-cli -- generate \
+  --library target/release/libtruapi_server.so \
+  --language swift \
+  --out-dir /tmp/uniffi-swift-out
+cp /tmp/uniffi-swift-out/truapi_server.swift \
+   ios/truapi-host/Sources/TrUAPIHost/truapi_server.swift
+cp /tmp/uniffi-swift-out/truapi_serverFFI.h \
+   ios/truapi-host/Sources/truapi_serverFFI/include/truapi_serverFFI.h
+cp /tmp/uniffi-swift-out/truapi_serverFFI.modulemap \
+   ios/truapi-host/Sources/truapi_serverFFI/include/module.modulemap
+```
+
+Or run `make uniffi` from the repo root.
diff --git a/ios/truapi-host/Sources/TrUAPIHost/TrUAPIHost.swift b/ios/truapi-host/Sources/TrUAPIHost/TrUAPIHost.swift
new file mode 100644
index 00000000..ca52f236
--- /dev/null
+++ b/ios/truapi-host/Sources/TrUAPIHost/TrUAPIHost.swift
@@ -0,0 +1,227 @@
+// TrUAPIHost - iOS host adapter.
+//
+// The Rust core (compiled to `libtruapi_server`, surfaced through UniFFI in
+// the sibling `truapi_server.swift` file) owns wire decoding, request
+// routing, subscription lifecycle, and platform trait dispatch.
+//
+// This file exposes:
+//
+//   * `HostBridge` - a Swift-friendly callback bundle the embedding app
+//     implements. It splits device and remote permissions, mirroring the
+//     `Permissions` platform trait in the Rust core.
+//   * `TrUAPIHostCore` - owning wrapper around the UniFFI-generated
+//     `NativeTrUApiCore`. Holds the bridge alive for the lifetime of the
+//     core and exposes session + WS-bridge controls.
+//   * `LocalhostBridgeBootstrap` - small JS snippet that publishes the WS
+//     bridge endpoint to the product page so it can dial back in.
+//
+// Products running inside a `WKWebView` connect to the Rust core via the
+// localhost WebSocket bridge. The bootstrap script publishes the URL
+// (`ws://127.0.0.1:<port>/?t=<token>`); products feed it to
+// `@parity/truapi`'s `createWebSocketProvider(url)`.
+
+import Foundation
+
+/// Package metadata.
+public enum TrUAPIHost {
+    public static let version = "0.1.0"
+}
+
+/// Bootstrap helper for the native localhost WebSocket bridge that the Rust
+/// core stands up via `NativeTrUApiCore.startWsBridge(bindPort:)` when the
+/// cdylib is built with the `ws-bridge` feature.
+public enum LocalhostBridgeBootstrap {
+    /// Returns a `<script>`-injectable snippet that publishes the endpoint
+    /// metadata on `window.__truapi_localhost` and fires a `truapi-native-ready`
+    /// event. The product reads the URL and passes it to
+    /// `createWebSocketProvider` from `@parity/truapi`.
+    public static func script(port: UInt16, token: String) -> String {
+        let url = "ws://127.0.0.1:\(port)/?t=\(token)"
+        let safeUrl = jsStringLiteral(url)
+        let safeToken = jsStringLiteral(token)
+        return """
+        (function() {
+          window.__truapi_localhost = { url: \(safeUrl), token: \(safeToken) };
+          window.dispatchEvent(new Event('truapi-native-ready'));
+        })();
+        """
+    }
+
+    /// Encodes `value` as a complete double-quoted JavaScript string literal,
+    /// safe to embed inside a `<script>` body. `JSONEncoder` escapes quotes,
+    /// backslashes, control characters, and forward slashes (closing `</script`
+    /// tags); U+2028 / U+2029 are escaped explicitly because JSON leaves them
+    /// raw while JS treats them as line terminators. Falls back to an empty
+    /// literal if encoding ever fails.
+    private static func jsStringLiteral(_ value: String) -> String {
+        guard let data = try? JSONEncoder().encode(value),
+              let encoded = String(data: data, encoding: .utf8)
+        else {
+            return "\"\""
+        }
+        return encoded
+            .replacingOccurrences(of: "\u{2028}", with: "\\u2028")
+            .replacingOccurrences(of: "\u{2029}", with: "\\u2029")
+    }
+}
+
+/// Storage backend the host provides to the Rust core. Throwing closures
+/// can surface quota or unknown failures by raising `HostStorageError`
+/// (defined in the generated bindings).
+public protocol HostStorageBackend: AnyObject, Sendable {
+    func read(key: String) throws -> Data?
+    func write(key: String, value: Data) throws
+    func clear(key: String) throws
+}
+
+/// Host-side callback bundle that the Rust core invokes for capabilities the
+/// native shell owns. The permission split mirrors the Rust `Permissions`
+/// trait:
+///
+///   * ``devicePermission(request:)`` handles OS-scoped grants (camera,
+///     mic, location). `request` is a SCALE-encoded
+///     `v01::HostDevicePermissionRequest`.
+///   * ``remotePermission(request:)`` handles per-product capability
+///     bundles. `request` is a SCALE-encoded `v01::RemotePermissionRequest`.
+///
+/// Embedders typically forward the SCALE payloads through the
+/// `@parity/truapi` JS client for UI prompts, then return the boolean
+/// granted flag.
+///
+/// Threading: when the WS bridge is running, the Rust core invokes every
+/// callback on the dedicated `truapi-ws-bridge` worker thread, never the main
+/// thread. Any UI work an implementation does (navigation, prompts,
+/// notifications, touching the `WKWebView`) MUST hop to the main thread, e.g.
+/// `await MainActor.run { ... }` or `DispatchQueue.main.async { ... }`. Calling
+/// UIKit/WebKit off the main thread is undefined behaviour.
+public protocol HostBridge: AnyObject, Sendable {
+    /// Lifecycle logger. Marker is a stable slug, detail is free-form.
+    func onCoreLog(marker: String, detail: String)
+
+    /// Open a URL in the system browser. Invoked on the `truapi-ws-bridge`
+    /// worker thread; hop to the main thread to present UI.
+    func navigateTo(url: String) throws
+
+    /// Deliver a push notification (SCALE-encoded `HostPushNotificationRequest`).
+    /// Invoked on the `truapi-ws-bridge` worker thread; hop to the main thread
+    /// for any UI work.
+    func pushNotification(payload: Data) throws
+
+    /// Prompt for a device-level permission. Returns the granted flag. Invoked
+    /// on the `truapi-ws-bridge` worker thread; present the prompt on the main
+    /// thread and block this thread until the user decides.
+    func devicePermission(request: Data) throws -> Bool
+
+    /// Prompt for a remote (product-scoped) permission bundle. Invoked on the
+    /// `truapi-ws-bridge` worker thread; present the prompt on the main thread
+    /// and block this thread until the user decides.
+    func remotePermission(request: Data) throws -> Bool
+
+    /// Answer a feature-support query. Invoked on the `truapi-ws-bridge` worker
+    /// thread.
+    func featureSupported(request: Data) throws -> Bool
+
+    /// Scoped key-value storage for the Rust core.
+    var storage: HostStorageBackend { get }
+}
+
+public extension HostBridge {
+    /// Default no-op logger. Override to plumb into your logging framework.
+    func onCoreLog(marker: String, detail: String) {}
+}
+
+/// Adapter that bridges the public `HostBridge` to the generated UniFFI
+/// `HostCallbacks` protocol. Kept private so the generated names never
+/// leak into consumers.
+private final class HostCallbackAdapter: HostCallbacks, @unchecked Sendable {
+    private let bridge: HostBridge
+
+    init(bridge: HostBridge) {
+        self.bridge = bridge
+    }
+
+    func onCoreLog(marker: String, detail: String) {
+        bridge.onCoreLog(marker: marker, detail: detail)
+    }
+
+    func navigateTo(url: String) throws {
+        try bridge.navigateTo(url: url)
+    }
+
+    func pushNotification(payload: Data) throws {
+        try bridge.pushNotification(payload: payload)
+    }
+
+    func devicePermission(request: Data) throws -> Bool {
+        try bridge.devicePermission(request: request)
+    }
+
+    func remotePermission(request: Data) throws -> Bool {
+        try bridge.remotePermission(request: request)
+    }
+
+    func featureSupported(request: Data) throws -> Bool {
+        try bridge.featureSupported(request: request)
+    }
+
+    func localStorageRead(key: String) throws -> Data? {
+        try bridge.storage.read(key: key)
+    }
+
+    func localStorageWrite(key: String, value: Data) throws {
+        try bridge.storage.write(key: key, value: value)
+    }
+
+    func localStorageClear(key: String) throws {
+        try bridge.storage.clear(key: key)
+    }
+}
+
+/// Owning wrapper around the Rust-backed `NativeTrUApiCore`. Holds the bridge
+/// adapter alive for the lifetime of the core and exposes session +
+/// WS-bridge controls.
+///
+/// Hosts integrating with a `WKWebView`-based product call `startWsBridge`
+/// and pass the resulting `ws://127.0.0.1:<port>/?t=<token>` URL to the
+/// product via `LocalhostBridgeBootstrap.script(...)`. The product wires
+/// that URL into `@parity/truapi`'s `createWebSocketProvider`.
+public final class TrUAPIHostCore {
+    private let inner: NativeTrUApiCore
+    // Co-owns the adapter alongside the generated FfiConverter handle map,
+    // which is what actually keeps the callback object alive for the core.
+    private let callbackRetainer: HostCallbacks
+
+    public init(bridge: HostBridge) {
+        let adapter = HostCallbackAdapter(bridge: bridge)
+        self.callbackRetainer = adapter
+        self.inner = NativeTrUApiCore(callbacks: adapter)
+    }
+
+    /// Set the currently-paired session. `pubkey` must be exactly 32 bytes.
+    @discardableResult
+    public func setActiveSession(
+        pubkey: Data,
+        liteUsername: String? = nil,
+        fullUsername: String? = nil
+    ) -> Bool {
+        inner.setActiveSession(pubkey: pubkey, liteUsername: liteUsername, fullUsername: fullUsername)
+    }
+
+    /// Drop the currently-paired session.
+    public func clearActiveSession() {
+        inner.clearActiveSession()
+    }
+
+    /// Start the localhost WebSocket bridge. Requires the `ws-bridge`
+    /// feature in the cdylib. Pair the returned `WsBridgeEndpoint` with
+    /// `LocalhostBridgeBootstrap.script(...)` to hand the URL to the
+    /// product page.
+    public func startWsBridge(bindPort: UInt16 = 0) throws -> WsBridgeEndpoint {
+        try inner.startWsBridge(bindPort: bindPort)
+    }
+
+    /// Stop the localhost WebSocket bridge (if running).
+    public func stopWsBridge() {
+        inner.stopWsBridge()
+    }
+}
diff --git a/ios/truapi-host/Sources/TrUAPIHost/truapi_server.swift b/ios/truapi-host/Sources/TrUAPIHost/truapi_server.swift
new file mode 100644
index 00000000..cd971d81
--- /dev/null
+++ b/ios/truapi-host/Sources/TrUAPIHost/truapi_server.swift
@@ -0,0 +1,1666 @@
+// This file was autogenerated by some hot garbage in the `uniffi` crate.
+// Trust me, you don't want to mess with it!
+
+// swiftlint:disable all
+import Foundation
+
+// Depending on the consumer's build setup, the low-level FFI code
+// might be in a separate module, or it might be compiled inline into
+// this module. This is a bit of light hackery to work with both.
+#if canImport(truapi_serverFFI)
+import truapi_serverFFI
+#endif
+
+fileprivate extension RustBuffer {
+    // Allocate a new buffer, copying the contents of a `UInt8` array.
+    init(bytes: [UInt8]) {
+        let rbuf = bytes.withUnsafeBufferPointer { ptr in
+            RustBuffer.from(ptr)
+        }
+        self.init(capacity: rbuf.capacity, len: rbuf.len, data: rbuf.data)
+    }
+
+    static func empty() -> RustBuffer {
+        RustBuffer(capacity: 0, len:0, data: nil)
+    }
+
+    static func from(_ ptr: UnsafeBufferPointer<UInt8>) -> RustBuffer {
+        try! rustCall { ffi_truapi_server_rustbuffer_from_bytes(ForeignBytes(bufferPointer: ptr), $0) }
+    }
+
+    // Frees the buffer in place.
+    // The buffer must not be used after this is called.
+    func deallocate() {
+        try! rustCall { ffi_truapi_server_rustbuffer_free(self, $0) }
+    }
+}
+
+fileprivate extension ForeignBytes {
+    init(bufferPointer: UnsafeBufferPointer<UInt8>) {
+        self.init(len: Int32(bufferPointer.count), data: bufferPointer.baseAddress)
+    }
+}
+
+// For every type used in the interface, we provide helper methods for conveniently
+// lifting and lowering that type from C-compatible data, and for reading and writing
+// values of that type in a buffer.
+
+// Helper classes/extensions that don't change.
+// Someday, this will be in a library of its own.
+
+fileprivate extension Data {
+    init(rustBuffer: RustBuffer) {
+        self.init(
+            bytesNoCopy: rustBuffer.data!,
+            count: Int(rustBuffer.len),
+            deallocator: .none
+        )
+    }
+}
+
+// Define reader functionality.  Normally this would be defined in a class or
+// struct, but we use standalone functions instead in order to make external
+// types work.
+//
+// With external types, one swift source file needs to be able to call the read
+// method on another source file's FfiConverter, but then what visibility
+// should Reader have?
+// - If Reader is fileprivate, then this means the read() must also
+//   be fileprivate, which doesn't work with external types.
+// - If Reader is internal/public, we'll get compile errors since both source
+//   files will try define the same type.
+//
+// Instead, the read() method and these helper functions input a tuple of data
+
+fileprivate func createReader(data: Data) -> (data: Data, offset: Data.Index) {
+    (data: data, offset: 0)
+}
+
+// Reads an integer at the current offset, in big-endian order, and advances
+// the offset on success. Throws if reading the integer would move the
+// offset past the end of the buffer.
+fileprivate func readInt<T: FixedWidthInteger>(_ reader: inout (data: Data, offset: Data.Index)) throws -> T {
+    let range = reader.offset..<reader.offset + MemoryLayout<T>.size
+    guard reader.data.count >= range.upperBound else {
+        throw UniffiInternalError.bufferOverflow
+    }
+    if T.self == UInt8.self {
+        let value = reader.data[reader.offset]
+        reader.offset += 1
+        return value as! T
+    }
+    var value: T = 0
+    let _ = withUnsafeMutableBytes(of: &value, { reader.data.copyBytes(to: $0, from: range)})
+    reader.offset = range.upperBound
+    return value.bigEndian
+}
+
+// Reads an arbitrary number of bytes, to be used to read
+// raw bytes, this is useful when lifting strings
+fileprivate func readBytes(_ reader: inout (data: Data, offset: Data.Index), count: Int) throws -> Array<UInt8> {
+    let range = reader.offset..<(reader.offset+count)
+    guard reader.data.count >= range.upperBound else {
+        throw UniffiInternalError.bufferOverflow
+    }
+    var value = [UInt8](repeating: 0, count: count)
+    value.withUnsafeMutableBufferPointer({ buffer in
+        reader.data.copyBytes(to: buffer, from: range)
+    })
+    reader.offset = range.upperBound
+    return value
+}
+
+// Reads a float at the current offset.
+fileprivate func readFloat(_ reader: inout (data: Data, offset: Data.Index)) throws -> Float {
+    return Float(bitPattern: try readInt(&reader))
+}
+
+// Reads a float at the current offset.
+fileprivate func readDouble(_ reader: inout (data: Data, offset: Data.Index)) throws -> Double {
+    return Double(bitPattern: try readInt(&reader))
+}
+
+// Indicates if the offset has reached the end of the buffer.
+fileprivate func hasRemaining(_ reader: (data: Data, offset: Data.Index)) -> Bool {
+    return reader.offset < reader.data.count
+}
+
+// Define writer functionality.  Normally this would be defined in a class or
+// struct, but we use standalone functions instead in order to make external
+// types work.  See the above discussion on Readers for details.
+
+fileprivate func createWriter() -> [UInt8] {
+    return []
+}
+
+fileprivate func writeBytes<S>(_ writer: inout [UInt8], _ byteArr: S) where S: Sequence, S.Element == UInt8 {
+    writer.append(contentsOf: byteArr)
+}
+
+// Writes an integer in big-endian order.
+//
+// Warning: make sure what you are trying to write
+// is in the correct type!
+fileprivate func writeInt<T: FixedWidthInteger>(_ writer: inout [UInt8], _ value: T) {
+    var value = value.bigEndian
+    withUnsafeBytes(of: &value) { writer.append(contentsOf: $0) }
+}
+
+fileprivate func writeFloat(_ writer: inout [UInt8], _ value: Float) {
+    writeInt(&writer, value.bitPattern)
+}
+
+fileprivate func writeDouble(_ writer: inout [UInt8], _ value: Double) {
+    writeInt(&writer, value.bitPattern)
+}
+
+// Protocol for types that transfer other types across the FFI. This is
+// analogous to the Rust trait of the same name.
+fileprivate protocol FfiConverter {
+    associatedtype FfiType
+    associatedtype SwiftType
+
+    static func lift(_ value: FfiType) throws -> SwiftType
+    static func lower(_ value: SwiftType) -> FfiType
+    static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> SwiftType
+    static func write(_ value: SwiftType, into buf: inout [UInt8])
+}
+
+// Types conforming to `Primitive` pass themselves directly over the FFI.
+fileprivate protocol FfiConverterPrimitive: FfiConverter where FfiType == SwiftType { }
+
+extension FfiConverterPrimitive {
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public static func lift(_ value: FfiType) throws -> SwiftType {
+        return value
+    }
+
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public static func lower(_ value: SwiftType) -> FfiType {
+        return value
+    }
+}
+
+// Types conforming to `FfiConverterRustBuffer` lift and lower into a `RustBuffer`.
+// Used for complex types where it's hard to write a custom lift/lower.
+fileprivate protocol FfiConverterRustBuffer: FfiConverter where FfiType == RustBuffer {}
+
+extension FfiConverterRustBuffer {
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public static func lift(_ buf: RustBuffer) throws -> SwiftType {
+        var reader = createReader(data: Data(rustBuffer: buf))
+        let value = try read(from: &reader)
+        if hasRemaining(reader) {
+            throw UniffiInternalError.incompleteData
+        }
+        buf.deallocate()
+        return value
+    }
+
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public static func lower(_ value: SwiftType) -> RustBuffer {
+          var writer = createWriter()
+          write(value, into: &writer)
+          return RustBuffer(bytes: writer)
+    }
+}
+// An error type for FFI errors. These errors occur at the UniFFI level, not
+// the library level.
+fileprivate enum UniffiInternalError: LocalizedError {
+    case bufferOverflow
+    case incompleteData
+    case unexpectedOptionalTag
+    case unexpectedEnumCase
+    case unexpectedNullPointer
+    case unexpectedRustCallStatusCode
+    case unexpectedRustCallError
+    case unexpectedStaleHandle
+    case rustPanic(_ message: String)
+
+    public var errorDescription: String? {
+        switch self {
+        case .bufferOverflow: return "Reading the requested value would read past the end of the buffer"
+        case .incompleteData: return "The buffer still has data after lifting its containing value"
+        case .unexpectedOptionalTag: return "Unexpected optional tag; should be 0 or 1"
+        case .unexpectedEnumCase: return "Raw enum value doesn't match any cases"
+        case .unexpectedNullPointer: return "Raw pointer value was null"
+        case .unexpectedRustCallStatusCode: return "Unexpected RustCallStatus code"
+        case .unexpectedRustCallError: return "CALL_ERROR but no errorClass specified"
+        case .unexpectedStaleHandle: return "The object in the handle map has been dropped already"
+        case let .rustPanic(message): return message
+        }
+    }
+}
+
+fileprivate extension NSLock {
+    func withLock<T>(f: () throws -> T) rethrows -> T {
+        self.lock()
+        defer { self.unlock() }
+        return try f()
+    }
+}
+
+fileprivate let CALL_SUCCESS: Int8 = 0
+fileprivate let CALL_ERROR: Int8 = 1
+fileprivate let CALL_UNEXPECTED_ERROR: Int8 = 2
+fileprivate let CALL_CANCELLED: Int8 = 3
+
+fileprivate extension RustCallStatus {
+    init() {
+        self.init(
+            code: CALL_SUCCESS,
+            errorBuf: RustBuffer.init(
+                capacity: 0,
+                len: 0,
+                data: nil
+            )
+        )
+    }
+}
+
+private func rustCall<T>(_ callback: (UnsafeMutablePointer<RustCallStatus>) -> T) throws -> T {
+    let neverThrow: ((RustBuffer) throws -> Never)? = nil
+    return try makeRustCall(callback, errorHandler: neverThrow)
+}
+
+private func rustCallWithError<T, E: Swift.Error>(
+    _ errorHandler: @escaping (RustBuffer) throws -> E,
+    _ callback: (UnsafeMutablePointer<RustCallStatus>) -> T) throws -> T {
+    try makeRustCall(callback, errorHandler: errorHandler)
+}
+
+private func makeRustCall<T, E: Swift.Error>(
+    _ callback: (UnsafeMutablePointer<RustCallStatus>) -> T,
+    errorHandler: ((RustBuffer) throws -> E)?
+) throws -> T {
+    uniffiEnsureTruapiServerInitialized()
+    var callStatus = RustCallStatus.init()
+    let returnedVal = callback(&callStatus)
+    try uniffiCheckCallStatus(callStatus: callStatus, errorHandler: errorHandler)
+    return returnedVal
+}
+
+private func uniffiCheckCallStatus<E: Swift.Error>(
+    callStatus: RustCallStatus,
+    errorHandler: ((RustBuffer) throws -> E)?
+) throws {
+    switch callStatus.code {
+        case CALL_SUCCESS:
+            return
+
+        case CALL_ERROR:
+            if let errorHandler = errorHandler {
+                throw try errorHandler(callStatus.errorBuf)
+            } else {
+                callStatus.errorBuf.deallocate()
+                throw UniffiInternalError.unexpectedRustCallError
+            }
+
+        case CALL_UNEXPECTED_ERROR:
+            // When the rust code sees a panic, it tries to construct a RustBuffer
+            // with the message.  But if that code panics, then it just sends back
+            // an empty buffer.
+            if callStatus.errorBuf.len > 0 {
+                throw UniffiInternalError.rustPanic(try FfiConverterString.lift(callStatus.errorBuf))
+            } else {
+                callStatus.errorBuf.deallocate()
+                throw UniffiInternalError.rustPanic("Rust panic")
+            }
+
+        case CALL_CANCELLED:
+            fatalError("Cancellation not supported yet")
+
+        default:
+            throw UniffiInternalError.unexpectedRustCallStatusCode
+    }
+}
+
+private func uniffiTraitInterfaceCall<T>(
+    callStatus: UnsafeMutablePointer<RustCallStatus>,
+    makeCall: () throws -> T,
+    writeReturn: (T) -> ()
+) {
+    do {
+        try writeReturn(makeCall())
+    } catch let error {
+        callStatus.pointee.code = CALL_UNEXPECTED_ERROR
+        callStatus.pointee.errorBuf = FfiConverterString.lower(String(describing: error))
+    }
+}
+
+private func uniffiTraitInterfaceCallWithError<T, E>(
+    callStatus: UnsafeMutablePointer<RustCallStatus>,
+    makeCall: () throws -> T,
+    writeReturn: (T) -> (),
+    lowerError: (E) -> RustBuffer
+) {
+    do {
+        try writeReturn(makeCall())
+    } catch let error as E {
+        callStatus.pointee.code = CALL_ERROR
+        callStatus.pointee.errorBuf = lowerError(error)
+    } catch {
+        callStatus.pointee.code = CALL_UNEXPECTED_ERROR
+        callStatus.pointee.errorBuf = FfiConverterString.lower(String(describing: error))
+    }
+}
+fileprivate final class UniffiHandleMap<T>: @unchecked Sendable {
+    // All mutation happens with this lock held, which is why we implement @unchecked Sendable.
+    private let lock = NSLock()
+    private var map: [UInt64: T] = [:]
+    private var currentHandle: UInt64 = 1
+
+    func insert(obj: T) -> UInt64 {
+        lock.withLock {
+            let handle = currentHandle
+            currentHandle += 1
+            map[handle] = obj
+            return handle
+        }
+    }
+
+     func get(handle: UInt64) throws -> T {
+        try lock.withLock {
+            guard let obj = map[handle] else {
+                throw UniffiInternalError.unexpectedStaleHandle
+            }
+            return obj
+        }
+    }
+
+    @discardableResult
+    func remove(handle: UInt64) throws -> T {
+        try lock.withLock {
+            guard let obj = map.removeValue(forKey: handle) else {
+                throw UniffiInternalError.unexpectedStaleHandle
+            }
+            return obj
+        }
+    }
+
+    var count: Int {
+        get {
+            map.count
+        }
+    }
+}
+
+
+// Public interface members begin here.
+// Magic number for the Rust proxy to call using the same mechanism as every other method,
+// to free the callback once it's dropped by Rust.
+private let IDX_CALLBACK_FREE: Int32 = 0
+// Callback return codes
+private let UNIFFI_CALLBACK_SUCCESS: Int32 = 0
+private let UNIFFI_CALLBACK_ERROR: Int32 = 1
+private let UNIFFI_CALLBACK_UNEXPECTED_ERROR: Int32 = 2
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+fileprivate struct FfiConverterUInt16: FfiConverterPrimitive {
+    typealias FfiType = UInt16
+    typealias SwiftType = UInt16
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> UInt16 {
+        return try lift(readInt(&buf))
+    }
+
+    public static func write(_ value: SwiftType, into buf: inout [UInt8]) {
+        writeInt(&buf, lower(value))
+    }
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+fileprivate struct FfiConverterBool : FfiConverter {
+    typealias FfiType = Int8
+    typealias SwiftType = Bool
+
+    public static func lift(_ value: Int8) throws -> Bool {
+        return value != 0
+    }
+
+    public static func lower(_ value: Bool) -> Int8 {
+        return value ? 1 : 0
+    }
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> Bool {
+        return try lift(readInt(&buf))
+    }
+
+    public static func write(_ value: Bool, into buf: inout [UInt8]) {
+        writeInt(&buf, lower(value))
+    }
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+fileprivate struct FfiConverterString: FfiConverter {
+    typealias SwiftType = String
+    typealias FfiType = RustBuffer
+
+    public static func lift(_ value: RustBuffer) throws -> String {
+        defer {
+            value.deallocate()
+        }
+        if value.data == nil {
+            return String()
+        }
+        let bytes = UnsafeBufferPointer<UInt8>(start: value.data!, count: Int(value.len))
+        return String(bytes: bytes, encoding: String.Encoding.utf8)!
+    }
+
+    public static func lower(_ value: String) -> RustBuffer {
+        return value.utf8CString.withUnsafeBufferPointer { ptr in
+            // The swift string gives us int8_t, we want uint8_t.
+            ptr.withMemoryRebound(to: UInt8.self) { ptr in
+                // The swift string gives us a trailing null byte, we don't want it.
+                let buf = UnsafeBufferPointer(rebasing: ptr.prefix(upTo: ptr.count - 1))
+                return RustBuffer.from(buf)
+            }
+        }
+    }
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> String {
+        let len: Int32 = try readInt(&buf)
+        return String(bytes: try readBytes(&buf, count: Int(len)), encoding: String.Encoding.utf8)!
+    }
+
+    public static func write(_ value: String, into buf: inout [UInt8]) {
+        let len = Int32(value.utf8.count)
+        writeInt(&buf, len)
+        writeBytes(&buf, value.utf8)
+    }
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+fileprivate struct FfiConverterData: FfiConverterRustBuffer {
+    typealias SwiftType = Data
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> Data {
+        let len: Int32 = try readInt(&buf)
+        return Data(try readBytes(&buf, count: Int(len)))
+    }
+
+    public static func write(_ value: Data, into buf: inout [UInt8]) {
+        let len = Int32(value.count)
+        writeInt(&buf, len)
+        writeBytes(&buf, value)
+    }
+}
+
+
+
+
+/**
+ * UniFFI object exposing the TrUAPI core to native hosts.
+ */
+public protocol NativeTrUApiCoreProtocol: AnyObject, Sendable {
+    
+    /**
+     * Drop the currently-paired session. Mirrors the JS
+     * `clearActiveSession`.
+     */
+    func clearActiveSession() 
+    
+    /**
+     * Push the currently-paired session into the core. Mirrors the JS
+     * `setActiveSession`. `pubkey` must be exactly 32 bytes (sr25519 root
+     * public key).
+     */
+    func setActiveSession(pubkey: Data, liteUsername: String?, fullUsername: String?)  -> Bool
+    
+    /**
+     * Start the localhost WebSocket bridge. Returns the descriptor the
+     * host hands to the product so it can dial back in.
+     */
+    func startWsBridge(bindPort: UInt16) throws  -> WsBridgeEndpoint
+    
+    /**
+     * Stop the localhost WebSocket bridge (if running).
+     */
+    func stopWsBridge() 
+    
+}
+/**
+ * UniFFI object exposing the TrUAPI core to native hosts.
+ */
+open class NativeTrUApiCore: NativeTrUApiCoreProtocol, @unchecked Sendable {
+    fileprivate let pointer: UnsafeMutableRawPointer!
+
+    /// Used to instantiate a [FFIObject] without an actual pointer, for fakes in tests, mostly.
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public struct NoPointer {
+        public init() {}
+    }
+
+    // TODO: We'd like this to be `private` but for Swifty reasons,
+    // we can't implement `FfiConverter` without making this `required` and we can't
+    // make it `required` without making it `public`.
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    required public init(unsafeFromRawPointer pointer: UnsafeMutableRawPointer) {
+        self.pointer = pointer
+    }
+
+    // This constructor can be used to instantiate a fake object.
+    // - Parameter noPointer: Placeholder value so we can have a constructor separate from the default empty one that may be implemented for classes extending [FFIObject].
+    //
+    // - Warning:
+    //     Any object instantiated with this constructor cannot be passed to an actual Rust-backed object. Since there isn't a backing [Pointer] the FFI lower functions will crash.
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public init(noPointer: NoPointer) {
+        self.pointer = nil
+    }
+
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public func uniffiClonePointer() -> UnsafeMutableRawPointer {
+        return try! rustCall { uniffi_truapi_server_fn_clone_nativetruapicore(self.pointer, $0) }
+    }
+    /**
+     * Construct the core from a callback object. The native shell hands
+     * over its [`HostCallbacks`] trait object; the core wraps it in a
+     * [`CallbackPlatform`] and feeds the result into
+     * [`TrUApiCore::from_platform`].
+     *
+     * Subscriptions registered through this core run on a shared
+     * `futures::executor::ThreadPool`. The pool sticks around for the
+     * lifetime of the core; new subscriptions never spawn a fresh OS
+     * thread each.
+     */
+public convenience init(callbacks: HostCallbacks) {
+    let pointer =
+        try! rustCall() {
+    uniffi_truapi_server_fn_constructor_nativetruapicore_new(
+        FfiConverterCallbackInterfaceHostCallbacks_lower(callbacks),$0
+    )
+}
+    self.init(unsafeFromRawPointer: pointer)
+}
+
+    deinit {
+        guard let pointer = pointer else {
+            return
+        }
+
+        try! rustCall { uniffi_truapi_server_fn_free_nativetruapicore(pointer, $0) }
+    }
+
+    
+
+    
+    /**
+     * Drop the currently-paired session. Mirrors the JS
+     * `clearActiveSession`.
+     */
+open func clearActiveSession()  {try! rustCall() {
+    uniffi_truapi_server_fn_method_nativetruapicore_clear_active_session(self.uniffiClonePointer(),$0
+    )
+}
+}
+    
+    /**
+     * Push the currently-paired session into the core. Mirrors the JS
+     * `setActiveSession`. `pubkey` must be exactly 32 bytes (sr25519 root
+     * public key).
+     */
+open func setActiveSession(pubkey: Data, liteUsername: String?, fullUsername: String?) -> Bool  {
+    return try!  FfiConverterBool.lift(try! rustCall() {
+    uniffi_truapi_server_fn_method_nativetruapicore_set_active_session(self.uniffiClonePointer(),
+        FfiConverterData.lower(pubkey),
+        FfiConverterOptionString.lower(liteUsername),
+        FfiConverterOptionString.lower(fullUsername),$0
+    )
+})
+}
+    
+    /**
+     * Start the localhost WebSocket bridge. Returns the descriptor the
+     * host hands to the product so it can dial back in.
+     */
+open func startWsBridge(bindPort: UInt16)throws  -> WsBridgeEndpoint  {
+    return try  FfiConverterTypeWsBridgeEndpoint_lift(try rustCallWithError(FfiConverterTypeWsBridgeStartError_lift) {
+    uniffi_truapi_server_fn_method_nativetruapicore_start_ws_bridge(self.uniffiClonePointer(),
+        FfiConverterUInt16.lower(bindPort),$0
+    )
+})
+}
+    
+    /**
+     * Stop the localhost WebSocket bridge (if running).
+     */
+open func stopWsBridge()  {try! rustCall() {
+    uniffi_truapi_server_fn_method_nativetruapicore_stop_ws_bridge(self.uniffiClonePointer(),$0
+    )
+}
+}
+    
+
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public struct FfiConverterTypeNativeTrUApiCore: FfiConverter {
+
+    typealias FfiType = UnsafeMutableRawPointer
+    typealias SwiftType = NativeTrUApiCore
+
+    public static func lift(_ pointer: UnsafeMutableRawPointer) throws -> NativeTrUApiCore {
+        return NativeTrUApiCore(unsafeFromRawPointer: pointer)
+    }
+
+    public static func lower(_ value: NativeTrUApiCore) -> UnsafeMutableRawPointer {
+        return value.uniffiClonePointer()
+    }
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> NativeTrUApiCore {
+        let v: UInt64 = try readInt(&buf)
+        // The Rust code won't compile if a pointer won't fit in a UInt64.
+        // We have to go via `UInt` because that's the thing that's the size of a pointer.
+        let ptr = UnsafeMutableRawPointer(bitPattern: UInt(truncatingIfNeeded: v))
+        if (ptr == nil) {
+            throw UniffiInternalError.unexpectedNullPointer
+        }
+        return try lift(ptr!)
+    }
+
+    public static func write(_ value: NativeTrUApiCore, into buf: inout [UInt8]) {
+        // This fiddling is because `Int` is the thing that's the same size as a pointer.
+        // The Rust code won't compile if a pointer won't fit in a `UInt64`.
+        writeInt(&buf, UInt64(bitPattern: Int64(Int(bitPattern: lower(value)))))
+    }
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeNativeTrUApiCore_lift(_ pointer: UnsafeMutableRawPointer) throws -> NativeTrUApiCore {
+    return try FfiConverterTypeNativeTrUApiCore.lift(pointer)
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeNativeTrUApiCore_lower(_ value: NativeTrUApiCore) -> UnsafeMutableRawPointer {
+    return FfiConverterTypeNativeTrUApiCore.lower(value)
+}
+
+
+
+
+/**
+ * Per-session descriptor returned to the host: product uses `port + token`
+ * to build its WebSocket URL (e.g. `ws://127.0.0.1:<port>/?t=<token>`).
+ */
+public struct WsBridgeEndpoint {
+    /**
+     * Localhost port the bridge is listening on.
+     */
+    public var port: UInt16
+    /**
+     * Session token; the connecting client must supply this as the
+     * `?t=<token>` query parameter to be accepted.
+     */
+    public var token: String
+
+    // Default memberwise initializers are never public by default, so we
+    // declare one manually.
+    public init(
+        /**
+         * Localhost port the bridge is listening on.
+         */port: UInt16, 
+        /**
+         * Session token; the connecting client must supply this as the
+         * `?t=<token>` query parameter to be accepted.
+         */token: String) {
+        self.port = port
+        self.token = token
+    }
+}
+
+#if compiler(>=6)
+extension WsBridgeEndpoint: Sendable {}
+#endif
+
+
+extension WsBridgeEndpoint: Equatable, Hashable {
+    public static func ==(lhs: WsBridgeEndpoint, rhs: WsBridgeEndpoint) -> Bool {
+        if lhs.port != rhs.port {
+            return false
+        }
+        if lhs.token != rhs.token {
+            return false
+        }
+        return true
+    }
+
+    public func hash(into hasher: inout Hasher) {
+        hasher.combine(port)
+        hasher.combine(token)
+    }
+}
+
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public struct FfiConverterTypeWsBridgeEndpoint: FfiConverterRustBuffer {
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> WsBridgeEndpoint {
+        return
+            try WsBridgeEndpoint(
+                port: FfiConverterUInt16.read(from: &buf), 
+                token: FfiConverterString.read(from: &buf)
+        )
+    }
+
+    public static func write(_ value: WsBridgeEndpoint, into buf: inout [UInt8]) {
+        FfiConverterUInt16.write(value.port, into: &buf)
+        FfiConverterString.write(value.token, into: &buf)
+    }
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeWsBridgeEndpoint_lift(_ buf: RustBuffer) throws -> WsBridgeEndpoint {
+    return try FfiConverterTypeWsBridgeEndpoint.lift(buf)
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeWsBridgeEndpoint_lower(_ value: WsBridgeEndpoint) -> RustBuffer {
+    return FfiConverterTypeWsBridgeEndpoint.lower(value)
+}
+
+
+/**
+ * Native-friendly navigation error.
+ */
+public enum HostNavigateRejection: Swift.Error {
+
+    
+    
+    /**
+     * User declined the navigation.
+     */
+    case PermissionDenied
+    /**
+     * Catch-all.
+     */
+    case Unknown(
+        /**
+         * Human-readable reason.
+         */reason: String
+    )
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public struct FfiConverterTypeHostNavigateRejection: FfiConverterRustBuffer {
+    typealias SwiftType = HostNavigateRejection
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> HostNavigateRejection {
+        let variant: Int32 = try readInt(&buf)
+        switch variant {
+
+        
+
+        
+        case 1: return .PermissionDenied
+        case 2: return .Unknown(
+            reason: try FfiConverterString.read(from: &buf)
+            )
+
+         default: throw UniffiInternalError.unexpectedEnumCase
+        }
+    }
+
+    public static func write(_ value: HostNavigateRejection, into buf: inout [UInt8]) {
+        switch value {
+
+        
+
+        
+        
+        case .PermissionDenied:
+            writeInt(&buf, Int32(1))
+        
+        
+        case let .Unknown(reason):
+            writeInt(&buf, Int32(2))
+            FfiConverterString.write(reason, into: &buf)
+            
+        }
+    }
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeHostNavigateRejection_lift(_ buf: RustBuffer) throws -> HostNavigateRejection {
+    return try FfiConverterTypeHostNavigateRejection.lift(buf)
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeHostNavigateRejection_lower(_ value: HostNavigateRejection) -> RustBuffer {
+    return FfiConverterTypeHostNavigateRejection.lower(value)
+}
+
+
+extension HostNavigateRejection: Equatable, Hashable {}
+
+
+
+
+extension HostNavigateRejection: Foundation.LocalizedError {
+    public var errorDescription: String? {
+        String(reflecting: self)
+    }
+}
+
+
+
+
+
+/**
+ * Native-friendly rejection error returned by callback methods that map
+ * onto [`truapi::v01::GenericError`].
+ */
+public enum HostRejection: Swift.Error {
+
+    
+    
+    /**
+     * Caller rejected the operation.
+     */
+    case Rejected(
+        /**
+         * Human-readable rejection reason.
+         */reason: String
+    )
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public struct FfiConverterTypeHostRejection: FfiConverterRustBuffer {
+    typealias SwiftType = HostRejection
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> HostRejection {
+        let variant: Int32 = try readInt(&buf)
+        switch variant {
+
+        
+
+        
+        case 1: return .Rejected(
+            reason: try FfiConverterString.read(from: &buf)
+            )
+
+         default: throw UniffiInternalError.unexpectedEnumCase
+        }
+    }
+
+    public static func write(_ value: HostRejection, into buf: inout [UInt8]) {
+        switch value {
+
+        
+
+        
+        
+        case let .Rejected(reason):
+            writeInt(&buf, Int32(1))
+            FfiConverterString.write(reason, into: &buf)
+            
+        }
+    }
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeHostRejection_lift(_ buf: RustBuffer) throws -> HostRejection {
+    return try FfiConverterTypeHostRejection.lift(buf)
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeHostRejection_lower(_ value: HostRejection) -> RustBuffer {
+    return FfiConverterTypeHostRejection.lower(value)
+}
+
+
+extension HostRejection: Equatable, Hashable {}
+
+
+
+
+extension HostRejection: Foundation.LocalizedError {
+    public var errorDescription: String? {
+        String(reflecting: self)
+    }
+}
+
+
+
+
+
+/**
+ * Native-friendly storage error. Mirrors the v0.1 wire shape so the
+ * callback surface stays SCALE-free.
+ */
+public enum HostStorageError: Swift.Error {
+
+    
+    
+    /**
+     * Quota exhausted.
+     */
+    case Full
+    /**
+     * Catch-all.
+     */
+    case Unknown(
+        /**
+         * Human-readable failure reason.
+         */reason: String
+    )
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public struct FfiConverterTypeHostStorageError: FfiConverterRustBuffer {
+    typealias SwiftType = HostStorageError
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> HostStorageError {
+        let variant: Int32 = try readInt(&buf)
+        switch variant {
+
+        
+
+        
+        case 1: return .Full
+        case 2: return .Unknown(
+            reason: try FfiConverterString.read(from: &buf)
+            )
+
+         default: throw UniffiInternalError.unexpectedEnumCase
+        }
+    }
+
+    public static func write(_ value: HostStorageError, into buf: inout [UInt8]) {
+        switch value {
+
+        
+
+        
+        
+        case .Full:
+            writeInt(&buf, Int32(1))
+        
+        
+        case let .Unknown(reason):
+            writeInt(&buf, Int32(2))
+            FfiConverterString.write(reason, into: &buf)
+            
+        }
+    }
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeHostStorageError_lift(_ buf: RustBuffer) throws -> HostStorageError {
+    return try FfiConverterTypeHostStorageError.lift(buf)
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeHostStorageError_lower(_ value: HostStorageError) -> RustBuffer {
+    return FfiConverterTypeHostStorageError.lower(value)
+}
+
+
+extension HostStorageError: Equatable, Hashable {}
+
+
+
+
+extension HostStorageError: Foundation.LocalizedError {
+    public var errorDescription: String? {
+        String(reflecting: self)
+    }
+}
+
+
+
+
+
+/**
+ * Failure modes returned from host-facing `start_ws_bridge` wrappers.
+ */
+public enum WsBridgeStartError: Swift.Error {
+
+    
+    
+    /**
+     * A bridge is already running for this host.
+     */
+    case AlreadyRunning(message: String)
+    
+    /**
+     * Anything else (bind failure, runtime spin-up failure, ...).
+     */
+    case Io(message: String)
+    
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public struct FfiConverterTypeWsBridgeStartError: FfiConverterRustBuffer {
+    typealias SwiftType = WsBridgeStartError
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> WsBridgeStartError {
+        let variant: Int32 = try readInt(&buf)
+        switch variant {
+
+        
+
+        
+        case 1: return .AlreadyRunning(
+            message: try FfiConverterString.read(from: &buf)
+        )
+        
+        case 2: return .Io(
+            message: try FfiConverterString.read(from: &buf)
+        )
+        
+
+        default: throw UniffiInternalError.unexpectedEnumCase
+        }
+    }
+
+    public static func write(_ value: WsBridgeStartError, into buf: inout [UInt8]) {
+        switch value {
+
+        
+
+        
+        case .AlreadyRunning(_ /* message is ignored*/):
+            writeInt(&buf, Int32(1))
+        case .Io(_ /* message is ignored*/):
+            writeInt(&buf, Int32(2))
+
+        
+        }
+    }
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeWsBridgeStartError_lift(_ buf: RustBuffer) throws -> WsBridgeStartError {
+    return try FfiConverterTypeWsBridgeStartError.lift(buf)
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterTypeWsBridgeStartError_lower(_ value: WsBridgeStartError) -> RustBuffer {
+    return FfiConverterTypeWsBridgeStartError.lower(value)
+}
+
+
+extension WsBridgeStartError: Equatable, Hashable {}
+
+
+
+
+extension WsBridgeStartError: Foundation.LocalizedError {
+    public var errorDescription: String? {
+        String(reflecting: self)
+    }
+}
+
+
+
+
+
+
+
+/**
+ * Callback surface that iOS and Android implement. The Rust core invokes
+ * these synchronously from `async` trait methods, which is acceptable for
+ * UniFFI because every callback hop is short-lived and reentrant.
+ */
+public protocol HostCallbacks: AnyObject, Sendable {
+    
+    /**
+     * Lifecycle logger. Marker is a stable slug, detail is free-form.
+     */
+    func onCoreLog(marker: String, detail: String) 
+    
+    /**
+     * Open a URL in the system browser.
+     */
+    func navigateTo(url: String) throws 
+    
+    /**
+     * Deliver a push notification. The payload is the SCALE-encoded
+     * [`v01::HostPushNotificationRequest`].
+     */
+    func pushNotification(payload: Data) throws 
+    
+    /**
+     * Prompt the user for a device-level permission (camera, mic, ...).
+     * `request` is the SCALE-encoded
+     * [`v01::HostDevicePermissionRequest`]; the host returns whether the
+     * permission was granted.
+     */
+    func devicePermission(request: Data) throws  -> Bool
+    
+    /**
+     * Prompt the user for a remote (product-scoped) permission bundle.
+     * `request` is the SCALE-encoded [`v01::RemotePermissionRequest`].
+     */
+    func remotePermission(request: Data) throws  -> Bool
+    
+    /**
+     * Answer a feature-support query. `request` is the SCALE-encoded
+     * [`HostFeatureSupportedRequest`].
+     */
+    func featureSupported(request: Data) throws  -> Bool
+    
+    /**
+     * Read a value from the host's scoped key-value store.
+     */
+    func localStorageRead(key: String) throws  -> Data?
+    
+    /**
+     * Write a value to the host's scoped key-value store.
+     */
+    func localStorageWrite(key: String, value: Data) throws 
+    
+    /**
+     * Clear a value from the host's scoped key-value store.
+     */
+    func localStorageClear(key: String) throws 
+    
+}
+
+
+// Put the implementation in a struct so we don't pollute the top-level namespace
+fileprivate struct UniffiCallbackInterfaceHostCallbacks {
+
+    // Create the VTable using a series of closures.
+    // Swift automatically converts these into C callback functions.
+    //
+    // This creates 1-element array, since this seems to be the only way to construct a const
+    // pointer that we can pass to the Rust code.
+    static let vtable: [UniffiVTableCallbackInterfaceHostCallbacks] = [UniffiVTableCallbackInterfaceHostCallbacks(
+        onCoreLog: { (
+            uniffiHandle: UInt64,
+            marker: RustBuffer,
+            detail: RustBuffer,
+            uniffiOutReturn: UnsafeMutableRawPointer,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> () in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceHostCallbacks.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return uniffiObj.onCoreLog(
+                     marker: try FfiConverterString.lift(marker),
+                     detail: try FfiConverterString.lift(detail)
+                )
+            }
+
+            
+            let writeReturn = { () }
+            uniffiTraitInterfaceCall(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn
+            )
+        },
+        navigateTo: { (
+            uniffiHandle: UInt64,
+            url: RustBuffer,
+            uniffiOutReturn: UnsafeMutableRawPointer,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> () in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceHostCallbacks.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return try uniffiObj.navigateTo(
+                     url: try FfiConverterString.lift(url)
+                )
+            }
+
+            
+            let writeReturn = { () }
+            uniffiTraitInterfaceCallWithError(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn,
+                lowerError: FfiConverterTypeHostNavigateRejection_lower
+            )
+        },
+        pushNotification: { (
+            uniffiHandle: UInt64,
+            payload: RustBuffer,
+            uniffiOutReturn: UnsafeMutableRawPointer,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> () in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceHostCallbacks.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return try uniffiObj.pushNotification(
+                     payload: try FfiConverterData.lift(payload)
+                )
+            }
+
+            
+            let writeReturn = { () }
+            uniffiTraitInterfaceCallWithError(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn,
+                lowerError: FfiConverterTypeHostRejection_lower
+            )
+        },
+        devicePermission: { (
+            uniffiHandle: UInt64,
+            request: RustBuffer,
+            uniffiOutReturn: UnsafeMutablePointer<Int8>,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> Bool in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceHostCallbacks.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return try uniffiObj.devicePermission(
+                     request: try FfiConverterData.lift(request)
+                )
+            }
+
+            
+            let writeReturn = { uniffiOutReturn.pointee = FfiConverterBool.lower($0) }
+            uniffiTraitInterfaceCallWithError(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn,
+                lowerError: FfiConverterTypeHostRejection_lower
+            )
+        },
+        remotePermission: { (
+            uniffiHandle: UInt64,
+            request: RustBuffer,
+            uniffiOutReturn: UnsafeMutablePointer<Int8>,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> Bool in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceHostCallbacks.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return try uniffiObj.remotePermission(
+                     request: try FfiConverterData.lift(request)
+                )
+            }
+
+            
+            let writeReturn = { uniffiOutReturn.pointee = FfiConverterBool.lower($0) }
+            uniffiTraitInterfaceCallWithError(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn,
+                lowerError: FfiConverterTypeHostRejection_lower
+            )
+        },
+        featureSupported: { (
+            uniffiHandle: UInt64,
+            request: RustBuffer,
+            uniffiOutReturn: UnsafeMutablePointer<Int8>,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> Bool in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceHostCallbacks.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return try uniffiObj.featureSupported(
+                     request: try FfiConverterData.lift(request)
+                )
+            }
+
+            
+            let writeReturn = { uniffiOutReturn.pointee = FfiConverterBool.lower($0) }
+            uniffiTraitInterfaceCallWithError(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn,
+                lowerError: FfiConverterTypeHostRejection_lower
+            )
+        },
+        localStorageRead: { (
+            uniffiHandle: UInt64,
+            key: RustBuffer,
+            uniffiOutReturn: UnsafeMutablePointer<RustBuffer>,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> Data? in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceHostCallbacks.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return try uniffiObj.localStorageRead(
+                     key: try FfiConverterString.lift(key)
+                )
+            }
+
+            
+            let writeReturn = { uniffiOutReturn.pointee = FfiConverterOptionData.lower($0) }
+            uniffiTraitInterfaceCallWithError(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn,
+                lowerError: FfiConverterTypeHostStorageError_lower
+            )
+        },
+        localStorageWrite: { (
+            uniffiHandle: UInt64,
+            key: RustBuffer,
+            value: RustBuffer,
+            uniffiOutReturn: UnsafeMutableRawPointer,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> () in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceHostCallbacks.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return try uniffiObj.localStorageWrite(
+                     key: try FfiConverterString.lift(key),
+                     value: try FfiConverterData.lift(value)
+                )
+            }
+
+            
+            let writeReturn = { () }
+            uniffiTraitInterfaceCallWithError(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn,
+                lowerError: FfiConverterTypeHostStorageError_lower
+            )
+        },
+        localStorageClear: { (
+            uniffiHandle: UInt64,
+            key: RustBuffer,
+            uniffiOutReturn: UnsafeMutableRawPointer,
+            uniffiCallStatus: UnsafeMutablePointer<RustCallStatus>
+        ) in
+            let makeCall = {
+                () throws -> () in
+                guard let uniffiObj = try? FfiConverterCallbackInterfaceHostCallbacks.handleMap.get(handle: uniffiHandle) else {
+                    throw UniffiInternalError.unexpectedStaleHandle
+                }
+                return try uniffiObj.localStorageClear(
+                     key: try FfiConverterString.lift(key)
+                )
+            }
+
+            
+            let writeReturn = { () }
+            uniffiTraitInterfaceCallWithError(
+                callStatus: uniffiCallStatus,
+                makeCall: makeCall,
+                writeReturn: writeReturn,
+                lowerError: FfiConverterTypeHostStorageError_lower
+            )
+        },
+        uniffiFree: { (uniffiHandle: UInt64) -> () in
+            let result = try? FfiConverterCallbackInterfaceHostCallbacks.handleMap.remove(handle: uniffiHandle)
+            if result == nil {
+                print("Uniffi callback interface HostCallbacks: handle missing in uniffiFree")
+            }
+        }
+    )]
+}
+
+private func uniffiCallbackInitHostCallbacks() {
+    uniffi_truapi_server_fn_init_callback_vtable_hostcallbacks(UniffiCallbackInterfaceHostCallbacks.vtable)
+}
+
+// FfiConverter protocol for callback interfaces
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+fileprivate struct FfiConverterCallbackInterfaceHostCallbacks {
+    fileprivate static let handleMap = UniffiHandleMap<HostCallbacks>()
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+extension FfiConverterCallbackInterfaceHostCallbacks : FfiConverter {
+    typealias SwiftType = HostCallbacks
+    typealias FfiType = UInt64
+
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public static func lift(_ handle: UInt64) throws -> SwiftType {
+        try handleMap.get(handle: handle)
+    }
+
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> SwiftType {
+        let handle: UInt64 = try readInt(&buf)
+        return try lift(handle)
+    }
+
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public static func lower(_ v: SwiftType) -> UInt64 {
+        return handleMap.insert(obj: v)
+    }
+
+#if swift(>=5.8)
+    @_documentation(visibility: private)
+#endif
+    public static func write(_ v: SwiftType, into buf: inout [UInt8]) {
+        writeInt(&buf, lower(v))
+    }
+}
+
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterCallbackInterfaceHostCallbacks_lift(_ handle: UInt64) throws -> HostCallbacks {
+    return try FfiConverterCallbackInterfaceHostCallbacks.lift(handle)
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+public func FfiConverterCallbackInterfaceHostCallbacks_lower(_ v: HostCallbacks) -> UInt64 {
+    return FfiConverterCallbackInterfaceHostCallbacks.lower(v)
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+fileprivate struct FfiConverterOptionString: FfiConverterRustBuffer {
+    typealias SwiftType = String?
+
+    public static func write(_ value: SwiftType, into buf: inout [UInt8]) {
+        guard let value = value else {
+            writeInt(&buf, Int8(0))
+            return
+        }
+        writeInt(&buf, Int8(1))
+        FfiConverterString.write(value, into: &buf)
+    }
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> SwiftType {
+        switch try readInt(&buf) as Int8 {
+        case 0: return nil
+        case 1: return try FfiConverterString.read(from: &buf)
+        default: throw UniffiInternalError.unexpectedOptionalTag
+        }
+    }
+}
+
+#if swift(>=5.8)
+@_documentation(visibility: private)
+#endif
+fileprivate struct FfiConverterOptionData: FfiConverterRustBuffer {
+    typealias SwiftType = Data?
+
+    public static func write(_ value: SwiftType, into buf: inout [UInt8]) {
+        guard let value = value else {
+            writeInt(&buf, Int8(0))
+            return
+        }
+        writeInt(&buf, Int8(1))
+        FfiConverterData.write(value, into: &buf)
+    }
+
+    public static func read(from buf: inout (data: Data, offset: Data.Index)) throws -> SwiftType {
+        switch try readInt(&buf) as Int8 {
+        case 0: return nil
+        case 1: return try FfiConverterData.read(from: &buf)
+        default: throw UniffiInternalError.unexpectedOptionalTag
+        }
+    }
+}
+
+private enum InitializationResult {
+    case ok
+    case contractVersionMismatch
+    case apiChecksumMismatch
+}
+// Use a global variable to perform the versioning checks. Swift ensures that
+// the code inside is only computed once.
+private let initializationResult: InitializationResult = {
+    // Get the bindings contract version from our ComponentInterface
+    let bindings_contract_version = 29
+    // Get the scaffolding contract version by calling the into the dylib
+    let scaffolding_contract_version = ffi_truapi_server_uniffi_contract_version()
+    if bindings_contract_version != scaffolding_contract_version {
+        return InitializationResult.contractVersionMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_nativetruapicore_clear_active_session() != 49688) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_nativetruapicore_set_active_session() != 33211) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_nativetruapicore_start_ws_bridge() != 64697) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_nativetruapicore_stop_ws_bridge() != 16007) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_constructor_nativetruapicore_new() != 3488) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_hostcallbacks_on_core_log() != 50767) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_hostcallbacks_navigate_to() != 30730) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_hostcallbacks_push_notification() != 8367) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_hostcallbacks_device_permission() != 3079) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_hostcallbacks_remote_permission() != 1103) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_hostcallbacks_feature_supported() != 22483) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_read() != 16214) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_write() != 61540) {
+        return InitializationResult.apiChecksumMismatch
+    }
+    if (uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_clear() != 19429) {
+        return InitializationResult.apiChecksumMismatch
+    }
+
+    uniffiCallbackInitHostCallbacks()
+    return InitializationResult.ok
+}()
+
+// Make the ensure init function public so that other modules which have external type references to
+// our types can call it.
+public func uniffiEnsureTruapiServerInitialized() {
+    switch initializationResult {
+    case .ok:
+        break
+    case .contractVersionMismatch:
+        fatalError("UniFFI contract version mismatch: try cleaning and rebuilding your project")
+    case .apiChecksumMismatch:
+        fatalError("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+}
+
+// swiftlint:enable all
\ No newline at end of file
diff --git a/ios/truapi-host/Sources/truapi_serverFFI/include/module.modulemap b/ios/truapi-host/Sources/truapi_serverFFI/include/module.modulemap
new file mode 100644
index 00000000..49d064ea
--- /dev/null
+++ b/ios/truapi-host/Sources/truapi_serverFFI/include/module.modulemap
@@ -0,0 +1,7 @@
+module truapi_serverFFI {
+    header "truapi_serverFFI.h"
+    export *
+    use "Darwin"
+    use "_Builtin_stdbool"
+    use "_Builtin_stdint"
+}
\ No newline at end of file
diff --git a/ios/truapi-host/Sources/truapi_serverFFI/include/truapi_serverFFI.h b/ios/truapi-host/Sources/truapi_serverFFI/include/truapi_serverFFI.h
new file mode 100644
index 00000000..f0f0febf
--- /dev/null
+++ b/ios/truapi-host/Sources/truapi_serverFFI/include/truapi_serverFFI.h
@@ -0,0 +1,743 @@
+// This file was autogenerated by some hot garbage in the `uniffi` crate.
+// Trust me, you don't want to mess with it!
+
+#pragma once
+
+#include <stdbool.h>
+#include <stddef.h>
+#include <stdint.h>
+
+// The following structs are used to implement the lowest level
+// of the FFI, and thus useful to multiple uniffied crates.
+// We ensure they are declared exactly once, with a header guard, UNIFFI_SHARED_H.
+#ifdef UNIFFI_SHARED_H
+    // We also try to prevent mixing versions of shared uniffi header structs.
+    // If you add anything to the #else block, you must increment the version suffix in UNIFFI_SHARED_HEADER_V4
+    #ifndef UNIFFI_SHARED_HEADER_V4
+        #error Combining helper code from multiple versions of uniffi is not supported
+    #endif // ndef UNIFFI_SHARED_HEADER_V4
+#else
+#define UNIFFI_SHARED_H
+#define UNIFFI_SHARED_HEADER_V4
+// ⚠️ Attention: If you change this #else block (ending in `#endif // def UNIFFI_SHARED_H`) you *must* ⚠️
+// ⚠️ increment the version suffix in all instances of UNIFFI_SHARED_HEADER_V4 in this file.           ⚠️
+
+typedef struct RustBuffer
+{
+    uint64_t capacity;
+    uint64_t len;
+    uint8_t *_Nullable data;
+} RustBuffer;
+
+typedef struct ForeignBytes
+{
+    int32_t len;
+    const uint8_t *_Nullable data;
+} ForeignBytes;
+
+// Error definitions
+typedef struct RustCallStatus {
+    int8_t code;
+    RustBuffer errorBuf;
+} RustCallStatus;
+
+// ⚠️ Attention: If you change this #else block (ending in `#endif // def UNIFFI_SHARED_H`) you *must* ⚠️
+// ⚠️ increment the version suffix in all instances of UNIFFI_SHARED_HEADER_V4 in this file.           ⚠️
+#endif // def UNIFFI_SHARED_H
+#ifndef UNIFFI_FFIDEF_RUST_FUTURE_CONTINUATION_CALLBACK
+#define UNIFFI_FFIDEF_RUST_FUTURE_CONTINUATION_CALLBACK
+typedef void (*UniffiRustFutureContinuationCallback)(uint64_t, int8_t
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_FREE
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_FREE
+typedef void (*UniffiForeignFutureFree)(uint64_t
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_FREE
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_FREE
+typedef void (*UniffiCallbackInterfaceFree)(uint64_t
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE
+typedef struct UniffiForeignFuture {
+    uint64_t handle;
+    UniffiForeignFutureFree _Nonnull free;
+} UniffiForeignFuture;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_U8
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_U8
+typedef struct UniffiForeignFutureStructU8 {
+    uint8_t returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructU8;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_U8
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_U8
+typedef void (*UniffiForeignFutureCompleteU8)(uint64_t, UniffiForeignFutureStructU8
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_I8
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_I8
+typedef struct UniffiForeignFutureStructI8 {
+    int8_t returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructI8;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_I8
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_I8
+typedef void (*UniffiForeignFutureCompleteI8)(uint64_t, UniffiForeignFutureStructI8
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_U16
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_U16
+typedef struct UniffiForeignFutureStructU16 {
+    uint16_t returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructU16;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_U16
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_U16
+typedef void (*UniffiForeignFutureCompleteU16)(uint64_t, UniffiForeignFutureStructU16
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_I16
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_I16
+typedef struct UniffiForeignFutureStructI16 {
+    int16_t returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructI16;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_I16
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_I16
+typedef void (*UniffiForeignFutureCompleteI16)(uint64_t, UniffiForeignFutureStructI16
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_U32
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_U32
+typedef struct UniffiForeignFutureStructU32 {
+    uint32_t returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructU32;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_U32
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_U32
+typedef void (*UniffiForeignFutureCompleteU32)(uint64_t, UniffiForeignFutureStructU32
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_I32
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_I32
+typedef struct UniffiForeignFutureStructI32 {
+    int32_t returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructI32;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_I32
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_I32
+typedef void (*UniffiForeignFutureCompleteI32)(uint64_t, UniffiForeignFutureStructI32
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_U64
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_U64
+typedef struct UniffiForeignFutureStructU64 {
+    uint64_t returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructU64;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_U64
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_U64
+typedef void (*UniffiForeignFutureCompleteU64)(uint64_t, UniffiForeignFutureStructU64
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_I64
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_I64
+typedef struct UniffiForeignFutureStructI64 {
+    int64_t returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructI64;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_I64
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_I64
+typedef void (*UniffiForeignFutureCompleteI64)(uint64_t, UniffiForeignFutureStructI64
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_F32
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_F32
+typedef struct UniffiForeignFutureStructF32 {
+    float returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructF32;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_F32
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_F32
+typedef void (*UniffiForeignFutureCompleteF32)(uint64_t, UniffiForeignFutureStructF32
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_F64
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_F64
+typedef struct UniffiForeignFutureStructF64 {
+    double returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructF64;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_F64
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_F64
+typedef void (*UniffiForeignFutureCompleteF64)(uint64_t, UniffiForeignFutureStructF64
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_POINTER
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_POINTER
+typedef struct UniffiForeignFutureStructPointer {
+    void*_Nonnull returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructPointer;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_POINTER
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_POINTER
+typedef void (*UniffiForeignFutureCompletePointer)(uint64_t, UniffiForeignFutureStructPointer
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_RUST_BUFFER
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_RUST_BUFFER
+typedef struct UniffiForeignFutureStructRustBuffer {
+    RustBuffer returnValue;
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructRustBuffer;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_RUST_BUFFER
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_RUST_BUFFER
+typedef void (*UniffiForeignFutureCompleteRustBuffer)(uint64_t, UniffiForeignFutureStructRustBuffer
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_VOID
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_STRUCT_VOID
+typedef struct UniffiForeignFutureStructVoid {
+    RustCallStatus callStatus;
+} UniffiForeignFutureStructVoid;
+
+#endif
+#ifndef UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_VOID
+#define UNIFFI_FFIDEF_FOREIGN_FUTURE_COMPLETE_VOID
+typedef void (*UniffiForeignFutureCompleteVoid)(uint64_t, UniffiForeignFutureStructVoid
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD0
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD0
+typedef void (*UniffiCallbackInterfaceHostCallbacksMethod0)(uint64_t, RustBuffer, RustBuffer, void* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD1
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD1
+typedef void (*UniffiCallbackInterfaceHostCallbacksMethod1)(uint64_t, RustBuffer, void* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD2
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD2
+typedef void (*UniffiCallbackInterfaceHostCallbacksMethod2)(uint64_t, RustBuffer, void* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD3
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD3
+typedef void (*UniffiCallbackInterfaceHostCallbacksMethod3)(uint64_t, RustBuffer, int8_t* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD4
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD4
+typedef void (*UniffiCallbackInterfaceHostCallbacksMethod4)(uint64_t, RustBuffer, int8_t* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD5
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD5
+typedef void (*UniffiCallbackInterfaceHostCallbacksMethod5)(uint64_t, RustBuffer, int8_t* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD6
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD6
+typedef void (*UniffiCallbackInterfaceHostCallbacksMethod6)(uint64_t, RustBuffer, RustBuffer* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD7
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD7
+typedef void (*UniffiCallbackInterfaceHostCallbacksMethod7)(uint64_t, RustBuffer, RustBuffer, void* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD8
+#define UNIFFI_FFIDEF_CALLBACK_INTERFACE_HOST_CALLBACKS_METHOD8
+typedef void (*UniffiCallbackInterfaceHostCallbacksMethod8)(uint64_t, RustBuffer, void* _Nonnull, 
+        RustCallStatus *_Nonnull uniffiCallStatus
+    );
+
+#endif
+#ifndef UNIFFI_FFIDEF_V_TABLE_CALLBACK_INTERFACE_HOST_CALLBACKS
+#define UNIFFI_FFIDEF_V_TABLE_CALLBACK_INTERFACE_HOST_CALLBACKS
+typedef struct UniffiVTableCallbackInterfaceHostCallbacks {
+    UniffiCallbackInterfaceHostCallbacksMethod0 _Nonnull onCoreLog;
+    UniffiCallbackInterfaceHostCallbacksMethod1 _Nonnull navigateTo;
+    UniffiCallbackInterfaceHostCallbacksMethod2 _Nonnull pushNotification;
+    UniffiCallbackInterfaceHostCallbacksMethod3 _Nonnull devicePermission;
+    UniffiCallbackInterfaceHostCallbacksMethod4 _Nonnull remotePermission;
+    UniffiCallbackInterfaceHostCallbacksMethod5 _Nonnull featureSupported;
+    UniffiCallbackInterfaceHostCallbacksMethod6 _Nonnull localStorageRead;
+    UniffiCallbackInterfaceHostCallbacksMethod7 _Nonnull localStorageWrite;
+    UniffiCallbackInterfaceHostCallbacksMethod8 _Nonnull localStorageClear;
+    UniffiCallbackInterfaceFree _Nonnull uniffiFree;
+} UniffiVTableCallbackInterfaceHostCallbacks;
+
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_CLONE_NATIVETRUAPICORE
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_CLONE_NATIVETRUAPICORE
+void*_Nonnull uniffi_truapi_server_fn_clone_nativetruapicore(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_FREE_NATIVETRUAPICORE
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_FREE_NATIVETRUAPICORE
+void uniffi_truapi_server_fn_free_nativetruapicore(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_CONSTRUCTOR_NATIVETRUAPICORE_NEW
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_CONSTRUCTOR_NATIVETRUAPICORE_NEW
+void*_Nonnull uniffi_truapi_server_fn_constructor_nativetruapicore_new(uint64_t callbacks, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_METHOD_NATIVETRUAPICORE_CLEAR_ACTIVE_SESSION
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_METHOD_NATIVETRUAPICORE_CLEAR_ACTIVE_SESSION
+void uniffi_truapi_server_fn_method_nativetruapicore_clear_active_session(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_METHOD_NATIVETRUAPICORE_SET_ACTIVE_SESSION
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_METHOD_NATIVETRUAPICORE_SET_ACTIVE_SESSION
+int8_t uniffi_truapi_server_fn_method_nativetruapicore_set_active_session(void*_Nonnull ptr, RustBuffer pubkey, RustBuffer lite_username, RustBuffer full_username, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_METHOD_NATIVETRUAPICORE_START_WS_BRIDGE
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_METHOD_NATIVETRUAPICORE_START_WS_BRIDGE
+RustBuffer uniffi_truapi_server_fn_method_nativetruapicore_start_ws_bridge(void*_Nonnull ptr, uint16_t bind_port, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_METHOD_NATIVETRUAPICORE_STOP_WS_BRIDGE
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_METHOD_NATIVETRUAPICORE_STOP_WS_BRIDGE
+void uniffi_truapi_server_fn_method_nativetruapicore_stop_ws_bridge(void*_Nonnull ptr, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_INIT_CALLBACK_VTABLE_HOSTCALLBACKS
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_FN_INIT_CALLBACK_VTABLE_HOSTCALLBACKS
+void uniffi_truapi_server_fn_init_callback_vtable_hostcallbacks(const UniffiVTableCallbackInterfaceHostCallbacks* _Nonnull vtable
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUSTBUFFER_ALLOC
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUSTBUFFER_ALLOC
+RustBuffer ffi_truapi_server_rustbuffer_alloc(uint64_t size, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUSTBUFFER_FROM_BYTES
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUSTBUFFER_FROM_BYTES
+RustBuffer ffi_truapi_server_rustbuffer_from_bytes(ForeignBytes bytes, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUSTBUFFER_FREE
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUSTBUFFER_FREE
+void ffi_truapi_server_rustbuffer_free(RustBuffer buf, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUSTBUFFER_RESERVE
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUSTBUFFER_RESERVE
+RustBuffer ffi_truapi_server_rustbuffer_reserve(RustBuffer buf, uint64_t additional, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_U8
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_U8
+void ffi_truapi_server_rust_future_poll_u8(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_U8
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_U8
+void ffi_truapi_server_rust_future_cancel_u8(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_U8
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_U8
+void ffi_truapi_server_rust_future_free_u8(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_U8
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_U8
+uint8_t ffi_truapi_server_rust_future_complete_u8(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_I8
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_I8
+void ffi_truapi_server_rust_future_poll_i8(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_I8
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_I8
+void ffi_truapi_server_rust_future_cancel_i8(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_I8
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_I8
+void ffi_truapi_server_rust_future_free_i8(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_I8
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_I8
+int8_t ffi_truapi_server_rust_future_complete_i8(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_U16
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_U16
+void ffi_truapi_server_rust_future_poll_u16(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_U16
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_U16
+void ffi_truapi_server_rust_future_cancel_u16(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_U16
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_U16
+void ffi_truapi_server_rust_future_free_u16(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_U16
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_U16
+uint16_t ffi_truapi_server_rust_future_complete_u16(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_I16
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_I16
+void ffi_truapi_server_rust_future_poll_i16(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_I16
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_I16
+void ffi_truapi_server_rust_future_cancel_i16(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_I16
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_I16
+void ffi_truapi_server_rust_future_free_i16(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_I16
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_I16
+int16_t ffi_truapi_server_rust_future_complete_i16(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_U32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_U32
+void ffi_truapi_server_rust_future_poll_u32(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_U32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_U32
+void ffi_truapi_server_rust_future_cancel_u32(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_U32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_U32
+void ffi_truapi_server_rust_future_free_u32(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_U32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_U32
+uint32_t ffi_truapi_server_rust_future_complete_u32(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_I32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_I32
+void ffi_truapi_server_rust_future_poll_i32(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_I32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_I32
+void ffi_truapi_server_rust_future_cancel_i32(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_I32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_I32
+void ffi_truapi_server_rust_future_free_i32(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_I32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_I32
+int32_t ffi_truapi_server_rust_future_complete_i32(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_U64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_U64
+void ffi_truapi_server_rust_future_poll_u64(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_U64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_U64
+void ffi_truapi_server_rust_future_cancel_u64(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_U64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_U64
+void ffi_truapi_server_rust_future_free_u64(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_U64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_U64
+uint64_t ffi_truapi_server_rust_future_complete_u64(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_I64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_I64
+void ffi_truapi_server_rust_future_poll_i64(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_I64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_I64
+void ffi_truapi_server_rust_future_cancel_i64(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_I64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_I64
+void ffi_truapi_server_rust_future_free_i64(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_I64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_I64
+int64_t ffi_truapi_server_rust_future_complete_i64(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_F32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_F32
+void ffi_truapi_server_rust_future_poll_f32(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_F32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_F32
+void ffi_truapi_server_rust_future_cancel_f32(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_F32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_F32
+void ffi_truapi_server_rust_future_free_f32(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_F32
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_F32
+float ffi_truapi_server_rust_future_complete_f32(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_F64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_F64
+void ffi_truapi_server_rust_future_poll_f64(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_F64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_F64
+void ffi_truapi_server_rust_future_cancel_f64(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_F64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_F64
+void ffi_truapi_server_rust_future_free_f64(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_F64
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_F64
+double ffi_truapi_server_rust_future_complete_f64(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_POINTER
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_POINTER
+void ffi_truapi_server_rust_future_poll_pointer(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_POINTER
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_POINTER
+void ffi_truapi_server_rust_future_cancel_pointer(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_POINTER
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_POINTER
+void ffi_truapi_server_rust_future_free_pointer(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_POINTER
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_POINTER
+void*_Nonnull ffi_truapi_server_rust_future_complete_pointer(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_RUST_BUFFER
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_RUST_BUFFER
+void ffi_truapi_server_rust_future_poll_rust_buffer(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_RUST_BUFFER
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_RUST_BUFFER
+void ffi_truapi_server_rust_future_cancel_rust_buffer(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_RUST_BUFFER
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_RUST_BUFFER
+void ffi_truapi_server_rust_future_free_rust_buffer(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_RUST_BUFFER
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_RUST_BUFFER
+RustBuffer ffi_truapi_server_rust_future_complete_rust_buffer(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_VOID
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_POLL_VOID
+void ffi_truapi_server_rust_future_poll_void(uint64_t handle, UniffiRustFutureContinuationCallback _Nonnull callback, uint64_t callback_data
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_VOID
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_CANCEL_VOID
+void ffi_truapi_server_rust_future_cancel_void(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_VOID
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_FREE_VOID
+void ffi_truapi_server_rust_future_free_void(uint64_t handle
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_VOID
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_RUST_FUTURE_COMPLETE_VOID
+void ffi_truapi_server_rust_future_complete_void(uint64_t handle, RustCallStatus *_Nonnull out_status
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_NATIVETRUAPICORE_CLEAR_ACTIVE_SESSION
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_NATIVETRUAPICORE_CLEAR_ACTIVE_SESSION
+uint16_t uniffi_truapi_server_checksum_method_nativetruapicore_clear_active_session(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_NATIVETRUAPICORE_SET_ACTIVE_SESSION
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_NATIVETRUAPICORE_SET_ACTIVE_SESSION
+uint16_t uniffi_truapi_server_checksum_method_nativetruapicore_set_active_session(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_NATIVETRUAPICORE_START_WS_BRIDGE
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_NATIVETRUAPICORE_START_WS_BRIDGE
+uint16_t uniffi_truapi_server_checksum_method_nativetruapicore_start_ws_bridge(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_NATIVETRUAPICORE_STOP_WS_BRIDGE
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_NATIVETRUAPICORE_STOP_WS_BRIDGE
+uint16_t uniffi_truapi_server_checksum_method_nativetruapicore_stop_ws_bridge(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_CONSTRUCTOR_NATIVETRUAPICORE_NEW
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_CONSTRUCTOR_NATIVETRUAPICORE_NEW
+uint16_t uniffi_truapi_server_checksum_constructor_nativetruapicore_new(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_ON_CORE_LOG
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_ON_CORE_LOG
+uint16_t uniffi_truapi_server_checksum_method_hostcallbacks_on_core_log(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_NAVIGATE_TO
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_NAVIGATE_TO
+uint16_t uniffi_truapi_server_checksum_method_hostcallbacks_navigate_to(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_PUSH_NOTIFICATION
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_PUSH_NOTIFICATION
+uint16_t uniffi_truapi_server_checksum_method_hostcallbacks_push_notification(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_DEVICE_PERMISSION
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_DEVICE_PERMISSION
+uint16_t uniffi_truapi_server_checksum_method_hostcallbacks_device_permission(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_REMOTE_PERMISSION
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_REMOTE_PERMISSION
+uint16_t uniffi_truapi_server_checksum_method_hostcallbacks_remote_permission(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_FEATURE_SUPPORTED
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_FEATURE_SUPPORTED
+uint16_t uniffi_truapi_server_checksum_method_hostcallbacks_feature_supported(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_LOCAL_STORAGE_READ
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_LOCAL_STORAGE_READ
+uint16_t uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_read(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_LOCAL_STORAGE_WRITE
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_LOCAL_STORAGE_WRITE
+uint16_t uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_write(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_LOCAL_STORAGE_CLEAR
+#define UNIFFI_FFIDEF_UNIFFI_TRUAPI_SERVER_CHECKSUM_METHOD_HOSTCALLBACKS_LOCAL_STORAGE_CLEAR
+uint16_t uniffi_truapi_server_checksum_method_hostcallbacks_local_storage_clear(void
+    
+);
+#endif
+#ifndef UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_UNIFFI_CONTRACT_VERSION
+#define UNIFFI_FFIDEF_FFI_TRUAPI_SERVER_UNIFFI_CONTRACT_VERSION
+uint32_t ffi_truapi_server_uniffi_contract_version(void
+    
+);
+#endif
+
diff --git a/jitpack.yml b/jitpack.yml
new file mode 100644
index 00000000..5d6b033d
--- /dev/null
+++ b/jitpack.yml
@@ -0,0 +1,13 @@
+# JitPack build configuration.
+#
+# JitPack consumes this file when a consumer pulls a tag from
+# https://jitpack.io/com.github.paritytech.truapi/. It tells JitPack
+# which JDK to use and which Gradle command to run to produce the
+# Maven publication. Consumers depend on the resulting artifact as
+# `com.github.paritytech.truapi:truapi-host:<tag>`.
+
+jdk:
+  - openjdk17
+
+install:
+  - gradle :truapi-host:publishReleasePublicationToMavenLocal
diff --git a/js/packages/truapi-host-wasm/.gitignore b/js/packages/truapi-host-wasm/.gitignore
new file mode 100644
index 00000000..13529215
--- /dev/null
+++ b/js/packages/truapi-host-wasm/.gitignore
@@ -0,0 +1,12 @@
+node_modules/
+*.tsbuildinfo
+# Ignore compiled TS output (top-level + the web/ and electron/ entry subdirs)
+# but keep the committed WASM artifacts under dist/wasm/.
+dist/**/*.js
+dist/**/*.d.ts
+dist/**/*.js.map
+dist/**/*.d.ts.map
+dist/generated/
+!dist/wasm/**
+# Codegen output from truapi-codegen --platform-ts-output.
+src/generated/
diff --git a/js/packages/truapi-host-wasm/README.md b/js/packages/truapi-host-wasm/README.md
new file mode 100644
index 00000000..a6ca661a
--- /dev/null
+++ b/js/packages/truapi-host-wasm/README.md
@@ -0,0 +1,96 @@
+# @parity/truapi-host-wasm
+
+WASM-backed TrUAPI host runtime. It embeds the `truapi-server` Rust core (compiled to WASM) and
+provides the `Provider` factories that drive it, plus per-environment integration entry points.
+It is the counterpart to the native Android/iOS host shells.
+
+> This is distinct from [`@parity/truapi-host`](../truapi-host), which is the host-side codegen +
+> dispatcher for hosts that bring their **own** runtime and do not embed the shared Rust core.
+
+## Entry points
+
+The package exposes tree-shakeable subpath exports — import only what your environment needs:
+
+| Import                                     | Provides                                                                                                                |
+| ------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------- |
+| `@parity/truapi-host-wasm`                 | Core: `createWasmProvider`, `createNodeWasmProvider`, `createHostServer`, the dispatcher adapter, and the shared types. |
+| `@parity/truapi-host-wasm/web`             | Browser host: `createIframeHost` (iframe MessageChannel handshake) and `createWebWorkerProvider`.                       |
+| `@parity/truapi-host-wasm/electron`        | `createElectronProvider` — wraps an Electron `MessagePortMain` as a `Provider`.                                         |
+| `@parity/truapi-host-wasm/worker-runtime`  | Web Worker entrypoint (import with your bundler's `?worker` suffix) so the WASM core runs off the page main thread.     |
+| `@parity/truapi-host-wasm/wasm/{web,node}` | The raw `wasm-bindgen` glue, if you need to instantiate the core yourself.                                              |
+
+## Pre-built WASM artefacts
+
+The committed bundles under `dist/wasm/web/` and `dist/wasm/node/` are built without smoldot
+(`wasm-pack build --no-default-features`). Hosts that already manage chain access through their own
+JSON-RPC provider wire `chainConnect` into the callbacks and never touch smoldot. The bundled WASM
+is about 1 MB (release build with `wasm-opt`).
+
+To rebuild after editing `rust/crates/truapi-server` (requires `wasm-pack` on PATH):
+
+```bash
+npm run build:wasm   # or `make wasm` from the repo root
+```
+
+## Example — Node / Electron
+
+```ts
+import {
+  createNodeWasmProvider,
+  createHostServer,
+} from "@parity/truapi-host-wasm";
+import { createElectronProvider } from "@parity/truapi-host-wasm/electron";
+
+const provider = await createNodeWasmProvider({
+  navigateTo: async (url) => {
+    /* shell.openExternal(url) */
+  },
+  pushNotification: async () => {},
+  devicePermission: async () => true,
+  remotePermission: async () => true,
+  featureSupported: async (payload) => payload,
+  localStorageRead: async () => undefined,
+  localStorageWrite: async () => {},
+  localStorageClear: async () => {},
+  accountConnectionStatusSubscribe: () => {},
+  // ...remaining account / signing / statement-store callbacks
+});
+
+const server = createHostServer(provider, [
+  /* dispatch entries */
+]);
+```
+
+## Example — browser (Web Worker)
+
+```ts
+import HostWorker from "@parity/truapi-host-wasm/worker-runtime?worker";
+import { createWebWorkerProvider } from "@parity/truapi-host-wasm/web";
+
+const provider = await createWebWorkerProvider(new HostWorker(), callbacks);
+```
+
+`@parity/truapi-host-wasm/web` also exports `createIframeHost` for the protocol-iframe
+MessageChannel handshake.
+
+## Publishing
+
+TODO: npm publish workflow not yet wired. A release-process discussion is needed before adding a
+publish job to `.github/workflows/`. Until then, consumers depend on the package via the workspace
+`file:` link or by publishing locally with `npm pack`.
+
+## Architecture
+
+```text
+JS host code
+  protocol handlers / typed callbacks
+       |
+       v
+createHostServer (re-exported from @parity/truapi-host) <-- bytes --> Provider
+                                                                        |
+                                                                        v
+                                                      createWasmProvider / Worker
+                                                                        |
+                                                                        v
+                                                            truapi-server WASM core
+```
diff --git a/js/packages/truapi-host-wasm/dist/wasm/node/README.md b/js/packages/truapi-host-wasm/dist/wasm/node/README.md
new file mode 100644
index 00000000..4f30f9a0
--- /dev/null
+++ b/js/packages/truapi-host-wasm/dist/wasm/node/README.md
@@ -0,0 +1,31 @@
+# truapi-server
+
+*Runtime core for TrUAPI: dispatcher, protocol frames, SCALE-coded wire envelope.*
+
+## What this crate is for
+
+`truapi-server` is the runtime that turns trait implementations of the
+`truapi` API into a working host. It owns:
+
+- the [`ProtocolMessage`] wire envelope and SCALE codec
+- the [`Dispatcher`] that routes incoming frames to per-method handlers
+- the subscription lifecycle (start/receive/stop/interrupt)
+- the [`Transport`] trait that platform-specific IPC backends implement
+- the auto-generated dispatcher/wire-table tables shipped under
+  [`crate::generated`]
+
+## Wire envelope
+
+Every frame on the wire is encoded as:
+
+```text
+[requestId: SCALE str][discriminant: u8][payload bytes...]
+```
+
+The discriminant maps to a method/kind tag via the auto-generated
+[`crate::generated::wire_table::WIRE_TABLE`]. Method ordering is part of
+the wire protocol; only ever append.
+
+The payload bytes are the SCALE-encoded inner value, inlined without a
+length prefix. In-memory we keep the tag as a `String` so the dispatcher
+(which keys on method name) is independent of the wire numbering.
diff --git a/js/packages/truapi-host-wasm/dist/wasm/node/package.json b/js/packages/truapi-host-wasm/dist/wasm/node/package.json
new file mode 100644
index 00000000..c25f77a9
--- /dev/null
+++ b/js/packages/truapi-host-wasm/dist/wasm/node/package.json
@@ -0,0 +1,13 @@
+{
+  "name": "truapi-server",
+  "description": "TrUAPI server runtime: dispatcher, frames, SCALE, streams",
+  "version": "0.1.0",
+  "license": "MIT AND Apache-2.0",
+  "files": [
+    "truapi_server_bg.wasm",
+    "truapi_server.js",
+    "truapi_server.d.ts"
+  ],
+  "main": "truapi_server.js",
+  "types": "truapi_server.d.ts"
+}
\ No newline at end of file
diff --git a/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server.d.ts b/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server.d.ts
new file mode 100644
index 00000000..0281fb58
--- /dev/null
+++ b/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server.d.ts
@@ -0,0 +1,45 @@
+/* tslint:disable */
+/* eslint-disable */
+
+/**
+ * JS-callable handle to the TrUAPI core. Constructed once per shell boot.
+ */
+export class WasmTrUApiCore {
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Drop the currently-paired session.
+     */
+    clearActiveSession(): void;
+    /**
+     * Tear down the bridge. Invokes the JS-side `dispose` callback so the
+     * host can drop its end of the wiring.
+     */
+    dispose(): void;
+    /**
+     * Build the core from a JS callbacks object. The object must define
+     * every host capability the [`truapi_platform::Platform`] trait set
+     * requires (camelCase property names; see the source for the full
+     * list).
+     */
+    constructor(callbacks: any);
+    /**
+     * Push a SCALE-encoded protocol frame into the dispatcher. Responses
+     * (and subscription items) flow back through the `emitFrame`
+     * callback.
+     */
+    receiveFromProduct(frame: Uint8Array): Promise<void>;
+    /**
+     * Push the currently-paired session into the core. Called by the
+     * host shell whenever the user pairs / unpairs. `pubkey` must be
+     * exactly 32 bytes (sr25519 root public key); usernames may be
+     * null / undefined when the identity record carries no value.
+     */
+    setActiveSession(pubkey: Uint8Array, lite_username?: string | null, full_username?: string | null): void;
+}
+
+/**
+ * Toggle [`crate::debug_log`] output. Hosts read their `truapi:debug`
+ * flag (web: localStorage) and call this once during boot.
+ */
+export function setDebugEnabled(enabled: boolean): void;
diff --git a/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server.js b/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server.js
new file mode 100644
index 00000000..d9270120
--- /dev/null
+++ b/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server.js
@@ -0,0 +1,547 @@
+/* @ts-self-types="./truapi_server.d.ts" */
+
+/**
+ * JS-callable handle to the TrUAPI core. Constructed once per shell boot.
+ */
+class WasmTrUApiCore {
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        WasmTrUApiCoreFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_wasmtruapicore_free(ptr, 0);
+    }
+    /**
+     * Drop the currently-paired session.
+     */
+    clearActiveSession() {
+        wasm.wasmtruapicore_clearActiveSession(this.__wbg_ptr);
+    }
+    /**
+     * Tear down the bridge. Invokes the JS-side `dispose` callback so the
+     * host can drop its end of the wiring.
+     */
+    dispose() {
+        const ret = wasm.wasmtruapicore_dispose(this.__wbg_ptr);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
+    /**
+     * Build the core from a JS callbacks object. The object must define
+     * every host capability the [`truapi_platform::Platform`] trait set
+     * requires (camelCase property names; see the source for the full
+     * list).
+     * @param {any} callbacks
+     */
+    constructor(callbacks) {
+        const ret = wasm.wasmtruapicore_new(callbacks);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        this.__wbg_ptr = ret[0];
+        WasmTrUApiCoreFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+    /**
+     * Push a SCALE-encoded protocol frame into the dispatcher. Responses
+     * (and subscription items) flow back through the `emitFrame`
+     * callback.
+     * @param {Uint8Array} frame
+     * @returns {Promise<void>}
+     */
+    receiveFromProduct(frame) {
+        const ptr0 = passArray8ToWasm0(frame, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.wasmtruapicore_receiveFromProduct(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Push the currently-paired session into the core. Called by the
+     * host shell whenever the user pairs / unpairs. `pubkey` must be
+     * exactly 32 bytes (sr25519 root public key); usernames may be
+     * null / undefined when the identity record carries no value.
+     * @param {Uint8Array} pubkey
+     * @param {string | null} [lite_username]
+     * @param {string | null} [full_username]
+     */
+    setActiveSession(pubkey, lite_username, full_username) {
+        const ptr0 = passArray8ToWasm0(pubkey, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        var ptr1 = isLikeNone(lite_username) ? 0 : passStringToWasm0(lite_username, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len1 = WASM_VECTOR_LEN;
+        var ptr2 = isLikeNone(full_username) ? 0 : passStringToWasm0(full_username, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len2 = WASM_VECTOR_LEN;
+        const ret = wasm.wasmtruapicore_setActiveSession(this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
+}
+if (Symbol.dispose) WasmTrUApiCore.prototype[Symbol.dispose] = WasmTrUApiCore.prototype.free;
+exports.WasmTrUApiCore = WasmTrUApiCore;
+
+/**
+ * Toggle [`crate::debug_log`] output. Hosts read their `truapi:debug`
+ * flag (web: localStorage) and call this once during boot.
+ * @param {boolean} enabled
+ */
+function setDebugEnabled(enabled) {
+    wasm.setDebugEnabled(enabled);
+}
+exports.setDebugEnabled = setDebugEnabled;
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg___wbindgen_boolean_get_2304fb8c853028c8: function(arg0) {
+            const v = arg0;
+            const ret = typeof(v) === 'boolean' ? v : undefined;
+            return isLikeNone(ret) ? 0xFFFFFF : ret ? 1 : 0;
+        },
+        __wbg___wbindgen_debug_string_edece8177ad01481: function(arg0, arg1) {
+            const ret = debugString(arg1);
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_is_function_5cd60d5cf78b4eef: function(arg0) {
+            const ret = typeof(arg0) === 'function';
+            return ret;
+        },
+        __wbg___wbindgen_is_null_2042690d351e14f0: function(arg0) {
+            const ret = arg0 === null;
+            return ret;
+        },
+        __wbg___wbindgen_is_undefined_35bb9f4c7fd651d5: function(arg0) {
+            const ret = arg0 === undefined;
+            return ret;
+        },
+        __wbg___wbindgen_string_get_d109740c0d18f4d7: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'string' ? obj : undefined;
+            var ptr1 = isLikeNone(ret) ? 0 : passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            var len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_throw_9c31b086c2b26051: function(arg0, arg1) {
+            throw new Error(getStringFromWasm0(arg0, arg1));
+        },
+        __wbg__wbg_cb_unref_3fa391f3fcdb55f8: function(arg0) {
+            arg0._wbg_cb_unref();
+        },
+        __wbg_call_13665d9f14390edc: function() { return handleError(function (arg0, arg1) {
+            const ret = arg0.call(arg1);
+            return ret;
+        }, arguments); },
+        __wbg_call_dfde26266607c996: function() { return handleError(function (arg0, arg1, arg2) {
+            const ret = arg0.call(arg1, arg2);
+            return ret;
+        }, arguments); },
+        __wbg_call_faa0a261f288f846: function() { return handleError(function (arg0, arg1, arg2, arg3) {
+            const ret = arg0.call(arg1, arg2, arg3);
+            return ret;
+        }, arguments); },
+        __wbg_error_a6fa202b58aa1cd3: function(arg0, arg1) {
+            let deferred0_0;
+            let deferred0_1;
+            try {
+                deferred0_0 = arg0;
+                deferred0_1 = arg1;
+                console.error(getStringFromWasm0(arg0, arg1));
+            } finally {
+                wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
+            }
+        },
+        __wbg_error_f085d7e62279b703: function(arg0) {
+            console.error(arg0);
+        },
+        __wbg_get_dcf82ab8aad1a593: function() { return handleError(function (arg0, arg1) {
+            const ret = Reflect.get(arg0, arg1);
+            return ret;
+        }, arguments); },
+        __wbg_instanceof_Error_b3f7e146d654031a: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Error;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_instanceof_Promise_09012cfa9708520a: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Promise;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_instanceof_Uint8Array_abd07d4bd221d50b: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Uint8Array;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_length_56fcd3e2b7e0299d: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_message_324ac511aeaf710e: function(arg0) {
+            const ret = arg0.message;
+            return ret;
+        },
+        __wbg_new_227d7c05414eb861: function() {
+            const ret = new Error();
+            return ret;
+        },
+        __wbg_new_from_slice_269e35316ed2d061: function(arg0, arg1) {
+            const ret = new Uint8Array(getArrayU8FromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_new_no_args_f476b292f3fd1dc0: function(arg0, arg1) {
+            const ret = new Function(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_new_typed_c072c4ce9a2a0cdf: function(arg0, arg1) {
+            try {
+                var state0 = {a: arg0, b: arg1};
+                var cb0 = (arg0, arg1) => {
+                    const a = state0.a;
+                    state0.a = 0;
+                    try {
+                        return wasm_bindgen__convert__closures_____invoke__h03479e65e098429f(a, state0.b, arg0, arg1);
+                    } finally {
+                        state0.a = a;
+                    }
+                };
+                const ret = new Promise(cb0);
+                return ret;
+            } finally {
+                state0.a = 0;
+            }
+        },
+        __wbg_prototypesetcall_5f9bdc8d75e07276: function(arg0, arg1, arg2) {
+            Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
+        },
+        __wbg_queueMicrotask_78d584b53af520f5: function(arg0) {
+            const ret = arg0.queueMicrotask;
+            return ret;
+        },
+        __wbg_queueMicrotask_b39ea83c7f01971a: function(arg0) {
+            queueMicrotask(arg0);
+        },
+        __wbg_resolve_d17db9352f5a220e: function(arg0) {
+            const ret = Promise.resolve(arg0);
+            return ret;
+        },
+        __wbg_stack_3b0d974bbf31e44f: function(arg0, arg1) {
+            const ret = arg1.stack;
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg_static_accessor_GLOBAL_THIS_02344c9b09eb08a9: function() {
+            const ret = typeof globalThis === 'undefined' ? null : globalThis;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_GLOBAL_ac6d4ac874d5cd54: function() {
+            const ret = typeof global === 'undefined' ? null : global;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_SELF_9b2406c23aeb2023: function() {
+            const ret = typeof self === 'undefined' ? null : self;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_WINDOW_b34d2126934e16ba: function() {
+            const ret = typeof window === 'undefined' ? null : window;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_then_837494e384b37459: function(arg0, arg1) {
+            const ret = arg0.then(arg1);
+            return ret;
+        },
+        __wbg_then_bd927500e8905df2: function(arg0, arg1, arg2) {
+            const ret = arg0.then(arg1, arg2);
+            return ret;
+        },
+        __wbindgen_cast_0000000000000001: function(arg0, arg1) {
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 330, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h0e369f98e8ad4df9);
+            return ret;
+        },
+        __wbindgen_cast_0000000000000002: function(arg0, arg1) {
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 373, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h7f23ba22e0948386);
+            return ret;
+        },
+        __wbindgen_cast_0000000000000003: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_init_externref_table: function() {
+            const table = wasm.__wbindgen_externrefs;
+            const offset = table.grow(4);
+            table.set(0, undefined);
+            table.set(offset + 0, undefined);
+            table.set(offset + 1, null);
+            table.set(offset + 2, true);
+            table.set(offset + 3, false);
+        },
+    };
+    return {
+        __proto__: null,
+        "./truapi_server_bg.js": import0,
+    };
+}
+
+function wasm_bindgen__convert__closures_____invoke__h0e369f98e8ad4df9(arg0, arg1, arg2) {
+    wasm.wasm_bindgen__convert__closures_____invoke__h0e369f98e8ad4df9(arg0, arg1, arg2);
+}
+
+function wasm_bindgen__convert__closures_____invoke__h7f23ba22e0948386(arg0, arg1, arg2) {
+    const ret = wasm.wasm_bindgen__convert__closures_____invoke__h7f23ba22e0948386(arg0, arg1, arg2);
+    if (ret[1]) {
+        throw takeFromExternrefTable0(ret[0]);
+    }
+}
+
+function wasm_bindgen__convert__closures_____invoke__h03479e65e098429f(arg0, arg1, arg2, arg3) {
+    wasm.wasm_bindgen__convert__closures_____invoke__h03479e65e098429f(arg0, arg1, arg2, arg3);
+}
+
+const WasmTrUApiCoreFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_wasmtruapicore_free(ptr, 1));
+
+function addToExternrefTable0(obj) {
+    const idx = wasm.__externref_table_alloc();
+    wasm.__wbindgen_externrefs.set(idx, obj);
+    return idx;
+}
+
+const CLOSURE_DTORS = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(state => wasm.__wbindgen_destroy_closure(state.a, state.b));
+
+function debugString(val) {
+    // primitive types
+    const type = typeof val;
+    if (type == 'number' || type == 'boolean' || val == null) {
+        return  `${val}`;
+    }
+    if (type == 'string') {
+        return `"${val}"`;
+    }
+    if (type == 'symbol') {
+        const description = val.description;
+        if (description == null) {
+            return 'Symbol';
+        } else {
+            return `Symbol(${description})`;
+        }
+    }
+    if (type == 'function') {
+        const name = val.name;
+        if (typeof name == 'string' && name.length > 0) {
+            return `Function(${name})`;
+        } else {
+            return 'Function';
+        }
+    }
+    // objects
+    if (Array.isArray(val)) {
+        const length = val.length;
+        let debug = '[';
+        if (length > 0) {
+            debug += debugString(val[0]);
+        }
+        for(let i = 1; i < length; i++) {
+            debug += ', ' + debugString(val[i]);
+        }
+        debug += ']';
+        return debug;
+    }
+    // Test for built-in
+    const builtInMatches = /\[object ([^\]]+)\]/.exec(toString.call(val));
+    let className;
+    if (builtInMatches && builtInMatches.length > 1) {
+        className = builtInMatches[1];
+    } else {
+        // Failed to match the standard '[object ClassName]'
+        return toString.call(val);
+    }
+    if (className == 'Object') {
+        // we're a user defined class or Object
+        // JSON.stringify avoids problems with cycles, and is generally much
+        // easier than looping through ownProperties of `val`.
+        try {
+            return 'Object(' + JSON.stringify(val) + ')';
+        } catch (_) {
+            return 'Object';
+        }
+    }
+    // errors
+    if (val instanceof Error) {
+        return `${val.name}: ${val.message}\n${val.stack}`;
+    }
+    // TODO we could test for more things here, like `Set`s and `Map`s.
+    return className;
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    return decodeText(ptr >>> 0, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        const idx = addToExternrefTable0(e);
+        wasm.__wbindgen_exn_store(idx);
+    }
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function makeMutClosure(arg0, arg1, f) {
+    const state = { a: arg0, b: arg1, cnt: 1 };
+    const real = (...args) => {
+
+        // First up with a closure we increment the internal reference
+        // count. This ensures that the Rust closure environment won't
+        // be deallocated while we're invoking it.
+        state.cnt++;
+        const a = state.a;
+        state.a = 0;
+        try {
+            return f(a, state.b, ...args);
+        } finally {
+            state.a = a;
+            real._wbg_cb_unref();
+        }
+    };
+    real._wbg_cb_unref = () => {
+        if (--state.cnt === 0) {
+            wasm.__wbindgen_destroy_closure(state.a, state.b);
+            state.a = 0;
+            CLOSURE_DTORS.unregister(state);
+        }
+    };
+    CLOSURE_DTORS.register(real, state, state);
+    return real;
+}
+
+function passArray8ToWasm0(arg, malloc) {
+    const ptr = malloc(arg.length * 1, 1) >>> 0;
+    getUint8ArrayMemory0().set(arg, ptr / 1);
+    WASM_VECTOR_LEN = arg.length;
+    return ptr;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+function decodeText(ptr, len) {
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+const wasmPath = `${__dirname}/truapi_server_bg.wasm`;
+const wasmBytes = require('fs').readFileSync(wasmPath);
+const wasmModule = new WebAssembly.Module(wasmBytes);
+let wasmInstance = new WebAssembly.Instance(wasmModule, __wbg_get_imports());
+let wasm = wasmInstance.exports;
+wasm.__wbindgen_start();
diff --git a/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server_bg.wasm b/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server_bg.wasm
new file mode 100644
index 00000000..a49c0b42
Binary files /dev/null and b/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server_bg.wasm differ
diff --git a/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server_bg.wasm.d.ts b/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server_bg.wasm.d.ts
new file mode 100644
index 00000000..e73b5810
--- /dev/null
+++ b/js/packages/truapi-host-wasm/dist/wasm/node/truapi_server_bg.wasm.d.ts
@@ -0,0 +1,79 @@
+/* tslint:disable */
+/* eslint-disable */
+export const memory: WebAssembly.Memory;
+export const ffi_truapi_server_rust_future_cancel_f32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_f64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_i16: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_i32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_i64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_i8: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_pointer: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_rust_buffer: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_u16: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_u32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_u64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_u8: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_void: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_complete_f32: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_f64: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_i16: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_i32: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_i64: (a: bigint, b: number) => bigint;
+export const ffi_truapi_server_rust_future_complete_i8: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_pointer: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_rust_buffer: (a: number, b: bigint, c: number) => void;
+export const ffi_truapi_server_rust_future_complete_u16: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_u32: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_u64: (a: bigint, b: number) => bigint;
+export const ffi_truapi_server_rust_future_complete_u8: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_void: (a: bigint, b: number) => void;
+export const ffi_truapi_server_rust_future_free_f32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_f64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_i16: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_i32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_i64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_i8: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_pointer: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_rust_buffer: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_u16: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_u32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_u64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_u8: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_void: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_f32: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_f64: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_i16: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_i32: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_i64: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_i8: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_pointer: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_rust_buffer: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_u16: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_u32: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_u64: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_u8: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_void: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rustbuffer_alloc: (a: number, b: bigint, c: number) => void;
+export const ffi_truapi_server_rustbuffer_free: (a: number, b: number) => void;
+export const ffi_truapi_server_rustbuffer_from_bytes: (a: number, b: number, c: number) => void;
+export const ffi_truapi_server_rustbuffer_reserve: (a: number, b: number, c: bigint, d: number) => void;
+export const ffi_truapi_server_uniffi_contract_version: () => number;
+export const __wbg_wasmtruapicore_free: (a: number, b: number) => void;
+export const setDebugEnabled: (a: number) => void;
+export const wasmtruapicore_clearActiveSession: (a: number) => void;
+export const wasmtruapicore_dispose: (a: number) => [number, number];
+export const wasmtruapicore_new: (a: any) => [number, number, number];
+export const wasmtruapicore_receiveFromProduct: (a: number, b: number, c: number) => any;
+export const wasmtruapicore_setActiveSession: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number];
+export const wasm_bindgen__convert__closures_____invoke__h7f23ba22e0948386: (a: number, b: number, c: any) => [number, number];
+export const wasm_bindgen__convert__closures_____invoke__h03479e65e098429f: (a: number, b: number, c: any, d: any) => void;
+export const wasm_bindgen__convert__closures_____invoke__h0e369f98e8ad4df9: (a: number, b: number, c: any) => void;
+export const __wbindgen_malloc: (a: number, b: number) => number;
+export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+export const __wbindgen_exn_store: (a: number) => void;
+export const __externref_table_alloc: () => number;
+export const __wbindgen_externrefs: WebAssembly.Table;
+export const __wbindgen_free: (a: number, b: number, c: number) => void;
+export const __wbindgen_destroy_closure: (a: number, b: number) => void;
+export const __externref_table_dealloc: (a: number) => void;
+export const __wbindgen_start: () => void;
diff --git a/js/packages/truapi-host-wasm/dist/wasm/web/README.md b/js/packages/truapi-host-wasm/dist/wasm/web/README.md
new file mode 100644
index 00000000..4f30f9a0
--- /dev/null
+++ b/js/packages/truapi-host-wasm/dist/wasm/web/README.md
@@ -0,0 +1,31 @@
+# truapi-server
+
+*Runtime core for TrUAPI: dispatcher, protocol frames, SCALE-coded wire envelope.*
+
+## What this crate is for
+
+`truapi-server` is the runtime that turns trait implementations of the
+`truapi` API into a working host. It owns:
+
+- the [`ProtocolMessage`] wire envelope and SCALE codec
+- the [`Dispatcher`] that routes incoming frames to per-method handlers
+- the subscription lifecycle (start/receive/stop/interrupt)
+- the [`Transport`] trait that platform-specific IPC backends implement
+- the auto-generated dispatcher/wire-table tables shipped under
+  [`crate::generated`]
+
+## Wire envelope
+
+Every frame on the wire is encoded as:
+
+```text
+[requestId: SCALE str][discriminant: u8][payload bytes...]
+```
+
+The discriminant maps to a method/kind tag via the auto-generated
+[`crate::generated::wire_table::WIRE_TABLE`]. Method ordering is part of
+the wire protocol; only ever append.
+
+The payload bytes are the SCALE-encoded inner value, inlined without a
+length prefix. In-memory we keep the tag as a `String` so the dispatcher
+(which keys on method name) is independent of the wire numbering.
diff --git a/js/packages/truapi-host-wasm/dist/wasm/web/package.json b/js/packages/truapi-host-wasm/dist/wasm/web/package.json
new file mode 100644
index 00000000..675f4974
--- /dev/null
+++ b/js/packages/truapi-host-wasm/dist/wasm/web/package.json
@@ -0,0 +1,17 @@
+{
+  "name": "truapi-server",
+  "type": "module",
+  "description": "TrUAPI server runtime: dispatcher, frames, SCALE, streams",
+  "version": "0.1.0",
+  "license": "MIT AND Apache-2.0",
+  "files": [
+    "truapi_server_bg.wasm",
+    "truapi_server.js",
+    "truapi_server.d.ts"
+  ],
+  "main": "truapi_server.js",
+  "types": "truapi_server.d.ts",
+  "sideEffects": [
+    "./snippets/*"
+  ]
+}
\ No newline at end of file
diff --git a/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server.d.ts b/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server.d.ts
new file mode 100644
index 00000000..4568dc5d
--- /dev/null
+++ b/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server.d.ts
@@ -0,0 +1,149 @@
+/* tslint:disable */
+/* eslint-disable */
+
+/**
+ * JS-callable handle to the TrUAPI core. Constructed once per shell boot.
+ */
+export class WasmTrUApiCore {
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Drop the currently-paired session.
+     */
+    clearActiveSession(): void;
+    /**
+     * Tear down the bridge. Invokes the JS-side `dispose` callback so the
+     * host can drop its end of the wiring.
+     */
+    dispose(): void;
+    /**
+     * Build the core from a JS callbacks object. The object must define
+     * every host capability the [`truapi_platform::Platform`] trait set
+     * requires (camelCase property names; see the source for the full
+     * list).
+     */
+    constructor(callbacks: any);
+    /**
+     * Push a SCALE-encoded protocol frame into the dispatcher. Responses
+     * (and subscription items) flow back through the `emitFrame`
+     * callback.
+     */
+    receiveFromProduct(frame: Uint8Array): Promise<void>;
+    /**
+     * Push the currently-paired session into the core. Called by the
+     * host shell whenever the user pairs / unpairs. `pubkey` must be
+     * exactly 32 bytes (sr25519 root public key); usernames may be
+     * null / undefined when the identity record carries no value.
+     */
+    setActiveSession(pubkey: Uint8Array, lite_username?: string | null, full_username?: string | null): void;
+}
+
+/**
+ * Toggle [`crate::debug_log`] output. Hosts read their `truapi:debug`
+ * flag (web: localStorage) and call this once during boot.
+ */
+export function setDebugEnabled(enabled: boolean): void;
+
+export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
+
+export interface InitOutput {
+    readonly memory: WebAssembly.Memory;
+    readonly ffi_truapi_server_rust_future_cancel_f32: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_f64: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_i16: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_i32: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_i64: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_i8: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_pointer: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_rust_buffer: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_u16: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_u32: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_u64: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_u8: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_cancel_void: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_complete_f32: (a: bigint, b: number) => number;
+    readonly ffi_truapi_server_rust_future_complete_f64: (a: bigint, b: number) => number;
+    readonly ffi_truapi_server_rust_future_complete_i16: (a: bigint, b: number) => number;
+    readonly ffi_truapi_server_rust_future_complete_i32: (a: bigint, b: number) => number;
+    readonly ffi_truapi_server_rust_future_complete_i64: (a: bigint, b: number) => bigint;
+    readonly ffi_truapi_server_rust_future_complete_i8: (a: bigint, b: number) => number;
+    readonly ffi_truapi_server_rust_future_complete_pointer: (a: bigint, b: number) => number;
+    readonly ffi_truapi_server_rust_future_complete_rust_buffer: (a: number, b: bigint, c: number) => void;
+    readonly ffi_truapi_server_rust_future_complete_u16: (a: bigint, b: number) => number;
+    readonly ffi_truapi_server_rust_future_complete_u32: (a: bigint, b: number) => number;
+    readonly ffi_truapi_server_rust_future_complete_u64: (a: bigint, b: number) => bigint;
+    readonly ffi_truapi_server_rust_future_complete_u8: (a: bigint, b: number) => number;
+    readonly ffi_truapi_server_rust_future_complete_void: (a: bigint, b: number) => void;
+    readonly ffi_truapi_server_rust_future_free_f32: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_f64: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_i16: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_i32: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_i64: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_i8: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_pointer: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_rust_buffer: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_u16: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_u32: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_u64: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_u8: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_free_void: (a: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_f32: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_f64: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_i16: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_i32: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_i64: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_i8: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_pointer: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_rust_buffer: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_u16: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_u32: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_u64: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_u8: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rust_future_poll_void: (a: bigint, b: number, c: bigint) => void;
+    readonly ffi_truapi_server_rustbuffer_alloc: (a: number, b: bigint, c: number) => void;
+    readonly ffi_truapi_server_rustbuffer_free: (a: number, b: number) => void;
+    readonly ffi_truapi_server_rustbuffer_from_bytes: (a: number, b: number, c: number) => void;
+    readonly ffi_truapi_server_rustbuffer_reserve: (a: number, b: number, c: bigint, d: number) => void;
+    readonly ffi_truapi_server_uniffi_contract_version: () => number;
+    readonly __wbg_wasmtruapicore_free: (a: number, b: number) => void;
+    readonly setDebugEnabled: (a: number) => void;
+    readonly wasmtruapicore_clearActiveSession: (a: number) => void;
+    readonly wasmtruapicore_dispose: (a: number) => [number, number];
+    readonly wasmtruapicore_new: (a: any) => [number, number, number];
+    readonly wasmtruapicore_receiveFromProduct: (a: number, b: number, c: number) => any;
+    readonly wasmtruapicore_setActiveSession: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number];
+    readonly wasm_bindgen__convert__closures_____invoke__h7f23ba22e0948386: (a: number, b: number, c: any) => [number, number];
+    readonly wasm_bindgen__convert__closures_____invoke__h03479e65e098429f: (a: number, b: number, c: any, d: any) => void;
+    readonly wasm_bindgen__convert__closures_____invoke__h0e369f98e8ad4df9: (a: number, b: number, c: any) => void;
+    readonly __wbindgen_malloc: (a: number, b: number) => number;
+    readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+    readonly __wbindgen_exn_store: (a: number) => void;
+    readonly __externref_table_alloc: () => number;
+    readonly __wbindgen_externrefs: WebAssembly.Table;
+    readonly __wbindgen_free: (a: number, b: number, c: number) => void;
+    readonly __wbindgen_destroy_closure: (a: number, b: number) => void;
+    readonly __externref_table_dealloc: (a: number) => void;
+    readonly __wbindgen_start: () => void;
+}
+
+export type SyncInitInput = BufferSource | WebAssembly.Module;
+
+/**
+ * Instantiates the given `module`, which can either be bytes or
+ * a precompiled `WebAssembly.Module`.
+ *
+ * @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
+ *
+ * @returns {InitOutput}
+ */
+export function initSync(module: { module: SyncInitInput } | SyncInitInput): InitOutput;
+
+/**
+ * If `module_or_path` is {RequestInfo} or {URL}, makes a request and
+ * for everything else, calls `WebAssembly.instantiate` directly.
+ *
+ * @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
+ *
+ * @returns {Promise<InitOutput>}
+ */
+export default function __wbg_init (module_or_path?: { module_or_path: InitInput | Promise<InitInput> } | InitInput | Promise<InitInput>): Promise<InitOutput>;
diff --git a/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server.js b/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server.js
new file mode 100644
index 00000000..15eec8ca
--- /dev/null
+++ b/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server.js
@@ -0,0 +1,640 @@
+/* @ts-self-types="./truapi_server.d.ts" */
+
+/**
+ * JS-callable handle to the TrUAPI core. Constructed once per shell boot.
+ */
+export class WasmTrUApiCore {
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        WasmTrUApiCoreFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_wasmtruapicore_free(ptr, 0);
+    }
+    /**
+     * Drop the currently-paired session.
+     */
+    clearActiveSession() {
+        wasm.wasmtruapicore_clearActiveSession(this.__wbg_ptr);
+    }
+    /**
+     * Tear down the bridge. Invokes the JS-side `dispose` callback so the
+     * host can drop its end of the wiring.
+     */
+    dispose() {
+        const ret = wasm.wasmtruapicore_dispose(this.__wbg_ptr);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
+    /**
+     * Build the core from a JS callbacks object. The object must define
+     * every host capability the [`truapi_platform::Platform`] trait set
+     * requires (camelCase property names; see the source for the full
+     * list).
+     * @param {any} callbacks
+     */
+    constructor(callbacks) {
+        const ret = wasm.wasmtruapicore_new(callbacks);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        this.__wbg_ptr = ret[0];
+        WasmTrUApiCoreFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+    /**
+     * Push a SCALE-encoded protocol frame into the dispatcher. Responses
+     * (and subscription items) flow back through the `emitFrame`
+     * callback.
+     * @param {Uint8Array} frame
+     * @returns {Promise<void>}
+     */
+    receiveFromProduct(frame) {
+        const ptr0 = passArray8ToWasm0(frame, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.wasmtruapicore_receiveFromProduct(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Push the currently-paired session into the core. Called by the
+     * host shell whenever the user pairs / unpairs. `pubkey` must be
+     * exactly 32 bytes (sr25519 root public key); usernames may be
+     * null / undefined when the identity record carries no value.
+     * @param {Uint8Array} pubkey
+     * @param {string | null} [lite_username]
+     * @param {string | null} [full_username]
+     */
+    setActiveSession(pubkey, lite_username, full_username) {
+        const ptr0 = passArray8ToWasm0(pubkey, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        var ptr1 = isLikeNone(lite_username) ? 0 : passStringToWasm0(lite_username, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len1 = WASM_VECTOR_LEN;
+        var ptr2 = isLikeNone(full_username) ? 0 : passStringToWasm0(full_username, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len2 = WASM_VECTOR_LEN;
+        const ret = wasm.wasmtruapicore_setActiveSession(this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
+}
+if (Symbol.dispose) WasmTrUApiCore.prototype[Symbol.dispose] = WasmTrUApiCore.prototype.free;
+
+/**
+ * Toggle [`crate::debug_log`] output. Hosts read their `truapi:debug`
+ * flag (web: localStorage) and call this once during boot.
+ * @param {boolean} enabled
+ */
+export function setDebugEnabled(enabled) {
+    wasm.setDebugEnabled(enabled);
+}
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg___wbindgen_boolean_get_2304fb8c853028c8: function(arg0) {
+            const v = arg0;
+            const ret = typeof(v) === 'boolean' ? v : undefined;
+            return isLikeNone(ret) ? 0xFFFFFF : ret ? 1 : 0;
+        },
+        __wbg___wbindgen_debug_string_edece8177ad01481: function(arg0, arg1) {
+            const ret = debugString(arg1);
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_is_function_5cd60d5cf78b4eef: function(arg0) {
+            const ret = typeof(arg0) === 'function';
+            return ret;
+        },
+        __wbg___wbindgen_is_null_2042690d351e14f0: function(arg0) {
+            const ret = arg0 === null;
+            return ret;
+        },
+        __wbg___wbindgen_is_undefined_35bb9f4c7fd651d5: function(arg0) {
+            const ret = arg0 === undefined;
+            return ret;
+        },
+        __wbg___wbindgen_string_get_d109740c0d18f4d7: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'string' ? obj : undefined;
+            var ptr1 = isLikeNone(ret) ? 0 : passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            var len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_throw_9c31b086c2b26051: function(arg0, arg1) {
+            throw new Error(getStringFromWasm0(arg0, arg1));
+        },
+        __wbg__wbg_cb_unref_3fa391f3fcdb55f8: function(arg0) {
+            arg0._wbg_cb_unref();
+        },
+        __wbg_call_13665d9f14390edc: function() { return handleError(function (arg0, arg1) {
+            const ret = arg0.call(arg1);
+            return ret;
+        }, arguments); },
+        __wbg_call_dfde26266607c996: function() { return handleError(function (arg0, arg1, arg2) {
+            const ret = arg0.call(arg1, arg2);
+            return ret;
+        }, arguments); },
+        __wbg_call_faa0a261f288f846: function() { return handleError(function (arg0, arg1, arg2, arg3) {
+            const ret = arg0.call(arg1, arg2, arg3);
+            return ret;
+        }, arguments); },
+        __wbg_error_a6fa202b58aa1cd3: function(arg0, arg1) {
+            let deferred0_0;
+            let deferred0_1;
+            try {
+                deferred0_0 = arg0;
+                deferred0_1 = arg1;
+                console.error(getStringFromWasm0(arg0, arg1));
+            } finally {
+                wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
+            }
+        },
+        __wbg_error_f085d7e62279b703: function(arg0) {
+            console.error(arg0);
+        },
+        __wbg_get_dcf82ab8aad1a593: function() { return handleError(function (arg0, arg1) {
+            const ret = Reflect.get(arg0, arg1);
+            return ret;
+        }, arguments); },
+        __wbg_instanceof_Error_b3f7e146d654031a: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Error;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_instanceof_Promise_09012cfa9708520a: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Promise;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_instanceof_Uint8Array_abd07d4bd221d50b: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Uint8Array;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_length_56fcd3e2b7e0299d: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_message_324ac511aeaf710e: function(arg0) {
+            const ret = arg0.message;
+            return ret;
+        },
+        __wbg_new_227d7c05414eb861: function() {
+            const ret = new Error();
+            return ret;
+        },
+        __wbg_new_from_slice_269e35316ed2d061: function(arg0, arg1) {
+            const ret = new Uint8Array(getArrayU8FromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_new_no_args_f476b292f3fd1dc0: function(arg0, arg1) {
+            const ret = new Function(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_new_typed_c072c4ce9a2a0cdf: function(arg0, arg1) {
+            try {
+                var state0 = {a: arg0, b: arg1};
+                var cb0 = (arg0, arg1) => {
+                    const a = state0.a;
+                    state0.a = 0;
+                    try {
+                        return wasm_bindgen__convert__closures_____invoke__h03479e65e098429f(a, state0.b, arg0, arg1);
+                    } finally {
+                        state0.a = a;
+                    }
+                };
+                const ret = new Promise(cb0);
+                return ret;
+            } finally {
+                state0.a = 0;
+            }
+        },
+        __wbg_prototypesetcall_5f9bdc8d75e07276: function(arg0, arg1, arg2) {
+            Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
+        },
+        __wbg_queueMicrotask_78d584b53af520f5: function(arg0) {
+            const ret = arg0.queueMicrotask;
+            return ret;
+        },
+        __wbg_queueMicrotask_b39ea83c7f01971a: function(arg0) {
+            queueMicrotask(arg0);
+        },
+        __wbg_resolve_d17db9352f5a220e: function(arg0) {
+            const ret = Promise.resolve(arg0);
+            return ret;
+        },
+        __wbg_stack_3b0d974bbf31e44f: function(arg0, arg1) {
+            const ret = arg1.stack;
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg_static_accessor_GLOBAL_THIS_02344c9b09eb08a9: function() {
+            const ret = typeof globalThis === 'undefined' ? null : globalThis;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_GLOBAL_ac6d4ac874d5cd54: function() {
+            const ret = typeof global === 'undefined' ? null : global;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_SELF_9b2406c23aeb2023: function() {
+            const ret = typeof self === 'undefined' ? null : self;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_static_accessor_WINDOW_b34d2126934e16ba: function() {
+            const ret = typeof window === 'undefined' ? null : window;
+            return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+        },
+        __wbg_then_837494e384b37459: function(arg0, arg1) {
+            const ret = arg0.then(arg1);
+            return ret;
+        },
+        __wbg_then_bd927500e8905df2: function(arg0, arg1, arg2) {
+            const ret = arg0.then(arg1, arg2);
+            return ret;
+        },
+        __wbindgen_cast_0000000000000001: function(arg0, arg1) {
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 330, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h0e369f98e8ad4df9);
+            return ret;
+        },
+        __wbindgen_cast_0000000000000002: function(arg0, arg1) {
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 373, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h7f23ba22e0948386);
+            return ret;
+        },
+        __wbindgen_cast_0000000000000003: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_init_externref_table: function() {
+            const table = wasm.__wbindgen_externrefs;
+            const offset = table.grow(4);
+            table.set(0, undefined);
+            table.set(offset + 0, undefined);
+            table.set(offset + 1, null);
+            table.set(offset + 2, true);
+            table.set(offset + 3, false);
+        },
+    };
+    return {
+        __proto__: null,
+        "./truapi_server_bg.js": import0,
+    };
+}
+
+function wasm_bindgen__convert__closures_____invoke__h0e369f98e8ad4df9(arg0, arg1, arg2) {
+    wasm.wasm_bindgen__convert__closures_____invoke__h0e369f98e8ad4df9(arg0, arg1, arg2);
+}
+
+function wasm_bindgen__convert__closures_____invoke__h7f23ba22e0948386(arg0, arg1, arg2) {
+    const ret = wasm.wasm_bindgen__convert__closures_____invoke__h7f23ba22e0948386(arg0, arg1, arg2);
+    if (ret[1]) {
+        throw takeFromExternrefTable0(ret[0]);
+    }
+}
+
+function wasm_bindgen__convert__closures_____invoke__h03479e65e098429f(arg0, arg1, arg2, arg3) {
+    wasm.wasm_bindgen__convert__closures_____invoke__h03479e65e098429f(arg0, arg1, arg2, arg3);
+}
+
+const WasmTrUApiCoreFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_wasmtruapicore_free(ptr, 1));
+
+function addToExternrefTable0(obj) {
+    const idx = wasm.__externref_table_alloc();
+    wasm.__wbindgen_externrefs.set(idx, obj);
+    return idx;
+}
+
+const CLOSURE_DTORS = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(state => wasm.__wbindgen_destroy_closure(state.a, state.b));
+
+function debugString(val) {
+    // primitive types
+    const type = typeof val;
+    if (type == 'number' || type == 'boolean' || val == null) {
+        return  `${val}`;
+    }
+    if (type == 'string') {
+        return `"${val}"`;
+    }
+    if (type == 'symbol') {
+        const description = val.description;
+        if (description == null) {
+            return 'Symbol';
+        } else {
+            return `Symbol(${description})`;
+        }
+    }
+    if (type == 'function') {
+        const name = val.name;
+        if (typeof name == 'string' && name.length > 0) {
+            return `Function(${name})`;
+        } else {
+            return 'Function';
+        }
+    }
+    // objects
+    if (Array.isArray(val)) {
+        const length = val.length;
+        let debug = '[';
+        if (length > 0) {
+            debug += debugString(val[0]);
+        }
+        for(let i = 1; i < length; i++) {
+            debug += ', ' + debugString(val[i]);
+        }
+        debug += ']';
+        return debug;
+    }
+    // Test for built-in
+    const builtInMatches = /\[object ([^\]]+)\]/.exec(toString.call(val));
+    let className;
+    if (builtInMatches && builtInMatches.length > 1) {
+        className = builtInMatches[1];
+    } else {
+        // Failed to match the standard '[object ClassName]'
+        return toString.call(val);
+    }
+    if (className == 'Object') {
+        // we're a user defined class or Object
+        // JSON.stringify avoids problems with cycles, and is generally much
+        // easier than looping through ownProperties of `val`.
+        try {
+            return 'Object(' + JSON.stringify(val) + ')';
+        } catch (_) {
+            return 'Object';
+        }
+    }
+    // errors
+    if (val instanceof Error) {
+        return `${val.name}: ${val.message}\n${val.stack}`;
+    }
+    // TODO we could test for more things here, like `Set`s and `Map`s.
+    return className;
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    return decodeText(ptr >>> 0, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        const idx = addToExternrefTable0(e);
+        wasm.__wbindgen_exn_store(idx);
+    }
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function makeMutClosure(arg0, arg1, f) {
+    const state = { a: arg0, b: arg1, cnt: 1 };
+    const real = (...args) => {
+
+        // First up with a closure we increment the internal reference
+        // count. This ensures that the Rust closure environment won't
+        // be deallocated while we're invoking it.
+        state.cnt++;
+        const a = state.a;
+        state.a = 0;
+        try {
+            return f(a, state.b, ...args);
+        } finally {
+            state.a = a;
+            real._wbg_cb_unref();
+        }
+    };
+    real._wbg_cb_unref = () => {
+        if (--state.cnt === 0) {
+            wasm.__wbindgen_destroy_closure(state.a, state.b);
+            state.a = 0;
+            CLOSURE_DTORS.unregister(state);
+        }
+    };
+    CLOSURE_DTORS.register(real, state, state);
+    return real;
+}
+
+function passArray8ToWasm0(arg, malloc) {
+    const ptr = malloc(arg.length * 1, 1) >>> 0;
+    getUint8ArrayMemory0().set(arg, ptr / 1);
+    WASM_VECTOR_LEN = arg.length;
+    return ptr;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+const MAX_SAFARI_DECODE_BYTES = 2146435072;
+let numBytesDecoded = 0;
+function decodeText(ptr, len) {
+    numBytesDecoded += len;
+    if (numBytesDecoded >= MAX_SAFARI_DECODE_BYTES) {
+        cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+        cachedTextDecoder.decode();
+        numBytesDecoded = len;
+    }
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+let wasmModule, wasmInstance, wasm;
+function __wbg_finalize_init(instance, module) {
+    wasmInstance = instance;
+    wasm = instance.exports;
+    wasmModule = module;
+    cachedDataViewMemory0 = null;
+    cachedUint8ArrayMemory0 = null;
+    wasm.__wbindgen_start();
+    return wasm;
+}
+
+async function __wbg_load(module, imports) {
+    if (typeof Response === 'function' && module instanceof Response) {
+        if (typeof WebAssembly.instantiateStreaming === 'function') {
+            try {
+                return await WebAssembly.instantiateStreaming(module, imports);
+            } catch (e) {
+                const validResponse = module.ok && expectedResponseType(module.type);
+
+                if (validResponse && module.headers.get('Content-Type') !== 'application/wasm') {
+                    console.warn("`WebAssembly.instantiateStreaming` failed because your server does not serve Wasm with `application/wasm` MIME type. Falling back to `WebAssembly.instantiate` which is slower. Original error:\n", e);
+
+                } else { throw e; }
+            }
+        }
+
+        const bytes = await module.arrayBuffer();
+        return await WebAssembly.instantiate(bytes, imports);
+    } else {
+        const instance = await WebAssembly.instantiate(module, imports);
+
+        if (instance instanceof WebAssembly.Instance) {
+            return { instance, module };
+        } else {
+            return instance;
+        }
+    }
+
+    function expectedResponseType(type) {
+        switch (type) {
+            case 'basic': case 'cors': case 'default': return true;
+        }
+        return false;
+    }
+}
+
+function initSync(module) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module !== undefined) {
+        if (Object.getPrototypeOf(module) === Object.prototype) {
+            ({module} = module)
+        } else {
+            console.warn('using deprecated parameters for `initSync()`; pass a single object instead')
+        }
+    }
+
+    const imports = __wbg_get_imports();
+    if (!(module instanceof WebAssembly.Module)) {
+        module = new WebAssembly.Module(module);
+    }
+    const instance = new WebAssembly.Instance(module, imports);
+    return __wbg_finalize_init(instance, module);
+}
+
+async function __wbg_init(module_or_path) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module_or_path !== undefined) {
+        if (Object.getPrototypeOf(module_or_path) === Object.prototype) {
+            ({module_or_path} = module_or_path)
+        } else {
+            console.warn('using deprecated parameters for the initialization function; pass a single object instead')
+        }
+    }
+
+    if (module_or_path === undefined) {
+        module_or_path = new URL('truapi_server_bg.wasm', import.meta.url);
+    }
+    const imports = __wbg_get_imports();
+
+    if (typeof module_or_path === 'string' || (typeof Request === 'function' && module_or_path instanceof Request) || (typeof URL === 'function' && module_or_path instanceof URL)) {
+        module_or_path = fetch(module_or_path);
+    }
+
+    const { instance, module } = await __wbg_load(await module_or_path, imports);
+
+    return __wbg_finalize_init(instance, module);
+}
+
+export { initSync, __wbg_init as default };
diff --git a/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server_bg.wasm b/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server_bg.wasm
new file mode 100644
index 00000000..a49c0b42
Binary files /dev/null and b/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server_bg.wasm differ
diff --git a/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server_bg.wasm.d.ts b/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server_bg.wasm.d.ts
new file mode 100644
index 00000000..e73b5810
--- /dev/null
+++ b/js/packages/truapi-host-wasm/dist/wasm/web/truapi_server_bg.wasm.d.ts
@@ -0,0 +1,79 @@
+/* tslint:disable */
+/* eslint-disable */
+export const memory: WebAssembly.Memory;
+export const ffi_truapi_server_rust_future_cancel_f32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_f64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_i16: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_i32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_i64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_i8: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_pointer: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_rust_buffer: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_u16: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_u32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_u64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_u8: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_cancel_void: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_complete_f32: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_f64: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_i16: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_i32: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_i64: (a: bigint, b: number) => bigint;
+export const ffi_truapi_server_rust_future_complete_i8: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_pointer: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_rust_buffer: (a: number, b: bigint, c: number) => void;
+export const ffi_truapi_server_rust_future_complete_u16: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_u32: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_u64: (a: bigint, b: number) => bigint;
+export const ffi_truapi_server_rust_future_complete_u8: (a: bigint, b: number) => number;
+export const ffi_truapi_server_rust_future_complete_void: (a: bigint, b: number) => void;
+export const ffi_truapi_server_rust_future_free_f32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_f64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_i16: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_i32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_i64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_i8: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_pointer: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_rust_buffer: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_u16: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_u32: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_u64: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_u8: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_free_void: (a: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_f32: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_f64: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_i16: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_i32: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_i64: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_i8: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_pointer: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_rust_buffer: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_u16: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_u32: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_u64: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_u8: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rust_future_poll_void: (a: bigint, b: number, c: bigint) => void;
+export const ffi_truapi_server_rustbuffer_alloc: (a: number, b: bigint, c: number) => void;
+export const ffi_truapi_server_rustbuffer_free: (a: number, b: number) => void;
+export const ffi_truapi_server_rustbuffer_from_bytes: (a: number, b: number, c: number) => void;
+export const ffi_truapi_server_rustbuffer_reserve: (a: number, b: number, c: bigint, d: number) => void;
+export const ffi_truapi_server_uniffi_contract_version: () => number;
+export const __wbg_wasmtruapicore_free: (a: number, b: number) => void;
+export const setDebugEnabled: (a: number) => void;
+export const wasmtruapicore_clearActiveSession: (a: number) => void;
+export const wasmtruapicore_dispose: (a: number) => [number, number];
+export const wasmtruapicore_new: (a: any) => [number, number, number];
+export const wasmtruapicore_receiveFromProduct: (a: number, b: number, c: number) => any;
+export const wasmtruapicore_setActiveSession: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number];
+export const wasm_bindgen__convert__closures_____invoke__h7f23ba22e0948386: (a: number, b: number, c: any) => [number, number];
+export const wasm_bindgen__convert__closures_____invoke__h03479e65e098429f: (a: number, b: number, c: any, d: any) => void;
+export const wasm_bindgen__convert__closures_____invoke__h0e369f98e8ad4df9: (a: number, b: number, c: any) => void;
+export const __wbindgen_malloc: (a: number, b: number) => number;
+export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+export const __wbindgen_exn_store: (a: number) => void;
+export const __externref_table_alloc: () => number;
+export const __wbindgen_externrefs: WebAssembly.Table;
+export const __wbindgen_free: (a: number, b: number, c: number) => void;
+export const __wbindgen_destroy_closure: (a: number, b: number) => void;
+export const __externref_table_dealloc: (a: number) => void;
+export const __wbindgen_start: () => void;
diff --git a/js/packages/truapi-host-wasm/package.json b/js/packages/truapi-host-wasm/package.json
new file mode 100644
index 00000000..c48e2a70
--- /dev/null
+++ b/js/packages/truapi-host-wasm/package.json
@@ -0,0 +1,61 @@
+{
+  "name": "@parity/truapi-host-wasm",
+  "version": "0.1.0",
+  "description": "WASM-backed TrUAPI host runtime: embeds the Rust core, with web (iframe + Web Worker) and Electron (MessagePortMain) entry points",
+  "license": "MIT",
+  "author": "Parity Technologies <admin@parity.io>",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "sideEffects": [
+    "./dist/worker-runtime.js",
+    "./dist/wasm/**"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./web": {
+      "types": "./dist/web/index.d.ts",
+      "import": "./dist/web/index.js"
+    },
+    "./electron": {
+      "types": "./dist/electron/index.d.ts",
+      "import": "./dist/electron/index.js"
+    },
+    "./node-runtime": {
+      "types": "./dist/node-runtime.d.ts",
+      "import": "./dist/node-runtime.js"
+    },
+    "./worker-runtime": {
+      "types": "./dist/worker-runtime.d.ts",
+      "import": "./dist/worker-runtime.js"
+    },
+    "./wasm/web": {
+      "types": "./dist/wasm/web/truapi_server.d.ts",
+      "import": "./dist/wasm/web/truapi_server.js"
+    },
+    "./wasm/node": {
+      "types": "./dist/wasm/node/truapi_server.d.ts",
+      "import": "./dist/wasm/node/truapi_server.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "build:wasm": "node scripts/build-wasm.mjs",
+    "prepare": "npm run build",
+    "test": "for f in test/*.test.mjs; do echo \"=== $f ===\" && node --test \"$f\" || exit 1; done"
+  },
+  "dependencies": {
+    "@parity/truapi": "file:../truapi",
+    "@parity/truapi-host": "file:../truapi-host"
+  },
+  "devDependencies": {
+    "typescript": "^5.7"
+  }
+}
diff --git a/js/packages/truapi-host-wasm/scripts/build-wasm.mjs b/js/packages/truapi-host-wasm/scripts/build-wasm.mjs
new file mode 100644
index 00000000..5a48439c
--- /dev/null
+++ b/js/packages/truapi-host-wasm/scripts/build-wasm.mjs
@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+// Rebuild the truapi-server WASM artefacts committed under
+// `dist/wasm/{web,node}/`. wasm-pack is required.
+
+import { execFile } from "node:child_process";
+import { rm } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
+
+const execFileAsync = promisify(execFile);
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const pkgRoot = resolve(__dirname, "..");
+const repoRoot = resolve(pkgRoot, "../../..");
+const rustCrate = resolve(repoRoot, "rust/crates/truapi-server");
+
+function args(target, outDir) {
+  return [
+    "build",
+    rustCrate,
+    "--target",
+    target,
+    "--out-dir",
+    outDir,
+    "--out-name",
+    "truapi_server",
+    "--no-default-features",
+  ];
+}
+
+async function build(target, subdir) {
+  const outDir = resolve(pkgRoot, "dist/wasm", subdir);
+  process.stdout.write(`wasm-pack build --target ${target} → ${outDir}\n`);
+  await execFileAsync("wasm-pack", args(target, outDir), { cwd: repoRoot });
+  // wasm-pack writes a `.gitignore: *` next to the artefacts which would
+  // hide the committed bundle. Remove it; the package's outer .gitignore
+  // handles compiled TS without masking the WASM files.
+  await rm(resolve(outDir, ".gitignore"), { force: true });
+}
+
+await build("web", "web");
+await build("nodejs", "node");
diff --git a/js/packages/truapi-host-wasm/src/dispatcher.ts b/js/packages/truapi-host-wasm/src/dispatcher.ts
new file mode 100644
index 00000000..6de72e64
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/dispatcher.ts
@@ -0,0 +1,20 @@
+// Generic dispatcher utilities sit in `@parity/truapi-host`. This module
+// re-exports them so hosts that depend on `@parity/truapi-host-wasm` get the
+// dispatcher entry-point without a separate install.
+
+export {
+  createHostServer,
+  toFlatResponsePayload,
+  toResponsePayload,
+} from "@parity/truapi-host";
+
+export type {
+  CallContext,
+  HostDispatchEntry,
+  HostServerHooks,
+  RequestEntry,
+  SubscriptionCleanup,
+  SubscriptionEntry,
+  SubscriptionFramePort,
+  TrUApiHostServer,
+} from "@parity/truapi-host";
diff --git a/js/packages/truapi-host-wasm/src/electron/index.ts b/js/packages/truapi-host-wasm/src/electron/index.ts
new file mode 100644
index 00000000..57c2020f
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/electron/index.ts
@@ -0,0 +1,105 @@
+import type { Provider } from "@parity/truapi";
+
+/**
+ * Minimal subset of Electron's `MessagePortMain` interface used by this
+ * package. Kept local so the package does not have a hard `electron`
+ * dependency (the host code passes the port in at runtime).
+ */
+export interface ElectronMessagePortMain {
+  postMessage(message: unknown, transfer?: unknown[]): void;
+  on(event: "message", handler: (event: { data: unknown }) => void): this;
+  on(event: "close", handler: () => void): this;
+  off(event: "message", handler: (event: { data: unknown }) => void): this;
+  off(event: "close", handler: () => void): this;
+  start(): void;
+  close(): void;
+}
+
+/**
+ * Options for `createElectronProvider`.
+ */
+export interface CreateElectronProviderOptions {
+  /** One end of an Electron `MessageChannelMain`. The other end must be
+   * transferred to the renderer through the preload script. */
+  port: ElectronMessagePortMain;
+}
+
+/**
+ * Wrap an Electron `MessagePortMain` as a TrUAPI `Provider`. The
+ * provider exchanges SCALE-encoded `Uint8Array` frames with the renderer.
+ * The provider's `dispose` closes the port.
+ *
+ * Hosts typically pair this with `@parity/truapi-host-wasm`'s
+ * `createNodeWasmProvider` (for the WASM core) and `createHostServer`
+ * from `@parity/truapi-host` (for the dispatcher) to assemble a full
+ * Electron host.
+ */
+export function createElectronProvider(
+  options: CreateElectronProviderOptions,
+): Provider {
+  const { port } = options;
+  const listeners = new Set<(message: Uint8Array) => void>();
+  const closeListeners = new Set<(error: Error) => void>();
+  let disposed = false;
+
+  const onMessage = (event: { data: unknown }): void => {
+    if (disposed) return;
+    const data = event.data;
+    if (!(data instanceof Uint8Array)) return;
+    for (const listener of [...listeners]) listener(data);
+  };
+
+  const removePortListeners = (): void => {
+    try {
+      port.off("message", onMessage);
+      port.off("close", onClose);
+    } catch {
+      // already detached
+    }
+  };
+
+  const onClose = (): void => {
+    if (disposed) return;
+    disposed = true;
+    removePortListeners();
+    const error = new Error("electron message port closed");
+    for (const listener of [...closeListeners]) listener(error);
+    listeners.clear();
+    closeListeners.clear();
+  };
+
+  port.on("message", onMessage);
+  port.on("close", onClose);
+  port.start();
+
+  return {
+    postMessage(bytes: Uint8Array): void {
+      if (disposed) return;
+      port.postMessage(bytes);
+    },
+    subscribe(callback) {
+      listeners.add(callback);
+      return () => {
+        listeners.delete(callback);
+      };
+    },
+    subscribeClose(callback) {
+      closeListeners.add(callback);
+      return () => {
+        closeListeners.delete(callback);
+      };
+    },
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      removePortListeners();
+      try {
+        port.close();
+      } catch {
+        // already closed
+      }
+      listeners.clear();
+      closeListeners.clear();
+    },
+  };
+}
diff --git a/js/packages/truapi-host-wasm/src/index.ts b/js/packages/truapi-host-wasm/src/index.ts
new file mode 100644
index 00000000..0afbef17
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/index.ts
@@ -0,0 +1,50 @@
+export type {
+  Payload,
+  ProtocolMessage,
+  Provider,
+  HostPermissionKind,
+} from "./types.js";
+
+export type {
+  Awaitable,
+  ChainConnect,
+  ChainConnection,
+  ChainProvider,
+  Features,
+  HostCallbacks,
+  Navigation,
+  Notifications,
+  Permissions,
+  PlatformJsonRpcConnection,
+  Storage,
+  WasmCoreLike,
+  WasmRawCallbacks,
+} from "./runtime.js";
+export { createUnavailableCallbacks, createWasmProvider } from "./runtime.js";
+
+export type { CreateNodeWasmProviderOptions } from "./node-runtime.js";
+export { createNodeWasmProvider } from "./node-runtime.js";
+
+export type {
+  CallbackArgs,
+  CallbackName,
+  MainToWorker,
+  SubscriptionName,
+  WorkerToMain,
+} from "./worker-protocol.js";
+
+export type {
+  CallContext,
+  HostDispatchEntry,
+  HostServerHooks,
+  RequestEntry,
+  SubscriptionCleanup,
+  SubscriptionEntry,
+  SubscriptionFramePort,
+  TrUApiHostServer,
+} from "./dispatcher.js";
+export {
+  createHostServer,
+  toFlatResponsePayload,
+  toResponsePayload,
+} from "./dispatcher.js";
diff --git a/js/packages/truapi-host-wasm/src/node-runtime.ts b/js/packages/truapi-host-wasm/src/node-runtime.ts
new file mode 100644
index 00000000..1c4fc887
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/node-runtime.ts
@@ -0,0 +1,56 @@
+import type { Provider } from "@parity/truapi";
+
+import {
+  createWasmProvider,
+  type WasmCoreLike,
+  type WasmRawCallbacks,
+} from "./runtime.js";
+
+interface NodeWasmModuleShape {
+  WasmTrUApiCore: new (callbacks: unknown) => WasmCoreLike;
+  setDebugEnabled: (enabled: boolean) => void;
+}
+
+/**
+ * Options for `createNodeWasmProvider`.
+ */
+export interface CreateNodeWasmProviderOptions {
+  /** Toggle the wasm core's debug logging. Default: `false`. */
+  debug?: boolean;
+}
+
+/**
+ * Lazy-load the node-targeted WASM bundle and wrap it in a `Provider`.
+ *
+ * The bundle initialises synchronously (wasm-pack nodejs target uses
+ * `require()` under the hood for the .wasm file), so callers receive
+ * a ready-to-use provider once the dynamic import resolves.
+ */
+export async function createNodeWasmProvider(
+  partial: Omit<WasmRawCallbacks, "emitFrame">,
+  options: CreateNodeWasmProviderOptions = {},
+): Promise<Provider> {
+  // Dynamic import keeps the WASM module out of the package's static
+  // dependency graph and out of the tsc rootDir. Indirected through a
+  // variable so TS skips the static module-existence check.
+  const wasmNodePath = "./wasm/node/truapi_server.js";
+  const mod = (await import(
+    /* @vite-ignore */ wasmNodePath
+  )) as NodeWasmModuleShape | { default: NodeWasmModuleShape };
+
+  const wasm: NodeWasmModuleShape =
+    "WasmTrUApiCore" in mod
+      ? (mod as NodeWasmModuleShape)
+      : (mod.default as NodeWasmModuleShape);
+
+  if (!wasm?.WasmTrUApiCore) {
+    throw new Error("Node WASM bundle did not export WasmTrUApiCore");
+  }
+
+  wasm.setDebugEnabled?.(options.debug ?? false);
+
+  return createWasmProvider(
+    (raw) => new wasm.WasmTrUApiCore(raw),
+    partial,
+  );
+}
diff --git a/js/packages/truapi-host-wasm/src/runtime.ts b/js/packages/truapi-host-wasm/src/runtime.ts
new file mode 100644
index 00000000..3c5fb03d
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/runtime.ts
@@ -0,0 +1,218 @@
+import type { Provider } from "@parity/truapi";
+
+// The typed capability interfaces below come straight from the
+// `truapi-platform` Rust crate via `truapi-codegen --platform-ts-output`.
+// They are the host-author-facing surface: each method takes/returns
+// typed wrappers (`HostDevicePermissionRequest`, etc.) rather than raw
+// SCALE bytes. The `WasmRawCallbacks` interface declared further down
+// is the byte-oriented wire surface the WASM core invokes; the SCALE
+// adapter that sits between the typed `HostCallbacks` and the raw
+// callbacks is not yet in this package, but consumers can already build
+// against the typed surface.
+export type {
+  ChainProvider,
+  Features,
+  HostCallbacks,
+  JsonRpcConnection as PlatformJsonRpcConnection,
+  Navigation,
+  Notifications,
+  Permissions,
+  Storage,
+} from "./generated/host-callbacks.js";
+
+/**
+ * Async-or-sync return. Synchronous hosts (e.g. the dotli main-thread
+ * shell hitting localStorage) can return a plain value; the WASM bridge
+ * awaits every return so an `async` impl also works.
+ */
+export type Awaitable<T> = T | Promise<T>;
+
+/**
+ * Open a JSON-RPC connection for `genesisHash`. The wasm bridge passes
+ * `onResponse` so the host can push smoldot replies back asynchronously.
+ * Returning `null` (or throwing) tells the core no provider is available.
+ */
+export type ChainConnect = (
+  genesisHash: string,
+  onResponse: (json: string) => void,
+) => Awaitable<ChainConnection | null>;
+
+/**
+ * Per-connection handle returned by `chainConnect`. `send` forwards a
+ * SCALE-encoded JSON-RPC request; `close` tears the connection down.
+ */
+export interface ChainConnection {
+  send(request: string): void;
+  close(): void;
+}
+
+/**
+ * Raw byte-oriented callbacks the WASM core invokes. Names match the
+ * camelCase property keys the Rust `JsBridge::from_js` extracts. Request
+ * callbacks return `Promise<Uint8Array>` (or `Promise<bool>` for the
+ * permission prompts); subscription callbacks accept a `sendItem` sink
+ * and return an optional `dispose` function.
+ *
+ * This interface is the SCALE-byte-level wire surface between the WASM
+ * core and JS; the typed `HostCallbacks` interface above is the
+ * host-author surface. They overlap on the capability methods covered by
+ * `truapi-platform` but `WasmRawCallbacks` additionally carries
+ * account / signing / statement-store callbacks that live in the Rust
+ * core, not in the platform trait set.
+ */
+export interface WasmRawCallbacks {
+  navigateTo(url: string): Promise<void>;
+  pushNotification(payload: Uint8Array): Promise<void>;
+  devicePermission(payload: Uint8Array): Promise<boolean>;
+  remotePermission(payload: Uint8Array): Promise<boolean>;
+  featureSupported(payload: Uint8Array): Promise<Uint8Array>;
+  localStorageRead(key: string): Promise<Uint8Array | null | undefined>;
+  localStorageWrite(key: string, value: Uint8Array): Promise<void>;
+  localStorageClear(key: string): Promise<void>;
+  accountGet(payload: Uint8Array): Promise<Uint8Array>;
+  accountGetAlias(payload: Uint8Array): Promise<Uint8Array>;
+  accountCreateProof(payload: Uint8Array): Promise<Uint8Array>;
+  getLegacyAccounts(payload: Uint8Array): Promise<Uint8Array>;
+  accountConnectionStatusSubscribe(
+    sendItem: (bytes: Uint8Array) => void,
+  ): (() => void) | void;
+  getUserId(payload: Uint8Array): Promise<Uint8Array>;
+  signPayload(payload: Uint8Array): Promise<Uint8Array>;
+  signRaw(payload: Uint8Array): Promise<Uint8Array>;
+  statementStoreSubscribe(
+    payload: Uint8Array,
+    sendItem: (bytes: Uint8Array) => void,
+  ): (() => void) | void;
+  statementStoreSubmit(payload: Uint8Array): Promise<Uint8Array>;
+  statementStoreCreateProof(payload: Uint8Array): Promise<Uint8Array>;
+  preimageLookupSubscribe(
+    payload: Uint8Array,
+    sendItem: (bytes: Uint8Array) => void,
+  ): (() => void) | void;
+  /** Optional. When omitted, the WASM bridge reports chain calls as
+   * "unavailable". Hosts that own chain access (e.g. dotli's
+   * smoldot/RPC toggle) supply it. */
+  chainConnect?: ChainConnect;
+  emitFrame(frame: Uint8Array): void;
+  dispose?(): void;
+}
+
+/**
+ * Stubs every required callback so a host can spread them over its own
+ * implementation and override only what it supports. Unavailable methods
+ * reject with a descriptive error; unavailable subscriptions resolve to
+ * no-op start handlers.
+ */
+export function createUnavailableCallbacks(): Omit<
+  WasmRawCallbacks,
+  "emitFrame" | "dispose" | "chainConnect"
+> {
+  const unavailable =
+    (method: string) =>
+    async (): Promise<never> => {
+      throw new Error(`${method} unavailable on this host`);
+    };
+  const noopSubscribe = (): void => {};
+  return {
+    navigateTo: unavailable("navigateTo"),
+    pushNotification: unavailable("pushNotification"),
+    devicePermission: async () => false,
+    remotePermission: async () => false,
+    featureSupported: unavailable("featureSupported"),
+    localStorageRead: async () => undefined,
+    localStorageWrite: async () => {},
+    localStorageClear: async () => {},
+    accountGet: unavailable("accountGet"),
+    accountGetAlias: unavailable("accountGetAlias"),
+    accountCreateProof: unavailable("accountCreateProof"),
+    getLegacyAccounts: unavailable("getLegacyAccounts"),
+    accountConnectionStatusSubscribe: noopSubscribe,
+    getUserId: unavailable("getUserId"),
+    signPayload: unavailable("signPayload"),
+    signRaw: unavailable("signRaw"),
+    statementStoreSubscribe: noopSubscribe,
+    statementStoreSubmit: unavailable("statementStoreSubmit"),
+    statementStoreCreateProof: unavailable("statementStoreCreateProof"),
+    preimageLookupSubscribe: noopSubscribe,
+  };
+}
+
+/**
+ * Shape exposed by the wasm-pack output's `WasmTrUApiCore`. Kept local
+ * so the package does not have a hard dependency on the generated `.d.ts`
+ * file path.
+ */
+export interface WasmCoreLike {
+  receiveFromProduct(frame: Uint8Array): Promise<void>;
+  dispose(): void;
+  free(): void;
+}
+
+/**
+ * Wraps a WASM core in a `Provider`, the byte transport abstraction
+ * exposed by `@parity/truapi`. The provider can be handed to
+ * `createHostServer` from `@parity/truapi-host` so the dispatcher dispatches
+ * inbound frames into the WASM core and forwards core-emitted frames back
+ * to the listener registered through `provider.subscribe`.
+ */
+export function createWasmProvider(
+  createCore: (rawCallbacks: WasmRawCallbacks) => WasmCoreLike,
+  partial: Omit<WasmRawCallbacks, "emitFrame">,
+): Provider {
+  const listeners = new Set<(message: Uint8Array) => void>();
+  const closeListeners = new Set<(error: Error) => void>();
+  let disposed = false;
+
+  const raw: WasmRawCallbacks = {
+    ...partial,
+    emitFrame(frame: Uint8Array) {
+      if (disposed) return;
+      // Copy out of the WASM-owned buffer so retained references stay
+      // valid once the core reuses the underlying memory.
+      const copy = new Uint8Array(frame.length);
+      copy.set(frame);
+      for (const listener of [...listeners]) listener(copy);
+    },
+  };
+
+  const core = createCore(raw);
+
+  return {
+    postMessage(bytes: Uint8Array): void {
+      if (disposed) return;
+      void core.receiveFromProduct(bytes).catch((err: unknown) => {
+        const error = err instanceof Error ? err : new Error(String(err));
+        for (const listener of [...closeListeners]) listener(error);
+      });
+    },
+    subscribe(callback) {
+      listeners.add(callback);
+      return () => {
+        listeners.delete(callback);
+      };
+    },
+    subscribeClose(callback) {
+      closeListeners.add(callback);
+      return () => {
+        closeListeners.delete(callback);
+      };
+    },
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      try {
+        core.dispose();
+      } catch {
+        // host dispose threw, swallow during teardown
+      }
+      try {
+        core.free();
+      } catch {
+        // already freed
+      }
+      listeners.clear();
+      closeListeners.clear();
+      partial.dispose?.();
+    },
+  };
+}
diff --git a/js/packages/truapi-host-wasm/src/types.ts b/js/packages/truapi-host-wasm/src/types.ts
new file mode 100644
index 00000000..6ee1216c
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/types.ts
@@ -0,0 +1,9 @@
+import type { Payload, ProtocolMessage, Provider } from "@parity/truapi";
+
+export type { Payload, ProtocolMessage, Provider };
+
+/**
+ * Subset of permission tags the host can be asked to prompt for. Mirrors
+ * the Rust `Permission` enum that flows through the WASM bridge.
+ */
+export type HostPermissionKind = "Device" | "Remote";
diff --git a/js/packages/truapi-host-wasm/src/web/create-iframe-host.ts b/js/packages/truapi-host-wasm/src/web/create-iframe-host.ts
new file mode 100644
index 00000000..b868d472
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/web/create-iframe-host.ts
@@ -0,0 +1,140 @@
+import type { Provider } from "@parity/truapi";
+
+/**
+ * Options for `createIframeHost`.
+ */
+export interface IframeHostOptions {
+  /** URL of the product iframe. */
+  iframeUrl: string;
+  /** Container element the iframe is appended to. */
+  container: HTMLElement;
+  /**
+   * Called with one end of the MessageChannel once the iframe has loaded.
+   * Hosts typically pipe this into a `Provider` (e.g. via
+   * `createMessagePortProvider` from `@parity/truapi`) and hand the
+   * provider to `createHostServer`.
+   */
+  onPort: (port: MessagePort) => void;
+  /**
+   * Optional explicit allow-list origin. Defaults to the origin of
+   * `iframeUrl`. Throws if it disagrees with the iframe URL's origin.
+   */
+  allowedOrigin?: string;
+  /** Override the default iframe sandbox attribute. */
+  sandbox?: string;
+}
+
+/**
+ * Handle returned by `createIframeHost`.
+ */
+export interface IframeHost {
+  iframe: HTMLIFrameElement;
+  dispose: () => void;
+}
+
+const DEFAULT_IFRAME_SANDBOX = "allow-forms allow-same-origin allow-scripts";
+
+function resolveAllowedOrigin(
+  iframeUrl: string,
+  allowedOrigin?: string,
+): string {
+  const targetUrl = new URL(iframeUrl, window.location.href);
+  if (targetUrl.protocol !== "http:" && targetUrl.protocol !== "https:") {
+    throw new Error(
+      `Iframe host only allows http(s) playground URLs, received ${targetUrl.protocol}`,
+    );
+  }
+
+  if (!allowedOrigin) {
+    return targetUrl.origin;
+  }
+
+  const normalizedOrigin = new URL(allowedOrigin).origin;
+  if (normalizedOrigin !== targetUrl.origin) {
+    throw new Error(
+      `Iframe host origin policy mismatch, expected ${normalizedOrigin}, got ${targetUrl.origin}`,
+    );
+  }
+
+  return normalizedOrigin;
+}
+
+/**
+ * Embed a product iframe and transfer a `MessagePort` into it. The host
+ * keeps the other end and passes it to a `Provider` (typically via
+ * `createMessagePortProvider`). All product traffic flows over the
+ * MessageChannel.
+ */
+export function createIframeHost(options: IframeHostOptions): IframeHost {
+  const {
+    iframeUrl,
+    container,
+    onPort,
+    allowedOrigin,
+    sandbox = DEFAULT_IFRAME_SANDBOX,
+  } = options;
+
+  const channel = new MessageChannel();
+  const hostPort = channel.port1;
+  const productPort = channel.port2;
+  const targetOrigin = resolveAllowedOrigin(iframeUrl, allowedOrigin);
+
+  // Hand the host-side port to the caller immediately so it can wire up
+  // a provider before the iframe finishes loading. Queued postMessage
+  // calls are delivered once the channel is started by the provider.
+  onPort(hostPort);
+
+  const iframe = document.createElement("iframe");
+  iframe.style.width = "100%";
+  iframe.style.height = "100%";
+  iframe.style.border = "none";
+  iframe.src = iframeUrl;
+  iframe.setAttribute("sandbox", sandbox);
+  iframe.referrerPolicy = "no-referrer";
+
+  let initSent = false;
+  const sendInit = (): void => {
+    if (initSent) return;
+    const contentWindow = iframe.contentWindow;
+    if (!contentWindow) return;
+    initSent = true;
+    contentWindow.postMessage({ type: "truapi-init" }, targetOrigin, [
+      productPort,
+    ]);
+  };
+
+  iframe.addEventListener("load", sendInit);
+
+  const onWindowMessage = (event: MessageEvent): void => {
+    if (event.source !== iframe.contentWindow) return;
+    if (event.origin !== targetOrigin) return;
+    if (event.data?.type === "truapi-playground-ready") {
+      sendInit();
+    }
+  };
+  window.addEventListener("message", onWindowMessage);
+
+  container.appendChild(iframe);
+
+  return {
+    iframe,
+    dispose() {
+      window.removeEventListener("message", onWindowMessage);
+      try {
+        hostPort.close();
+      } catch {
+        // already closed
+      }
+      try {
+        productPort.close();
+      } catch {
+        // already closed
+      }
+      iframe.remove();
+    },
+  };
+}
+
+// Suppress unused-symbol warning when consumers do not import Provider
+// directly; declaring the type relationship keeps the contract visible.
+export type { Provider };
diff --git a/js/packages/truapi-host-wasm/src/web/create-worker-host-runtime.ts b/js/packages/truapi-host-wasm/src/web/create-worker-host-runtime.ts
new file mode 100644
index 00000000..e600c6d4
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/web/create-worker-host-runtime.ts
@@ -0,0 +1,393 @@
+import type { Provider } from "@parity/truapi";
+import type {
+  CallbackName,
+  ChainConnection,
+  MainToWorker,
+  SubscriptionName,
+  WasmRawCallbacks,
+  WorkerToMain,
+} from "../index.js";
+
+interface WorkerProviderState {
+  worker: Worker;
+  rawCallbacks: WasmRawCallbacks;
+  listeners: Set<(message: Uint8Array) => void>;
+  closeListeners: Set<(error: Error) => void>;
+  subscriptionDisposers: Map<number, () => void>;
+  chainConnections: Map<number, ChainConnection>;
+  disposed: boolean;
+}
+
+function errMsg(err: unknown): string {
+  if (err instanceof Error) return err.message;
+  if (typeof err === "string") return err;
+  return JSON.stringify(err);
+}
+
+function handleCallbackRequest(
+  state: WorkerProviderState,
+  msg: {
+    requestId: number;
+    name: CallbackName;
+    args: readonly unknown[];
+  },
+): void {
+  const fn = (
+    state.rawCallbacks as unknown as Record<
+      string,
+      (...args: readonly unknown[]) => unknown
+    >
+  )[msg.name];
+  if (!fn) {
+    const reply: MainToWorker = {
+      kind: "callbackResponse",
+      requestId: msg.requestId,
+      ok: false,
+      error: `unknown callback: ${msg.name}`,
+    };
+    state.worker.postMessage(reply);
+    return;
+  }
+  Promise.resolve()
+    .then(() => fn(...msg.args))
+    .then(
+      (value) => {
+        const reply: MainToWorker = {
+          kind: "callbackResponse",
+          requestId: msg.requestId,
+          ok: true,
+          value,
+        };
+        state.worker.postMessage(reply);
+      },
+      (err) => {
+        const reply: MainToWorker = {
+          kind: "callbackResponse",
+          requestId: msg.requestId,
+          ok: false,
+          error: errMsg(err),
+        };
+        state.worker.postMessage(reply);
+      },
+    );
+}
+
+function handleSubscriptionStart(
+  state: WorkerProviderState,
+  msg: {
+    subId: number;
+    name: SubscriptionName;
+    payload: Uint8Array | null;
+  },
+): void {
+  const sendItem = (bytes: Uint8Array): void => {
+    if (state.disposed) return;
+    const post: MainToWorker = {
+      kind: "subscriptionItem",
+      subId: msg.subId,
+      bytes,
+    };
+    state.worker.postMessage(post);
+  };
+  let dispose: unknown;
+  try {
+    if (msg.name === "accountConnectionStatusSubscribe") {
+      dispose = state.rawCallbacks.accountConnectionStatusSubscribe(sendItem);
+    } else if (msg.payload !== null) {
+      const fn =
+        msg.name === "statementStoreSubscribe"
+          ? state.rawCallbacks.statementStoreSubscribe
+          : state.rawCallbacks.preimageLookupSubscribe;
+      dispose = fn(msg.payload, sendItem);
+    } else {
+      console.warn(
+        `[truapi worker] ${msg.name} requires payload, none received`,
+      );
+      return;
+    }
+  } catch (err) {
+    console.error(`[truapi worker] ${msg.name} threw on start:`, err);
+    return;
+  }
+  if (typeof dispose === "function") {
+    state.subscriptionDisposers.set(msg.subId, dispose as () => void);
+  }
+}
+
+function handleSubscriptionStop(
+  state: WorkerProviderState,
+  msg: { subId: number },
+): void {
+  const dispose = state.subscriptionDisposers.get(msg.subId);
+  if (!dispose) return;
+  state.subscriptionDisposers.delete(msg.subId);
+  try {
+    dispose();
+  } catch (err) {
+    console.warn("[truapi worker] subscription dispose threw:", err);
+  }
+}
+
+async function handleChainConnectStart(
+  state: WorkerProviderState,
+  msg: { connId: number; genesisHash: string },
+): Promise<void> {
+  const chainConnect = state.rawCallbacks.chainConnect;
+  if (!chainConnect) {
+    const reply: MainToWorker = {
+      kind: "chainConnectAck",
+      connId: msg.connId,
+      ok: false,
+      error: "host did not supply chainConnect",
+    };
+    state.worker.postMessage(reply);
+    return;
+  }
+  const onResponse = (json: string): void => {
+    if (state.disposed) return;
+    const post: MainToWorker = {
+      kind: "chainResponse",
+      connId: msg.connId,
+      json,
+    };
+    state.worker.postMessage(post);
+  };
+  try {
+    const conn = await chainConnect(msg.genesisHash, onResponse);
+    if (!conn) {
+      const reply: MainToWorker = {
+        kind: "chainConnectAck",
+        connId: msg.connId,
+        ok: false,
+        error: `chainConnect returned null for genesisHash ${msg.genesisHash}`,
+      };
+      state.worker.postMessage(reply);
+      return;
+    }
+    state.chainConnections.set(msg.connId, conn);
+    const reply: MainToWorker = {
+      kind: "chainConnectAck",
+      connId: msg.connId,
+      ok: true,
+    };
+    state.worker.postMessage(reply);
+  } catch (err) {
+    const reply: MainToWorker = {
+      kind: "chainConnectAck",
+      connId: msg.connId,
+      ok: false,
+      error: errMsg(err),
+    };
+    state.worker.postMessage(reply);
+  }
+}
+
+function handleChainSend(
+  state: WorkerProviderState,
+  msg: { connId: number; request: string },
+): void {
+  const conn = state.chainConnections.get(msg.connId);
+  if (!conn) return;
+  try {
+    conn.send(msg.request);
+  } catch (err) {
+    console.warn("[truapi worker] chain send threw:", err);
+  }
+}
+
+function handleChainClose(
+  state: WorkerProviderState,
+  msg: { connId: number },
+): void {
+  const conn = state.chainConnections.get(msg.connId);
+  if (!conn) return;
+  state.chainConnections.delete(msg.connId);
+  try {
+    conn.close();
+  } catch (err) {
+    console.warn("[truapi worker] chain close threw:", err);
+  }
+}
+
+export interface CreateWebWorkerProviderOptions {
+  /** Toggle the wasm core's debug logging. Default: `false`. */
+  debug?: boolean;
+}
+
+/**
+ * Spawn the truapi-server WASM in `worker` and bridge it into a
+ * `Provider`. The provider can be handed to `createHostServer` from
+ * `@parity/truapi-host`.
+ *
+ * The caller is responsible for instantiating the Worker, Vite users
+ * typically import the worker entry-point with `?worker`:
+ *
+ * ```ts
+ * import HostWorker from "@parity/truapi-host-wasm/worker-runtime?worker";
+ * const worker = new HostWorker();
+ * const provider = await createWebWorkerProvider(worker, callbacks);
+ * ```
+ *
+ * Resolves once the worker reports `ready` and rejects if the WASM
+ * fails to load.
+ */
+export function createWebWorkerProvider(
+  worker: Worker,
+  callbacks: Omit<WasmRawCallbacks, "emitFrame">,
+  options: CreateWebWorkerProviderOptions = {},
+): Promise<Provider> {
+  return new Promise((resolve, reject) => {
+    const state: WorkerProviderState = {
+      worker,
+      // `emitFrame` is satisfied by the worker side; main thread never
+      // calls it. Fill in a no-op so the typed callback set is complete.
+      rawCallbacks: {
+        ...(callbacks as WasmRawCallbacks),
+        emitFrame: () => {},
+      },
+      listeners: new Set(),
+      closeListeners: new Set(),
+      subscriptionDisposers: new Map(),
+      chainConnections: new Map(),
+      disposed: false,
+    };
+
+    const onMessage = (ev: MessageEvent<WorkerToMain>): void => {
+      const msg = ev.data;
+      switch (msg.kind) {
+        case "ready":
+          break;
+        case "error":
+          console.error("[truapi worker]", msg.error);
+          for (const listener of [...state.closeListeners])
+            listener(new Error(msg.error));
+          break;
+        case "frame":
+          for (const listener of [...state.listeners]) listener(msg.bytes);
+          break;
+        case "callbackRequest":
+          handleCallbackRequest(state, msg);
+          break;
+        case "subscriptionStart":
+          handleSubscriptionStart(state, msg);
+          break;
+        case "subscriptionStop":
+          handleSubscriptionStop(state, msg);
+          break;
+        case "chainConnectStart":
+          void handleChainConnectStart(state, msg);
+          break;
+        case "chainSend":
+          handleChainSend(state, msg);
+          break;
+        case "chainClose":
+          handleChainClose(state, msg);
+          break;
+      }
+    };
+
+    const notifyFault = (error: Error): void => {
+      if (state.disposed) return;
+      state.disposed = true;
+      for (const listener of [...state.closeListeners]) listener(error);
+      state.listeners.clear();
+      state.closeListeners.clear();
+    };
+
+    const onError = (e: ErrorEvent): void => {
+      cleanupInit();
+      worker.terminate();
+      reject(new Error(`worker init failed: ${e.message}`));
+    };
+
+    const onRuntimeError = (e: ErrorEvent): void => {
+      console.error("[truapi worker]", e.message);
+      notifyFault(new Error(`worker error: ${e.message}`));
+    };
+
+    const onMessageError = (): void => {
+      notifyFault(new Error("worker message could not be deserialized"));
+    };
+
+    const onInitMessage = (ev: MessageEvent<WorkerToMain>): void => {
+      const msg = ev.data;
+      if (msg.kind === "ready") {
+        cleanupInit();
+        const configure: MainToWorker = {
+          kind: "configure",
+          debug: options.debug ?? false,
+        };
+        worker.postMessage(configure);
+        worker.addEventListener("message", onMessage);
+        // Surface a post-init worker fault (uncaught throw, OOM, killed
+        // worker) to close listeners for the provider's lifetime.
+        worker.addEventListener("error", onRuntimeError);
+        worker.addEventListener("messageerror", onMessageError);
+        resolve(buildProvider(state));
+      } else if (msg.kind === "error") {
+        cleanupInit();
+        worker.terminate();
+        reject(new Error(`worker init reported error: ${msg.error}`));
+      }
+    };
+
+    const cleanupInit = (): void => {
+      worker.removeEventListener("error", onError);
+      worker.removeEventListener("message", onInitMessage);
+    };
+
+    worker.addEventListener("error", onError);
+    worker.addEventListener("message", onInitMessage);
+  });
+}
+
+function buildProvider(state: WorkerProviderState): Provider {
+  return {
+    postMessage(bytes: Uint8Array): void {
+      if (state.disposed) return;
+      const post: MainToWorker = { kind: "frame", bytes };
+      state.worker.postMessage(post);
+    },
+    subscribe(callback) {
+      state.listeners.add(callback);
+      return () => {
+        state.listeners.delete(callback);
+      };
+    },
+    subscribeClose(callback) {
+      state.closeListeners.add(callback);
+      return () => {
+        state.closeListeners.delete(callback);
+      };
+    },
+    dispose() {
+      if (state.disposed) return;
+      state.disposed = true;
+      for (const fn of state.subscriptionDisposers.values()) {
+        try {
+          fn();
+        } catch {
+          // ignore during teardown
+        }
+      }
+      state.subscriptionDisposers.clear();
+      for (const conn of state.chainConnections.values()) {
+        try {
+          conn.close();
+        } catch {
+          // ignore during teardown
+        }
+      }
+      state.chainConnections.clear();
+      try {
+        const post: MainToWorker = { kind: "dispose" };
+        state.worker.postMessage(post);
+      } catch {
+        // ignore if worker already gone
+      }
+      state.worker.terminate();
+      state.listeners.clear();
+      state.closeListeners.clear();
+    },
+  };
+}
diff --git a/js/packages/truapi-host-wasm/src/web/index.ts b/js/packages/truapi-host-wasm/src/web/index.ts
new file mode 100644
index 00000000..6876c6cc
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/web/index.ts
@@ -0,0 +1,4 @@
+export type { IframeHost, IframeHostOptions } from "./create-iframe-host.js";
+export { createIframeHost } from "./create-iframe-host.js";
+export type { CreateWebWorkerProviderOptions } from "./create-worker-host-runtime.js";
+export { createWebWorkerProvider } from "./create-worker-host-runtime.js";
diff --git a/js/packages/truapi-host-wasm/src/worker-protocol.ts b/js/packages/truapi-host-wasm/src/worker-protocol.ts
new file mode 100644
index 00000000..9c8d30d1
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/worker-protocol.ts
@@ -0,0 +1,76 @@
+// Wire format between the main thread (`createWebWorkerProvider`) and the
+// Web Worker that hosts the truapi-server WASM core.
+//
+// Frames (`kind: 'frame'`) carry SCALE-encoded `ProtocolMessage` bytes
+// untouched in either direction. Everything else is a control message
+// for callback dispatch, subscription bookkeeping, or chain connections.
+
+/**
+ * Names of every request/response style host callback the wasm core can
+ * invoke. Names match the camelCase property keys of `WasmRawCallbacks`.
+ */
+export type CallbackName =
+  | "navigateTo"
+  | "pushNotification"
+  | "devicePermission"
+  | "remotePermission"
+  | "featureSupported"
+  | "localStorageRead"
+  | "localStorageWrite"
+  | "localStorageClear"
+  | "accountGet"
+  | "accountGetAlias"
+  | "accountCreateProof"
+  | "getLegacyAccounts"
+  | "getUserId"
+  | "signPayload"
+  | "signRaw"
+  | "statementStoreSubmit"
+  | "statementStoreCreateProof";
+
+/**
+ * Names of every subscription host callback. Each has the shape
+ * `(payload?, sendItem) => dispose | void`.
+ */
+export type SubscriptionName =
+  | "accountConnectionStatusSubscribe"
+  | "statementStoreSubscribe"
+  | "preimageLookupSubscribe";
+
+/**
+ * Positional arguments for a callback. The wasm core calls each callback
+ * at a fixed arity; a uniform `unknown[]` keeps the wire protocol simple.
+ */
+export type CallbackArgs = readonly unknown[];
+
+export type MainToWorker =
+  | { kind: "configure"; debug: boolean }
+  | { kind: "frame"; bytes: Uint8Array }
+  | { kind: "callbackResponse"; requestId: number; ok: true; value: unknown }
+  | { kind: "callbackResponse"; requestId: number; ok: false; error: string }
+  | { kind: "subscriptionItem"; subId: number; bytes: Uint8Array }
+  | { kind: "chainConnectAck"; connId: number; ok: true }
+  | { kind: "chainConnectAck"; connId: number; ok: false; error: string }
+  | { kind: "chainResponse"; connId: number; json: string }
+  | { kind: "dispose" };
+
+export type WorkerToMain =
+  | { kind: "ready" }
+  | { kind: "error"; error: string }
+  | { kind: "frame"; bytes: Uint8Array }
+  | {
+      kind: "callbackRequest";
+      requestId: number;
+      name: CallbackName;
+      args: CallbackArgs;
+    }
+  | {
+      kind: "subscriptionStart";
+      subId: number;
+      name: SubscriptionName;
+      payload: Uint8Array | null;
+    }
+  | { kind: "subscriptionStop"; subId: number }
+  | { kind: "chainConnectStart"; connId: number; genesisHash: string }
+  | { kind: "chainSend"; connId: number; request: string }
+  | { kind: "chainClose"; connId: number };
diff --git a/js/packages/truapi-host-wasm/src/worker-runtime.ts b/js/packages/truapi-host-wasm/src/worker-runtime.ts
new file mode 100644
index 00000000..505fd123
--- /dev/null
+++ b/js/packages/truapi-host-wasm/src/worker-runtime.ts
@@ -0,0 +1,259 @@
+/// <reference lib="webworker" />
+// Worker entrypoint. Loads the web-targeted truapi-server WASM bundle and
+// bridges every host callback over postMessage. The main thread keeps the
+// state that needs DOM access (localStorage, prompts) while the CPU-heavy
+// smoldot/dispatcher work runs here off the page main thread.
+
+import type {
+  CallbackName,
+  MainToWorker,
+  SubscriptionName,
+  WorkerToMain,
+} from "./worker-protocol.js";
+
+interface WasmCore {
+  receiveFromProduct(frame: Uint8Array): Promise<void>;
+  dispose(): void;
+  free(): void;
+}
+
+interface WasmModuleShape {
+  default: (input?: unknown) => Promise<unknown>;
+  WasmTrUApiCore: new (callbacks: unknown) => WasmCore;
+  setDebugEnabled: (enabled: boolean) => void;
+}
+
+// Resolved at runtime, the wasm-pack artifact lives outside `src/` so a
+// static import would leak into the TS rootDir. The relative path is
+// resolved against `dist/worker-runtime.js` once compiled. Indirected
+// through a variable so TS skips the static module-existence check.
+const WASM_WEB_PATH = "./wasm/web/truapi_server.js";
+const wasmModulePromise = import(
+  /* @vite-ignore */ WASM_WEB_PATH
+) as Promise<WasmModuleShape>;
+
+const ctx = self as unknown as DedicatedWorkerGlobalScope;
+
+function postToMain(msg: WorkerToMain): void {
+  ctx.postMessage(msg);
+}
+
+function errMsg(err: unknown): string {
+  if (err instanceof Error) return err.message;
+  if (typeof err === "string") return err;
+  return JSON.stringify(err);
+}
+
+let nextRequestId = 0;
+const pendingCallbacks = new Map<
+  number,
+  (
+    result: { ok: true; value: unknown } | { ok: false; error: string },
+  ) => void
+>();
+
+let nextSubId = 0;
+const subscriptionItemListeners = new Map<
+  number,
+  (bytes: Uint8Array) => void
+>();
+
+let nextConnId = 0;
+type ChainConnectAck = { ok: true } | { ok: false; error: string };
+const chainConnectAcks = new Map<number, (ack: ChainConnectAck) => void>();
+const chainResponseListeners = new Map<number, (json: string) => void>();
+
+function callbackRequest(
+  name: CallbackName,
+  args: readonly unknown[],
+): Promise<unknown> {
+  return new Promise((resolve, reject) => {
+    const requestId = ++nextRequestId;
+    pendingCallbacks.set(requestId, (r) => {
+      if (r.ok) resolve(r.value);
+      else reject(new Error(r.error));
+    });
+    postToMain({ kind: "callbackRequest", requestId, name, args });
+  });
+}
+
+function startSubscription(
+  name: SubscriptionName,
+  payload: Uint8Array | null,
+  sendItem: (bytes: Uint8Array) => void,
+): () => void {
+  const subId = ++nextSubId;
+  subscriptionItemListeners.set(subId, sendItem);
+  postToMain({ kind: "subscriptionStart", subId, name, payload });
+  return () => {
+    subscriptionItemListeners.delete(subId);
+    postToMain({ kind: "subscriptionStop", subId });
+  };
+}
+
+interface WorkerChainConnection {
+  send(request: string): void;
+  close(): void;
+}
+
+function chainConnect(
+  genesisHash: string,
+  onResponse: (json: string) => void,
+): Promise<WorkerChainConnection | null> {
+  const connId = ++nextConnId;
+  return new Promise((resolve, reject) => {
+    chainConnectAcks.set(connId, (ack) => {
+      if (!ack.ok) {
+        chainResponseListeners.delete(connId);
+        reject(new Error(ack.error));
+        return;
+      }
+      resolve({
+        send(request: string) {
+          postToMain({ kind: "chainSend", connId, request });
+        },
+        close() {
+          chainResponseListeners.delete(connId);
+          postToMain({ kind: "chainClose", connId });
+        },
+      });
+    });
+    chainResponseListeners.set(connId, onResponse);
+    postToMain({ kind: "chainConnectStart", connId, genesisHash });
+  });
+}
+
+const rawCallbacks = {
+  navigateTo: (url: string) => callbackRequest("navigateTo", [url]),
+  pushNotification: (payload: Uint8Array) =>
+    callbackRequest("pushNotification", [payload]),
+  devicePermission: (payload: Uint8Array) =>
+    callbackRequest("devicePermission", [payload]) as Promise<boolean>,
+  remotePermission: (payload: Uint8Array) =>
+    callbackRequest("remotePermission", [payload]) as Promise<boolean>,
+  featureSupported: (payload: Uint8Array) =>
+    callbackRequest("featureSupported", [payload]) as Promise<Uint8Array>,
+  localStorageRead: (key: string) =>
+    callbackRequest("localStorageRead", [key]) as Promise<
+      Uint8Array | null | undefined
+    >,
+  localStorageWrite: (key: string, value: Uint8Array) =>
+    callbackRequest("localStorageWrite", [key, value]),
+  localStorageClear: (key: string) =>
+    callbackRequest("localStorageClear", [key]),
+  accountGet: (payload: Uint8Array) =>
+    callbackRequest("accountGet", [payload]) as Promise<Uint8Array>,
+  accountGetAlias: (payload: Uint8Array) =>
+    callbackRequest("accountGetAlias", [payload]) as Promise<Uint8Array>,
+  accountCreateProof: (payload: Uint8Array) =>
+    callbackRequest("accountCreateProof", [payload]) as Promise<Uint8Array>,
+  getLegacyAccounts: (payload: Uint8Array) =>
+    callbackRequest("getLegacyAccounts", [payload]) as Promise<Uint8Array>,
+  accountConnectionStatusSubscribe: (sendItem: (bytes: Uint8Array) => void) =>
+    startSubscription("accountConnectionStatusSubscribe", null, sendItem),
+  getUserId: (payload: Uint8Array) =>
+    callbackRequest("getUserId", [payload]) as Promise<Uint8Array>,
+  signPayload: (payload: Uint8Array) =>
+    callbackRequest("signPayload", [payload]) as Promise<Uint8Array>,
+  signRaw: (payload: Uint8Array) =>
+    callbackRequest("signRaw", [payload]) as Promise<Uint8Array>,
+  statementStoreSubscribe: (
+    payload: Uint8Array,
+    sendItem: (bytes: Uint8Array) => void,
+  ) => startSubscription("statementStoreSubscribe", payload, sendItem),
+  statementStoreSubmit: (payload: Uint8Array) =>
+    callbackRequest("statementStoreSubmit", [payload]) as Promise<Uint8Array>,
+  statementStoreCreateProof: (payload: Uint8Array) =>
+    callbackRequest(
+      "statementStoreCreateProof",
+      [payload],
+    ) as Promise<Uint8Array>,
+  preimageLookupSubscribe: (
+    payload: Uint8Array,
+    sendItem: (bytes: Uint8Array) => void,
+  ) => startSubscription("preimageLookupSubscribe", payload, sendItem),
+  chainConnect,
+  emitFrame(frame: Uint8Array): void {
+    postToMain({ kind: "frame", bytes: frame });
+  },
+  dispose(): void {
+    // Main thread terminates the worker, no separate cleanup needed here.
+  },
+};
+
+let core: WasmCore | null = null;
+let wasm: WasmModuleShape | null = null;
+
+(async () => {
+  try {
+    wasm = await wasmModulePromise;
+    await wasm.default();
+    core = new wasm.WasmTrUApiCore(rawCallbacks);
+    postToMain({ kind: "ready" });
+  } catch (err) {
+    postToMain({ kind: "error", error: errMsg(err) });
+  }
+})();
+
+ctx.addEventListener("message", (ev: MessageEvent<MainToWorker>) => {
+  const msg = ev.data;
+  switch (msg.kind) {
+    case "configure":
+      wasm?.setDebugEnabled(msg.debug);
+      break;
+    case "frame":
+      void handleFrame(msg.bytes);
+      break;
+    case "callbackResponse": {
+      const cb = pendingCallbacks.get(msg.requestId);
+      if (cb) {
+        pendingCallbacks.delete(msg.requestId);
+        cb(
+          msg.ok
+            ? { ok: true, value: msg.value }
+            : { ok: false, error: msg.error },
+        );
+      }
+      break;
+    }
+    case "subscriptionItem": {
+      const listener = subscriptionItemListeners.get(msg.subId);
+      if (listener) listener(msg.bytes);
+      break;
+    }
+    case "chainConnectAck": {
+      const cb = chainConnectAcks.get(msg.connId);
+      if (cb) {
+        chainConnectAcks.delete(msg.connId);
+        cb(msg.ok ? { ok: true } : { ok: false, error: msg.error });
+      }
+      break;
+    }
+    case "chainResponse": {
+      const listener = chainResponseListeners.get(msg.connId);
+      if (listener) listener(msg.json);
+      break;
+    }
+    case "dispose":
+      try {
+        core?.dispose();
+        core?.free();
+      } catch (err) {
+        postToMain({ kind: "error", error: `dispose: ${errMsg(err)}` });
+      }
+      core = null;
+      break;
+  }
+});
+
+async function handleFrame(bytes: Uint8Array): Promise<void> {
+  if (!core) {
+    postToMain({ kind: "error", error: "frame received before core is ready" });
+    return;
+  }
+  try {
+    await core.receiveFromProduct(bytes);
+  } catch (err) {
+    postToMain({ kind: "error", error: `receiveFromProduct: ${errMsg(err)}` });
+  }
+}
diff --git a/js/packages/truapi-host-wasm/test/create-iframe-host.test.mjs b/js/packages/truapi-host-wasm/test/create-iframe-host.test.mjs
new file mode 100644
index 00000000..d4ea9695
--- /dev/null
+++ b/js/packages/truapi-host-wasm/test/create-iframe-host.test.mjs
@@ -0,0 +1,240 @@
+// Verify that `createIframeHost` hands a MessagePort back through `onPort`,
+// constructs an iframe with the expected attributes, and posts the
+// `truapi-init` handshake to the iframe's contentWindow on load.
+
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { createIframeHost } from "../dist/web/index.js";
+
+function setupFakeDom() {
+  // Track listeners on the synthetic `window` and the iframe so the
+  // test can simulate the iframe `load` event after construction.
+  const iframeListeners = new Map();
+  const windowListeners = new Map();
+  const windowRemove = test.mock.fn();
+  const contentPostMessage = test.mock.fn();
+
+  const contentWindow = {
+    postMessage: contentPostMessage,
+  };
+
+  const iframe = {
+    style: {},
+    setAttribute: test.mock.fn(),
+    addEventListener: (name, fn) => {
+      iframeListeners.set(name, fn);
+    },
+    removeEventListener: () => {},
+    remove: test.mock.fn(),
+    referrerPolicy: "",
+    src: "",
+    contentWindow,
+  };
+
+  const container = {
+    appendChild: test.mock.fn(),
+  };
+
+  // Spy on both MessageChannel ports so dispose() teardown is observable.
+  const port1 = { postMessage: test.mock.fn(), close: test.mock.fn() };
+  const port2 = { postMessage: test.mock.fn(), close: test.mock.fn() };
+  globalThis.MessageChannel = class {
+    constructor() {
+      this.port1 = port1;
+      this.port2 = port2;
+    }
+  };
+
+  globalThis.document = {
+    createElement: (tag) => {
+      assert.equal(tag, "iframe");
+      return iframe;
+    },
+  };
+  globalThis.window = {
+    location: { href: "http://localhost:5174/" },
+    addEventListener: (name, fn) => {
+      windowListeners.set(name, fn);
+    },
+    removeEventListener: windowRemove,
+  };
+
+  return {
+    iframe,
+    container,
+    contentPostMessage,
+    contentWindow,
+    iframeListeners,
+    windowListeners,
+    windowRemove,
+    port1,
+    port2,
+  };
+}
+
+function teardownFakeDom() {
+  delete globalThis.document;
+  delete globalThis.window;
+  delete globalThis.MessageChannel;
+}
+
+test("createIframeHost hands back a MessagePort and posts truapi-init on load", () => {
+  const {
+    iframe,
+    container,
+    contentPostMessage,
+    iframeListeners,
+    windowRemove,
+    port1,
+    port2,
+  } = setupFakeDom();
+
+  try {
+    let receivedPort = null;
+    const host = createIframeHost({
+      iframeUrl: "http://localhost:5174/",
+      container,
+      onPort: (port) => {
+        receivedPort = port;
+      },
+    });
+
+    assert.ok(receivedPort, "onPort must fire synchronously");
+    assert.equal(typeof receivedPort.postMessage, "function");
+    assert.equal(container.appendChild.mock.callCount(), 1);
+    assert.equal(host.iframe, iframe);
+    assert.equal(iframe.src, "http://localhost:5174/");
+
+    // Simulate the iframe finishing load.
+    const onLoad = iframeListeners.get("load");
+    assert.ok(onLoad, "load handler must be registered");
+    onLoad();
+
+    assert.equal(contentPostMessage.mock.callCount(), 1);
+    const [body, origin, transferList] = contentPostMessage.mock.calls[0].arguments;
+    assert.deepEqual(body, { type: "truapi-init" });
+    assert.equal(origin, "http://localhost:5174");
+    assert.equal(transferList.length, 1);
+
+    // Idempotent, a second load event must not send another init.
+    onLoad();
+    assert.equal(contentPostMessage.mock.callCount(), 1);
+
+    host.dispose();
+    assert.equal(iframe.remove.mock.callCount(), 1);
+    assert.equal(
+      windowRemove.mock.callCount(),
+      1,
+      "dispose removes the window message listener",
+    );
+    assert.equal(windowRemove.mock.calls[0].arguments[0], "message");
+    assert.equal(
+      port1.close.mock.callCount(),
+      1,
+      "host port closed on dispose",
+    );
+    assert.equal(
+      port2.close.mock.callCount(),
+      1,
+      "product port closed on dispose",
+    );
+  } finally {
+    teardownFakeDom();
+  }
+});
+
+test("createIframeHost sends truapi-init on a same-origin playground-ready message", () => {
+  const { contentPostMessage, windowListeners, contentWindow } = setupFakeDom();
+
+  try {
+    createIframeHost({
+      iframeUrl: "http://localhost:5174/",
+      container: { appendChild: () => {} },
+      onPort: () => {},
+    });
+
+    const onMessage = windowListeners.get("message");
+    assert.ok(onMessage, "window message listener must be registered");
+
+    // Wrong source is dropped.
+    onMessage({
+      source: { other: true },
+      origin: "http://localhost:5174",
+      data: { type: "truapi-playground-ready" },
+    });
+    assert.equal(
+      contentPostMessage.mock.callCount(),
+      0,
+      "wrong source dropped",
+    );
+
+    // Wrong origin is dropped.
+    onMessage({
+      source: contentWindow,
+      origin: "http://evil.example",
+      data: { type: "truapi-playground-ready" },
+    });
+    assert.equal(
+      contentPostMessage.mock.callCount(),
+      0,
+      "wrong origin dropped",
+    );
+
+    // Correct source + origin triggers the init handshake.
+    onMessage({
+      source: contentWindow,
+      origin: "http://localhost:5174",
+      data: { type: "truapi-playground-ready" },
+    });
+    assert.equal(contentPostMessage.mock.callCount(), 1, "ready triggers init");
+    const [body, origin] = contentPostMessage.mock.calls[0].arguments;
+    assert.deepEqual(body, { type: "truapi-init" });
+    assert.equal(origin, "http://localhost:5174");
+
+    // The handshake is idempotent across a later load event too.
+    onMessage({
+      source: contentWindow,
+      origin: "http://localhost:5174",
+      data: { type: "truapi-playground-ready" },
+    });
+    assert.equal(contentPostMessage.mock.callCount(), 1, "init sent only once");
+  } finally {
+    teardownFakeDom();
+  }
+});
+
+test("createIframeHost rejects a mismatched allowedOrigin", () => {
+  setupFakeDom();
+  try {
+    assert.throws(
+      () =>
+        createIframeHost({
+          iframeUrl: "http://localhost:5174/",
+          container: { appendChild: () => {} },
+          onPort: () => {},
+          allowedOrigin: "http://localhost:9999",
+        }),
+      /origin policy mismatch/,
+    );
+  } finally {
+    teardownFakeDom();
+  }
+});
+
+test("createIframeHost rejects non-http(s) iframe URLs", () => {
+  setupFakeDom();
+  try {
+    assert.throws(
+      () =>
+        createIframeHost({
+          iframeUrl: "file:///etc/passwd",
+          container: { appendChild: () => {} },
+          onPort: () => {},
+        }),
+      /only allows http\(s\)/,
+    );
+  } finally {
+    teardownFakeDom();
+  }
+});
diff --git a/js/packages/truapi-host-wasm/test/dispatcher-roundtrip.test.mjs b/js/packages/truapi-host-wasm/test/dispatcher-roundtrip.test.mjs
new file mode 100644
index 00000000..3b6d7bbc
--- /dev/null
+++ b/js/packages/truapi-host-wasm/test/dispatcher-roundtrip.test.mjs
@@ -0,0 +1,205 @@
+// Smoke test that the dispatcher re-export from @parity/truapi-host-wasm
+// routes inbound request frames to a registered handler and emits a
+// response frame back through the provider, end-to-end.
+
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { encodeWireMessage, decodeWireMessage } from "@parity/truapi";
+import { createHostServer } from "../dist/index.js";
+
+function makeRecordingProvider() {
+  const listeners = new Set();
+  const closeListeners = new Set();
+  const sent = [];
+  return {
+    sent,
+    provider: {
+      postMessage(bytes) {
+        sent.push(bytes);
+      },
+      subscribe(callback) {
+        listeners.add(callback);
+        return () => listeners.delete(callback);
+      },
+      subscribeClose(callback) {
+        closeListeners.add(callback);
+        return () => closeListeners.delete(callback);
+      },
+      dispose() {
+        listeners.clear();
+        closeListeners.clear();
+      },
+    },
+    deliver(message) {
+      for (const listener of [...listeners]) listener(message);
+    },
+    triggerClose(error) {
+      for (const listener of [...closeListeners]) listener(error);
+    },
+  };
+}
+
+test("createHostServer dispatches a request id to the matching entry and emits a response", async () => {
+  const requestId = 7;
+  const responseId = 8;
+  const { provider, sent, deliver } = makeRecordingProvider();
+
+  const entries = [
+    {
+      kind: "request",
+      ids: { request: requestId, response: responseId },
+      async handle(ctx, payload) {
+        assert.equal(typeof ctx.requestId, "string");
+        // Echo with one extra byte so the test asserts that the right
+        // bytes flowed through.
+        const out = new Uint8Array(payload.length + 1);
+        out.set(payload);
+        out[payload.length] = 42;
+        return out;
+      },
+    },
+  ];
+
+  const server = createHostServer(provider, entries);
+
+  const inboundFrame = encodeWireMessage({
+    requestId: "req-1",
+    payload: { id: requestId, value: new Uint8Array([1, 2, 3]) },
+  });
+  assert.ok(inboundFrame.isOk(), "inbound frame must encode");
+  deliver(inboundFrame.value);
+
+  // Allow the handler microtask + send to resolve.
+  await new Promise((r) => setImmediate(r));
+
+  assert.equal(sent.length, 1, "exactly one response emitted");
+  const decoded = decodeWireMessage(sent[0]);
+  assert.ok(decoded.isOk(), "response frame must decode");
+  assert.equal(decoded.value.requestId, "req-1");
+  assert.equal(decoded.value.payload.id, responseId);
+  assert.deepEqual(
+    Array.from(decoded.value.payload.value),
+    [1, 2, 3, 42],
+    "payload should echo + extra byte",
+  );
+
+  server.dispose();
+});
+
+test("a rejecting request handler triggers onRequestHandlerError and emits no frame", async () => {
+  const { provider, sent, deliver } = makeRecordingProvider();
+
+  const errors = [];
+  const entries = [
+    {
+      kind: "request",
+      ids: { request: 7, response: 8 },
+      async handle() {
+        throw new Error("handler boom");
+      },
+    },
+  ];
+  const server = createHostServer(provider, entries, {
+    onRequestHandlerError: (ids, error, ctx) => {
+      errors.push({ ids, error, ctx });
+    },
+  });
+
+  const frame = encodeWireMessage({
+    requestId: "req-err",
+    payload: { id: 7, value: new Uint8Array([1]) },
+  });
+  assert.ok(frame.isOk());
+  deliver(frame.value);
+  await new Promise((r) => setImmediate(r));
+
+  assert.equal(errors.length, 1, "onRequestHandlerError fired once");
+  assert.equal(errors[0].error.message, "handler boom");
+  assert.deepEqual(errors[0].ids, { request: 7, response: 8 });
+  assert.equal(errors[0].ctx.requestId, "req-err");
+  assert.equal(sent.length, 0, "no response frame on handler rejection");
+
+  server.dispose();
+});
+
+test("a frame with an unregistered id triggers onUnknownFrame", () => {
+  const { provider, sent, deliver } = makeRecordingProvider();
+
+  const unknown = [];
+  const server = createHostServer(provider, [], {
+    onUnknownFrame: (payload) => unknown.push(payload),
+  });
+
+  const frame = encodeWireMessage({
+    requestId: "req-unknown",
+    payload: { id: 200, value: new Uint8Array([9, 9]) },
+  });
+  assert.ok(frame.isOk());
+  deliver(frame.value);
+
+  assert.equal(unknown.length, 1, "onUnknownFrame fired once");
+  assert.equal(unknown[0].id, 200);
+  assert.deepEqual(Array.from(unknown[0].value), [9, 9]);
+  assert.equal(sent.length, 0, "no frame emitted for an unknown id");
+
+  server.dispose();
+});
+
+test("a truncated/garbage buffer is dropped without throwing or sending", () => {
+  const { provider, sent, deliver } = makeRecordingProvider();
+
+  const unknown = [];
+  const handlerErrors = [];
+  const server = createHostServer(provider, [], {
+    onUnknownFrame: (payload) => unknown.push(payload),
+    onRequestHandlerError: (_ids, error) => handlerErrors.push(error),
+  });
+
+  // A compact-length prefix that promises more bytes than exist.
+  assert.doesNotThrow(() => deliver(new Uint8Array([0xff, 0xff, 0xff, 0xff])));
+
+  assert.equal(sent.length, 0, "no frame emitted for a garbage buffer");
+  assert.equal(unknown.length, 0, "decode failure is not an unknown frame");
+  assert.equal(
+    handlerErrors.length,
+    0,
+    "decode failure does not reach handlers",
+  );
+
+  server.dispose();
+});
+
+test("firing the provider close callback disposes the server", async () => {
+  const recording = makeRecordingProvider();
+  const { provider, sent, deliver, triggerClose } = recording;
+
+  let handled = 0;
+  const entries = [
+    {
+      kind: "request",
+      ids: { request: 7, response: 8 },
+      async handle(_ctx, payload) {
+        handled += 1;
+        return payload;
+      },
+    },
+  ];
+  const server = createHostServer(provider, entries);
+
+  triggerClose(new Error("provider gone"));
+
+  const frame = encodeWireMessage({
+    requestId: "after-close",
+    payload: { id: 7, value: new Uint8Array([1]) },
+  });
+  assert.ok(frame.isOk());
+  deliver(frame.value);
+  await new Promise((r) => setImmediate(r));
+
+  assert.equal(handled, 0, "inbound frames are ignored after close");
+  assert.equal(sent.length, 0, "no frames emitted after close");
+
+  // dispose remains idempotent after a close-driven teardown.
+  server.dispose();
+});
diff --git a/js/packages/truapi-host-wasm/test/node-wasm-provider.test.mjs b/js/packages/truapi-host-wasm/test/node-wasm-provider.test.mjs
new file mode 100644
index 00000000..4ef5ee93
--- /dev/null
+++ b/js/packages/truapi-host-wasm/test/node-wasm-provider.test.mjs
@@ -0,0 +1,128 @@
+// Smoke test that `createNodeWasmProvider` instantiates the WASM core,
+// returns a usable `Provider`, and disposes cleanly without leaking
+// resources back to the caller.
+
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import {
+  encodeWireMessage,
+  decodeWireMessage,
+  VersionedHostFeatureSupportedRequest,
+  HostFeatureSupportedResponse,
+  GenericError,
+  scale as S,
+} from "@parity/truapi";
+import { SYSTEM_FEATURE_SUPPORTED } from "@parity/truapi/wire-table";
+
+import { createNodeWasmProvider } from "../dist/index.js";
+
+function makeCallbacks() {
+  const unavailable = (name) => async () => {
+    throw new Error(`${name} unavailable`);
+  };
+  const noopSubscribe = () => () => {};
+  return {
+    navigateTo: async () => {},
+    pushNotification: async () => {},
+    devicePermission: async () => false,
+    remotePermission: async () => false,
+    featureSupported: async () => new Uint8Array(),
+    localStorageRead: async () => undefined,
+    localStorageWrite: async () => {},
+    localStorageClear: async () => {},
+    accountGet: unavailable("accountGet"),
+    accountGetAlias: unavailable("accountGetAlias"),
+    accountCreateProof: unavailable("accountCreateProof"),
+    getLegacyAccounts: unavailable("getLegacyAccounts"),
+    accountConnectionStatusSubscribe: noopSubscribe,
+    getUserId: unavailable("getUserId"),
+    signPayload: unavailable("signPayload"),
+    signRaw: unavailable("signRaw"),
+    statementStoreSubscribe: noopSubscribe,
+    statementStoreSubmit: unavailable("statementStoreSubmit"),
+    statementStoreCreateProof: unavailable("statementStoreCreateProof"),
+    preimageLookupSubscribe: noopSubscribe,
+    dispose: () => {},
+  };
+}
+
+test("createNodeWasmProvider returns a usable Provider", async () => {
+  const provider = await createNodeWasmProvider(makeCallbacks());
+  assert.equal(typeof provider.postMessage, "function");
+  assert.equal(typeof provider.subscribe, "function");
+  assert.equal(typeof provider.dispose, "function");
+
+  // Subscribe and immediately unsubscribe to exercise the listener
+  // bookkeeping without needing a valid frame.
+  const unsubscribe = provider.subscribe(() => {});
+  unsubscribe();
+
+  provider.dispose();
+});
+
+test("createNodeWasmProvider dispose is idempotent", async () => {
+  const provider = await createNodeWasmProvider(makeCallbacks());
+  provider.dispose();
+  // Second call must not throw.
+  provider.dispose();
+});
+
+test("createNodeWasmProvider round-trips a featureSupported request through the WASM core", async () => {
+  const callbacks = makeCallbacks();
+  callbacks.featureSupported = async () => true;
+  const provider = await createNodeWasmProvider(callbacks);
+
+  const frames = [];
+  provider.subscribe((bytes) => frames.push(bytes));
+
+  const payload = VersionedHostFeatureSupportedRequest.enc({
+    tag: "V1",
+    value: { tag: "Chain", value: { genesisHash: "0x00" } },
+  });
+  const inbound = encodeWireMessage({
+    requestId: "rt-1",
+    payload: { id: SYSTEM_FEATURE_SUPPORTED.request, value: payload },
+  });
+  assert.ok(inbound.isOk(), "request frame must encode");
+  provider.postMessage(inbound.value);
+
+  // Let the WASM dispatch + host callback + emit cycle settle.
+  await new Promise((r) => setTimeout(r, 50));
+
+  assert.equal(frames.length, 1, "exactly one response frame emitted");
+  const decoded = decodeWireMessage(frames[0]);
+  assert.ok(decoded.isOk(), "response frame must decode");
+  assert.equal(decoded.value.requestId, "rt-1");
+  assert.equal(decoded.value.payload.id, SYSTEM_FEATURE_SUPPORTED.response);
+
+  const responseCodec = S.indexedTaggedUnion({
+    V1: [0, S.Result(HostFeatureSupportedResponse, GenericError)],
+  });
+  const response = responseCodec.dec(decoded.value.payload.value);
+  assert.deepEqual(response, {
+    tag: "V1",
+    value: { success: true, value: { supported: true } },
+  });
+
+  provider.dispose();
+});
+
+test("createNodeWasmProvider surfaces a rejected receiveFromProduct through subscribeClose", async () => {
+  const provider = await createNodeWasmProvider(makeCallbacks());
+
+  const closes = [];
+  provider.subscribeClose((error) => closes.push(error));
+  const frames = [];
+  provider.subscribe((bytes) => frames.push(bytes));
+
+  // A garbage buffer the core cannot decode rejects receiveFromProduct.
+  provider.postMessage(new Uint8Array([0xff, 0xff, 0xff, 0xff, 0xff]));
+  await new Promise((r) => setTimeout(r, 50));
+
+  assert.equal(closes.length, 1, "close listener fires once on decode failure");
+  assert.ok(closes[0] instanceof Error);
+  assert.equal(frames.length, 0, "no response frame on a rejected frame");
+
+  provider.dispose();
+});
diff --git a/js/packages/truapi-host-wasm/test/preload-bridge.test.mjs b/js/packages/truapi-host-wasm/test/preload-bridge.test.mjs
new file mode 100644
index 00000000..43aae1e2
--- /dev/null
+++ b/js/packages/truapi-host-wasm/test/preload-bridge.test.mjs
@@ -0,0 +1,136 @@
+// Verify `createElectronProvider` adapts an Electron-style port into a
+// TrUAPI Provider: subscribers receive inbound binary frames, outbound
+// frames flow back through `port.postMessage`, and `dispose` closes the
+// port and clears listeners.
+
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { createElectronProvider } from "../dist/electron/index.js";
+
+function makeFakePort() {
+  const messageListeners = new Set();
+  const closeListeners = new Set();
+  const sent = [];
+  const offCalls = [];
+  let closed = false;
+  return {
+    sent,
+    offCalls,
+    isClosed: () => closed,
+    deliverMessage(data) {
+      for (const listener of [...messageListeners]) listener({ data });
+    },
+    deliverClose() {
+      for (const listener of [...closeListeners]) listener();
+    },
+    api: {
+      postMessage(message) {
+        sent.push(message);
+      },
+      on(event, handler) {
+        if (event === "message") messageListeners.add(handler);
+        else if (event === "close") closeListeners.add(handler);
+        return this;
+      },
+      off(event, handler) {
+        offCalls.push(event);
+        if (event === "message") messageListeners.delete(handler);
+        else if (event === "close") closeListeners.delete(handler);
+        return this;
+      },
+      start() {},
+      close() {
+        closed = true;
+      },
+    },
+  };
+}
+
+test("createElectronProvider forwards inbound frames to subscribers and outbound frames to the port", () => {
+  const fake = makeFakePort();
+  const provider = createElectronProvider({ port: fake.api });
+
+  const received = [];
+  const unsubscribe = provider.subscribe((message) => {
+    received.push(message);
+  });
+
+  const inbound = new Uint8Array([10, 20, 30]);
+  fake.deliverMessage(inbound);
+  // Non-binary frames are ignored.
+  fake.deliverMessage({ type: "ignored" });
+
+  assert.equal(received.length, 1);
+  assert.deepEqual(Array.from(received[0]), [10, 20, 30]);
+
+  const outbound = new Uint8Array([1, 2]);
+  provider.postMessage(outbound);
+  assert.equal(fake.sent.length, 1);
+  assert.deepEqual(Array.from(fake.sent[0]), [1, 2]);
+
+  unsubscribe();
+  fake.deliverMessage(new Uint8Array([99]));
+  // Unsubscribed, length should not grow.
+  assert.equal(received.length, 1);
+
+  provider.dispose();
+  assert.equal(fake.isClosed(), true, "dispose closes the underlying port");
+});
+
+test("createElectronProvider notifies close subscribers when the port closes", () => {
+  const fake = makeFakePort();
+  const provider = createElectronProvider({ port: fake.api });
+
+  const closes = [];
+  provider.subscribeClose((error) => closes.push(error));
+
+  fake.deliverClose();
+  assert.equal(closes.length, 1);
+  assert.ok(closes[0] instanceof Error);
+
+  provider.dispose();
+});
+
+test("dispose removes both port listeners and blocks further traffic", () => {
+  const fake = makeFakePort();
+  const provider = createElectronProvider({ port: fake.api });
+
+  const received = [];
+  provider.subscribe((message) => received.push(message));
+
+  provider.dispose();
+  assert.deepEqual(
+    [...fake.offCalls].sort(),
+    ["close", "message"],
+    "dispose detaches both the message and close handlers",
+  );
+
+  // postMessage after dispose is a no-op.
+  provider.postMessage(new Uint8Array([1, 2]));
+  assert.equal(fake.sent.length, 0, "no frames sent after dispose");
+
+  // Inbound frames after dispose never reach subscribers.
+  fake.deliverMessage(new Uint8Array([3, 4]));
+  assert.equal(received.length, 0, "no frames delivered after dispose");
+});
+
+test("a peer-initiated close detaches port listeners and blocks postMessage", () => {
+  const fake = makeFakePort();
+  const provider = createElectronProvider({ port: fake.api });
+
+  provider.subscribeClose(() => {});
+  fake.deliverClose();
+
+  assert.deepEqual(
+    [...fake.offCalls].sort(),
+    ["close", "message"],
+    "peer close detaches both handlers",
+  );
+
+  // postMessage after a peer-initiated close is a no-op.
+  provider.postMessage(new Uint8Array([5]));
+  assert.equal(fake.sent.length, 0, "no frames sent after a peer close");
+
+  provider.dispose();
+});
diff --git a/js/packages/truapi-host-wasm/test/worker-protocol.test.mjs b/js/packages/truapi-host-wasm/test/worker-protocol.test.mjs
new file mode 100644
index 00000000..e02e5e8b
--- /dev/null
+++ b/js/packages/truapi-host-wasm/test/worker-protocol.test.mjs
@@ -0,0 +1,30 @@
+// Sanity test that the worker-protocol module is importable and exports
+// what `createWebWorkerProvider` (from @parity/truapi-host-wasm/web) expects. The
+// real web worker entry-point loads a browser-only WASM bundle, so we
+// cannot boot it under Node; this test verifies the wire-shape of the
+// shared protocol contract instead.
+
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import * as shared from "../dist/index.js";
+import * as workerProtocol from "../dist/worker-protocol.js";
+
+test("worker-protocol module loads without runtime types (TS-only)", () => {
+  // The .js module compiles down to an empty body, assert that no
+  // runtime symbols are exported, since CallbackName / SubscriptionName
+  // / MainToWorker / WorkerToMain are type-only.
+  assert.deepEqual(Object.keys(workerProtocol), []);
+});
+
+test("@parity/truapi-host-wasm exposes the documented surface", () => {
+  // Dispatcher re-export from @parity/truapi-host.
+  assert.equal(typeof shared.createHostServer, "function");
+  assert.equal(typeof shared.toFlatResponsePayload, "function");
+  assert.equal(typeof shared.toResponsePayload, "function");
+
+  // WASM provider helpers.
+  assert.equal(typeof shared.createWasmProvider, "function");
+  assert.equal(typeof shared.createNodeWasmProvider, "function");
+  assert.equal(typeof shared.createUnavailableCallbacks, "function");
+});
diff --git a/js/packages/truapi-host-wasm/tsconfig.json b/js/packages/truapi-host-wasm/tsconfig.json
new file mode 100644
index 00000000..8a51c612
--- /dev/null
+++ b/js/packages/truapi-host-wasm/tsconfig.json
@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ES2022",
+    "moduleResolution": "bundler",
+    "composite": true,
+    "declaration": true,
+    "outDir": "dist",
+    "rootDir": "src",
+    "strict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "lib": ["ES2022", "DOM", "WebWorker"]
+  },
+  "include": ["src"],
+  "references": [{ "path": "../truapi" }, { "path": "../truapi-host" }]
+}
diff --git a/js/packages/truapi-host/package.json b/js/packages/truapi-host/package.json
index 37590343..97a49135 100644
--- a/js/packages/truapi-host/package.json
+++ b/js/packages/truapi-host/package.json
@@ -29,7 +29,7 @@
   },
   "scripts": {
     "ensure-generated": "./scripts/ensure-generated.sh",
-    "build": "tsc",
+    "build": "tsc -b",
     "prebuild": "npm run ensure-generated",
     "prepare": "npm run build",
     "codegen": "cargo run -p truapi-codegen -- --input ../../../target/doc/truapi.json --output ../truapi/src/generated --host-output src/generated",
diff --git a/js/packages/truapi-host/tsconfig.json b/js/packages/truapi-host/tsconfig.json
index 71725ac1..0238f57b 100644
--- a/js/packages/truapi-host/tsconfig.json
+++ b/js/packages/truapi-host/tsconfig.json
@@ -3,6 +3,7 @@
     "target": "ES2022",
     "module": "ES2022",
     "moduleResolution": "bundler",
+    "composite": true,
     "declaration": true,
     "outDir": "dist",
     "rootDir": "src",
@@ -12,5 +13,6 @@
     "esModuleInterop": true,
     "skipLibCheck": true
   },
-  "include": ["src"]
+  "include": ["src"],
+  "references": [{ "path": "../truapi" }]
 }
diff --git a/js/packages/truapi/package.json b/js/packages/truapi/package.json
index fab0b2f7..c35bb277 100644
--- a/js/packages/truapi/package.json
+++ b/js/packages/truapi/package.json
@@ -62,7 +62,7 @@
   },
   "scripts": {
     "ensure-generated": "./scripts/ensure-generated.sh",
-    "build": "tsc",
+    "build": "tsc -b",
     "prebuild": "npm run ensure-generated",
     "prepare": "npm run build",
     "codegen": "cargo run -p truapi-codegen -- --input ../../../target/doc/truapi.json --output src/generated --playground-output src/playground --explorer-output src/explorer",
diff --git a/js/packages/truapi/src/index.ts b/js/packages/truapi/src/index.ts
index bc6bcef2..d8d151c5 100644
--- a/js/packages/truapi/src/index.ts
+++ b/js/packages/truapi/src/index.ts
@@ -12,10 +12,12 @@ export type {
   TrUApiTransport,
 } from "./transport.js";
 export type { CreateTransportOptions } from "./client.js";
+export type { WebSocketProviderOptions } from "./transport.js";
 export {
   SubscriptionError,
   createIframeProvider,
   createMessagePortProvider,
+  createWebSocketProvider,
   decodeWireMessage,
   encodeWireMessage,
 } from "./transport.js";
diff --git a/js/packages/truapi/src/transport.ts b/js/packages/truapi/src/transport.ts
index 8a92133e..2e9df7da 100644
--- a/js/packages/truapi/src/transport.ts
+++ b/js/packages/truapi/src/transport.ts
@@ -580,3 +580,102 @@ export function createMessagePortProvider(
     },
   };
 }
+
+/**
+ * Options accepted by `createWebSocketProvider`.
+ **/
+export interface WebSocketProviderOptions {
+  /**
+   * Override the `WebSocket` constructor. Useful for non-browser runtimes
+   * (Node, tests) where the global isn't available.
+   **/
+  WebSocket?: typeof WebSocket;
+}
+
+/**
+ * Create a provider backed by a binary WebSocket. Used by products that
+ * connect through the native host's localhost WS bridge, the host exposes
+ * an endpoint shaped like `ws://127.0.0.1:<port>/?t=<token>` and the product
+ * passes that URL straight to this constructor.
+ **/
+export function createWebSocketProvider(
+  url: string,
+  options: WebSocketProviderOptions = {},
+): Provider {
+  const WebSocketCtor = options.WebSocket ?? globalThis.WebSocket;
+  if (!WebSocketCtor) {
+    throw new Error("WebSocket constructor not available in this environment");
+  }
+
+  const base = createBaseProvider();
+  const socket = new WebSocketCtor(url);
+  socket.binaryType = "arraybuffer";
+
+  const pending: Uint8Array[] = [];
+  base.onClose(() => {
+    pending.length = 0;
+  });
+
+  socket.onopen = () => {
+    for (const msg of pending) {
+      try {
+        socket.send(msg);
+      } catch (error) {
+        base.close(error);
+        return;
+      }
+    }
+    pending.length = 0;
+  };
+
+  socket.onmessage = (event: MessageEvent) => {
+    const data = event.data;
+    if (!(data instanceof ArrayBuffer)) {
+      return;
+    }
+    base.deliver(new Uint8Array(data));
+  };
+
+  socket.onerror = () => {
+    base.close(new Error("websocket error"));
+  };
+
+  socket.onclose = (event: CloseEvent) => {
+    base.close(
+      new Error(
+        `websocket closed (code=${event.code}, reason=${event.reason || "unknown"})`,
+      ),
+    );
+  };
+
+  return {
+    postMessage(message) {
+      const error = base.closed();
+      if (error) {
+        throw error;
+      }
+      if (socket.readyState === WebSocketCtor.OPEN) {
+        try {
+          socket.send(message);
+        } catch (error) {
+          base.close(error);
+          throw toError(error);
+        }
+      } else if (socket.readyState === WebSocketCtor.CONNECTING) {
+        pending.push(message);
+      } else {
+        throw new Error("websocket not open");
+      }
+    },
+    subscribe: base.subscribe,
+    subscribeClose: base.subscribeClose,
+    dispose() {
+      base.close(new Error("websocket provider disposed"));
+      try {
+        socket.close();
+      } catch {
+        // ignore duplicate close during shutdown
+      }
+    },
+  };
+}
diff --git a/js/packages/truapi/test/ws-provider.test.mjs b/js/packages/truapi/test/ws-provider.test.mjs
new file mode 100644
index 00000000..0775e051
--- /dev/null
+++ b/js/packages/truapi/test/ws-provider.test.mjs
@@ -0,0 +1,279 @@
+// Smoke test for `createWebSocketProvider` against a stubbed WebSocket
+// constructor. Verifies the open/queue lifecycle, the close fan-out, and
+// that double-registration of the same listener is independent (Set semantics).
+
+import assert from "node:assert/strict";
+
+import { createWebSocketProvider } from "../dist/transport.js";
+
+function makeStubWebSocket(opts = {}) {
+  // Records what the provider did to its socket so the tests can assert.
+  const sent = [];
+  let openHandler = null;
+  let messageHandler = null;
+  let closeHandler = null;
+  let errorHandler = null;
+  let readyState = 0; // CONNECTING
+  let sendThrows = opts.sendThrows ?? false;
+
+  class StubWebSocket {
+    static get CONNECTING() {
+      return 0;
+    }
+    static get OPEN() {
+      return 1;
+    }
+    static get CLOSING() {
+      return 2;
+    }
+    static get CLOSED() {
+      return 3;
+    }
+
+    binaryType = "";
+
+    set onopen(fn) {
+      openHandler = fn;
+    }
+    set onmessage(fn) {
+      messageHandler = fn;
+    }
+    set onclose(fn) {
+      closeHandler = fn;
+    }
+    set onerror(fn) {
+      errorHandler = fn;
+    }
+
+    get readyState() {
+      return readyState;
+    }
+
+    send(bytes) {
+      if (sendThrows) throw new Error("send failed");
+      sent.push(bytes);
+    }
+    close() {
+      readyState = 3;
+      if (closeHandler) closeHandler({ code: 1000, reason: "" });
+    }
+  }
+
+  return {
+    StubWebSocket,
+    sent,
+    open() {
+      readyState = 1;
+      if (openHandler) openHandler();
+    },
+    setReadyState(state) {
+      readyState = state;
+    },
+    setSendThrows(value) {
+      sendThrows = value;
+    },
+    deliver(data) {
+      if (messageHandler) {
+        messageHandler({ data });
+      }
+    },
+    inbound(bytes) {
+      if (messageHandler) {
+        messageHandler({ data: bytes.buffer });
+      }
+    },
+    triggerClose(code, reason) {
+      readyState = 3;
+      if (closeHandler) closeHandler({ code, reason });
+    },
+    triggerError() {
+      if (errorHandler) errorHandler();
+    },
+  };
+}
+
+// 1. queues outbound while connecting; flushes on open
+{
+  const stub = makeStubWebSocket();
+  const provider = createWebSocketProvider("ws://127.0.0.1:0/?t=token", {
+    WebSocket: stub.StubWebSocket,
+  });
+
+  provider.postMessage(new Uint8Array([1, 2, 3]));
+  provider.postMessage(new Uint8Array([4, 5]));
+  assert.equal(stub.sent.length, 0, "nothing sent while CONNECTING");
+
+  stub.open();
+  assert.deepEqual(
+    stub.sent.map((b) => Array.from(b)),
+    [
+      [1, 2, 3],
+      [4, 5],
+    ],
+    "queued frames flush in order on open",
+  );
+}
+
+// 2. fan-out: every active listener receives every inbound frame
+{
+  const stub = makeStubWebSocket();
+  const provider = createWebSocketProvider("ws://127.0.0.1:0/?t=token", {
+    WebSocket: stub.StubWebSocket,
+  });
+  stub.open();
+
+  const received = [];
+  const a = (bytes) => received.push(["a", Array.from(bytes)]);
+  const b = (bytes) => received.push(["b", Array.from(bytes)]);
+  const unsubA = provider.subscribe(a);
+  provider.subscribe(b);
+
+  stub.inbound(new Uint8Array([0xaa]));
+  unsubA();
+  stub.inbound(new Uint8Array([0xbb]));
+
+  assert.deepEqual(received, [
+    ["a", [0xaa]],
+    ["b", [0xaa]],
+    ["b", [0xbb]],
+  ]);
+}
+
+// 3. subscribe is set-based: re-registering the same callback is idempotent
+{
+  const stub = makeStubWebSocket();
+  const provider = createWebSocketProvider("ws://127.0.0.1:0/?t=token", {
+    WebSocket: stub.StubWebSocket,
+  });
+  stub.open();
+
+  let count = 0;
+  const cb = () => {
+    count += 1;
+  };
+  const unsub1 = provider.subscribe(cb);
+  const unsub2 = provider.subscribe(cb);
+  stub.inbound(new Uint8Array([1]));
+  assert.equal(count, 1, "duplicate registration counts as one listener");
+
+  unsub1();
+  unsub2();
+  stub.inbound(new Uint8Array([2]));
+  assert.equal(count, 1, "unsubscribed listener is silent");
+}
+
+// 4. subscribeClose fires once on socket close; late subscribers see the stored error
+{
+  const stub = makeStubWebSocket();
+  const provider = createWebSocketProvider("ws://127.0.0.1:0/?t=token", {
+    WebSocket: stub.StubWebSocket,
+  });
+  stub.open();
+
+  const errors = [];
+  provider.subscribeClose((err) => errors.push(err));
+  stub.triggerClose(1006, "abnormal");
+  assert.equal(errors.length, 1);
+  assert.match(errors[0].message, /websocket closed/);
+
+  let late = null;
+  provider.subscribeClose((err) => {
+    late = err;
+  });
+  assert.equal(late, errors[0], "late subscriber receives the stored close error");
+}
+
+// 5. postMessage after close throws the stored error
+{
+  const stub = makeStubWebSocket();
+  const provider = createWebSocketProvider("ws://127.0.0.1:0/?t=token", {
+    WebSocket: stub.StubWebSocket,
+  });
+  stub.open();
+  stub.triggerClose(1000, "");
+  assert.throws(
+    () => provider.postMessage(new Uint8Array([1])),
+    /websocket closed/,
+  );
+}
+
+// 6. triggerError() surfaces a /websocket error/ through subscribeClose
+{
+  const stub = makeStubWebSocket();
+  const provider = createWebSocketProvider("ws://127.0.0.1:0/?t=token", {
+    WebSocket: stub.StubWebSocket,
+  });
+  stub.open();
+
+  const errors = [];
+  provider.subscribeClose((err) => errors.push(err));
+  stub.triggerError();
+  assert.equal(errors.length, 1);
+  assert.match(errors[0].message, /websocket error/);
+}
+
+// 7. non-ArrayBuffer inbound payloads are dropped without firing listeners
+{
+  const stub = makeStubWebSocket();
+  const provider = createWebSocketProvider("ws://127.0.0.1:0/?t=token", {
+    WebSocket: stub.StubWebSocket,
+  });
+  stub.open();
+
+  let count = 0;
+  provider.subscribe(() => {
+    count += 1;
+  });
+  stub.deliver("not-an-arraybuffer");
+  stub.deliver({ some: "object" });
+  assert.equal(count, 0, "non-ArrayBuffer frames are ignored");
+
+  // A real ArrayBuffer still flows through.
+  stub.inbound(new Uint8Array([7]));
+  assert.equal(count, 1, "ArrayBuffer frames still deliver");
+}
+
+// 8. postMessage while readyState is CLOSING (2) throws /websocket not open/
+{
+  const stub = makeStubWebSocket();
+  const provider = createWebSocketProvider("ws://127.0.0.1:0/?t=token", {
+    WebSocket: stub.StubWebSocket,
+  });
+  stub.open();
+  stub.setReadyState(2); // CLOSING
+  assert.throws(
+    () => provider.postMessage(new Uint8Array([1])),
+    /websocket not open/,
+  );
+}
+
+// 9. a send that throws during the onopen flush closes the provider
+{
+  const stub = makeStubWebSocket();
+  const provider = createWebSocketProvider("ws://127.0.0.1:0/?t=token", {
+    WebSocket: stub.StubWebSocket,
+  });
+
+  const errors = [];
+  provider.subscribeClose((err) => errors.push(err));
+
+  // Queue a frame while CONNECTING, then make the socket throw on send and
+  // open it so the flush hits the failing send path.
+  provider.postMessage(new Uint8Array([1, 2, 3]));
+  stub.setSendThrows(true);
+  stub.open();
+
+  assert.equal(
+    errors.length,
+    1,
+    "flush failure surfaces through subscribeClose",
+  );
+  assert.match(errors[0].message, /send failed/);
+  assert.throws(
+    () => provider.postMessage(new Uint8Array([4])),
+    /send failed/,
+    "provider is closed after the failed flush",
+  );
+}
+
+console.log("createWebSocketProvider tests passed");
diff --git a/js/packages/truapi/tsconfig.json b/js/packages/truapi/tsconfig.json
index 71725ac1..2b8ac495 100644
--- a/js/packages/truapi/tsconfig.json
+++ b/js/packages/truapi/tsconfig.json
@@ -3,6 +3,7 @@
     "target": "ES2022",
     "module": "ES2022",
     "moduleResolution": "bundler",
+    "composite": true,
     "declaration": true,
     "outDir": "dist",
     "rootDir": "src",
diff --git a/package-lock.json b/package-lock.json
index f1707566..a6e129ae 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -41,6 +41,57 @@
         "typescript": "^5.7"
       }
     },
+    "js/packages/truapi-host-electron": {
+      "name": "@parity/truapi-host-electron",
+      "version": "0.1.0",
+      "extraneous": true,
+      "license": "MIT",
+      "dependencies": {
+        "@parity/truapi": "file:../truapi",
+        "@parity/truapi-host-shared": "file:../truapi-host-shared"
+      },
+      "devDependencies": {
+        "typescript": "^5.7"
+      }
+    },
+    "js/packages/truapi-host-shared": {
+      "name": "@parity/truapi-host-shared",
+      "version": "0.1.0",
+      "extraneous": true,
+      "license": "MIT",
+      "dependencies": {
+        "@parity/truapi": "file:../truapi",
+        "@parity/truapi-host": "file:../truapi-host"
+      },
+      "devDependencies": {
+        "typescript": "^5.7"
+      }
+    },
+    "js/packages/truapi-host-wasm": {
+      "name": "@parity/truapi-host-wasm",
+      "version": "0.1.0",
+      "license": "MIT",
+      "dependencies": {
+        "@parity/truapi": "file:../truapi",
+        "@parity/truapi-host": "file:../truapi-host"
+      },
+      "devDependencies": {
+        "typescript": "^5.7"
+      }
+    },
+    "js/packages/truapi-host-web": {
+      "name": "@parity/truapi-host-web",
+      "version": "0.1.0",
+      "extraneous": true,
+      "license": "MIT",
+      "dependencies": {
+        "@parity/truapi": "file:../truapi",
+        "@parity/truapi-host-shared": "file:../truapi-host-shared"
+      },
+      "devDependencies": {
+        "typescript": "^5.7"
+      }
+    },
     "node_modules/@babel/runtime": {
       "version": "7.29.2",
       "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.2.tgz",
@@ -465,6 +516,10 @@
       "resolved": "js/packages/truapi-host",
       "link": true
     },
+    "node_modules/@parity/truapi-host-wasm": {
+      "resolved": "js/packages/truapi-host-wasm",
+      "link": true
+    },
     "node_modules/@rollup/rollup-linux-x64-gnu": {
       "version": "4.60.3",
       "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.60.3.tgz",
diff --git a/rust/crates/truapi-codegen/Cargo.toml b/rust/crates/truapi-codegen/Cargo.toml
index 14fdc1f5..ed77e6d5 100644
--- a/rust/crates/truapi-codegen/Cargo.toml
+++ b/rust/crates/truapi-codegen/Cargo.toml
@@ -16,3 +16,6 @@ anyhow = "1"
 clap = { version = "4", features = ["derive"] }
 indoc = "2"
 convert_case = "0.6"
+
+[dev-dependencies]
+tempfile = "3"
diff --git a/rust/crates/truapi-codegen/src/main.rs b/rust/crates/truapi-codegen/src/main.rs
index b4d118fe..45b325ee 100644
--- a/rust/crates/truapi-codegen/src/main.rs
+++ b/rust/crates/truapi-codegen/src/main.rs
@@ -1,7 +1,10 @@
 use anyhow::{Context, Result};
 use clap::Parser;
+use std::path::PathBuf;
 use std::str::FromStr;
 
+mod platform;
+mod rust;
 mod rustdoc;
 mod ts;
 
@@ -50,6 +53,27 @@ struct Cli {
     #[arg(long)]
     host_output: Option<String>,
 
+    /// Output directory for the generated Rust dispatcher / wire-table (optional).
+    ///
+    /// When set, emits `dispatcher.rs` and `wire_table.rs` for the
+    /// `truapi-server` crate to include.
+    #[arg(long)]
+    rust_output: Option<PathBuf>,
+
+    /// Path to rustdoc JSON for the `truapi-platform` crate (optional).
+    ///
+    /// When provided together with `--platform-ts-output`, walks the
+    /// platform crate's capability traits and emits the typed TS
+    /// `HostCallbacks` surface so all host implementations (TS, Kotlin via
+    /// UniFFI, Swift via UniFFI) track the same Rust source.
+    #[arg(long)]
+    platform_input: Option<String>,
+
+    /// Output directory for the generated typed `HostCallbacks` TypeScript
+    /// surface (optional). Only honored when `--platform-input` is also set.
+    #[arg(long)]
+    platform_ts_output: Option<String>,
+
     /// Output directory for generated explorer metadata (optional). When set,
     /// writes `codegen/types.ts` with the DataType list consumed by the
     /// explorer site.
@@ -122,6 +146,24 @@ fn main() -> Result<()> {
         ts::generate_host(&api, path).with_context(|| format!("writing host package to {path}"))?;
         println!("Generated host package in {path}");
     }
+    if let Some(path) = &cli.rust_output {
+        rust::generate(&api, path)
+            .with_context(|| format!("writing Rust dispatcher to {}", path.display()))?;
+        println!("Wrote Rust dispatcher to {}", path.display());
+    }
+    if let (Some(input), Some(output)) = (&cli.platform_input, &cli.platform_ts_output) {
+        let json = std::fs::read_to_string(input)
+            .with_context(|| format!("reading platform rustdoc JSON from {input}"))?;
+        let krate =
+            rustdoc::parse(&json).with_context(|| format!("parsing platform rustdoc {input}"))?;
+        let definition = platform::extract(&krate)
+            .with_context(|| format!("extracting platform definition from {input}"))?;
+        ts::generate_host_callbacks(&definition, output)
+            .with_context(|| format!("writing host callbacks TS to {output}"))?;
+        println!("Generated typed HostCallbacks TS surface in {output}");
+    } else if cli.platform_input.is_some() != cli.platform_ts_output.is_some() {
+        anyhow::bail!("--platform-input and --platform-ts-output must be provided together");
+    }
     if let Some(path) = &cli.explorer_output {
         ts::generate_explorer(&api, path, client_version)
             .with_context(|| format!("writing explorer metadata to {path}"))?;
diff --git a/rust/crates/truapi-codegen/src/platform.rs b/rust/crates/truapi-codegen/src/platform.rs
new file mode 100644
index 00000000..e3ba2694
--- /dev/null
+++ b/rust/crates/truapi-codegen/src/platform.rs
@@ -0,0 +1,472 @@
+//! Parse `truapi-platform`-style "plain capability traits" from rustdoc JSON.
+//!
+//! Unlike the `truapi` API crate, the platform crate has no `#[wire(id = N)]`
+//! annotations: it is a set of host-facing capability traits whose methods
+//! are typed `async fn`-style (`impl Future<Output = T> + Send`) or plain
+//! synchronous functions returning trait objects / `BoxStream`. This module
+//! walks the rustdoc index for every public trait in the platform crate and
+//! produces a [`PlatformDefinition`] the TS emitter can render directly.
+
+use std::collections::BTreeMap;
+
+use anyhow::{Context, Result, bail};
+
+use crate::rustdoc::{
+    Crate, Item, ItemPath, NameContext, TypeRef, clean_docs, resolve_type, summarize_json,
+};
+
+/// Top-level extracted shape of a `truapi-platform`-style crate.
+#[derive(Debug, PartialEq, Eq)]
+pub struct PlatformDefinition {
+    /// Capability traits in source declaration order.
+    pub traits: Vec<PlatformTrait>,
+    /// Composite super-trait (`Platform: Storage + Navigation + ...`), if any.
+    pub super_trait: Option<PlatformSuperTrait>,
+}
+
+/// Single capability trait extracted from the platform crate.
+#[derive(Debug, PartialEq, Eq)]
+pub struct PlatformTrait {
+    /// Trait name as it appears in source.
+    pub name: String,
+    /// Rustdoc comment on the trait.
+    pub docs: Option<String>,
+    /// Methods declared on the trait, in declaration order.
+    pub methods: Vec<PlatformMethod>,
+}
+
+/// A trait method on a capability trait.
+#[derive(Debug, PartialEq, Eq)]
+pub struct PlatformMethod {
+    /// Method name as it appears in source.
+    pub name: String,
+    /// Rustdoc comment on the method.
+    pub docs: Option<String>,
+    /// Parameter list with names preserved (excluding `&self`).
+    pub params: Vec<PlatformParam>,
+    /// Return shape decoded from the method signature.
+    pub return_shape: PlatformReturn,
+}
+
+/// Method parameter (name + type).
+#[derive(Debug, PartialEq, Eq)]
+pub struct PlatformParam {
+    /// Parameter name as written in the trait method signature.
+    pub name: String,
+    /// Parameter type expressed as a [`TypeRef`].
+    pub type_ref: TypeRef,
+}
+
+/// Return shape after stripping `impl Future + Send` / `Box<dyn _>` wrappers.
+#[derive(Debug, PartialEq, Eq)]
+pub struct PlatformReturn {
+    /// Whether the method returns `impl Future<...> + Send` (i.e. is async).
+    pub is_async: bool,
+    /// Unwrapped inner shape.
+    pub inner: PlatformInner,
+}
+
+/// Classification of the unwrapped return type.
+#[derive(Debug, PartialEq, Eq)]
+pub enum PlatformInner {
+    /// `()` (or no return).
+    Unit,
+    /// `Result<Ok, Err>`. The TS surface returns `Promise<Ok>` and rejects with `Err`.
+    Result { ok: TypeRef, err: TypeRef },
+    /// `BoxStream<'static, T>`, a stream of `T` items.
+    Stream(TypeRef),
+    /// `Box<dyn TraitName>`, a trait object handle to a named trait.
+    TraitObject(String),
+    /// Any other concrete type, returned as-is.
+    Plain(TypeRef),
+}
+
+/// Composite super-trait that aggregates capability traits.
+#[derive(Debug, PartialEq, Eq)]
+pub struct PlatformSuperTrait {
+    /// Name of the super-trait (e.g. `Platform`).
+    pub name: String,
+    /// Rustdoc comment on the super-trait.
+    pub docs: Option<String>,
+    /// Capability trait names this super-trait composes, in source order.
+    pub composes: Vec<String>,
+}
+
+/// Walk the platform crate and extract every public trait + its methods.
+pub fn extract(krate: &Crate) -> Result<PlatformDefinition> {
+    let trait_paths = collect_local_trait_paths(krate);
+    let names = NameContext::default();
+
+    let mut traits = Vec::new();
+    let mut super_trait = None;
+    for (item_id, item_path) in &trait_paths {
+        let item = krate
+            .index
+            .get(item_id)
+            .with_context(|| format!("Missing rustdoc item `{item_id}` for trait"))?;
+        let name = item
+            .name
+            .as_ref()
+            .cloned()
+            .with_context(|| format!("Trait `{item_id}` has no name"))?;
+        let trait_inner = item
+            .inner
+            .get("trait")
+            .with_context(|| format!("Trait `{name}` missing rustdoc trait body"))?;
+
+        if is_super_trait(trait_inner) {
+            if super_trait.is_some() {
+                bail!("Multiple super-traits with method-less bodies found; only one is supported");
+            }
+            super_trait = Some(extract_super_trait(&name, item, trait_inner)?);
+            continue;
+        }
+
+        traits.push(extract_capability_trait(
+            &name,
+            item,
+            trait_inner,
+            krate,
+            &names,
+        )?);
+
+        // Touch item_path so a future use can rely on the same iteration order.
+        let _ = item_path;
+    }
+
+    traits.sort_by(|a, b| a.name.cmp(&b.name));
+
+    Ok(PlatformDefinition {
+        traits,
+        super_trait,
+    })
+}
+
+fn collect_local_trait_paths(krate: &Crate) -> BTreeMap<String, &ItemPath> {
+    let mut out = BTreeMap::new();
+    for (item_id, item_path) in &krate.paths {
+        if item_path.crate_id != 0 || item_path.kind != "trait" {
+            continue;
+        }
+        out.insert(item_id.clone(), item_path);
+    }
+    out
+}
+
+fn is_super_trait(trait_inner: &serde_json::Value) -> bool {
+    let no_methods = trait_inner
+        .get("items")
+        .and_then(|value| value.as_array())
+        .map(|arr| arr.is_empty())
+        .unwrap_or(true);
+
+    let has_local_trait_bound = trait_inner
+        .get("bounds")
+        .and_then(|value| value.as_array())
+        .map(|bounds| {
+            bounds.iter().any(|bound| {
+                bound
+                    .get("trait_bound")
+                    .and_then(|tb| tb.get("trait"))
+                    .and_then(|t| t.get("path"))
+                    .and_then(|p| p.as_str())
+                    .map(|name| name != "Send" && name != "Sync")
+                    .unwrap_or(false)
+            })
+        })
+        .unwrap_or(false);
+
+    no_methods && has_local_trait_bound
+}
+
+fn extract_super_trait(
+    name: &str,
+    item: &Item,
+    trait_inner: &serde_json::Value,
+) -> Result<PlatformSuperTrait> {
+    let bounds = trait_inner
+        .get("bounds")
+        .and_then(|value| value.as_array())
+        .with_context(|| format!("Super-trait `{name}` missing rustdoc bounds"))?;
+
+    let mut composes = Vec::new();
+    for bound in bounds {
+        let Some(path) = bound
+            .get("trait_bound")
+            .and_then(|tb| tb.get("trait"))
+            .and_then(|t| t.get("path"))
+            .and_then(|p| p.as_str())
+        else {
+            continue;
+        };
+        if path == "Send" || path == "Sync" {
+            continue;
+        }
+        composes.push(path.to_string());
+    }
+
+    Ok(PlatformSuperTrait {
+        name: name.to_string(),
+        docs: clean_docs(item.docs.as_deref()),
+        composes,
+    })
+}
+
+fn extract_capability_trait(
+    name: &str,
+    item: &Item,
+    trait_inner: &serde_json::Value,
+    krate: &Crate,
+    names: &NameContext,
+) -> Result<PlatformTrait> {
+    let item_ids = trait_inner
+        .get("items")
+        .and_then(|value| value.as_array())
+        .with_context(|| format!("Trait `{name}` missing rustdoc items array"))?;
+
+    let mut methods = Vec::new();
+    for method_id in item_ids {
+        let method_id = value_to_id(method_id)
+            .with_context(|| format!("Trait `{name}` contained a non-item method id"))?;
+        let method_item = krate
+            .index
+            .get(&method_id)
+            .with_context(|| format!("Trait `{name}` references missing item `{method_id}`"))?;
+        if let Some(method) = extract_method(method_item, names)? {
+            methods.push(method);
+        }
+    }
+
+    Ok(PlatformTrait {
+        name: name.to_string(),
+        docs: clean_docs(item.docs.as_deref()),
+        methods,
+    })
+}
+
+fn extract_method(item: &Item, names: &NameContext) -> Result<Option<PlatformMethod>> {
+    let Some(fn_inner) = item.inner.get("function") else {
+        return Ok(None);
+    };
+    let name = item
+        .name
+        .as_ref()
+        .cloned()
+        .with_context(|| "Method item has no name".to_string())?;
+    let sig = fn_inner
+        .get("sig")
+        .with_context(|| format!("Method `{name}` missing rustdoc signature"))?;
+
+    let mut params = Vec::new();
+    if let Some(inputs) = sig.get("inputs").and_then(|value| value.as_array()) {
+        for input in inputs {
+            let arr = input
+                .as_array()
+                .with_context(|| format!("Method `{name}` has an invalid input entry"))?;
+            let param_name = arr
+                .first()
+                .and_then(|value| value.as_str())
+                .with_context(|| format!("Method `{name}` has an unnamed input"))?
+                .to_string();
+            if param_name == "self" {
+                continue;
+            }
+            let ty = arr.get(1).with_context(|| {
+                format!("Method `{name}` input `{param_name}` is missing a type")
+            })?;
+            let type_ref = resolve_type(ty, names).with_context(|| {
+                format!("Method `{name}` input `{param_name}` has an unsupported type")
+            })?;
+            params.push(PlatformParam {
+                name: param_name,
+                type_ref,
+            });
+        }
+    }
+
+    let return_shape = resolve_return(sig.get("output"), names)
+        .with_context(|| format!("Method `{name}` has an unsupported return type"))?;
+
+    Ok(Some(PlatformMethod {
+        name,
+        docs: clean_docs(item.docs.as_deref()),
+        params,
+        return_shape,
+    }))
+}
+
+fn resolve_return(
+    output: Option<&serde_json::Value>,
+    names: &NameContext,
+) -> Result<PlatformReturn> {
+    let Some(output) = output else {
+        return Ok(PlatformReturn {
+            is_async: false,
+            inner: PlatformInner::Unit,
+        });
+    };
+    if output.is_null() {
+        return Ok(PlatformReturn {
+            is_async: false,
+            inner: PlatformInner::Unit,
+        });
+    }
+
+    if let Some(future_output) = extract_impl_future_output(output) {
+        let inner = resolve_inner_shape(&future_output, names)?;
+        return Ok(PlatformReturn {
+            is_async: true,
+            inner,
+        });
+    }
+
+    let inner = resolve_inner_shape(output, names)?;
+    Ok(PlatformReturn {
+        is_async: false,
+        inner,
+    })
+}
+
+fn extract_impl_future_output(output: &serde_json::Value) -> Option<serde_json::Value> {
+    let bounds = output.get("impl_trait")?.as_array()?;
+    for bound in bounds {
+        let trait_bound = bound.get("trait_bound")?;
+        let trait_obj = trait_bound.get("trait")?;
+        let path = trait_obj.get("path")?.as_str()?;
+        if path != "Future" {
+            continue;
+        }
+        let constraints = trait_obj
+            .get("args")?
+            .get("angle_bracketed")?
+            .get("constraints")?
+            .as_array()?;
+        for constraint in constraints {
+            if constraint.get("name")?.as_str()? != "Output" {
+                continue;
+            }
+            let ty = constraint.get("binding")?.get("equality")?.get("type")?;
+            return Some(ty.clone());
+        }
+    }
+    None
+}
+
+fn resolve_inner_shape(ty: &serde_json::Value, names: &NameContext) -> Result<PlatformInner> {
+    // `()` tuple.
+    if let Some(arr) = ty.get("tuple").and_then(|v| v.as_array())
+        && arr.is_empty()
+    {
+        return Ok(PlatformInner::Unit);
+    }
+
+    if let Some(resolved) = ty.get("resolved_path") {
+        let path = resolved
+            .get("path")
+            .and_then(|v| v.as_str())
+            .unwrap_or_default();
+        let leaf = path.rsplit("::").next().unwrap_or(path);
+
+        match leaf {
+            "Result" => {
+                let ok =
+                    generic_arg(resolved, 0).context("Result<...> return type missing ok arg")?;
+                let err =
+                    generic_arg(resolved, 1).context("Result<...> return type missing err arg")?;
+                let ok_ref = resolve_inner_type(&ok, names)?;
+                let err_ref = resolve_inner_type(&err, names)?;
+                return Ok(PlatformInner::Result {
+                    ok: ok_ref,
+                    err: err_ref,
+                });
+            }
+            "BoxStream" => {
+                // `BoxStream<'a, T>`: the lifetime arg is filtered out by
+                // `generic_arg` (it has no `type` field), so the first
+                // remaining positional arg is the item type.
+                let item =
+                    generic_arg(resolved, 0).context("BoxStream<'a, T> missing item type")?;
+                return Ok(PlatformInner::Stream(resolve_type(&item, names)?));
+            }
+            "Box" => {
+                // `Box<dyn TraitName>` or `Box<T>`.
+                if let Some(arg) = generic_arg(resolved, 0)
+                    && let Some(dyn_trait) = arg.get("dyn_trait")
+                {
+                    let trait_name = dyn_trait
+                        .get("traits")
+                        .and_then(|t| t.as_array())
+                        .and_then(|arr| arr.first())
+                        .and_then(|first| first.get("trait"))
+                        .and_then(|trait_obj| trait_obj.get("path"))
+                        .and_then(|p| p.as_str())
+                        .context("Box<dyn Trait> missing trait path")?
+                        .rsplit("::")
+                        .next()
+                        .unwrap_or_default()
+                        .to_string();
+                    return Ok(PlatformInner::TraitObject(trait_name));
+                }
+            }
+            _ => {}
+        }
+    }
+
+    let resolved_ref = resolve_type(ty, names)
+        .with_context(|| format!("Unsupported return shape: {}", summarize_json(ty)))?;
+    Ok(PlatformInner::Plain(resolved_ref))
+}
+
+/// Resolve a positional type. Recognises `Box<dyn TraitName>` and folds it
+/// into a `TypeRef::Named { name: TraitName, args: [] }` so it survives
+/// through to TS emission without `rustdoc.rs` having to model dyn traits.
+fn resolve_inner_type(ty: &serde_json::Value, names: &NameContext) -> Result<TypeRef> {
+    if let Some(resolved) = ty.get("resolved_path")
+        && resolved
+            .get("path")
+            .and_then(|v| v.as_str())
+            .map(|p| p.rsplit("::").next().unwrap_or(p) == "Box")
+            .unwrap_or(false)
+        && let Some(arg) = generic_arg(resolved, 0)
+        && let Some(dyn_trait) = arg.get("dyn_trait")
+    {
+        let trait_name = dyn_trait
+            .get("traits")
+            .and_then(|t| t.as_array())
+            .and_then(|arr| arr.first())
+            .and_then(|first| first.get("trait"))
+            .and_then(|trait_obj| trait_obj.get("path"))
+            .and_then(|p| p.as_str())
+            .context("Box<dyn Trait> missing trait path")?
+            .rsplit("::")
+            .next()
+            .unwrap_or_default()
+            .to_string();
+        return Ok(TypeRef::Named {
+            name: trait_name,
+            args: Vec::new(),
+        });
+    }
+    resolve_type(ty, names)
+}
+
+fn generic_arg(resolved: &serde_json::Value, index: usize) -> Option<serde_json::Value> {
+    resolved
+        .get("args")?
+        .get("angle_bracketed")?
+        .get("args")?
+        .as_array()?
+        .iter()
+        .filter_map(|entry| entry.get("type").cloned())
+        .nth(index)
+}
+
+fn value_to_id(value: &serde_json::Value) -> Result<String> {
+    if let Some(id) = value.as_str() {
+        return Ok(id.to_string());
+    }
+    if let Some(id) = value.as_u64() {
+        return Ok(id.to_string());
+    }
+    bail!("Expected rustdoc item id, got non-id value")
+}
diff --git a/rust/crates/truapi-codegen/src/rust.rs b/rust/crates/truapi-codegen/src/rust.rs
new file mode 100644
index 00000000..a08680ae
--- /dev/null
+++ b/rust/crates/truapi-codegen/src/rust.rs
@@ -0,0 +1,514 @@
+//! Rust code generation from extracted API definitions.
+//!
+//! Emits the server-side wire dispatcher (`dispatcher.rs`) and the
+//! discriminant lookup table (`wire_table.rs`). The generated files are
+//! intended to be included in the `truapi-server` crate.
+
+use std::fs;
+use std::path::Path;
+
+use anyhow::Result;
+
+use crate::rustdoc::*;
+
+mod dispatcher;
+mod wire_table;
+
+pub use dispatcher::generate_dispatcher;
+pub use wire_table::generate_wire_table;
+
+/// Generates the Rust wire dispatcher and wire-table sources into `output_dir`.
+pub fn generate(api: &ApiDefinition, output_dir: &Path) -> Result<()> {
+    fs::create_dir_all(output_dir)?;
+    let dispatcher = generate_dispatcher(api)?;
+    fs::write(output_dir.join("dispatcher.rs"), dispatcher)?;
+    let wire_table = generate_wire_table(api)?;
+    fs::write(output_dir.join("wire_table.rs"), wire_table)?;
+    Ok(())
+}
+
+/// Trait -> versioned-module mapping. Trait names are PascalCase
+/// (`JsonRpc`, `LocalStorage`); module names are snake_case
+/// (`jsonrpc`, `local_storage`). The mapping is irregular enough
+/// (e.g. `JsonRpc` -> `jsonrpc`) that it is hardcoded.
+const TRAIT_MODULE_MAP: &[(&str, &str)] = &[
+    ("Account", "account"),
+    ("Chain", "chain"),
+    ("Chat", "chat"),
+    ("Entropy", "entropy"),
+    ("JsonRpc", "jsonrpc"),
+    ("LocalStorage", "local_storage"),
+    ("Payment", "payment"),
+    ("Permissions", "permissions"),
+    ("Preimage", "preimage"),
+    ("ResourceAllocation", "resource_allocation"),
+    ("Signing", "signing"),
+    ("StatementStore", "statement_store"),
+    ("System", "system"),
+    ("Theme", "theme"),
+];
+
+/// Returns the versioned-module name for a trait, falling back to a
+/// snake_case conversion of the trait name when no explicit mapping is
+/// declared. New traits should be added to [`TRAIT_MODULE_MAP`] so the
+/// emission stays deterministic.
+fn module_for_trait(trait_name: &str) -> String {
+    for (name, module) in TRAIT_MODULE_MAP {
+        if *name == trait_name {
+            return (*module).to_string();
+        }
+    }
+    snake_case(trait_name)
+}
+
+/// Returns the wire-protocol method name for a trait/method pair, used both
+/// as the dispatcher's registration key and as the prefix of the action tag
+/// (`{wire_method}_{request|response|...}`). The form is
+/// `{trait_snake}_{method}` so collisions between sibling traits (e.g.
+/// `StatementStore::submit` and `Preimage::submit`) become distinct keys
+/// (`statement_store_submit`, `preimage_submit`).
+pub(crate) fn wire_method_name(trait_name: &str, method_name: &str) -> String {
+    format!("{}_{}", snake_case(trait_name), method_name)
+}
+
+/// Convert a PascalCase identifier into snake_case.
+fn snake_case(name: &str) -> String {
+    let mut out = String::with_capacity(name.len() + 4);
+    for (idx, ch) in name.chars().enumerate() {
+        if ch.is_ascii_uppercase() {
+            if idx != 0 {
+                out.push('_');
+            }
+            out.push(ch.to_ascii_lowercase());
+        } else {
+            out.push(ch);
+        }
+    }
+    out
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn make_request_method(name: &str, request_id: u8) -> MethodDef {
+        MethodDef {
+            name: name.to_string(),
+            kind: MethodKind::Request,
+            params: vec![ParamDef {
+                name: "request".to_string(),
+                type_ref: TypeRef::Named {
+                    name: "ReqWrapper".to_string(),
+                    args: vec![],
+                },
+            }],
+            return_type: ReturnType::Result {
+                ok: TypeRef::Named {
+                    name: "RespWrapper".to_string(),
+                    args: vec![],
+                },
+                err: TypeRef::Named {
+                    name: "CallError".to_string(),
+                    args: vec![TypeRef::Named {
+                        name: "ErrWrapper".to_string(),
+                        args: vec![],
+                    }],
+                },
+            },
+            wire: WireAttrs {
+                request_id: Some(request_id),
+                response_id: None,
+                start_id: None,
+                stop_id: None,
+                interrupt_id: None,
+                receive_id: None,
+            },
+            docs: None,
+        }
+    }
+
+    fn make_subscription_method(name: &str, start_id: u8) -> MethodDef {
+        MethodDef {
+            name: name.to_string(),
+            kind: MethodKind::Subscription,
+            params: vec![],
+            return_type: ReturnType::Subscription(TypeRef::Named {
+                name: "ItemWrapper".to_string(),
+                args: vec![],
+            }),
+            wire: WireAttrs {
+                request_id: None,
+                response_id: None,
+                start_id: Some(start_id),
+                stop_id: None,
+                interrupt_id: None,
+                receive_id: None,
+            },
+            docs: None,
+        }
+    }
+
+    fn parse_entries(src: &str) -> Vec<(u8, String)> {
+        // Lines look like `    WireEntry { method: "x", ... request_id: 7, ... },`
+        // For the assertion we extract (id, tag) pairs from the embedded
+        // helper comment block instead. Keep a simpler parser of
+        // `// id=NN tag="..."` lines emitted by the generator.
+        let mut out = Vec::new();
+        for line in src.lines() {
+            let trimmed = line.trim();
+            if let Some(rest) = trimmed.strip_prefix("// entry id=") {
+                let mut parts = rest.splitn(2, ' ');
+                let id = parts.next().unwrap().parse::<u8>().unwrap();
+                let tag = parts
+                    .next()
+                    .unwrap()
+                    .trim_start_matches("tag=\"")
+                    .trim_end_matches('"')
+                    .to_string();
+                out.push((id, tag));
+            }
+        }
+        out
+    }
+
+    /// A single subscription method must reserve four consecutive wire
+    /// ids (start/stop/interrupt/receive) even when no sibling methods
+    /// exist to mask off-by-one errors.
+    #[test]
+    fn wire_table_subscribe_method_reserves_four_ids() {
+        let api = ApiDefinition {
+            traits: vec![TraitDef {
+                name: "Account".to_string(),
+                module_path: Vec::new(),
+                methods: vec![make_subscription_method("connection_status_subscribe", 18)],
+                docs: None,
+            }],
+            public_trait_order: vec!["Account".to_string()],
+            types: vec![],
+        };
+
+        let src = generate_wire_table(&api).expect("generate_wire_table");
+        let entries = parse_entries(&src);
+        assert_eq!(
+            entries,
+            vec![
+                (18, "account_connection_status_subscribe_start".into()),
+                (19, "account_connection_status_subscribe_stop".into()),
+                (20, "account_connection_status_subscribe_interrupt".into()),
+                (21, "account_connection_status_subscribe_receive".into()),
+            ],
+        );
+    }
+
+    /// Two traits each declaring a method named `submit` must produce two
+    /// distinct, non-colliding wire method keys; the emitter prefixes by
+    /// the snake_case trait name (e.g. `statement_store_submit` /
+    /// `preimage_submit`).
+    #[test]
+    fn collision_safe_when_two_traits_share_method_name() {
+        let api = ApiDefinition {
+            traits: vec![
+                TraitDef {
+                    name: "StatementStore".to_string(),
+                    module_path: Vec::new(),
+                    methods: vec![make_request_method("submit", 62)],
+                    docs: None,
+                },
+                TraitDef {
+                    name: "Preimage".to_string(),
+                    module_path: Vec::new(),
+                    methods: vec![make_request_method("submit", 68)],
+                    docs: None,
+                },
+            ],
+            public_trait_order: vec!["StatementStore".to_string(), "Preimage".to_string()],
+            types: vec![],
+        };
+
+        let dispatcher = generate_dispatcher(&api).expect("dispatcher");
+        assert!(
+            dispatcher.contains("\"statement_store_submit\""),
+            "dispatcher missing prefixed StatementStore key:\n{dispatcher}"
+        );
+        assert!(
+            dispatcher.contains("\"preimage_submit\""),
+            "dispatcher missing prefixed Preimage key:\n{dispatcher}"
+        );
+
+        let table = generate_wire_table(&api).expect("wire_table");
+        let entries = parse_entries(&table);
+        assert!(
+            entries
+                .iter()
+                .any(|(_, tag)| tag == "statement_store_submit_request"),
+            "wire_table missing prefixed StatementStore tag:\n{table}"
+        );
+        assert!(
+            entries
+                .iter()
+                .any(|(_, tag)| tag == "preimage_submit_request"),
+            "wire_table missing prefixed Preimage tag:\n{table}"
+        );
+    }
+
+    /// If a future change ever produces the same wire method key from two
+    /// different (trait, method) pairs, both emitters must fail loudly
+    /// rather than silently overwrite a handler.
+    #[test]
+    fn wire_table_rejects_method_name_collision() {
+        // `Foo::bar_baz` and `FooBar::baz` both snake-case to
+        // `foo_bar_baz`. The emitter must reject the pair.
+        let api = ApiDefinition {
+            traits: vec![
+                TraitDef {
+                    name: "Foo".to_string(),
+                    module_path: Vec::new(),
+                    methods: vec![make_request_method("bar_baz", 10)],
+                    docs: None,
+                },
+                TraitDef {
+                    name: "FooBar".to_string(),
+                    module_path: Vec::new(),
+                    methods: vec![make_request_method("baz", 12)],
+                    docs: None,
+                },
+            ],
+            public_trait_order: vec!["Foo".to_string(), "FooBar".to_string()],
+            types: vec![],
+        };
+        let err = generate_wire_table(&api).expect_err("duplicate wire method name must error");
+        let msg = format!("{err}");
+        assert!(
+            msg.contains("wire method name `foo_bar_baz` reused"),
+            "unexpected error message: {msg}",
+        );
+
+        let err = generate_dispatcher(&api).expect_err("duplicate wire method name must error");
+        let msg = format!("{err}");
+        assert!(
+            msg.contains("Wire method name `foo_bar_baz` registered twice"),
+            "unexpected dispatcher error message: {msg}",
+        );
+    }
+
+    /// Emission must be deterministic: running the codegen twice on the
+    /// same API produces byte-identical output.
+    #[test]
+    fn idempotent_emission() {
+        let api = ApiDefinition {
+            traits: vec![TraitDef {
+                name: "Permissions".to_string(),
+                module_path: Vec::new(),
+                methods: vec![make_request_method("request_device_permission", 8)],
+                docs: None,
+            }],
+            public_trait_order: vec!["Permissions".to_string()],
+            types: vec![],
+        };
+
+        let dispatcher_a = generate_dispatcher(&api).expect("dispatcher a");
+        let dispatcher_b = generate_dispatcher(&api).expect("dispatcher b");
+        assert_eq!(dispatcher_a, dispatcher_b);
+
+        let table_a = generate_wire_table(&api).expect("wire_table a");
+        let table_b = generate_wire_table(&api).expect("wire_table b");
+        assert_eq!(table_a, table_b);
+    }
+
+    /// Methods with a `#[wire(request_id = N)]` annotation get a 2-id
+    /// slot (request/response). Methods with `#[wire(start_id = N)]`
+    /// get a 4-id slot (start/stop/interrupt/receive). The emitter
+    /// must enforce that, and reject collisions.
+    #[test]
+    fn wire_table_rejects_collisions() {
+        let api = ApiDefinition {
+            traits: vec![TraitDef {
+                name: "Permissions".to_string(),
+                module_path: Vec::new(),
+                methods: vec![
+                    make_request_method("alpha", 10),
+                    make_request_method("beta", 10),
+                ],
+                docs: None,
+            }],
+            public_trait_order: vec!["Permissions".to_string()],
+            types: vec![],
+        };
+        let err = generate_wire_table(&api).expect_err("duplicate ids must error");
+        let msg = format!("{err}");
+        assert!(
+            msg.contains("wire id 10 reused"),
+            "unexpected error message: {msg}",
+        );
+    }
+
+    #[test]
+    fn module_for_trait_maps_irregular_names() {
+        assert_eq!(module_for_trait("JsonRpc"), "jsonrpc");
+        assert_eq!(module_for_trait("LocalStorage"), "local_storage");
+        assert_eq!(
+            module_for_trait("ResourceAllocation"),
+            "resource_allocation"
+        );
+        assert_eq!(module_for_trait("Account"), "account");
+    }
+
+    /// A request-kind method must not carry subscription wire ids. The
+    /// emitter rejects `start_id` / `stop_id` / `interrupt_id` / `receive_id`
+    /// on a `MethodKind::Request`.
+    #[test]
+    fn wire_table_request_with_subscription_id_errors() {
+        let mut method = make_request_method("alpha", 10);
+        method.wire.start_id = Some(99);
+        let api = ApiDefinition {
+            traits: vec![TraitDef {
+                name: "Permissions".to_string(),
+                module_path: Vec::new(),
+                methods: vec![method],
+                docs: None,
+            }],
+            public_trait_order: vec!["Permissions".to_string()],
+            types: vec![],
+        };
+        let err = generate_wire_table(&api).expect_err("request kind + start_id must error");
+        let msg = format!("{err}");
+        assert!(
+            msg.contains("must not use subscription wire ids"),
+            "unexpected error message: {msg}",
+        );
+    }
+
+    /// A subscription-kind method must not carry request wire ids.
+    #[test]
+    fn wire_table_subscription_with_request_id_errors() {
+        let mut method = make_subscription_method("connection_status_subscribe", 18);
+        method.wire.request_id = Some(99);
+        let api = ApiDefinition {
+            traits: vec![TraitDef {
+                name: "Account".to_string(),
+                module_path: Vec::new(),
+                methods: vec![method],
+                docs: None,
+            }],
+            public_trait_order: vec!["Account".to_string()],
+            types: vec![],
+        };
+        let err = generate_wire_table(&api).expect_err("subscription kind + request_id must error");
+        let msg = format!("{err}");
+        assert!(
+            msg.contains("must not use request wire ids"),
+            "unexpected error message: {msg}",
+        );
+    }
+
+    /// A request-kind method missing the mandatory `request_id` annotation
+    /// must fail emission, not silently default to 0.
+    #[test]
+    fn wire_table_missing_request_id_errors() {
+        let mut method = make_request_method("alpha", 10);
+        method.wire.request_id = None;
+        let api = ApiDefinition {
+            traits: vec![TraitDef {
+                name: "Permissions".to_string(),
+                module_path: Vec::new(),
+                methods: vec![method],
+                docs: None,
+            }],
+            public_trait_order: vec!["Permissions".to_string()],
+            types: vec![],
+        };
+        let err = generate_wire_table(&api).expect_err("missing request_id annotation must error");
+        let msg = format!("{err}");
+        assert!(
+            msg.contains("missing #[wire(request_id"),
+            "unexpected error message: {msg}",
+        );
+    }
+
+    /// Subscription-kind method missing `start_id` is similarly rejected.
+    #[test]
+    fn wire_table_missing_start_id_errors() {
+        let mut method = make_subscription_method("connection_status_subscribe", 18);
+        method.wire.start_id = None;
+        let api = ApiDefinition {
+            traits: vec![TraitDef {
+                name: "Account".to_string(),
+                module_path: Vec::new(),
+                methods: vec![method],
+                docs: None,
+            }],
+            public_trait_order: vec!["Account".to_string()],
+            types: vec![],
+        };
+        let err = generate_wire_table(&api).expect_err("missing start_id annotation must error");
+        let msg = format!("{err}");
+        assert!(
+            msg.contains("missing #[wire(start_id"),
+            "unexpected error message: {msg}",
+        );
+    }
+
+    /// The dispatcher expects each method to take exactly one versioned
+    /// wrapper parameter (plus `&self` and `&CallContext`, which are
+    /// elided from `params`). A method with two params errors out.
+    #[test]
+    fn dispatcher_multi_param_method_errors() {
+        let mut method = make_request_method("alpha", 10);
+        method.params.push(ParamDef {
+            name: "extra".to_string(),
+            type_ref: TypeRef::Named {
+                name: "ExtraWrapper".to_string(),
+                args: vec![],
+            },
+        });
+        let api = ApiDefinition {
+            traits: vec![TraitDef {
+                name: "Permissions".to_string(),
+                module_path: Vec::new(),
+                methods: vec![method],
+                docs: None,
+            }],
+            public_trait_order: vec!["Permissions".to_string()],
+            types: vec![],
+        };
+        let err = generate_dispatcher(&api).expect_err("two-param method must error");
+        let msg = format!("{err}");
+        assert!(
+            msg.contains("expected at most one request parameter"),
+            "unexpected error message: {msg}",
+        );
+    }
+
+    /// The response wrapper extraction expects a `TypeRef::Named` with no
+    /// generic args. Anything else (primitives, tuples, generics) errors.
+    #[test]
+    fn dispatcher_non_named_root_response_errors() {
+        let mut method = make_request_method("alpha", 10);
+        method.return_type = ReturnType::Result {
+            ok: TypeRef::Primitive("u32".to_string()),
+            err: TypeRef::Named {
+                name: "CallError".to_string(),
+                args: vec![TypeRef::Named {
+                    name: "ErrWrapper".to_string(),
+                    args: vec![],
+                }],
+            },
+        };
+        let api = ApiDefinition {
+            traits: vec![TraitDef {
+                name: "Permissions".to_string(),
+                module_path: Vec::new(),
+                methods: vec![method],
+                docs: None,
+            }],
+            public_trait_order: vec!["Permissions".to_string()],
+            types: vec![],
+        };
+        let err = generate_dispatcher(&api).expect_err("primitive response must error");
+        let msg = format!("{err}");
+        assert!(
+            msg.contains("response is not a versioned wrapper"),
+            "unexpected error message: {msg}",
+        );
+    }
+}
diff --git a/rust/crates/truapi-codegen/src/rust/dispatcher.rs b/rust/crates/truapi-codegen/src/rust/dispatcher.rs
new file mode 100644
index 00000000..753053c3
--- /dev/null
+++ b/rust/crates/truapi-codegen/src/rust/dispatcher.rs
@@ -0,0 +1,467 @@
+//! Emits `dispatcher.rs`: the server-side wire dispatcher that routes
+//! incoming frames to the host trait implementation.
+//!
+//! For each method the emitter produces an `on_request` (or
+//! `on_subscription`) registration that:
+//! 1. SCALE-decodes the versioned request wrapper from the wire bytes.
+//! 2. Calls the host trait method (which receives the wrapper directly
+//!    and matches `_::V1(inner)` internally).
+//! 3. SCALE-encodes the versioned response wrapper back onto the wire.
+//!
+//! The generated file expects to live inside a `truapi-server` crate
+//! and references `crate::dispatcher::Dispatcher`. The codegen itself
+//! does not compile the output; string-diff golden tests guard it.
+
+use std::collections::BTreeMap;
+use std::collections::BTreeSet;
+use std::fmt::Write;
+
+use anyhow::{Result, bail};
+use indoc::{formatdoc, indoc, writedoc};
+
+use crate::rustdoc::*;
+
+use super::{module_for_trait, wire_method_name};
+
+/// Emit the contents of `dispatcher.rs`.
+pub fn generate_dispatcher(api: &ApiDefinition) -> Result<String> {
+    let traits = order_traits(api)?;
+
+    // Reject any duplicate wire method name across traits before emission, so
+    // a future addition can't silently overwrite a handler in the HashMap.
+    let mut seen: BTreeSet<String> = BTreeSet::new();
+    for trait_def in &traits {
+        for method in &trait_def.methods {
+            let key = wire_method_name(&trait_def.name, &method.name);
+            if !seen.insert(key.clone()) {
+                bail!(
+                    "Wire method name `{key}` registered twice; \
+                     change `{}::{}` or its sibling trait to disambiguate",
+                    trait_def.name,
+                    method.name
+                );
+            }
+        }
+    }
+
+    let mut modules = Vec::with_capacity(traits.len());
+    for trait_def in &traits {
+        modules.push(ModuleEmission::build(trait_def)?);
+    }
+
+    let mut out = String::new();
+    write_header(&mut out);
+    write_imports(&mut out, &traits);
+    writeln!(out).unwrap();
+    write_top_register(&mut out, &traits);
+
+    for module in &modules {
+        writeln!(out).unwrap();
+        out.push_str(&module.code);
+    }
+
+    Ok(out)
+}
+
+/// Returns the traits to emit, in the order declared by the top-level
+/// `TrUApi` super-trait. Falls back to alphabetical order if the
+/// extractor did not record a public ordering (e.g. synthetic tests).
+fn order_traits(api: &ApiDefinition) -> Result<Vec<&TraitDef>> {
+    let by_name: BTreeMap<&str, &TraitDef> =
+        api.traits.iter().map(|t| (t.name.as_str(), t)).collect();
+
+    if api.public_trait_order.is_empty() {
+        return Ok(api.traits.iter().collect());
+    }
+
+    let mut ordered = Vec::with_capacity(api.public_trait_order.len());
+    for name in &api.public_trait_order {
+        let Some(trait_def) = by_name.get(name.as_str()) else {
+            bail!("trait `{name}` appears in TrUApi but was not extracted");
+        };
+        ordered.push(*trait_def);
+    }
+    Ok(ordered)
+}
+
+struct ModuleEmission {
+    code: String,
+}
+
+impl ModuleEmission {
+    fn build(trait_def: &TraitDef) -> Result<Self> {
+        let module = module_for_trait(&trait_def.name);
+
+        let mut methods = Vec::with_capacity(trait_def.methods.len());
+        for method in &trait_def.methods {
+            let wire_method = wire_method_name(&trait_def.name, &method.name);
+            methods.push(MethodEmission::build(&module, &wire_method, method)?);
+        }
+
+        let fn_name = format!("register_{module}");
+        let trait_name = &trait_def.name;
+        let mut code = String::new();
+        writedoc!(
+            code,
+            r#"
+            fn {fn_name}<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+            where
+                P: {trait_name} + Send + Sync + 'static,
+            {{
+            "#
+        )
+        .unwrap();
+        let last = methods.len().saturating_sub(1);
+        for (idx, method) in methods.iter().enumerate() {
+            let host_expr = if idx == last { "host" } else { "host.clone()" };
+            method.write(&mut code, host_expr);
+        }
+        writeln!(code, "}}").unwrap();
+
+        Ok(ModuleEmission { code })
+    }
+}
+
+struct MethodEmission {
+    /// Rust method name on the host trait (used for the `host.<name>(...)` call).
+    name: String,
+    /// Fully-qualified wire method name (`{trait_snake}_{method}`); used as the
+    /// dispatcher registration key and the tag prefix.
+    wire_name: String,
+    module: String,
+    kind: MethodKind,
+    request_wrapper: Option<String>,
+    response_wrapper: Option<String>,
+    item_wrapper: Option<String>,
+}
+
+impl MethodEmission {
+    fn build(module: &str, wire_method: &str, method: &MethodDef) -> Result<Self> {
+        let request_wrapper = match method.params.as_slice() {
+            [] => None,
+            [param] => match &param.type_ref {
+                TypeRef::Named { name, args } if args.is_empty() => Some(name.clone()),
+                _ => bail!(
+                    "Method `{}`: expected a single versioned-wrapper request parameter",
+                    method.name
+                ),
+            },
+            _ => bail!(
+                "Method `{}`: expected at most one request parameter (got {})",
+                method.name,
+                method.params.len()
+            ),
+        };
+
+        let (response_wrapper, item_wrapper) = match &method.return_type {
+            // `Result<(), _>` returns produce an empty wire payload.
+            // The trait method is called for its side effects and the
+            // dispatcher encodes `()` (zero bytes) on success.
+            ReturnType::Result {
+                ok: TypeRef::Unit, ..
+            } => (None, None),
+            ReturnType::Result { ok, .. } => (
+                Some(named_root(ok).ok_or_else(|| {
+                    anyhow::anyhow!(
+                        "Method `{}`: response is not a versioned wrapper",
+                        method.name
+                    )
+                })?),
+                None,
+            ),
+            ReturnType::Subscription(item) => (
+                None,
+                Some(named_root(item).ok_or_else(|| {
+                    anyhow::anyhow!(
+                        "Method `{}`: subscription item is not a versioned wrapper",
+                        method.name
+                    )
+                })?),
+            ),
+            ReturnType::ResultSubscription { item, .. } => (
+                None,
+                Some(named_root(item).ok_or_else(|| {
+                    anyhow::anyhow!(
+                        "Method `{}`: subscription item is not a versioned wrapper",
+                        method.name
+                    )
+                })?),
+            ),
+        };
+
+        Ok(MethodEmission {
+            name: method.name.clone(),
+            wire_name: wire_method.to_string(),
+            module: module.to_string(),
+            kind: match method.kind {
+                MethodKind::Request => MethodKind::Request,
+                MethodKind::Subscription => MethodKind::Subscription,
+                MethodKind::ResultSubscription => MethodKind::ResultSubscription,
+            },
+            request_wrapper,
+            response_wrapper,
+            item_wrapper,
+        })
+    }
+
+    fn write(&self, out: &mut String, host_expr: &str) {
+        match self.kind {
+            MethodKind::Request => self.write_request(out, host_expr),
+            MethodKind::Subscription | MethodKind::ResultSubscription => {
+                self.write_subscription(out, host_expr)
+            }
+        }
+    }
+
+    fn write_request(&self, out: &mut String, host_expr: &str) {
+        let module = &self.module;
+        let method = &self.name;
+        let wire = &self.wire_name;
+
+        write_indented(
+            out,
+            4,
+            &formatdoc! {
+                r#"
+                {{
+                    let host = {host_expr};
+                    dispatcher.on_request("{wire}", move |request_id: String, bytes: Vec<u8>| {{
+                        let host = host.clone();
+                        Box::pin(async move {{
+                "#
+            },
+        );
+        let call_args = if let Some(request) = &self.request_wrapper {
+            write_indented(
+                out,
+                16,
+                &formatdoc! {
+                    r#"
+                    let request: versioned::{module}::{request} =
+                        Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                    "#
+                },
+            );
+            "&cx, request"
+        } else {
+            writeln!(out, "                let _ = bytes;").unwrap();
+            "&cx"
+        };
+        writeln!(
+            out,
+            "                let cx = CallContext::with_request_id(request_id.clone());"
+        )
+        .unwrap();
+        match &self.response_wrapper {
+            Some(response) => write_indented(
+                out,
+                16,
+                &formatdoc! {
+                    r#"
+                    let response: versioned::{module}::{response} = match host.{method}({call_args}).await {{
+                        Ok(value) => value,
+                        Err(err) => return Err(encode_call_error_payload(err)),
+                    }};
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                    "#
+                },
+            ),
+            None => write_indented(
+                out,
+                16,
+                &formatdoc! {
+                    r#"
+                    match host.{method}({call_args}).await {{
+                        Ok(()) => Ok(vec![0u8]),
+                        Err(err) => Err(encode_call_error_payload(err)),
+                    }}
+                    "#
+                },
+            ),
+        }
+        write_indented(
+            out,
+            4,
+            indoc! {
+                r#"
+                        })
+                    });
+                }
+                "#
+            },
+        );
+    }
+
+    fn write_subscription(&self, out: &mut String, host_expr: &str) {
+        let module = &self.module;
+        let method = &self.name;
+        let wire = &self.wire_name;
+        let item = self
+            .item_wrapper
+            .as_deref()
+            .expect("subscription methods must have an item wrapper");
+
+        let is_result_sub = matches!(self.kind, MethodKind::ResultSubscription);
+
+        write_indented(
+            out,
+            4,
+            &formatdoc! {
+                r#"
+                {{
+                    let host = {host_expr};
+                    dispatcher.on_subscription("{wire}", move |request_id: String, bytes: Vec<u8>| {{
+                        let host = host.clone();
+                        Box::pin(async move {{
+                "#
+            },
+        );
+        let call_args = if let Some(request) = &self.request_wrapper {
+            write_indented(
+                out,
+                16,
+                &formatdoc! {
+                    r#"
+                    let request: versioned::{module}::{request} =
+                        Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                    "#
+                },
+            );
+            "&cx, request"
+        } else {
+            writeln!(out, "                let _ = bytes;").unwrap();
+            "&cx"
+        };
+        writeln!(
+            out,
+            "                let cx = CallContext::with_request_id(request_id.clone());"
+        )
+        .unwrap();
+        if is_result_sub {
+            write_indented(
+                out,
+                16,
+                &formatdoc! {
+                    r#"
+                    let stream = match host.{method}({call_args}).await {{
+                        Ok(sub) => sub,
+                        Err(err) => return Err(encode_call_error_payload(err)),
+                    }};
+                    "#
+                },
+            );
+        } else {
+            writeln!(
+                out,
+                "                let stream = host.{method}({call_args}).await;"
+            )
+            .unwrap();
+        }
+        writeln!(
+            out,
+            "                Ok(subscription_stream::<versioned::{module}::{item}, _>(stream))"
+        )
+        .unwrap();
+        write_indented(
+            out,
+            4,
+            indoc! {
+                r#"
+                        })
+                    });
+                }
+                "#
+            },
+        );
+    }
+}
+
+fn named_root(ty: &TypeRef) -> Option<String> {
+    if let TypeRef::Named { name, args } = ty
+        && args.is_empty()
+    {
+        return Some(name.clone());
+    }
+    None
+}
+
+/// Append `block` to `out`, prefixing every non-empty line with `indent` spaces.
+fn write_indented(out: &mut String, indent: usize, block: &str) {
+    let pad = " ".repeat(indent);
+    for line in block.lines() {
+        if line.is_empty() {
+            out.push('\n');
+        } else {
+            writeln!(out, "{pad}{line}").unwrap();
+        }
+    }
+}
+
+fn write_header(out: &mut String) {
+    writedoc!(
+        out,
+        r#"
+        //! Wire dispatcher for the unified `TrUApi` trait.
+        //!
+        //! Auto-generated by truapi-codegen. Do not edit.
+
+        "#
+    )
+    .unwrap();
+}
+
+fn write_imports(out: &mut String, traits: &[&TraitDef]) {
+    writedoc!(
+        out,
+        r#"
+        use std::sync::Arc;
+
+        use parity_scale_codec::{{Decode, Encode}};
+
+        use truapi::CallContext;
+        use truapi::api::{{
+        "#
+    )
+    .unwrap();
+    for trait_def in traits {
+        writeln!(out, "    {},", trait_def.name).unwrap();
+    }
+    writedoc!(
+        out,
+        r#"
+        }};
+        use truapi::versioned;
+
+        use crate::dispatcher::Dispatcher;
+        use crate::frame::{{encode_call_error_payload, encode_decode_error}};
+        use crate::subscription::subscription_stream;
+        "#
+    )
+    .unwrap();
+}
+
+fn write_top_register(out: &mut String, traits: &[&TraitDef]) {
+    let trait_names: Vec<&str> = traits.iter().map(|t| t.name.as_str()).collect();
+    let bounds = trait_names.join(" + ");
+    writedoc!(
+        out,
+        r#"
+        /// Register every TrUAPI method with the dispatcher.
+        pub fn register<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+        where
+            P: {bounds} + Send + Sync + 'static,
+        {{
+        "#
+    )
+    .unwrap();
+    let last = traits.len().saturating_sub(1);
+    for (idx, trait_def) in traits.iter().enumerate() {
+        let host_expr = if idx == last { "host" } else { "host.clone()" };
+        let module = module_for_trait(&trait_def.name);
+        writeln!(out, "    register_{module}(dispatcher, {host_expr});").unwrap();
+    }
+    writeln!(out, "}}").unwrap();
+}
diff --git a/rust/crates/truapi-codegen/src/rust/wire_table.rs b/rust/crates/truapi-codegen/src/rust/wire_table.rs
new file mode 100644
index 00000000..200a990e
--- /dev/null
+++ b/rust/crates/truapi-codegen/src/rust/wire_table.rs
@@ -0,0 +1,277 @@
+//! Emits `wire_table.rs`: the (id, tag) lookup table the server uses to
+//! pair incoming wire frames with their request, response, or
+//! subscription role.
+//!
+//! Per-method `#[wire(...)]` annotations decide id assignment:
+//! - request methods reserve `(request_id, response_id)`.
+//! - subscription methods reserve `(start_id, stop_id, interrupt_id, receive_id)`.
+//!
+//! Missing annotations and collisions both hard-fail codegen.
+
+use std::collections::BTreeMap;
+use std::fmt::Write;
+
+use anyhow::{Result, bail};
+use indoc::{formatdoc, writedoc};
+
+use crate::rustdoc::*;
+
+use super::wire_method_name;
+
+#[derive(Debug, Clone, Copy)]
+struct WireEntry {
+    request_id: u8,
+    response_id: u8,
+}
+
+#[derive(Debug, Clone, Copy)]
+struct SubEntry {
+    start_id: u8,
+    stop_id: u8,
+    interrupt_id: u8,
+    receive_id: u8,
+}
+
+#[derive(Debug, Clone, Copy)]
+enum MethodEntry {
+    Request(WireEntry),
+    Subscription(SubEntry),
+}
+
+/// Emit the contents of `wire_table.rs`.
+pub fn generate_wire_table(api: &ApiDefinition) -> Result<String> {
+    let mut method_entries: Vec<(String, MethodEntry)> = Vec::new();
+    let mut seen: BTreeMap<u8, String> = BTreeMap::new();
+    let mut seen_methods: BTreeMap<String, String> = BTreeMap::new();
+
+    for trait_def in &api.traits {
+        for method in &trait_def.methods {
+            let entry = method_entry(trait_def, method)?;
+            let wire_method = wire_method_name(&trait_def.name, &method.name);
+            if let Some(existing) = seen_methods.insert(
+                wire_method.clone(),
+                format!("{}::{}", trait_def.name, method.name),
+            ) {
+                bail!(
+                    "wire method name `{wire_method}` reused: `{existing}` and `{}::{}` collide",
+                    trait_def.name,
+                    method.name
+                );
+            }
+            insert_entry(&mut seen, &wire_method, entry)?;
+            method_entries.push((wire_method, entry));
+        }
+    }
+
+    method_entries.sort_by_key(|(_, entry)| match entry {
+        MethodEntry::Request(WireEntry { request_id, .. }) => *request_id,
+        MethodEntry::Subscription(SubEntry { start_id, .. }) => *start_id,
+    });
+
+    render(&method_entries, &seen)
+}
+
+fn method_entry(trait_def: &TraitDef, method: &MethodDef) -> Result<MethodEntry> {
+    let wire = &method.wire;
+    match method.kind {
+        MethodKind::Request => {
+            if wire.start_id.is_some()
+                || wire.stop_id.is_some()
+                || wire.interrupt_id.is_some()
+                || wire.receive_id.is_some()
+            {
+                bail!(
+                    "method `{}::{}` is a request and must not use subscription wire ids",
+                    trait_def.name,
+                    method.name
+                );
+            }
+            let request_id = wire.request_id.ok_or_else(|| {
+                anyhow::anyhow!(
+                    "method `{}::{}` is missing #[wire(request_id = N)] annotation",
+                    trait_def.name,
+                    method.name
+                )
+            })?;
+            let response_id = infer_id(wire.response_id, request_id, 1, &method.name)?;
+            Ok(MethodEntry::Request(WireEntry {
+                request_id,
+                response_id,
+            }))
+        }
+        MethodKind::Subscription | MethodKind::ResultSubscription => {
+            if wire.request_id.is_some() || wire.response_id.is_some() {
+                bail!(
+                    "method `{}::{}` is a subscription and must not use request wire ids",
+                    trait_def.name,
+                    method.name
+                );
+            }
+            let start_id = wire.start_id.ok_or_else(|| {
+                anyhow::anyhow!(
+                    "method `{}::{}` is missing #[wire(start_id = N)] annotation",
+                    trait_def.name,
+                    method.name
+                )
+            })?;
+            let stop_id = infer_id(wire.stop_id, start_id, 1, &method.name)?;
+            let interrupt_id = infer_id(wire.interrupt_id, start_id, 2, &method.name)?;
+            let receive_id = infer_id(wire.receive_id, start_id, 3, &method.name)?;
+            Ok(MethodEntry::Subscription(SubEntry {
+                start_id,
+                stop_id,
+                interrupt_id,
+                receive_id,
+            }))
+        }
+    }
+}
+
+fn infer_id(explicit: Option<u8>, anchor: u8, offset: u8, method_name: &str) -> Result<u8> {
+    if let Some(id) = explicit {
+        return Ok(id);
+    }
+    anchor
+        .checked_add(offset)
+        .ok_or_else(|| anyhow::anyhow!("wire id overflow on `{method_name}` (base {anchor})"))
+}
+
+fn insert_entry(
+    seen: &mut BTreeMap<u8, String>,
+    method_name: &str,
+    entry: MethodEntry,
+) -> Result<()> {
+    let pairs: Vec<(u8, String)> = match entry {
+        MethodEntry::Request(WireEntry {
+            request_id,
+            response_id,
+        }) => vec![
+            (request_id, format!("{method_name}_request")),
+            (response_id, format!("{method_name}_response")),
+        ],
+        MethodEntry::Subscription(SubEntry {
+            start_id,
+            stop_id,
+            interrupt_id,
+            receive_id,
+        }) => vec![
+            (start_id, format!("{method_name}_start")),
+            (stop_id, format!("{method_name}_stop")),
+            (interrupt_id, format!("{method_name}_interrupt")),
+            (receive_id, format!("{method_name}_receive")),
+        ],
+    };
+    for (id, tag) in pairs {
+        if let Some(existing) = seen.insert(id, tag.clone()) {
+            bail!("wire id {id} reused: `{existing}` and `{tag}` collide");
+        }
+    }
+    Ok(())
+}
+
+fn render(methods: &[(String, MethodEntry)], seen: &BTreeMap<u8, String>) -> Result<String> {
+    let mut out = String::new();
+    writedoc!(
+        out,
+        r#"
+        //! Wire-protocol discriminant table.
+        //!
+        //! Auto-generated by truapi-codegen. Do not edit.
+        //!
+        //! Each method reserves either two ids (request/response) or four
+        //! (start/stop/interrupt/receive). The table is sorted by request/start id.
+
+        "#
+    )
+    .unwrap();
+
+    // Embed an audit comment block: one `// entry id=<n> tag="<tag>"`
+    // line per discriminant, sorted by id. This is what the codegen
+    // unit tests consume as a parseable shadow of the slice below.
+    for (id, tag) in seen {
+        writeln!(out, "// entry id={id} tag=\"{tag}\"").unwrap();
+    }
+    writeln!(out).unwrap();
+
+    writedoc!(
+        out,
+        r#"
+        /// A single wire-table row.
+        pub struct WireEntry {{
+            /// Method name from the Rust trait.
+            pub method: &'static str,
+            /// What kind of slot this entry describes.
+            pub kind: WireKind,
+        }}
+
+        /// Wire-slot shape: request/response pair or subscription quartet.
+        pub enum WireKind {{
+            /// Request/response method.
+            Request {{
+                /// Discriminant for the request frame.
+                request_id: u8,
+                /// Discriminant for the response frame.
+                response_id: u8,
+            }},
+            /// Subscription method.
+            Subscription {{
+                /// Discriminant for the start frame.
+                start_id: u8,
+                /// Discriminant for the stop frame.
+                stop_id: u8,
+                /// Discriminant for the interrupt frame (server-initiated termination).
+                interrupt_id: u8,
+                /// Discriminant for each receive frame (a streamed item).
+                receive_id: u8,
+            }},
+        }}
+
+        /// The full wire table. Ordering is part of the wire protocol;
+        /// only ever append. Removed methods leave their slot empty.
+        pub const WIRE_TABLE: &[WireEntry] = &[
+        "#
+    )
+    .unwrap();
+    for (name, entry) in methods {
+        let block = match entry {
+            MethodEntry::Request(WireEntry {
+                request_id,
+                response_id,
+            }) => formatdoc! {
+                r#"
+                WireEntry {{
+                    method: "{name}",
+                    kind: WireKind::Request {{
+                        request_id: {request_id},
+                        response_id: {response_id},
+                    }},
+                }},
+                "#
+            },
+            MethodEntry::Subscription(SubEntry {
+                start_id,
+                stop_id,
+                interrupt_id,
+                receive_id,
+            }) => formatdoc! {
+                r#"
+                WireEntry {{
+                    method: "{name}",
+                    kind: WireKind::Subscription {{
+                        start_id: {start_id},
+                        stop_id: {stop_id},
+                        interrupt_id: {interrupt_id},
+                        receive_id: {receive_id},
+                    }},
+                }},
+                "#
+            },
+        };
+        for line in block.lines() {
+            writeln!(out, "    {line}").unwrap();
+        }
+    }
+    writeln!(out, "];").unwrap();
+
+    Ok(out)
+}
diff --git a/rust/crates/truapi-codegen/src/rustdoc.rs b/rust/crates/truapi-codegen/src/rustdoc.rs
index 2e8aa459..5b30a72f 100644
--- a/rust/crates/truapi-codegen/src/rustdoc.rs
+++ b/rust/crates/truapi-codegen/src/rustdoc.rs
@@ -220,7 +220,7 @@ struct ItemCandidate {
 }
 
 #[derive(Debug, Default)]
-struct NameContext {
+pub(crate) struct NameContext {
     by_item_id: HashMap<String, String>,
     by_path: HashMap<String, String>,
 }
@@ -844,7 +844,7 @@ fn extract_generic_arg(
     resolve_type(&generic, names)
 }
 
-fn resolve_type(ty: &serde_json::Value, names: &NameContext) -> Result<TypeRef> {
+pub(crate) fn resolve_type(ty: &serde_json::Value, names: &NameContext) -> Result<TypeRef> {
     if let Some(name) = ty.get("generic").and_then(|value| value.as_str()) {
         return Ok(TypeRef::Generic(name.to_string()));
     }
@@ -1288,7 +1288,7 @@ fn value_id(value: &serde_json::Value) -> Result<String> {
     bail!("Expected rustdoc item id, got {}", summarize_json(value))
 }
 
-fn summarize_json(value: &serde_json::Value) -> String {
+pub(crate) fn summarize_json(value: &serde_json::Value) -> String {
     const LIMIT: usize = 200;
 
     let mut text =
diff --git a/rust/crates/truapi-codegen/src/ts.rs b/rust/crates/truapi-codegen/src/ts.rs
index 2b56d31e..e68dd616 100644
--- a/rust/crates/truapi-codegen/src/ts.rs
+++ b/rust/crates/truapi-codegen/src/ts.rs
@@ -13,10 +13,12 @@ use crate::rustdoc::*;
 
 mod examples;
 mod explorer;
+mod host_callbacks;
 mod playground;
 
 pub use examples::generate_client_examples;
 pub use explorer::generate_explorer;
+pub use host_callbacks::generate as generate_host_callbacks;
 pub use playground::generate_playground_services;
 
 #[derive(Default)]
diff --git a/rust/crates/truapi-codegen/src/ts/host_callbacks.rs b/rust/crates/truapi-codegen/src/ts/host_callbacks.rs
new file mode 100644
index 00000000..705ddbba
--- /dev/null
+++ b/rust/crates/truapi-codegen/src/ts/host_callbacks.rs
@@ -0,0 +1,277 @@
+//! Emit the typed `HostCallbacks` TypeScript surface from a parsed
+//! `truapi-platform` rustdoc tree.
+//!
+//! One TS interface per Rust capability trait, plus a composite
+//! `HostCallbacks` super-interface that mirrors the `Platform: A + B + ...`
+//! super-trait so consumers can implement capabilities piecemeal. Named
+//! types in trait signatures (e.g. `HostDevicePermissionRequest`) resolve
+//! against `@parity/truapi`, the canonical typed client surface.
+
+use std::collections::BTreeSet;
+use std::fmt::Write;
+use std::fs;
+use std::path::Path;
+
+use anyhow::{Result, bail};
+use indoc::{formatdoc, writedoc};
+
+use crate::platform::{
+    PlatformDefinition, PlatformInner, PlatformMethod, PlatformReturn, PlatformTrait,
+};
+use crate::rustdoc::TypeRef;
+
+/// Write the typed host-callbacks TS file into `output_dir`.
+pub fn generate(definition: &PlatformDefinition, output_dir: &str) -> Result<()> {
+    fs::create_dir_all(output_dir)?;
+    let body = emit_host_callbacks(definition)?;
+    fs::write(Path::new(output_dir).join("host-callbacks.ts"), body)?;
+    Ok(())
+}
+
+fn emit_host_callbacks(definition: &PlatformDefinition) -> Result<String> {
+    let mut out = String::new();
+    writedoc!(
+        out,
+        r#"
+        // Auto-generated by truapi-codegen. Do not edit.
+        //
+        // Typed host-callbacks surface derived from the `truapi-platform`
+        // capability traits. One interface per Rust trait + a composite
+        // `HostCallbacks` interface that mirrors the `Platform` super-trait.
+
+        "#,
+    )
+    .unwrap();
+
+    let imports = collect_named_types(definition);
+    if !imports.is_empty() {
+        let entries = imports
+            .iter()
+            .map(|name| format!("  {name},"))
+            .collect::<Vec<_>>()
+            .join("\n");
+        writedoc!(
+            out,
+            r#"
+            import type {{
+            {entries}
+            }} from "@parity/truapi";
+
+            "#,
+        )
+        .unwrap();
+    }
+
+    for trait_def in &definition.traits {
+        out.push_str(&emit_trait_interface(trait_def)?);
+        out.push('\n');
+    }
+
+    // The Rust super-trait `Platform` becomes `HostCallbacks` on the TS
+    // surface: that is the name every host implementer reaches for, and
+    // it stays stable even if the Rust trait is renamed.
+    let (composes, docs): (Vec<String>, Option<&str>) = match &definition.super_trait {
+        Some(s) => (s.composes.clone(), s.docs.as_deref()),
+        None => (
+            definition.traits.iter().map(|t| t.name.clone()).collect(),
+            None,
+        ),
+    };
+    out.push_str(&emit_super_interface("HostCallbacks", &composes, docs));
+
+    Ok(out)
+}
+
+fn emit_trait_interface(trait_def: &PlatformTrait) -> Result<String> {
+    let jsdoc = render_jsdoc("", trait_def.docs.as_deref());
+    let body = trait_def
+        .methods
+        .iter()
+        .map(emit_method)
+        .collect::<Result<Vec<_>>>()?
+        .join("\n\n");
+    Ok(formatdoc! {
+        r#"
+        {jsdoc}export interface {name} {{
+        {body}
+        }}
+        "#,
+        name = trait_def.name,
+    })
+}
+
+fn emit_method(method: &PlatformMethod) -> Result<String> {
+    let jsdoc = render_jsdoc("  ", method.docs.as_deref());
+    let params = method
+        .params
+        .iter()
+        .map(|p| {
+            let ts = ts_type(&p.type_ref)?;
+            Ok(format!("{}: {ts}", to_camel_case(&p.name)))
+        })
+        .collect::<Result<Vec<_>>>()?
+        .join(", ");
+    let ret = format_return(&method.return_shape)?;
+    let name = to_camel_case(&method.name);
+    Ok(format!("{jsdoc}  {name}({params}): {ret};"))
+}
+
+fn emit_super_interface(name: &str, composes: &[String], docs: Option<&str>) -> String {
+    let jsdoc = render_jsdoc("", docs);
+    if composes.is_empty() {
+        return format!("{jsdoc}export interface {name} {{}}\n");
+    }
+    let extends = composes.join(", ");
+    format!("{jsdoc}export interface {name} extends {extends} {{}}\n")
+}
+
+fn collect_named_types(definition: &PlatformDefinition) -> BTreeSet<String> {
+    let mut out: BTreeSet<String> = BTreeSet::new();
+    for trait_def in &definition.traits {
+        for method in &trait_def.methods {
+            for param in &method.params {
+                collect_from_type(&param.type_ref, &mut out);
+            }
+            match &method.return_shape.inner {
+                // Err type is not part of the TS signature (errors throw),
+                // so don't import its name.
+                PlatformInner::Result { ok, .. } => collect_from_type(ok, &mut out),
+                PlatformInner::Stream(inner) => collect_from_type(inner, &mut out),
+                PlatformInner::Plain(inner) => collect_from_type(inner, &mut out),
+                // A trait object returns its bare trait name in the TS
+                // signature; collect it so a non-local trait gets imported
+                // rather than emitted as an undeclared name. Local traits are
+                // filtered out below since their interfaces live in this file.
+                PlatformInner::TraitObject(name) => {
+                    out.insert(name.clone());
+                }
+                PlatformInner::Unit => {}
+            }
+        }
+    }
+    // Filter out names defined locally (the capability trait interfaces).
+    let local: BTreeSet<String> = definition.traits.iter().map(|t| t.name.clone()).collect();
+    out.into_iter().filter(|n| !local.contains(n)).collect()
+}
+
+fn collect_from_type(ty: &TypeRef, out: &mut BTreeSet<String>) {
+    match ty {
+        TypeRef::Named { name, args } => {
+            out.insert(name.clone());
+            for arg in args {
+                collect_from_type(arg, out);
+            }
+        }
+        TypeRef::Vec(inner) | TypeRef::Option(inner) | TypeRef::Array(inner, _) => {
+            collect_from_type(inner, out)
+        }
+        TypeRef::Tuple(items) => {
+            for item in items {
+                collect_from_type(item, out);
+            }
+        }
+        TypeRef::Primitive(_) | TypeRef::Generic(_) | TypeRef::Unit => {}
+    }
+}
+
+fn format_return(ret: &PlatformReturn) -> Result<String> {
+    let inner = match &ret.inner {
+        PlatformInner::Unit => "void".to_string(),
+        PlatformInner::Result { ok, .. } => ts_type(ok)?,
+        PlatformInner::Stream(item) => format!("AsyncIterable<{}>", ts_type(item)?),
+        PlatformInner::TraitObject(name) => name.clone(),
+        PlatformInner::Plain(ty) => ts_type(ty)?,
+    };
+    if ret.is_async {
+        Ok(format!("Promise<{inner}>"))
+    } else {
+        Ok(inner)
+    }
+}
+
+fn ts_type(ty: &TypeRef) -> Result<String> {
+    match ty {
+        TypeRef::Primitive(name) => match name.as_str() {
+            "bool" => Ok("boolean".to_string()),
+            "u8" | "u16" | "u32" | "i8" | "i16" | "i32" | "f32" | "f64" => Ok("number".to_string()),
+            "u64" | "u128" | "i64" | "i128" => Ok("bigint".to_string()),
+            "str" => Ok("string".to_string()),
+            _ => bail!("Unsupported primitive type `{name}` in host callbacks generation"),
+        },
+        TypeRef::Named { name, args } => {
+            if args.is_empty() {
+                Ok(name.clone())
+            } else {
+                let rendered = args
+                    .iter()
+                    .map(ts_type)
+                    .collect::<Result<Vec<_>>>()?
+                    .join(", ");
+                Ok(format!("{name}<{rendered}>"))
+            }
+        }
+        TypeRef::Vec(inner) => match inner.as_ref() {
+            TypeRef::Primitive(name) if name == "u8" => Ok("Uint8Array".to_string()),
+            _ => Ok(format!("Array<{}>", ts_type(inner)?)),
+        },
+        TypeRef::Option(inner) => Ok(format!("{} | undefined", ts_type(inner)?)),
+        TypeRef::Tuple(items) => {
+            if items.is_empty() {
+                Ok("void".to_string())
+            } else {
+                let rendered = items
+                    .iter()
+                    .map(ts_type)
+                    .collect::<Result<Vec<_>>>()?
+                    .join(", ");
+                Ok(format!("[{rendered}]"))
+            }
+        }
+        TypeRef::Array(inner, _len) => match inner.as_ref() {
+            TypeRef::Primitive(name) if name == "u8" => Ok("Uint8Array".to_string()),
+            _ => Ok(format!("Array<{}>", ts_type(inner)?)),
+        },
+        TypeRef::Generic(name) => Ok(name.clone()),
+        TypeRef::Unit => Ok("void".to_string()),
+    }
+}
+
+fn render_jsdoc(indent: &str, docs: Option<&str>) -> String {
+    let Some(docs) = docs else {
+        return String::new();
+    };
+    let docs = docs.trim();
+    if docs.is_empty() {
+        return String::new();
+    }
+    let body = docs
+        .lines()
+        .map(|line| {
+            if line.is_empty() {
+                format!("{indent} *")
+            } else {
+                format!("{indent} * {line}")
+            }
+        })
+        .collect::<Vec<_>>()
+        .join("\n");
+    format!("{indent}/**\n{body}\n{indent} */\n")
+}
+
+fn to_camel_case(name: &str) -> String {
+    let mut out = String::with_capacity(name.len());
+    let mut upper_next = false;
+    for (idx, ch) in name.chars().enumerate() {
+        if ch == '_' {
+            upper_next = idx != 0;
+            continue;
+        }
+        if upper_next {
+            out.extend(ch.to_uppercase());
+            upper_next = false;
+        } else {
+            out.push(ch);
+        }
+    }
+    out
+}
diff --git a/rust/crates/truapi-codegen/tests/fixtures/sample.rustdoc.json b/rust/crates/truapi-codegen/tests/fixtures/sample.rustdoc.json
new file mode 100644
index 00000000..8de55a6a
--- /dev/null
+++ b/rust/crates/truapi-codegen/tests/fixtures/sample.rustdoc.json
@@ -0,0 +1,3 @@
+{
+  "_comment": "Placeholder fixture: the golden test drives the binary against the truapi crate's real rustdoc JSON (regenerated at test time). Checking in a 12 MB rustdoc dump would dwarf the rest of the repo; the test instead invokes `cargo +nightly rustdoc -p truapi` and parses the result. This file exists so the path referenced in the test layout is real."
+}
diff --git a/rust/crates/truapi-codegen/tests/golden/dispatcher.rs b/rust/crates/truapi-codegen/tests/golden/dispatcher.rs
new file mode 100644
index 00000000..2e3804df
--- /dev/null
+++ b/rust/crates/truapi-codegen/tests/golden/dispatcher.rs
@@ -0,0 +1,1282 @@
+//! Wire dispatcher for the unified `TrUApi` trait.
+//!
+//! Auto-generated by truapi-codegen. Do not edit.
+
+use std::sync::Arc;
+
+use parity_scale_codec::{Decode, Encode};
+
+use truapi::CallContext;
+use truapi::api::{
+    Account,
+    Chain,
+    Chat,
+    CoinPayment,
+    Entropy,
+    LocalStorage,
+    Notifications,
+    Payment,
+    Permissions,
+    Preimage,
+    ResourceAllocation,
+    Signing,
+    StatementStore,
+    System,
+    Theme,
+};
+use truapi::versioned;
+
+use crate::dispatcher::Dispatcher;
+use crate::frame::{encode_call_error_payload, encode_decode_error};
+use crate::subscription::subscription_stream;
+
+/// Register every TrUAPI method with the dispatcher.
+pub fn register<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Account + Chain + Chat + CoinPayment + Entropy + LocalStorage + Notifications + Payment + Permissions + Preimage + ResourceAllocation + Signing + StatementStore + System + Theme + Send + Sync + 'static,
+{
+    register_account(dispatcher, host.clone());
+    register_chain(dispatcher, host.clone());
+    register_chat(dispatcher, host.clone());
+    register_coin_payment(dispatcher, host.clone());
+    register_entropy(dispatcher, host.clone());
+    register_local_storage(dispatcher, host.clone());
+    register_notifications(dispatcher, host.clone());
+    register_payment(dispatcher, host.clone());
+    register_permissions(dispatcher, host.clone());
+    register_preimage(dispatcher, host.clone());
+    register_resource_allocation(dispatcher, host.clone());
+    register_signing(dispatcher, host.clone());
+    register_statement_store(dispatcher, host.clone());
+    register_system(dispatcher, host.clone());
+    register_theme(dispatcher, host);
+}
+
+fn register_account<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Account + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("account_connection_status_subscribe", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let _ = bytes;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = host.connection_status_subscribe(&cx).await;
+                Ok(subscription_stream::<versioned::account::HostAccountConnectionStatusSubscribeItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("account_get_account", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::account::HostAccountGetRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::account::HostAccountGetResponse = match host.get_account(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("account_get_account_alias", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::account::HostAccountGetAliasRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::account::HostAccountGetAliasResponse = match host.get_account_alias(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("account_create_account_proof", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::account::HostAccountCreateProofRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::account::HostAccountCreateProofResponse = match host.create_account_proof(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("account_get_legacy_accounts", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::account::HostGetLegacyAccountsRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::account::HostGetLegacyAccountsResponse = match host.get_legacy_accounts(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("account_get_user_id", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::account::HostGetUserIdRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::account::HostGetUserIdResponse = match host.get_user_id(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request("account_request_login", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::account::HostRequestLoginRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::account::HostRequestLoginResponse = match host.request_login(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_chain<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Chain + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("chain_follow_head_subscribe", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainHeadFollowRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = host.follow_head_subscribe(&cx, request).await;
+                Ok(subscription_stream::<versioned::chain::RemoteChainHeadFollowItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_get_head_header", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainHeadHeaderRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainHeadHeaderResponse = match host.get_head_header(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_get_head_body", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainHeadBodyRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainHeadBodyResponse = match host.get_head_body(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_get_head_storage", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainHeadStorageRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainHeadStorageResponse = match host.get_head_storage(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_call_head", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainHeadCallRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainHeadCallResponse = match host.call_head(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_unpin_head", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainHeadUnpinRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainHeadUnpinResponse = match host.unpin_head(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_continue_head", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainHeadContinueRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainHeadContinueResponse = match host.continue_head(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_stop_head_operation", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainHeadStopOperationRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainHeadStopOperationResponse = match host.stop_head_operation(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_get_spec_genesis_hash", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainSpecGenesisHashRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainSpecGenesisHashResponse = match host.get_spec_genesis_hash(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_get_spec_chain_name", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainSpecChainNameRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainSpecChainNameResponse = match host.get_spec_chain_name(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_get_spec_properties", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainSpecPropertiesRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainSpecPropertiesResponse = match host.get_spec_properties(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chain_broadcast_transaction", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainTransactionBroadcastRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainTransactionBroadcastResponse = match host.broadcast_transaction(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request("chain_stop_transaction", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chain::RemoteChainTransactionStopRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chain::RemoteChainTransactionStopResponse = match host.stop_transaction(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_chat<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Chat + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request("chat_create_room", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chat::HostChatCreateRoomRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chat::HostChatCreateRoomResponse = match host.create_room(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chat_register_bot", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chat::HostChatRegisterBotRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chat::HostChatRegisterBotResponse = match host.register_bot(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("chat_list_subscribe", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let _ = bytes;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = host.list_subscribe(&cx).await;
+                Ok(subscription_stream::<versioned::chat::HostChatListSubscribeItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("chat_post_message", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chat::HostChatPostMessageRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::chat::HostChatPostMessageResponse = match host.post_message(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("chat_action_subscribe", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let _ = bytes;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = host.action_subscribe(&cx).await;
+                Ok(subscription_stream::<versioned::chat::HostChatActionSubscribeItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_subscription("chat_custom_message_render_subscribe", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::chat::ProductChatCustomMessageRenderSubscribeRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = host.custom_message_render_subscribe(&cx, request).await;
+                Ok(subscription_stream::<versioned::chat::ProductChatCustomMessageRenderSubscribeItem, _>(stream))
+            })
+        });
+    }
+}
+
+fn register_coin_payment<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: CoinPayment + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request("coin_payment_create_purse", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::coin_payment::HostCoinPaymentCreatePurseRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::coin_payment::HostCoinPaymentCreatePurseResponse = match host.create_purse(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("coin_payment_query_purse", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::coin_payment::HostCoinPaymentQueryPurseRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::coin_payment::HostCoinPaymentQueryPurseResponse = match host.query_purse(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("coin_payment_rebalance_purse", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::coin_payment::HostCoinPaymentRebalancePurseRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = match host.rebalance_purse(&cx, request).await {
+                    Ok(sub) => sub,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                Ok(subscription_stream::<versioned::coin_payment::HostCoinPaymentRebalancePurseItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("coin_payment_delete_purse", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::coin_payment::HostCoinPaymentDeletePurseRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = match host.delete_purse(&cx, request).await {
+                    Ok(sub) => sub,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                Ok(subscription_stream::<versioned::coin_payment::HostCoinPaymentDeletePurseItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("coin_payment_create_receivable", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::coin_payment::HostCoinPaymentCreateReceivableRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::coin_payment::HostCoinPaymentCreateReceivableResponse = match host.create_receivable(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("coin_payment_create_cheque", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::coin_payment::HostCoinPaymentCreateChequeRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::coin_payment::HostCoinPaymentCreateChequeResponse = match host.create_cheque(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("coin_payment_deposit", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::coin_payment::HostCoinPaymentDepositRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = match host.deposit(&cx, request).await {
+                    Ok(sub) => sub,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                Ok(subscription_stream::<versioned::coin_payment::HostCoinPaymentDepositItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("coin_payment_refund", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::coin_payment::HostCoinPaymentRefundRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = match host.refund(&cx, request).await {
+                    Ok(sub) => sub,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                Ok(subscription_stream::<versioned::coin_payment::HostCoinPaymentRefundItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_subscription("coin_payment_listen_for_payment", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::coin_payment::HostCoinPaymentListenForRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = match host.listen_for_payment(&cx, request).await {
+                    Ok(sub) => sub,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                Ok(subscription_stream::<versioned::coin_payment::HostCoinPaymentListenForItem, _>(stream))
+            })
+        });
+    }
+}
+
+fn register_entropy<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Entropy + Send + Sync + 'static,
+{
+    {
+        let host = host;
+        dispatcher.on_request("entropy_derive", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::entropy::HostDeriveEntropyRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::entropy::HostDeriveEntropyResponse = match host.derive(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_local_storage<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: LocalStorage + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request("local_storage_read", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::local_storage::HostLocalStorageReadRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::local_storage::HostLocalStorageReadResponse = match host.read(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("local_storage_write", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::local_storage::HostLocalStorageWriteRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::local_storage::HostLocalStorageWriteResponse = match host.write(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request("local_storage_clear", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::local_storage::HostLocalStorageClearRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::local_storage::HostLocalStorageClearResponse = match host.clear(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_notifications<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Notifications + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request("notifications_send_push_notification", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::notifications::HostPushNotificationRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::notifications::HostPushNotificationResponse = match host.send_push_notification(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request("notifications_cancel_push_notification", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::notifications::HostPushNotificationCancelRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::notifications::HostPushNotificationCancelResponse = match host.cancel_push_notification(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_payment<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Payment + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("payment_balance_subscribe", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::payment::HostPaymentBalanceSubscribeRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = match host.balance_subscribe(&cx, request).await {
+                    Ok(sub) => sub,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                Ok(subscription_stream::<versioned::payment::HostPaymentBalanceSubscribeItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("payment_request", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::payment::HostPaymentRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::payment::HostPaymentResponse = match host.request(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("payment_status_subscribe", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::payment::HostPaymentStatusSubscribeRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = match host.status_subscribe(&cx, request).await {
+                    Ok(sub) => sub,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                Ok(subscription_stream::<versioned::payment::HostPaymentStatusSubscribeItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request("payment_top_up", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::payment::HostPaymentTopUpRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::payment::HostPaymentTopUpResponse = match host.top_up(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_permissions<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Permissions + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request("permissions_request_device_permission", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::permissions::HostDevicePermissionRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::permissions::HostDevicePermissionResponse = match host.request_device_permission(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request("permissions_request_remote_permission", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::permissions::RemotePermissionRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::permissions::RemotePermissionResponse = match host.request_remote_permission(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_preimage<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Preimage + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("preimage_lookup_subscribe", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::preimage::RemotePreimageLookupSubscribeRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = host.lookup_subscribe(&cx, request).await;
+                Ok(subscription_stream::<versioned::preimage::RemotePreimageLookupSubscribeItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request("preimage_submit", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::preimage::RemotePreimageSubmitRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::preimage::RemotePreimageSubmitResponse = match host.submit(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_resource_allocation<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: ResourceAllocation + Send + Sync + 'static,
+{
+    {
+        let host = host;
+        dispatcher.on_request("resource_allocation_request", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::resource_allocation::HostRequestResourceAllocationRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::resource_allocation::HostRequestResourceAllocationResponse = match host.request(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_signing<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Signing + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request("signing_create_transaction", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::signing::HostCreateTransactionRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::signing::HostCreateTransactionResponse = match host.create_transaction(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("signing_create_transaction_with_legacy_account", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::signing::HostCreateTransactionWithLegacyAccountRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::signing::HostCreateTransactionWithLegacyAccountResponse = match host.create_transaction_with_legacy_account(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("signing_sign_raw_with_legacy_account", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::signing::HostSignRawWithLegacyAccountRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::signing::HostSignRawWithLegacyAccountResponse = match host.sign_raw_with_legacy_account(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("signing_sign_payload_with_legacy_account", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::signing::HostSignPayloadWithLegacyAccountRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::signing::HostSignPayloadWithLegacyAccountResponse = match host.sign_payload_with_legacy_account(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("signing_sign_raw", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::signing::HostSignRawRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::signing::HostSignRawResponse = match host.sign_raw(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request("signing_sign_payload", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::signing::HostSignPayloadRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::signing::HostSignPayloadResponse = match host.sign_payload(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_statement_store<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: StatementStore + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_subscription("statement_store_subscribe", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::statement_store::RemoteStatementStoreSubscribeRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = host.subscribe(&cx, request).await;
+                Ok(subscription_stream::<versioned::statement_store::RemoteStatementStoreSubscribeItem, _>(stream))
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("statement_store_create_proof", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::statement_store::RemoteStatementStoreCreateProofRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::statement_store::RemoteStatementStoreCreateProofResponse = match host.create_proof(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("statement_store_create_proof_authorized", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::statement_store::RemoteStatementStoreCreateProofAuthorizedRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::statement_store::RemoteStatementStoreCreateProofAuthorizedResponse = match host.create_proof_authorized(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request("statement_store_submit", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::statement_store::RemoteStatementStoreSubmitRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                match host.submit(&cx, request).await {
+                    Ok(()) => Ok(vec![0u8]),
+                    Err(err) => Err(encode_call_error_payload(err)),
+                }
+            })
+        });
+    }
+}
+
+fn register_system<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: System + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request("system_handshake", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::system::HostHandshakeRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::system::HostHandshakeResponse = match host.handshake(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("system_feature_supported", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::system::HostFeatureSupportedRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::system::HostFeatureSupportedResponse = match host.feature_supported(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request("system_navigate_to", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::system::HostNavigateToRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::system::HostNavigateToResponse = match host.navigate_to(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_theme<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Theme + Send + Sync + 'static,
+{
+    {
+        let host = host;
+        dispatcher.on_subscription("theme_subscribe", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let _ = bytes;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let stream = host.subscribe(&cx).await;
+                Ok(subscription_stream::<versioned::theme::HostThemeSubscribeItem, _>(stream))
+            })
+        });
+    }
+}
diff --git a/rust/crates/truapi-codegen/tests/golden/host-callbacks.ts b/rust/crates/truapi-codegen/tests/golden/host-callbacks.ts
new file mode 100644
index 00000000..1edddbad
--- /dev/null
+++ b/rust/crates/truapi-codegen/tests/golden/host-callbacks.ts
@@ -0,0 +1,120 @@
+// Auto-generated by truapi-codegen. Do not edit.
+//
+// Typed host-callbacks surface derived from the `truapi-platform`
+// capability traits. One interface per Rust trait + a composite
+// `HostCallbacks` interface that mirrors the `Platform` super-trait.
+
+import type {
+  HostDevicePermissionRequest,
+  HostDevicePermissionResponse,
+  HostFeatureSupportedRequest,
+  HostFeatureSupportedResponse,
+  HostPushNotificationRequest,
+  RemotePermissionRequest,
+  RemotePermissionResponse,
+} from "@parity/truapi";
+
+/**
+ * JSON-RPC provider factory for chain access.
+ *
+ * The platform provides a way to get a JSON-RPC connection for a given chain.
+ * The server runtime manages the chainHead v1 state machine on top of this.
+ */
+export interface ChainProvider {
+  /**
+   * Open a JSON-RPC connection for the chain identified by `genesis_hash`.
+   * Drop the returned connection to disconnect.
+   */
+  connect(genesisHash: Uint8Array): Promise<JsonRpcConnection>;
+}
+
+/**
+ * Feature-support probing. The host answers whether it can service a given
+ * capability (currently scoped to per-chain support).
+ */
+export interface Features {
+  /**
+   * Report whether the requested feature is supported.
+   */
+  featureSupported(request: HostFeatureSupportedRequest): Promise<HostFeatureSupportedResponse>;
+}
+
+/**
+ * A live JSON-RPC connection to a chain.
+ */
+export interface JsonRpcConnection {
+  /**
+   * Send a JSON-RPC request string.
+   */
+  send(request: string): void;
+
+  /**
+   * Stream of JSON-RPC response strings.
+   */
+  responses(): AsyncIterable<string>;
+}
+
+/**
+ * Open URLs in the system browser. Input is already trimmed, categorized,
+ * and (where needed) normalized by the core; the host implementation only
+ * needs to hand the URL to the OS URL handler.
+ */
+export interface Navigation {
+  /**
+   * Open the given URL in the system browser.
+   */
+  navigateTo(url: string): Promise<void>;
+}
+
+/**
+ * Deliver push notifications.
+ */
+export interface Notifications {
+  /**
+   * Push the given notification to the user.
+   */
+  pushNotification(notification: HostPushNotificationRequest): Promise<void>;
+}
+
+/**
+ * Permission prompts. v0.1 keeps device permissions (camera, mic, NFC, ...)
+ * separate from remote permissions (domain access, chain submit, ...), so the
+ * platform surface mirrors that split.
+ */
+export interface Permissions {
+  /**
+   * Prompt the user for a device-level permission.
+   */
+  devicePermission(request: HostDevicePermissionRequest): Promise<HostDevicePermissionResponse>;
+
+  /**
+   * Prompt the user for a remote (product-scoped) permission bundle.
+   */
+  remotePermission(request: RemotePermissionRequest): Promise<RemotePermissionResponse>;
+}
+
+/**
+ * Scoped key-value storage. The platform namespaces keys so different products
+ * cannot read each other's data.
+ */
+export interface Storage {
+  /**
+   * Read a value by key.
+   */
+  read(key: string): Promise<Uint8Array | undefined>;
+
+  /**
+   * Write a value to a key.
+   */
+  write(key: string, value: Uint8Array): Promise<void>;
+
+  /**
+   * Clear a value at a key.
+   */
+  clear(key: string): Promise<void>;
+}
+
+/**
+ * Combined platform interface. A host must provide all capability traits.
+ */
+export interface HostCallbacks extends Navigation, Notifications, Permissions, Features, Storage, ChainProvider {}
diff --git a/rust/crates/truapi-codegen/tests/golden/wire_table.rs b/rust/crates/truapi-codegen/tests/golden/wire_table.rs
new file mode 100644
index 00000000..2b916808
--- /dev/null
+++ b/rust/crates/truapi-codegen/tests/golden/wire_table.rs
@@ -0,0 +1,678 @@
+//! Wire-protocol discriminant table.
+//!
+//! Auto-generated by truapi-codegen. Do not edit.
+//!
+//! Each method reserves either two ids (request/response) or four
+//! (start/stop/interrupt/receive). The table is sorted by request/start id.
+
+// entry id=0 tag="system_handshake_request"
+// entry id=1 tag="system_handshake_response"
+// entry id=2 tag="system_feature_supported_request"
+// entry id=3 tag="system_feature_supported_response"
+// entry id=4 tag="notifications_send_push_notification_request"
+// entry id=5 tag="notifications_send_push_notification_response"
+// entry id=6 tag="system_navigate_to_request"
+// entry id=7 tag="system_navigate_to_response"
+// entry id=8 tag="permissions_request_device_permission_request"
+// entry id=9 tag="permissions_request_device_permission_response"
+// entry id=10 tag="permissions_request_remote_permission_request"
+// entry id=11 tag="permissions_request_remote_permission_response"
+// entry id=12 tag="local_storage_read_request"
+// entry id=13 tag="local_storage_read_response"
+// entry id=14 tag="local_storage_write_request"
+// entry id=15 tag="local_storage_write_response"
+// entry id=16 tag="local_storage_clear_request"
+// entry id=17 tag="local_storage_clear_response"
+// entry id=18 tag="account_connection_status_subscribe_start"
+// entry id=19 tag="account_connection_status_subscribe_stop"
+// entry id=20 tag="account_connection_status_subscribe_interrupt"
+// entry id=21 tag="account_connection_status_subscribe_receive"
+// entry id=22 tag="account_get_account_request"
+// entry id=23 tag="account_get_account_response"
+// entry id=24 tag="account_get_account_alias_request"
+// entry id=25 tag="account_get_account_alias_response"
+// entry id=26 tag="account_create_account_proof_request"
+// entry id=27 tag="account_create_account_proof_response"
+// entry id=28 tag="account_get_legacy_accounts_request"
+// entry id=29 tag="account_get_legacy_accounts_response"
+// entry id=30 tag="signing_create_transaction_request"
+// entry id=31 tag="signing_create_transaction_response"
+// entry id=32 tag="signing_create_transaction_with_legacy_account_request"
+// entry id=33 tag="signing_create_transaction_with_legacy_account_response"
+// entry id=34 tag="signing_sign_raw_with_legacy_account_request"
+// entry id=35 tag="signing_sign_raw_with_legacy_account_response"
+// entry id=36 tag="signing_sign_payload_with_legacy_account_request"
+// entry id=37 tag="signing_sign_payload_with_legacy_account_response"
+// entry id=38 tag="chat_create_room_request"
+// entry id=39 tag="chat_create_room_response"
+// entry id=40 tag="chat_register_bot_request"
+// entry id=41 tag="chat_register_bot_response"
+// entry id=42 tag="chat_list_subscribe_start"
+// entry id=43 tag="chat_list_subscribe_stop"
+// entry id=44 tag="chat_list_subscribe_interrupt"
+// entry id=45 tag="chat_list_subscribe_receive"
+// entry id=46 tag="chat_post_message_request"
+// entry id=47 tag="chat_post_message_response"
+// entry id=48 tag="chat_action_subscribe_start"
+// entry id=49 tag="chat_action_subscribe_stop"
+// entry id=50 tag="chat_action_subscribe_interrupt"
+// entry id=51 tag="chat_action_subscribe_receive"
+// entry id=52 tag="chat_custom_message_render_subscribe_start"
+// entry id=53 tag="chat_custom_message_render_subscribe_stop"
+// entry id=54 tag="chat_custom_message_render_subscribe_interrupt"
+// entry id=55 tag="chat_custom_message_render_subscribe_receive"
+// entry id=56 tag="statement_store_subscribe_start"
+// entry id=57 tag="statement_store_subscribe_stop"
+// entry id=58 tag="statement_store_subscribe_interrupt"
+// entry id=59 tag="statement_store_subscribe_receive"
+// entry id=60 tag="statement_store_create_proof_request"
+// entry id=61 tag="statement_store_create_proof_response"
+// entry id=62 tag="statement_store_submit_request"
+// entry id=63 tag="statement_store_submit_response"
+// entry id=64 tag="preimage_lookup_subscribe_start"
+// entry id=65 tag="preimage_lookup_subscribe_stop"
+// entry id=66 tag="preimage_lookup_subscribe_interrupt"
+// entry id=67 tag="preimage_lookup_subscribe_receive"
+// entry id=68 tag="preimage_submit_request"
+// entry id=69 tag="preimage_submit_response"
+// entry id=76 tag="chain_follow_head_subscribe_start"
+// entry id=77 tag="chain_follow_head_subscribe_stop"
+// entry id=78 tag="chain_follow_head_subscribe_interrupt"
+// entry id=79 tag="chain_follow_head_subscribe_receive"
+// entry id=80 tag="chain_get_head_header_request"
+// entry id=81 tag="chain_get_head_header_response"
+// entry id=82 tag="chain_get_head_body_request"
+// entry id=83 tag="chain_get_head_body_response"
+// entry id=84 tag="chain_get_head_storage_request"
+// entry id=85 tag="chain_get_head_storage_response"
+// entry id=86 tag="chain_call_head_request"
+// entry id=87 tag="chain_call_head_response"
+// entry id=88 tag="chain_unpin_head_request"
+// entry id=89 tag="chain_unpin_head_response"
+// entry id=90 tag="chain_continue_head_request"
+// entry id=91 tag="chain_continue_head_response"
+// entry id=92 tag="chain_stop_head_operation_request"
+// entry id=93 tag="chain_stop_head_operation_response"
+// entry id=94 tag="chain_get_spec_genesis_hash_request"
+// entry id=95 tag="chain_get_spec_genesis_hash_response"
+// entry id=96 tag="chain_get_spec_chain_name_request"
+// entry id=97 tag="chain_get_spec_chain_name_response"
+// entry id=98 tag="chain_get_spec_properties_request"
+// entry id=99 tag="chain_get_spec_properties_response"
+// entry id=100 tag="chain_broadcast_transaction_request"
+// entry id=101 tag="chain_broadcast_transaction_response"
+// entry id=102 tag="chain_stop_transaction_request"
+// entry id=103 tag="chain_stop_transaction_response"
+// entry id=104 tag="theme_subscribe_start"
+// entry id=105 tag="theme_subscribe_stop"
+// entry id=106 tag="theme_subscribe_interrupt"
+// entry id=107 tag="theme_subscribe_receive"
+// entry id=108 tag="entropy_derive_request"
+// entry id=109 tag="entropy_derive_response"
+// entry id=110 tag="account_get_user_id_request"
+// entry id=111 tag="account_get_user_id_response"
+// entry id=112 tag="account_request_login_request"
+// entry id=113 tag="account_request_login_response"
+// entry id=114 tag="signing_sign_raw_request"
+// entry id=115 tag="signing_sign_raw_response"
+// entry id=116 tag="signing_sign_payload_request"
+// entry id=117 tag="signing_sign_payload_response"
+// entry id=118 tag="payment_balance_subscribe_start"
+// entry id=119 tag="payment_balance_subscribe_stop"
+// entry id=120 tag="payment_balance_subscribe_interrupt"
+// entry id=121 tag="payment_balance_subscribe_receive"
+// entry id=122 tag="payment_top_up_request"
+// entry id=123 tag="payment_top_up_response"
+// entry id=124 tag="payment_request_request"
+// entry id=125 tag="payment_request_response"
+// entry id=126 tag="payment_status_subscribe_start"
+// entry id=127 tag="payment_status_subscribe_stop"
+// entry id=128 tag="payment_status_subscribe_interrupt"
+// entry id=129 tag="payment_status_subscribe_receive"
+// entry id=130 tag="resource_allocation_request_request"
+// entry id=131 tag="resource_allocation_request_response"
+// entry id=132 tag="statement_store_create_proof_authorized_request"
+// entry id=133 tag="statement_store_create_proof_authorized_response"
+// entry id=134 tag="notifications_cancel_push_notification_request"
+// entry id=135 tag="notifications_cancel_push_notification_response"
+// entry id=136 tag="coin_payment_create_purse_request"
+// entry id=137 tag="coin_payment_create_purse_response"
+// entry id=138 tag="coin_payment_query_purse_request"
+// entry id=139 tag="coin_payment_query_purse_response"
+// entry id=140 tag="coin_payment_rebalance_purse_start"
+// entry id=141 tag="coin_payment_rebalance_purse_stop"
+// entry id=142 tag="coin_payment_rebalance_purse_interrupt"
+// entry id=143 tag="coin_payment_rebalance_purse_receive"
+// entry id=144 tag="coin_payment_delete_purse_start"
+// entry id=145 tag="coin_payment_delete_purse_stop"
+// entry id=146 tag="coin_payment_delete_purse_interrupt"
+// entry id=147 tag="coin_payment_delete_purse_receive"
+// entry id=148 tag="coin_payment_create_receivable_request"
+// entry id=149 tag="coin_payment_create_receivable_response"
+// entry id=150 tag="coin_payment_create_cheque_request"
+// entry id=151 tag="coin_payment_create_cheque_response"
+// entry id=152 tag="coin_payment_deposit_start"
+// entry id=153 tag="coin_payment_deposit_stop"
+// entry id=154 tag="coin_payment_deposit_interrupt"
+// entry id=155 tag="coin_payment_deposit_receive"
+// entry id=156 tag="coin_payment_refund_start"
+// entry id=157 tag="coin_payment_refund_stop"
+// entry id=158 tag="coin_payment_refund_interrupt"
+// entry id=159 tag="coin_payment_refund_receive"
+// entry id=160 tag="coin_payment_listen_for_payment_start"
+// entry id=161 tag="coin_payment_listen_for_payment_stop"
+// entry id=162 tag="coin_payment_listen_for_payment_interrupt"
+// entry id=163 tag="coin_payment_listen_for_payment_receive"
+
+/// A single wire-table row.
+pub struct WireEntry {
+    /// Method name from the Rust trait.
+    pub method: &'static str,
+    /// What kind of slot this entry describes.
+    pub kind: WireKind,
+}
+
+/// Wire-slot shape: request/response pair or subscription quartet.
+pub enum WireKind {
+    /// Request/response method.
+    Request {
+        /// Discriminant for the request frame.
+        request_id: u8,
+        /// Discriminant for the response frame.
+        response_id: u8,
+    },
+    /// Subscription method.
+    Subscription {
+        /// Discriminant for the start frame.
+        start_id: u8,
+        /// Discriminant for the stop frame.
+        stop_id: u8,
+        /// Discriminant for the interrupt frame (server-initiated termination).
+        interrupt_id: u8,
+        /// Discriminant for each receive frame (a streamed item).
+        receive_id: u8,
+    },
+}
+
+/// The full wire table. Ordering is part of the wire protocol;
+/// only ever append. Removed methods leave their slot empty.
+pub const WIRE_TABLE: &[WireEntry] = &[
+    WireEntry {
+        method: "system_handshake",
+        kind: WireKind::Request {
+            request_id: 0,
+            response_id: 1,
+        },
+    },
+    WireEntry {
+        method: "system_feature_supported",
+        kind: WireKind::Request {
+            request_id: 2,
+            response_id: 3,
+        },
+    },
+    WireEntry {
+        method: "notifications_send_push_notification",
+        kind: WireKind::Request {
+            request_id: 4,
+            response_id: 5,
+        },
+    },
+    WireEntry {
+        method: "system_navigate_to",
+        kind: WireKind::Request {
+            request_id: 6,
+            response_id: 7,
+        },
+    },
+    WireEntry {
+        method: "permissions_request_device_permission",
+        kind: WireKind::Request {
+            request_id: 8,
+            response_id: 9,
+        },
+    },
+    WireEntry {
+        method: "permissions_request_remote_permission",
+        kind: WireKind::Request {
+            request_id: 10,
+            response_id: 11,
+        },
+    },
+    WireEntry {
+        method: "local_storage_read",
+        kind: WireKind::Request {
+            request_id: 12,
+            response_id: 13,
+        },
+    },
+    WireEntry {
+        method: "local_storage_write",
+        kind: WireKind::Request {
+            request_id: 14,
+            response_id: 15,
+        },
+    },
+    WireEntry {
+        method: "local_storage_clear",
+        kind: WireKind::Request {
+            request_id: 16,
+            response_id: 17,
+        },
+    },
+    WireEntry {
+        method: "account_connection_status_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 18,
+            stop_id: 19,
+            interrupt_id: 20,
+            receive_id: 21,
+        },
+    },
+    WireEntry {
+        method: "account_get_account",
+        kind: WireKind::Request {
+            request_id: 22,
+            response_id: 23,
+        },
+    },
+    WireEntry {
+        method: "account_get_account_alias",
+        kind: WireKind::Request {
+            request_id: 24,
+            response_id: 25,
+        },
+    },
+    WireEntry {
+        method: "account_create_account_proof",
+        kind: WireKind::Request {
+            request_id: 26,
+            response_id: 27,
+        },
+    },
+    WireEntry {
+        method: "account_get_legacy_accounts",
+        kind: WireKind::Request {
+            request_id: 28,
+            response_id: 29,
+        },
+    },
+    WireEntry {
+        method: "signing_create_transaction",
+        kind: WireKind::Request {
+            request_id: 30,
+            response_id: 31,
+        },
+    },
+    WireEntry {
+        method: "signing_create_transaction_with_legacy_account",
+        kind: WireKind::Request {
+            request_id: 32,
+            response_id: 33,
+        },
+    },
+    WireEntry {
+        method: "signing_sign_raw_with_legacy_account",
+        kind: WireKind::Request {
+            request_id: 34,
+            response_id: 35,
+        },
+    },
+    WireEntry {
+        method: "signing_sign_payload_with_legacy_account",
+        kind: WireKind::Request {
+            request_id: 36,
+            response_id: 37,
+        },
+    },
+    WireEntry {
+        method: "chat_create_room",
+        kind: WireKind::Request {
+            request_id: 38,
+            response_id: 39,
+        },
+    },
+    WireEntry {
+        method: "chat_register_bot",
+        kind: WireKind::Request {
+            request_id: 40,
+            response_id: 41,
+        },
+    },
+    WireEntry {
+        method: "chat_list_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 42,
+            stop_id: 43,
+            interrupt_id: 44,
+            receive_id: 45,
+        },
+    },
+    WireEntry {
+        method: "chat_post_message",
+        kind: WireKind::Request {
+            request_id: 46,
+            response_id: 47,
+        },
+    },
+    WireEntry {
+        method: "chat_action_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 48,
+            stop_id: 49,
+            interrupt_id: 50,
+            receive_id: 51,
+        },
+    },
+    WireEntry {
+        method: "chat_custom_message_render_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 52,
+            stop_id: 53,
+            interrupt_id: 54,
+            receive_id: 55,
+        },
+    },
+    WireEntry {
+        method: "statement_store_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 56,
+            stop_id: 57,
+            interrupt_id: 58,
+            receive_id: 59,
+        },
+    },
+    WireEntry {
+        method: "statement_store_create_proof",
+        kind: WireKind::Request {
+            request_id: 60,
+            response_id: 61,
+        },
+    },
+    WireEntry {
+        method: "statement_store_submit",
+        kind: WireKind::Request {
+            request_id: 62,
+            response_id: 63,
+        },
+    },
+    WireEntry {
+        method: "preimage_lookup_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 64,
+            stop_id: 65,
+            interrupt_id: 66,
+            receive_id: 67,
+        },
+    },
+    WireEntry {
+        method: "preimage_submit",
+        kind: WireKind::Request {
+            request_id: 68,
+            response_id: 69,
+        },
+    },
+    WireEntry {
+        method: "chain_follow_head_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 76,
+            stop_id: 77,
+            interrupt_id: 78,
+            receive_id: 79,
+        },
+    },
+    WireEntry {
+        method: "chain_get_head_header",
+        kind: WireKind::Request {
+            request_id: 80,
+            response_id: 81,
+        },
+    },
+    WireEntry {
+        method: "chain_get_head_body",
+        kind: WireKind::Request {
+            request_id: 82,
+            response_id: 83,
+        },
+    },
+    WireEntry {
+        method: "chain_get_head_storage",
+        kind: WireKind::Request {
+            request_id: 84,
+            response_id: 85,
+        },
+    },
+    WireEntry {
+        method: "chain_call_head",
+        kind: WireKind::Request {
+            request_id: 86,
+            response_id: 87,
+        },
+    },
+    WireEntry {
+        method: "chain_unpin_head",
+        kind: WireKind::Request {
+            request_id: 88,
+            response_id: 89,
+        },
+    },
+    WireEntry {
+        method: "chain_continue_head",
+        kind: WireKind::Request {
+            request_id: 90,
+            response_id: 91,
+        },
+    },
+    WireEntry {
+        method: "chain_stop_head_operation",
+        kind: WireKind::Request {
+            request_id: 92,
+            response_id: 93,
+        },
+    },
+    WireEntry {
+        method: "chain_get_spec_genesis_hash",
+        kind: WireKind::Request {
+            request_id: 94,
+            response_id: 95,
+        },
+    },
+    WireEntry {
+        method: "chain_get_spec_chain_name",
+        kind: WireKind::Request {
+            request_id: 96,
+            response_id: 97,
+        },
+    },
+    WireEntry {
+        method: "chain_get_spec_properties",
+        kind: WireKind::Request {
+            request_id: 98,
+            response_id: 99,
+        },
+    },
+    WireEntry {
+        method: "chain_broadcast_transaction",
+        kind: WireKind::Request {
+            request_id: 100,
+            response_id: 101,
+        },
+    },
+    WireEntry {
+        method: "chain_stop_transaction",
+        kind: WireKind::Request {
+            request_id: 102,
+            response_id: 103,
+        },
+    },
+    WireEntry {
+        method: "theme_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 104,
+            stop_id: 105,
+            interrupt_id: 106,
+            receive_id: 107,
+        },
+    },
+    WireEntry {
+        method: "entropy_derive",
+        kind: WireKind::Request {
+            request_id: 108,
+            response_id: 109,
+        },
+    },
+    WireEntry {
+        method: "account_get_user_id",
+        kind: WireKind::Request {
+            request_id: 110,
+            response_id: 111,
+        },
+    },
+    WireEntry {
+        method: "account_request_login",
+        kind: WireKind::Request {
+            request_id: 112,
+            response_id: 113,
+        },
+    },
+    WireEntry {
+        method: "signing_sign_raw",
+        kind: WireKind::Request {
+            request_id: 114,
+            response_id: 115,
+        },
+    },
+    WireEntry {
+        method: "signing_sign_payload",
+        kind: WireKind::Request {
+            request_id: 116,
+            response_id: 117,
+        },
+    },
+    WireEntry {
+        method: "payment_balance_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 118,
+            stop_id: 119,
+            interrupt_id: 120,
+            receive_id: 121,
+        },
+    },
+    WireEntry {
+        method: "payment_top_up",
+        kind: WireKind::Request {
+            request_id: 122,
+            response_id: 123,
+        },
+    },
+    WireEntry {
+        method: "payment_request",
+        kind: WireKind::Request {
+            request_id: 124,
+            response_id: 125,
+        },
+    },
+    WireEntry {
+        method: "payment_status_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 126,
+            stop_id: 127,
+            interrupt_id: 128,
+            receive_id: 129,
+        },
+    },
+    WireEntry {
+        method: "resource_allocation_request",
+        kind: WireKind::Request {
+            request_id: 130,
+            response_id: 131,
+        },
+    },
+    WireEntry {
+        method: "statement_store_create_proof_authorized",
+        kind: WireKind::Request {
+            request_id: 132,
+            response_id: 133,
+        },
+    },
+    WireEntry {
+        method: "notifications_cancel_push_notification",
+        kind: WireKind::Request {
+            request_id: 134,
+            response_id: 135,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_create_purse",
+        kind: WireKind::Request {
+            request_id: 136,
+            response_id: 137,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_query_purse",
+        kind: WireKind::Request {
+            request_id: 138,
+            response_id: 139,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_rebalance_purse",
+        kind: WireKind::Subscription {
+            start_id: 140,
+            stop_id: 141,
+            interrupt_id: 142,
+            receive_id: 143,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_delete_purse",
+        kind: WireKind::Subscription {
+            start_id: 144,
+            stop_id: 145,
+            interrupt_id: 146,
+            receive_id: 147,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_create_receivable",
+        kind: WireKind::Request {
+            request_id: 148,
+            response_id: 149,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_create_cheque",
+        kind: WireKind::Request {
+            request_id: 150,
+            response_id: 151,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_deposit",
+        kind: WireKind::Subscription {
+            start_id: 152,
+            stop_id: 153,
+            interrupt_id: 154,
+            receive_id: 155,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_refund",
+        kind: WireKind::Subscription {
+            start_id: 156,
+            stop_id: 157,
+            interrupt_id: 158,
+            receive_id: 159,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_listen_for_payment",
+        kind: WireKind::Subscription {
+            start_id: 160,
+            stop_id: 161,
+            interrupt_id: 162,
+            receive_id: 163,
+        },
+    },
+];
diff --git a/rust/crates/truapi-codegen/tests/golden_rust_emit.rs b/rust/crates/truapi-codegen/tests/golden_rust_emit.rs
new file mode 100644
index 00000000..a9bd9240
--- /dev/null
+++ b/rust/crates/truapi-codegen/tests/golden_rust_emit.rs
@@ -0,0 +1,196 @@
+//! Golden snapshot test for the Rust dispatcher emitter.
+//!
+//! Each test runs `cargo +nightly rustdoc -p truapi` into its own
+//! `--target-dir` under a per-test tempdir so concurrent test execution
+//! cannot race on the shared `target/doc/truapi.json` path. Nightly Rust
+//! is required; if it is not available the test panics rather than
+//! silently passing (set up rustup with `rustup toolchain install nightly`).
+
+use std::fs;
+use std::path::{Path, PathBuf};
+use std::process::Command;
+
+/// Run `cargo +nightly rustdoc -p truapi --output-format json` into the
+/// given `target_dir` and return the path to the produced JSON file.
+/// Panics with a clear message if nightly is unavailable so CI cannot
+/// pass vacuously.
+fn produce_rustdoc_json(workspace_root: &Path, target_dir: &Path) -> PathBuf {
+    produce_rustdoc_json_for_package(workspace_root, target_dir, "truapi")
+}
+
+fn produce_rustdoc_json_for_package(
+    workspace_root: &Path,
+    target_dir: &Path,
+    package: &str,
+) -> PathBuf {
+    let output = Command::new("cargo")
+        .args(["+nightly", "rustdoc", "-p", package, "--target-dir"])
+        .arg(target_dir)
+        .args(["--", "-Z", "unstable-options", "--output-format", "json"])
+        .current_dir(workspace_root)
+        .output()
+        .expect(
+            "failed to spawn `cargo +nightly rustdoc`; install nightly via \
+             `rustup toolchain install nightly`",
+        );
+    assert!(
+        output.status.success(),
+        "`cargo +nightly rustdoc -p {package}` failed (status {}); nightly toolchain is required.\nstdout:\n{}\nstderr:\n{}",
+        output.status,
+        String::from_utf8_lossy(&output.stdout),
+        String::from_utf8_lossy(&output.stderr),
+    );
+    let json_name = package.replace('-', "_");
+    let json = target_dir.join(format!("doc/{json_name}.json"));
+    assert!(
+        json.exists(),
+        "rustdoc JSON not found at {} after successful rustdoc invocation",
+        json.display(),
+    );
+    json
+}
+
+fn workspace_root() -> PathBuf {
+    PathBuf::from(env!("CARGO_MANIFEST_DIR"))
+        .ancestors()
+        .nth(3)
+        .expect("workspace root above rust/crates/truapi-codegen")
+        .to_path_buf()
+}
+
+#[test]
+fn golden_dispatcher_and_wire_table() {
+    let manifest_dir = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
+    let workspace = workspace_root();
+
+    let tempdir = tempfile::tempdir().expect("tempdir");
+    let rustdoc_json = produce_rustdoc_json(&workspace, &tempdir.path().join("rustdoc-target"));
+
+    let out = Command::new(env!("CARGO_BIN_EXE_truapi-codegen"))
+        .args([
+            "--input",
+            rustdoc_json.to_str().unwrap(),
+            "--output",
+            tempdir.path().join("ts").to_str().unwrap(),
+            "--rust-output",
+            tempdir.path().join("rust").to_str().unwrap(),
+        ])
+        .output()
+        .expect("run truapi-codegen");
+    assert!(
+        out.status.success(),
+        "codegen failed: stdout=\n{}\nstderr=\n{}",
+        String::from_utf8_lossy(&out.stdout),
+        String::from_utf8_lossy(&out.stderr),
+    );
+
+    // Compare both emitted files against the goldens. We assert on
+    // wire_table.rs first because it's small and the diff is easy to
+    // read when the wire ids drift.
+    let golden_dir = manifest_dir.join("tests/golden");
+    let cases = [
+        ("wire_table.rs", "wire_table.rs"),
+        ("dispatcher.rs", "dispatcher.rs"),
+    ];
+    for (golden_name, output_name) in cases {
+        let golden = fs::read_to_string(golden_dir.join(golden_name))
+            .unwrap_or_else(|e| panic!("read {golden_name}: {e}"));
+        let actual = fs::read_to_string(tempdir.path().join("rust").join(output_name))
+            .unwrap_or_else(|e| panic!("read generated {output_name}: {e}"));
+        if golden != actual {
+            // Dump actual to a sibling file for easy inspection
+            // when running locally.
+            let dump = manifest_dir.join(format!("tests/golden/{output_name}.actual"));
+            let _ = fs::write(&dump, &actual);
+            panic!(
+                "golden mismatch for {output_name}; wrote actual to {}",
+                dump.display()
+            );
+        }
+    }
+}
+
+/// Idempotence guard at the integration level: running the binary twice
+/// against the same input must produce identical output. This catches
+/// non-determinism (HashMap iteration order, timestamps, etc.) that the
+/// inline unit tests might miss because they exercise smaller APIs.
+#[test]
+fn binary_emission_is_idempotent() {
+    let workspace = workspace_root();
+    let tempdir = tempfile::tempdir().expect("tempdir");
+    let rustdoc_json = produce_rustdoc_json(&workspace, &tempdir.path().join("rustdoc-target"));
+
+    let run_once = || -> (String, String) {
+        let tmp = tempfile::tempdir().unwrap();
+        let status = Command::new(env!("CARGO_BIN_EXE_truapi-codegen"))
+            .args([
+                "--input",
+                rustdoc_json.to_str().unwrap(),
+                "--output",
+                tmp.path().join("ts").to_str().unwrap(),
+                "--rust-output",
+                tmp.path().join("rust").to_str().unwrap(),
+            ])
+            .status()
+            .expect("run truapi-codegen");
+        assert!(status.success(), "codegen run failed");
+        let dispatcher =
+            fs::read_to_string(tmp.path().join("rust/dispatcher.rs")).expect("read dispatcher");
+        let wire_table =
+            fs::read_to_string(tmp.path().join("rust/wire_table.rs")).expect("read wire_table");
+        (dispatcher, wire_table)
+    };
+
+    let (a_disp, a_wire) = run_once();
+    let (b_disp, b_wire) = run_once();
+    assert_eq!(a_disp, b_disp, "dispatcher.rs differs between runs");
+    assert_eq!(a_wire, b_wire, "wire_table.rs differs between runs");
+}
+
+#[test]
+fn golden_host_callbacks_ts() {
+    let manifest_dir = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
+    let workspace = workspace_root();
+
+    let tempdir = tempfile::tempdir().expect("tempdir");
+    let truapi_json = produce_rustdoc_json(&workspace, &tempdir.path().join("rustdoc-target"));
+    let platform_json = produce_rustdoc_json_for_package(
+        &workspace,
+        &tempdir.path().join("rustdoc-platform-target"),
+        "truapi-platform",
+    );
+
+    let out = Command::new(env!("CARGO_BIN_EXE_truapi-codegen"))
+        .args([
+            "--input",
+            truapi_json.to_str().unwrap(),
+            "--output",
+            tempdir.path().join("ts").to_str().unwrap(),
+            "--platform-input",
+            platform_json.to_str().unwrap(),
+            "--platform-ts-output",
+            tempdir.path().join("platform").to_str().unwrap(),
+        ])
+        .output()
+        .expect("run truapi-codegen");
+    assert!(
+        out.status.success(),
+        "codegen failed: stdout=\n{}\nstderr=\n{}",
+        String::from_utf8_lossy(&out.stdout),
+        String::from_utf8_lossy(&out.stderr),
+    );
+
+    let golden_path = manifest_dir.join("tests/golden/host-callbacks.ts");
+    let golden =
+        fs::read_to_string(&golden_path).unwrap_or_else(|e| panic!("read host-callbacks.ts: {e}"));
+    let actual = fs::read_to_string(tempdir.path().join("platform/host-callbacks.ts"))
+        .expect("read generated host-callbacks.ts");
+    if golden != actual {
+        let dump = manifest_dir.join("tests/golden/host-callbacks.ts.actual");
+        let _ = fs::write(&dump, &actual);
+        panic!(
+            "golden mismatch for host-callbacks.ts; wrote actual to {}",
+            dump.display()
+        );
+    }
+}
diff --git a/rust/crates/truapi-platform/Cargo.toml b/rust/crates/truapi-platform/Cargo.toml
new file mode 100644
index 00000000..5e0411fd
--- /dev/null
+++ b/rust/crates/truapi-platform/Cargo.toml
@@ -0,0 +1,10 @@
+[package]
+name = "truapi-platform"
+version = "0.1.0"
+edition.workspace = true
+description = "Platform capability traits for TrUAPI host implementations"
+license = "MIT"
+
+[dependencies]
+truapi = { path = "../truapi" }
+futures = "0.3"
diff --git a/rust/crates/truapi-platform/README.md b/rust/crates/truapi-platform/README.md
new file mode 100644
index 00000000..a892ecc2
--- /dev/null
+++ b/rust/crates/truapi-platform/README.md
@@ -0,0 +1,27 @@
+# truapi-platform
+
+Platform capability traits for TrUAPI host implementations.
+
+Each platform (web/WASM, iOS/UniFFI, Android/UniFFI) implements these traits to
+provide native capabilities. The TrUAPI dispatcher (in `truapi-server`) calls
+into these when handling API requests from the product side.
+
+## Traits
+
+- `Storage`, scoped key-value storage (`read`, `write`, `clear`).
+- `Navigation`, open URLs in the system browser.
+- `Notifications`, deliver push notifications.
+- `Permissions`, prompt for device and remote permissions (v0.1 split callbacks).
+- `Features`, probe per-chain (or other) feature support.
+- `ChainProvider` / `JsonRpcConnection`, open JSON-RPC connections to chains.
+
+`Platform` is a blanket-implemented supertrait that combines the six
+host-facing capabilities: `Navigation`, `Notifications`, `Permissions`,
+`Features`, `Storage`, and `ChainProvider`. Account, signing, statement-store
+and preimage flows live in the Rust core itself, not in this trait set.
+
+## Versioning
+
+Types come from `truapi::versioned::*` (V1 enum wrappers) where possible, and
+fall back to `truapi::v01::*` for inner error and value types. The crate
+re-exports both modules for downstream convenience.
diff --git a/rust/crates/truapi-platform/src/lib.rs b/rust/crates/truapi-platform/src/lib.rs
new file mode 100644
index 00000000..df8683f9
--- /dev/null
+++ b/rust/crates/truapi-platform/src/lib.rs
@@ -0,0 +1,130 @@
+//! Capability traits a TrUAPI host must implement.
+//!
+//! Each trait covers a single OS-primitive surface the Rust core cannot reach
+//! from its own process (key-value persistence, URL launching, push
+//! notifications, permission UI, chain RPC). Account management, signing,
+//! statement-store and preimage flows live in the Rust core itself and are not
+//! part of this trait set.
+//!
+//! Host implementations may use `async fn` in trait bodies directly. The
+//! consumers (`truapi-server::runtime::PlatformRuntimeHost<P>`) are generic
+//! over `P: Platform`, so `dyn Trait` object safety is not required.
+
+#![forbid(unsafe_code)]
+
+use futures::stream::BoxStream;
+
+use truapi::v01::{
+    GenericError, HostDevicePermissionRequest, HostDevicePermissionResponse,
+    HostLocalStorageReadError, HostNavigateToError, HostPushNotificationRequest,
+    RemotePermissionRequest, RemotePermissionResponse,
+};
+use truapi::versioned::system::{HostFeatureSupportedRequest, HostFeatureSupportedResponse};
+
+/// Re-export of `truapi::v01` for host implementations.
+pub use truapi::v01;
+/// Re-export of `truapi::versioned` for host implementations.
+pub use truapi::versioned;
+
+/// Scoped key-value storage. The platform namespaces keys so different products
+/// cannot read each other's data.
+pub trait Storage: Send + Sync {
+    /// Read a value by key.
+    fn read(
+        &self,
+        key: String,
+    ) -> impl Future<Output = Result<Option<Vec<u8>>, HostLocalStorageReadError>> + Send;
+
+    /// Write a value to a key.
+    fn write(
+        &self,
+        key: String,
+        value: Vec<u8>,
+    ) -> impl Future<Output = Result<(), HostLocalStorageReadError>> + Send;
+
+    /// Clear a value at a key.
+    fn clear(
+        &self,
+        key: String,
+    ) -> impl Future<Output = Result<(), HostLocalStorageReadError>> + Send;
+}
+
+/// Open URLs in the system browser. Input is already trimmed, categorized,
+/// and (where needed) normalized by the core; the host implementation only
+/// needs to hand the URL to the OS URL handler.
+pub trait Navigation: Send + Sync {
+    /// Open the given URL in the system browser.
+    fn navigate_to(
+        &self,
+        url: String,
+    ) -> impl Future<Output = Result<(), HostNavigateToError>> + Send;
+}
+
+/// Deliver push notifications.
+pub trait Notifications: Send + Sync {
+    /// Push the given notification to the user.
+    fn push_notification(
+        &self,
+        notification: HostPushNotificationRequest,
+    ) -> impl Future<Output = Result<(), GenericError>> + Send;
+}
+
+/// Permission prompts. v0.1 keeps device permissions (camera, mic, NFC, ...)
+/// separate from remote permissions (domain access, chain submit, ...), so the
+/// platform surface mirrors that split.
+pub trait Permissions: Send + Sync {
+    /// Prompt the user for a device-level permission.
+    fn device_permission(
+        &self,
+        request: HostDevicePermissionRequest,
+    ) -> impl Future<Output = Result<HostDevicePermissionResponse, GenericError>> + Send;
+
+    /// Prompt the user for a remote (product-scoped) permission bundle.
+    fn remote_permission(
+        &self,
+        request: RemotePermissionRequest,
+    ) -> impl Future<Output = Result<RemotePermissionResponse, GenericError>> + Send;
+}
+
+/// Feature-support probing. The host answers whether it can service a given
+/// capability (currently scoped to per-chain support).
+pub trait Features: Send + Sync {
+    /// Report whether the requested feature is supported.
+    fn feature_supported(
+        &self,
+        request: HostFeatureSupportedRequest,
+    ) -> impl Future<Output = Result<HostFeatureSupportedResponse, GenericError>> + Send;
+}
+
+/// JSON-RPC provider factory for chain access.
+///
+/// The platform provides a way to get a JSON-RPC connection for a given chain.
+/// The server runtime manages the chainHead v1 state machine on top of this.
+pub trait ChainProvider: Send + Sync {
+    /// Open a JSON-RPC connection for the chain identified by `genesis_hash`.
+    /// Drop the returned connection to disconnect.
+    fn connect(
+        &self,
+        genesis_hash: Vec<u8>,
+    ) -> impl Future<Output = Result<Box<dyn JsonRpcConnection>, GenericError>> + Send;
+}
+
+/// A live JSON-RPC connection to a chain.
+pub trait JsonRpcConnection: Send + Sync {
+    /// Send a JSON-RPC request string.
+    fn send(&self, request: String);
+
+    /// Stream of JSON-RPC response strings.
+    fn responses(&self) -> BoxStream<'static, String>;
+}
+
+/// Combined platform interface. A host must provide all capability traits.
+pub trait Platform:
+    Navigation + Notifications + Permissions + Features + Storage + ChainProvider
+{
+}
+
+impl<T> Platform for T where
+    T: Navigation + Notifications + Permissions + Features + Storage + ChainProvider
+{
+}
diff --git a/rust/crates/truapi-platform/tests/bounds.rs b/rust/crates/truapi-platform/tests/bounds.rs
new file mode 100644
index 00000000..eded505b
--- /dev/null
+++ b/rust/crates/truapi-platform/tests/bounds.rs
@@ -0,0 +1,9 @@
+//! Compile-time check that the `Platform` super-trait composes its capability
+//! traits with `Send + Sync + 'static` bounds. `Platform` itself is not
+//! object-safe (the capability traits use `async fn` returning
+//! `impl Future`); the runtime consumes implementors via generics, not
+//! `dyn Trait`.
+
+use truapi_platform::Platform;
+
+fn _assert_platform_bounds<T: Platform + Send + Sync + 'static>() {}
diff --git a/rust/crates/truapi-server/Cargo.toml b/rust/crates/truapi-server/Cargo.toml
new file mode 100644
index 00000000..c82ebac3
--- /dev/null
+++ b/rust/crates/truapi-server/Cargo.toml
@@ -0,0 +1,65 @@
+[package]
+name = "truapi-server"
+version = "0.1.0"
+edition.workspace = true
+description = "TrUAPI server runtime: dispatcher, frames, SCALE, streams"
+# MIT for this crate's own code; the smoldot light-client glue under
+# src/smoldot_provider/wasm_*.rs is vendored from subxt-lightclient under
+# Apache-2.0 (see THIRD_PARTY_NOTICES.md and the per-file SPDX headers).
+license = "MIT AND Apache-2.0"
+
+[lib]
+crate-type = ["rlib", "cdylib", "staticlib"]
+
+[features]
+default = []
+ws-bridge = ["dep:tokio", "dep:tokio-tungstenite", "dep:rand"]
+smoldot = ["dep:smoldot-light", "dep:smoldot"]
+
+[dependencies]
+truapi = { path = "../truapi" }
+truapi-platform = { path = "../truapi-platform" }
+async-trait = "0.1"
+derive_more = { version = "2", features = ["display"] }
+futures = "0.3"
+parity-scale-codec = { version = "3", features = ["derive"] }
+serde_json = "1"
+thiserror = "1"
+unicode-normalization = "0.1"
+url = "2"
+uniffi = "0.29.4"
+hex = "0.4"
+
+[target.'cfg(not(target_arch = "wasm32"))'.dependencies]
+smoldot-light = { version = "1.1.0", optional = true }
+smoldot = { version = "1.1.0", optional = true }
+tokio = { version = "1", features = ["rt-multi-thread", "net", "sync", "macros", "io-util"], optional = true }
+tokio-tungstenite = { version = "0.21", default-features = false, features = ["handshake"], optional = true }
+rand = { version = "0.8", optional = true }
+futures = { version = "0.3", features = ["thread-pool"] }
+
+[target.'cfg(target_arch = "wasm32")'.dependencies]
+js-sys = "0.3"
+wasm-bindgen = "0.2.118"
+wasm-bindgen-futures = "0.4"
+console_error_panic_hook = "0.1"
+smoldot-light = { version = "1.1.0", optional = true, default-features = false }
+smoldot = { version = "1.1.0", optional = true, default-features = false, features = ["std"] }
+futures-timer = { version = "3", features = ["wasm-bindgen"] }
+futures-util = "0.3"
+getrandom = { version = "0.2", features = ["js"] }
+pin-project = "1"
+send_wrapper = { version = "0.6", features = ["futures"] }
+web-time = "1"
+web-sys = { version = "0.3", features = [
+    "BinaryType",
+    "CloseEvent",
+    "console",
+    "Event",
+    "MessageEvent",
+    "WebSocket",
+] }
+
+[target.'cfg(not(target_arch = "wasm32"))'.dev-dependencies]
+tokio = { version = "1", features = ["rt-multi-thread", "net", "sync", "macros", "io-util", "time"] }
+tokio-tungstenite = { version = "0.21", default-features = false, features = ["connect"] }
diff --git a/rust/crates/truapi-server/README.md b/rust/crates/truapi-server/README.md
new file mode 100644
index 00000000..4f30f9a0
--- /dev/null
+++ b/rust/crates/truapi-server/README.md
@@ -0,0 +1,31 @@
+# truapi-server
+
+*Runtime core for TrUAPI: dispatcher, protocol frames, SCALE-coded wire envelope.*
+
+## What this crate is for
+
+`truapi-server` is the runtime that turns trait implementations of the
+`truapi` API into a working host. It owns:
+
+- the [`ProtocolMessage`] wire envelope and SCALE codec
+- the [`Dispatcher`] that routes incoming frames to per-method handlers
+- the subscription lifecycle (start/receive/stop/interrupt)
+- the [`Transport`] trait that platform-specific IPC backends implement
+- the auto-generated dispatcher/wire-table tables shipped under
+  [`crate::generated`]
+
+## Wire envelope
+
+Every frame on the wire is encoded as:
+
+```text
+[requestId: SCALE str][discriminant: u8][payload bytes...]
+```
+
+The discriminant maps to a method/kind tag via the auto-generated
+[`crate::generated::wire_table::WIRE_TABLE`]. Method ordering is part of
+the wire protocol; only ever append.
+
+The payload bytes are the SCALE-encoded inner value, inlined without a
+length prefix. In-memory we keep the tag as a `String` so the dispatcher
+(which keys on method name) is independent of the wire numbering.
diff --git a/rust/crates/truapi-server/THIRD_PARTY_NOTICES.md b/rust/crates/truapi-server/THIRD_PARTY_NOTICES.md
new file mode 100644
index 00000000..3b96ace0
--- /dev/null
+++ b/rust/crates/truapi-server/THIRD_PARTY_NOTICES.md
@@ -0,0 +1,33 @@
+# Third-party notices
+
+`truapi-server` is MIT-licensed except for the vendored sources listed below,
+which are redistributed under their own terms.
+
+## subxt-lightclient
+
+Files:
+
+- `src/smoldot_provider/wasm_socket.rs`
+- `src/smoldot_provider/wasm_platform.rs`
+- `src/smoldot_provider/wasm_helpers.rs`
+
+Vendored from [`subxt-lightclient`](https://github.com/paritytech/subxt) v0.50.0,
+available under `Apache-2.0 OR GPL-3.0`. These files are redistributed under the
+**Apache License 2.0**, whose attribution requirements (§4) are satisfied by
+this notice and the per-file `SPDX-License-Identifier: Apache-2.0` headers.
+
+```
+Copyright Parity Technologies (UK) Ltd.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use these files except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+```
diff --git a/rust/crates/truapi-server/src/chain_runtime.rs b/rust/crates/truapi-server/src/chain_runtime.rs
new file mode 100644
index 00000000..2a87ebb0
--- /dev/null
+++ b/rust/crates/truapi-server/src/chain_runtime.rs
@@ -0,0 +1,1734 @@
+//! ChainHead v1 state machine used by `PlatformRuntimeHost`.
+//!
+//! [`ChainRuntime`] keeps one [`ChainConnection`] per chain (keyed by genesis
+//! hash) on top of the platform-provided [`JsonRpcConnection`]. Each connection
+//! owns the per-product `chainHead_v1_follow` subscriptions, the in-flight
+//! request map, and the json-rpc response loop. The follow event stream is
+//! parsed into v01 [`RemoteChainHeadFollowItem`] values; one-shot calls
+//! (header / body / call / storage / spec / broadcast / stop) are submitted as
+//! json-rpc requests and the matching response is decoded back into a typed
+//! v01 result.
+//!
+//! The chain-side traits return [`RuntimeFailure`], a local classification
+//! that the [`crate::runtime`] layer maps to [`truapi::CallError`] variants
+//! (`Unsupported`, `HostFailure`, ...). This avoids leaking json-rpc plumbing
+//! into the public API.
+
+use std::collections::HashMap;
+use std::pin::Pin;
+use std::sync::Arc;
+use std::sync::Mutex;
+use std::sync::atomic::{AtomicBool, AtomicU64, Ordering};
+use std::task::{Context, Poll};
+
+use futures::FutureExt;
+use futures::channel::{mpsc, oneshot};
+use futures::future::{BoxFuture, Shared};
+use futures::stream::BoxStream;
+use futures::{Stream, StreamExt};
+use serde_json::{Map, Value, json};
+use truapi::v01::{
+    OperationStartedResult, RemoteChainHeadBodyRequest, RemoteChainHeadBodyResponse,
+    RemoteChainHeadCallRequest, RemoteChainHeadCallResponse, RemoteChainHeadContinueRequest,
+    RemoteChainHeadFollowItem, RemoteChainHeadFollowRequest, RemoteChainHeadHeaderRequest,
+    RemoteChainHeadHeaderResponse, RemoteChainHeadStopOperationRequest,
+    RemoteChainHeadStorageRequest, RemoteChainHeadStorageResponse, RemoteChainHeadUnpinRequest,
+    RemoteChainSpecChainNameResponse, RemoteChainSpecGenesisHashResponse,
+    RemoteChainSpecPropertiesResponse, RemoteChainTransactionBroadcastRequest,
+    RemoteChainTransactionBroadcastResponse, RemoteChainTransactionStopRequest, RuntimeApi,
+    RuntimeSpec, RuntimeType, StorageQueryItem, StorageQueryType, StorageResultItem,
+};
+use truapi_platform::JsonRpcConnection;
+
+use crate::subscription::Spawner;
+
+const FOLLOW_METHOD: &str = "remote_chain_head_follow";
+
+/// Cap on the number of distinct remote subscription ids buffered in
+/// `pending_follow_events`, and on the events held per id, so a misbehaving
+/// node (or late events for a retired remote id) cannot grow memory without
+/// bound while a follow id is being established.
+const MAX_PENDING_FOLLOW_EVENT_IDS: usize = 64;
+const MAX_PENDING_FOLLOW_EVENTS_PER_ID: usize = 256;
+
+/// Shared, single-flight `chainHead_v1_follow` setup keyed by local follow id.
+/// Concurrent callers for the same id await one in-flight request rather than
+/// each opening (and leaking) a separate remote subscription.
+type FollowSetup = Shared<BoxFuture<'static, Result<String, RuntimeFailure>>>;
+
+/// Classification of framework-level chain failures separate from JSON-RPC
+/// domain errors. Maps cleanly to [`truapi::CallError`] variants at the
+/// `PlatformRuntimeHost` boundary.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum RuntimeFailureKind {
+    /// Backend is not wired or refused the request for plumbing reasons.
+    Unavailable,
+    /// Backend responded but the payload was malformed or the call failed.
+    HostFailure,
+}
+
+/// Framework-level chain failure with a diagnostic reason.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct RuntimeFailure {
+    kind: RuntimeFailureKind,
+    method: &'static str,
+    reason: Option<String>,
+}
+
+impl RuntimeFailure {
+    /// Backend refused the call for unavailability reasons (no provider, the
+    /// connection died, etc.).
+    pub fn unavailable(method: &'static str) -> Self {
+        Self {
+            kind: RuntimeFailureKind::Unavailable,
+            method,
+            reason: None,
+        }
+    }
+
+    /// Backend produced a structural error (malformed json-rpc, unexpected
+    /// shape, ...).
+    pub fn host_failure(method: &'static str, reason: impl Into<String>) -> Self {
+        Self {
+            kind: RuntimeFailureKind::HostFailure,
+            method,
+            reason: Some(reason.into()),
+        }
+    }
+
+    /// Failure classification.
+    pub fn kind(&self) -> RuntimeFailureKind {
+        self.kind
+    }
+
+    /// Method tag the failure originated from.
+    pub fn method(&self) -> &'static str {
+        self.method
+    }
+
+    /// Diagnostic reason. Always non-empty for `HostFailure`.
+    pub fn reason(&self) -> String {
+        match &self.reason {
+            Some(reason) => format!("{}: {}", self.method, reason),
+            None => self.method.to_string(),
+        }
+    }
+}
+
+/// Provider of `JsonRpcConnection` instances keyed by chain genesis hash.
+/// The default [`UnavailableChainProvider`] makes every call fail; real
+/// hosts plug in either the platform-side `ChainProvider` or the bundled
+/// smoldot provider (feature `smoldot`).
+#[async_trait::async_trait]
+pub trait RuntimeChainProvider: Send + Sync {
+    /// Open or reuse a JSON-RPC connection for the chain identified by
+    /// `genesis_hash`.
+    async fn connect(
+        &self,
+        genesis_hash: Vec<u8>,
+    ) -> Result<Arc<dyn JsonRpcConnection>, RuntimeFailure>;
+}
+
+/// Default provider: every `connect` call fails with `Unavailable`, so each
+/// chain RPC surfaces a typed "unavailable" error to the product.
+#[derive(Default)]
+pub struct UnavailableChainProvider;
+
+#[async_trait::async_trait]
+impl RuntimeChainProvider for UnavailableChainProvider {
+    async fn connect(
+        &self,
+        _genesis_hash: Vec<u8>,
+    ) -> Result<Arc<dyn JsonRpcConnection>, RuntimeFailure> {
+        Err(RuntimeFailure::unavailable("remote_chain_connect"))
+    }
+}
+
+/// chainHead-v1 state machine on top of a [`RuntimeChainProvider`].
+///
+/// Each method maps a typed v01 chain request to one or more json-rpc calls,
+/// shares one `chainHead_v1_follow` subscription per (genesis_hash, local
+/// follow id) pair, and parses follow events back into typed
+/// [`RemoteChainHeadFollowItem`] values.
+#[derive(Clone)]
+pub struct ChainRuntime {
+    provider: Arc<dyn RuntimeChainProvider>,
+    spawner: Spawner,
+    connections: Arc<Mutex<HashMap<String, Arc<ChainConnection>>>>,
+}
+
+impl ChainRuntime {
+    /// Build a `ChainRuntime` driven by `provider`. Background tasks (response
+    /// pumps, follow setup) are spawned on `spawner`.
+    pub fn new(provider: Arc<dyn RuntimeChainProvider>, spawner: Spawner) -> Self {
+        Self {
+            provider,
+            spawner,
+            connections: Arc::new(Mutex::new(HashMap::new())),
+        }
+    }
+
+    /// Start (or attach to an existing) `chainHead_v1_follow` subscription.
+    /// Returns a stream of typed follow items that closes when the remote
+    /// sends `stop` or the connection drops.
+    pub fn remote_chain_head_follow(
+        &self,
+        follow_subscription_id: String,
+        request: RemoteChainHeadFollowRequest,
+    ) -> BoxStream<'static, RemoteChainHeadFollowItem> {
+        let (tx, rx) = mpsc::unbounded();
+        let runtime = self.clone();
+        let cleanup_runtime = self.clone();
+        let cleanup_genesis_hash = request.genesis_hash.clone();
+        let cleanup_follow_id = follow_subscription_id.clone();
+
+        let fut = async move {
+            if runtime
+                .start_follow(follow_subscription_id, request, Some(tx.clone()))
+                .await
+                .is_err()
+            {
+                let _ = tx.unbounded_send(FollowSignal::Interrupt);
+            }
+        };
+        (self.spawner)(fut.boxed());
+
+        let stream = ManagedSubscription::new(
+            rx.boxed(),
+            Some(Box::new(move || {
+                cleanup_runtime.cleanup_follow(&cleanup_genesis_hash, &cleanup_follow_id);
+            })),
+        );
+        stream
+            .filter_map(|signal| async move {
+                match signal {
+                    FollowSignal::Item(item) => Some(item),
+                    FollowSignal::Interrupt => None,
+                }
+            })
+            .boxed()
+    }
+
+    /// Fetch a block header.
+    pub async fn remote_chain_head_header(
+        &self,
+        request: RemoteChainHeadHeaderRequest,
+    ) -> Result<RemoteChainHeadHeaderResponse, RuntimeFailure> {
+        let method = "remote_chain_head_header";
+        let connection = self.connection_for(method, &request.genesis_hash).await?;
+        let remote_follow_id = self
+            .ensure_follow_context(method, &connection, request.follow_subscription_id, false)
+            .await?;
+
+        let value = connection
+            .request_value(
+                method,
+                "chainHead_v1_header",
+                json!([remote_follow_id, encode_hex(&request.hash)]),
+            )
+            .await?;
+        let header = match value {
+            Value::Null => None,
+            Value::String(encoded) => Some(
+                decode_hex(&encoded)
+                    .map_err(|reason| RuntimeFailure::host_failure(method, reason))?,
+            ),
+            _ => {
+                return Err(RuntimeFailure::host_failure(
+                    method,
+                    "unexpected chainHead_v1_header result",
+                ));
+            }
+        };
+        Ok(RemoteChainHeadHeaderResponse { header })
+    }
+
+    /// Start a chainHead_v1_body operation.
+    pub async fn remote_chain_head_body(
+        &self,
+        request: RemoteChainHeadBodyRequest,
+    ) -> Result<RemoteChainHeadBodyResponse, RuntimeFailure> {
+        let method = "remote_chain_head_body";
+        let connection = self.connection_for(method, &request.genesis_hash).await?;
+        let remote_follow_id = self
+            .ensure_follow_context(method, &connection, request.follow_subscription_id, false)
+            .await?;
+
+        let value = connection
+            .request_value(
+                method,
+                "chainHead_v1_body",
+                json!([remote_follow_id, encode_hex(&request.hash)]),
+            )
+            .await?;
+        let operation = operation_started_result(method, value)?;
+        Ok(RemoteChainHeadBodyResponse { operation })
+    }
+
+    /// Start a chainHead_v1_storage operation.
+    pub async fn remote_chain_head_storage(
+        &self,
+        request: RemoteChainHeadStorageRequest,
+    ) -> Result<RemoteChainHeadStorageResponse, RuntimeFailure> {
+        let method = "remote_chain_head_storage";
+        let connection = self.connection_for(method, &request.genesis_hash).await?;
+        let remote_follow_id = self
+            .ensure_follow_context(method, &connection, request.follow_subscription_id, false)
+            .await?;
+
+        let items = request
+            .items
+            .iter()
+            .map(encode_storage_query_item)
+            .collect::<Vec<_>>();
+        let child_trie = request
+            .child_trie
+            .as_ref()
+            .map(|bytes| Value::String(encode_hex(bytes)))
+            .unwrap_or(Value::Null);
+
+        let value = connection
+            .request_value(
+                method,
+                "chainHead_v1_storage",
+                json!([
+                    remote_follow_id,
+                    encode_hex(&request.hash),
+                    Value::Array(items),
+                    child_trie,
+                ]),
+            )
+            .await?;
+        let operation = operation_started_result(method, value)?;
+        Ok(RemoteChainHeadStorageResponse { operation })
+    }
+
+    /// Start a chainHead_v1_call operation.
+    pub async fn remote_chain_head_call(
+        &self,
+        request: RemoteChainHeadCallRequest,
+    ) -> Result<RemoteChainHeadCallResponse, RuntimeFailure> {
+        let method = "remote_chain_head_call";
+        let connection = self.connection_for(method, &request.genesis_hash).await?;
+        let remote_follow_id = self
+            .ensure_follow_context(method, &connection, request.follow_subscription_id, true)
+            .await?;
+
+        let value = connection
+            .request_value(
+                method,
+                "chainHead_v1_call",
+                json!([
+                    remote_follow_id,
+                    encode_hex(&request.hash),
+                    request.function,
+                    encode_hex(&request.call_parameters),
+                ]),
+            )
+            .await?;
+        let operation = operation_started_result(method, value)?;
+        Ok(RemoteChainHeadCallResponse { operation })
+    }
+
+    /// Release pinned blocks.
+    pub async fn remote_chain_head_unpin(
+        &self,
+        request: RemoteChainHeadUnpinRequest,
+    ) -> Result<(), RuntimeFailure> {
+        let method = "remote_chain_head_unpin";
+        let connection = self.connection_for(method, &request.genesis_hash).await?;
+        let remote_follow_id = self
+            .ensure_follow_context(method, &connection, request.follow_subscription_id, false)
+            .await?;
+        let hashes: Vec<Value> = request
+            .hashes
+            .iter()
+            .map(|hash| Value::String(encode_hex(hash)))
+            .collect();
+        let value = connection
+            .request_value(
+                method,
+                "chainHead_v1_unpin",
+                json!([remote_follow_id, Value::Array(hashes)]),
+            )
+            .await?;
+        match value {
+            Value::Null => Ok(()),
+            _ => Err(RuntimeFailure::host_failure(
+                method,
+                "unexpected chainHead_v1_unpin result",
+            )),
+        }
+    }
+
+    /// Continue a paused operation.
+    pub async fn remote_chain_head_continue(
+        &self,
+        request: RemoteChainHeadContinueRequest,
+    ) -> Result<(), RuntimeFailure> {
+        let method = "remote_chain_head_continue";
+        let connection = self.connection_for(method, &request.genesis_hash).await?;
+        let remote_follow_id = self
+            .ensure_follow_context(method, &connection, request.follow_subscription_id, false)
+            .await?;
+        let value = connection
+            .request_value(
+                method,
+                "chainHead_v1_continue",
+                json!([remote_follow_id, request.operation_id]),
+            )
+            .await?;
+        match value {
+            Value::Null => Ok(()),
+            _ => Err(RuntimeFailure::host_failure(
+                method,
+                "unexpected chainHead_v1_continue result",
+            )),
+        }
+    }
+
+    /// Stop a chain-head operation.
+    pub async fn remote_chain_head_stop_operation(
+        &self,
+        request: RemoteChainHeadStopOperationRequest,
+    ) -> Result<(), RuntimeFailure> {
+        let method = "remote_chain_head_stop_operation";
+        let connection = self.connection_for(method, &request.genesis_hash).await?;
+        let remote_follow_id = self
+            .ensure_follow_context(method, &connection, request.follow_subscription_id, false)
+            .await?;
+        let value = connection
+            .request_value(
+                method,
+                "chainHead_v1_stopOperation",
+                json!([remote_follow_id, request.operation_id]),
+            )
+            .await?;
+        match value {
+            Value::Null => Ok(()),
+            _ => Err(RuntimeFailure::host_failure(
+                method,
+                "unexpected chainHead_v1_stopOperation result",
+            )),
+        }
+    }
+
+    /// Echo back the chain genesis hash via chainSpec_v1_genesisHash.
+    pub async fn remote_chain_spec_genesis_hash(
+        &self,
+        genesis_hash: Vec<u8>,
+    ) -> Result<RemoteChainSpecGenesisHashResponse, RuntimeFailure> {
+        let method = "remote_chain_spec_genesis_hash";
+        let connection = self.connection_for(method, &genesis_hash).await?;
+        let value = connection
+            .request_value(method, "chainSpec_v1_genesisHash", json!([]))
+            .await?;
+        match value {
+            Value::String(encoded) => {
+                let bytes = decode_hex(&encoded)
+                    .map_err(|reason| RuntimeFailure::host_failure(method, reason))?;
+                Ok(RemoteChainSpecGenesisHashResponse {
+                    genesis_hash: bytes,
+                })
+            }
+            _ => Err(RuntimeFailure::host_failure(
+                method,
+                "unexpected chainSpec_v1_genesisHash result",
+            )),
+        }
+    }
+
+    /// Fetch the chain display name via chainSpec_v1_chainName.
+    pub async fn remote_chain_spec_chain_name(
+        &self,
+        genesis_hash: Vec<u8>,
+    ) -> Result<RemoteChainSpecChainNameResponse, RuntimeFailure> {
+        let method = "remote_chain_spec_chain_name";
+        let connection = self.connection_for(method, &genesis_hash).await?;
+        let value = connection
+            .request_value(method, "chainSpec_v1_chainName", json!([]))
+            .await?;
+        match value {
+            Value::String(name) => Ok(RemoteChainSpecChainNameResponse { chain_name: name }),
+            _ => Err(RuntimeFailure::host_failure(
+                method,
+                "unexpected chainSpec_v1_chainName result",
+            )),
+        }
+    }
+
+    /// Fetch the chain JSON properties via chainSpec_v1_properties.
+    pub async fn remote_chain_spec_properties(
+        &self,
+        genesis_hash: Vec<u8>,
+    ) -> Result<RemoteChainSpecPropertiesResponse, RuntimeFailure> {
+        let method = "remote_chain_spec_properties";
+        let connection = self.connection_for(method, &genesis_hash).await?;
+        let value = connection
+            .request_value(method, "chainSpec_v1_properties", json!([]))
+            .await?;
+        let properties = serde_json::to_string(&value)
+            .map_err(|err| RuntimeFailure::host_failure(method, err.to_string()))?;
+        Ok(RemoteChainSpecPropertiesResponse { properties })
+    }
+
+    /// Broadcast a signed transaction via transaction_v1_broadcast.
+    pub async fn remote_chain_transaction_broadcast(
+        &self,
+        request: RemoteChainTransactionBroadcastRequest,
+    ) -> Result<RemoteChainTransactionBroadcastResponse, RuntimeFailure> {
+        let method = "remote_chain_transaction_broadcast";
+        let connection = self.connection_for(method, &request.genesis_hash).await?;
+        let value = connection
+            .request_value(
+                method,
+                "transaction_v1_broadcast",
+                json!([encode_hex(&request.transaction)]),
+            )
+            .await?;
+        match value {
+            Value::Null => Ok(RemoteChainTransactionBroadcastResponse { operation_id: None }),
+            Value::String(operation_id) => Ok(RemoteChainTransactionBroadcastResponse {
+                operation_id: Some(operation_id),
+            }),
+            _ => Err(RuntimeFailure::host_failure(
+                method,
+                "unexpected transaction_v1_broadcast result",
+            )),
+        }
+    }
+
+    /// Stop a transaction broadcast via transaction_v1_stop.
+    pub async fn remote_chain_transaction_stop(
+        &self,
+        request: RemoteChainTransactionStopRequest,
+    ) -> Result<(), RuntimeFailure> {
+        let method = "remote_chain_transaction_stop";
+        let connection = self.connection_for(method, &request.genesis_hash).await?;
+        let value = connection
+            .request_value(method, "transaction_v1_stop", json!([request.operation_id]))
+            .await?;
+        match value {
+            Value::Null => Ok(()),
+            _ => Err(RuntimeFailure::host_failure(
+                method,
+                "unexpected transaction_v1_stop result",
+            )),
+        }
+    }
+
+    async fn connection_for(
+        &self,
+        method: &'static str,
+        genesis_hash: &[u8],
+    ) -> Result<Arc<ChainConnection>, RuntimeFailure> {
+        let key = encode_hex(genesis_hash);
+        if let Some(connection) = self.connections.lock().unwrap().get(&key).cloned() {
+            if !connection.is_closed() {
+                return Ok(connection);
+            }
+            self.connections.lock().unwrap().remove(&key);
+        }
+
+        let rpc = self
+            .provider
+            .connect(genesis_hash.to_owned())
+            .await
+            .map_err(|failure| match failure.kind() {
+                RuntimeFailureKind::Unavailable => RuntimeFailure::unavailable(method),
+                RuntimeFailureKind::HostFailure => {
+                    RuntimeFailure::host_failure(method, failure.reason())
+                }
+            })?;
+        let connection = ChainConnection::new(rpc, self.spawner.clone());
+        self.connections
+            .lock()
+            .unwrap()
+            .insert(key, connection.clone());
+        Ok(connection)
+    }
+
+    async fn start_follow(
+        &self,
+        local_follow_id: String,
+        request: RemoteChainHeadFollowRequest,
+        sender: Option<mpsc::UnboundedSender<FollowSignal>>,
+    ) -> Result<(), RuntimeFailure> {
+        let connection = self
+            .connection_for(FOLLOW_METHOD, &request.genesis_hash)
+            .await?;
+        // Record this subscriber's sender before kicking off (or joining) the
+        // single-flight setup so events route to it regardless of which caller
+        // wins the setup.
+        connection.register_follow_intent(&local_follow_id, request.with_runtime, sender);
+        connection
+            .ensure_remote_follow(local_follow_id, request.with_runtime)
+            .await?;
+        Ok(())
+    }
+
+    async fn ensure_follow_context(
+        &self,
+        method: &'static str,
+        connection: &Arc<ChainConnection>,
+        local_follow_id: String,
+        with_runtime: bool,
+    ) -> Result<String, RuntimeFailure> {
+        let remote_follow_id = connection
+            .ensure_remote_follow(local_follow_id.clone(), with_runtime)
+            .await?;
+        if with_runtime && !connection.follow_with_runtime(&local_follow_id) {
+            return Err(RuntimeFailure::host_failure(
+                method,
+                "follow subscription was created without runtime metadata",
+            ));
+        }
+        Ok(remote_follow_id)
+    }
+
+    fn cleanup_follow(&self, genesis_hash: &[u8], local_follow_id: &str) {
+        let key = encode_hex(genesis_hash);
+        let Some(connection) = self.connections.lock().unwrap().get(&key).cloned() else {
+            return;
+        };
+        connection.unfollow(local_follow_id);
+    }
+}
+
+/// One delivery on the local follow stream. `Interrupt` signals an
+/// abnormal close (connection dropped, follow setup failed); it produces no
+/// item but ends the stream.
+enum FollowSignal {
+    Item(RemoteChainHeadFollowItem),
+    Interrupt,
+}
+
+struct ChainConnection {
+    rpc: Arc<dyn JsonRpcConnection>,
+    request_ids: AtomicU64,
+    closed: AtomicBool,
+    follows: Mutex<HashMap<String, FollowState>>,
+    follows_by_remote: Mutex<HashMap<String, String>>,
+    pending_follow_events: Mutex<HashMap<String, Vec<RemoteChainHeadFollowItem>>>,
+    follow_setups: Mutex<HashMap<String, FollowSetup>>,
+    requests: Mutex<HashMap<String, PendingRequest>>,
+}
+
+impl ChainConnection {
+    fn new(rpc: Arc<dyn JsonRpcConnection>, spawner: Spawner) -> Arc<Self> {
+        let connection = Arc::new(Self {
+            rpc,
+            request_ids: AtomicU64::new(1),
+            closed: AtomicBool::new(false),
+            follows: Mutex::new(HashMap::new()),
+            follows_by_remote: Mutex::new(HashMap::new()),
+            pending_follow_events: Mutex::new(HashMap::new()),
+            follow_setups: Mutex::new(HashMap::new()),
+            requests: Mutex::new(HashMap::new()),
+        });
+        connection.clone().spawn_response_loop(spawner);
+        connection
+    }
+
+    fn spawn_response_loop(self: Arc<Self>, spawner: Spawner) {
+        let rpc = self.rpc.clone();
+        let fut = async move {
+            let mut responses = rpc.responses();
+            while let Some(response) = responses.next().await {
+                if let Err(failure) = self.handle_response(&response) {
+                    self.close_with_failure(failure);
+                    return;
+                }
+            }
+            self.close_with_failure(RuntimeFailure::unavailable(FOLLOW_METHOD));
+        };
+        (spawner)(fut.boxed());
+    }
+
+    fn is_closed(&self) -> bool {
+        self.closed.load(Ordering::Relaxed)
+    }
+
+    async fn request_value(
+        &self,
+        method: &'static str,
+        rpc_method: &'static str,
+        params: Value,
+    ) -> Result<Value, RuntimeFailure> {
+        let request_id = format!(
+            "truapi:{}",
+            self.request_ids.fetch_add(1, Ordering::Relaxed)
+        );
+        let (tx, rx) = oneshot::channel();
+        {
+            // Check `closed` and insert under the same lock `close_with_failure`
+            // takes, so the connection cannot drain the request map between the
+            // check and the insert and leave this request to hang forever.
+            let mut requests = self.requests.lock().unwrap();
+            if self.is_closed() {
+                return Err(RuntimeFailure::unavailable(method));
+            }
+            requests.insert(request_id.clone(), PendingRequest { method, tx });
+        }
+        self.rpc.send(
+            json!({
+                "jsonrpc": "2.0",
+                "id": request_id,
+                "method": rpc_method,
+                "params": params,
+            })
+            .to_string(),
+        );
+
+        match rx.await {
+            Ok(result) => result,
+            Err(_) => Err(RuntimeFailure::unavailable(method)),
+        }
+    }
+
+    fn follow_with_runtime(&self, local_follow_id: &str) -> bool {
+        self.follows
+            .lock()
+            .unwrap()
+            .get(local_follow_id)
+            .map(|follow| follow.with_runtime)
+            .unwrap_or(false)
+    }
+
+    fn remote_follow_id(&self, local_follow_id: &str) -> Option<String> {
+        self.follows
+            .lock()
+            .unwrap()
+            .get(local_follow_id)
+            .and_then(|follow| follow.remote_follow_id.clone())
+    }
+
+    /// Record intent to follow `local_follow_id`, attaching `sender` for a
+    /// follow subscriber. Idempotent: an existing follow keeps its
+    /// `with_runtime` flag and remote id; only the sender is (re)attached.
+    fn register_follow_intent(
+        &self,
+        local_follow_id: &str,
+        with_runtime: bool,
+        sender: Option<mpsc::UnboundedSender<FollowSignal>>,
+    ) {
+        let mut follows = self.follows.lock().unwrap();
+        match follows.get_mut(local_follow_id) {
+            Some(follow) => {
+                if sender.is_some() {
+                    follow.sender = sender;
+                }
+            }
+            None => {
+                follows.insert(
+                    local_follow_id.to_string(),
+                    FollowState {
+                        with_runtime,
+                        remote_follow_id: None,
+                        sender,
+                    },
+                );
+            }
+        }
+    }
+
+    /// Issue `chainHead_v1_follow` exactly once per local follow id and return
+    /// the remote subscription id. Concurrent callers for the same id share
+    /// one in-flight setup instead of each opening a duplicate remote
+    /// subscription that would then leak.
+    async fn ensure_remote_follow(
+        self: &Arc<Self>,
+        local_follow_id: String,
+        with_runtime: bool,
+    ) -> Result<String, RuntimeFailure> {
+        if let Some(remote_follow_id) = self.remote_follow_id(&local_follow_id) {
+            return Ok(remote_follow_id);
+        }
+
+        let setup = {
+            let mut setups = self.follow_setups.lock().unwrap();
+            if let Some(existing) = setups.get(&local_follow_id) {
+                existing.clone()
+            } else {
+                let connection = self.clone();
+                let id = local_follow_id.clone();
+                let setup: FollowSetup =
+                    async move { connection.run_follow_setup(id, with_runtime).await }
+                        .boxed()
+                        .shared();
+                setups.insert(local_follow_id.clone(), setup.clone());
+                setup
+            }
+        };
+
+        let result = setup.await;
+        // On failure, drop the cached setup so a later re-subscribe can retry.
+        // On success the established follow short-circuits the fast path above,
+        // and `remove_follow` clears the entry at teardown.
+        if result.is_err() {
+            self.follow_setups.lock().unwrap().remove(&local_follow_id);
+        }
+        result
+    }
+
+    /// Body of the single-flight follow setup: ensure the `FollowState`
+    /// exists, issue `chainHead_v1_follow`, and record the remote id.
+    async fn run_follow_setup(
+        self: Arc<Self>,
+        local_follow_id: String,
+        with_runtime: bool,
+    ) -> Result<String, RuntimeFailure> {
+        self.follows
+            .lock()
+            .unwrap()
+            .entry(local_follow_id.clone())
+            .or_insert_with(|| FollowState {
+                with_runtime,
+                remote_follow_id: None,
+                sender: None,
+            });
+
+        let remote_follow_id = match self
+            .request_value(FOLLOW_METHOD, "chainHead_v1_follow", json!([with_runtime]))
+            .await
+        {
+            Ok(Value::String(value)) => value,
+            Ok(_) => {
+                self.remove_follow(&local_follow_id);
+                return Err(RuntimeFailure::host_failure(
+                    FOLLOW_METHOD,
+                    "unexpected chainHead_v1_follow result",
+                ));
+            }
+            Err(failure) => {
+                self.remove_follow(&local_follow_id);
+                return Err(failure);
+            }
+        };
+
+        self.set_remote_follow_id(&local_follow_id, remote_follow_id.clone());
+        Ok(remote_follow_id)
+    }
+
+    fn set_remote_follow_id(&self, local_follow_id: &str, remote_follow_id: String) {
+        let attached = {
+            let mut follows = self.follows.lock().unwrap();
+            if let Some(follow) = follows.get_mut(local_follow_id) {
+                follow.remote_follow_id = Some(remote_follow_id.clone());
+                self.follows_by_remote
+                    .lock()
+                    .unwrap()
+                    .insert(remote_follow_id.clone(), local_follow_id.to_string());
+                true
+            } else {
+                false
+            }
+        };
+        if !attached {
+            // The local follow was torn down (stream dropped, connection
+            // closed) while `chainHead_v1_follow` was in flight. Release the
+            // now-orphaned remote subscription rather than leaking it on the
+            // node, and drop any events buffered for it.
+            self.send_unfollow(&remote_follow_id);
+            self.pending_follow_events
+                .lock()
+                .unwrap()
+                .remove(&remote_follow_id);
+            return;
+        }
+        let buffered = self
+            .pending_follow_events
+            .lock()
+            .unwrap()
+            .remove(&remote_follow_id)
+            .unwrap_or_default();
+        for event in buffered {
+            self.deliver_follow_event(local_follow_id, event);
+        }
+    }
+
+    fn remove_follow(&self, local_follow_id: &str) {
+        self.follow_setups.lock().unwrap().remove(local_follow_id);
+        if let Some(follow) = self.follows.lock().unwrap().remove(local_follow_id)
+            && let Some(remote_follow_id) = follow.remote_follow_id
+        {
+            self.follows_by_remote
+                .lock()
+                .unwrap()
+                .remove(&remote_follow_id);
+        }
+    }
+
+    fn unfollow(&self, local_follow_id: &str) {
+        let remote_follow_id = self.remote_follow_id(local_follow_id);
+        self.remove_follow(local_follow_id);
+        let Some(remote_follow_id) = remote_follow_id else {
+            return;
+        };
+        self.send_unfollow(&remote_follow_id);
+    }
+
+    /// Send a `chainHead_v1_unfollow` for `remote_follow_id`. Best-effort: a
+    /// closed connection simply drops the request.
+    fn send_unfollow(&self, remote_follow_id: &str) {
+        self.rpc.send(
+            json!({
+                "jsonrpc": "2.0",
+                "id": format!("truapi:{}", self.request_ids.fetch_add(1, Ordering::Relaxed)),
+                "method": "chainHead_v1_unfollow",
+                "params": [remote_follow_id],
+            })
+            .to_string(),
+        );
+    }
+
+    fn handle_response(&self, response: &str) -> Result<(), RuntimeFailure> {
+        let value: Value = serde_json::from_str(response).map_err(|error| {
+            RuntimeFailure::host_failure(FOLLOW_METHOD, format!("invalid json-rpc frame: {error}"))
+        })?;
+
+        if value.get("method") == Some(&Value::String("chainHead_v1_followEvent".to_string())) {
+            return self.handle_follow_notification(&value);
+        }
+
+        let Some(request_id) = value.get("id").and_then(json_id) else {
+            return Ok(());
+        };
+        let Some(pending) = self.requests.lock().unwrap().remove(&request_id) else {
+            return Ok(());
+        };
+
+        if let Some(result) = value.get("result") {
+            let _ = pending.tx.send(Ok(result.clone()));
+            return Ok(());
+        }
+
+        if let Some(error) = value.get("error") {
+            let reason = error
+                .get("message")
+                .and_then(Value::as_str)
+                .unwrap_or("json-rpc error")
+                .to_string();
+            let _ = pending
+                .tx
+                .send(Err(RuntimeFailure::host_failure(pending.method, reason)));
+            return Ok(());
+        }
+
+        let _ = pending.tx.send(Err(RuntimeFailure::host_failure(
+            pending.method,
+            "json-rpc response missing result and error",
+        )));
+        Ok(())
+    }
+
+    fn handle_follow_notification(&self, value: &Value) -> Result<(), RuntimeFailure> {
+        let params = value
+            .get("params")
+            .and_then(Value::as_object)
+            .ok_or_else(|| {
+                RuntimeFailure::host_failure(
+                    FOLLOW_METHOD,
+                    "missing chainHead_v1_followEvent params",
+                )
+            })?;
+        let remote_follow_id = params
+            .get("subscription")
+            .and_then(Value::as_str)
+            .ok_or_else(|| {
+                RuntimeFailure::host_failure(
+                    FOLLOW_METHOD,
+                    "missing chainHead_v1_followEvent subscription",
+                )
+            })?;
+        let event = parse_follow_event(params.get("result").ok_or_else(|| {
+            RuntimeFailure::host_failure(FOLLOW_METHOD, "missing chainHead_v1_followEvent result")
+        })?)?;
+        let local_follow_id = self
+            .follows_by_remote
+            .lock()
+            .unwrap()
+            .get(remote_follow_id)
+            .cloned();
+        match local_follow_id {
+            Some(local_follow_id) => self.deliver_follow_event(&local_follow_id, event),
+            None => {
+                let mut pending = self.pending_follow_events.lock().unwrap();
+                // Bound the buffer in both dimensions so a misbehaving node, or
+                // late events for a retired remote id, cannot grow memory
+                // without limit while a follow id is being established.
+                let known = pending.contains_key(remote_follow_id);
+                if !known && pending.len() >= MAX_PENDING_FOLLOW_EVENT_IDS {
+                    return Ok(());
+                }
+                let buffer = pending.entry(remote_follow_id.to_string()).or_default();
+                if buffer.len() >= MAX_PENDING_FOLLOW_EVENTS_PER_ID {
+                    return Ok(());
+                }
+                buffer.push(event);
+            }
+        }
+        Ok(())
+    }
+
+    fn deliver_follow_event(&self, local_follow_id: &str, event: RemoteChainHeadFollowItem) {
+        let sender = self
+            .follows
+            .lock()
+            .unwrap()
+            .get(local_follow_id)
+            .and_then(|follow| follow.sender.clone());
+        let is_stop = matches!(event, RemoteChainHeadFollowItem::Stop);
+        if let Some(sender) = sender {
+            let _ = sender.unbounded_send(FollowSignal::Item(event));
+        }
+        if is_stop {
+            self.remove_follow(local_follow_id);
+        }
+    }
+
+    fn close_with_failure(&self, failure: RuntimeFailure) {
+        // Flip `closed` while holding the requests lock so it is mutually
+        // exclusive with `request_value`'s check-and-insert: a request is
+        // either seen here and failed, or sees `closed` and bails, but never
+        // slips through to hang.
+        let requests = {
+            let mut requests = self.requests.lock().unwrap();
+            self.closed.store(true, Ordering::Relaxed);
+            std::mem::take(&mut *requests)
+        };
+        for (_, request) in requests {
+            let mapped = match failure.kind() {
+                RuntimeFailureKind::Unavailable => RuntimeFailure::unavailable(request.method),
+                RuntimeFailureKind::HostFailure => {
+                    RuntimeFailure::host_failure(request.method, failure.reason())
+                }
+            };
+            let _ = request.tx.send(Err(mapped));
+        }
+
+        let follows = std::mem::take(&mut *self.follows.lock().unwrap());
+        self.follows_by_remote.lock().unwrap().clear();
+        self.pending_follow_events.lock().unwrap().clear();
+        self.follow_setups.lock().unwrap().clear();
+        for (_, follow) in follows {
+            if let Some(sender) = follow.sender {
+                let _ = sender.unbounded_send(FollowSignal::Interrupt);
+            }
+        }
+    }
+}
+
+struct PendingRequest {
+    method: &'static str,
+    tx: oneshot::Sender<Result<Value, RuntimeFailure>>,
+}
+
+struct FollowState {
+    with_runtime: bool,
+    remote_follow_id: Option<String>,
+    sender: Option<mpsc::UnboundedSender<FollowSignal>>,
+}
+
+/// Subscription wrapper that runs an `on_drop` cleanup when the stream is
+/// dropped. Used by `remote_chain_head_follow` to send `chainHead_v1_unfollow`
+/// when the local follow stream is dropped.
+struct ManagedSubscription<T> {
+    inner: BoxStream<'static, T>,
+    on_drop: Option<Box<dyn FnOnce() + Send + Sync>>,
+}
+
+impl<T> ManagedSubscription<T> {
+    fn new(inner: BoxStream<'static, T>, on_drop: Option<Box<dyn FnOnce() + Send + Sync>>) -> Self {
+        Self { inner, on_drop }
+    }
+}
+
+impl<T> Drop for ManagedSubscription<T> {
+    fn drop(&mut self) {
+        if let Some(on_drop) = self.on_drop.take() {
+            on_drop();
+        }
+    }
+}
+
+impl<T> Stream for ManagedSubscription<T> {
+    type Item = T;
+
+    fn poll_next(self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Option<Self::Item>> {
+        let this = self.get_mut();
+        this.inner.as_mut().poll_next(cx)
+    }
+}
+
+fn parse_follow_event(value: &Value) -> Result<RemoteChainHeadFollowItem, RuntimeFailure> {
+    let event = value
+        .get("event")
+        .and_then(Value::as_str)
+        .ok_or_else(|| RuntimeFailure::host_failure(FOLLOW_METHOD, "missing event name"))?;
+    match event {
+        "initialized" => Ok(RemoteChainHeadFollowItem::Initialized {
+            finalized_block_hashes: decode_hex_vec_field(value, "finalizedBlockHashes")?,
+            finalized_block_runtime: value
+                .get("finalizedBlockRuntime")
+                .map(parse_runtime_type)
+                .transpose()
+                .map_err(|reason| RuntimeFailure::host_failure(FOLLOW_METHOD, reason))?,
+        }),
+        "newBlock" => Ok(RemoteChainHeadFollowItem::NewBlock {
+            block_hash: decode_hex_field(value, "blockHash")?,
+            parent_block_hash: decode_hex_field(value, "parentBlockHash")?,
+            new_runtime: value
+                .get("newRuntime")
+                .map(parse_runtime_type)
+                .transpose()
+                .map_err(|reason| RuntimeFailure::host_failure(FOLLOW_METHOD, reason))?,
+        }),
+        "bestBlockChanged" => Ok(RemoteChainHeadFollowItem::BestBlockChanged {
+            best_block_hash: decode_hex_field(value, "bestBlockHash")?,
+        }),
+        "finalized" => Ok(RemoteChainHeadFollowItem::Finalized {
+            finalized_block_hashes: decode_hex_vec_field(value, "finalizedBlockHashes")?,
+            pruned_block_hashes: decode_hex_vec_field(value, "prunedBlockHashes")?,
+        }),
+        "operationBodyDone" => Ok(RemoteChainHeadFollowItem::OperationBodyDone {
+            operation_id: string_field(value, "operationId")?,
+            value: decode_hex_vec_field(value, "value")?,
+        }),
+        "operationCallDone" => Ok(RemoteChainHeadFollowItem::OperationCallDone {
+            operation_id: string_field(value, "operationId")?,
+            output: decode_hex_field(value, "output")?,
+        }),
+        "operationStorageItems" => Ok(RemoteChainHeadFollowItem::OperationStorageItems {
+            operation_id: string_field(value, "operationId")?,
+            items: parse_storage_result_items(value)?,
+        }),
+        "operationStorageDone" => Ok(RemoteChainHeadFollowItem::OperationStorageDone {
+            operation_id: string_field(value, "operationId")?,
+        }),
+        "operationWaitingForContinue" => {
+            Ok(RemoteChainHeadFollowItem::OperationWaitingForContinue {
+                operation_id: string_field(value, "operationId")?,
+            })
+        }
+        "operationInaccessible" => Ok(RemoteChainHeadFollowItem::OperationInaccessible {
+            operation_id: string_field(value, "operationId")?,
+        }),
+        "operationError" => Ok(RemoteChainHeadFollowItem::OperationError {
+            operation_id: string_field(value, "operationId")?,
+            error: string_field(value, "error")?,
+        }),
+        "stop" => Ok(RemoteChainHeadFollowItem::Stop),
+        other => Err(RuntimeFailure::host_failure(
+            FOLLOW_METHOD,
+            format!("unsupported follow event {other}"),
+        )),
+    }
+}
+
+fn parse_storage_result_items(value: &Value) -> Result<Vec<StorageResultItem>, RuntimeFailure> {
+    let Some(items) = value.get("items").and_then(Value::as_array) else {
+        return Ok(Vec::new());
+    };
+    items
+        .iter()
+        .map(|item| -> Result<StorageResultItem, RuntimeFailure> {
+            let key = decode_hex_field(item, "key")?;
+            let value = optional_hex_field(item, "value")?;
+            let hash = optional_hex_field(item, "hash")?;
+            let closest_descendant_merkle_value =
+                optional_hex_field(item, "closestDescendantMerkleValue")?;
+            Ok(StorageResultItem {
+                key,
+                value,
+                hash,
+                closest_descendant_merkle_value,
+            })
+        })
+        .collect()
+}
+
+fn operation_started_result(
+    method: &'static str,
+    value: Value,
+) -> Result<OperationStartedResult, RuntimeFailure> {
+    let result = value
+        .get("result")
+        .and_then(Value::as_str)
+        .ok_or_else(|| RuntimeFailure::host_failure(method, "missing operation result kind"))?;
+    match result {
+        "started" => Ok(OperationStartedResult::Started {
+            operation_id: value
+                .get("operationId")
+                .and_then(Value::as_str)
+                .ok_or_else(|| RuntimeFailure::host_failure(method, "missing operation id"))?
+                .to_string(),
+        }),
+        "limitReached" => Ok(OperationStartedResult::LimitReached),
+        other => Err(RuntimeFailure::host_failure(
+            method,
+            format!("unexpected operation result {other}"),
+        )),
+    }
+}
+
+fn parse_runtime_type(value: &Value) -> Result<RuntimeType, String> {
+    let Some(kind) = value.get("type").and_then(Value::as_str) else {
+        return Ok(RuntimeType::Invalid {
+            error: "missing runtime type".to_string(),
+        });
+    };
+    match kind {
+        "valid" => {
+            let spec = value
+                .get("spec")
+                .and_then(Value::as_object)
+                .ok_or_else(|| "missing valid runtime spec".to_string())?;
+            let apis = spec
+                .get("apis")
+                .and_then(Value::as_object)
+                .map(|apis| {
+                    let mut entries = apis
+                        .iter()
+                        .filter_map(|(name, version)| {
+                            version.as_u64().map(|version| RuntimeApi {
+                                name: name.clone(),
+                                version: version as u32,
+                            })
+                        })
+                        .collect::<Vec<_>>();
+                    entries.sort_by(|left, right| left.name.cmp(&right.name));
+                    entries
+                })
+                .unwrap_or_default();
+            Ok(RuntimeType::Valid(RuntimeSpec {
+                spec_name: string_object_field(spec, "specName")?,
+                impl_name: string_object_field(spec, "implName")?,
+                spec_version: u32_object_field(spec, "specVersion")?,
+                impl_version: u32_object_field(spec, "implVersion")?,
+                transaction_version: spec
+                    .get("transactionVersion")
+                    .and_then(Value::as_u64)
+                    .map(|value| value as u32),
+                apis,
+            }))
+        }
+        "invalid" => Ok(RuntimeType::Invalid {
+            error: value
+                .get("error")
+                .and_then(Value::as_str)
+                .unwrap_or("invalid runtime")
+                .to_string(),
+        }),
+        other => Err(format!("unsupported runtime type {other}")),
+    }
+}
+
+fn encode_storage_query_item(item: &StorageQueryItem) -> Value {
+    let query_type = match item.query_type {
+        StorageQueryType::Value => "value",
+        StorageQueryType::Hash => "hash",
+        StorageQueryType::ClosestDescendantMerkleValue => "closestDescendantMerkleValue",
+        StorageQueryType::DescendantsValues => "descendantsValues",
+        StorageQueryType::DescendantsHashes => "descendantsHashes",
+    };
+    let mut map = Map::new();
+    map.insert("key".to_string(), Value::String(encode_hex(&item.key)));
+    map.insert("type".to_string(), Value::String(query_type.to_string()));
+    Value::Object(map)
+}
+
+fn json_id(value: &Value) -> Option<String> {
+    match value {
+        Value::String(text) => Some(text.clone()),
+        Value::Number(number) => Some(number.to_string()),
+        _ => None,
+    }
+}
+
+fn decode_hex_field(value: &Value, field: &str) -> Result<Vec<u8>, RuntimeFailure> {
+    let string = string_field(value, field)?;
+    decode_hex(&string).map_err(|reason| RuntimeFailure::host_failure(FOLLOW_METHOD, reason))
+}
+
+fn optional_hex_field(value: &Value, field: &str) -> Result<Option<Vec<u8>>, RuntimeFailure> {
+    match value.get(field) {
+        None | Some(Value::Null) => Ok(None),
+        Some(Value::String(text)) => decode_hex(text)
+            .map(Some)
+            .map_err(|reason| RuntimeFailure::host_failure(FOLLOW_METHOD, reason)),
+        Some(_) => Err(RuntimeFailure::host_failure(
+            FOLLOW_METHOD,
+            format!("invalid {field}"),
+        )),
+    }
+}
+
+fn decode_hex_vec_field(value: &Value, field: &str) -> Result<Vec<Vec<u8>>, RuntimeFailure> {
+    let Some(values) = value.get(field).and_then(Value::as_array) else {
+        return Ok(Vec::new());
+    };
+    values
+        .iter()
+        .map(|value| {
+            value
+                .as_str()
+                .ok_or_else(|| {
+                    RuntimeFailure::host_failure(FOLLOW_METHOD, format!("invalid {field}"))
+                })
+                .and_then(|value| {
+                    decode_hex(value)
+                        .map_err(|reason| RuntimeFailure::host_failure(FOLLOW_METHOD, reason))
+                })
+        })
+        .collect()
+}
+
+fn string_field(value: &Value, field: &str) -> Result<String, RuntimeFailure> {
+    value
+        .get(field)
+        .and_then(Value::as_str)
+        .map(ToString::to_string)
+        .ok_or_else(|| RuntimeFailure::host_failure(FOLLOW_METHOD, format!("missing {field}")))
+}
+
+fn string_object_field(value: &Map<String, Value>, field: &str) -> Result<String, String> {
+    value
+        .get(field)
+        .and_then(Value::as_str)
+        .map(ToString::to_string)
+        .ok_or_else(|| format!("missing {field}"))
+}
+
+fn u32_object_field(value: &Map<String, Value>, field: &str) -> Result<u32, String> {
+    value
+        .get(field)
+        .and_then(Value::as_u64)
+        .map(|value| value as u32)
+        .ok_or_else(|| format!("missing {field}"))
+}
+
+/// Encode a byte slice as a `0x`-prefixed lowercase hex string.
+pub(crate) fn encode_hex(value: &[u8]) -> String {
+    let mut out = String::from("0x");
+    for byte in value {
+        out.push_str(&format!("{byte:02x}"));
+    }
+    out
+}
+
+fn decode_hex(value: &str) -> Result<Vec<u8>, String> {
+    let value = value.strip_prefix("0x").unwrap_or(value);
+    if !value.len().is_multiple_of(2) {
+        return Err("invalid hex length".to_string());
+    }
+
+    let mut out = Vec::with_capacity(value.len() / 2);
+    let bytes = value.as_bytes();
+    let mut index = 0;
+    while index < bytes.len() {
+        let chunk = std::str::from_utf8(&bytes[index..index + 2]).map_err(|_| "invalid hex")?;
+        let byte = u8::from_str_radix(chunk, 16).map_err(|_| "invalid hex")?;
+        out.push(byte);
+        index += 2;
+    }
+    Ok(out)
+}
+
+// ---------------------------------------------------------------------------
+// Spawner adapter for the chain runtime.
+// ---------------------------------------------------------------------------
+//
+// `ChainRuntime` uses a small wrapper future type so callers can construct
+// the runtime with a generic `Spawner` without exposing the `BoxFuture`
+// requirement in the public signature.
+
+/// Convenience: build a [`Spawner`] that runs each spawned future on a fresh
+/// OS thread driven by [`futures::executor::block_on`]. Useful for tests and
+/// embedders that have not yet wired a real runtime. Not available on wasm32
+/// since the platform has no threads.
+#[cfg(not(target_arch = "wasm32"))]
+pub fn thread_per_task_spawner() -> Spawner {
+    Arc::new(|fut: futures::future::BoxFuture<'static, ()>| {
+        std::thread::spawn(move || futures::executor::block_on(fut));
+    })
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use async_trait::async_trait;
+    use futures::SinkExt;
+    use futures::channel::mpsc as fut_mpsc;
+    use futures::stream::BoxStream;
+    use std::sync::atomic::{AtomicUsize, Ordering};
+
+    fn spawner_for_tests() -> Spawner {
+        thread_per_task_spawner()
+    }
+
+    /// Provider that echoes a canned response for every request it sees,
+    /// driven by a `respond` closure. The closure receives each json-rpc
+    /// request string and returns the response string the test wants the
+    /// server to deliver. Keeps the response loop synchronized with the
+    /// request stream so there is no race between `send` and the response
+    /// loop draining frames before pending requests have registered.
+    type Responder = Arc<dyn Fn(&str) -> Option<String> + Send + Sync>;
+
+    struct ScriptedProvider {
+        respond: Responder,
+        sent: Arc<Mutex<Vec<String>>>,
+        sender: Arc<Mutex<Option<fut_mpsc::UnboundedSender<String>>>>,
+        receiver: Arc<Mutex<Option<fut_mpsc::UnboundedReceiver<String>>>>,
+        connect_calls: Arc<AtomicUsize>,
+    }
+
+    impl ScriptedProvider {
+        fn new<F>(respond: F) -> Self
+        where
+            F: Fn(&str) -> Option<String> + Send + Sync + 'static,
+        {
+            let (tx, rx) = fut_mpsc::unbounded();
+            Self {
+                respond: Arc::new(respond),
+                sent: Arc::new(Mutex::new(Vec::new())),
+                sender: Arc::new(Mutex::new(Some(tx))),
+                receiver: Arc::new(Mutex::new(Some(rx))),
+                connect_calls: Arc::new(AtomicUsize::new(0)),
+            }
+        }
+    }
+
+    struct ScriptedConnection {
+        respond: Responder,
+        sent: Arc<Mutex<Vec<String>>>,
+        sender: Arc<Mutex<Option<fut_mpsc::UnboundedSender<String>>>>,
+        receiver: Mutex<Option<fut_mpsc::UnboundedReceiver<String>>>,
+    }
+
+    impl JsonRpcConnection for ScriptedConnection {
+        fn send(&self, request: String) {
+            self.sent.lock().unwrap().push(request.clone());
+            if let Some(response) = (self.respond)(&request)
+                && let Some(sender) = self.sender.lock().unwrap().as_ref()
+            {
+                let _ = sender.unbounded_send(response);
+            }
+        }
+        fn responses(&self) -> BoxStream<'static, String> {
+            let rx = self
+                .receiver
+                .lock()
+                .unwrap()
+                .take()
+                .expect("ScriptedConnection::responses called twice");
+            rx.boxed()
+        }
+    }
+
+    #[async_trait]
+    impl RuntimeChainProvider for ScriptedProvider {
+        async fn connect(
+            &self,
+            _genesis_hash: Vec<u8>,
+        ) -> Result<Arc<dyn JsonRpcConnection>, RuntimeFailure> {
+            self.connect_calls.fetch_add(1, Ordering::SeqCst);
+            let receiver = self.receiver.lock().unwrap().take();
+            Ok(Arc::new(ScriptedConnection {
+                respond: self.respond.clone(),
+                sent: self.sent.clone(),
+                sender: self.sender.clone(),
+                receiver: Mutex::new(receiver),
+            }))
+        }
+    }
+
+    /// Connection backed by an mpsc channel: tests push frames into `tx`
+    /// to simulate asynchronous notifications. Used for follow-event tests.
+    struct ChannelConnection {
+        rx: Mutex<Option<fut_mpsc::UnboundedReceiver<String>>>,
+        sent: Arc<Mutex<Vec<String>>>,
+    }
+
+    impl JsonRpcConnection for ChannelConnection {
+        fn send(&self, request: String) {
+            self.sent.lock().unwrap().push(request);
+        }
+        fn responses(&self) -> BoxStream<'static, String> {
+            let rx = self
+                .rx
+                .lock()
+                .unwrap()
+                .take()
+                .expect("responses taken twice");
+            rx.boxed()
+        }
+    }
+
+    struct ChannelProvider {
+        sender: Arc<Mutex<Option<fut_mpsc::UnboundedSender<String>>>>,
+        receiver: Arc<Mutex<Option<fut_mpsc::UnboundedReceiver<String>>>>,
+        sent: Arc<Mutex<Vec<String>>>,
+    }
+
+    impl ChannelProvider {
+        fn new() -> Self {
+            let (tx, rx) = fut_mpsc::unbounded();
+            Self {
+                sender: Arc::new(Mutex::new(Some(tx))),
+                receiver: Arc::new(Mutex::new(Some(rx))),
+                sent: Arc::new(Mutex::new(Vec::new())),
+            }
+        }
+
+        fn take_sender(&self) -> fut_mpsc::UnboundedSender<String> {
+            self.sender
+                .lock()
+                .unwrap()
+                .take()
+                .expect("sender taken twice")
+        }
+    }
+
+    #[async_trait]
+    impl RuntimeChainProvider for ChannelProvider {
+        async fn connect(
+            &self,
+            _genesis_hash: Vec<u8>,
+        ) -> Result<Arc<dyn JsonRpcConnection>, RuntimeFailure> {
+            let rx = self.receiver.lock().unwrap().take();
+            Ok(Arc::new(ChannelConnection {
+                rx: Mutex::new(rx),
+                sent: self.sent.clone(),
+            }))
+        }
+    }
+
+    #[test]
+    fn unavailable_provider_surfaces_failure() {
+        let provider = Arc::new(UnavailableChainProvider);
+        let result = futures::executor::block_on(provider.connect(vec![0u8; 32]));
+        let err = match result {
+            Ok(_) => panic!("expected failure"),
+            Err(err) => err,
+        };
+        assert_eq!(err.kind(), RuntimeFailureKind::Unavailable);
+        assert_eq!(err.method(), "remote_chain_connect");
+    }
+
+    /// Find the json-rpc request id of the just-sent frame so the scripted
+    /// responder can mirror it back to the dispatcher.
+    fn extract_id(request: &str) -> Option<String> {
+        let value: Value = serde_json::from_str(request).ok()?;
+        value.get("id")?.as_str().map(ToString::to_string)
+    }
+
+    #[test]
+    fn header_request_routes_through_provider() {
+        let provider = Arc::new(ScriptedProvider::new(|request| {
+            let id = extract_id(request).unwrap();
+            if request.contains("chainHead_v1_follow") {
+                Some(format!(
+                    r#"{{"jsonrpc":"2.0","id":"{id}","result":"REMOTE-FOLLOW"}}"#
+                ))
+            } else if request.contains("chainHead_v1_header") {
+                Some(format!(
+                    r#"{{"jsonrpc":"2.0","id":"{id}","result":"0xdeadbeef"}}"#
+                ))
+            } else {
+                None
+            }
+        }));
+        let runtime = ChainRuntime::new(provider.clone(), spawner_for_tests());
+        let response = futures::executor::block_on(runtime.remote_chain_head_header(
+            RemoteChainHeadHeaderRequest {
+                genesis_hash: vec![0u8; 32],
+                follow_subscription_id: "local-follow".to_string(),
+                hash: vec![1u8; 32],
+            },
+        ))
+        .expect("ok response");
+        assert_eq!(response.header, Some(vec![0xde, 0xad, 0xbe, 0xef]));
+        assert_eq!(provider.connect_calls.load(Ordering::SeqCst), 1);
+        let sent = provider.sent.lock().unwrap().clone();
+        assert_eq!(sent.len(), 2);
+        assert!(sent[0].contains("chainHead_v1_follow"));
+        assert!(sent[1].contains("chainHead_v1_header"));
+    }
+
+    #[test]
+    fn unknown_genesis_chain_spec_propagates_failure() {
+        let provider = Arc::new(UnavailableChainProvider);
+        let runtime = ChainRuntime::new(provider, spawner_for_tests());
+        let err = match futures::executor::block_on(
+            runtime.remote_chain_spec_chain_name(vec![0u8; 32]),
+        ) {
+            Ok(_) => panic!("expected failure"),
+            Err(err) => err,
+        };
+        assert_eq!(err.kind(), RuntimeFailureKind::Unavailable);
+        assert_eq!(err.method(), "remote_chain_spec_chain_name");
+    }
+
+    #[test]
+    fn json_rpc_error_becomes_host_failure() {
+        let provider = Arc::new(ScriptedProvider::new(|request| {
+            let id = extract_id(request).unwrap();
+            Some(format!(
+                r#"{{"jsonrpc":"2.0","id":"{id}","error":{{"code":-32601,"message":"method not found"}}}}"#
+            ))
+        }));
+        let runtime = ChainRuntime::new(provider, spawner_for_tests());
+        let err = match futures::executor::block_on(
+            runtime.remote_chain_spec_chain_name(vec![0u8; 32]),
+        ) {
+            Ok(_) => panic!("expected failure"),
+            Err(err) => err,
+        };
+        assert_eq!(err.kind(), RuntimeFailureKind::HostFailure);
+        assert!(
+            err.reason().contains("method not found"),
+            "unexpected reason: {}",
+            err.reason()
+        );
+    }
+
+    #[test]
+    fn follow_event_initialized_translates_to_v01_item() {
+        let provider = Arc::new(ChannelProvider::new());
+        let tx = provider.take_sender();
+        let runtime = ChainRuntime::new(provider.clone(), spawner_for_tests());
+
+        // The follow setup needs to wait for the rpc response, so we splice
+        // it in before starting the subscription.
+        let mut tx_owned = tx.clone();
+        futures::executor::block_on(async move {
+            tx_owned
+                .send(r#"{"jsonrpc":"2.0","id":"truapi:1","result":"REMOTE-FOLLOW"}"#.to_string())
+                .await
+                .unwrap();
+        });
+
+        let mut stream = runtime.remote_chain_head_follow(
+            "local-follow".to_string(),
+            RemoteChainHeadFollowRequest {
+                genesis_hash: vec![0u8; 32],
+                with_runtime: false,
+            },
+        );
+
+        // Now push a follow event keyed by remote subscription id.
+        let mut tx_owned = tx.clone();
+        futures::executor::block_on(async move {
+            tx_owned.send(
+                r#"{"jsonrpc":"2.0","method":"chainHead_v1_followEvent","params":{"subscription":"REMOTE-FOLLOW","result":{"event":"initialized","finalizedBlockHashes":["0xaabbccdd"]}}}"#
+                    .to_string(),
+            ).await.unwrap();
+            tx_owned.send(
+                r#"{"jsonrpc":"2.0","method":"chainHead_v1_followEvent","params":{"subscription":"REMOTE-FOLLOW","result":{"event":"stop"}}}"#
+                    .to_string(),
+            ).await.unwrap();
+        });
+
+        let items: Vec<_> = futures::executor::block_on(async {
+            let mut out = Vec::new();
+            while let Some(item) = stream.next().await {
+                let is_stop = matches!(item, RemoteChainHeadFollowItem::Stop);
+                out.push(item);
+                if is_stop {
+                    break;
+                }
+            }
+            out
+        });
+
+        match &items[0] {
+            RemoteChainHeadFollowItem::Initialized {
+                finalized_block_hashes,
+                finalized_block_runtime,
+            } => {
+                assert_eq!(finalized_block_hashes, &vec![vec![0xaa, 0xbb, 0xcc, 0xdd]]);
+                assert!(finalized_block_runtime.is_none());
+            }
+            other => panic!("expected Initialized, got {other:?}"),
+        }
+        assert!(matches!(items[1], RemoteChainHeadFollowItem::Stop));
+    }
+
+    #[test]
+    fn drop_follow_stream_sends_unfollow() {
+        let provider = Arc::new(ChannelProvider::new());
+        let tx = provider.take_sender();
+        let runtime = ChainRuntime::new(provider.clone(), spawner_for_tests());
+        let sent = provider.sent.clone();
+
+        // Pre-load the follow setup response.
+        let mut tx_owned = tx.clone();
+        futures::executor::block_on(async move {
+            tx_owned
+                .send(r#"{"jsonrpc":"2.0","id":"truapi:1","result":"REMOTE-FOLLOW"}"#.to_string())
+                .await
+                .unwrap();
+        });
+
+        let stream = runtime.remote_chain_head_follow(
+            "local-follow".to_string(),
+            RemoteChainHeadFollowRequest {
+                genesis_hash: vec![0u8; 32],
+                with_runtime: false,
+            },
+        );
+
+        // Wait until the follow setup roundtrips and lands in `sent`.
+        // Generous timeout so the test stays robust under loaded CI runners
+        // where the spawner can be slow to schedule the request task.
+        for _ in 0..500 {
+            if !sent.lock().unwrap().is_empty() {
+                break;
+            }
+            std::thread::sleep(std::time::Duration::from_millis(10));
+        }
+
+        drop(stream);
+
+        // Wait for the cleanup task to run and emit the unfollow request.
+        for _ in 0..500 {
+            if sent.lock().unwrap().len() >= 2 {
+                break;
+            }
+            std::thread::sleep(std::time::Duration::from_millis(10));
+        }
+
+        let messages = sent.lock().unwrap().clone();
+        assert!(
+            messages.iter().any(|m| m.contains("chainHead_v1_unfollow")),
+            "unfollow not sent; messages: {messages:?}",
+        );
+    }
+
+    #[test]
+    fn encode_hex_round_trip() {
+        let bytes = vec![0x00u8, 0x12, 0xab, 0xff];
+        let s = encode_hex(&bytes);
+        assert_eq!(s, "0x0012abff");
+        assert_eq!(decode_hex(&s).unwrap(), bytes);
+    }
+
+    #[test]
+    fn parse_runtime_type_valid_sorts_apis() {
+        let value: Value = serde_json::from_str(
+            r#"{"type":"valid","spec":{"specName":"polkadot","implName":"parity-polkadot","specVersion":1000,"implVersion":1,"transactionVersion":24,"apis":{"0xbeef":2,"0xbabe":4}}}"#,
+        )
+        .unwrap();
+        let runtime_type = parse_runtime_type(&value).unwrap();
+        match runtime_type {
+            RuntimeType::Valid(spec) => {
+                assert_eq!(spec.apis.len(), 2);
+                assert_eq!(spec.apis[0].name, "0xbabe");
+                assert_eq!(spec.apis[1].name, "0xbeef");
+                assert_eq!(spec.transaction_version, Some(24));
+            }
+            other => panic!("expected Valid, got {other:?}"),
+        }
+    }
+}
diff --git a/rust/crates/truapi-server/src/core.rs b/rust/crates/truapi-server/src/core.rs
new file mode 100644
index 00000000..3bd9cfeb
--- /dev/null
+++ b/rust/crates/truapi-server/src/core.rs
@@ -0,0 +1,421 @@
+//! `TrUApiCore`: the entrypoint a host wraps around a `truapi::api::TrUApi`
+//! implementation (direct path) or a `truapi_platform::Platform`
+//! implementation (platform path).
+//!
+//! Direct path: `TrUApiCore::new(host)` accepts anything implementing
+//! the unified [`truapi::api::TrUApi`] super-trait. Useful for unit tests
+//! and bespoke hosts.
+//!
+//! Platform path: [`TrUApiCore::from_platform`] takes a
+//! [`truapi_platform::Platform`] and wires it through
+//! [`crate::runtime::PlatformRuntimeHost`] before registering with the
+//! generated dispatcher. This is the path real platform shims (UniFFI,
+//! wasm-bindgen, ws-bridge, ...) take.
+
+use std::sync::{Arc, Mutex};
+
+use parity_scale_codec::{Decode, Encode};
+use truapi::api::TrUApi;
+use truapi_platform::Platform;
+
+use crate::generated::dispatcher;
+use crate::host_logic::session::SessionState;
+use crate::runtime::PlatformRuntimeHost;
+use crate::subscription::Spawner;
+use crate::{Dispatcher, ProtocolMessage, Transport};
+
+/// Top-level core. Owns the dispatcher and, on the platform path, the shared
+/// session-state holder.
+pub struct TrUApiCore {
+    dispatcher: Dispatcher,
+    /// Always present; empty for [`Self::new`] (no platform feeding it),
+    /// connected to a [`PlatformRuntimeHost`] for [`Self::from_platform`].
+    session_state: Arc<SessionState>,
+}
+
+impl TrUApiCore {
+    /// Build a core around a direct `TrUApi` implementation. The session
+    /// state holder is unused on this path (no platform pushes updates),
+    /// but is created anyway so the public API surface stays consistent.
+    /// Subscription work runs on `spawner`.
+    pub fn new<P>(host: Arc<P>, spawner: Spawner) -> Self
+    where
+        P: TrUApi + 'static,
+    {
+        let mut dispatcher = Dispatcher::new(spawner);
+        dispatcher::register(&mut dispatcher, host);
+        Self {
+            dispatcher,
+            session_state: SessionState::new(),
+        }
+    }
+
+    /// Build a core around a [`Platform`] implementation. Wraps the platform
+    /// in a [`PlatformRuntimeHost`] before registering with the dispatcher.
+    /// Subscription work runs on `spawner`.
+    pub fn from_platform<P>(platform: Arc<P>, spawner: Spawner) -> Self
+    where
+        P: Platform + 'static,
+    {
+        let runtime = Arc::new(PlatformRuntimeHost::new(platform, spawner.clone()));
+        let session_state = runtime.session_state();
+        let mut dispatcher = Dispatcher::new(spawner);
+        dispatcher::register(&mut dispatcher, runtime);
+        Self {
+            dispatcher,
+            session_state,
+        }
+    }
+
+    /// Handle to the shared session-state holder. Platform bridges push
+    /// `setActiveSession` / `clearActiveSession` notifications through this.
+    pub fn session_state(&self) -> Arc<SessionState> {
+        self.session_state.clone()
+    }
+
+    /// Asynchronous form of [`Self::receive_from_product`]. Decodes the
+    /// incoming frame, runs it through the dispatcher, and returns the
+    /// SCALE-encoded response (if any).
+    pub async fn receive_from_product_async(&self, frame: &[u8]) -> Option<Vec<u8>> {
+        let message = ProtocolMessage::decode(&mut &*frame).ok()?;
+        let transport = Arc::new(ResponseTransport::default());
+        self.dispatcher
+            .dispatch(message, transport.clone() as Arc<dyn Transport>)
+            .await;
+        transport.take().map(|response| response.encode())
+    }
+
+    /// Synchronous wrapper that blocks the current thread until the inner
+    /// future resolves. Convenient for embedding contexts (e.g. UniFFI) that
+    /// don't already drive an async runtime.
+    pub fn receive_from_product(&self, frame: &[u8]) -> Option<Vec<u8>> {
+        futures::executor::block_on(self.receive_from_product_async(frame))
+    }
+
+    /// Dispatch an already-decoded protocol message through the underlying
+    /// dispatcher. Bridges that own a long-lived transport (e.g. WebSocket,
+    /// JS callback) call this directly so subscription items flow back
+    /// through the bridge transport instead of the single-slot capture used
+    /// by [`Self::receive_from_product`].
+    pub async fn dispatch(&self, message: ProtocolMessage, transport: Arc<dyn Transport>) {
+        self.dispatcher.dispatch(message, transport).await;
+    }
+}
+
+/// Single-slot transport that captures the next response the dispatcher
+/// emits. Used by [`TrUApiCore::receive_from_product`] to bridge between the
+/// dispatcher's push model and the synchronous "decode in, encoded out"
+/// shape exposed to embedders.
+#[derive(Default)]
+struct ResponseTransport {
+    response: Mutex<Option<ProtocolMessage>>,
+}
+
+impl ResponseTransport {
+    fn take(&self) -> Option<ProtocolMessage> {
+        self.response.lock().unwrap().take()
+    }
+}
+
+impl Transport for ResponseTransport {
+    fn send(&self, message: ProtocolMessage) {
+        *self.response.lock().unwrap() = Some(message);
+    }
+
+    fn on_message(
+        &self,
+        _handler: Box<dyn Fn(ProtocolMessage) + Send + Sync>,
+    ) -> Box<dyn FnOnce()> {
+        Box::new(|| {})
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use futures::stream::{self, BoxStream};
+    use parity_scale_codec::Encode;
+    use truapi::v01;
+    use truapi::versioned::local_storage::{
+        HostLocalStorageClearRequest, HostLocalStorageReadRequest, HostLocalStorageWriteRequest,
+    };
+    use truapi::versioned::notifications::HostPushNotificationRequest;
+    use truapi::versioned::permissions::RemotePermissionRequest;
+    use truapi::versioned::system::{HostFeatureSupportedRequest, HostFeatureSupportedResponse};
+    use truapi_platform::{
+        ChainProvider, Features, JsonRpcConnection, Navigation, Notifications, Permissions, Storage,
+    };
+
+    use crate::frame::{FrameKind, Payload, compose_action};
+
+    struct StubPlatform;
+
+    impl Storage for StubPlatform {
+        async fn read(
+            &self,
+            _key: String,
+        ) -> Result<Option<Vec<u8>>, v01::HostLocalStorageReadError> {
+            Ok(None)
+        }
+        async fn write(
+            &self,
+            _key: String,
+            _value: Vec<u8>,
+        ) -> Result<(), v01::HostLocalStorageReadError> {
+            Ok(())
+        }
+        async fn clear(&self, _key: String) -> Result<(), v01::HostLocalStorageReadError> {
+            Ok(())
+        }
+    }
+
+    impl Navigation for StubPlatform {
+        async fn navigate_to(&self, _url: String) -> Result<(), v01::HostNavigateToError> {
+            Ok(())
+        }
+    }
+
+    impl Notifications for StubPlatform {
+        async fn push_notification(
+            &self,
+            _notification: v01::HostPushNotificationRequest,
+        ) -> Result<(), v01::GenericError> {
+            Ok(())
+        }
+    }
+
+    impl Permissions for StubPlatform {
+        async fn device_permission(
+            &self,
+            _request: v01::HostDevicePermissionRequest,
+        ) -> Result<v01::HostDevicePermissionResponse, v01::GenericError> {
+            Ok(v01::HostDevicePermissionResponse { granted: true })
+        }
+        async fn remote_permission(
+            &self,
+            _request: v01::RemotePermissionRequest,
+        ) -> Result<v01::RemotePermissionResponse, v01::GenericError> {
+            Ok(v01::RemotePermissionResponse { granted: true })
+        }
+    }
+
+    impl Features for StubPlatform {
+        async fn feature_supported(
+            &self,
+            request: HostFeatureSupportedRequest,
+        ) -> Result<HostFeatureSupportedResponse, v01::GenericError> {
+            let HostFeatureSupportedRequest::V1(_) = request;
+            Ok(HostFeatureSupportedResponse::V1(
+                v01::HostFeatureSupportedResponse { supported: true },
+            ))
+        }
+    }
+
+    struct DeadConnection;
+    impl JsonRpcConnection for DeadConnection {
+        fn send(&self, _request: String) {}
+        fn responses(&self) -> BoxStream<'static, String> {
+            Box::pin(stream::empty())
+        }
+    }
+
+    impl ChainProvider for StubPlatform {
+        async fn connect(
+            &self,
+            _genesis_hash: Vec<u8>,
+        ) -> Result<Box<dyn JsonRpcConnection>, v01::GenericError> {
+            Ok(Box::new(DeadConnection))
+        }
+    }
+
+    #[test]
+    fn from_platform_dispatches_feature_supported() {
+        let core = TrUApiCore::from_platform(
+            Arc::new(StubPlatform),
+            crate::subscription::thread_per_subscription_spawner(),
+        );
+        let request = HostFeatureSupportedRequest::V1(v01::HostFeatureSupportedRequest::Chain {
+            genesis_hash: vec![0u8; 32],
+        });
+        let frame = ProtocolMessage {
+            request_id: "p:1".into(),
+            payload: Payload {
+                tag: compose_action("system_feature_supported", FrameKind::Request),
+                value: request.encode(),
+            },
+        };
+        let encoded = frame.encode();
+        let response_bytes = core
+            .receive_from_product(&encoded)
+            .expect("dispatcher should emit a response");
+        let response = ProtocolMessage::decode(&mut &response_bytes[..]).expect("decode response");
+        assert_eq!(response.request_id, "p:1");
+        assert_eq!(
+            response.payload.tag,
+            compose_action("system_feature_supported", FrameKind::Response),
+        );
+        // Wire payload is `Result<Ok, Err>`-shaped:
+        // [Ok disc=0x00][V1 variant 0x00][supported=1]
+        assert_eq!(response.payload.value, vec![0x00, 0x00, 0x01]);
+    }
+
+    /// Drive a request frame through `TrUApiCore::receive_from_product`,
+    /// decode the response envelope, and return its payload bytes (without
+    /// the wrapping ProtocolMessage). Shared by the runtime-delegation
+    /// tests below.
+    fn run_request(core: &TrUApiCore, method: &str, request_bytes: Vec<u8>) -> Vec<u8> {
+        let frame = ProtocolMessage {
+            request_id: "p:1".into(),
+            payload: Payload {
+                tag: compose_action(method, FrameKind::Request),
+                value: request_bytes,
+            },
+        };
+        let response_bytes = core
+            .receive_from_product(&frame.encode())
+            .expect("dispatcher should emit a response");
+        let response = ProtocolMessage::decode(&mut &response_bytes[..]).expect("decode response");
+        assert_eq!(response.request_id, "p:1");
+        assert_eq!(
+            response.payload.tag,
+            compose_action(method, FrameKind::Response),
+        );
+        response.payload.value
+    }
+
+    fn make_core() -> TrUApiCore {
+        TrUApiCore::from_platform(
+            Arc::new(StubPlatform),
+            crate::subscription::thread_per_subscription_spawner(),
+        )
+    }
+
+    #[test]
+    fn local_storage_read_round_trips_none() {
+        let core = make_core();
+        let request = HostLocalStorageReadRequest::V1(v01::HostLocalStorageReadRequest {
+            key: "missing".into(),
+        });
+        let payload = run_request(&core, "local_storage_read", request.encode());
+        // Ok disc 0x00, V1 variant 0x00, Option::None = 0x00.
+        assert_eq!(payload, vec![0x00, 0x00, 0x00]);
+    }
+
+    #[test]
+    fn local_storage_write_round_trips_unit_ok() {
+        let core = make_core();
+        let request = HostLocalStorageWriteRequest::V1(v01::HostLocalStorageWriteRequest {
+            key: "k".into(),
+            value: vec![1, 2, 3],
+        });
+        let payload = run_request(&core, "local_storage_write", request.encode());
+        // Ok disc 0x00, V1 variant 0x00.
+        assert_eq!(payload, vec![0x00, 0x00]);
+    }
+
+    #[test]
+    fn local_storage_clear_round_trips_unit_ok() {
+        let core = make_core();
+        let request =
+            HostLocalStorageClearRequest::V1(v01::HostLocalStorageClearRequest { key: "k".into() });
+        let payload = run_request(&core, "local_storage_clear", request.encode());
+        // Ok disc 0x00, V1 variant 0x00.
+        assert_eq!(payload, vec![0x00, 0x00]);
+    }
+
+    #[test]
+    fn send_push_notification_is_unavailable() {
+        let core = make_core();
+        let request = HostPushNotificationRequest::V1(v01::HostPushNotificationRequest {
+            text: "hi".into(),
+            deeplink: None,
+            scheduled_at: None,
+        });
+        let payload = run_request(
+            &core,
+            "notifications_send_push_notification",
+            request.encode(),
+        );
+        // Notifications are not modeled by the v0.1 platform contract, so the
+        // runtime returns CallError::unavailable(): Err disc 0x01, HostFailure
+        // variant 0x04, then the SCALE-encoded "unavailable" reason.
+        let mut expected = vec![0x01u8, 0x04u8];
+        "unavailable".to_string().encode_to(&mut expected);
+        assert_eq!(payload, expected);
+    }
+
+    #[test]
+    fn request_remote_permission_round_trips_granted() {
+        let core = make_core();
+        let request = RemotePermissionRequest::V1(v01::RemotePermissionRequest {
+            permission: v01::RemotePermission::ChainSubmit,
+        });
+        let payload = run_request(
+            &core,
+            "permissions_request_remote_permission",
+            request.encode(),
+        );
+        // Stub permissions grants every request. Wire is Ok disc 0x00, V1
+        // variant 0x00, granted=1.
+        assert_eq!(payload, vec![0x00, 0x00, 0x01]);
+    }
+
+    /// `connection_status_subscribe` produces a stream whose first item is
+    /// the current session state. Drive it through the dispatcher with a
+    /// recording transport and assert exactly one `_receive` frame appears.
+    #[test]
+    fn connection_status_subscribe_yields_initial_disconnected() {
+        use std::sync::Mutex;
+
+        #[derive(Default)]
+        struct RecordingTransport {
+            sent: Mutex<Vec<ProtocolMessage>>,
+        }
+        impl Transport for RecordingTransport {
+            fn send(&self, message: ProtocolMessage) {
+                self.sent.lock().unwrap().push(message);
+            }
+            fn on_message(
+                &self,
+                _handler: Box<dyn Fn(ProtocolMessage) + Send + Sync>,
+            ) -> Box<dyn FnOnce()> {
+                Box::new(|| {})
+            }
+        }
+
+        let core = make_core();
+        let transport = Arc::new(RecordingTransport::default());
+        let dyn_transport: Arc<dyn Transport> = transport.clone();
+
+        let frame = ProtocolMessage {
+            request_id: "p:1".into(),
+            payload: Payload {
+                tag: compose_action("account_connection_status_subscribe", FrameKind::Start),
+                value: Vec::new(),
+            },
+        };
+        futures::executor::block_on(core.dispatch(frame, dyn_transport));
+
+        // Wait briefly for the spawned thread to emit the initial item.
+        let deadline = std::time::Instant::now() + std::time::Duration::from_secs(2);
+        loop {
+            if !transport.sent.lock().unwrap().is_empty() {
+                break;
+            }
+            if std::time::Instant::now() > deadline {
+                panic!("subscription did not yield an item in time");
+            }
+            std::thread::sleep(std::time::Duration::from_millis(10));
+        }
+
+        let sent = transport.sent.lock().unwrap().clone();
+        assert!(!sent.is_empty(), "expected at least one _receive frame");
+        let first = &sent[0];
+        assert_eq!(
+            first.payload.tag,
+            compose_action("account_connection_status_subscribe", FrameKind::Receive,),
+        );
+        // V1(Disconnected): V1 variant 0x00, Disconnected discriminant 0x00.
+        assert_eq!(first.payload.value, vec![0x00, 0x00]);
+    }
+}
diff --git a/rust/crates/truapi-server/src/debug_log.rs b/rust/crates/truapi-server/src/debug_log.rs
new file mode 100644
index 00000000..495a4515
--- /dev/null
+++ b/rust/crates/truapi-server/src/debug_log.rs
@@ -0,0 +1,50 @@
+//! Runtime-toggled debug logging.
+//!
+//! Enabled by the host setting a process-wide flag. Output goes to
+//! `console.log` on wasm and `eprintln!` on native, prefixed with
+//! `[truapi]` so it's easy to grep for.
+//!
+//! The macro is a no-op when disabled: format args are not evaluated,
+//! so callers can `truapi_debug!("payload={value:?}")` without paying for the
+//! formatting on hot paths. Disabled by default; the host opts in via
+//! [`set_enabled`] (exposed to JS as `setDebugEnabled`).
+//!
+//! Output is plaintext to the console/stderr, so never pass secret material
+//! (key bytes, session tokens, signatures) to [`truapi_debug!`].
+
+use std::sync::atomic::{AtomicBool, Ordering};
+
+static DEBUG_ENABLED: AtomicBool = AtomicBool::new(false);
+
+/// Turn the [`truapi_debug!`] macro on or off. Idempotent.
+pub fn set_enabled(enabled: bool) {
+    DEBUG_ENABLED.store(enabled, Ordering::Relaxed);
+}
+
+/// Whether debug logging is currently active. Cheap atomic read, safe to
+/// call on hot paths so the macro can early-out before formatting.
+pub fn is_enabled() -> bool {
+    DEBUG_ENABLED.load(Ordering::Relaxed)
+}
+
+/// Native variant of `emit`: writes to stderr.
+#[cfg(not(target_arch = "wasm32"))]
+pub fn emit(line: &str) {
+    eprintln!("{line}");
+}
+
+/// Wasm variant of `emit`: routes to the browser console.
+#[cfg(target_arch = "wasm32")]
+pub fn emit(line: &str) {
+    web_sys::console::log_1(&wasm_bindgen::JsValue::from_str(line));
+}
+
+/// Emit a debug log line when [`is_enabled`] is true.
+#[macro_export]
+macro_rules! truapi_debug {
+    ($($arg:tt)*) => {{
+        if $crate::debug_log::is_enabled() {
+            $crate::debug_log::emit(&format!("[truapi] {}", format_args!($($arg)*)));
+        }
+    }};
+}
diff --git a/rust/crates/truapi-server/src/dispatcher.rs b/rust/crates/truapi-server/src/dispatcher.rs
new file mode 100644
index 00000000..d34fa3de
--- /dev/null
+++ b/rust/crates/truapi-server/src/dispatcher.rs
@@ -0,0 +1,320 @@
+//! Request dispatcher.
+//!
+//! Routes incoming frames to the appropriate trait method based on the
+//! action tag. The handler set is registered by the auto-generated
+//! [`crate::generated::dispatcher::register`] function; this module
+//! provides the framework that owns the registration table and the
+//! routing logic.
+
+use std::collections::HashMap;
+use std::sync::Arc;
+
+use futures::future::LocalBoxFuture;
+
+use truapi::CallError;
+
+use crate::frame::{
+    FrameKind, Payload, ProtocolMessage, compose_action, encode_call_error_payload,
+};
+use crate::subscription::{Spawner, SubscriptionManager, SubscriptionStream};
+use crate::transport::Transport;
+
+/// A handler for a request-response method. The returned future is not
+/// required to be `Send` because the truapi trait uses `async fn`, whose
+/// auto-Send-ness is not guaranteed. The `request_id` is the per-frame
+/// identifier; handlers thread it into the `CallContext` so trait methods
+/// can correlate logs/cancellation with the originating request. On the
+/// error path handlers return the SCALE-encoded `CallError` payload bytes
+/// (typically via [`crate::frame::encode_decode_error`] or
+/// [`crate::frame::encode_call_error_payload`]); the dispatcher wraps them
+/// into the response envelope.
+pub type RequestHandler =
+    Arc<dyn Fn(String, Vec<u8>) -> LocalBoxFuture<'static, Result<Vec<u8>, Vec<u8>>> + Send + Sync>;
+
+/// A handler for a subscription method. On the error path the handler
+/// returns the SCALE-encoded `CallError` payload bytes; the dispatcher
+/// wraps them into an `_interrupt` envelope.
+pub type SubscriptionHandler = Arc<
+    dyn Fn(String, Vec<u8>) -> LocalBoxFuture<'static, Result<SubscriptionStream, Vec<u8>>>
+        + Send
+        + Sync,
+>;
+
+/// Routes incoming protocol messages to registered handlers.
+pub struct Dispatcher {
+    request_handlers: HashMap<String, RequestHandler>,
+    subscription_handlers: HashMap<String, SubscriptionHandler>,
+    subscriptions: SubscriptionManager,
+}
+
+impl Dispatcher {
+    /// Construct a dispatcher whose subscriptions are driven on `spawner`.
+    pub fn new(spawner: Spawner) -> Self {
+        Self {
+            request_handlers: HashMap::new(),
+            subscription_handlers: HashMap::new(),
+            subscriptions: SubscriptionManager::new(spawner),
+        }
+    }
+
+    /// Register a request-response handler for a method. Returns the
+    /// previously registered handler if any; callers (the generated
+    /// `dispatcher::register`) should treat `Some` as a programming error
+    /// since each wire method must own exactly one handler.
+    pub fn on_request<F>(&mut self, method: &str, handler: F) -> Option<RequestHandler>
+    where
+        F: Fn(String, Vec<u8>) -> LocalBoxFuture<'static, Result<Vec<u8>, Vec<u8>>>
+            + Send
+            + Sync
+            + 'static,
+    {
+        self.request_handlers
+            .insert(method.to_string(), Arc::new(handler))
+    }
+
+    /// Register a subscription handler for a method. Returns the previously
+    /// registered handler if any.
+    pub fn on_subscription<F>(&mut self, method: &str, handler: F) -> Option<SubscriptionHandler>
+    where
+        F: Fn(String, Vec<u8>) -> LocalBoxFuture<'static, Result<SubscriptionStream, Vec<u8>>>
+            + Send
+            + Sync
+            + 'static,
+    {
+        self.subscription_handlers
+            .insert(method.to_string(), Arc::new(handler))
+    }
+
+    /// Process an incoming protocol message, sending any responses or
+    /// subscription frames through `transport`.
+    pub async fn dispatch(&self, message: ProtocolMessage, transport: Arc<dyn Transport>) {
+        let Some((method, kind)) = FrameKind::from_tag(&message.payload.tag) else {
+            return;
+        };
+
+        match kind {
+            FrameKind::Request => {
+                // On the wire, every response is `Result<Ok, Err>`-shaped: the
+                // handler returns `Ok(bytes)` already prefixed with a `0x00`
+                // discriminant for success, and `Err(bytes)` whose bytes are
+                // the SCALE-encoded `CallError`. The error path prepends `0x01`
+                // so the wire payload is always `[disc][value...]`.
+                let payload = if let Some(handler) = self.request_handlers.get(&method) {
+                    let request_id = message.request_id.clone();
+                    match handler(request_id, message.payload.value).await {
+                        Ok(value) => Payload {
+                            tag: compose_action(&method, FrameKind::Response),
+                            value,
+                        },
+                        Err(err_bytes) => Payload {
+                            tag: compose_action(&method, FrameKind::Response),
+                            value: prefix_err(err_bytes),
+                        },
+                    }
+                } else {
+                    // A well-formed request for a method with no registered
+                    // handler resolves to `Unsupported` so the caller fails
+                    // fast instead of waiting for a response that never comes.
+                    Payload {
+                        tag: compose_action(&method, FrameKind::Response),
+                        value: prefix_err(encode_call_error_payload(CallError::<()>::Unsupported)),
+                    }
+                };
+                transport.send(ProtocolMessage {
+                    request_id: message.request_id,
+                    payload,
+                });
+            }
+            FrameKind::Start => {
+                if let Some(handler) = self.subscription_handlers.get(&method) {
+                    // Reserve the slot before awaiting the handler so a `_stop`
+                    // arriving while the handler resolves cancels the pending
+                    // subscription instead of racing the registration.
+                    let token = self.subscriptions.reserve(message.request_id.clone());
+                    let request_id = message.request_id.clone();
+                    match handler(request_id, message.payload.value).await {
+                        Ok(stream) => {
+                            self.subscriptions
+                                .activate(token, &method, stream, transport);
+                        }
+                        Err(err_bytes) => {
+                            self.subscriptions.cancel_reservation(token);
+                            transport.send(ProtocolMessage {
+                                request_id: message.request_id,
+                                payload: Payload {
+                                    tag: compose_action(&method, FrameKind::Interrupt),
+                                    value: err_bytes,
+                                },
+                            });
+                        }
+                    }
+                } else {
+                    // Unregistered subscription method: interrupt with
+                    // `Unsupported` rather than dropping the start silently.
+                    transport.send(ProtocolMessage {
+                        request_id: message.request_id,
+                        payload: Payload {
+                            tag: compose_action(&method, FrameKind::Interrupt),
+                            value: encode_call_error_payload(CallError::<()>::Unsupported),
+                        },
+                    });
+                }
+            }
+            FrameKind::Stop => {
+                self.subscriptions.handle_stop(&message.request_id);
+            }
+            // Response, Receive, Interrupt are handled by the client side.
+            _ => {}
+        }
+    }
+}
+
+/// Prepend the `0x01` Err discriminant to SCALE-encoded `CallError` bytes,
+/// producing the `[disc][value...]` Result wire shape the response envelope
+/// expects.
+fn prefix_err(err_bytes: Vec<u8>) -> Vec<u8> {
+    let mut value = Vec::with_capacity(1 + err_bytes.len());
+    value.push(1u8);
+    value.extend_from_slice(&err_bytes);
+    value
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use parity_scale_codec::Encode;
+    use std::sync::Mutex;
+    use truapi::CallError;
+
+    use crate::frame::{FrameKind, Payload, compose_action};
+
+    #[derive(Default)]
+    struct RecordingTransport {
+        sent: Mutex<Vec<ProtocolMessage>>,
+    }
+
+    impl RecordingTransport {
+        fn sent(&self) -> Vec<ProtocolMessage> {
+            self.sent.lock().unwrap().clone()
+        }
+    }
+
+    impl Transport for RecordingTransport {
+        fn send(&self, message: ProtocolMessage) {
+            self.sent.lock().unwrap().push(message);
+        }
+        fn on_message(
+            &self,
+            _handler: Box<dyn Fn(ProtocolMessage) + Send + Sync>,
+        ) -> Box<dyn FnOnce()> {
+            Box::new(|| {})
+        }
+    }
+
+    fn make_frame(tag: &str, value: Vec<u8>) -> ProtocolMessage {
+        ProtocolMessage {
+            request_id: "p:1".into(),
+            payload: Payload {
+                tag: tag.to_string(),
+                value,
+            },
+        }
+    }
+
+    /// A well-formed request for a method with no registered handler must
+    /// resolve to an `Unsupported` response (Err disc `0x01`, then the
+    /// `CallError::Unsupported` variant `0x02`), so the caller fails fast
+    /// instead of hanging on a response that never arrives.
+    #[test]
+    fn dispatch_unregistered_request_replies_unsupported() {
+        let dispatcher = Dispatcher::new(crate::subscription::thread_per_subscription_spawner());
+        let transport = Arc::new(RecordingTransport::default());
+        let transport_dyn: Arc<dyn Transport> = transport.clone();
+        let frame = make_frame(
+            &compose_action("missing_method", FrameKind::Request),
+            Vec::new(),
+        );
+        futures::executor::block_on(dispatcher.dispatch(frame, transport_dyn));
+        let sent = transport.sent();
+        assert_eq!(sent.len(), 1, "unregistered request must get a response");
+        assert_eq!(
+            sent[0].payload.tag,
+            compose_action("missing_method", FrameKind::Response)
+        );
+        assert_eq!(sent[0].payload.value, vec![0x01, 0x02]);
+    }
+
+    /// A `_start` for a subscription method with no registered handler must
+    /// emit an `_interrupt` carrying `Unsupported`, not drop silently.
+    #[test]
+    fn dispatch_unregistered_subscription_interrupts_unsupported() {
+        let dispatcher = Dispatcher::new(crate::subscription::thread_per_subscription_spawner());
+        let transport = Arc::new(RecordingTransport::default());
+        let transport_dyn: Arc<dyn Transport> = transport.clone();
+        let frame = make_frame(&compose_action("missing_sub", FrameKind::Start), Vec::new());
+        futures::executor::block_on(dispatcher.dispatch(frame, transport_dyn));
+        let sent = transport.sent();
+        assert_eq!(sent.len(), 1, "unregistered start must get an interrupt");
+        assert_eq!(
+            sent[0].payload.tag,
+            compose_action("missing_sub", FrameKind::Interrupt)
+        );
+        assert_eq!(sent[0].payload.value, vec![0x02]);
+    }
+
+    /// A handler that returns `Err(CallError::Denied)` must produce a
+    /// response frame whose payload begins with the `0x01` Err
+    /// discriminant byte (the Result wire shape).
+    #[test]
+    fn dispatch_request_handler_error_emits_response_with_err_discriminant() {
+        let mut dispatcher =
+            Dispatcher::new(crate::subscription::thread_per_subscription_spawner());
+        dispatcher.on_request("fake_method", |_request_id, _bytes| {
+            Box::pin(async move {
+                let err: CallError<()> = CallError::Denied;
+                Err(crate::frame::encode_call_error_payload(err))
+            })
+        });
+        let transport = Arc::new(RecordingTransport::default());
+        let frame = make_frame(
+            &compose_action("fake_method", FrameKind::Request),
+            Vec::new(),
+        );
+        futures::executor::block_on(dispatcher.dispatch(frame, transport.clone()));
+        let sent = transport.sent();
+        assert_eq!(sent.len(), 1, "exactly one response expected");
+        let payload = &sent[0].payload.value;
+        assert_eq!(payload.first(), Some(&1u8), "first byte must be Err disc");
+        // After the Err disc comes the SCALE-encoded CallError; `Denied` is
+        // variant 1, so the full payload is `[0x01 disc][0x01 variant]`.
+        let err: CallError<()> = CallError::Denied;
+        let mut expected_inner = Vec::new();
+        match &err {
+            CallError::Denied => 1u8.encode_to(&mut expected_inner),
+            _ => unreachable!(),
+        }
+        let mut expected = vec![1u8];
+        expected.extend_from_slice(&expected_inner);
+        assert_eq!(payload, &expected);
+    }
+
+    /// Registering two handlers under the same key must not silently
+    /// overwrite. The contract chosen here is "loud": `on_request`
+    /// returns the previous handler, so callers can detect collisions.
+    #[test]
+    fn register_request_twice_returns_previous_handler() {
+        let mut dispatcher =
+            Dispatcher::new(crate::subscription::thread_per_subscription_spawner());
+        let prev = dispatcher.on_request("fake_method", |_request_id, _bytes| {
+            Box::pin(async move { Ok(Vec::new()) })
+        });
+        assert!(prev.is_none(), "first registration has no predecessor");
+        let prev = dispatcher.on_request("fake_method", |_request_id, _bytes| {
+            Box::pin(async move { Ok(Vec::new()) })
+        });
+        assert!(
+            prev.is_some(),
+            "second registration must return the previous handler"
+        );
+    }
+}
diff --git a/rust/crates/truapi-server/src/frame.rs b/rust/crates/truapi-server/src/frame.rs
new file mode 100644
index 00000000..be924021
--- /dev/null
+++ b/rust/crates/truapi-server/src/frame.rs
@@ -0,0 +1,618 @@
+//! Wire protocol frame types.
+//!
+//! Every message on the wire is a `ProtocolMessage` containing a `requestId`
+//! and a `payload`. On the wire the envelope is:
+//!
+//! ```text
+//!   [requestId: SCALE str][discriminant: u8][payload bytes...]
+//! ```
+//!
+//! The discriminant maps to a method/kind tag via the auto-generated
+//! [`crate::generated::wire_table::WIRE_TABLE`]. Method ordering is part of
+//! the wire protocol; only ever append to the table. The payload bytes are
+//! the SCALE-encoded inner value, inlined without a length prefix.
+//!
+//! In-memory we keep the tag as a `String` so the dispatcher (which keys on
+//! method name) is unchanged. Only the codec impls below cross between
+//! string-tag and discriminant.
+
+use parity_scale_codec::{Decode, Encode, Error as CodecError, Input, Output};
+
+use truapi::CallError;
+
+use crate::generated::wire_table::{WIRE_TABLE, WireKind};
+
+/// Top-level wire message. Encoded as `[requestId][discriminant][bytes]`; the
+/// in-memory `payload.tag` carries the resolved method tag string.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct ProtocolMessage {
+    /// Per-message identifier carried by both halves of a request/response.
+    pub request_id: String,
+    /// Tagged payload describing the frame kind and SCALE bytes.
+    pub payload: Payload,
+}
+
+/// Encode `CallError::MalformedFrame { reason }` as the SCALE-encoded payload
+/// bytes a handler returns on a decode failure. The dispatcher wraps these
+/// bytes into a response frame with the matching `request_id` and response
+/// tag.
+pub fn encode_decode_error(reason: String) -> Vec<u8> {
+    let err: CallError<()> = CallError::MalformedFrame { reason };
+    encode_call_error(&err)
+}
+
+/// Encode a `CallError<E>` as the SCALE-encoded payload bytes a handler
+/// returns on the error path. The dispatcher wraps these bytes into a
+/// response frame with the matching `request_id` and response tag.
+pub fn encode_call_error_payload<E: Encode>(err: CallError<E>) -> Vec<u8> {
+    encode_call_error(&err)
+}
+
+impl Encode for ProtocolMessage {
+    fn encode_to<T: Output + ?Sized>(&self, dest: &mut T) {
+        self.request_id.encode_to(dest);
+        // Encode the discriminant. An unknown tag is a build-time bug (the
+        // dispatcher only emits tags it registered handlers for) but we
+        // poison the frame with 0xFF instead of panicking so a misconfigured
+        // impl can't take down the host process. The poisoned discriminant
+        // decodes as "unknown wire discriminant" on the peer.
+        let id = id_for_tag(&self.payload.tag).unwrap_or(0xFF);
+        id.encode_to(dest);
+        // Payload bytes are inlined; the receiver reads "until end of frame"
+        // because each transport frame is one ProtocolMessage. This matches
+        // the Novasama `Enum({v1: ...})` shape (variant payload encoded
+        // inline, no length prefix), and constrains us to slice-shaped
+        // `Input`s on the decode side.
+        dest.write(&self.payload.value);
+    }
+}
+
+// Callers must hand `Decode` a slice-shaped `Input`; streaming inputs cannot
+// decode this envelope because the payload has no length prefix.
+impl Decode for ProtocolMessage {
+    fn decode<I: Input>(input: &mut I) -> Result<Self, CodecError> {
+        let request_id = String::decode(input)?;
+        let id = u8::decode(input)?;
+        let tag = tag_for_id(id)
+            .ok_or_else(|| CodecError::from("unknown wire discriminant"))?
+            .to_string();
+        let remaining = input
+            .remaining_len()?
+            .ok_or_else(|| CodecError::from("frame input must report remaining length"))?;
+        let mut value = vec![0u8; remaining];
+        input.read(&mut value)?;
+        Ok(ProtocolMessage {
+            request_id,
+            payload: Payload { tag, value },
+        })
+    }
+}
+
+/// Tagged payload. The `tag` encodes `{method}_{suffix}` where suffix is one of:
+/// `request`, `response`, `start`, `receive`, `stop`, `interrupt`.
+///
+/// Note: `Payload` does not derive `Encode`/`Decode` directly; the wire
+/// representation lives on [`ProtocolMessage`]. `Payload` is kept as a plain
+/// data type for in-memory dispatch (key on `tag`, value bytes already
+/// SCALE-encoded by the call site).
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct Payload {
+    /// Method tag with frame-kind suffix.
+    pub tag: String,
+    /// SCALE-encoded inner value bytes.
+    pub value: Vec<u8>,
+}
+
+/// The suffix part of an action tag, identifying the frame type.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum FrameKind {
+    /// Client-initiated request frame.
+    Request,
+    /// Host response to a request.
+    Response,
+    /// Client-initiated subscription start.
+    Start,
+    /// Host-emitted item on a subscription.
+    Receive,
+    /// Client-initiated subscription stop.
+    Stop,
+    /// Host-emitted subscription termination.
+    Interrupt,
+}
+
+impl FrameKind {
+    /// Return the wire suffix string for this frame kind.
+    pub fn suffix(&self) -> &'static str {
+        match self {
+            FrameKind::Request => "request",
+            FrameKind::Response => "response",
+            FrameKind::Start => "start",
+            FrameKind::Receive => "receive",
+            FrameKind::Stop => "stop",
+            FrameKind::Interrupt => "interrupt",
+        }
+    }
+
+    /// Parse the suffix from an action tag string, returning `(method, kind)`.
+    pub fn from_tag(tag: &str) -> Option<(String, FrameKind)> {
+        for kind in [
+            FrameKind::Request,
+            FrameKind::Response,
+            FrameKind::Start,
+            FrameKind::Receive,
+            FrameKind::Stop,
+            FrameKind::Interrupt,
+        ] {
+            let suffix = format!("_{}", kind.suffix());
+            if let Some(method) = tag.strip_suffix(&suffix) {
+                return Some((method.to_string(), kind));
+            }
+        }
+        None
+    }
+}
+
+/// Build an action tag from method name and frame kind.
+pub fn compose_action(method: &str, kind: FrameKind) -> String {
+    format!("{}_{}", method, kind.suffix())
+}
+
+/// Unique ID generator with a prefix.
+pub struct IdFactory {
+    prefix: String,
+    counter: u64,
+}
+
+impl IdFactory {
+    /// Build a factory that mints IDs of the form `{prefix}{counter}`.
+    pub fn new(prefix: impl Into<String>) -> Self {
+        Self {
+            prefix: prefix.into(),
+            counter: 0,
+        }
+    }
+
+    /// Return the next ID, monotonically increasing from 1.
+    pub fn next_id(&mut self) -> String {
+        self.counter += 1;
+        format!("{}{}", self.prefix, self.counter)
+    }
+}
+
+/// Look up a discriminant by tag. Walks the generated [`WIRE_TABLE`].
+pub fn id_for_tag(tag: &str) -> Option<u8> {
+    let (method, kind) = FrameKind::from_tag(tag)?;
+    for entry in WIRE_TABLE {
+        if entry.method != method {
+            continue;
+        }
+        return match (&entry.kind, kind) {
+            (WireKind::Request { request_id, .. }, FrameKind::Request) => Some(*request_id),
+            (WireKind::Request { response_id, .. }, FrameKind::Response) => Some(*response_id),
+            (WireKind::Subscription { start_id, .. }, FrameKind::Start) => Some(*start_id),
+            (WireKind::Subscription { stop_id, .. }, FrameKind::Stop) => Some(*stop_id),
+            (WireKind::Subscription { interrupt_id, .. }, FrameKind::Interrupt) => {
+                Some(*interrupt_id)
+            }
+            (WireKind::Subscription { receive_id, .. }, FrameKind::Receive) => Some(*receive_id),
+            _ => None,
+        };
+    }
+    None
+}
+
+/// Look up a tag string by discriminant. Walks the generated [`WIRE_TABLE`].
+pub fn tag_for_id(id: u8) -> Option<&'static str> {
+    static CACHE: std::sync::OnceLock<Vec<Option<(&'static str, FrameKind)>>> =
+        std::sync::OnceLock::new();
+    let cache = CACHE.get_or_init(|| {
+        let max = WIRE_TABLE
+            .iter()
+            .map(|e| match &e.kind {
+                WireKind::Request {
+                    request_id,
+                    response_id,
+                } => (*request_id).max(*response_id),
+                WireKind::Subscription {
+                    start_id,
+                    stop_id,
+                    interrupt_id,
+                    receive_id,
+                } => (*start_id)
+                    .max(*stop_id)
+                    .max(*interrupt_id)
+                    .max(*receive_id),
+            })
+            .max()
+            .unwrap_or(0);
+        let mut table: Vec<Option<(&'static str, FrameKind)>> = vec![None; usize::from(max) + 1];
+        for entry in WIRE_TABLE {
+            match &entry.kind {
+                WireKind::Request {
+                    request_id,
+                    response_id,
+                } => {
+                    table[usize::from(*request_id)] = Some((entry.method, FrameKind::Request));
+                    table[usize::from(*response_id)] = Some((entry.method, FrameKind::Response));
+                }
+                WireKind::Subscription {
+                    start_id,
+                    stop_id,
+                    interrupt_id,
+                    receive_id,
+                } => {
+                    table[usize::from(*start_id)] = Some((entry.method, FrameKind::Start));
+                    table[usize::from(*stop_id)] = Some((entry.method, FrameKind::Stop));
+                    table[usize::from(*interrupt_id)] = Some((entry.method, FrameKind::Interrupt));
+                    table[usize::from(*receive_id)] = Some((entry.method, FrameKind::Receive));
+                }
+            }
+        }
+        table
+    });
+    let (method, kind) = (*cache.get(usize::from(id))?)?;
+    // Leak the composed tag once per id so we can hand out `&'static str`.
+    static TAGS: std::sync::OnceLock<
+        std::sync::Mutex<std::collections::HashMap<u8, &'static str>>,
+    > = std::sync::OnceLock::new();
+    let mut map = TAGS
+        .get_or_init(|| std::sync::Mutex::new(std::collections::HashMap::new()))
+        .lock()
+        .ok()?;
+    if let Some(s) = map.get(&id) {
+        return Some(*s);
+    }
+    let leaked: &'static str = Box::leak(compose_action(method, kind).into_boxed_str());
+    map.insert(id, leaked);
+    Some(leaked)
+}
+
+/// Encode a `CallError<E>` as SCALE bytes. `CallError` does not derive
+/// `Encode` directly so the variants are emitted manually.
+fn encode_call_error<E: Encode>(err: &CallError<E>) -> Vec<u8> {
+    let mut out = Vec::new();
+    match err {
+        CallError::Domain(value) => {
+            0u8.encode_to(&mut out);
+            value.encode_to(&mut out);
+        }
+        CallError::Denied => {
+            1u8.encode_to(&mut out);
+        }
+        CallError::Unsupported => {
+            2u8.encode_to(&mut out);
+        }
+        CallError::MalformedFrame { reason } => {
+            3u8.encode_to(&mut out);
+            reason.encode_to(&mut out);
+        }
+        CallError::HostFailure { reason } => {
+            4u8.encode_to(&mut out);
+            reason.encode_to(&mut out);
+        }
+    }
+    out
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn build(tag: &str, value: Vec<u8>) -> ProtocolMessage {
+        ProtocolMessage {
+            request_id: "p:1".to_string(),
+            payload: Payload {
+                tag: tag.to_string(),
+                value,
+            },
+        }
+    }
+
+    fn expected_wire(tag_id: u8, value: &[u8]) -> Vec<u8> {
+        let mut out = Vec::new();
+        "p:1".to_string().encode_to(&mut out);
+        out.push(tag_id);
+        out.extend_from_slice(value);
+        out
+    }
+
+    #[test]
+    fn handshake_request_encodes_with_discriminant_zero() {
+        // SCALE-encoded HostHandshakeRequest::V1(1u8) = [0u8 variant][1u8 codec_version]
+        let inner: Vec<u8> = vec![0x00, 0x01];
+        let msg = build("system_handshake_request", inner.clone());
+        assert_eq!(msg.encode(), expected_wire(0, &inner));
+    }
+
+    #[test]
+    fn get_account_request_encodes_with_discriminant_22() {
+        let mut inner = vec![0x00]; // V1 variant
+        "foo".to_string().encode_to(&mut inner);
+        0u32.encode_to(&mut inner);
+        let msg = build("account_get_account_request", inner.clone());
+        assert_eq!(msg.encode(), expected_wire(22, &inner));
+    }
+
+    #[test]
+    fn round_trip_preserves_tag_and_value() {
+        let inner: Vec<u8> = vec![0x00, 0x42, 0xab, 0xcd];
+        let msg = build("local_storage_read_request", inner.clone());
+        let decoded = ProtocolMessage::decode(&mut &msg.encode()[..]).expect("decode");
+        assert_eq!(decoded, msg);
+    }
+
+    #[test]
+    fn unknown_discriminant_fails_to_decode() {
+        let mut bytes = Vec::new();
+        "p:1".to_string().encode_to(&mut bytes);
+        bytes.push(250); // far outside the populated range
+        bytes.extend_from_slice(&[0u8; 4]);
+        assert!(ProtocolMessage::decode(&mut &bytes[..]).is_err());
+    }
+
+    #[test]
+    fn subscription_phases_share_consecutive_ids() {
+        assert_eq!(
+            id_for_tag("account_connection_status_subscribe_start"),
+            Some(18)
+        );
+        assert_eq!(
+            id_for_tag("account_connection_status_subscribe_stop"),
+            Some(19)
+        );
+        assert_eq!(
+            id_for_tag("account_connection_status_subscribe_interrupt"),
+            Some(20)
+        );
+        assert_eq!(
+            id_for_tag("account_connection_status_subscribe_receive"),
+            Some(21)
+        );
+    }
+
+    /// All four subscription phases round-trip through the codec, not just
+    /// the lookup table. Catches a regression where `Decode` mishandles a
+    /// frame whose payload is empty for `_stop` / `_interrupt` (no inner
+    /// data) but non-empty for `_start` / `_receive`.
+    #[test]
+    fn subscription_phases_round_trip_through_codec() {
+        let cases: &[(&str, u8, Vec<u8>)] = &[
+            (
+                "account_connection_status_subscribe_start",
+                18,
+                vec![0x00, 0xaa],
+            ),
+            ("account_connection_status_subscribe_stop", 19, Vec::new()),
+            (
+                "account_connection_status_subscribe_interrupt",
+                20,
+                Vec::new(),
+            ),
+            (
+                "account_connection_status_subscribe_receive",
+                21,
+                vec![0x01, 0x02, 0x03, 0x04],
+            ),
+        ];
+        for (tag, id, value) in cases {
+            let msg = build(tag, value.clone());
+            let bytes = msg.encode();
+            assert_eq!(
+                bytes,
+                expected_wire(*id, value),
+                "encode mismatch for {tag}"
+            );
+            let decoded = ProtocolMessage::decode(&mut &bytes[..]).expect("decode");
+            assert_eq!(decoded, msg, "round-trip mismatch for {tag}");
+        }
+    }
+
+    /// Genuine zero-byte payload (e.g. unit-typed response). `Decode` must
+    /// handle `remaining_len == 0` without erroring or reading past EOF.
+    #[test]
+    fn empty_payload_round_trips() {
+        let msg = build("local_storage_clear_response", Vec::new());
+        let bytes = msg.encode();
+        // [SCALE compact-len 0x0c][p][:][1][u8 17] = 4 + 1 = 5 bytes total
+        assert_eq!(bytes.len(), 5);
+        let decoded = ProtocolMessage::decode(&mut &bytes[..]).expect("decode");
+        assert_eq!(decoded, msg);
+    }
+
+    /// Compact-len mode 1 kicks in for strings with length 64..=16383. Make
+    /// sure the codec handles a long requestId without truncation.
+    #[test]
+    fn long_request_id_round_trips() {
+        let long_id: String = "x".repeat(200);
+        let msg = ProtocolMessage {
+            request_id: long_id,
+            payload: Payload {
+                tag: "account_get_account_request".to_string(),
+                value: vec![0x00, 0xab, 0xcd],
+            },
+        };
+        let decoded = ProtocolMessage::decode(&mut &msg.encode()[..]).expect("decode");
+        assert_eq!(decoded, msg);
+    }
+
+    /// Truncated frames must surface a `CodecError`, not panic.
+    #[test]
+    fn truncated_frames_error_cleanly() {
+        // Empty buffer.
+        assert!(ProtocolMessage::decode(&mut &[][..]).is_err());
+        // Just the requestId, no discriminant byte.
+        let mut only_request_id = Vec::new();
+        "p:1".to_string().encode_to(&mut only_request_id);
+        assert!(ProtocolMessage::decode(&mut &only_request_id[..]).is_err());
+        // RequestId header claims length=200 but the buffer is far shorter.
+        let truncated_str_header = [200u8 << 2, 0x61, 0x62, 0x63];
+        assert!(ProtocolMessage::decode(&mut &truncated_str_header[..]).is_err());
+    }
+
+    /// Empty requestId (zero-length string) is a valid SCALE-encoded `str`
+    /// (compact-len 0, no body). The codec must round-trip it without
+    /// confusing length-0 with EOF.
+    #[test]
+    fn empty_request_id_round_trips() {
+        let msg = ProtocolMessage {
+            request_id: String::new(),
+            payload: Payload {
+                tag: "account_get_account_request".to_string(),
+                value: vec![0x00, 0x01, 0x02],
+            },
+        };
+        let bytes = msg.encode();
+        // [SCALE compact-len 0 = 0x00][discriminant][payload]
+        assert_eq!(bytes[0], 0x00);
+        let decoded = ProtocolMessage::decode(&mut &bytes[..]).expect("decode");
+        assert_eq!(decoded, msg);
+    }
+
+    /// Unicode characters round-trip through SCALE string encoding.
+    #[test]
+    fn unicode_request_id_round_trips() {
+        let msg = ProtocolMessage {
+            request_id: "héllo-世界-🦀".to_string(),
+            payload: Payload {
+                tag: "account_get_account_request".to_string(),
+                value: vec![0x00, 0x01],
+            },
+        };
+        let decoded = ProtocolMessage::decode(&mut &msg.encode()[..]).expect("decode");
+        assert_eq!(decoded, msg);
+    }
+
+    /// Large payload (>64KiB) round-trips. Catches buffer-size assumptions
+    /// in the inline-payload read path.
+    #[test]
+    fn large_payload_round_trips() {
+        let big = vec![0xa5u8; 100 * 1024];
+        let msg = build("account_get_account_request", big);
+        let decoded = ProtocolMessage::decode(&mut &msg.encode()[..]).expect("decode");
+        assert_eq!(decoded, msg);
+    }
+
+    /// Discriminant 0xFF is the documented poison/escape-hatch slot. It is
+    /// not registered as a real tag, so encoding a frame with an unknown
+    /// tag falls back to 0xFF, and the decoder must reject 0xFF.
+    #[test]
+    fn poison_slot_0xff_is_unmapped_and_decode_rejects() {
+        assert!(tag_for_id(0xFF).is_none());
+        let mut bytes = Vec::new();
+        "p:1".to_string().encode_to(&mut bytes);
+        bytes.push(0xFF);
+        bytes.extend_from_slice(&[0u8; 4]);
+        assert!(
+            ProtocolMessage::decode(&mut &bytes[..]).is_err(),
+            "decoding the 0xFF poison slot must fail",
+        );
+    }
+
+    #[test]
+    fn encode_decode_error_matches_malformed_frame_variant() {
+        let bytes = encode_decode_error("bad input".to_string());
+        let mut expected = Vec::new();
+        let err: CallError<()> = CallError::MalformedFrame {
+            reason: "bad input".to_string(),
+        };
+        match &err {
+            CallError::MalformedFrame { reason } => {
+                3u8.encode_to(&mut expected);
+                reason.encode_to(&mut expected);
+            }
+            _ => unreachable!(),
+        }
+        assert_eq!(bytes, expected);
+    }
+
+    #[test]
+    fn encode_call_error_payload_matches_call_error_variants() {
+        let denied: CallError<()> = CallError::Denied;
+        assert_eq!(encode_call_error_payload(denied), vec![1u8]);
+
+        let unsupported: CallError<()> = CallError::Unsupported;
+        assert_eq!(encode_call_error_payload(unsupported), vec![2u8]);
+
+        let host: CallError<()> = CallError::HostFailure {
+            reason: "x".to_string(),
+        };
+        let mut expected = vec![4u8];
+        "x".to_string().encode_to(&mut expected);
+        assert_eq!(encode_call_error_payload(host), expected);
+    }
+
+    /// `id_for_tag` resolves a known tag (`system_feature_supported_request`,
+    /// id 2 per the generated table) without going through round-trip code.
+    #[test]
+    fn id_for_tag_known_method_returns_id() {
+        assert_eq!(id_for_tag("system_handshake_request"), Some(0));
+        assert_eq!(id_for_tag("system_handshake_response"), Some(1));
+        assert_eq!(id_for_tag("system_feature_supported_request"), Some(2));
+        assert_eq!(id_for_tag("system_feature_supported_response"), Some(3));
+        assert_eq!(id_for_tag("account_get_account_request"), Some(22));
+    }
+
+    /// `tag_for_id` maps a known id back to its tag, and the result is a
+    /// `&'static str` that compares equal to the same value the codec
+    /// composes.
+    #[test]
+    fn tag_for_id_known_id_returns_static_str() {
+        assert_eq!(tag_for_id(0), Some("system_handshake_request"));
+        assert_eq!(tag_for_id(2), Some("system_feature_supported_request"));
+        assert_eq!(tag_for_id(3), Some("system_feature_supported_response"));
+        // The leaked-tag cache hands out the same `&'static str` on
+        // repeated lookups for the same id.
+        assert!(std::ptr::eq(tag_for_id(2).unwrap(), tag_for_id(2).unwrap()));
+    }
+
+    /// Unmapped slots return None; 0xFF is the documented poison slot and
+    /// every id past the populated range is also unmapped.
+    #[test]
+    fn tag_for_id_unmapped_id_returns_none() {
+        assert!(tag_for_id(0xFF).is_none());
+        assert!(tag_for_id(250).is_none());
+    }
+
+    /// `compose_action` and `FrameKind::from_tag` must be exact inverses
+    /// for every `FrameKind` variant. This pins the suffix table.
+    #[test]
+    fn compose_action_round_trips_each_framekind() {
+        for kind in [
+            FrameKind::Request,
+            FrameKind::Response,
+            FrameKind::Start,
+            FrameKind::Receive,
+            FrameKind::Stop,
+            FrameKind::Interrupt,
+        ] {
+            let tag = compose_action("system_feature_supported", kind);
+            let (method, parsed_kind) =
+                FrameKind::from_tag(&tag).expect("from_tag must parse the composed tag");
+            assert_eq!(method, "system_feature_supported");
+            assert_eq!(parsed_kind, kind, "round-trip mismatch for {kind:?}");
+            assert_eq!(tag, format!("system_feature_supported_{}", kind.suffix()));
+        }
+    }
+
+    /// IdFactory mints monotonically increasing ids prefixed with the
+    /// configured string.
+    #[test]
+    fn id_factory_minted_ids_are_unique_and_monotonic() {
+        let mut factory = IdFactory::new("p:");
+        assert_eq!(factory.next_id(), "p:1");
+        assert_eq!(factory.next_id(), "p:2");
+        assert_eq!(factory.next_id(), "p:3");
+    }
+
+    /// Two distinct factories each maintain their own counter; minting from
+    /// one does not advance the other.
+    #[test]
+    fn two_factories_dont_share_state() {
+        let mut a = IdFactory::new("a:");
+        let mut b = IdFactory::new("b:");
+        assert_eq!(a.next_id(), "a:1");
+        assert_eq!(b.next_id(), "b:1");
+        assert_eq!(a.next_id(), "a:2");
+        assert_eq!(b.next_id(), "b:2");
+    }
+}
diff --git a/rust/crates/truapi-server/src/generated/dispatcher.rs b/rust/crates/truapi-server/src/generated/dispatcher.rs
new file mode 100644
index 00000000..ab956a39
--- /dev/null
+++ b/rust/crates/truapi-server/src/generated/dispatcher.rs
@@ -0,0 +1,1611 @@
+//! Wire dispatcher for the unified `TrUApi` trait.
+//!
+//! Auto-generated by truapi-codegen. Do not edit.
+
+use std::sync::Arc;
+
+use parity_scale_codec::{Decode, Encode};
+
+use truapi::CallContext;
+use truapi::api::{
+    Account, Chain, Chat, CoinPayment, Entropy, LocalStorage, Notifications, Payment, Permissions,
+    Preimage, ResourceAllocation, Signing, StatementStore, System, Theme,
+};
+use truapi::versioned;
+
+use crate::dispatcher::Dispatcher;
+use crate::frame::{encode_call_error_payload, encode_decode_error};
+use crate::subscription::subscription_stream;
+
+/// Register every TrUAPI method with the dispatcher.
+pub fn register<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Account
+        + Chain
+        + Chat
+        + CoinPayment
+        + Entropy
+        + LocalStorage
+        + Notifications
+        + Payment
+        + Permissions
+        + Preimage
+        + ResourceAllocation
+        + Signing
+        + StatementStore
+        + System
+        + Theme
+        + Send
+        + Sync
+        + 'static,
+{
+    register_account(dispatcher, host.clone());
+    register_chain(dispatcher, host.clone());
+    register_chat(dispatcher, host.clone());
+    register_coin_payment(dispatcher, host.clone());
+    register_entropy(dispatcher, host.clone());
+    register_local_storage(dispatcher, host.clone());
+    register_notifications(dispatcher, host.clone());
+    register_payment(dispatcher, host.clone());
+    register_permissions(dispatcher, host.clone());
+    register_preimage(dispatcher, host.clone());
+    register_resource_allocation(dispatcher, host.clone());
+    register_signing(dispatcher, host.clone());
+    register_statement_store(dispatcher, host.clone());
+    register_system(dispatcher, host.clone());
+    register_theme(dispatcher, host);
+}
+
+fn register_account<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Account + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "account_connection_status_subscribe",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let _ = bytes;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = host.connection_status_subscribe(&cx).await;
+                    Ok(subscription_stream::<
+                        versioned::account::HostAccountConnectionStatusSubscribeItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "account_get_account",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::account::HostAccountGetRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::account::HostAccountGetResponse =
+                        match host.get_account(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "account_get_account_alias",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::account::HostAccountGetAliasRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::account::HostAccountGetAliasResponse =
+                        match host.get_account_alias(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "account_create_account_proof",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::account::HostAccountCreateProofRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::account::HostAccountCreateProofResponse =
+                        match host.create_account_proof(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "account_get_legacy_accounts",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::account::HostGetLegacyAccountsRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::account::HostGetLegacyAccountsResponse =
+                        match host.get_legacy_accounts(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "account_get_user_id",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::account::HostGetUserIdRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::account::HostGetUserIdResponse =
+                        match host.get_user_id(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_request(
+            "account_request_login",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::account::HostRequestLoginRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::account::HostRequestLoginResponse =
+                        match host.request_login(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+}
+
+fn register_chain<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Chain + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "chain_follow_head_subscribe",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainHeadFollowRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = host.follow_head_subscribe(&cx, request).await;
+                    Ok(subscription_stream::<
+                        versioned::chain::RemoteChainHeadFollowItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_get_head_header",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainHeadHeaderRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainHeadHeaderResponse =
+                        match host.get_head_header(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_get_head_body",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainHeadBodyRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainHeadBodyResponse =
+                        match host.get_head_body(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_get_head_storage",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainHeadStorageRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainHeadStorageResponse =
+                        match host.get_head_storage(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_call_head",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainHeadCallRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainHeadCallResponse =
+                        match host.call_head(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_unpin_head",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainHeadUnpinRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainHeadUnpinResponse =
+                        match host.unpin_head(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_continue_head",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainHeadContinueRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainHeadContinueResponse =
+                        match host.continue_head(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_stop_head_operation",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainHeadStopOperationRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainHeadStopOperationResponse =
+                        match host.stop_head_operation(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_get_spec_genesis_hash",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainSpecGenesisHashRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainSpecGenesisHashResponse =
+                        match host.get_spec_genesis_hash(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_get_spec_chain_name",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainSpecChainNameRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainSpecChainNameResponse =
+                        match host.get_spec_chain_name(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_get_spec_properties",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainSpecPropertiesRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainSpecPropertiesResponse =
+                        match host.get_spec_properties(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chain_broadcast_transaction",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainTransactionBroadcastRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainTransactionBroadcastResponse =
+                        match host.broadcast_transaction(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_request(
+            "chain_stop_transaction",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chain::RemoteChainTransactionStopRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chain::RemoteChainTransactionStopResponse =
+                        match host.stop_transaction(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+}
+
+fn register_chat<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Chat + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chat_create_room",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chat::HostChatCreateRoomRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chat::HostChatCreateRoomResponse =
+                        match host.create_room(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chat_register_bot",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chat::HostChatRegisterBotRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chat::HostChatRegisterBotResponse =
+                        match host.register_bot(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "chat_list_subscribe",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let _ = bytes;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = host.list_subscribe(&cx).await;
+                    Ok(subscription_stream::<
+                        versioned::chat::HostChatListSubscribeItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "chat_post_message",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chat::HostChatPostMessageRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::chat::HostChatPostMessageResponse =
+                        match host.post_message(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "chat_action_subscribe",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let _ = bytes;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = host.action_subscribe(&cx).await;
+                    Ok(subscription_stream::<
+                        versioned::chat::HostChatActionSubscribeItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_subscription(
+            "chat_custom_message_render_subscribe",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::chat::ProductChatCustomMessageRenderSubscribeRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = host.custom_message_render_subscribe(&cx, request).await;
+                    Ok(subscription_stream::<
+                        versioned::chat::ProductChatCustomMessageRenderSubscribeItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+}
+
+fn register_coin_payment<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: CoinPayment + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "coin_payment_create_purse",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::coin_payment::HostCoinPaymentCreatePurseRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::coin_payment::HostCoinPaymentCreatePurseResponse =
+                        match host.create_purse(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "coin_payment_query_purse",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::coin_payment::HostCoinPaymentQueryPurseRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::coin_payment::HostCoinPaymentQueryPurseResponse =
+                        match host.query_purse(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "coin_payment_rebalance_purse",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::coin_payment::HostCoinPaymentRebalancePurseRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = match host.rebalance_purse(&cx, request).await {
+                        Ok(sub) => sub,
+                        Err(err) => return Err(encode_call_error_payload(err)),
+                    };
+                    Ok(subscription_stream::<
+                        versioned::coin_payment::HostCoinPaymentRebalancePurseItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "coin_payment_delete_purse",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::coin_payment::HostCoinPaymentDeletePurseRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = match host.delete_purse(&cx, request).await {
+                        Ok(sub) => sub,
+                        Err(err) => return Err(encode_call_error_payload(err)),
+                    };
+                    Ok(subscription_stream::<
+                        versioned::coin_payment::HostCoinPaymentDeletePurseItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "coin_payment_create_receivable",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::coin_payment::HostCoinPaymentCreateReceivableRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::coin_payment::HostCoinPaymentCreateReceivableResponse =
+                        match host.create_receivable(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "coin_payment_create_cheque",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::coin_payment::HostCoinPaymentCreateChequeRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::coin_payment::HostCoinPaymentCreateChequeResponse =
+                        match host.create_cheque(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "coin_payment_deposit",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::coin_payment::HostCoinPaymentDepositRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = match host.deposit(&cx, request).await {
+                        Ok(sub) => sub,
+                        Err(err) => return Err(encode_call_error_payload(err)),
+                    };
+                    Ok(subscription_stream::<
+                        versioned::coin_payment::HostCoinPaymentDepositItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "coin_payment_refund",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::coin_payment::HostCoinPaymentRefundRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = match host.refund(&cx, request).await {
+                        Ok(sub) => sub,
+                        Err(err) => return Err(encode_call_error_payload(err)),
+                    };
+                    Ok(subscription_stream::<
+                        versioned::coin_payment::HostCoinPaymentRefundItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_subscription(
+            "coin_payment_listen_for_payment",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::coin_payment::HostCoinPaymentListenForRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = match host.listen_for_payment(&cx, request).await {
+                        Ok(sub) => sub,
+                        Err(err) => return Err(encode_call_error_payload(err)),
+                    };
+                    Ok(subscription_stream::<
+                        versioned::coin_payment::HostCoinPaymentListenForItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+}
+
+fn register_entropy<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Entropy + Send + Sync + 'static,
+{
+    {
+        let host = host;
+        dispatcher.on_request(
+            "entropy_derive",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::entropy::HostDeriveEntropyRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::entropy::HostDeriveEntropyResponse =
+                        match host.derive(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+}
+
+fn register_local_storage<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: LocalStorage + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "local_storage_read",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::local_storage::HostLocalStorageReadRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::local_storage::HostLocalStorageReadResponse =
+                        match host.read(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "local_storage_write",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::local_storage::HostLocalStorageWriteRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::local_storage::HostLocalStorageWriteResponse =
+                        match host.write(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_request(
+            "local_storage_clear",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::local_storage::HostLocalStorageClearRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::local_storage::HostLocalStorageClearResponse =
+                        match host.clear(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+}
+
+fn register_notifications<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Notifications + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "notifications_send_push_notification",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::notifications::HostPushNotificationRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::notifications::HostPushNotificationResponse =
+                        match host.send_push_notification(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_request(
+            "notifications_cancel_push_notification",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::notifications::HostPushNotificationCancelRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::notifications::HostPushNotificationCancelResponse =
+                        match host.cancel_push_notification(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+}
+
+fn register_payment<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Payment + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "payment_balance_subscribe",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::payment::HostPaymentBalanceSubscribeRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = match host.balance_subscribe(&cx, request).await {
+                        Ok(sub) => sub,
+                        Err(err) => return Err(encode_call_error_payload(err)),
+                    };
+                    Ok(subscription_stream::<
+                        versioned::payment::HostPaymentBalanceSubscribeItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "payment_request",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::payment::HostPaymentRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::payment::HostPaymentResponse =
+                        match host.request(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "payment_status_subscribe",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::payment::HostPaymentStatusSubscribeRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = match host.status_subscribe(&cx, request).await {
+                        Ok(sub) => sub,
+                        Err(err) => return Err(encode_call_error_payload(err)),
+                    };
+                    Ok(subscription_stream::<
+                        versioned::payment::HostPaymentStatusSubscribeItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_request(
+            "payment_top_up",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::payment::HostPaymentTopUpRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::payment::HostPaymentTopUpResponse =
+                        match host.top_up(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+}
+
+fn register_permissions<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Permissions + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "permissions_request_device_permission",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::permissions::HostDevicePermissionRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::permissions::HostDevicePermissionResponse =
+                        match host.request_device_permission(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_request(
+            "permissions_request_remote_permission",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::permissions::RemotePermissionRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::permissions::RemotePermissionResponse =
+                        match host.request_remote_permission(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+}
+
+fn register_preimage<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Preimage + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "preimage_lookup_subscribe",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::preimage::RemotePreimageLookupSubscribeRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = host.lookup_subscribe(&cx, request).await;
+                    Ok(subscription_stream::<
+                        versioned::preimage::RemotePreimageLookupSubscribeItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_request(
+            "preimage_submit",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::preimage::RemotePreimageSubmitRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::preimage::RemotePreimageSubmitResponse =
+                        match host.submit(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+}
+
+fn register_resource_allocation<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: ResourceAllocation + Send + Sync + 'static,
+{
+    {
+        let host = host;
+        dispatcher.on_request("resource_allocation_request", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::resource_allocation::HostRequestResourceAllocationRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::resource_allocation::HostRequestResourceAllocationResponse = match host.request(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+}
+
+fn register_signing<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Signing + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "signing_create_transaction",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::signing::HostCreateTransactionRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::signing::HostCreateTransactionResponse =
+                        match host.create_transaction(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("signing_create_transaction_with_legacy_account", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::signing::HostCreateTransactionWithLegacyAccountRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::signing::HostCreateTransactionWithLegacyAccountResponse = match host.create_transaction_with_legacy_account(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "signing_sign_raw_with_legacy_account",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::signing::HostSignRawWithLegacyAccountRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::signing::HostSignRawWithLegacyAccountResponse =
+                        match host.sign_raw_with_legacy_account(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "signing_sign_payload_with_legacy_account",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::signing::HostSignPayloadWithLegacyAccountRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::signing::HostSignPayloadWithLegacyAccountResponse =
+                        match host.sign_payload_with_legacy_account(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "signing_sign_raw",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::signing::HostSignRawRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::signing::HostSignRawResponse =
+                        match host.sign_raw(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_request(
+            "signing_sign_payload",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::signing::HostSignPayloadRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::signing::HostSignPayloadResponse =
+                        match host.sign_payload(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+}
+
+fn register_statement_store<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: StatementStore + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_subscription(
+            "statement_store_subscribe",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::statement_store::RemoteStatementStoreSubscribeRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = host.subscribe(&cx, request).await;
+                    Ok(subscription_stream::<
+                        versioned::statement_store::RemoteStatementStoreSubscribeItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("statement_store_create_proof", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::statement_store::RemoteStatementStoreCreateProofRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::statement_store::RemoteStatementStoreCreateProofResponse = match host.create_proof(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request("statement_store_create_proof_authorized", move |request_id: String, bytes: Vec<u8>| {
+            let host = host.clone();
+            Box::pin(async move {
+                let request: versioned::statement_store::RemoteStatementStoreCreateProofAuthorizedRequest =
+                    Decode::decode(&mut &bytes[..]).map_err(|e| encode_decode_error(e.to_string()))?;
+                let cx = CallContext::with_request_id(request_id.clone());
+                let response: versioned::statement_store::RemoteStatementStoreCreateProofAuthorizedResponse = match host.create_proof_authorized(&cx, request).await {
+                    Ok(value) => value,
+                    Err(err) => return Err(encode_call_error_payload(err)),
+                };
+                let mut buf = Vec::with_capacity(1 + response.size_hint());
+                buf.push(0u8);
+                response.encode_to(&mut buf);
+                Ok(buf)
+            })
+        });
+    }
+    {
+        let host = host;
+        dispatcher.on_request(
+            "statement_store_submit",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::statement_store::RemoteStatementStoreSubmitRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    match host.submit(&cx, request).await {
+                        Ok(()) => Ok(vec![0u8]),
+                        Err(err) => Err(encode_call_error_payload(err)),
+                    }
+                })
+            },
+        );
+    }
+}
+
+fn register_system<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: System + Send + Sync + 'static,
+{
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "system_handshake",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::system::HostHandshakeRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::system::HostHandshakeResponse =
+                        match host.handshake(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host.clone();
+        dispatcher.on_request(
+            "system_feature_supported",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::system::HostFeatureSupportedRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::system::HostFeatureSupportedResponse =
+                        match host.feature_supported(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+    {
+        let host = host;
+        dispatcher.on_request(
+            "system_navigate_to",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let request: versioned::system::HostNavigateToRequest =
+                        Decode::decode(&mut &bytes[..])
+                            .map_err(|e| encode_decode_error(e.to_string()))?;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let response: versioned::system::HostNavigateToResponse =
+                        match host.navigate_to(&cx, request).await {
+                            Ok(value) => value,
+                            Err(err) => return Err(encode_call_error_payload(err)),
+                        };
+                    let mut buf = Vec::with_capacity(1 + response.size_hint());
+                    buf.push(0u8);
+                    response.encode_to(&mut buf);
+                    Ok(buf)
+                })
+            },
+        );
+    }
+}
+
+fn register_theme<P>(dispatcher: &mut Dispatcher, host: Arc<P>)
+where
+    P: Theme + Send + Sync + 'static,
+{
+    {
+        let host = host;
+        dispatcher.on_subscription(
+            "theme_subscribe",
+            move |request_id: String, bytes: Vec<u8>| {
+                let host = host.clone();
+                Box::pin(async move {
+                    let _ = bytes;
+                    let cx = CallContext::with_request_id(request_id.clone());
+                    let stream = host.subscribe(&cx).await;
+                    Ok(subscription_stream::<
+                        versioned::theme::HostThemeSubscribeItem,
+                        _,
+                    >(stream))
+                })
+            },
+        );
+    }
+}
diff --git a/rust/crates/truapi-server/src/generated/mod.rs b/rust/crates/truapi-server/src/generated/mod.rs
new file mode 100644
index 00000000..770a015d
--- /dev/null
+++ b/rust/crates/truapi-server/src/generated/mod.rs
@@ -0,0 +1,4 @@
+//! Generated by truapi-codegen. Do not edit.
+
+pub mod dispatcher;
+pub mod wire_table;
diff --git a/rust/crates/truapi-server/src/generated/wire_table.rs b/rust/crates/truapi-server/src/generated/wire_table.rs
new file mode 100644
index 00000000..2b916808
--- /dev/null
+++ b/rust/crates/truapi-server/src/generated/wire_table.rs
@@ -0,0 +1,678 @@
+//! Wire-protocol discriminant table.
+//!
+//! Auto-generated by truapi-codegen. Do not edit.
+//!
+//! Each method reserves either two ids (request/response) or four
+//! (start/stop/interrupt/receive). The table is sorted by request/start id.
+
+// entry id=0 tag="system_handshake_request"
+// entry id=1 tag="system_handshake_response"
+// entry id=2 tag="system_feature_supported_request"
+// entry id=3 tag="system_feature_supported_response"
+// entry id=4 tag="notifications_send_push_notification_request"
+// entry id=5 tag="notifications_send_push_notification_response"
+// entry id=6 tag="system_navigate_to_request"
+// entry id=7 tag="system_navigate_to_response"
+// entry id=8 tag="permissions_request_device_permission_request"
+// entry id=9 tag="permissions_request_device_permission_response"
+// entry id=10 tag="permissions_request_remote_permission_request"
+// entry id=11 tag="permissions_request_remote_permission_response"
+// entry id=12 tag="local_storage_read_request"
+// entry id=13 tag="local_storage_read_response"
+// entry id=14 tag="local_storage_write_request"
+// entry id=15 tag="local_storage_write_response"
+// entry id=16 tag="local_storage_clear_request"
+// entry id=17 tag="local_storage_clear_response"
+// entry id=18 tag="account_connection_status_subscribe_start"
+// entry id=19 tag="account_connection_status_subscribe_stop"
+// entry id=20 tag="account_connection_status_subscribe_interrupt"
+// entry id=21 tag="account_connection_status_subscribe_receive"
+// entry id=22 tag="account_get_account_request"
+// entry id=23 tag="account_get_account_response"
+// entry id=24 tag="account_get_account_alias_request"
+// entry id=25 tag="account_get_account_alias_response"
+// entry id=26 tag="account_create_account_proof_request"
+// entry id=27 tag="account_create_account_proof_response"
+// entry id=28 tag="account_get_legacy_accounts_request"
+// entry id=29 tag="account_get_legacy_accounts_response"
+// entry id=30 tag="signing_create_transaction_request"
+// entry id=31 tag="signing_create_transaction_response"
+// entry id=32 tag="signing_create_transaction_with_legacy_account_request"
+// entry id=33 tag="signing_create_transaction_with_legacy_account_response"
+// entry id=34 tag="signing_sign_raw_with_legacy_account_request"
+// entry id=35 tag="signing_sign_raw_with_legacy_account_response"
+// entry id=36 tag="signing_sign_payload_with_legacy_account_request"
+// entry id=37 tag="signing_sign_payload_with_legacy_account_response"
+// entry id=38 tag="chat_create_room_request"
+// entry id=39 tag="chat_create_room_response"
+// entry id=40 tag="chat_register_bot_request"
+// entry id=41 tag="chat_register_bot_response"
+// entry id=42 tag="chat_list_subscribe_start"
+// entry id=43 tag="chat_list_subscribe_stop"
+// entry id=44 tag="chat_list_subscribe_interrupt"
+// entry id=45 tag="chat_list_subscribe_receive"
+// entry id=46 tag="chat_post_message_request"
+// entry id=47 tag="chat_post_message_response"
+// entry id=48 tag="chat_action_subscribe_start"
+// entry id=49 tag="chat_action_subscribe_stop"
+// entry id=50 tag="chat_action_subscribe_interrupt"
+// entry id=51 tag="chat_action_subscribe_receive"
+// entry id=52 tag="chat_custom_message_render_subscribe_start"
+// entry id=53 tag="chat_custom_message_render_subscribe_stop"
+// entry id=54 tag="chat_custom_message_render_subscribe_interrupt"
+// entry id=55 tag="chat_custom_message_render_subscribe_receive"
+// entry id=56 tag="statement_store_subscribe_start"
+// entry id=57 tag="statement_store_subscribe_stop"
+// entry id=58 tag="statement_store_subscribe_interrupt"
+// entry id=59 tag="statement_store_subscribe_receive"
+// entry id=60 tag="statement_store_create_proof_request"
+// entry id=61 tag="statement_store_create_proof_response"
+// entry id=62 tag="statement_store_submit_request"
+// entry id=63 tag="statement_store_submit_response"
+// entry id=64 tag="preimage_lookup_subscribe_start"
+// entry id=65 tag="preimage_lookup_subscribe_stop"
+// entry id=66 tag="preimage_lookup_subscribe_interrupt"
+// entry id=67 tag="preimage_lookup_subscribe_receive"
+// entry id=68 tag="preimage_submit_request"
+// entry id=69 tag="preimage_submit_response"
+// entry id=76 tag="chain_follow_head_subscribe_start"
+// entry id=77 tag="chain_follow_head_subscribe_stop"
+// entry id=78 tag="chain_follow_head_subscribe_interrupt"
+// entry id=79 tag="chain_follow_head_subscribe_receive"
+// entry id=80 tag="chain_get_head_header_request"
+// entry id=81 tag="chain_get_head_header_response"
+// entry id=82 tag="chain_get_head_body_request"
+// entry id=83 tag="chain_get_head_body_response"
+// entry id=84 tag="chain_get_head_storage_request"
+// entry id=85 tag="chain_get_head_storage_response"
+// entry id=86 tag="chain_call_head_request"
+// entry id=87 tag="chain_call_head_response"
+// entry id=88 tag="chain_unpin_head_request"
+// entry id=89 tag="chain_unpin_head_response"
+// entry id=90 tag="chain_continue_head_request"
+// entry id=91 tag="chain_continue_head_response"
+// entry id=92 tag="chain_stop_head_operation_request"
+// entry id=93 tag="chain_stop_head_operation_response"
+// entry id=94 tag="chain_get_spec_genesis_hash_request"
+// entry id=95 tag="chain_get_spec_genesis_hash_response"
+// entry id=96 tag="chain_get_spec_chain_name_request"
+// entry id=97 tag="chain_get_spec_chain_name_response"
+// entry id=98 tag="chain_get_spec_properties_request"
+// entry id=99 tag="chain_get_spec_properties_response"
+// entry id=100 tag="chain_broadcast_transaction_request"
+// entry id=101 tag="chain_broadcast_transaction_response"
+// entry id=102 tag="chain_stop_transaction_request"
+// entry id=103 tag="chain_stop_transaction_response"
+// entry id=104 tag="theme_subscribe_start"
+// entry id=105 tag="theme_subscribe_stop"
+// entry id=106 tag="theme_subscribe_interrupt"
+// entry id=107 tag="theme_subscribe_receive"
+// entry id=108 tag="entropy_derive_request"
+// entry id=109 tag="entropy_derive_response"
+// entry id=110 tag="account_get_user_id_request"
+// entry id=111 tag="account_get_user_id_response"
+// entry id=112 tag="account_request_login_request"
+// entry id=113 tag="account_request_login_response"
+// entry id=114 tag="signing_sign_raw_request"
+// entry id=115 tag="signing_sign_raw_response"
+// entry id=116 tag="signing_sign_payload_request"
+// entry id=117 tag="signing_sign_payload_response"
+// entry id=118 tag="payment_balance_subscribe_start"
+// entry id=119 tag="payment_balance_subscribe_stop"
+// entry id=120 tag="payment_balance_subscribe_interrupt"
+// entry id=121 tag="payment_balance_subscribe_receive"
+// entry id=122 tag="payment_top_up_request"
+// entry id=123 tag="payment_top_up_response"
+// entry id=124 tag="payment_request_request"
+// entry id=125 tag="payment_request_response"
+// entry id=126 tag="payment_status_subscribe_start"
+// entry id=127 tag="payment_status_subscribe_stop"
+// entry id=128 tag="payment_status_subscribe_interrupt"
+// entry id=129 tag="payment_status_subscribe_receive"
+// entry id=130 tag="resource_allocation_request_request"
+// entry id=131 tag="resource_allocation_request_response"
+// entry id=132 tag="statement_store_create_proof_authorized_request"
+// entry id=133 tag="statement_store_create_proof_authorized_response"
+// entry id=134 tag="notifications_cancel_push_notification_request"
+// entry id=135 tag="notifications_cancel_push_notification_response"
+// entry id=136 tag="coin_payment_create_purse_request"
+// entry id=137 tag="coin_payment_create_purse_response"
+// entry id=138 tag="coin_payment_query_purse_request"
+// entry id=139 tag="coin_payment_query_purse_response"
+// entry id=140 tag="coin_payment_rebalance_purse_start"
+// entry id=141 tag="coin_payment_rebalance_purse_stop"
+// entry id=142 tag="coin_payment_rebalance_purse_interrupt"
+// entry id=143 tag="coin_payment_rebalance_purse_receive"
+// entry id=144 tag="coin_payment_delete_purse_start"
+// entry id=145 tag="coin_payment_delete_purse_stop"
+// entry id=146 tag="coin_payment_delete_purse_interrupt"
+// entry id=147 tag="coin_payment_delete_purse_receive"
+// entry id=148 tag="coin_payment_create_receivable_request"
+// entry id=149 tag="coin_payment_create_receivable_response"
+// entry id=150 tag="coin_payment_create_cheque_request"
+// entry id=151 tag="coin_payment_create_cheque_response"
+// entry id=152 tag="coin_payment_deposit_start"
+// entry id=153 tag="coin_payment_deposit_stop"
+// entry id=154 tag="coin_payment_deposit_interrupt"
+// entry id=155 tag="coin_payment_deposit_receive"
+// entry id=156 tag="coin_payment_refund_start"
+// entry id=157 tag="coin_payment_refund_stop"
+// entry id=158 tag="coin_payment_refund_interrupt"
+// entry id=159 tag="coin_payment_refund_receive"
+// entry id=160 tag="coin_payment_listen_for_payment_start"
+// entry id=161 tag="coin_payment_listen_for_payment_stop"
+// entry id=162 tag="coin_payment_listen_for_payment_interrupt"
+// entry id=163 tag="coin_payment_listen_for_payment_receive"
+
+/// A single wire-table row.
+pub struct WireEntry {
+    /// Method name from the Rust trait.
+    pub method: &'static str,
+    /// What kind of slot this entry describes.
+    pub kind: WireKind,
+}
+
+/// Wire-slot shape: request/response pair or subscription quartet.
+pub enum WireKind {
+    /// Request/response method.
+    Request {
+        /// Discriminant for the request frame.
+        request_id: u8,
+        /// Discriminant for the response frame.
+        response_id: u8,
+    },
+    /// Subscription method.
+    Subscription {
+        /// Discriminant for the start frame.
+        start_id: u8,
+        /// Discriminant for the stop frame.
+        stop_id: u8,
+        /// Discriminant for the interrupt frame (server-initiated termination).
+        interrupt_id: u8,
+        /// Discriminant for each receive frame (a streamed item).
+        receive_id: u8,
+    },
+}
+
+/// The full wire table. Ordering is part of the wire protocol;
+/// only ever append. Removed methods leave their slot empty.
+pub const WIRE_TABLE: &[WireEntry] = &[
+    WireEntry {
+        method: "system_handshake",
+        kind: WireKind::Request {
+            request_id: 0,
+            response_id: 1,
+        },
+    },
+    WireEntry {
+        method: "system_feature_supported",
+        kind: WireKind::Request {
+            request_id: 2,
+            response_id: 3,
+        },
+    },
+    WireEntry {
+        method: "notifications_send_push_notification",
+        kind: WireKind::Request {
+            request_id: 4,
+            response_id: 5,
+        },
+    },
+    WireEntry {
+        method: "system_navigate_to",
+        kind: WireKind::Request {
+            request_id: 6,
+            response_id: 7,
+        },
+    },
+    WireEntry {
+        method: "permissions_request_device_permission",
+        kind: WireKind::Request {
+            request_id: 8,
+            response_id: 9,
+        },
+    },
+    WireEntry {
+        method: "permissions_request_remote_permission",
+        kind: WireKind::Request {
+            request_id: 10,
+            response_id: 11,
+        },
+    },
+    WireEntry {
+        method: "local_storage_read",
+        kind: WireKind::Request {
+            request_id: 12,
+            response_id: 13,
+        },
+    },
+    WireEntry {
+        method: "local_storage_write",
+        kind: WireKind::Request {
+            request_id: 14,
+            response_id: 15,
+        },
+    },
+    WireEntry {
+        method: "local_storage_clear",
+        kind: WireKind::Request {
+            request_id: 16,
+            response_id: 17,
+        },
+    },
+    WireEntry {
+        method: "account_connection_status_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 18,
+            stop_id: 19,
+            interrupt_id: 20,
+            receive_id: 21,
+        },
+    },
+    WireEntry {
+        method: "account_get_account",
+        kind: WireKind::Request {
+            request_id: 22,
+            response_id: 23,
+        },
+    },
+    WireEntry {
+        method: "account_get_account_alias",
+        kind: WireKind::Request {
+            request_id: 24,
+            response_id: 25,
+        },
+    },
+    WireEntry {
+        method: "account_create_account_proof",
+        kind: WireKind::Request {
+            request_id: 26,
+            response_id: 27,
+        },
+    },
+    WireEntry {
+        method: "account_get_legacy_accounts",
+        kind: WireKind::Request {
+            request_id: 28,
+            response_id: 29,
+        },
+    },
+    WireEntry {
+        method: "signing_create_transaction",
+        kind: WireKind::Request {
+            request_id: 30,
+            response_id: 31,
+        },
+    },
+    WireEntry {
+        method: "signing_create_transaction_with_legacy_account",
+        kind: WireKind::Request {
+            request_id: 32,
+            response_id: 33,
+        },
+    },
+    WireEntry {
+        method: "signing_sign_raw_with_legacy_account",
+        kind: WireKind::Request {
+            request_id: 34,
+            response_id: 35,
+        },
+    },
+    WireEntry {
+        method: "signing_sign_payload_with_legacy_account",
+        kind: WireKind::Request {
+            request_id: 36,
+            response_id: 37,
+        },
+    },
+    WireEntry {
+        method: "chat_create_room",
+        kind: WireKind::Request {
+            request_id: 38,
+            response_id: 39,
+        },
+    },
+    WireEntry {
+        method: "chat_register_bot",
+        kind: WireKind::Request {
+            request_id: 40,
+            response_id: 41,
+        },
+    },
+    WireEntry {
+        method: "chat_list_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 42,
+            stop_id: 43,
+            interrupt_id: 44,
+            receive_id: 45,
+        },
+    },
+    WireEntry {
+        method: "chat_post_message",
+        kind: WireKind::Request {
+            request_id: 46,
+            response_id: 47,
+        },
+    },
+    WireEntry {
+        method: "chat_action_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 48,
+            stop_id: 49,
+            interrupt_id: 50,
+            receive_id: 51,
+        },
+    },
+    WireEntry {
+        method: "chat_custom_message_render_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 52,
+            stop_id: 53,
+            interrupt_id: 54,
+            receive_id: 55,
+        },
+    },
+    WireEntry {
+        method: "statement_store_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 56,
+            stop_id: 57,
+            interrupt_id: 58,
+            receive_id: 59,
+        },
+    },
+    WireEntry {
+        method: "statement_store_create_proof",
+        kind: WireKind::Request {
+            request_id: 60,
+            response_id: 61,
+        },
+    },
+    WireEntry {
+        method: "statement_store_submit",
+        kind: WireKind::Request {
+            request_id: 62,
+            response_id: 63,
+        },
+    },
+    WireEntry {
+        method: "preimage_lookup_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 64,
+            stop_id: 65,
+            interrupt_id: 66,
+            receive_id: 67,
+        },
+    },
+    WireEntry {
+        method: "preimage_submit",
+        kind: WireKind::Request {
+            request_id: 68,
+            response_id: 69,
+        },
+    },
+    WireEntry {
+        method: "chain_follow_head_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 76,
+            stop_id: 77,
+            interrupt_id: 78,
+            receive_id: 79,
+        },
+    },
+    WireEntry {
+        method: "chain_get_head_header",
+        kind: WireKind::Request {
+            request_id: 80,
+            response_id: 81,
+        },
+    },
+    WireEntry {
+        method: "chain_get_head_body",
+        kind: WireKind::Request {
+            request_id: 82,
+            response_id: 83,
+        },
+    },
+    WireEntry {
+        method: "chain_get_head_storage",
+        kind: WireKind::Request {
+            request_id: 84,
+            response_id: 85,
+        },
+    },
+    WireEntry {
+        method: "chain_call_head",
+        kind: WireKind::Request {
+            request_id: 86,
+            response_id: 87,
+        },
+    },
+    WireEntry {
+        method: "chain_unpin_head",
+        kind: WireKind::Request {
+            request_id: 88,
+            response_id: 89,
+        },
+    },
+    WireEntry {
+        method: "chain_continue_head",
+        kind: WireKind::Request {
+            request_id: 90,
+            response_id: 91,
+        },
+    },
+    WireEntry {
+        method: "chain_stop_head_operation",
+        kind: WireKind::Request {
+            request_id: 92,
+            response_id: 93,
+        },
+    },
+    WireEntry {
+        method: "chain_get_spec_genesis_hash",
+        kind: WireKind::Request {
+            request_id: 94,
+            response_id: 95,
+        },
+    },
+    WireEntry {
+        method: "chain_get_spec_chain_name",
+        kind: WireKind::Request {
+            request_id: 96,
+            response_id: 97,
+        },
+    },
+    WireEntry {
+        method: "chain_get_spec_properties",
+        kind: WireKind::Request {
+            request_id: 98,
+            response_id: 99,
+        },
+    },
+    WireEntry {
+        method: "chain_broadcast_transaction",
+        kind: WireKind::Request {
+            request_id: 100,
+            response_id: 101,
+        },
+    },
+    WireEntry {
+        method: "chain_stop_transaction",
+        kind: WireKind::Request {
+            request_id: 102,
+            response_id: 103,
+        },
+    },
+    WireEntry {
+        method: "theme_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 104,
+            stop_id: 105,
+            interrupt_id: 106,
+            receive_id: 107,
+        },
+    },
+    WireEntry {
+        method: "entropy_derive",
+        kind: WireKind::Request {
+            request_id: 108,
+            response_id: 109,
+        },
+    },
+    WireEntry {
+        method: "account_get_user_id",
+        kind: WireKind::Request {
+            request_id: 110,
+            response_id: 111,
+        },
+    },
+    WireEntry {
+        method: "account_request_login",
+        kind: WireKind::Request {
+            request_id: 112,
+            response_id: 113,
+        },
+    },
+    WireEntry {
+        method: "signing_sign_raw",
+        kind: WireKind::Request {
+            request_id: 114,
+            response_id: 115,
+        },
+    },
+    WireEntry {
+        method: "signing_sign_payload",
+        kind: WireKind::Request {
+            request_id: 116,
+            response_id: 117,
+        },
+    },
+    WireEntry {
+        method: "payment_balance_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 118,
+            stop_id: 119,
+            interrupt_id: 120,
+            receive_id: 121,
+        },
+    },
+    WireEntry {
+        method: "payment_top_up",
+        kind: WireKind::Request {
+            request_id: 122,
+            response_id: 123,
+        },
+    },
+    WireEntry {
+        method: "payment_request",
+        kind: WireKind::Request {
+            request_id: 124,
+            response_id: 125,
+        },
+    },
+    WireEntry {
+        method: "payment_status_subscribe",
+        kind: WireKind::Subscription {
+            start_id: 126,
+            stop_id: 127,
+            interrupt_id: 128,
+            receive_id: 129,
+        },
+    },
+    WireEntry {
+        method: "resource_allocation_request",
+        kind: WireKind::Request {
+            request_id: 130,
+            response_id: 131,
+        },
+    },
+    WireEntry {
+        method: "statement_store_create_proof_authorized",
+        kind: WireKind::Request {
+            request_id: 132,
+            response_id: 133,
+        },
+    },
+    WireEntry {
+        method: "notifications_cancel_push_notification",
+        kind: WireKind::Request {
+            request_id: 134,
+            response_id: 135,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_create_purse",
+        kind: WireKind::Request {
+            request_id: 136,
+            response_id: 137,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_query_purse",
+        kind: WireKind::Request {
+            request_id: 138,
+            response_id: 139,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_rebalance_purse",
+        kind: WireKind::Subscription {
+            start_id: 140,
+            stop_id: 141,
+            interrupt_id: 142,
+            receive_id: 143,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_delete_purse",
+        kind: WireKind::Subscription {
+            start_id: 144,
+            stop_id: 145,
+            interrupt_id: 146,
+            receive_id: 147,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_create_receivable",
+        kind: WireKind::Request {
+            request_id: 148,
+            response_id: 149,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_create_cheque",
+        kind: WireKind::Request {
+            request_id: 150,
+            response_id: 151,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_deposit",
+        kind: WireKind::Subscription {
+            start_id: 152,
+            stop_id: 153,
+            interrupt_id: 154,
+            receive_id: 155,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_refund",
+        kind: WireKind::Subscription {
+            start_id: 156,
+            stop_id: 157,
+            interrupt_id: 158,
+            receive_id: 159,
+        },
+    },
+    WireEntry {
+        method: "coin_payment_listen_for_payment",
+        kind: WireKind::Subscription {
+            start_id: 160,
+            stop_id: 161,
+            interrupt_id: 162,
+            receive_id: 163,
+        },
+    },
+];
diff --git a/rust/crates/truapi-server/src/host_logic/dotns.rs b/rust/crates/truapi-server/src/host_logic/dotns.rs
new file mode 100644
index 00000000..3c8dafda
--- /dev/null
+++ b/rust/crates/truapi-server/src/host_logic/dotns.rs
@@ -0,0 +1,562 @@
+//! dotns URL parsing, normalization, and classification.
+//!
+//! The Rust core owns the whole decision so every platform host sees the
+//! same categorization and the `navigate_to` callback only receives
+//! already-validated input.
+
+use unicode_normalization::UnicodeNormalization;
+use url::Url;
+
+/// How the input URL should be opened. Kept in one enum rather than passing
+/// a raw string so the dispatcher can reject invalid input before reaching
+/// any platform callback.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum NavigateDecision {
+    /// A `.dot` identifier plus path/query/hash suffix (no leading `/`).
+    DotName {
+        /// Lower-cased `.dot` host (e.g. `mytestapp.dot`).
+        identifier: String,
+        /// Path/query/hash suffix without a leading `/`.
+        path: String,
+    },
+    /// A `localhost[:port]` URL plus path/query/hash suffix (no leading `/`).
+    Localhost {
+        /// `localhost` with optional `:port` suffix.
+        host: String,
+        /// Path/query/hash suffix without a leading `/`.
+        path: String,
+    },
+    /// An absolute external URL with an `http(s):` scheme prepended if missing.
+    External {
+        /// Canonical URL string.
+        url: String,
+    },
+    /// Input that fails every branch: empty, unparseable, or a `.dot` URL
+    /// carrying port/userinfo (both forbidden since dotns resolves via the
+    /// chain and has no notion of either).
+    Reject {
+        /// Human-readable reason for the rejection.
+        reason: String,
+    },
+}
+
+impl NavigateDecision {
+    /// Canonical URL string for the three `Open*` variants; `None` for
+    /// `Reject`. `DotName` and `Localhost` keep the dotns/localhost identity
+    /// visible so env-aware hosts (e.g. dotli rewriting `.dot` to `.dot.li`)
+    /// can re-parse and do their own assembly without losing information.
+    pub fn canonical_url(&self) -> Option<String> {
+        match self {
+            Self::DotName { identifier, path } => Some(join_url("https://", identifier, path)),
+            Self::Localhost { host, path } => Some(join_url("http://", host, path)),
+            Self::External { url } => Some(url.clone()),
+            Self::Reject { .. } => None,
+        }
+    }
+}
+
+fn join_url(scheme: &str, host: &str, path: &str) -> String {
+    if path.is_empty() {
+        format!("{scheme}{host}")
+    } else {
+        format!("{scheme}{host}/{path}")
+    }
+}
+
+/// Classify a URL the way dotli's `handleNavigateTo` does: try `.dot` first,
+/// then `localhost`, then normalize as external.
+pub fn parse_navigate(input: &str) -> NavigateDecision {
+    let trimmed = input.trim();
+    if trimmed.is_empty() {
+        return NavigateDecision::Reject {
+            reason: "empty input".to_string(),
+        };
+    }
+
+    if let Some(decision) = classify_dot(trimmed) {
+        return decision;
+    }
+
+    if let Some(decision) = classify_localhost(trimmed) {
+        return decision;
+    }
+
+    match normalize_external(trimmed) {
+        Ok(url) => NavigateDecision::External { url },
+        Err(reason) => NavigateDecision::Reject { reason },
+    }
+}
+
+/// Canonical host form: case-folded and NFC-normalized (belt-and-suspenders;
+/// `url` already applies IDNA to parsed hosts), with a trailing root dot
+/// dropped so the absolute form `example.dot.` keys identically to
+/// `example.dot`.
+fn normalize_host(host: &str) -> String {
+    let normalized: String = host.nfc().collect::<String>().to_lowercase();
+    normalized
+        .strip_suffix('.')
+        .unwrap_or(&normalized)
+        .to_string()
+}
+
+/// `.dot` TLD check, applied to the [`normalize_host`] form so `Example.DOT`
+/// and the trailing-dot FQDN `example.dot.` classify like `example.dot`.
+fn is_dot_domain(host: &str) -> bool {
+    normalize_host(host).ends_with(".dot")
+}
+
+fn parse_with_explicit_https(input: &str) -> Option<Url> {
+    if let Ok(direct) = Url::parse(input) {
+        return Some(direct);
+    }
+    Url::parse(&format!("https://{input}")).ok()
+}
+
+/// Recognize `.dot` URLs (including the `polkadot://` scheme). Returns:
+/// - `Some(DotName)` for a clean `.dot` URL
+/// - `Some(Reject)` for a `.dot` URL with port or userinfo
+/// - `None` when the input isn't a `.dot` URL (caller falls through to
+///   localhost / external)
+fn classify_dot(input: &str) -> Option<NavigateDecision> {
+    let parsed = if input.starts_with("polkadot://") {
+        Url::parse(input).ok()?
+    } else {
+        parse_with_explicit_https(input)?
+    };
+
+    let hostname = parsed.host_str()?;
+    if !is_dot_domain(hostname) {
+        return None;
+    }
+
+    if parsed.port().is_some() || !parsed.username().is_empty() || parsed.password().is_some() {
+        return Some(NavigateDecision::Reject {
+            reason: format!("{hostname} carries port or userinfo; dotns forbids both"),
+        });
+    }
+
+    Some(NavigateDecision::DotName {
+        identifier: normalize_host(hostname),
+        path: strip_leading_slash(parsed.path()) + &suffix(&parsed),
+    })
+}
+
+/// Recognize `localhost[:port]` URLs, with or without an explicit scheme.
+fn classify_localhost(input: &str) -> Option<NavigateDecision> {
+    let with_scheme = if input.starts_with("localhost") {
+        format!("http://{input}")
+    } else {
+        input.to_string()
+    };
+
+    let parsed = Url::parse(&with_scheme).ok()?;
+    if parsed.host_str()? != "localhost" {
+        return None;
+    }
+
+    let host = match parsed.port() {
+        Some(port) => format!("localhost:{port}"),
+        None => "localhost".to_string(),
+    };
+
+    Some(NavigateDecision::Localhost {
+        host,
+        path: strip_leading_slash(parsed.path()) + &suffix(&parsed),
+    })
+}
+
+/// External URL scheme allowlist. Anything outside this set is treated as
+/// a [`NavigateDecision::Reject`] so dangerous schemes (`javascript:`,
+/// `data:`, `file:`, `vbscript:`, ...) cannot reach `Platform::navigate_to`.
+const ALLOWED_EXTERNAL_SCHEMES: &[&str] = &["http", "https", "mailto", "tel", "polkadot", "dot"];
+
+/// Mirrors `normalizeUrl`: prepend `https://` if missing, otherwise pass the
+/// URL through as its canonical string form. Returns `Err(reason)` for an
+/// unparseable input or a scheme outside [`ALLOWED_EXTERNAL_SCHEMES`].
+fn normalize_external(input: &str) -> Result<String, String> {
+    // `parse_with_explicit_https` returns a successful direct parse as-is and
+    // only prepends `https://` when the direct parse fails, so a disallowed
+    // scheme (e.g. `javascript:`) is never rewritten to https: the single
+    // scheme check below rejects it.
+    let url = parse_with_explicit_https(input)
+        .ok_or_else(|| "URL constructor rejected input".to_string())?;
+    if !ALLOWED_EXTERNAL_SCHEMES.contains(&url.scheme()) {
+        return Err(format!("scheme `{}` is not allowed", url.scheme()));
+    }
+    Ok(url.to_string())
+}
+
+fn strip_leading_slash(path: &str) -> String {
+    path.strip_prefix('/').unwrap_or(path).to_string()
+}
+
+fn suffix(url: &Url) -> String {
+    let mut out = String::new();
+    if let Some(q) = url.query() {
+        out.push('?');
+        out.push_str(q);
+    }
+    if let Some(f) = url.fragment() {
+        out.push('#');
+        out.push_str(f);
+    }
+    out
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn dot(identifier: &str, path: &str) -> NavigateDecision {
+        NavigateDecision::DotName {
+            identifier: identifier.to_string(),
+            path: path.to_string(),
+        }
+    }
+
+    fn localhost(host: &str, path: &str) -> NavigateDecision {
+        NavigateDecision::Localhost {
+            host: host.to_string(),
+            path: path.to_string(),
+        }
+    }
+
+    fn external(url: &str) -> NavigateDecision {
+        NavigateDecision::External {
+            url: url.to_string(),
+        }
+    }
+
+    #[test]
+    fn dot_bare() {
+        assert_eq!(parse_navigate("mytestapp.dot"), dot("mytestapp.dot", ""));
+    }
+
+    #[test]
+    fn dot_trailing_root_dot_is_a_product() {
+        // The absolute FQDN form classifies and keys like the bare name.
+        assert_eq!(parse_navigate("example.dot."), dot("example.dot", ""));
+        assert_eq!(
+            parse_navigate("https://example.dot./path"),
+            dot("example.dot", "path")
+        );
+    }
+
+    #[test]
+    fn dot_li_is_not_a_product() {
+        assert_eq!(
+            parse_navigate("mytestapp.dot.li"),
+            external("https://mytestapp.dot.li/")
+        );
+    }
+
+    #[test]
+    fn dot_with_https() {
+        assert_eq!(
+            parse_navigate("https://mytestapp.dot"),
+            dot("mytestapp.dot", "")
+        );
+    }
+
+    #[test]
+    fn dot_with_http() {
+        assert_eq!(
+            parse_navigate("http://mytestapp.dot"),
+            dot("mytestapp.dot", "")
+        );
+    }
+
+    #[test]
+    fn dot_with_path() {
+        assert_eq!(
+            parse_navigate("mytestapp.dot/some/path"),
+            dot("mytestapp.dot", "some/path")
+        );
+    }
+
+    #[test]
+    fn dot_with_query_only() {
+        assert_eq!(
+            parse_navigate("pr508.faucet.dot?embed=1"),
+            dot("pr508.faucet.dot", "?embed=1")
+        );
+    }
+
+    #[test]
+    fn dot_with_hash_only() {
+        assert_eq!(
+            parse_navigate("pr508.faucet.dot#section=main"),
+            dot("pr508.faucet.dot", "#section=main")
+        );
+    }
+
+    #[test]
+    fn dot_with_path_query_hash() {
+        assert_eq!(
+            parse_navigate("pr508.faucet.dot/nested/path?embed=1#frame=compact"),
+            dot("pr508.faucet.dot", "nested/path?embed=1#frame=compact")
+        );
+    }
+
+    #[test]
+    fn polkadot_scheme_dot_host() {
+        assert_eq!(
+            parse_navigate("polkadot://currenthost.dot/mytestapp.dot"),
+            dot("currenthost.dot", "mytestapp.dot")
+        );
+    }
+
+    #[test]
+    fn polkadot_scheme_non_dot_host_falls_through() {
+        match parse_navigate("polkadot://example.com/settings") {
+            NavigateDecision::External { .. } | NavigateDecision::Reject { .. } => {}
+            other => panic!("expected External or Reject, got {other:?}"),
+        }
+    }
+
+    #[test]
+    fn polkadot_scheme_with_path() {
+        assert_eq!(
+            parse_navigate("polkadot://currenthost.dot/mytestapp.dot/settings"),
+            dot("currenthost.dot", "mytestapp.dot/settings")
+        );
+    }
+
+    #[test]
+    fn polkadot_scheme_with_query_and_hash() {
+        assert_eq!(
+            parse_navigate("polkadot://currenthost.dot/mytestapp.dot?embed=1#frame=compact"),
+            dot("currenthost.dot", "mytestapp.dot?embed=1#frame=compact")
+        );
+    }
+
+    #[test]
+    fn dot_subdomain() {
+        assert_eq!(
+            parse_navigate("sub.acme.dot/path"),
+            dot("sub.acme.dot", "path")
+        );
+    }
+
+    #[test]
+    fn dot_with_mixed_case_normalizes() {
+        assert_eq!(
+            parse_navigate("Example.DOT/Path"),
+            dot("example.dot", "Path")
+        );
+    }
+
+    #[test]
+    fn dot_with_port_is_rejected() {
+        assert!(matches!(
+            parse_navigate("https://x.dot:8080/path"),
+            NavigateDecision::Reject { .. }
+        ));
+    }
+
+    #[test]
+    fn dot_with_userinfo_is_rejected() {
+        assert!(matches!(
+            parse_navigate("https://user:pass@x.dot/path"),
+            NavigateDecision::Reject { .. }
+        ));
+    }
+
+    #[test]
+    fn trim_whitespace() {
+        assert_eq!(
+            parse_navigate("  mytestapp.dot/path  "),
+            dot("mytestapp.dot", "path")
+        );
+    }
+
+    #[test]
+    fn localhost_bare_with_port() {
+        assert_eq!(
+            parse_navigate("localhost:3000"),
+            localhost("localhost:3000", "")
+        );
+    }
+
+    #[test]
+    fn localhost_with_port_and_path() {
+        assert_eq!(
+            parse_navigate("localhost:3000/some/path"),
+            localhost("localhost:3000", "some/path")
+        );
+    }
+
+    #[test]
+    fn localhost_with_explicit_http() {
+        assert_eq!(
+            parse_navigate("http://localhost:5000"),
+            localhost("localhost:5000", "")
+        );
+    }
+
+    #[test]
+    fn localhost_with_http_and_path() {
+        assert_eq!(
+            parse_navigate("http://localhost:5000/path"),
+            localhost("localhost:5000", "path")
+        );
+    }
+
+    #[test]
+    fn localhost_with_query_and_hash() {
+        assert_eq!(
+            parse_navigate("localhost:3000/path?q=1#h"),
+            localhost("localhost:3000", "path?q=1#h")
+        );
+    }
+
+    #[test]
+    fn localhost_without_port() {
+        assert_eq!(parse_navigate("localhost"), localhost("localhost", ""));
+    }
+
+    #[test]
+    fn localhost_without_port_with_path() {
+        assert_eq!(
+            parse_navigate("localhost/path"),
+            localhost("localhost", "path")
+        );
+    }
+
+    #[test]
+    fn external_bare_domain() {
+        assert_eq!(
+            parse_navigate("google.com"),
+            external("https://google.com/")
+        );
+    }
+
+    #[test]
+    fn external_bare_domain_with_path() {
+        assert_eq!(
+            parse_navigate("google.com/search?q=test"),
+            external("https://google.com/search?q=test")
+        );
+    }
+
+    #[test]
+    fn external_preserves_https() {
+        assert_eq!(
+            parse_navigate("https://example.com/page"),
+            external("https://example.com/page")
+        );
+    }
+
+    #[test]
+    fn external_preserves_http() {
+        assert_eq!(
+            parse_navigate("http://example.com/page"),
+            external("http://example.com/page")
+        );
+    }
+
+    #[test]
+    fn external_dot_li() {
+        assert_eq!(
+            parse_navigate("acme.dot.li/path/1"),
+            external("https://acme.dot.li/path/1")
+        );
+    }
+
+    #[test]
+    fn reject_empty() {
+        assert!(matches!(
+            parse_navigate(""),
+            NavigateDecision::Reject { .. }
+        ));
+    }
+
+    #[test]
+    fn reject_whitespace() {
+        assert!(matches!(
+            parse_navigate("   "),
+            NavigateDecision::Reject { .. }
+        ));
+    }
+
+    #[test]
+    fn reject_unparseable() {
+        assert!(matches!(
+            parse_navigate(":::invalid"),
+            NavigateDecision::Reject { .. }
+        ));
+    }
+
+    /// `javascript:` URIs must never reach the platform's `navigate_to`;
+    /// otherwise a malicious product could execute arbitrary JS in the host.
+    #[test]
+    fn reject_javascript_uri() {
+        assert!(
+            matches!(
+                parse_navigate("javascript:alert(1)"),
+                NavigateDecision::Reject { .. }
+            ),
+            "javascript: scheme must be rejected"
+        );
+    }
+
+    /// `file:` URIs leak local filesystem paths; reject them.
+    #[test]
+    fn reject_file_uri() {
+        assert!(
+            matches!(
+                parse_navigate("file:///etc/passwd"),
+                NavigateDecision::Reject { .. }
+            ),
+            "file: scheme must be rejected"
+        );
+    }
+
+    /// `data:` URIs can carry inline HTML/JS payloads; reject them.
+    #[test]
+    fn reject_data_uri() {
+        assert!(
+            matches!(
+                parse_navigate("data:text/html,<script>alert(1)</script>"),
+                NavigateDecision::Reject { .. }
+            ),
+            "data: scheme must be rejected"
+        );
+    }
+
+    /// `vbscript:` URIs are the legacy IE equivalent of `javascript:`;
+    /// reject them too even though modern browsers don't execute them.
+    #[test]
+    fn reject_vbscript_uri() {
+        assert!(
+            matches!(
+                parse_navigate("vbscript:msgbox(1)"),
+                NavigateDecision::Reject { .. }
+            ),
+            "vbscript: scheme must be rejected"
+        );
+    }
+
+    /// NFC-normalized and NFD-normalized inputs that represent the same
+    /// dotns name must produce the same `DotName.identifier` so downstream
+    /// resolution can't be fooled into looking up two different lookup keys
+    /// for one visual identity.
+    #[test]
+    fn nfc_normalization_collapses_nfd() {
+        let nfc = parse_navigate("café.dot");
+        let nfd = parse_navigate("cafe\u{0301}.dot");
+        match (&nfc, &nfd) {
+            (
+                NavigateDecision::DotName {
+                    identifier: a,
+                    path: _,
+                },
+                NavigateDecision::DotName {
+                    identifier: b,
+                    path: _,
+                },
+            ) => assert_eq!(a, b, "NFC and NFD inputs must normalize to one identifier"),
+            other => panic!("expected two DotName decisions, got {other:?}"),
+        }
+    }
+}
diff --git a/rust/crates/truapi-server/src/host_logic/features.rs b/rust/crates/truapi-server/src/host_logic/features.rs
new file mode 100644
index 00000000..8db69d8d
--- /dev/null
+++ b/rust/crates/truapi-server/src/host_logic/features.rs
@@ -0,0 +1,72 @@
+//! Feature-detection delegation.
+//!
+//! `feature_supported` is a platform syscall: each host owns the set of
+//! chains it can service. This module is a thin shim that forwards the
+//! request through to [`truapi_platform::Features`].
+
+use truapi::v01::GenericError;
+use truapi::versioned::system::{HostFeatureSupportedRequest, HostFeatureSupportedResponse};
+use truapi_platform::Features;
+
+/// Forward a feature-support query to the platform implementation.
+pub async fn feature_supported<P: Features>(
+    platform: &P,
+    request: HostFeatureSupportedRequest,
+) -> Result<HostFeatureSupportedResponse, GenericError> {
+    platform.feature_supported(request).await
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use truapi::v01;
+
+    struct AlwaysSupported;
+
+    impl Features for AlwaysSupported {
+        async fn feature_supported(
+            &self,
+            request: HostFeatureSupportedRequest,
+        ) -> Result<HostFeatureSupportedResponse, GenericError> {
+            let HostFeatureSupportedRequest::V1(_) = request;
+            Ok(HostFeatureSupportedResponse::V1(
+                v01::HostFeatureSupportedResponse { supported: true },
+            ))
+        }
+    }
+
+    struct AlwaysUnsupported;
+
+    impl Features for AlwaysUnsupported {
+        async fn feature_supported(
+            &self,
+            request: HostFeatureSupportedRequest,
+        ) -> Result<HostFeatureSupportedResponse, GenericError> {
+            let HostFeatureSupportedRequest::V1(_) = request;
+            Ok(HostFeatureSupportedResponse::V1(
+                v01::HostFeatureSupportedResponse { supported: false },
+            ))
+        }
+    }
+
+    fn req() -> HostFeatureSupportedRequest {
+        HostFeatureSupportedRequest::V1(v01::HostFeatureSupportedRequest::Chain {
+            genesis_hash: vec![0u8; 32],
+        })
+    }
+
+    #[test]
+    fn delegates_supported_to_platform() {
+        let resp = futures::executor::block_on(feature_supported(&AlwaysSupported, req())).unwrap();
+        let HostFeatureSupportedResponse::V1(inner) = resp;
+        assert!(inner.supported);
+    }
+
+    #[test]
+    fn delegates_unsupported_to_platform() {
+        let resp =
+            futures::executor::block_on(feature_supported(&AlwaysUnsupported, req())).unwrap();
+        let HostFeatureSupportedResponse::V1(inner) = resp;
+        assert!(!inner.supported);
+    }
+}
diff --git a/rust/crates/truapi-server/src/host_logic/mod.rs b/rust/crates/truapi-server/src/host_logic/mod.rs
new file mode 100644
index 00000000..a96cd637
--- /dev/null
+++ b/rust/crates/truapi-server/src/host_logic/mod.rs
@@ -0,0 +1,10 @@
+//! Host-agnostic logic the Rust core owns on behalf of every platform host.
+//!
+//! Platform callbacks are a syscall layer for OS primitives (modals, native
+//! storage, URL handler, notification center). Everything else lives here so
+//! iOS, Android, and web hosts share one canonical implementation.
+
+pub mod dotns;
+pub mod features;
+pub mod permissions;
+pub mod session;
diff --git a/rust/crates/truapi-server/src/host_logic/permissions.rs b/rust/crates/truapi-server/src/host_logic/permissions.rs
new file mode 100644
index 00000000..31a19817
--- /dev/null
+++ b/rust/crates/truapi-server/src/host_logic/permissions.rs
@@ -0,0 +1,568 @@
+//! Permission state machine (ask -> granted | denied), backed by the platform
+//! [`Storage`] trait with a reserved `truapi:permissions:` key prefix.
+//!
+//! The v0.1 wire protocol keeps device permissions (camera, mic, NFC, ...)
+//! separate from remote permissions (domain access, chain submit, ...), so
+//! this module exposes two `check_or_prompt` entrypoints that route to the
+//! matching platform callback. The cache layer is shared but keys live in
+//! distinct sub-namespaces so a device grant cannot authorize a remote
+//! operation by accident.
+
+use parity_scale_codec::{Decode, Encode};
+
+use truapi::v01::{
+    HostDevicePermissionRequest, HostDevicePermissionResponse, HostLocalStorageReadError,
+    RemotePermission, RemotePermissionRequest, RemotePermissionResponse,
+};
+use truapi_platform::{Permissions, Storage};
+
+/// Reserved key prefix for permission state. Hosts must not use keys under
+/// this prefix for anything else so core can own the namespace.
+pub const PERMISSION_KEY_PREFIX: &str = "truapi:permissions:";
+
+/// Persisted answer for a single permission request.
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Encode, Decode)]
+pub enum Decision {
+    /// User granted the permission.
+    Granted,
+    /// User denied the permission.
+    Denied,
+}
+
+/// Coordinator that inspects persisted state first, falls back to the
+/// platform's prompt callback, and writes the decision back so future calls
+/// short-circuit. Generic over the concrete `Storage` + `Permissions` impls
+/// so callers (e.g. `PlatformRuntimeHost<P>`) can stay non-`dyn`.
+pub struct PermissionsService<'a, S: Storage, P: Permissions> {
+    storage: &'a S,
+    prompt: &'a P,
+}
+
+impl<'a, S: Storage, P: Permissions> PermissionsService<'a, S, P> {
+    /// Construct a service backed by the given storage + prompt callbacks.
+    pub fn new(storage: &'a S, prompt: &'a P) -> Self {
+        Self { storage, prompt }
+    }
+
+    /// Returns the stored decision for a device permission without prompting.
+    pub async fn peek_device(
+        &self,
+        permission: &HostDevicePermissionRequest,
+    ) -> Result<Option<Decision>, HostLocalStorageReadError> {
+        peek(self.storage, &device_storage_key(permission)).await
+    }
+
+    /// Returns the stored decision for a remote permission without
+    /// prompting.
+    pub async fn peek_remote(
+        &self,
+        request: &RemotePermissionRequest,
+    ) -> Result<Option<Decision>, HostLocalStorageReadError> {
+        peek(self.storage, &remote_storage_key(request)).await
+    }
+
+    /// Returns the cached device decision if any, otherwise prompts the
+    /// platform's `device_permission` callback and persists the answer.
+    pub async fn check_or_prompt_device(
+        &self,
+        permission: HostDevicePermissionRequest,
+    ) -> Result<Decision, HostLocalStorageReadError> {
+        let key = device_storage_key(&permission);
+        if let Some(cached) = peek(self.storage, &key).await? {
+            return Ok(cached);
+        }
+        // Only a genuine user decision is persisted. A prompt-callback error is
+        // transient (UI unavailable, IPC timeout), not a denial, so fail closed
+        // for this call but do not cache it — the next request re-prompts rather
+        // than locking the capability out permanently with no revoke path.
+        let granted = match self.prompt.device_permission(permission).await {
+            Ok(HostDevicePermissionResponse { granted }) => granted,
+            Err(_) => return Ok(Decision::Denied),
+        };
+        let decision = if granted {
+            Decision::Granted
+        } else {
+            Decision::Denied
+        };
+        self.storage.write(key, decision.encode()).await?;
+        Ok(decision)
+    }
+
+    /// Returns the cached remote decision if any, otherwise prompts the
+    /// platform's `remote_permission` callback and persists the answer.
+    pub async fn check_or_prompt_remote(
+        &self,
+        request: RemotePermissionRequest,
+    ) -> Result<Decision, HostLocalStorageReadError> {
+        let key = remote_storage_key(&request);
+        if let Some(cached) = peek(self.storage, &key).await? {
+            return Ok(cached);
+        }
+        // See `check_or_prompt_device`: persist only a genuine user decision; a
+        // transient callback error fails closed for this call without caching.
+        let granted = match self.prompt.remote_permission(request).await {
+            Ok(RemotePermissionResponse { granted }) => granted,
+            Err(_) => return Ok(Decision::Denied),
+        };
+        let decision = if granted {
+            Decision::Granted
+        } else {
+            Decision::Denied
+        };
+        self.storage.write(key, decision.encode()).await?;
+        Ok(decision)
+    }
+}
+
+async fn peek<S: Storage>(
+    storage: &S,
+    key: &str,
+) -> Result<Option<Decision>, HostLocalStorageReadError> {
+    let Some(raw) = storage.read(key.to_string()).await? else {
+        return Ok(None);
+    };
+    Ok(Decision::decode(&mut &*raw).ok())
+}
+
+/// Canonical storage key for a device permission. The slug is human-readable
+/// so a host developer inspecting storage can tell what's there.
+pub fn device_storage_key(permission: &HostDevicePermissionRequest) -> String {
+    format!("{PERMISSION_KEY_PREFIX}device:{}", device_slug(permission))
+}
+
+/// Canonical storage key for a remote permission. The permission is
+/// canonicalized (domain lists lowercased, sorted, and de-duplicated) then
+/// SCALE-encoded and hex-encoded so attacker-controlled domain strings cannot
+/// collide with another permission by injecting separator characters.
+pub fn remote_storage_key(request: &RemotePermissionRequest) -> String {
+    let canonical = canonical_remote_request(request);
+    format!(
+        "{PERMISSION_KEY_PREFIX}remote:{}",
+        hex::encode(canonical.encode())
+    )
+}
+
+fn canonical_remote_request(request: &RemotePermissionRequest) -> RemotePermissionRequest {
+    let permission = match &request.permission {
+        RemotePermission::Remote { domains } => {
+            // DNS domains are case-insensitive, so a logically-identical bundle
+            // requested with different casing or duplicate entries must
+            // canonicalize to one key (no spurious re-prompt).
+            let mut canonical: Vec<String> =
+                domains.iter().map(|d| d.to_ascii_lowercase()).collect();
+            canonical.sort();
+            canonical.dedup();
+            RemotePermission::Remote { domains: canonical }
+        }
+        other => other.clone(),
+    };
+    RemotePermissionRequest { permission }
+}
+
+fn device_slug(permission: &HostDevicePermissionRequest) -> &'static str {
+    match permission {
+        HostDevicePermissionRequest::Notifications => "notifications",
+        HostDevicePermissionRequest::Camera => "camera",
+        HostDevicePermissionRequest::Microphone => "microphone",
+        HostDevicePermissionRequest::Bluetooth => "bluetooth",
+        HostDevicePermissionRequest::NFC => "nfc",
+        HostDevicePermissionRequest::Location => "location",
+        HostDevicePermissionRequest::Clipboard => "clipboard",
+        HostDevicePermissionRequest::OpenUrl => "open-url",
+        HostDevicePermissionRequest::Biometrics => "biometrics",
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use futures::lock::Mutex;
+    use std::collections::HashMap;
+    use std::sync::atomic::{AtomicUsize, Ordering};
+    use truapi::v01;
+    use truapi::v01::GenericError;
+
+    #[derive(Default)]
+    struct MemStorage {
+        inner: Mutex<HashMap<String, Vec<u8>>>,
+    }
+
+    impl Storage for MemStorage {
+        async fn read(&self, key: String) -> Result<Option<Vec<u8>>, HostLocalStorageReadError> {
+            Ok(self.inner.lock().await.get(&key).cloned())
+        }
+        async fn write(
+            &self,
+            key: String,
+            value: Vec<u8>,
+        ) -> Result<(), HostLocalStorageReadError> {
+            self.inner.lock().await.insert(key, value);
+            Ok(())
+        }
+        async fn clear(&self, key: String) -> Result<(), HostLocalStorageReadError> {
+            self.inner.lock().await.remove(&key);
+            Ok(())
+        }
+    }
+
+    struct ScriptedPrompt {
+        device_answers: Mutex<Vec<bool>>,
+        remote_answers: Mutex<Vec<bool>>,
+        device_calls: AtomicUsize,
+        remote_calls: AtomicUsize,
+    }
+
+    impl ScriptedPrompt {
+        fn new(device_answers: Vec<bool>, remote_answers: Vec<bool>) -> Self {
+            Self {
+                device_answers: Mutex::new(device_answers),
+                remote_answers: Mutex::new(remote_answers),
+                device_calls: AtomicUsize::new(0),
+                remote_calls: AtomicUsize::new(0),
+            }
+        }
+    }
+
+    impl Permissions for ScriptedPrompt {
+        async fn device_permission(
+            &self,
+            _request: HostDevicePermissionRequest,
+        ) -> Result<HostDevicePermissionResponse, GenericError> {
+            self.device_calls.fetch_add(1, Ordering::SeqCst);
+            let granted = self
+                .device_answers
+                .lock()
+                .await
+                .pop()
+                .expect("ScriptedPrompt ran out of device answers");
+            Ok(v01::HostDevicePermissionResponse { granted })
+        }
+
+        async fn remote_permission(
+            &self,
+            _request: RemotePermissionRequest,
+        ) -> Result<RemotePermissionResponse, GenericError> {
+            self.remote_calls.fetch_add(1, Ordering::SeqCst);
+            let granted = self
+                .remote_answers
+                .lock()
+                .await
+                .pop()
+                .expect("ScriptedPrompt ran out of remote answers");
+            Ok(v01::RemotePermissionResponse { granted })
+        }
+    }
+
+    #[test]
+    fn storage_key_is_stable_per_variant() {
+        assert_eq!(
+            device_storage_key(&HostDevicePermissionRequest::Camera),
+            "truapi:permissions:device:camera",
+        );
+        let chain = RemotePermissionRequest {
+            permission: RemotePermission::ChainSubmit,
+        };
+        let expected = format!(
+            "truapi:permissions:remote:{}",
+            hex::encode(canonical_remote_request(&chain).encode())
+        );
+        assert_eq!(remote_storage_key(&chain), expected);
+
+        let unsorted = RemotePermissionRequest {
+            permission: RemotePermission::Remote {
+                domains: vec!["b.example.com".into(), "a.example.com".into()],
+            },
+        };
+        let sorted = RemotePermissionRequest {
+            permission: RemotePermission::Remote {
+                domains: vec!["a.example.com".into(), "b.example.com".into()],
+            },
+        };
+        assert_eq!(remote_storage_key(&unsorted), remote_storage_key(&sorted));
+    }
+
+    #[test]
+    fn remote_storage_key_is_case_insensitive_and_dedups_domains() {
+        let mixed = RemotePermissionRequest {
+            permission: RemotePermission::Remote {
+                domains: vec!["Example.COM".into(), "a.com".into(), "a.com".into()],
+            },
+        };
+        let canonical = RemotePermissionRequest {
+            permission: RemotePermission::Remote {
+                domains: vec!["a.com".into(), "example.com".into()],
+            },
+        };
+        assert_eq!(remote_storage_key(&mixed), remote_storage_key(&canonical));
+    }
+
+    #[test]
+    fn remote_storage_key_handles_separator_chars_in_domains() {
+        // Domain strings containing `|`, `,`, or the `truapi:permissions:`
+        // prefix must not be able to forge a key that matches an unrelated
+        // permission. We compare against a benign permission with the same
+        // logical set of domains but no injection attempt.
+        let injecting = RemotePermissionRequest {
+            permission: RemotePermission::Remote {
+                domains: vec![
+                    "a|b".into(),
+                    "c,d".into(),
+                    "truapi:permissions:remote:web-rtc".into(),
+                ],
+            },
+        };
+        let benign_same_set = RemotePermissionRequest {
+            permission: RemotePermission::Remote {
+                domains: vec!["x".into(), "y".into(), "z".into()],
+            },
+        };
+        let injecting_key = remote_storage_key(&injecting);
+        let benign_key = remote_storage_key(&benign_same_set);
+        assert_ne!(injecting_key, benign_key);
+
+        // The injecting permission must also be distinct from the `WebRtc`
+        // variant it tries to impersonate via crafted strings.
+        let webrtc = RemotePermissionRequest {
+            permission: RemotePermission::WebRtc,
+        };
+        assert_ne!(injecting_key, remote_storage_key(&webrtc));
+
+        // Re-ordering the same domains still collapses to a single key
+        // (canonicalization is order-independent).
+        let injecting_reordered = RemotePermissionRequest {
+            permission: RemotePermission::Remote {
+                domains: vec![
+                    "truapi:permissions:remote:web-rtc".into(),
+                    "c,d".into(),
+                    "a|b".into(),
+                ],
+            },
+        };
+        assert_eq!(injecting_key, remote_storage_key(&injecting_reordered));
+    }
+
+    #[test]
+    fn check_or_prompt_device_caches_grant() {
+        let storage = MemStorage::default();
+        let prompt = ScriptedPrompt::new(vec![true], vec![]);
+        let service = PermissionsService::new(&storage, &prompt);
+
+        let first = futures::executor::block_on(
+            service.check_or_prompt_device(HostDevicePermissionRequest::Camera),
+        )
+        .unwrap();
+        let second = futures::executor::block_on(
+            service.check_or_prompt_device(HostDevicePermissionRequest::Camera),
+        )
+        .unwrap();
+
+        assert_eq!(first, Decision::Granted);
+        assert_eq!(second, Decision::Granted);
+        assert_eq!(prompt.device_calls.load(Ordering::SeqCst), 1);
+    }
+
+    #[test]
+    fn check_or_prompt_remote_caches_denial() {
+        let storage = MemStorage::default();
+        let prompt = ScriptedPrompt::new(vec![], vec![false]);
+        let service = PermissionsService::new(&storage, &prompt);
+
+        let request = RemotePermissionRequest {
+            permission: RemotePermission::ChainSubmit,
+        };
+        let first =
+            futures::executor::block_on(service.check_or_prompt_remote(request.clone())).unwrap();
+        let second = futures::executor::block_on(service.check_or_prompt_remote(request)).unwrap();
+
+        assert_eq!(first, Decision::Denied);
+        assert_eq!(second, Decision::Denied);
+        assert_eq!(prompt.remote_calls.load(Ordering::SeqCst), 1);
+    }
+
+    #[test]
+    fn device_and_remote_caches_are_independent() {
+        let storage = MemStorage::default();
+        // Device denies, remote grants. If the caches collided we'd see the
+        // same answer on the second call.
+        let prompt = ScriptedPrompt::new(vec![false], vec![true]);
+        let service = PermissionsService::new(&storage, &prompt);
+
+        let device = futures::executor::block_on(
+            service.check_or_prompt_device(HostDevicePermissionRequest::Camera),
+        )
+        .unwrap();
+        let remote =
+            futures::executor::block_on(service.check_or_prompt_remote(RemotePermissionRequest {
+                permission: RemotePermission::ChainSubmit,
+            }))
+            .unwrap();
+
+        assert_eq!(device, Decision::Denied);
+        assert_eq!(remote, Decision::Granted);
+        assert_eq!(prompt.device_calls.load(Ordering::SeqCst), 1);
+        assert_eq!(prompt.remote_calls.load(Ordering::SeqCst), 1);
+    }
+
+    #[test]
+    fn device_prompt_does_not_invoke_remote_callback() {
+        let storage = MemStorage::default();
+        let prompt = ScriptedPrompt::new(vec![true], vec![]);
+        let service = PermissionsService::new(&storage, &prompt);
+
+        let _ = futures::executor::block_on(
+            service.check_or_prompt_device(HostDevicePermissionRequest::Camera),
+        )
+        .unwrap();
+        assert_eq!(prompt.device_calls.load(Ordering::SeqCst), 1);
+        assert_eq!(prompt.remote_calls.load(Ordering::SeqCst), 0);
+    }
+
+    #[test]
+    fn remote_prompt_does_not_invoke_device_callback() {
+        let storage = MemStorage::default();
+        let prompt = ScriptedPrompt::new(vec![], vec![true]);
+        let service = PermissionsService::new(&storage, &prompt);
+
+        let _ =
+            futures::executor::block_on(service.check_or_prompt_remote(RemotePermissionRequest {
+                permission: RemotePermission::WebRtc,
+            }))
+            .unwrap();
+        assert_eq!(prompt.device_calls.load(Ordering::SeqCst), 0);
+        assert_eq!(prompt.remote_calls.load(Ordering::SeqCst), 1);
+    }
+
+    #[test]
+    fn peek_returns_none_until_decided() {
+        let storage = MemStorage::default();
+        let prompt = ScriptedPrompt::new(vec![true], vec![]);
+        let service = PermissionsService::new(&storage, &prompt);
+
+        let before =
+            futures::executor::block_on(service.peek_device(&HostDevicePermissionRequest::Camera))
+                .unwrap();
+        assert_eq!(before, None);
+
+        futures::executor::block_on(
+            service.check_or_prompt_device(HostDevicePermissionRequest::Camera),
+        )
+        .unwrap();
+
+        let after =
+            futures::executor::block_on(service.peek_device(&HostDevicePermissionRequest::Camera))
+                .unwrap();
+        assert_eq!(after, Some(Decision::Granted));
+    }
+
+    /// Prompt callback that always errors, to exercise the transient-failure
+    /// path (fail closed for the current call, but do not persist the error).
+    struct FailingPrompt;
+
+    impl Permissions for FailingPrompt {
+        async fn device_permission(
+            &self,
+            _request: HostDevicePermissionRequest,
+        ) -> Result<HostDevicePermissionResponse, GenericError> {
+            Err(GenericError {
+                reason: "boom".into(),
+            })
+        }
+
+        async fn remote_permission(
+            &self,
+            _request: RemotePermissionRequest,
+        ) -> Result<RemotePermissionResponse, GenericError> {
+            Err(GenericError {
+                reason: "boom".into(),
+            })
+        }
+    }
+
+    #[test]
+    fn prompt_failure_denies_without_persisting() {
+        let storage = MemStorage::default();
+        let prompt = FailingPrompt;
+        let service = PermissionsService::new(&storage, &prompt);
+
+        let decision = futures::executor::block_on(
+            service.check_or_prompt_device(HostDevicePermissionRequest::Camera),
+        )
+        .unwrap();
+        assert_eq!(decision, Decision::Denied);
+
+        // A transient callback error is fail-closed for this call but NOT
+        // cached, so peek still sees no decision and the next request
+        // re-prompts rather than permanently locking out the capability.
+        let cached =
+            futures::executor::block_on(service.peek_device(&HostDevicePermissionRequest::Camera))
+                .unwrap();
+        assert_eq!(
+            cached, None,
+            "a transient prompt error must not be persisted"
+        );
+    }
+
+    /// A corrupt SCALE-encoded cache entry must be treated as "no cache",
+    /// not panic. The service falls back to prompting.
+    #[test]
+    fn corrupt_cache_entry_returns_none() {
+        let storage = MemStorage::default();
+        // Write garbage bytes under the canonical key.
+        futures::executor::block_on(storage.write(
+            device_storage_key(&HostDevicePermissionRequest::Camera),
+            vec![0xff, 0xfe, 0xfd],
+        ))
+        .unwrap();
+
+        let prompt = ScriptedPrompt::new(vec![true], vec![]);
+        let service = PermissionsService::new(&storage, &prompt);
+
+        let peeked =
+            futures::executor::block_on(service.peek_device(&HostDevicePermissionRequest::Camera))
+                .unwrap();
+        assert_eq!(peeked, None, "corrupt entry must decode as absent");
+    }
+
+    /// Storage failures must propagate to the caller; the service must not
+    /// swallow them by silently returning a default Decision.
+    #[derive(Default)]
+    struct FailingStorage;
+
+    impl Storage for FailingStorage {
+        async fn read(&self, _key: String) -> Result<Option<Vec<u8>>, HostLocalStorageReadError> {
+            Err(v01::HostLocalStorageReadError::Unknown {
+                reason: "read failed".into(),
+            })
+        }
+        async fn write(
+            &self,
+            _key: String,
+            _value: Vec<u8>,
+        ) -> Result<(), HostLocalStorageReadError> {
+            Err(v01::HostLocalStorageReadError::Unknown {
+                reason: "write failed".into(),
+            })
+        }
+        async fn clear(&self, _key: String) -> Result<(), HostLocalStorageReadError> {
+            Err(v01::HostLocalStorageReadError::Unknown {
+                reason: "clear failed".into(),
+            })
+        }
+    }
+
+    #[test]
+    fn storage_read_error_propagates() {
+        let storage = FailingStorage;
+        let prompt = ScriptedPrompt::new(vec![], vec![]);
+        let service = PermissionsService::new(&storage, &prompt);
+
+        let err = futures::executor::block_on(
+            service.check_or_prompt_device(HostDevicePermissionRequest::Camera),
+        )
+        .expect_err("read failure must surface");
+        assert!(matches!(
+            err,
+            v01::HostLocalStorageReadError::Unknown { .. }
+        ));
+    }
+}
diff --git a/rust/crates/truapi-server/src/host_logic/session.rs b/rust/crates/truapi-server/src/host_logic/session.rs
new file mode 100644
index 00000000..c969e52d
--- /dev/null
+++ b/rust/crates/truapi-server/src/host_logic/session.rs
@@ -0,0 +1,275 @@
+//! Active-session state held in core. The host pushes session info via
+//! platform-specific entrypoints whenever the user pairs/unpairs.
+//! Account-management methods then read from this state instead of
+//! round-tripping a callback to the host on every product call.
+
+use futures::channel::mpsc;
+use futures::stream::{self, BoxStream, StreamExt};
+use std::sync::{Arc, Mutex};
+
+use truapi::v01::HostAccountConnectionStatusSubscribeItem;
+use truapi::versioned::account::HostAccountConnectionStatusSubscribeItem as VersionedItem;
+
+/// Session info pushed by the host. The 32-byte sr25519 public key plus
+/// optional usernames sourced from the People-Chain identity record.
+#[derive(Debug, Clone)]
+pub struct SessionInfo {
+    /// 32-byte sr25519 root public key of the paired session.
+    pub public_key: [u8; 32],
+    /// Short username (e.g. `alice`).
+    pub lite_username: Option<String>,
+    /// Fully qualified username (e.g. `Alice Smith`).
+    pub full_username: Option<String>,
+}
+
+/// Holds the currently-active session and broadcasts connection-status
+/// transitions to subscribers. Cheap to clone via `Arc`.
+#[derive(Default)]
+pub struct SessionState {
+    inner: Mutex<Inner>,
+}
+
+#[derive(Default)]
+struct Inner {
+    current: Option<SessionInfo>,
+    subscribers: Vec<mpsc::UnboundedSender<VersionedItem>>,
+}
+
+impl SessionState {
+    /// Construct a fresh session holder, starting in the `Disconnected` state.
+    pub fn new() -> Arc<Self> {
+        Arc::new(Self::default())
+    }
+
+    /// Replace the active session with `info`. Emits a `Connected` event to
+    /// every live subscriber if this is a transition from no-session.
+    pub fn set_session(&self, info: SessionInfo) {
+        let mut inner = self.inner.lock().expect("session-state mutex poisoned");
+        let was_present = inner.current.is_some();
+        inner.current = Some(info);
+        if !was_present {
+            broadcast(
+                &mut inner.subscribers,
+                HostAccountConnectionStatusSubscribeItem::Connected,
+            );
+        }
+    }
+
+    /// Drop the active session. Emits a `Disconnected` event to every live
+    /// subscriber if there was a session to clear.
+    pub fn clear_session(&self) {
+        let mut inner = self.inner.lock().expect("session-state mutex poisoned");
+        if inner.current.take().is_some() {
+            broadcast(
+                &mut inner.subscribers,
+                HostAccountConnectionStatusSubscribeItem::Disconnected,
+            );
+        }
+    }
+
+    /// Snapshot of the current session, or `None` when nothing is paired.
+    pub fn current(&self) -> Option<SessionInfo> {
+        self.inner
+            .lock()
+            .expect("session-state mutex poisoned")
+            .current
+            .clone()
+    }
+
+    /// Stream of connection-status events. The first item emitted is the
+    /// current state (so subscribers don't have to read it separately);
+    /// subsequent items reflect every `set_session` / `clear_session`
+    /// transition.
+    pub fn subscribe(&self) -> BoxStream<'static, VersionedItem> {
+        let (tx, rx) = mpsc::unbounded();
+        let mut inner = self.inner.lock().expect("session-state mutex poisoned");
+        let initial = match inner.current {
+            Some(_) => HostAccountConnectionStatusSubscribeItem::Connected,
+            None => HostAccountConnectionStatusSubscribeItem::Disconnected,
+        };
+        inner.subscribers.push(tx);
+        let initial_item = VersionedItem::V1(initial);
+        Box::pin(stream::once(async move { initial_item }).chain(rx))
+    }
+}
+
+fn broadcast(
+    subscribers: &mut Vec<mpsc::UnboundedSender<VersionedItem>>,
+    status: HostAccountConnectionStatusSubscribeItem,
+) {
+    let item = VersionedItem::V1(status);
+    // `retain` drops senders whose receiver has been dropped, so the
+    // subscriber list self-prunes on the next broadcast after a reader
+    // unsubscribes.
+    subscribers.retain(|tx| tx.unbounded_send(item.clone()).is_ok());
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use futures::executor::block_on;
+    use futures::{FutureExt, StreamExt};
+
+    fn info(pubkey_byte: u8) -> SessionInfo {
+        SessionInfo {
+            public_key: [pubkey_byte; 32],
+            lite_username: Some("alice".to_string()),
+            full_username: None,
+        }
+    }
+
+    #[test]
+    fn current_starts_empty() {
+        let state = SessionState::new();
+        assert!(state.current().is_none());
+    }
+
+    #[test]
+    fn set_then_current_returns_session() {
+        let state = SessionState::new();
+        state.set_session(info(0x42));
+        let got = state.current().expect("session should be present");
+        assert_eq!(got.public_key, [0x42; 32]);
+        assert_eq!(got.lite_username.as_deref(), Some("alice"));
+    }
+
+    #[test]
+    fn clear_returns_to_empty() {
+        let state = SessionState::new();
+        state.set_session(info(0x01));
+        state.clear_session();
+        assert!(state.current().is_none());
+    }
+
+    #[test]
+    fn subscribe_emits_current_state_first() {
+        let state = SessionState::new();
+        state.set_session(info(0x01));
+        let mut stream = state.subscribe();
+        let first = block_on(stream.next()).expect("expected initial item");
+        assert_eq!(
+            first,
+            VersionedItem::V1(HostAccountConnectionStatusSubscribeItem::Connected)
+        );
+    }
+
+    #[test]
+    fn subscribe_emits_disconnected_when_no_session() {
+        let state = SessionState::new();
+        let mut stream = state.subscribe();
+        let first = block_on(stream.next()).expect("expected initial item");
+        assert_eq!(
+            first,
+            VersionedItem::V1(HostAccountConnectionStatusSubscribeItem::Disconnected)
+        );
+    }
+
+    #[test]
+    fn set_session_broadcasts_connected_to_existing_subscribers() {
+        let state = SessionState::new();
+        let mut stream = state.subscribe();
+        let _ = block_on(stream.next());
+
+        state.set_session(info(0x01));
+        let next = block_on(stream.next()).expect("expected Connected event");
+        assert_eq!(
+            next,
+            VersionedItem::V1(HostAccountConnectionStatusSubscribeItem::Connected)
+        );
+    }
+
+    #[test]
+    fn clear_session_broadcasts_disconnected_to_existing_subscribers() {
+        let state = SessionState::new();
+        state.set_session(info(0x01));
+        let mut stream = state.subscribe();
+        let _ = block_on(stream.next());
+
+        state.clear_session();
+        let next = block_on(stream.next()).expect("expected Disconnected event");
+        assert_eq!(
+            next,
+            VersionedItem::V1(HostAccountConnectionStatusSubscribeItem::Disconnected)
+        );
+    }
+
+    #[test]
+    fn set_session_twice_does_not_re_emit_connected() {
+        let state = SessionState::new();
+        state.set_session(info(0x01));
+        let mut stream = state.subscribe();
+        let _ = block_on(stream.next());
+
+        state.set_session(info(0x02));
+
+        let pending = stream.next().now_or_never();
+        assert!(
+            pending.is_none(),
+            "no transition event expected on session replace"
+        );
+    }
+
+    #[test]
+    fn multi_subscriber_broadcast() {
+        let state = SessionState::new();
+        let mut a = state.subscribe();
+        let mut b = state.subscribe();
+        // Drain initial Disconnected from both.
+        let _ = block_on(a.next());
+        let _ = block_on(b.next());
+
+        state.set_session(info(0x77));
+        let a_next = block_on(a.next()).expect("a should receive Connected");
+        let b_next = block_on(b.next()).expect("b should receive Connected");
+        assert_eq!(
+            a_next,
+            VersionedItem::V1(HostAccountConnectionStatusSubscribeItem::Connected)
+        );
+        assert_eq!(
+            b_next,
+            VersionedItem::V1(HostAccountConnectionStatusSubscribeItem::Connected)
+        );
+    }
+
+    /// Clearing a never-set session is a no-op and must not synthesize a
+    /// spurious `Disconnected` event for live subscribers.
+    #[test]
+    fn clear_when_empty_is_silent_no_op() {
+        let state = SessionState::new();
+        let mut stream = state.subscribe();
+        // Drain the initial Disconnected.
+        let _ = block_on(stream.next());
+
+        state.clear_session();
+
+        let pending = stream.next().now_or_never();
+        assert!(pending.is_none(), "no event expected when clear is a no-op",);
+    }
+
+    /// Dropping a subscriber's stream must remove that sender from the
+    /// broadcast list. The next broadcast prunes it; the surviving stream
+    /// still receives the event.
+    #[test]
+    fn dropped_subscriber_is_pruned() {
+        let state = SessionState::new();
+        let mut survivor = state.subscribe();
+        let dropping = state.subscribe();
+        let _ = block_on(survivor.next());
+        // Drain the initial item from the dropping stream too so we don't
+        // accidentally test buffered-but-undelivered.
+        drop(dropping);
+
+        state.set_session(info(0x33));
+        let next = block_on(survivor.next()).expect("survivor must receive Connected");
+        assert_eq!(
+            next,
+            VersionedItem::V1(HostAccountConnectionStatusSubscribeItem::Connected),
+        );
+
+        // Internally, `set_session`'s broadcast call `retain`-prunes any
+        // dropped senders. After the call the subscribers list should have
+        // exactly one entry (the survivor).
+        let inner = state.inner.lock().unwrap();
+        assert_eq!(inner.subscribers.len(), 1, "dropped subscriber not pruned");
+    }
+}
diff --git a/rust/crates/truapi-server/src/lib.rs b/rust/crates/truapi-server/src/lib.rs
new file mode 100644
index 00000000..a2792593
--- /dev/null
+++ b/rust/crates/truapi-server/src/lib.rs
@@ -0,0 +1,55 @@
+//! TrUAPI server runtime: dispatcher, frames, SCALE encoding, stream management.
+//!
+//! The platform path (`TrUApiCore::from_platform`) wraps a
+//! [`truapi_platform::Platform`] in a `PlatformRuntimeHost` that implements
+//! every `truapi::api::*` trait by delegating to platform callbacks.
+//!
+//! Host-facing bridges:
+//! - [`ws_bridge`] (feature `ws-bridge`): localhost WebSocket bridge for
+//!   native WebView hosts (Android/iOS).
+//! - [`native`]: UniFFI surface exposing `NativeTrUApiCore` + `HostCallbacks`.
+//! - [`wasm`] (wasm32 only): wasm-bindgen surface exposing `WasmTrUApiCore`.
+
+#![forbid(unsafe_code)]
+
+pub mod chain_runtime;
+pub mod core;
+pub mod debug_log;
+pub mod dispatcher;
+pub mod frame;
+pub mod host_logic;
+pub mod runtime;
+pub mod subscription;
+pub mod transport;
+
+pub mod generated;
+
+#[cfg(feature = "smoldot")]
+pub mod smoldot_provider;
+
+#[cfg(all(not(target_arch = "wasm32"), feature = "ws-bridge"))]
+pub mod ws_bridge;
+
+#[cfg(not(target_arch = "wasm32"))]
+pub mod native;
+
+#[cfg(target_arch = "wasm32")]
+pub mod wasm;
+
+pub use crate::core::TrUApiCore;
+pub use dispatcher::*;
+pub use frame::*;
+pub use runtime::PlatformRuntimeHost;
+pub use subscription::*;
+pub use transport::*;
+
+#[cfg(all(not(target_arch = "wasm32"), feature = "ws-bridge"))]
+pub use ws_bridge::*;
+
+#[cfg(not(target_arch = "wasm32"))]
+pub use native::*;
+
+#[cfg(target_arch = "wasm32")]
+pub use wasm::*;
+
+uniffi::setup_scaffolding!();
diff --git a/rust/crates/truapi-server/src/native.rs b/rust/crates/truapi-server/src/native.rs
new file mode 100644
index 00000000..2fc51a6a
--- /dev/null
+++ b/rust/crates/truapi-server/src/native.rs
@@ -0,0 +1,475 @@
+//! UniFFI-facing native bridge. Exposes [`NativeTrUApiCore`] and the
+//! [`HostCallbacks`] callback interface that iOS and Android call into.
+//!
+//! The native side builds a [`CallbackPlatform`] that adapts every
+//! [`truapi_platform::Platform`] trait to a corresponding callback. The
+//! resulting platform is fed into [`TrUApiCore::from_platform`] so the rest
+//! of the dispatcher pipeline behaves identically to the WS-bridge and wasm
+//! flavors.
+
+use std::sync::Arc;
+
+use futures::executor::ThreadPool;
+use futures::future::BoxFuture;
+use futures::task::SpawnExt;
+use parity_scale_codec::Encode;
+use truapi::v01;
+use truapi::versioned::system::{HostFeatureSupportedRequest, HostFeatureSupportedResponse};
+use truapi_platform::{
+    ChainProvider, Features, JsonRpcConnection, Navigation, Notifications, Permissions, Storage,
+};
+
+use crate::TrUApiCore;
+use crate::subscription::Spawner;
+#[cfg(feature = "ws-bridge")]
+use crate::ws_bridge::{BridgeLogger, WsBridge, WsBridgeEndpoint, WsBridgeStartError};
+
+/// Native-friendly storage error. Mirrors the v0.1 wire shape so the
+/// callback surface stays SCALE-free.
+#[derive(Debug, Clone, thiserror::Error, uniffi::Error)]
+pub enum HostStorageError {
+    /// Quota exhausted.
+    #[error("storage quota exhausted")]
+    Full,
+    /// Catch-all.
+    #[error("{reason}")]
+    Unknown {
+        /// Human-readable failure reason.
+        reason: String,
+    },
+}
+
+impl From<HostStorageError> for v01::HostLocalStorageReadError {
+    fn from(err: HostStorageError) -> Self {
+        match err {
+            HostStorageError::Full => v01::HostLocalStorageReadError::Full,
+            HostStorageError::Unknown { reason } => {
+                v01::HostLocalStorageReadError::Unknown { reason }
+            }
+        }
+    }
+}
+
+/// Native-friendly rejection error returned by callback methods that map
+/// onto [`truapi::v01::GenericError`].
+#[derive(Debug, Clone, thiserror::Error, uniffi::Error)]
+pub enum HostRejection {
+    /// Caller rejected the operation.
+    #[error("{reason}")]
+    Rejected {
+        /// Human-readable rejection reason.
+        reason: String,
+    },
+}
+
+impl From<HostRejection> for v01::GenericError {
+    fn from(err: HostRejection) -> Self {
+        let HostRejection::Rejected { reason } = err;
+        v01::GenericError { reason }
+    }
+}
+
+/// Native-friendly navigation error.
+#[derive(Debug, Clone, thiserror::Error, uniffi::Error)]
+pub enum HostNavigateRejection {
+    /// User declined the navigation.
+    #[error("navigation denied by user")]
+    PermissionDenied,
+    /// Catch-all.
+    #[error("{reason}")]
+    Unknown {
+        /// Human-readable reason.
+        reason: String,
+    },
+}
+
+impl From<HostNavigateRejection> for v01::HostNavigateToError {
+    fn from(err: HostNavigateRejection) -> Self {
+        match err {
+            HostNavigateRejection::PermissionDenied => v01::HostNavigateToError::PermissionDenied,
+            HostNavigateRejection::Unknown { reason } => {
+                v01::HostNavigateToError::Unknown { reason }
+            }
+        }
+    }
+}
+
+/// Callback surface that iOS and Android implement. The Rust core invokes
+/// these synchronously from `async` trait methods, which is acceptable for
+/// UniFFI because every callback hop is short-lived and reentrant.
+#[uniffi::export(callback_interface)]
+pub trait HostCallbacks: Send + Sync {
+    /// Lifecycle logger. Marker is a stable slug, detail is free-form.
+    fn on_core_log(&self, marker: String, detail: String);
+
+    /// Open a URL in the system browser.
+    fn navigate_to(&self, url: String) -> Result<(), HostNavigateRejection>;
+
+    /// Deliver a push notification. The payload is the SCALE-encoded
+    /// [`v01::HostPushNotificationRequest`].
+    fn push_notification(&self, payload: Vec<u8>) -> Result<(), HostRejection>;
+
+    /// Prompt the user for a device-level permission (camera, mic, ...).
+    /// `request` is the SCALE-encoded
+    /// [`v01::HostDevicePermissionRequest`]; the host returns whether the
+    /// permission was granted.
+    fn device_permission(&self, request: Vec<u8>) -> Result<bool, HostRejection>;
+
+    /// Prompt the user for a remote (product-scoped) permission bundle.
+    /// `request` is the SCALE-encoded [`v01::RemotePermissionRequest`].
+    fn remote_permission(&self, request: Vec<u8>) -> Result<bool, HostRejection>;
+
+    /// Answer a feature-support query. `request` is the SCALE-encoded
+    /// [`HostFeatureSupportedRequest`].
+    fn feature_supported(&self, request: Vec<u8>) -> Result<bool, HostRejection>;
+
+    /// Read a value from the host's scoped key-value store.
+    fn local_storage_read(&self, key: String) -> Result<Option<Vec<u8>>, HostStorageError>;
+    /// Write a value to the host's scoped key-value store.
+    fn local_storage_write(&self, key: String, value: Vec<u8>) -> Result<(), HostStorageError>;
+    /// Clear a value from the host's scoped key-value store.
+    fn local_storage_clear(&self, key: String) -> Result<(), HostStorageError>;
+}
+
+/// UniFFI object exposing the TrUAPI core to native hosts.
+#[derive(uniffi::Object)]
+pub struct NativeTrUApiCore {
+    core: Arc<TrUApiCore>,
+    callbacks: Arc<dyn HostCallbacks>,
+    #[cfg(feature = "ws-bridge")]
+    bridge: std::sync::Mutex<Option<WsBridge>>,
+}
+
+#[uniffi::export]
+impl NativeTrUApiCore {
+    /// Construct the core from a callback object. The native shell hands
+    /// over its [`HostCallbacks`] trait object; the core wraps it in a
+    /// [`CallbackPlatform`] and feeds the result into
+    /// [`TrUApiCore::from_platform`].
+    ///
+    /// Subscriptions registered through this core run on a shared
+    /// `futures::executor::ThreadPool`. The pool sticks around for the
+    /// lifetime of the core; new subscriptions never spawn a fresh OS
+    /// thread each.
+    #[uniffi::constructor]
+    pub fn new(callbacks: Box<dyn HostCallbacks>) -> Arc<Self> {
+        let callbacks: Arc<dyn HostCallbacks> = callbacks.into();
+        callbacks.on_core_log(
+            "truapi.native.core.boot".to_string(),
+            "core ready".to_string(),
+        );
+
+        let platform = Arc::new(CallbackPlatform {
+            callbacks: callbacks.clone(),
+        });
+        let spawner = native_thread_pool_spawner(&callbacks);
+        Arc::new(Self {
+            core: Arc::new(TrUApiCore::from_platform(platform, spawner)),
+            callbacks,
+            #[cfg(feature = "ws-bridge")]
+            bridge: std::sync::Mutex::new(None),
+        })
+    }
+
+    /// Push the currently-paired session into the core. Mirrors the JS
+    /// `setActiveSession`. `pubkey` must be exactly 32 bytes (sr25519 root
+    /// public key).
+    pub fn set_active_session(
+        &self,
+        pubkey: Vec<u8>,
+        lite_username: Option<String>,
+        full_username: Option<String>,
+    ) -> bool {
+        let Ok(public_key) = <[u8; 32]>::try_from(pubkey.as_slice()) else {
+            self.callbacks.on_core_log(
+                "truapi.native.core.session.invalid_pubkey".to_string(),
+                format!("expected 32 bytes, got {}", pubkey.len()),
+            );
+            return false;
+        };
+        self.core
+            .session_state()
+            .set_session(crate::host_logic::session::SessionInfo {
+                public_key,
+                lite_username,
+                full_username,
+            });
+        true
+    }
+
+    /// Drop the currently-paired session. Mirrors the JS
+    /// `clearActiveSession`.
+    pub fn clear_active_session(&self) {
+        self.core.session_state().clear_session();
+    }
+}
+
+#[cfg(feature = "ws-bridge")]
+#[uniffi::export]
+impl NativeTrUApiCore {
+    /// Start the localhost WebSocket bridge. Returns the descriptor the
+    /// host hands to the product so it can dial back in.
+    pub fn start_ws_bridge(&self, bind_port: u16) -> Result<WsBridgeEndpoint, WsBridgeStartError> {
+        let mut guard = self.bridge.lock().unwrap();
+        if guard.is_some() {
+            return Err(WsBridgeStartError::AlreadyRunning);
+        }
+        let logger: BridgeLogger = {
+            let callbacks = self.callbacks.clone();
+            Arc::new(move |marker: &str, detail: &str| {
+                callbacks.on_core_log(marker.to_string(), detail.to_string());
+            })
+        };
+        let (bridge, endpoint) = WsBridge::start(bind_port, self.core.clone(), logger)?;
+        *guard = Some(bridge);
+        Ok(endpoint)
+    }
+
+    /// Stop the localhost WebSocket bridge (if running).
+    pub fn stop_ws_bridge(&self) {
+        if let Some(mut bridge) = self.bridge.lock().unwrap().take() {
+            bridge.stop();
+        }
+    }
+}
+
+/// Build a [`Spawner`] backed by a shared `futures::executor::ThreadPool`.
+/// The pool is sized at the default (one worker per logical CPU). Falls
+/// back to a thread-per-subscription spawner if the pool fails to build,
+/// which only ever happens if the host has no available threads at all.
+fn native_thread_pool_spawner(callbacks: &Arc<dyn HostCallbacks>) -> Spawner {
+    match ThreadPool::new() {
+        Ok(pool) => {
+            let callbacks = callbacks.clone();
+            Arc::new(move |fut: BoxFuture<'static, ()>| {
+                if let Err(err) = pool.spawn(fut) {
+                    callbacks.on_core_log(
+                        "truapi.native.core.subscription.spawn_failed".to_string(),
+                        format!("{err}"),
+                    );
+                }
+            })
+        }
+        Err(err) => {
+            callbacks.on_core_log(
+                "truapi.native.core.subscription.pool_unavailable".to_string(),
+                format!("{err}; falling back to thread-per-subscription"),
+            );
+            crate::subscription::thread_per_subscription_spawner()
+        }
+    }
+}
+
+struct CallbackPlatform {
+    callbacks: Arc<dyn HostCallbacks>,
+}
+
+impl Navigation for CallbackPlatform {
+    async fn navigate_to(&self, url: String) -> Result<(), v01::HostNavigateToError> {
+        self.callbacks.on_core_log(
+            "truapi.native.callback.navigate_to".to_string(),
+            url.clone(),
+        );
+        self.callbacks.navigate_to(url).map_err(Into::into)
+    }
+}
+
+impl Notifications for CallbackPlatform {
+    async fn push_notification(
+        &self,
+        notification: v01::HostPushNotificationRequest,
+    ) -> Result<(), v01::GenericError> {
+        self.callbacks.on_core_log(
+            "truapi.native.callback.push_notification".to_string(),
+            notification.text.clone(),
+        );
+        self.callbacks
+            .push_notification(notification.encode())
+            .map_err(Into::into)
+    }
+}
+
+impl Permissions for CallbackPlatform {
+    async fn device_permission(
+        &self,
+        request: v01::HostDevicePermissionRequest,
+    ) -> Result<v01::HostDevicePermissionResponse, v01::GenericError> {
+        self.callbacks.on_core_log(
+            "truapi.native.callback.device_permission".to_string(),
+            format!("{request}"),
+        );
+        let granted = self
+            .callbacks
+            .device_permission(request.encode())
+            .map_err(v01::GenericError::from)?;
+        Ok(v01::HostDevicePermissionResponse { granted })
+    }
+
+    async fn remote_permission(
+        &self,
+        request: v01::RemotePermissionRequest,
+    ) -> Result<v01::RemotePermissionResponse, v01::GenericError> {
+        self.callbacks.on_core_log(
+            "truapi.native.callback.remote_permission".to_string(),
+            format!("{request}"),
+        );
+        let granted = self
+            .callbacks
+            .remote_permission(request.encode())
+            .map_err(v01::GenericError::from)?;
+        Ok(v01::RemotePermissionResponse { granted })
+    }
+}
+
+impl Features for CallbackPlatform {
+    async fn feature_supported(
+        &self,
+        request: HostFeatureSupportedRequest,
+    ) -> Result<HostFeatureSupportedResponse, v01::GenericError> {
+        let supported = self
+            .callbacks
+            .feature_supported(request.encode())
+            .map_err(v01::GenericError::from)?;
+        Ok(HostFeatureSupportedResponse::V1(
+            v01::HostFeatureSupportedResponse { supported },
+        ))
+    }
+}
+
+impl Storage for CallbackPlatform {
+    async fn read(&self, key: String) -> Result<Option<Vec<u8>>, v01::HostLocalStorageReadError> {
+        self.callbacks.local_storage_read(key).map_err(Into::into)
+    }
+
+    async fn write(
+        &self,
+        key: String,
+        value: Vec<u8>,
+    ) -> Result<(), v01::HostLocalStorageReadError> {
+        self.callbacks
+            .local_storage_write(key, value)
+            .map_err(Into::into)
+    }
+
+    async fn clear(&self, key: String) -> Result<(), v01::HostLocalStorageReadError> {
+        self.callbacks.local_storage_clear(key).map_err(Into::into)
+    }
+}
+
+// `ChainProvider` is not exposed through the callback surface. The trait
+// is required for `Platform`, so the impl stubs `connect` as
+// `Unavailable`. Hosts that need chain access wire it directly into the
+// Rust core (e.g. via `RuntimeChainProvider`) rather than through the
+// JNI/Swift callback boundary.
+
+impl ChainProvider for CallbackPlatform {
+    async fn connect(
+        &self,
+        _genesis_hash: Vec<u8>,
+    ) -> Result<Box<dyn JsonRpcConnection>, v01::GenericError> {
+        Err(v01::GenericError {
+            reason: "chain provider not wired through native callbacks".into(),
+        })
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn set_active_session_rejects_wrong_size_pubkey() {
+        struct Noop;
+        impl HostCallbacks for Noop {
+            fn on_core_log(&self, _marker: String, _detail: String) {}
+            fn navigate_to(&self, _url: String) -> Result<(), HostNavigateRejection> {
+                Ok(())
+            }
+            fn push_notification(&self, _payload: Vec<u8>) -> Result<(), HostRejection> {
+                Ok(())
+            }
+            fn device_permission(&self, _request: Vec<u8>) -> Result<bool, HostRejection> {
+                Ok(false)
+            }
+            fn remote_permission(&self, _request: Vec<u8>) -> Result<bool, HostRejection> {
+                Ok(false)
+            }
+            fn feature_supported(&self, _request: Vec<u8>) -> Result<bool, HostRejection> {
+                Ok(false)
+            }
+            fn local_storage_read(
+                &self,
+                _key: String,
+            ) -> Result<Option<Vec<u8>>, HostStorageError> {
+                Ok(None)
+            }
+            fn local_storage_write(
+                &self,
+                _key: String,
+                _value: Vec<u8>,
+            ) -> Result<(), HostStorageError> {
+                Ok(())
+            }
+            fn local_storage_clear(&self, _key: String) -> Result<(), HostStorageError> {
+                Ok(())
+            }
+        }
+
+        let core = NativeTrUApiCore::new(Box::new(Noop));
+        assert!(!core.set_active_session(vec![0u8; 16], None, None));
+        assert!(core.set_active_session(vec![0u8; 32], None, None));
+        core.clear_active_session();
+    }
+
+    /// Calling `start_ws_bridge` twice on the same `NativeTrUApiCore`
+    /// without an intervening `stop_ws_bridge` is a hard error. The bridge
+    /// is single-instance per core, so the second start must surface
+    /// `AlreadyRunning` rather than silently leaking a worker thread.
+    #[cfg(feature = "ws-bridge")]
+    #[test]
+    fn start_ws_bridge_twice_returns_already_running() {
+        struct Noop;
+        impl HostCallbacks for Noop {
+            fn on_core_log(&self, _marker: String, _detail: String) {}
+            fn navigate_to(&self, _url: String) -> Result<(), HostNavigateRejection> {
+                Ok(())
+            }
+            fn push_notification(&self, _payload: Vec<u8>) -> Result<(), HostRejection> {
+                Ok(())
+            }
+            fn device_permission(&self, _request: Vec<u8>) -> Result<bool, HostRejection> {
+                Ok(false)
+            }
+            fn remote_permission(&self, _request: Vec<u8>) -> Result<bool, HostRejection> {
+                Ok(false)
+            }
+            fn feature_supported(&self, _request: Vec<u8>) -> Result<bool, HostRejection> {
+                Ok(false)
+            }
+            fn local_storage_read(
+                &self,
+                _key: String,
+            ) -> Result<Option<Vec<u8>>, HostStorageError> {
+                Ok(None)
+            }
+            fn local_storage_write(
+                &self,
+                _key: String,
+                _value: Vec<u8>,
+            ) -> Result<(), HostStorageError> {
+                Ok(())
+            }
+            fn local_storage_clear(&self, _key: String) -> Result<(), HostStorageError> {
+                Ok(())
+            }
+        }
+
+        let core = NativeTrUApiCore::new(Box::new(Noop));
+        let _first = core.start_ws_bridge(0).expect("first start must succeed");
+        let err = core
+            .start_ws_bridge(0)
+            .expect_err("second start must error");
+        assert!(matches!(err, WsBridgeStartError::AlreadyRunning));
+        core.stop_ws_bridge();
+    }
+}
diff --git a/rust/crates/truapi-server/src/runtime.rs b/rust/crates/truapi-server/src/runtime.rs
new file mode 100644
index 00000000..cf9698a4
--- /dev/null
+++ b/rust/crates/truapi-server/src/runtime.rs
@@ -0,0 +1,751 @@
+//! `PlatformRuntimeHost<P>` adapts a [`truapi_platform::Platform`] into the
+//! typed `truapi::api::*` host traits the generated dispatcher routes to.
+//!
+//! Most methods are straight delegations to the platform; the rest carry
+//! host-agnostic logic owned by the core (the chainHead-v1 runtime behind
+//! the Chain surface, `dotns` URL parsing for `navigate_to`, and the
+//! permission cache layer). Methods with no platform backing return
+//! `CallError::unavailable()`.
+
+use std::sync::Arc;
+
+use crate::chain_runtime::{
+    ChainRuntime, RuntimeChainProvider, RuntimeFailure, RuntimeFailureKind,
+};
+use crate::host_logic::dotns::{NavigateDecision, parse_navigate};
+use crate::host_logic::features::feature_supported;
+use crate::host_logic::permissions::{Decision, PermissionsService};
+use crate::host_logic::session::SessionState;
+use crate::subscription::Spawner;
+
+use futures::StreamExt;
+use truapi::api::{
+    Account, Chain, Chat, CoinPayment, Entropy, LocalStorage, Notifications, Payment, Permissions,
+    Preimage, ResourceAllocation, Signing, StatementStore, System, Theme,
+};
+use truapi::v01;
+use truapi::versioned::account::{
+    HostAccountConnectionStatusSubscribeItem, HostRequestLoginError, HostRequestLoginRequest,
+    HostRequestLoginResponse,
+};
+use truapi::versioned::chain::{
+    RemoteChainHeadBodyError, RemoteChainHeadBodyRequest, RemoteChainHeadBodyResponse,
+    RemoteChainHeadCallError, RemoteChainHeadCallRequest, RemoteChainHeadCallResponse,
+    RemoteChainHeadContinueError, RemoteChainHeadContinueRequest, RemoteChainHeadContinueResponse,
+    RemoteChainHeadFollowItem, RemoteChainHeadFollowRequest, RemoteChainHeadHeaderError,
+    RemoteChainHeadHeaderRequest, RemoteChainHeadHeaderResponse, RemoteChainHeadStopOperationError,
+    RemoteChainHeadStopOperationRequest, RemoteChainHeadStopOperationResponse,
+    RemoteChainHeadStorageError, RemoteChainHeadStorageRequest, RemoteChainHeadStorageResponse,
+    RemoteChainHeadUnpinError, RemoteChainHeadUnpinRequest, RemoteChainHeadUnpinResponse,
+    RemoteChainSpecChainNameError, RemoteChainSpecChainNameRequest,
+    RemoteChainSpecChainNameResponse, RemoteChainSpecGenesisHashError,
+    RemoteChainSpecGenesisHashRequest, RemoteChainSpecGenesisHashResponse,
+    RemoteChainSpecPropertiesError, RemoteChainSpecPropertiesRequest,
+    RemoteChainSpecPropertiesResponse, RemoteChainTransactionBroadcastError,
+    RemoteChainTransactionBroadcastRequest, RemoteChainTransactionBroadcastResponse,
+    RemoteChainTransactionStopError, RemoteChainTransactionStopRequest,
+    RemoteChainTransactionStopResponse,
+};
+use truapi::versioned::local_storage::{
+    HostLocalStorageClearError, HostLocalStorageClearRequest, HostLocalStorageClearResponse,
+    HostLocalStorageReadError, HostLocalStorageReadRequest, HostLocalStorageReadResponse,
+    HostLocalStorageWriteError, HostLocalStorageWriteRequest, HostLocalStorageWriteResponse,
+};
+use truapi::versioned::notifications::{
+    HostPushNotificationCancelError, HostPushNotificationCancelRequest,
+    HostPushNotificationCancelResponse, HostPushNotificationError, HostPushNotificationRequest,
+    HostPushNotificationResponse,
+};
+use truapi::versioned::permissions::{
+    HostDevicePermissionError, HostDevicePermissionRequest, HostDevicePermissionResponse,
+    RemotePermissionError, RemotePermissionRequest, RemotePermissionResponse,
+};
+use truapi::versioned::system::{
+    HostFeatureSupportedError, HostFeatureSupportedRequest, HostFeatureSupportedResponse,
+    HostNavigateToError, HostNavigateToRequest, HostNavigateToResponse,
+};
+use truapi::{CallContext, CallError, Subscription};
+use truapi_platform::{
+    ChainProvider as PlatformChainProvider, JsonRpcConnection, Navigation as PlatformNavigation,
+    Platform, Storage as PlatformStorage,
+};
+
+/// Adapter that exposes a [`truapi_platform::Platform`] through the
+/// `truapi::api::*` trait set the generated dispatcher routes to.
+pub struct PlatformRuntimeHost<P> {
+    platform: Arc<P>,
+    /// chainHead-v1 state machine. The provider adapter forwards
+    /// [`PlatformChainProvider::connect`] into the json-rpc layer.
+    chain: ChainRuntime,
+    /// Currently-paired session, pushed by the host through a side channel.
+    /// Account-management subscriptions read from this in lieu of round-tripping
+    /// a callback on every connection-status query.
+    session_state: Arc<SessionState>,
+}
+
+impl<P> PlatformRuntimeHost<P> {
+    /// Wrap a platform implementation. The runtime takes ownership via `Arc`.
+    /// `spawner` is used by the embedded chain runtime to drive json-rpc
+    /// response loops and follow-setup futures.
+    pub fn new(platform: Arc<P>, spawner: Spawner) -> Self
+    where
+        P: Platform + 'static,
+    {
+        let chain_provider = Self::chain_provider(platform.clone());
+        Self {
+            platform,
+            chain: ChainRuntime::new(chain_provider, spawner),
+            session_state: SessionState::new(),
+        }
+    }
+
+    /// Chain provider backing the chainHead-v1 runtime. Without the `smoldot`
+    /// feature, chain access routes through the platform's `ChainProvider`.
+    #[cfg(not(feature = "smoldot"))]
+    fn chain_provider(platform: Arc<P>) -> Arc<dyn RuntimeChainProvider>
+    where
+        P: Platform + 'static,
+    {
+        Arc::new(PlatformChainRuntimeProvider { platform })
+    }
+
+    /// With the `smoldot` feature, the embedded light client owns chain
+    /// access, falling back to the platform's `ChainProvider` only if the
+    /// client fails to start.
+    #[cfg(feature = "smoldot")]
+    fn chain_provider(platform: Arc<P>) -> Arc<dyn RuntimeChainProvider>
+    where
+        P: Platform + 'static,
+    {
+        match crate::smoldot_provider::SmoldotChainProvider::with_bundled_specs() {
+            Ok(provider) => Arc::new(provider),
+            Err(_err) => Arc::new(PlatformChainRuntimeProvider { platform }),
+        }
+    }
+
+    /// Clone of the shared session-state holder. The platform bridge layer
+    /// (`setActiveSession` / `clearActiveSession`) routes through this handle.
+    pub fn session_state(&self) -> Arc<SessionState> {
+        self.session_state.clone()
+    }
+}
+
+/// Adapter from `truapi_platform::ChainProvider` into the
+/// [`RuntimeChainProvider`] surface the chain runtime expects.
+/// Reuses the platform-supplied json-rpc connection and converts the
+/// platform `GenericError` into a `RuntimeFailure::Unavailable`.
+struct PlatformChainRuntimeProvider<P> {
+    platform: Arc<P>,
+}
+
+#[async_trait::async_trait]
+impl<P> RuntimeChainProvider for PlatformChainRuntimeProvider<P>
+where
+    P: Platform + 'static,
+{
+    async fn connect(
+        &self,
+        genesis_hash: Vec<u8>,
+    ) -> Result<Arc<dyn JsonRpcConnection>, RuntimeFailure> {
+        PlatformChainProvider::connect(self.platform.as_ref(), genesis_hash)
+            .await
+            .map(Arc::from)
+            .map_err(|_| RuntimeFailure::unavailable("remote_chain_connect"))
+    }
+}
+
+fn runtime_failure_to_call_error<E>(failure: RuntimeFailure) -> CallError<E> {
+    match failure.kind() {
+        RuntimeFailureKind::Unavailable => CallError::HostFailure {
+            reason: failure.reason(),
+        },
+        RuntimeFailureKind::HostFailure => CallError::HostFailure {
+            reason: failure.reason(),
+        },
+    }
+}
+
+// ---------------------------------------------------------------------------
+// System
+// ---------------------------------------------------------------------------
+
+impl<P> System for PlatformRuntimeHost<P>
+where
+    P: Platform + 'static,
+{
+    async fn feature_supported(
+        &self,
+        _cx: &CallContext,
+        request: HostFeatureSupportedRequest,
+    ) -> Result<HostFeatureSupportedResponse, CallError<HostFeatureSupportedError>> {
+        feature_supported(self.platform.as_ref(), request)
+            .await
+            .map_err(|err| CallError::Domain(HostFeatureSupportedError::V1(err)))
+    }
+
+    async fn navigate_to(
+        &self,
+        _cx: &CallContext,
+        request: HostNavigateToRequest,
+    ) -> Result<HostNavigateToResponse, CallError<HostNavigateToError>> {
+        let HostNavigateToRequest::V1(v01::HostNavigateToRequest { url }) = request;
+        let resolved = match parse_navigate(&url) {
+            NavigateDecision::Reject { reason } => {
+                return Err(CallError::Domain(HostNavigateToError::V1(
+                    v01::HostNavigateToError::Unknown { reason },
+                )));
+            }
+            decision => match decision.canonical_url() {
+                Some(url) => url,
+                None => {
+                    return Err(CallError::HostFailure {
+                        reason: "navigate decision produced no canonical URL".to_string(),
+                    });
+                }
+            },
+        };
+        PlatformNavigation::navigate_to(self.platform.as_ref(), resolved)
+            .await
+            .map(|()| HostNavigateToResponse::V1)
+            .map_err(|err| CallError::Domain(HostNavigateToError::V1(err)))
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Permissions
+// ---------------------------------------------------------------------------
+
+impl<P> Permissions for PlatformRuntimeHost<P>
+where
+    P: Platform + 'static,
+{
+    async fn request_device_permission(
+        &self,
+        _cx: &CallContext,
+        request: HostDevicePermissionRequest,
+    ) -> Result<HostDevicePermissionResponse, CallError<HostDevicePermissionError>> {
+        let HostDevicePermissionRequest::V1(inner) = request;
+        let service = PermissionsService::new(self.platform.as_ref(), self.platform.as_ref());
+        match service.check_or_prompt_device(inner).await {
+            Ok(decision) => Ok(HostDevicePermissionResponse::V1(
+                v01::HostDevicePermissionResponse {
+                    granted: decision == Decision::Granted,
+                },
+            )),
+            Err(err) => Err(CallError::HostFailure {
+                reason: format!("permission storage failed: {err:?}"),
+            }),
+        }
+    }
+
+    async fn request_remote_permission(
+        &self,
+        _cx: &CallContext,
+        request: RemotePermissionRequest,
+    ) -> Result<RemotePermissionResponse, CallError<RemotePermissionError>> {
+        let RemotePermissionRequest::V1(inner) = request;
+        let service = PermissionsService::new(self.platform.as_ref(), self.platform.as_ref());
+        match service.check_or_prompt_remote(inner).await {
+            Ok(decision) => Ok(RemotePermissionResponse::V1(
+                v01::RemotePermissionResponse {
+                    granted: decision == Decision::Granted,
+                },
+            )),
+            Err(err) => Err(CallError::HostFailure {
+                reason: format!("permission storage failed: {err:?}"),
+            }),
+        }
+    }
+}
+
+// ---------------------------------------------------------------------------
+// LocalStorage
+// ---------------------------------------------------------------------------
+
+impl<P> LocalStorage for PlatformRuntimeHost<P>
+where
+    P: Platform + 'static,
+{
+    async fn read(
+        &self,
+        _cx: &CallContext,
+        request: HostLocalStorageReadRequest,
+    ) -> Result<HostLocalStorageReadResponse, CallError<HostLocalStorageReadError>> {
+        let HostLocalStorageReadRequest::V1(v01::HostLocalStorageReadRequest { key }) = request;
+        PlatformStorage::read(self.platform.as_ref(), key)
+            .await
+            .map(|value| {
+                HostLocalStorageReadResponse::V1(v01::HostLocalStorageReadResponse { value })
+            })
+            .map_err(|err| CallError::Domain(HostLocalStorageReadError::V1(err)))
+    }
+
+    async fn write(
+        &self,
+        _cx: &CallContext,
+        request: HostLocalStorageWriteRequest,
+    ) -> Result<HostLocalStorageWriteResponse, CallError<HostLocalStorageWriteError>> {
+        let HostLocalStorageWriteRequest::V1(v01::HostLocalStorageWriteRequest { key, value }) =
+            request;
+        PlatformStorage::write(self.platform.as_ref(), key, value)
+            .await
+            .map(|()| HostLocalStorageWriteResponse::V1)
+            .map_err(|err| CallError::Domain(HostLocalStorageWriteError::V1(err)))
+    }
+
+    async fn clear(
+        &self,
+        _cx: &CallContext,
+        request: HostLocalStorageClearRequest,
+    ) -> Result<HostLocalStorageClearResponse, CallError<HostLocalStorageClearError>> {
+        let HostLocalStorageClearRequest::V1(v01::HostLocalStorageClearRequest { key }) = request;
+        PlatformStorage::clear(self.platform.as_ref(), key)
+            .await
+            .map(|()| HostLocalStorageClearResponse::V1)
+            .map_err(|err| CallError::Domain(HostLocalStorageClearError::V1(err)))
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Account
+// ---------------------------------------------------------------------------
+//
+// Account-management flows live in the Rust core itself, backed by the
+// `Storage` capability for key material. Most Account trait methods fall
+// back to the `truapi::api::*` defaults, which return
+// `Err(CallError::unavailable())` until those in-core implementations
+// land. `PlatformRuntimeHost` only overrides
+// `connection_status_subscribe` (fed by the session-state holder) and
+// `request_login` (no useful default).
+
+impl<P> Account for PlatformRuntimeHost<P>
+where
+    P: Platform + 'static,
+{
+    async fn connection_status_subscribe(
+        &self,
+        _cx: &CallContext,
+    ) -> Subscription<HostAccountConnectionStatusSubscribeItem> {
+        Subscription::new(self.session_state.subscribe())
+    }
+
+    async fn request_login(
+        &self,
+        _cx: &CallContext,
+        _request: HostRequestLoginRequest,
+    ) -> Result<HostRequestLoginResponse, CallError<HostRequestLoginError>> {
+        Err(CallError::unavailable())
+    }
+}
+
+impl<P> Signing for PlatformRuntimeHost<P> where P: Platform + 'static {}
+
+impl<P> StatementStore for PlatformRuntimeHost<P> where P: Platform + 'static {}
+
+impl<P> Preimage for PlatformRuntimeHost<P> where P: Platform + 'static {}
+
+// ---------------------------------------------------------------------------
+// Chain
+// ---------------------------------------------------------------------------
+//
+// The chain surface is backed by `ChainRuntime`, which keeps one
+// `chainHead_v1` connection per genesis hash on top of the platform-supplied
+// `ChainProvider::connect`. Requests go through `request_value` and parse
+// json-rpc responses into typed v01 results; follow notifications are
+// translated into `RemoteChainHeadFollowItem` items on the subscription
+// stream.
+
+impl<P> Chain for PlatformRuntimeHost<P>
+where
+    P: Platform + 'static,
+{
+    async fn follow_head_subscribe(
+        &self,
+        cx: &CallContext,
+        request: RemoteChainHeadFollowRequest,
+    ) -> Subscription<RemoteChainHeadFollowItem> {
+        let RemoteChainHeadFollowRequest::V1(inner) = request;
+        let follow_subscription_id = cx.request_id().to_string();
+        let stream = self
+            .chain
+            .remote_chain_head_follow(follow_subscription_id, inner)
+            .map(RemoteChainHeadFollowItem::V1);
+        Subscription::new(Box::pin(stream))
+    }
+
+    async fn get_head_header(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainHeadHeaderRequest,
+    ) -> Result<RemoteChainHeadHeaderResponse, CallError<RemoteChainHeadHeaderError>> {
+        let RemoteChainHeadHeaderRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_head_header(inner)
+            .await
+            .map(RemoteChainHeadHeaderResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn get_head_body(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainHeadBodyRequest,
+    ) -> Result<RemoteChainHeadBodyResponse, CallError<RemoteChainHeadBodyError>> {
+        let RemoteChainHeadBodyRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_head_body(inner)
+            .await
+            .map(RemoteChainHeadBodyResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn get_head_storage(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainHeadStorageRequest,
+    ) -> Result<RemoteChainHeadStorageResponse, CallError<RemoteChainHeadStorageError>> {
+        let RemoteChainHeadStorageRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_head_storage(inner)
+            .await
+            .map(RemoteChainHeadStorageResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn call_head(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainHeadCallRequest,
+    ) -> Result<RemoteChainHeadCallResponse, CallError<RemoteChainHeadCallError>> {
+        let RemoteChainHeadCallRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_head_call(inner)
+            .await
+            .map(RemoteChainHeadCallResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn unpin_head(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainHeadUnpinRequest,
+    ) -> Result<RemoteChainHeadUnpinResponse, CallError<RemoteChainHeadUnpinError>> {
+        let RemoteChainHeadUnpinRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_head_unpin(inner)
+            .await
+            .map(|()| RemoteChainHeadUnpinResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn continue_head(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainHeadContinueRequest,
+    ) -> Result<RemoteChainHeadContinueResponse, CallError<RemoteChainHeadContinueError>> {
+        let RemoteChainHeadContinueRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_head_continue(inner)
+            .await
+            .map(|()| RemoteChainHeadContinueResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn stop_head_operation(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainHeadStopOperationRequest,
+    ) -> Result<RemoteChainHeadStopOperationResponse, CallError<RemoteChainHeadStopOperationError>>
+    {
+        let RemoteChainHeadStopOperationRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_head_stop_operation(inner)
+            .await
+            .map(|()| RemoteChainHeadStopOperationResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn get_spec_genesis_hash(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainSpecGenesisHashRequest,
+    ) -> Result<RemoteChainSpecGenesisHashResponse, CallError<RemoteChainSpecGenesisHashError>>
+    {
+        let RemoteChainSpecGenesisHashRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_spec_genesis_hash(inner.genesis_hash)
+            .await
+            .map(RemoteChainSpecGenesisHashResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn get_spec_chain_name(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainSpecChainNameRequest,
+    ) -> Result<RemoteChainSpecChainNameResponse, CallError<RemoteChainSpecChainNameError>> {
+        let RemoteChainSpecChainNameRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_spec_chain_name(inner.genesis_hash)
+            .await
+            .map(RemoteChainSpecChainNameResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn get_spec_properties(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainSpecPropertiesRequest,
+    ) -> Result<RemoteChainSpecPropertiesResponse, CallError<RemoteChainSpecPropertiesError>> {
+        let RemoteChainSpecPropertiesRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_spec_properties(inner.genesis_hash)
+            .await
+            .map(RemoteChainSpecPropertiesResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn broadcast_transaction(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainTransactionBroadcastRequest,
+    ) -> Result<
+        RemoteChainTransactionBroadcastResponse,
+        CallError<RemoteChainTransactionBroadcastError>,
+    > {
+        let RemoteChainTransactionBroadcastRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_transaction_broadcast(inner)
+            .await
+            .map(RemoteChainTransactionBroadcastResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+
+    async fn stop_transaction(
+        &self,
+        _cx: &CallContext,
+        request: RemoteChainTransactionStopRequest,
+    ) -> Result<RemoteChainTransactionStopResponse, CallError<RemoteChainTransactionStopError>>
+    {
+        let RemoteChainTransactionStopRequest::V1(inner) = request;
+        self.chain
+            .remote_chain_transaction_stop(inner)
+            .await
+            .map(|()| RemoteChainTransactionStopResponse::V1)
+            .map_err(runtime_failure_to_call_error)
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Traits that defer entirely to default "unavailable" trait bodies.
+//
+// These API surfaces (Chat, CoinPayment, Payment, ResourceAllocation,
+// Entropy, Theme) are not part of the v0.1 platform contract, so we leave
+// every method at its default `Err(CallError::unavailable())` body and
+// supply empty trait impls here. Adding a method later only requires
+// implementing the relevant `truapi_platform::*` extension trait.
+
+impl<P> Chat for PlatformRuntimeHost<P> where P: Platform + 'static {}
+impl<P> CoinPayment for PlatformRuntimeHost<P> where P: Platform + 'static {}
+impl<P> Payment for PlatformRuntimeHost<P> where P: Platform + 'static {}
+impl<P> ResourceAllocation for PlatformRuntimeHost<P> where P: Platform + 'static {}
+impl<P> Entropy for PlatformRuntimeHost<P> where P: Platform + 'static {}
+impl<P> Theme for PlatformRuntimeHost<P> where P: Platform + 'static {}
+
+// `Notifications` methods are required (no default bodies), so the
+// unavailable stubs are spelled out. The v0.1 platform contract does not
+// model host-assigned notification ids, cancellation, or scheduling.
+impl<P> Notifications for PlatformRuntimeHost<P>
+where
+    P: Platform + 'static,
+{
+    async fn send_push_notification(
+        &self,
+        _cx: &CallContext,
+        _request: HostPushNotificationRequest,
+    ) -> Result<HostPushNotificationResponse, CallError<HostPushNotificationError>> {
+        Err(CallError::unavailable())
+    }
+
+    async fn cancel_push_notification(
+        &self,
+        _cx: &CallContext,
+        _request: HostPushNotificationCancelRequest,
+    ) -> Result<HostPushNotificationCancelResponse, CallError<HostPushNotificationCancelError>>
+    {
+        Err(CallError::unavailable())
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::chain_runtime::thread_per_task_spawner;
+    use futures::stream::{self, BoxStream};
+    use parity_scale_codec::Encode;
+    use truapi::v01;
+    use truapi_platform::{
+        ChainProvider, Features as PlatformFeatures, JsonRpcConnection,
+        Navigation as PlatformNavigation, Notifications as PlatformNotifications,
+        Permissions as PlatformPermissions, Storage as PlatformStorage,
+    };
+
+    fn test_spawner() -> Spawner {
+        thread_per_task_spawner()
+    }
+
+    /// Minimal Platform impl that only answers `feature_supported`. Every
+    /// other callback returns a unit value or empty stream, so the runtime
+    /// can exercise its delegation paths without pulling in a real backend.
+    struct StubPlatform;
+
+    impl PlatformStorage for StubPlatform {
+        async fn read(
+            &self,
+            _key: String,
+        ) -> Result<Option<Vec<u8>>, v01::HostLocalStorageReadError> {
+            Ok(None)
+        }
+        async fn write(
+            &self,
+            _key: String,
+            _value: Vec<u8>,
+        ) -> Result<(), v01::HostLocalStorageReadError> {
+            Ok(())
+        }
+        async fn clear(&self, _key: String) -> Result<(), v01::HostLocalStorageReadError> {
+            Ok(())
+        }
+    }
+
+    impl PlatformNavigation for StubPlatform {
+        async fn navigate_to(&self, _url: String) -> Result<(), v01::HostNavigateToError> {
+            Ok(())
+        }
+    }
+
+    impl PlatformNotifications for StubPlatform {
+        async fn push_notification(
+            &self,
+            _notification: v01::HostPushNotificationRequest,
+        ) -> Result<(), v01::GenericError> {
+            Ok(())
+        }
+    }
+
+    impl PlatformPermissions for StubPlatform {
+        async fn device_permission(
+            &self,
+            _request: v01::HostDevicePermissionRequest,
+        ) -> Result<v01::HostDevicePermissionResponse, v01::GenericError> {
+            Ok(v01::HostDevicePermissionResponse { granted: true })
+        }
+
+        async fn remote_permission(
+            &self,
+            _request: v01::RemotePermissionRequest,
+        ) -> Result<v01::RemotePermissionResponse, v01::GenericError> {
+            Ok(v01::RemotePermissionResponse { granted: true })
+        }
+    }
+
+    impl PlatformFeatures for StubPlatform {
+        async fn feature_supported(
+            &self,
+            request: HostFeatureSupportedRequest,
+        ) -> Result<HostFeatureSupportedResponse, v01::GenericError> {
+            let HostFeatureSupportedRequest::V1(_) = request;
+            Ok(HostFeatureSupportedResponse::V1(
+                v01::HostFeatureSupportedResponse { supported: true },
+            ))
+        }
+    }
+
+    struct DeadConnection;
+    impl JsonRpcConnection for DeadConnection {
+        fn send(&self, _request: String) {}
+        fn responses(&self) -> BoxStream<'static, String> {
+            Box::pin(stream::empty())
+        }
+    }
+
+    impl ChainProvider for StubPlatform {
+        async fn connect(
+            &self,
+            _genesis_hash: Vec<u8>,
+        ) -> Result<Box<dyn JsonRpcConnection>, v01::GenericError> {
+            Ok(Box::new(DeadConnection))
+        }
+    }
+
+    #[test]
+    fn feature_supported_round_trips_through_runtime() {
+        let host = PlatformRuntimeHost::new(Arc::new(StubPlatform), test_spawner());
+        let cx = CallContext::new();
+        let request = HostFeatureSupportedRequest::V1(v01::HostFeatureSupportedRequest::Chain {
+            genesis_hash: vec![0u8; 32],
+        });
+        let response = futures::executor::block_on(host.feature_supported(&cx, request)).unwrap();
+        let HostFeatureSupportedResponse::V1(inner) = response;
+        assert!(inner.supported);
+    }
+
+    #[test]
+    fn navigate_to_uses_dotns_decision_and_then_platform() {
+        let host = PlatformRuntimeHost::new(Arc::new(StubPlatform), test_spawner());
+        let cx = CallContext::new();
+        let request = HostNavigateToRequest::V1(v01::HostNavigateToRequest {
+            url: "mytestapp.dot".to_string(),
+        });
+        let response = futures::executor::block_on(host.navigate_to(&cx, request)).unwrap();
+        assert_eq!(response, HostNavigateToResponse::V1);
+    }
+
+    #[test]
+    fn navigate_to_rejects_empty_input_without_calling_platform() {
+        let host = PlatformRuntimeHost::new(Arc::new(StubPlatform), test_spawner());
+        let cx = CallContext::new();
+        let request = HostNavigateToRequest::V1(v01::HostNavigateToRequest {
+            url: "".to_string(),
+        });
+        let err = futures::executor::block_on(host.navigate_to(&cx, request)).unwrap_err();
+        match err {
+            CallError::Domain(HostNavigateToError::V1(v01::HostNavigateToError::Unknown {
+                ..
+            })) => {}
+            other => panic!("expected Unknown navigate error, got {other:?}"),
+        }
+    }
+
+    #[test]
+    fn request_login_returns_unavailable() {
+        let host = PlatformRuntimeHost::new(Arc::new(StubPlatform), test_spawner());
+        let cx = CallContext::new();
+        let request = HostRequestLoginRequest::V1(v01::HostRequestLoginRequest { reason: None });
+        let err = futures::executor::block_on(host.request_login(&cx, request)).unwrap_err();
+        assert!(matches!(err, CallError::HostFailure { reason } if reason == "unavailable"));
+    }
+
+    #[test]
+    fn permissions_grants_and_caches() {
+        let host = PlatformRuntimeHost::new(Arc::new(StubPlatform), test_spawner());
+        let cx = CallContext::new();
+        let request = HostDevicePermissionRequest::V1(v01::HostDevicePermissionRequest::Camera);
+        let response =
+            futures::executor::block_on(host.request_device_permission(&cx, request)).unwrap();
+        let HostDevicePermissionResponse::V1(inner) = response;
+        assert!(inner.granted);
+    }
+
+    #[test]
+    fn feature_supported_encodes_response_to_known_bytes() {
+        let host = PlatformRuntimeHost::new(Arc::new(StubPlatform), test_spawner());
+        let cx = CallContext::new();
+        let request = HostFeatureSupportedRequest::V1(v01::HostFeatureSupportedRequest::Chain {
+            genesis_hash: vec![0u8; 32],
+        });
+        let response = futures::executor::block_on(host.feature_supported(&cx, request)).unwrap();
+        // [V1 variant=0][supported=1]
+        assert_eq!(response.encode(), vec![0x00, 0x01]);
+    }
+}
diff --git a/rust/crates/truapi-server/src/smoldot_provider/mod.rs b/rust/crates/truapi-server/src/smoldot_provider/mod.rs
new file mode 100644
index 00000000..9a7dc180
--- /dev/null
+++ b/rust/crates/truapi-server/src/smoldot_provider/mod.rs
@@ -0,0 +1,315 @@
+//! Rust-owned light client backend for [`RuntimeChainProvider`].
+//!
+//! Wraps a single `smoldot_light::Client` that owns Paseo + Asset Hub Paseo.
+//! Each `connect(genesis_hash)` returns a [`JsonRpcConnection`] that forwards
+//! requests to the corresponding smoldot chain and streams responses back to
+//! the chain runtime.
+
+use std::collections::HashMap;
+use std::sync::{Arc, Mutex};
+
+use derive_more::Display;
+use futures::SinkExt;
+use futures::StreamExt;
+use futures::channel::mpsc;
+use futures::stream::BoxStream;
+use smoldot_light::{
+    AddChainConfig, AddChainConfigJsonRpc, AddChainError, ChainId, Client, JsonRpcResponses,
+};
+use truapi_platform::JsonRpcConnection;
+
+use crate::chain_runtime::{RuntimeChainProvider, RuntimeFailure};
+
+#[cfg(not(target_arch = "wasm32"))]
+mod native_platform;
+#[cfg(not(target_arch = "wasm32"))]
+use native_platform::{PlatformRefAlias, make_platform};
+
+#[cfg(target_arch = "wasm32")]
+mod wasm_helpers;
+#[cfg(target_arch = "wasm32")]
+mod wasm_platform;
+#[cfg(target_arch = "wasm32")]
+mod wasm_socket;
+#[cfg(target_arch = "wasm32")]
+use wasm_platform::{PlatformRefAlias, make_platform};
+
+// `paseo.json` embeds a `lightSyncState` warp-sync checkpoint to speed initial
+// sync. It is a point-in-time snapshot: regenerate it periodically (the older
+// it gets, the more GRANDPA catch-up smoldot must do from the checkpoint).
+// `asset-hub-paseo.json` carries no checkpoint and relies on relay finality.
+const PASEO_SPEC: &str = include_str!("specs/paseo.json");
+const ASSET_HUB_PASEO_SPEC: &str = include_str!("specs/asset-hub-paseo.json");
+
+const PASEO_RELAY_GENESIS: &str =
+    "0x77afd6190f1554ad45fd0d31aee62aacc33c6db0ea801129acb813f913e0764f";
+const ASSET_HUB_PASEO_GENESIS: &str =
+    "0xd6eec26135305a8ad257a20d003357284c8aa03d0bdb2b357ab0a22371e11ef2";
+
+/// Per-chain json-rpc bus ceilings. Sized well above the chainHead-v1 usage
+/// the dispatcher permits, but finite so a stalled consumer cannot grow the
+/// smoldot-side buffers without bound.
+const MAX_PENDING_RPC_REQUESTS: u32 = 256;
+const MAX_RPC_SUBSCRIPTIONS: u32 = 1024;
+
+/// Errors returned by [`SmoldotChainProvider::with_bundled_specs`].
+#[derive(Debug, Display)]
+pub enum SmoldotInitError {
+    /// Failed to add the Paseo relay chain to the client.
+    #[display("failed to add relay chain: {_0}")]
+    AddRelay(AddChainError),
+    /// Failed to add the Asset Hub parachain to the client.
+    #[display("failed to add parachain: {_0}")]
+    AddParaChain(AddChainError),
+}
+
+impl std::error::Error for SmoldotInitError {}
+
+struct ChainEntry {
+    chain_id: ChainId,
+    responses: Mutex<Option<JsonRpcResponses<PlatformRefAlias>>>,
+}
+
+type ClientRef = Arc<Mutex<Client<PlatformRefAlias>>>;
+
+/// A [`RuntimeChainProvider`] backed by `smoldot_light::Client`.
+///
+/// Built via [`SmoldotChainProvider::with_bundled_specs`] with Paseo + Asset
+/// Hub Paseo pre-loaded. Each chain supports a single [`connect`] for the
+/// client's lifetime: the json-rpc response stream is single-consumer and is
+/// handed out on first connect, so a second `connect` for the same chain
+/// reports a distinct `HostFailure` rather than masquerading as an unknown
+/// genesis hash.
+///
+/// [`connect`]: RuntimeChainProvider::connect
+pub struct SmoldotChainProvider {
+    client: ClientRef,
+    chains: HashMap<String, Arc<ChainEntry>>,
+}
+
+impl SmoldotChainProvider {
+    /// Build a provider with Paseo + Asset Hub Paseo specs already added to
+    /// the client. Each chain's json-rpc bus is held until the first
+    /// `connect` call drains it.
+    pub fn with_bundled_specs() -> Result<Self, SmoldotInitError> {
+        let platform = make_platform();
+        let mut client: Client<PlatformRefAlias> = Client::new(platform);
+
+        let relay = client
+            .add_chain(AddChainConfig {
+                specification: PASEO_SPEC,
+                json_rpc: AddChainConfigJsonRpc::Enabled {
+                    max_pending_requests: std::num::NonZeroU32::new(MAX_PENDING_RPC_REQUESTS)
+                        .unwrap(),
+                    max_subscriptions: MAX_RPC_SUBSCRIPTIONS,
+                },
+                database_content: "",
+                potential_relay_chains: std::iter::empty(),
+                user_data: (),
+                statement_protocol_config: None,
+            })
+            .map_err(SmoldotInitError::AddRelay)?;
+
+        let para = client
+            .add_chain(AddChainConfig {
+                specification: ASSET_HUB_PASEO_SPEC,
+                json_rpc: AddChainConfigJsonRpc::Enabled {
+                    max_pending_requests: std::num::NonZeroU32::new(MAX_PENDING_RPC_REQUESTS)
+                        .unwrap(),
+                    max_subscriptions: MAX_RPC_SUBSCRIPTIONS,
+                },
+                database_content: "",
+                potential_relay_chains: std::iter::once(relay.chain_id),
+                user_data: (),
+                statement_protocol_config: None,
+            })
+            .map_err(SmoldotInitError::AddParaChain)?;
+
+        let mut chains = HashMap::new();
+        chains.insert(
+            PASEO_RELAY_GENESIS.to_string(),
+            Arc::new(ChainEntry {
+                chain_id: relay.chain_id,
+                responses: Mutex::new(relay.json_rpc_responses),
+            }),
+        );
+        chains.insert(
+            ASSET_HUB_PASEO_GENESIS.to_string(),
+            Arc::new(ChainEntry {
+                chain_id: para.chain_id,
+                responses: Mutex::new(para.json_rpc_responses),
+            }),
+        );
+
+        Ok(Self {
+            client: Arc::new(Mutex::new(client)),
+            chains,
+        })
+    }
+}
+
+#[async_trait::async_trait]
+impl RuntimeChainProvider for SmoldotChainProvider {
+    async fn connect(
+        &self,
+        genesis_hash: Vec<u8>,
+    ) -> Result<Arc<dyn JsonRpcConnection>, RuntimeFailure> {
+        let key = crate::chain_runtime::encode_hex(&genesis_hash);
+        let entry = self
+            .chains
+            .get(&key)
+            .cloned()
+            .ok_or_else(|| RuntimeFailure::unavailable("remote_chain_connect"))?;
+
+        // Single-consumer stream: taken on first connect. A second connect for
+        // the same chain reports a distinct failure (rather than the
+        // `Unavailable` used for an unknown genesis) so callers can tell
+        // "no such chain" apart from "already connected".
+        let responses = entry.responses.lock().unwrap().take().ok_or_else(|| {
+            RuntimeFailure::host_failure(
+                "remote_chain_connect",
+                "smoldot chain already connected (single connection per chain)",
+            )
+        })?;
+
+        Ok(Arc::new(SmoldotJsonRpcConnection::new(
+            self.client.clone(),
+            entry.chain_id,
+            responses,
+        )))
+    }
+}
+
+struct SmoldotJsonRpcConnection {
+    client: ClientRef,
+    chain_id: ChainId,
+    responses: Mutex<Option<mpsc::UnboundedReceiver<String>>>,
+}
+
+impl SmoldotJsonRpcConnection {
+    fn new(
+        client: ClientRef,
+        chain_id: ChainId,
+        mut responses: JsonRpcResponses<PlatformRefAlias>,
+    ) -> Self {
+        let (mut tx, rx) = mpsc::unbounded::<String>();
+        spawn_pump(async move {
+            while let Some(response) = responses.next().await {
+                if tx.send(response).await.is_err() {
+                    break;
+                }
+            }
+        });
+        Self {
+            client,
+            chain_id,
+            responses: Mutex::new(Some(rx)),
+        }
+    }
+}
+
+impl JsonRpcConnection for SmoldotJsonRpcConnection {
+    fn send(&self, request: String) {
+        let mut client = self.client.lock().unwrap();
+        if let Err(err) = client.json_rpc_request(request, self.chain_id) {
+            log_send_error(err);
+        }
+    }
+
+    fn responses(&self) -> BoxStream<'static, String> {
+        let rx = self
+            .responses
+            .lock()
+            .unwrap()
+            .take()
+            .expect("SmoldotJsonRpcConnection::responses() called twice");
+        rx.boxed()
+    }
+}
+
+#[cfg(not(target_arch = "wasm32"))]
+fn spawn_pump<F>(future: F)
+where
+    F: std::future::Future<Output = ()> + Send + 'static,
+{
+    std::thread::spawn(move || {
+        futures::executor::block_on(future);
+    });
+}
+
+#[cfg(target_arch = "wasm32")]
+fn spawn_pump<F>(future: F)
+where
+    F: std::future::Future<Output = ()> + 'static,
+{
+    wasm_bindgen_futures::spawn_local(future);
+}
+
+#[cfg(not(target_arch = "wasm32"))]
+fn log_send_error(err: smoldot_light::HandleRpcError) {
+    eprintln!("smoldot json_rpc_request failed: {err}");
+}
+
+#[cfg(target_arch = "wasm32")]
+fn log_send_error(err: smoldot_light::HandleRpcError) {
+    web_sys::console::error_1(&format!("smoldot json_rpc_request failed: {err}").into());
+}
+
+#[cfg(all(test, not(target_arch = "wasm32")))]
+mod tests {
+    use super::*;
+    use std::time::{Duration, Instant};
+
+    fn paseo_genesis_bytes() -> Vec<u8> {
+        let clean = PASEO_RELAY_GENESIS.trim_start_matches("0x");
+        let mut out = Vec::with_capacity(32);
+        for pair in clean.as_bytes().chunks(2) {
+            out.push(u8::from_str_radix(std::str::from_utf8(pair).unwrap(), 16).unwrap());
+        }
+        out
+    }
+
+    /// Smoke test: building the provider with bundled specs must register
+    /// the two known chains. Verifies the smoldot module compiles and the
+    /// client accepts the bundled chainspecs without doing any network I/O.
+    #[test]
+    fn smoldot_module_compiles_and_starts_idle_runtime() {
+        let provider = SmoldotChainProvider::with_bundled_specs().expect("init");
+        assert!(provider.chains.contains_key(PASEO_RELAY_GENESIS));
+        assert!(provider.chains.contains_key(ASSET_HUB_PASEO_GENESIS));
+        drop(provider);
+    }
+
+    #[test]
+    fn connect_unknown_genesis_is_unavailable() {
+        let provider = SmoldotChainProvider::with_bundled_specs().expect("init");
+        let result = futures::executor::block_on(provider.connect(vec![0u8; 32]));
+        assert!(result.is_err());
+    }
+
+    #[test]
+    #[ignore = "hits the live Paseo relay network; run manually with --ignored"]
+    fn streams_initialized_event_for_paseo() {
+        let provider = SmoldotChainProvider::with_bundled_specs().expect("init");
+        let connection =
+            futures::executor::block_on(provider.connect(paseo_genesis_bytes())).expect("connect");
+        connection.send(
+            r#"{"jsonrpc":"2.0","id":"1","method":"chainHead_v1_follow","params":[true]}"#
+                .to_string(),
+        );
+
+        let mut stream = connection.responses();
+        let deadline = Instant::now() + Duration::from_secs(60);
+        let mut initialized_seen = false;
+        while Instant::now() < deadline {
+            let Some(frame) = futures::executor::block_on(stream.next()) else {
+                break;
+            };
+            if frame.contains("\"event\":\"initialized\"") {
+                initialized_seen = true;
+                break;
+            }
+        }
+        assert!(initialized_seen, "did not observe initialized event");
+    }
+}
diff --git a/rust/crates/truapi-server/src/smoldot_provider/native_platform.rs b/rust/crates/truapi-server/src/smoldot_provider/native_platform.rs
new file mode 100644
index 00000000..ad8bcc1b
--- /dev/null
+++ b/rust/crates/truapi-server/src/smoldot_provider/native_platform.rs
@@ -0,0 +1,16 @@
+//! Native platform wiring for `smoldot_light`.
+//!
+//! `DefaultPlatform` ships with smoldot-light (std feature, default on) and
+//! spawns its own background threads for network I/O.
+
+use std::sync::Arc;
+
+use smoldot_light::platform::default::DefaultPlatform;
+
+/// Alias for the platform reference type smoldot-light expects.
+pub type PlatformRefAlias = Arc<DefaultPlatform>;
+
+/// Creates the native smoldot platform implementation used by the server.
+pub fn make_platform() -> PlatformRefAlias {
+    DefaultPlatform::new("truapi".into(), env!("CARGO_PKG_VERSION").into())
+}
diff --git a/rust/crates/truapi-server/src/smoldot_provider/specs/asset-hub-paseo.json b/rust/crates/truapi-server/src/smoldot_provider/specs/asset-hub-paseo.json
new file mode 100644
index 00000000..7416f3f5
--- /dev/null
+++ b/rust/crates/truapi-server/src/smoldot_provider/specs/asset-hub-paseo.json
@@ -0,0 +1 @@
+{"name":"Paseo Asset Hub","id":"asset-hub-paseo","chainType":"Live","bootNodes":["/dns/asset-hub-paseo-boot-ng.dwellir.com/tcp/443/wss/p2p/12D3KooWGoC9CdpY8T5bgf6PqKgry2DjCxaqQS7R9WdQ8rVMeEMg","/dns/asset-hub-paseo-boot-ng.dwellir.com/tcp/30357/p2p/12D3KooWGoC9CdpY8T5bgf6PqKgry2DjCxaqQS7R9WdQ8rVMeEMg","/dns/boot-node.helikon.io/tcp/10120/p2p/12D3KooWKrg6Qb2HhTc3onfkgsNbRU72RjNDm96Xh2E7sWso5LZT","/dns/boot.metaspan.io/tcp/36092/p2p/12D3KooWHdtFsjicVWecmiRrc8XLc3A6iLLKKfUwjZXu5mtg1k3w","/dns/boot.metaspan.io/tcp/36096/wss/p2p/12D3KooWHdtFsjicVWecmiRrc8XLc3A6iLLKKfUwjZXu5mtg1k3w","/dns/assethub-paseo-bootnode.radiumblock.com/tcp/30333/p2p/12D3KooWP8aNgAjkYzH1QuwLjYyNqfpWkJkFRgdtUuey9KzEJciq","/dns/assethub-paseo-bootnode.radiumblock.com/tcp/30336/wss/p2p/12D3KooWP8aNgAjkYzH1QuwLjYyNqfpWkJkFRgdtUuey9KzEJciq","/dns/asset-hub-paseo.boot.rotko.net/tcp/34011/p2p/12D3KooWLzC336hvwY7Vyjdwc8VMMMyqnwph1UXMoi1LEbw8RiHj","/dns/asset-hub-paseo.boot.rotko.net/tcp/30435/wss/p2p/12D3KooWLzC336hvwY7Vyjdwc8VMMMyqnwph1UXMoi1LEbw8RiHj","/dns/asset-hub-paseo-bootnode.turboflakes.io/tcp/30330/p2p/12D3KooWJzfVkdDnKfn2hQ1c3ysrbmReTjVKrEBHkdwgZThbB1BM"],"telemetryEndpoints":null,"protocolId":null,"properties":{"ss58Format":0,"tokenDecimals":10,"tokenSymbol":"PAS"},"relay_chain":"paseo","para_id":1000,"codeSubstitutes":{},"genesis":{"stateRootHash":"0xe24abb446f9aa757610fedc53cc631536f3b456a927a1ab1b9018ea2df3c925d"}}
diff --git a/rust/crates/truapi-server/src/smoldot_provider/specs/paseo.json b/rust/crates/truapi-server/src/smoldot_provider/specs/paseo.json
new file mode 100644
index 00000000..3299c61e
--- /dev/null
+++ b/rust/crates/truapi-server/src/smoldot_provider/specs/paseo.json
@@ -0,0 +1 @@
+{"name":"Paseo Testnet","id":"paseo","chainType":"Live","bootNodes":["/dns/paseo-boot-ng.dwellir.com/tcp/443/wss/p2p/12D3KooWBLLFKDGBxCwq3QmU3YwWKXUx953WwprRshJQicYu4Cfr","/dns/paseo-boot-ng.dwellir.com/tcp/30354/p2p/12D3KooWBLLFKDGBxCwq3QmU3YwWKXUx953WwprRshJQicYu4Cfr","/dns/boot-node.helikon.io/tcp/10020/p2p/12D3KooWBetfzZpf6tGihKrqCo5z854Ub4ZNAUUTRT6eYHNh7FYi","/dns/boot-node.helikon.io/tcp/10022/wss/p2p/12D3KooWBetfzZpf6tGihKrqCo5z854Ub4ZNAUUTRT6eYHNh7FYi","/dns/paseo.bootnodes.polkadotters.com/tcp/30538/p2p/12D3KooWPbbFy4TefEGTRF5eTYhq8LEzc4VAHdNUVCbY4nAnhqPP","/dns/paseo.bootnodes.polkadotters.com/tcp/30540/wss/p2p/12D3KooWPbbFy4TefEGTRF5eTYhq8LEzc4VAHdNUVCbY4nAnhqPP","/dns/paseo.boot.rotko.net/tcp/34001/p2p/12D3KooWRH8eBMhw8c7bucy6pJfy94q4dKpLkF3pmeGohHmemdRu","/dns/paseo-bootnode.turboflakes.io/tcp/30630/p2p/12D3KooWMjCN2CrnN71hAdehn6M2iYKeGdGbZ1A3SKhf4hxrgG9e","/dns/paseo-bootnode.turboflakes.io/tcp/30730/wss/p2p/12D3KooWMjCN2CrnN71hAdehn6M2iYKeGdGbZ1A3SKhf4hxrgG9e"],"telemetryEndpoints":null,"protocolId":"pas","properties":{"ss58Format":0,"tokenDecimals":10,"tokenSymbol":"PAS"},"codeSubstitutes":{},"genesis":{"stateRootHash":"0x2b2a8395a8ec27c54d322d3a6602152da0e3bd0c8f4c01f17a572a44a8e36ab6"},"lightSyncState":{"babeEpochChanges":"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","babeFinalizedBlockWeight":2681601,"finalizedBlockHeader":"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","grandpaAuthoritySet":"0x6502ad4be70209b5c84f0d9a26d1b476570226c6237af41bd89566fdb809e99a66b80100000000000000384c6ec2c8511c9454f75b9f59a30a689cbb2ec34037027d2f3acecbeb8abe75010000000000000047646f5f2395d6e5856a2e5646feba7451e65f4efb097c1d080352d36a656c8001000000000000006b4f558832a86f088340ca1ebabe2147823036c6abbde36e4e0be8dcd5c18f2901000000000000003fa770bbcfbdaac57d9923d9d854e98d76c1d59f5ca976adca479e6850324b0801000000000000009b2df55c2234271d1c9d5cd4291301ec624ee6d13bddf78dd8fc87c31d42fc9a010000000000000084beadb089cda5e0bc20bbc08665499c4d641bb189864f58e40a71a12b1bd776010000000000000076ed6307d6470b4c239398b36937b4e3ca0fb8157daff442c33442eefe2814c801000000000000004aa5708f54845419489cb1aae67c20048d062dfa9ea0b9a84de18376f4ce92c60100000000000000557b8639195aafda6700108fb6df0cc47253f8cde2d2b6113bed282e277c614d0100000000000000823557a6b0d397bcd3d188aa06fc13e49c636cbdbf35eccafd2d23595e6589e20100000000000000c87458e9d5cce432da904052ad78d2d950ac6ae7a462a39f7396434b0d1b32ff0100000000000000381e3981cbe65010b643ea621caacfee6f4c5a30daaec93b45fced51e7ddb1bf0100000000000000f30a20b577ee6bea8a45b9cf9ad8417d0078f7786acf7b185260f4b651631ed10100000000000000d040d9cf3ae82b37c7ff336b00691e6871ecbf80e6a6c97d2d5901ad82e0b4e301000000000000008560ab563f2a3d9b84de611fcfc2feda7a6b19bf5e61cf20f9fc63bc138de4e20100000000000000af69664425d84ef811ffae3cbe6ac6fbe2063c18ac74a655c2cbd6c4339987720100000000000000d23c267273b83bb35c8e838a2b6c47c49af8f15bb03b4ebbc0c171c0242cb15c0100000000000000f5b183712646f29d40c2c0877305cb0d902c214f0a8d44c5b8e6c765384740b401000000000000002bf2597eda54f89e851d398be9c76ed7d8a43948ca60418c7361ec5bce6ab50e01000000000000002f6469ed6f2f9e92cb3126281c8bf6ff65e77f205681b37aa7b9c909b168e201010000000000000021214b3c44747d87d048d179c55dacba3c02e74ce77e0b845bef3444952cfac3010000000000000099ab99a1b0af27bd480542c88b35a6624ef2121de54329582811aa9b31a3c733010000000000000022d04ea680d28674d9809c2022b38e60911447657af9abe8eaedac409ae2deff0100000000000000c3af638f3ed2948314eb771e970f73eceac5a2e101ea327fa8fe43e9ee61dda80100000000000000719ea231a2dada4838ddfd19beb3ac7ce248b660b1fccda83b033d0865d2aa4701000000000000008a75b8423c11621120418655cb54f75f0eb73984942e0344bc47071c693be638010000000000000045b06ca79993b20a511dda12cbbccd2c43d1e1eb827ecf826620286045cf4fcb01000000000000006902cc7446affffa43ea696c8c0507a3c38ca0faf868544a7ab3d573019f3ca201000000000000001cdd699d681de6c6ef2405e25743a09b2d94548c840d0f1c9cdc5f4e0a856efb01000000000000006efdc9c518967ad4229eb48e549fec8263aec4a1910326235118e36335a6fc1701000000000000005eec271b03fcf4277015ab182472fc55719511240c8bef8545195312d351f7750100000000000000479f72aef93619c23bc5d81f1939c90ba1a80651d110720cc49dd50e8cb7b077010000000000000004bba58e0b53f515010d1cc56453c10c9333b8fa5ffc1412621dec556860b8e4010000000000000059750fcc03242d2eca42f5827074f93442ce3fe47f03847dd0dead3e29eb0e820100000000000000dbdb0b2b2e7b20de3f85dc61ab8fe9320c6d1e8c7323f60d08a909a31cf2ffed0100000000000000e4e71ed676259af3363516b55b604077015f662a84f3aabecf125fe8921b0ea70100000000000000eff1d5c906c90c1b482280619cabc0762d3dcb793cdbf6e26d5b00d14cda38c90100000000000000c80773fbc6144ba0c3d5b35a6e46f6ca2998513d172a8818bce2445f3365b6e901000000000000006a9e0c68b5f539f69cb01be910e5d5a299bb2a50b3b9b0a033a69416ed57b15b0100000000000000c6c9d24ef1f3bf0fa99aa5f0bafe680d8ef42e421398bcbe691f7bcb617bfa140100000000000000400ba8e74fc9470b03de528e828b8741e9455f4718eccfc2ea04499bd321f62901000000000000004b38d9dad38539affc9f0fd20471e6a3f55752fc9d7cd0dc035a681c2eab81f501000000000000005e40741a21cdd46e7071174f3801f07b492b0941540454835383f46396849b3e01000000000000008b4f995dbf0667e2c14342cbd141e3a87bd1c3dac56c4faaf3736a1e826ba69601000000000000007e939b0b53123a2e357da8247e659430c310feeb89836d2224e0a65bda419c2d0100000000000000d84ecc11b2fcc511e3799db37695cd9f1bea7e581f7f259c5f70ad6e41d74b0d01000000000000004d5e8f0e248bf0ebdf8c708b1d61e475162bcedded321222528402f10811eabd01000000000000007251da7147c58d25365bc6245897d11a6656be57fa3f9ad095746d3d2556e86201000000000000003d105567dd34373f70e746243abfd00b0eede0e36f2836ec7a8ac95c26acc9fa01000000000000003bc2c8a405f7acd25a5e6c1cee72ce8e2c247b05c6b37b9c2bf7654a624e0b4601000000000000004fbba25109fe9ee6e27322db51f40c56ad8940fa9388de42ca43bcc9f2c221a0010000000000000036b8caeb2b1963addacda511e61f005e298bb7aa2a6c67a25c0d8c49bf46640901000000000000007919f465947953a6d82378e215561a6214d4b14b7bf519c2204cdc2079a2226c0100000000000000ea15fedde78eebcf26a7646dc5489518bb1c3d21598591483cded88fab68c0470100000000000000bb621691b37e0a1e5006f09c9c43e7ba19a43edeaa383654c8576efdaa01245401000000000000003a960631477eaa37fbeea5016d0887240207e86a05537d39e61d6250e2238d340100000000000000e0d591aa1c2d5fe4ca6372e3f305c529095dac8beaf140296f9ccf4696223f5f010000000000000088554c14ccee6a400aeed70df6b44541e301db7546b72071439658cbc8b6d31c01000000000000009f263ae8823a331e0dfd297da617def759acc03cf409767cbd8edcc79f4f3f580100000000000000f09a897aa6df3fc451bbfa12d072b6805145adbcc50ced15f6227a9d5d145b17010000000000000046fcf86f16a521650a94722efd176b0c9467fb48cbe3e9c40fae86ea27322e110100000000000000c9ee90f0b392fd960e207febc29146a8e045a955c8c06588d9d2e1080751b59e0100000000000000be73d3cad71c400291d1f1ef1d3f25b5924f5efa2d509e62389106d5d28eab8b010000000000000078e0a781a72114b2ea5689cadf5401c8122b04f799985c3ea3c41c936981cdc40100000000000000b86e7a22d2cc7ff75e1a204b5f0b6d8a660e067e100755da2375e73d28ade4060100000000000000e2f4ca20d0305eb14715e8fa015b7125487490d3b2ddda90e4a3b3ace8b44a68010000000000000006081b1806b53c3dbc7a2fc3c5932f3dd3dbcde6e3cc865a39913f5e6352c4b90100000000000000a23c14809e06b77499b621c7528676377f2561a8ca43f5ec2ab86aba1929445101000000000000003468a2de1b18afd7978a2dedeef06d46651ab473181d0e063374d12e026dcf2c010000000000000060d1fe50e6f42402921500bcc8ef367e160c51d2f63fe6b1e81c703910320c1d010000000000000056db972358d8170db0515ad31c26a0e9706c566d9180bc7034863bc81accf9290100000000000000c9da738b1fe72e00496e884864a0b9d521ea981cab204291809de08462a263cb0100000000000000fa93ba85b41840cfdb6e7fc74ae3a01210485205532688f1b906e2d7abe671340100000000000000ece9eb501e7c78a616f8513338d51ad757996feefdfaae112e22941eddcd054e01000000000000008c9ddc6eeccbe0c730d98d6893841dbf51aa8ff8e983854c0ad3c8d090b368df0100000000000000bde44832d1d09b2dcaa74de928b9776f407dfdadbd52d28186cb5915d5d43c1101000000000000002c87d973cebba378cf91c1cb2b95ec4dc8bf8971daa6fb53528e31f46fcad6fa010000000000000048504abf30e2e4edeb0fa806f5c68a343c5351ba3b2c1221900af24a22b87b860100000000000000485d0afb31b273587c30ef16e9b2d085fd4d54f5735f50e678a71915f69717c70100000000000000705203fab555c0993842e562824ae52bee09dac6d79a47391588263eb2119b7d01000000000000006b65130f5d57f462fd3bb571406ea82f3851e95803e612d798aae10fbfb679dd01000000000000006cd9a2a780fd1600a86a28687562f57d01f7351ca4eef324a47cd694cb2c12ab010000000000000018c2337721ae8ea495e78e0de50c80810f5164ba9f37fbab7db8046c5a43c16e0100000000000000730b398581b2627e17fc1859f2b25a01d00cd10a0fad10bda7b5ece5a677cef9010000000000000070a8f2c854fa3a17a68746cfe493beb9bff8f34bbcd83d4a1dac92a82a6439260100000000000000da407968218979b6cf9f3b273d5da9d6fed41de48f203d94d85d73bc3c3775350100000000000000b6330a5333954bf601044454fb9bec3401ed59daad584bf62dd6141bdbe33bc30100000000000000727d484a95bb237b70c66aad2fdc6906595ae24784d4a4cbaa048e747cb5cfd001000000000000007a9c41976043382288ecade1687ff78cdbf892bae9f4886606fc0ed59add6c2c0100000000000000af732cc90dd5fff6d8f554af6a5eb13c0b300f4232ff516ab849f19c88d74ba50100000000000000a6eeea7cd93e70197d91d68e62c151023ac3eef1beb38af9af359634585df6c501000000000000009cb6f96ecc63671d4d40544cf69cbde1bf2f5d679ae1fcece0a256c7c9e8f1710100000000000000da550603ca4b3442d7d6ef7526b259c9290a317d2495d6cbb476279f18a42836010000000000000050cfc7356353c0fa42aa8b43ac5d2ec0f6eeb5095ef9a5a6abc0c8b8ec2963c001000000000000007eef4e31aaa7f605a0e924e1ffdaee0c1dfcc0685e7a7c5739006ba602def8cb01000000000000006fb539e77dc8f11e27f51ffbbe29a22f9c65886cc350a180cc15df1fd33739740100000000000000b18cbeac96b0399f881de179ce8dff877a85a9c88844c5ec4cff5b1ae0c65cb30100000000000000eeb7717a1ee2ebd5854f3426d8f276651693403000fa939f4073e4474b75e0100100000000000000a753a68985d94a0771b704364571c810cffab16a8fd450b4d79744b0fe89f4e90100000000000000f1e80cc588d39ad6464d5e890a704d5e9fc07920903b08f06b4b3a2ad218595e01000000000000009b0dd401864ea25913c2d5987428a3aaf33c100465843198d72e37048febcaec0100000000000000991b8f0c7c42ef75dfb24d1df053dbe18c4b2bafdd86803d2b2505a688bf7f71010000000000000019b84719ba987dd028e1fcf512a0ee857a1b53285161f586b456547f86f7fc7d0100000000000000382b9ac9a4895a6508b935b3014345a637745bd58b3335d54a1e14215b5d178e0100000000000000c0732b159411a4abdb0c29029c1ec2013fead26e03fe87b5f5ec4366435db85b010000000000000006fc73229bea563d9d98f48b4ef575dbb5570ef338798255fbb3da68bc4fff6401000000000000004a56d18eebb59c1d0480a8d0d60117693888aab705c481d4c22545e9312749b30100000000000000bddf5cbdced272ebcfa5187c44ebbc22a614a840ca015a50f489ec373866d5f30100000000000000035410457a842370fc973b116be0ceabfa81f8e1b3bb162922787bfc95f1a39d0100000000000000c8af78597e7250805b1f906518e1573e92f1740ddf5afea5a655625f8de7e39c01000000000000001eda33b98265b1141eb06d7079c7cb51419dc2170dbc998cb9628fe26b340ce801000000000000009cc46f39c94d6dde4865a254f9c8eb3138c4b3576ffbf7e62f790b531038ef7801000000000000001718f4699bd5ca24b0a0951f2e8667d5344230f86ddfe4778bf4852921b368710100000000000000ea316f1bface500d1f76d20400396f2d3ef4a7b18a4353133cf821b9a1148a560100000000000000c3c72e825de631fd2deb715a2170a70580431b11666639d6d09f215fd587cb7701000000000000007d73f6b78728b31063d40af90af3e6d224d71d9ab362f32da11ea255337963a9010000000000000075e1574177fdbb8863b5b247b2d3136033df4d10f9a775ce3af2123fc97dbfed010000000000000099506d8a67e458bff8ceb93cb4d77f23957138399f11fc44996e61b1df1848ea010000000000000078b5370952428e4882c764e2e14a8217710c61b03244c5dd10c9a2f3f5c05c250100000000000000d23988121a61813005168196899b929406d4f9ee0a523f3759e6e477b89261cd01000000000000004beaea3024e4c9c573439e9a087a6227c46c5bf052b7a28c296f05e7b3d8d72e0100000000000000e1cd12e7985adf9a9a5328972f8f66d035fe9ed9a50d6e01a5970146eb4cd6c20100000000000000bf47ea951bf20303e3ace58a8e95b79e1430c86b7ce97cc14b09f643e57192b201000000000000003fdbfac7e80374c510aaad223d447a49b76196c9a60e88d726d2c91760fffaaa0100000000000000cd9adcc8236338070016de846f0026051e7ae07f91f7cf39574a7262cd230728010000000000000038cff2dd11deb5999ed2055d98fd436b4858a01a43287f286dd6c932102638cd0100000000000000e87af73a4a8195b80e2c977edca55275622a0fbca48e6dd93b7c0db3ed54d427010000000000000014fa616d5b1d2f5403eee710709323ce2473f08d77b9e00d20ed517e52f4d9bc01000000000000005873f921ecc605ae9f4a98a5b59505a652fd643bb47ff66ab7cc096e957dea400100000000000000814193cc0520ea91284ed44e13979044c91771c9f508255bdd33f1c5d19183dc0100000000000000c77400bbd98289422195bf6bf8b0b57911002f77dcfe82d7e4e74f38a5e409b601000000000000000ee3e9057a71d6c6501548b6e3785802de52b8a5e87d9b9e521eea2b05918b2f0100000000000000d2096c995e2bfdf52a7c60fe4db0d64bb64d9fc9e35df3bec5e7c6c837fe45a3010000000000000064fa44e74901bd0498d7f005e757c8269cbad75323d6c678fad732205c184e5c0100000000000000cec685cdd056218ba7e245c98fdc103ae6c4606164336c51ce8ea9092f7972bd0100000000000000235b304ea70c53f060701ecb4257e03d7c1bdac282d940865534533f272c95ec010000000000000015dac847cdd7eb29e0ca6dc9e9586c5cfc6cda407692459413dd41de69589dc40100000000000000db257ed1026021a81ef5b1848dfe8588439156e20a177a9ce778973f3548d2430100000000000000d4fe9c70a8c767339e6c8f7b29ff32ed8f89c3655ee5e27df217ff2fb0f2304e010000000000000050c1a5d1e221782ddbdcaf039dc23d39691b773a9ca543305f0809ce5b31fefc0100000000000000e5b4449610d8c33729d096216500ad634fe3654420f70b7fbaeb746ff8ba973a01000000000000000eb6a7b2b5758eef2088dc65b067d281ead3252f09062d0909f5b4bdec6be88e0100000000000000f5bf306dee98b6057c9cd931f5f1c9c9d36eb591ace063ec8bb3b1150a31f2e5010000000000000081b637606f92c6d01c8c7e11e6face0a289f008f568b42c3a47d2111a95f57c301000000000000001c14c0ce66bf74a93290ed75209d56dc729890c70fba1ec6c23ff9f12daf4de101000000000000002fb5594b7750ee0cafdde385912ea201ae53162aa66ee5588c0360391773f88801000000000000001339c2c7ee10e5ca4119113db8c140c250e41e93b22927c54bc5075318c6c1e80100000000000000f2881bc07407ab75cca9e3c1a93174b8a97f69362d39d35c755a1b426f131434010000000000000015a4d7b82bacbdbcec37aa687061702d65fd490d75562dda60db8da46961231401000000000000009c07a4b0db05b434a94e31377d254bc3c797b79212eb7e447b4f12a7c1adb12c010000000000000051d8caf8c6a388dc49cae5fe9be4f04dd889893057a011810aa0a1149a0debf10100000000000000cb4e9c0fd534185b7c365e954d670bb1fdf6fcd70e965c4caca59e262ded55b20100000000000000e90b0000000000000001cdcfa30000a52f00000000000000005909000001000000000000008b15000002000000000000000f2300000300000000000000c72e000004000000000000001f31000005000000000000002f3f000006000000000000003f4d000007000000000000004f5b000008000000000000005f69000009000000000000006f7700000a000000000000007f8500000b000000000000008f9300000c000000000000009fa100000d00000000000000afaf00000e00000000000000b9bd00000f00000000000000c9cb00001000000000000000bfd900001100000000000000cfe700001200000000000000dff500001300000000000000e90301001400000000000000f91101001500000000000000092001001600000000000000192e01001700000000000000273c01001800000000000000374a01001900000000000000475801001a00000000000000576601001b00000000000000677401001c00000000000000778201001d00000000000000869001001e000000000000003a9e01001f0000000000000049ac0100200000000000000057ba0100210000000000000067c80100220000000000000077d60100230000000000000085e40100240000000000000095f201002500000000000000a50002002600000000000000910e02002700000000000000471c02002800000000000000452a02002900000000000000393802002a00000000000000184602002b00000000000000255402002c000000000000000c6202002d00000000000000c56f02002e000000000000003e7d02002f000000000000000d8b02003000000000000000ed9802003100000000000000d8a602003200000000000000cfb40200330000000000000083c2020034000000000000005fd00200350000000000000058de0200360000000000000057ec0200370000000000000067fa020038000000000000006a0803003900000000000000f81503003a000000000000009e2303003b00000000000000823103003c00000000000000903f03003d00000000000000a04d03003e00000000000000b05b03003f00000000000000be6903004000000000000000cd7703004100000000000000dd8503004200000000000000ed9303004300000000000000fda10300440000000000000055a403004500000000000000fcaf0300460000000000000005be030047000000000000000bcc030048000000000000000eda0300490000000000000015e803004a0000000000000025f603004b00000000000000330404004c00000000000000421204004d00000000000000512004004e00000000000000612e04004f00000000000000713c040050000000000000007d4a040051000000000000008c58040052000000000000009c6604005300000000000000ac7404005400000000000000b78204005500000000000000c69004005600000000000000d69e04005700000000000000e6ac04005800000000000000f6ba0400590000000000000006c904005a0000000000000016d704005b0000000000000024e504005c0000000000000034f304005d00000000000000420105005e00000000000000520f05005f00000000000000301d05006000000000000000312b050061000000000000004139050062000000000000005047050063000000000000006055050064000000000000006f63050065000000000000007e71050066000000000000008d7f050067000000000000009d8d05006800000000000000ab9b05006900000000000000bba905006a00000000000000cbb705006b00000000000000dbc505006c00000000000000e6d305006d00000000000000f6e105006e0000000000000006f005006f0000000000000016fe05007000000000000000260c06007100000000000000361a060072000000000000003028060073000000000000003e36060074000000000000004d44060075000000000000005c5206007600000000000000486006007700000000000000566e060078000000000000005e7506007900000000000000657c06007a00000000000000738a06007b00000000000000839806007c0000000000000092a606007d00000000000000a2b406007e00000000000000b2c206007f00000000000000c2d006008000000000000000d2de0600810000000000000032e806008200000000000000e2ec06008300000000000000f2fa06008400000000000000020907008500000000000000121707008600000000000000212507008700000000000000313307008800000000000000893507008900000000000000414107008a00000000000000514f07008b00000000000000615d07008c00000000000000716b07008d000000000000007f7907008e000000000000008f8707008f000000000000009f9507009000000000000000afa307009100000000000000bfb107009200000000000000cfbf07009300000000000000dfcd07009400000000000000efdb07009500000000000000ffe9070096000000000000000ff8070097000000000000001f06080098000000000000002f14080099000000000000003f2208009a000000000000004f3008009b000000000000005f3e08009c000000000000004a4c08009d00000000000000315a08009e00000000000000da6708009f00000000000000b1750800a00000000000000022830800a100000000000000c9900800a2000000000000005b9e0800a300000000000000eeab0800a4000000000000008bb90800a50000000000000016c70800a600000000000000acd40800a70000000000000035e20800a800000000000000ccef0800a90000000000000059fd0800aa00000000000000ea0a0900ab0000000000000078180900ac000000000000000b260900ad00000000000000a0330900ae000000000000002f410900af00000000000000be4e0900b000000000000000535c0900b100000000000000df690900b20000000000000064770900b300000000000000e8840900b40000000000000073920900b500000000000000fd9f0900b6000000000000009cad0900b70000000000000037bb0900b800000000000000cbc80900b90000000000000062d60900ba00000000000000e8e30900bb000000000000007df10900bc00000000000000edfe0900bd00000000000000870c0a00be00000000000000141a0a00bf00000000000000ac270a00c0000000000000003d350a00c100000000000000c4420a00c20000000000000050500a00c300000000000000de5d0a00c4000000000000007f6b0a00c50000000000000016790a00c600000000000000a3860a00c7000000000000002b940a00c800000000000000faa10a00c9000000000000008eaf0a00ca0000000000000061bd0a00cb0000000000000041cb0a00cc0000000000000017d90a00cd00000000000000e7e60a00ce00000000000000b9f40a00cf000000000000008a020b00d00000000000000098100b00d100000000000000a81e0b00d200000000000000b82c0b00d300000000000000be3a0b00d400000000000000cb480b00d500000000000000db560b00d600000000000000eb640b00d700000000000000fb720b00d8000000000000000b810b00d9000000000000001b8f0b00da000000000000002b9d0b00db0000000000000039ab0b00dc0000000000000049b90b00dd0000000000000059c70b00de0000000000000069d50b00df0000000000000079e30b00e00000000000000089f10b00e10000000000000099ff0b00e200000000000000a90d0c00e30000000000000059120c00e400000000000000b1140c00e50000000000000009170c00e600000000000000b91b0c00e700000000000000111e0c00e80000000000000019250c00e900000000000000c9290c00ea0000000000000081350c00eb00000000000000d9370c00ec00000000000000e9450c00ed00000000000000994a0c00ee00000000000000f8530c00ef0000000000000050560c00f00000000000000008620c00f10000000000000018700c00f200000000000000287e0c00f300000000000000388c0c00f400000000000000439a0c00f50000000000000052a80c00f60000000000000060b60c00f700000000000000acb80c00f800000000000000b3bf0c00f90000000000000063c40c00fa00000000000000c3cd0c00fb0000000000000073d20c00fc0000000000000073e00c00fd000000000000004dee0c00fe000000000000005bfc0c00ff00000000000000580a0d000001000000000000b00c0d00010100000000000068180d00020100000000000076260d00030100000000000084340d00040100000000000094420d000501000000000000a4500d000601000000000000b35e0d000701000000000000c36c0d000801000000000000d37a0d000901000000000000e3880d000a01000000000000f3960d000b0100000000000003a50d000c0100000000000013b30d000d0100000000000023c10d000e0100000000000032cf0d000f0100000000000041dd0d00100100000000000051eb0d00110100000000000061f90d00120100000000000070070e0013010000000000007e150e001401000000000000de1e0e0015010000000000008e230e0016010000000000009e310e001701000000000000ac3f0e001801000000000000bc4d0e001901000000000000cc5b0e001a01000000000000dc690e001b01000000000000e9770e001c01000000000000f1850e001d0100000000000001940e001e010000000000000fa20e001f0100000000000012b00e00200100000000000022be0e00210100000000000032cc0e00220100000000000042da0e00230100000000000052e80e00240100000000000062f60e00250100000000000072040f00260100000000000081120f00270100000000000091200f002801000000000000a12e0f002901000000000000843c0f002a01000000000000944a0f002b01000000000000ec4c0f002c01000000000000a1580f002d01000000000000b1660f002e01000000000000b5740f002f01000000000000c5820f003001000000000000d5900f003101000000000000e59e0f003201000000000000f5ac0f003301000000000000e2ba0f003401000000000000b8c80f003501000000000000c8d60f003601000000000000d7e40f003701000000000000dfeb0f003801000000000000e7f20f003901000000000000f70010003a01000000000000f80710003b01000000000000000f10003c01000000000000101d10003d01000000000000202b10003e01000000000000303910003f010000000000004047100040010000000000005055100041010000000000006063100042010000000000005d7110004301000000000000607f10004401000000000000708d10004501000000000000809b1000460100000000000090a9100047010000000000009eb710004801000000000000aec510004901000000000000bed310004a01000000000000c9e110004b01000000000000a1ef10004c0100000000000093fd10004d01000000000000760b11004e01000000000000811911004f010000000000006d27110050010000000000007d3511005101000000000000894311005201000000000000995111005301000000000000865f11005401000000000000636d11005501000000000000537b1100560100000000000063891100570100000000000072971100580100000000000082a51100590100000000000092b311005a01000000000000a2c111005b01000000000000b2cf11005c01000000000000c2dd11005d01000000000000d2eb11005e01000000000000e2f911005f01000000000000f207120060010000000000000216120061010000000000000b24120062010000000000001b32120063010000000000002b40120064010000000000003b4e120065010000000000004b5c120066010000000000005b6a120067010000000000006b78120068010000000000007a86120069010000000000008a9412006a010000000000009aa212006b01000000000000aab012006c01000000000000babe12006d01000000000000c9cc12006e01000000000000d9da12006f01000000000000e9e812007001000000000000f9f612007101000000000000090513007201000000000000191313007301000000000000282113007401000000000000382f13007501000000000000483d13007601000000000000584b13007701000000000000685913007801000000000000786713007901000000000000887513007a01000000000000988313007b01000000000000a89113007c01000000000000b69f13007d01000000000000c6ad13007e01000000000000d5bb13007f01000000000000e5c913008001000000000000f5d71300810100000000000005e61300820100000000000015f413008301000000000000230214008401000000000000331014008501000000000000291e14008601000000000000372c14008701000000000000473a14008801000000000000554814008901000000000000655614008a01000000000000756414008b010000000000007c6b14008c01000000000000c56d14008d010000000000001d7014008e01000000000000757214008f01000000000000858014009001000000000000958e14009101000000000000a59c14009201000000000000b4aa14009301000000000000c0b814009401000000000000d0c614009501000000000000e0d414009601000000000000f0e21400970100000000000000f11400980100000000000010ff14009901000000000000200d15009a010000000000002f1b15009b010000000000003f2915009c010000000000004f3715009d010000000000005f4515009e01000000000000175115009f010000000000006f531500a0010000000000007f611500a1010000000000008f6f1500a2010000000000009f7d1500a301000000000000ae8b1500a401000000000000b8991500a501000000000000c8a71500a601000000000000d8b51500a701000000000000e8c31500a801000000000000f8d11500a90100000000000008e01500aa01000000000000c0eb1500ab0100000000000018ee1500ac01000000000000eefb1500ad01000000000000b9091600ae010000000000007c171600af0100000000000043251600b00100000000000021331600b101000000000000583c1600b201000000000000f3401600b301000000000000bb4e1600b4010000000000007f5c1600b501000000000000496a1600b6010000000000001d781600b701000000000000e3851600b801000000000000ba931600b9010000000000009aa11600ba010000000000006daf1600bb010000000000004abd1600bc0100000000000021cb1600bd01000000000000f3d81600be01000000000000b9e61600bf010000000000008cf41600c001000000000000c8fd1600c10100000000000031021700c2010000000000006c0f1700c301000000000000bc1c1700c401000000000000fe291700c50100000000000051371700c601000000000000a7441700c701000000000000e7511700c8010000000000004d5f1700c901000000000000ba6c1700ca01000000000000867a1700cb0100000000000084881700cc0100000000000073961700cd0100000000000043a41700ce0100000000000048b21700cf0100000000000058c01700d00100000000000068ce1700d10100000000000078dc1700d20100000000000088ea1700d30100000000000098f81700d401000000000000a8061800d501000000000000b8141800d601000000000000c8221800d701000000000000d8301800d801000000000000e83e1800d901000000000000f84c1800da01000000000000085b1800db0100000000000018691800dc0100000000000028771800dd0100000000000038851800de0100000000000048931800df0100000000000058a11800e00100000000000068af1800e10100000000000078bd1800e20100000000000088cb1800e30100000000000097d91800e4010000000000008be71800e50100000000000056f51800e60100000000000034031900e7010000000000001c111900e801000000000000141f1900e901000000000000242d1900ea01000000000000333b1900eb0100000000000042491900ec0100000000000052571900ed0100000000000061651900ee010000000000006b731900ef0100000000000074811900f001000000000000198f1900f101000000000000bb9c1900f20100000000000066aa1900f30100000000000011b81900f401000000000000a7c51900f5010000000000004dd31900f6010000000000008bde1900f701000000000000c9e01900f801000000000000cde91900f9010000000000004dee1900fa01000000000000e2fb1900fb0100000000000070091a00fc01000000000000fb161a00fd0100000000000093241a00fe0100000000000028321a00ff01000000000000b63f1a000002000000000000414d1a000102000000000000d35a1a0002020000000000005b681a000302000000000000e9751a00040200000000000078831a000502000000000000e6901a000602000000000000639e1a000702000000000000efab1a0008020000000000007bb91a0009020000000000000cc71a000a02000000000000a9d41a000b0200000000000029e21a000c0200000000000098ee1a000d020000000000009efa1a000e02000000000000f1061b000f020000000000004d131b001002000000000000771f1b001102000000000000a72b1b001202000000000000ce371b001302000000000000f0431b00140200000000000026501b001502000000000000415c1b0016020000000000008e681b001702000000000000bd741b001802000000000000e9801b001902000000000000488d1b001a02000000000000a3991b001b020000000000000fa61b001c020000000000004fb21b001d0200000000000060bf1b001e0200000000000029cd1b001f02000000000000f4da1b002002000000000000bce81b00210200000000000057f61b002202000000000000dd031c002302000000000000320f1c00240200000000000074111c002502000000000000291f1c002602000000000000cf2c1c0027020000000000007e3a1c00280200000000000027481c002902000000000000db551c002a0200000000000091631c002b020000000000003a711c002c02000000000000fa7e1c002d02000000000000a58c1c002e020000000000005d9a1c002f020000000000000da81c003002000000000000d7b51c00310200000000000087c31c00320200000000000030d11c003302000000000000ddde1c00340200000000000088ec1c00350200000000000033fa1c003602000000000000cbfe1c003702000000000000fd071d003802000000000000c8151d0039020000000000009c231d003a0200000000000053311d003b02000000000000233f1d003c02000000000000eb4c1d003d02000000000000bc5a1d003e0200000000000095681d003f0200000000000069761d0040020000000000003f841d00410200000000000016921d004202000000000000c89f1d0043020000000000008ead1d00440200000000000046bb1d0045020000000000001bc91d004602000000000000e3d61d004702000000000000c1e41d00480200000000000095f21d00490200000000000069001e004a020000000000003a0e1e004b02000000000000d3191e004c02000000000000251c1e004d02000000000000032a1e004e02000000000000cf371e004f02000000000000b53e1e0050020000000000009b451e00510200000000000078531e0052020000000000004c611e0053020000000000000b6f1e005402000000000000d37c1e005502000000000000488a1e00560200000000000012981e005702000000000000eda51e005802000000000000bdb31e0059020000000000008ac11e005a0200000000000067cf1e005b020000000000001fdd1e005c02000000000000ceea1e005d0200000000000088f81e005e0200000000000034061f005f02000000000000e0131f00600200000000000091211f006102000000000000532f1f006202000000000000fb3c1f006302000000000000bd4a1f00640200000000000066581f00650200000000000016661f006602000000000000bf731f00670200000000000070811f006802000000000000268f1f006902000000000000ca9c1f006a0200000000000071aa1f006b0200000000000023b81f006c02000000000000e7c51f006d020000000000007cd31f006e020000000000003ae11f006f02000000000000e1ee1f0070020000000000007dfc1f007102000000000000c5fe1f0072020000000000000e0120007302000000000000300a20007402000000000000e817200075020000000000007d2520007602000000000000053320007702000000000000944020007802000000000000294e20007902000000000000b45b20007a02000000000000386920007b02000000000000be7620007c020000000000004e8420007d02000000000000138b20007e02000000000000e59120007f020000000000007a9f200080020000000000002dad20008102000000000000d3ba2000820200000000000058c820008302000000000000f4d5200084020000000000008be32000850200000000000028f120008602000000000000c5fe200087020000000000005b0c21008802000000000000e41921008902000000000000271c21008a020000000000007c2721008b020000000000001c3521008c02000000000000b24221008d020000000000002c5021008e02000000000000c85d21008f020000000000006b6b21009002000000000000047921009102000000000000a98621009202000000000000469421009302000000000000d8a1210094020000000000007eaf210095020000000000001ebd21009602000000000000b0ca2100970200000000000060d821009802000000000000fae52100990200000000000091f321009a02000000000000210122009b02000000000000a20e22009c020000000000002e1c22009d02000000000000c02022009e02000000000000c82922009f0200000000000059372200a002000000000000d8442200a10200000000000074522200a2020000000000000c602200a302000000000000906d2200a402000000000000267b2200a502000000000000be882200a6020000000000004c962200a702000000000000d2a32200a8020000000000005eb12200a902000000000000e5be2200aa02000000000000a8c52200ab020000000000008dcc2200ac0200000000000067da2200ad02000000000000ebe52200ae0200000000000037e82200af0200000000000010f62200b002000000000000e3032300b1020000000000009f112300b202000000000000531f2300b3020000000000002c262300b4020000000000000f2d2300b50200000000000073382300b602000000000000bc3a2300b702000000000000053d2300b8020000000000009f482300b90200000000000093562300ba0200000000000082642300bb020000000000006f722300bc020000000000005f802300bd020000000000006d8e2300be02000000000000c5972300bf02000000000000739c2300c00200000000000081aa2300c10200000000000091b82300c2020000000000009fc62300c302000000000000afd42300c402000000000000bee22300c502000000000000ccf02300c602000000000000dafe2300c702000000000000e90c2400c802000000000000f51a2400c90200000000000005292400ca0200000000000013372400cb020000000000001b452400cc0200000000000026532400cd0200000000000034612400ce020000000000003e6f2400cf020000000000004e7d2400d0020000000000005d8b2400d1020000000000006d992400d2020000000000007ba72400d30200000000000088b52400d40200000000000096c32400d502000000000000a4d12400d602000000000000b3df2400d702000000000000c3ed2400d802000000000000bafb2400d902000000000000ad092500da02000000000000b0172500db02000000000000ae252500dc0200000000000052312500dd02000000000000aa332500de02000000000000ba412500df02000000000000c84f2500e002000000000000d55d2500e102000000000000e26b2500e202000000000000ec792500e302000000000000f4872500e40200000000000004962500e50200000000000014a42500e60200000000000021b22500e7020000000000002ec02500e8020000000000003dce2500e9020000000000004ddc2500ea0200000000000058ea2500eb0200000000000067f82500ec0200000000000077062600ed0200000000000085142600ee0200000000000094222600ef02000000000000a1302600f002000000000000ad3e2600f102000000000000b84c2600f202000000000000c55a2600f302000000000000d3682600f402000000000000c6762600f502000000000000ca842600f602000000000000d8922600f702000000000000e8a02600f802000000000000f4ae2600f90200000000000004bd2600fa0200000000000013cb2600fb0200000000000023d92600fc0200000000000033e72600fd0200000000000042f52600fe0200000000000052032700ff02000000000000621127000003000000000000711f27000103000000000000802d270002030000000000008f3b270003030000000000009549270004030000000000003e4e270005030000000000009e5727000603000000000000aa6527000703000000000000b97327000803000000000000c98127000903000000000000d68f27000a03000000000000e59d27000b03000000000000f2ab27000c0300000000000001ba27000d030000000000000dc827000e030000000000001ad627000f0300000000000027e42700100300000000000034f227001103000000000000340028001203000000000000420e28001303000000000000521c28001403000000000000602a280015030000000000006e38280016030000000000007d4628001703000000000000895428001803000000000000976228001903000000000000a47028001a03000000000000b47e28001b03000000000000b08c28001c03000000000000b59a28001d03000000000000c2a828001e03000000000000d1b628001f03000000000000e0c428002003000000000000eed228002103000000000000fde0280022030000000000000bef280023030000000000001bfd280024030000000000002b0b290025030000000000003b1929002603000000000000482729002703000000000000583529002803000000000000674329002903000000000000745129002a03000000000000845f29002b03000000000000946d29002c03000000000000a17b29002d03000000000000b18929002e03000000000000bd9729002f03000000000000cca529003003000000000000dbb329003103000000000000ebc129003203000000000000f6cf2900330300000000000004de2900340300000000000012ec2900350300000000000020fa2900360300000000000030082a0037030000000000003e162a0038030000000000004e242a0039030000000000005c322a003a0300000000000068402a003b03000000000000764e2a003c03000000000000845c2a003d03000000000000946a2a003e030000000000009e782a003f0300000000000055842a004003000000000000ad862a004103000000000000bb942a004203000000000000c4a22a004303000000000000d3b02a004403000000000000e3be2a004503000000000000eecc2a004603000000000000feda2a0047030000000000000ce92a0048030000000000006bf22a0049030000000000001bf72a004a0300000000000029052b004b030000000000007f072b004c0300000000000035132b004d0300000000000044212b004e03000000000000542f2b004f03000000000000633d2b005003000000000000714b2b00510300000000000081592b00520300000000000091672b0053030000000000009e752b0054030000000000009f832b005503000000000000a6912b005603000000000000ab9f2b005703000000000000b8ad2b005803000000000000c8bb2b005903000000000000d6c92b005a03000000000000e6d72b005b03000000000000f6e52b005c0300000000000005f42b005d0300000000000013022c005e0300000000000020102c005f03000000000000271e2c0060030000000000002d2c2c0061030000000000003d3a2c0062030000000000003b482c00630300000000000046562c00640300000000000055642c00650300000000000063722c00660300000000000070802c0067030000000000007f8e2c0068030000000000008e9c2c0069030000000000009baa2c006a030000000000009eb82c006b03000000000000aec62c006c03000000000000bcd42c006d03000000000000cae22c006e03000000000000d7f02c006f03000000000000e5fe2c007003000000000000f40c2d007103000000000000021b2d007203000000000000f8282d007303000000000000fe362d0074030000000000000c452d0075030000000000001b532d0076030000000000002a612d007703000000000000366f2d0078030000000000001a7d2d0079030000000000001f8b2d007a0300000000000018992d007b0300000000000024a72d007c030000000000002db52d007d03000000000000d6b92d007e0300000000000035c32d007f0300000000000042d12d00800300000000000052df2d00810300000000000061ed2d00820300000000000070fb2d0083030000000000007f092e0084030000000000008b172e0085030000000000009a252e008603000000000000a9332e008703000000000000b9412e008803000000000000c54f2e008903000000000000ce5d2e008a03000000000000db6b2e008b030000000000005a792e008c03000000000000f9862e008d03000000000000d6942e008e03000000000000e2a22e008f03000000000000dab02e009003000000000000ddbe2e009103000000000000e4cc2e009203000000000000f4da2e00930300000000000001e92e0094030000000000000cf72e0095030000000000001c052f0096030000000000002a132f00970300000000000036212f009803000000000000962a2f009903000000000000462f2f009a03000000000000533d2f009b03000000000000624b2f009c0300000000000070592f009d0300000000000078672f009e0300000000000084752f009f030000000000008e832f00a0030000000000009d912f00a103000000000000979f2f00a20300000000000099ad2f00a303000000000000a7bb2f00a403000000000000b4c92f00a503000000000000bfd72f00a603000000000000aae52f00a703000000000000baf32f00a803000000000000c9013000a903000000000000d80f3000aa03000000000000e51d3000ab03000000000000e72b3000ac03000000000000f6393000ad0300000000000005483000ae0300000000000015563000af0300000000000025643000b0030000000000002d6b3000b10300000000000034723000b20300000000000042803000b303000000000000508e3000b4030000000000005f9c3000b5030000000000006caa3000b6030000000000007ab83000b7030000000000007bc63000b8030000000000008bd43000b90300000000000099e23000ba03000000000000a8f03000bb03000000000000b5fe3000bc03000000000000b70c3100bd03000000000000a51a3100be030000000000009a283100bf0300000000000093363100c003000000000000a2443100c103000000000000b1523100c203000000000000bd603100c303000000000000cd6e3100c403000000000000dd7c3100c503000000000000ed8a3100c603000000000000fd983100c7030000000000000ca73100c8030000000000001bb53100c90300000000000029c33100ca0300000000000039d13100cb0300000000000047df3100cc0300000000000057ed3100cd0300000000000067fb3100ce0300000000000077093200cf0300000000000087173200d00300000000000096253200d103000000000000a6333200d203000000000000b5413200d303000000000000c54f3200d403000000000000d35d3200d503000000000000c96b3200d603000000000000bf793200d703000000000000b9873200d803000000000000b0953200d903000000000000aba33200da03000000000000bab13200db03000000000000c5bf3200dc03000000000000c5cd3200dd03000000000000d5db3200de03000000000000e5e93200df03000000000000f5f73200e00300000000000005063300e10300000000000014143300e20300000000000021223300e3030000000000002f303300e4030000000000003b3e3300e5030000000000004a4c3300e6030000000000005a5a3300e70300000000000068683300e80300000000000077763300e90300000000000087843300ea0300000000000096923300eb03000000000000a0a03300ec03000000000000afae3300ed03000000000000babc3300ee03000000000000caca3300ef03000000000000d9d83300f003000000000000e4e63300f103000000000000f1f43300f203000000000000f8023400f30300000000000007113400f403000000000000161f3400f503000000000000262d3400f603000000000000303b3400f7030000000000003f493400f8030000000000004c573400f90300000000000058653400fa0300000000000064733400fb030000000000006b813400fc03000000000000798f3400fd03000000000000889d3400fe0300000000000098ab3400ff03000000000000a7b934000004000000000000b7c734000104000000000000c5d534000204000000000000d5e334000304000000000000e3f134000404000000000000f3ff34000504000000000000030e35000604000000000000121c350007040000000000001d2a350008040000000000002531350009040000000000001f3835000a040000000000000c4635000b04000000000000f35335000c04000000000000016235000d040000000000000e7035000e040000000000001e7e35000f040000000000002e8c350010040000000000003c9a350011040000000000002da83500120400000000000022b63500130400000000000032c43500140400000000000041d23500150400000000000050e0350016040000000000005eee350017040000000000006efc350018040000000000002608360019040000000000007e0a36001a040000000000008b1836001b040000000000009b2636001c04000000000000aa3436001d04000000000000ba4236001e04000000000000ca5036001f04000000000000d95e360020040000000000009b6c36002104000000000000c97936002204000000000000488036002304000000000000198736002404000000000000a38b36002504000000000000f79436002604000000000000e4a236002704000000000000d6b036002804000000000000d0be36002904000000000000bfcc36002a04000000000000bdda36002b04000000000000c4e836002c04000000000000c7f636002d04000000000000d10437002e04000000000000da1237002f04000000000000df2037003004000000000000de2e37003104000000000000e03c37003204000000000000e84a37003304000000000000f15837003404000000000000495b37003504000000000000a15d370036040000000000000067370037040000000000000775370038040000000000000c8337003904000000000000fb9037003a040000000000006d9c37003b04000000000000bf9e37003c040000000000006da337003d04000000000000cbac37003e04000000000000d8ba37003f04000000000000e3c837004004000000000000edd637004104000000000000f7e43700420400000000000006f337004304000000000000150138004404000000000000200f380045040000000000002d1d38004604000000000000342b38004704000000000000423938004804000000000000074738004904000000000000ae5438004a04000000000000516238004b04000000000000ef6f38004c040000000000009a7d38004d04000000000000d77f38004e04000000000000878b38004f0400000000000091993800500400000000000098a738005104000000000000a1b538005204000000000000abc338005304000000000000b1d138005404000000000000b6df38005504000000000000bfed38005604000000000000c8fb38005704000000000000d60939005804000000000000db1039005904000000000000e01739005a04000000000000e82539005b04000000000000ef3339005c04000000000000e24139005d04000000000000e54f39005e04000000000000ef5d39005f04000000000000f96b39006004000000000000067a390061040000000000001288390062040000000000002096390063040000000000002da43900640400000000000038b23900650400000000000041c0390066040000000000004dce3900670400000000000059dc3900680400000000000066ea390069040000000000006bf839006a0400000000000077063a006b0400000000000080143a006c040000000000008a223a006d0400000000000093303a006e04000000000000ef393a006f040000000000009a3e3a007004000000000000a74c3a007104000000000000ae5a3a007204000000000000ba683a007304000000000000c7763a007404000000000000b7843a007504000000000000be923a0076040000000000009fa03a007704000000000000a3ae3a007804000000000000a6bc3a007904000000000000a6ca3a007a0400000000000090d83a007b0400000000000002e63a007c04000000000000d9f33a007d04000000000000db013b007e0400000000000033043b007f04000000000000eb0f3b0080040000000000009b143b008104000000000000f3163b008204000000000000fb1d3b0083040000000000000a2c3b0084040000000000001a3a3b0085040000000000002a483b00860400000000000039563b00870400000000000049643b0088040000000000004f723b0089040000000000005f803b008a0400000000000067873b008b040000000000006f8e3b008c04000000000000c7903b008d040000000000007f9c3b008e040000000000008faa3b008f040000000000008ab83b0090040000000000008dc63b009104000000000000e0c83b00920400000000000090cd3b00930400000000000098d43b009404000000000000a8e23b009504000000000000b6f03b009604000000000000befe3b009704000000000000c50c3c009804000000000000cd1a3c0099040000000000002d243c009a04000000000000dd283c009b04000000000000ed363c009c04000000000000fc443c009d040000000000000c533c009e040000000000001b613c009f040000000000002a6f3c00a0040000000000003a7d3c00a1040000000000004a8b3c00a20400000000000059993c00a30400000000000069a73c00a40400000000000079b53c00a50400000000000089c33c00a60400000000000099d13c00a704000000000000a8df3c00a804000000000000a5ed3c00a904000000000000b5fb3c00aa04000000000000c2093d00ab04000000000000ca173d00ac04000000000000da253d00ad04000000000000ea333d00ae04000000000000fa413d00af040000000000000a503d00b0040000000000001a5e3d00b1040000000000002a6c3d00b2040000000000003a7a3d00b3040000000000004a883d00b4040000000000005a963d00b5040000000000006aa43d00b6040000000000007ab23d00b7040000000000008ac03d00b8040000000000009ace3d00b904000000000000aadc3d00ba04000000000000baea3d00bb04000000000000caf83d00bc04000000000000da063e00bd04000000000000e9143e00be04000000000000f9223e00bf0400000000000009313e00c004000000000000193f3e00c104000000000000294d3e00c204000000000000395b3e00c30400000000000049693e00c40400000000000058773e00c50400000000000068853e00c60400000000000078933e00c70400000000000086a13e00c80400000000000096af3e00c904000000000000a6bd3e00ca04000000000000b6cb3e00cb04000000000000c6d93e00cc04000000000000d6e73e00cd04000000000000e5f53e00ce04000000000000f5033f00cf0400000000000005123f00d00400000000000015203f00d104000000000000252e3f00d204000000000000353c3f00d304000000000000454a3f00d40400000000000055583f00d5040000000000005d663f00d6040000000000006d743f00d7040000000000007d823f00d80400000000000085903f00d904000000000000959e3f00da04000000000000a5ac3f00db04000000000000b4ba3f00dc04000000000000c4c83f00dd04000000000000d4d63f00de04000000000000e4e43f00df0400000000000044ee3f00e004000000000000f4f23f00e10400000000000004014000e204000000000000140f4000e304000000000000241d4000e404000000000000342b4000e50400000000000044394000e60400000000000054474000e70400000000000064554000e80400000000000074634000e90400000000000084714000ea040000000000008d7f4000eb040000000000009b8d4000ec04000000000000aa9b4000ed04000000000000baa94000ee04000000000000cab74000ef04000000000000dac54000f004000000000000e9d34000f104000000000000f3e14000f20400000000000003f04000f30400000000000013fe4000f404000000000000230c4100f504000000000000331a4100f60400000000000043284100f70400000000000051364100f8040000000000005f444100f9040000000000006e524100fa040000000000007e604100fb040000000000008c6e4100fc040000000000009c7c4100fd04000000000000ac8a4100fe04000000000000bc984100ff04000000000000cca641000005000000000000dab441000105000000000000eac241000205000000000000f9d04100030500000000000009df4100040500000000000019ed4100050500000000000029fb410006050000000000003909420007050000000000003b17420008050000000000003a25420009050000000000003d3342000a05000000000000304142000b05000000000000304f42000c05000000000000295d42000d05000000000000246b42000e05000000000000297942000f050000000000002587420010050000000000002295420011050000000000001aa3420012050000000000001bb14200130500000000000019bf420014050000000000000ccd42001505000000000000f5da42001605000000000000e5e842001705000000000000c8f642001805000000000000c50443001905000000000000c31243001a05000000000000c62043001b05000000000000c42e43001c05000000000000bb3c43001d05000000000000b74a43001e05000000000000b25843001f05000000000000ac6643002005000000000000177443002105000000000000158143002205000000000000118e430023050000000000000c9b430024050000000000000da84300250500000000000013b54300260500000000000019c24300270500000000000031cf4300280500000000000022dc4300290500000000000046e943002a0500000000000051f643002b05000000000000620344002c050000000000006b1044002d050000000000007c1d44002e05000000000000962a44002f05000000000000a537440030050000000000007545440031050000000000006f53440032050000000000006e6144003305000000000000676f44003405000000000000697d44003505000000000000668b440036050000000000006099440037050000000000005fa74400380500000000000062b5440039050000000000005cc344003a0500000000000061d144003b0500000000000053df44003c0500000000000054ed44003d0500000000000055fb44003e05000000000000560945003f050000000000004e17450040050000000000004f2545004105000000000000a527450042050000000000004b33450043050000000000004241450044050000000000003e4f45004505000000000000315d450046050000000000002c6b450047050000000000002679450048050000000000001d8745004905000000000000129545004a0500000000000011a345004b0500000000000013b145004c050000000000000bbf45004d0500000000000008cd45004e050000000000000adb45004f0500000000000006e94500500500000000000003f745005105000000000000ff0446005205000000000000f81246005305000000000000ef20460054050000000000003f2a46005505000000000000e72e46005605000000000000eb3c46005705000000000000e54a460058050000000000003d5446005905000000000000ed5846005a05000000000000fd6646005b050000000000000d7546005c050000000000001d8346005d050000000000002d9146005e050000000000003d9f46005f050000000000004cad460060050000000000005cbb460061050000000000006bc94600620500000000000079d74600630500000000000089e54600640500000000000094f346006505000000000000a30147006605000000000000b30f47006705000000000000c21d47006805000000000000d22b47006905000000000000e23947006a05000000000000f24747006b05000000000000025647006c05000000000000126447006d05000000000000227247006e05000000000000318047006f05000000000000418e47007005000000000000519c4700710500000000000061aa4700720500000000000071b84700730500000000000081c64700740500000000000090d4470075050000000000009fe247007605000000000000adf047007705000000000000bdfe47007805000000000000cd0c48007905000000000000dd1a48007a05000000000000ed2848007b05000000000000fd3648007c050000000000000d4548007d050000000000001d5348007e050000000000002d6148007f050000000000003d6f480080050000000000004d7d480081050000000000005c8b480082050000000000006c99480083050000000000006ea74800840500000000000076b54800850500000000000086c34800860500000000000096d148008705000000000000a3df48008805000000000000b3ed48008905000000000000c3fb48008a05000000000000d30949008b05000000000000e31749008c05000000000000f32549008d05000000000000013449008e050000000000000e4249008f050000000000001e50490090050000000000002d5e490091050000000000003d6c490092050000000000004d7a490093050000000000005c88490094050000000000006b96490095050000000000007aa44900960500000000000089b24900970500000000000099c049009805000000000000a9ce49009905000000000000b8dc49009a050000000000009cea49009b0500000000000071f849009c0500000000000081064a009d0500000000000091144a009e05000000000000a1224a009f05000000000000b1304a00a005000000000000c03e4a00a105000000000000d04c4a00a205000000000000e05a4a00a305000000000000f0684a00a40500000000000000774a00a5050000000000000e854a00a6050000000000001e934a00a7050000000000002da14a00a8050000000000003baf4a00a9050000000000004abd4a00aa0500000000000059cb4a00ab0500000000000069d94a00ac0500000000000078e74a00ad0500000000000088f54a00ae0500000000000092034b00af05000000000000a1114b00b005000000000000b01f4b00b105000000000000c02d4b00b205000000000000d03b4b00b305000000000000df494b00b405000000000000ef574b00b505000000000000fd654b00b60500000000000055684b00b7050000000000000c744b00b805000000000000147b4b00b9050000000000006c7d4b00ba050000000000001c824b00bb0500000000000029904b00bc05000000000000369e4b00bd0500000000000045ac4b00be0500000000000050ba4b00bf05000000000000b0c34b00c00500000000000060c84b00c1050000000000006fd64b00c2050000000000007fe44b00c3050000000000008ff24b00c4050000000000009e004c00c505000000000000ad0e4c00c605000000000000bc1c4c00c705000000000000cc2a4c00c805000000000000db384c00c905000000000000eb464c00ca05000000000000f7544c00cb0500000000000007634c00cc0500000000000017714c00cd05000000000000247f4c00ce05000000000000348d4c00cf05000000000000449b4c00d00500000000000054a94c00d1050000000000005fb74c00d2050000000000006fc54c00d3050000000000007ed34c00d4050000000000008ee14c00d5050000000000009eef4c00d605000000000000acfd4c00d705000000000000b90b4d00d805000000000000c9194d00d905000000000000d9274d00da05000000000000e9354d00db05000000000000f9434d00dc0500000000000009524d00dd0500000000000019604d00de05000000000000296e4d00df05000000000000377c4d00e005000000000000158a4d00e10500000000000030974d00e20500000000000067a44d00e30500000000000074b24d00e40500000000000083c04d00e50500000000000093ce4d00e605000000000000a3dc4d00e705000000000000b3ea4d00e805000000000000c3f84d00e905000000000000d3064e00ea05000000000000e1144e00eb05000000000000f1224e00ec05000000000000a92e4e00ed0500000000000001314e00ee05000000000000113f4e00ef0500000000000019464e00f005000000000000174d4e00f105000000000000255b4e00f20500000000000035694e00f30500000000000045774e00f40500000000000053854e00f50500000000000062934e00f60500000000000070a14e00f70500000000000080af4e00f805000000000000d8b14e00f90500000000000090bd4e00fa05000000000000a0cb4e00fb05000000000000b0d94e00fc05000000000000bfe74e00fd05000000000000cdf54e00fe05000000000000dd034f00ff05000000000000ed114f000006000000000000fc1f4f00010600000000000003274f0002060000000000000a2e4f0003060000000000001a3c4f0004060000000000002a4a4f00050600000000000039584f00060600000000000049664f00070600000000000057744f00080600000000000067824f00090600000000000077904f000a06000000000000869e4f000b0600000000000096ac4f000c06000000000000a6ba4f000d06000000000000b3c84f000e06000000000000c3d64f000f06000000000000c8e44f001006000000000000d5f24f001106000000000000e50050001206000000000000f30e50001306000000000000021d500014060000000000000a2b50001506000000000000113950001606000000000000214750001706000000000000315550001806000000000000416350001906000000000000507150001a06000000000000607f50001b06000000000000708d50001c060000000000007f9b50001d060000000000008fa950001e0600000000000099b750001f06000000000000a8c550002006000000000000b8d350002106000000000000c8e15000220600000000000078e650002306000000000000cbef50002406000000000000dafd50002506000000000000e90b51002606000000000000f81951002706000000000000072851002806000000000000173651002906000000000000254451002a06000000000000345251002b06000000000000446051002c06000000000000536e51002d06000000000000637c51002e06000000000000728a51002f0600000000000070985100300600000000000065a6510031060000000000005bb45100320600000000000049c25100330600000000000032d05100340600000000000018de5100350600000000000009ec51003606000000000000f5f951003706000000000000e00752003806000000000000c41552003906000000000000a92352003a06000000000000913152003b06000000000000743f52003c060000000000005a4d52003d06000000000000585b52003e06000000000000506952003f0600000000000049775200400600000000000041855200410600000000000030935200420600000000000017a15200430600000000000007af52004406000000000000f4bc52004506000000000000deca52004606000000000000b7d85200470600000000000095e6520048060000000000007ff4520049060000000000006c0253004a06000000000000611053004b06000000000000421e53004c06000000000000282c53004d06000000000000063a53004e06000000000000f44753004f06000000000000dd5553005006000000000000ca6353005106000000000000cb7153005206000000000000b17f53005306000000000000978d53005406000000000000799b530055060000000000005fa95300560600000000000053b75300570600000000000039c5530058060000000000002ed35300590600000000000010e153005a06000000000000fcee53005b06000000000000f4f553005c06000000000000edfc53005d06000000000000dc0a54005e06000000000000b01854005f060000000000008026540060060000000000005b34540061060000000000004d4254006206000000000000325054006306000000000000225e540064060000000000000b6c54006506000000000000f37954006606000000000000df8754006706000000000000c79554006806000000000000ada35400690600000000000090b154006a060000000000007bbf54006b0600000000000064cd54006c0600000000000049db54006d0600000000000044e954006e060000000000002df754006f060000000000000b0555007006000000000000f51255007106000000000000d92055007206000000000000cc2e55007306000000000000c63c55007406000000000000c44a55007506000000000000c45855007606000000000000c76655007706000000000000c17455007806000000000000b88255007906000000000000b59055007a06000000000000b49e55007b06000000000000afac55007c06000000000000b3ba55007d06000000000000b6c855007e06000000000000b1d655007f06000000000000aae45500800600000000000092f2550081060000000000009200560082060000000000008f0e56008306000000000000891c56008406000000000000792a560085060000000000007738560086060000000000007446560087060000000000006b54560088060000000000006362560089060000000000005e7056008a06000000000000597e56008b06000000000000548c56008c06000000000000519a56008d060000000000004fa856008e060000000000003bb656008f0600000000000035c45600900600000000000030d2560091060000000000002be0560092060000000000002aee560093060000000000002bfc560094060000000000001e0a57009506000000000000181857009606000000000000142657009706000000000000083457009806000000000000084257009906000000000000095057009a060000000000000a5e57009b06000000000000076c57009c06000000000000fe7957009d06000000000000f78757009e06000000000000f49557009f06000000000000f5a35700a006000000000000f3b15700a106000000000000f5bf5700a206000000000000f3cd5700a306000000000000eddb5700a406000000000000e5e95700a506000000000000eaf75700a606000000000000ef055800a706000000000000ee135800a806000000000000e4215800a906000000000000e12f5800aa06000000000000e63d5800ab06000000000000e54b5800ac06000000000000e3595800ad06000000000000d1675800ae06000000000000c9755800af06000000000000cd835800b006000000000000bb915800b106000000000000b19f5800b206000000000000abad5800b306000000000000a2bb5800b40600000000000099c95800b5060000000000008cd75800b60600000000000080e55800b7060000000000007cf35800b80600000000000074015900b906000000000000740f5900ba06000000000000671d5900bb060000000000005d2b5900bc0600000000000054395900bd0600000000000049475900be060000000000003e555900bf0600000000000032635900c00600000000000025715900c106000000000000207f5900c206000000000000068d5900c306000000000000f79a5900c406000000000000efa85900c506000000000000ebb65900c606000000000000ebc45900c706000000000000ebd25900c806000000000000ede05900c906000000000000f2ee5900ca06000000000000fffc5900cb060000000000000d0b5a00cc060000000000001c195a00cd0600000000000027275a00ce0600000000000037355a00cf0600000000000046435a00d00600000000000055515a00d106000000000000635f5a00d206000000000000716d5a00d306000000000000817b5a00d40600000000000090895a00d5060000000000009f975a00d606000000000000ada55a00d706000000000000bdb35a00d806000000000000ccc15a00d906000000000000d7cf5a00da06000000000000e6dd5a00db06000000000000f5eb5a00dc0600000000000004fa5a00dd0600000000000012085b00de0600000000000022165b00df0600000000000032245b00e0060000000000003f325b00e1060000000000004e405b00e2060000000000005b4e5b00e306000000000000695c5b00e406000000000000bf5e5b00e50600000000000015615b00e606000000000000746a5b00e70600000000000084785b00e80600000000000092865b00e906000000000000a0945b00ea06000000000000ada25b00eb06000000000000b9b05b00ec06000000000000c2be5b00ed06000000000000d2cc5b00ee06000000000000e1da5b00ef06000000000000f0e85b00f006000000000000fef65b00f1060000000000000e055c00f20600000000000012135c00f3060000000000001a215c00f406000000000000172f5c00f5060000000000001f3d5c00f6060000000000002b4b5c00f70600000000000037595c00f80600000000000044675c00f90600000000000053755c00fa060000000000005f835c00fb060000000000006b915c00fc06000000000000769f5c00fd0600000000000080ad5c00fe0600000000000089bb5c00ff0600000000000040c75c00000700000000000097c95c000107000000000000a5d75c000207000000000000b2e55c000307000000000000bef35c000407000000000000cd015d000507000000000000dd0f5d000607000000000000df1d5d000707000000000000ee2b5d000807000000000000fa395d00090700000000000009485d000a0700000000000013565d000b0700000000000022645d000c0700000000000030725d000d070000000000003f805d000e070000000000004e8e5d000f070000000000005d9c5d0010070000000000006caa5d00110700000000000079b85d0012070000000000007dc65d0013070000000000008cd45d00140700000000000082e25d00150700000000000084f05d00160700000000000086fe5d001707000000000000920c5e0018070000000000009f1a5e001907000000000000a3285e001a07000000000000a7365e001b070000000000009f445e001c07000000000000ac525e001d07000000000000b9605e001e07000000000000c76e5e001f07000000000000647c5e002007000000000000fd895e002107000000000000bb905e00220700000000000004935e002307000000000000ad975e002407000000000000afa55e002507000000000000bdb35e002607000000000000cdc15e002707000000000000dbcf5e002807000000000000dcdd5e002907000000000000d9eb5e002a07000000000000daf95e002b07000000000000dc075f002c07000000000000df155f002d07000000000000d4235f002e07000000000000d4315f002f07000000000000d03f5f003007000000000000cc4d5f003107000000000000b85b5f003207000000000000c7695f003307000000000000d6775f003407000000000000e4855f003507000000000000f4935f00360700000000000004a25f00370700000000000014b05f00380700000000000024be5f00390700000000000034cc5f003a0700000000000043da5f003b0700000000000052e85f003c0700000000000062f65f003d07000000000000700460003e070000000000007f1260003f070000000000008f20600040070000000000009d2e60004107000000000000ad3c60004207000000000000bb4a60004307000000000000ca5860004407000000000000da6660004507000000000000e57460004607000000000000f48260004707000000000000039160004807000000000000129f6000490700000000000021ad60004a0700000000000030bb60004b0700000000000040c960004c070000000000004fd760004d070000000000005fe560004e070000000000006cf360004f070000000000007c0161005007000000000000880f61005107000000000000961d61005207000000000000a52b61005307000000000000b33961005407000000000000c34761005507000000000000d355610056070000000000009f63610057070000000000005371610058070000000000005c7f610059070000000000006c8d61005a07000000000000789b61005b0700000000000088a961005c0700000000000098b761005d07000000000000a7c561005e07000000000000b7d361005f07000000000000c6e16100600700000000000081ef6100610700000000000021fd61006207000000000000bc0a62006307000000000000601862006407000000000000082662006507000000000000943362006607000000000000374162006707000000000000d14e62006807000000000000805c620069070000000000002e6a62006a07000000000000dc7762006b070000000000007b8562006c070000000000000a9362006d07000000000000aaa062006e0700000000000047ae62006f07000000000000d5bb620070070000000000009ec962007107000000000000aed762007207000000000000bee562007307000000000000cdf362007407000000000000da0163007507000000000000e30f63007607000000000000f21d63007707000000000000022c63007807000000000000103a63007907000000000000204863007a07000000000000305663007b07000000000000406463007c07000000000000507263007d07000000000000608063007e07000000000000688e63007f07000000000000739c6300800700000000000083aa6300810700000000000092b863008207000000000000a0c66300830700000000000050cb63008407000000000000a8cd63008507000000000000b0d4630086070000000000000ede63008707000000000000bee263008807000000000000cef063008907000000000000c1fe63008a07000000000000d10c64008b07000000000000e01a64008c07000000000000f02864008d07000000000000ff3664008e070000000000000f4564008f070000000000001e53640090070000000000002d6164009107000000000000236f64009207000000000000297d64009307000000000000d28164009407000000000000308b64009507000000000000409964009607000000000000f09d640097070000000000004fa76400980700000000000057ae64009907000000000000afb064009a070000000000005eb564009b070000000000006ec364009c0700000000000079d164009d0700000000000088df64009e0700000000000094ed64009f07000000000000a3fb6400a007000000000000b0096500a107000000000000bb176500a207000000000000111a6500a307000000000000c6256500a407000000000000262f6500a507000000000000d6336500a607000000000000e4416500a707000000000000824d6500a807000000000000d34f6500a907000000000000cc5d6500aa070000000000001f606500ab07000000000000ca6b6500ac07000000000000c9796500ad070000000000001c836500ae07000000000000c7876500af07000000000000c6956500b007000000000000bca36500b10700000000000063af6500b207000000000000b5b16500b307000000000000b1bf6500b40700000000000056c46500b507000000000000a3cd6500b607000000000000a7db6500b707000000000000a4e96500b8070000000000004cf56500b907000000000000a3f76500ba070000000000009c056600bb070000000000009c136600bc0700000000000094216600bd07000000000000a12f6600be0700000000000000396600bf07000000000000b03d6600c007000000000000be4b6600c107000000000000cd596600c207000000000000dd676600c307000000000000ed756600c407000000000000fd836600c5070000000000000d926600c6070000000000001da06600c7070000000000002dae6600c8070000000000003dbc6600c9070000000000004dca6600ca070000000000005cd86600cb070000000000006ce66600cc0700000000000079f46600cd0700000000000088026700ce0700000000000097106700cf07000000000000a71e6700d007000000000000b62c6700d107000000000000c53a6700d207000000000000d4486700d307000000000000e3566700d407000000000000f3646700d50700000000000001736700d60700000000000011816700d707000000000000218f6700d807000000000000319d6700d9070000000000003dab6700da070000000000004cb96700db0700000000000058c76700dc0700000000000066d56700dd0700000000000075e36700de0700000000000082f16700df0700000000000090ff6700e0070000000000009d0d6800e107000000000000aa1b6800e207000000000000b4296800e307000000000000c2376800e407000000000000c5456800e507000000000000a8536800e60700000000000093616800e7070000000000007d6f6800e807000000000000607d6800e9070000000000005f8b6800ea070000000000005e996800eb0700000000000056a76800ec070000000000004fb56800ed0700000000000040c36800ee0700000000000033d16800ef0700000000000024df6800f0070000000000000bed6800f107000000000000f8fa6800f207000000000000d6086900f307000000000000b3166900f40700000000000090246900f5070000000000008c326900f6070000000000009b406900f707000000000000ab4e6900f807000000000000b45c6900f907000000000000c36a6900fa07000000000000d3786900fb07000000000000e1866900fc07000000000000f1946900fd0700000000000001a36900fe0700000000000011b16900ff0700000000000021bf690000080000000000002fcd6900010800000000000036d4690002080000000000003edb690003080000000000004ee9690004080000000000005ef7690005080000000000006e056a0006080000000000007e136a0007080000000000008e216a0008080000000000009e2f6a000908000000000000ad3d6a000a08000000000000bc4b6a000b08000000000000cc596a000c08000000000000dc676a000d08000000000000eb756a000e08000000000000fb836a000f080000000000000b926a0010080000000000001ba06a00110800000000000029ae6a00120800000000000038bc6a0013080000000000003fca6a0014080000000000004ed86a0015080000000000005ee66a0016080000000000006bf46a00170800000000000079026b0018080000000000007b106b0019080000000000008b1e6b001a08000000000000962c6b001b08000000000000a53a6b001c08000000000000b5486b001d08000000000000b8566b001e08000000000000ba646b001f08000000000000c5726b002008000000000000d2806b002108000000000000dc8e6b002208000000000000e3956b002308000000000000ea9c6b002408000000000000faaa6b0025080000000000000ab96b00260800000000000019c76b00270800000000000029d56b00280800000000000037e36b00290800000000000046f16b002a0800000000000056ff6b002b08000000000000640d6c002c080000000000006d1b6c002d0800000000000079296c002e0800000000000087376c002f0800000000000097456c003008000000000000a7536c003108000000000000b7616c003208000000000000c66f6c0033080000000000001e726c003408000000000000d67d6c0035080000000000008e896c003608000000000000e68b6c003708000000000000f5996c00380800000000000005a86c00390800000000000011b66c003a080000000000000ac46c003b08000000000000b5d16c003c080000000000008ddf6c003d0800000000000097ed6c003e08000000000000a7fb6c003f08000000000000b7096d004008000000000000c6176d004108000000000000d6256d004208000000000000e6336d004308000000000000f6416d00440800000000000006506d004508000000000000155e6d004608000000000000256c6d004708000000000000357a6d00480800000000000045886d00490800000000000055966d004a0800000000000065a46d004b0800000000000074b26d004c0800000000000084c06d004d0800000000000094ce6d004e08000000000000a4dc6d004f08000000000000b4ea6d005008000000000000c4f86d005108000000000000d4066e005208000000000000e4146e005308000000000000f4226e00540800000000000004316e005508000000000000143f6e005608000000000000244d6e005708000000000000345b6e00580800000000000043696e00590800000000000053776e005a08000000000000037c6e005b0800000000000063856e005c08000000000000138a6e005d0800000000000073936e005e0800000000000083a16e005f0800000000000091af6e00600800000000000098b66e006108000000000000a0bd6e006208000000000000b0cb6e006308000000000000bfd96e006408000000000000cfe76e006508000000000000dff56e006608000000000000ef036f006708000000000000ff116f0068080000000000000e206f0069080000000000001d2e6f006a080000000000002c3c6f006b080000000000003b4a6f006c0800000000000049586f006d0800000000000059666f006e0800000000000068746f006f0800000000000078826f00700800000000000088906f007108000000000000989e6f007208000000000000a6ac6f007308000000000000b5ba6f007408000000000000c3c86f007508000000000000d3d66f007608000000000000e3e46f007708000000000000f3f26f007808000000000000010170007908000000000000110f70007a08000000000000211d70007b080000000000002f2b70007c080000000000003f3970007d080000000000004f4770007e080000000000005f5570007f080000000000006f63700080080000000000007f71700081080000000000008f7f700082080000000000009e8d70008308000000000000ae9b70008408000000000000bea970008508000000000000ceb770008608000000000000dec570008708000000000000eed370008808000000000000fce1700089080000000000000cf070008a080000000000001cfe70008b080000000000002c0c71008c080000000000003c1a71008d080000000000004c2871008e08000000000000553671008f08000000000000654471009008000000000000755271009108000000000000856071009208000000000000956e71009308000000000000a57c71009408000000000000b48a71009508000000000000c49871009608000000000000d2a671009708000000000000e1b471009808000000000000c1c271009908000000000000d1d071009a08000000000000e1de71009b08000000000000f1ec71009c08000000000000fefa71009d080000000000000e0972009e080000000000001e1772009f080000000000002d257200a0080000000000003d337200a1080000000000004d417200a2080000000000005d4f7200a3080000000000006d5d7200a4080000000000006c6b7200a5080000000000007a797200a6080000000000008a877200a7080000000000009a957200a808000000000000aaa37200a908000000000000bab17200aa08000000000000cabf7200ab08000000000000d9cd7200ac08000000000000e9db7200ad08000000000000f9e97200ae0800000000000008f87200af0800000000000018067300b00800000000000028147300b10800000000000033227300b20800000000000043307300b308000000000000513e7300b408000000000000614c7300b508000000000000645a7300b60800000000000060687300b70800000000000059767300b80800000000000068847300b90800000000000078927300ba0800000000000088a07300bb0800000000000097ae7300bc080000000000008fbc7300bd0800000000000090ca7300be0800000000000086d87300bf0800000000000085e67300c00800000000000089f47300c10800000000000084027400c20800000000000088107400c3080000000000008d1e7400c4080000000000008e2c7400c5080000000000008a3a7400c6080000000000009a487400c708000000000000aa567400c808000000000000ba647400c908000000000000ca727400ca08000000000000da807400cb08000000000000ea8e7400cc08000000000000fa9c7400cd08000000000000feaa7400ce080000000000000eb97400cf080000000000001ec77400d0080000000000002ed57400d1080000000000003ee37400d2080000000000004ef17400d3080000000000005eff7400d4080000000000006a0d7500d508000000000000791b7500d60800000000000089297500d70800000000000098377500d80800000000000050437500d908000000000000a8457500da08000000000000b8537500db08000000000000c8617500dc08000000000000d86f7500dd08000000000000e87d7500de08000000000000f88b7500df08000000000000059a7500e00800000000000015a87500e10800000000000025b67500e20800000000000034c47500e30800000000000044d27500e40800000000000054e07500e50800000000000064ee7500e60800000000000074fc7500e708000000000000840a7600e80800000000000091187600e908000000000000a1267600ea08000000000000b1347600eb08000000000000c1427600ec08000000000000d1507600ed08000000000000cb5e7600ee0800000000000023617600ef08000000000000db6c7600f008000000000000eb7a7600f108000000000000fa887600f2080000000000000a977600f3080000000000001aa57600f4080000000000002ab37600f5080000000000003ac17600f60800000000000049cf7600f70800000000000059dd7600f80800000000000069eb7600f90800000000000079f97600fa0800000000000089077700fb0800000000000099157700fc08000000000000a9237700fd08000000000000b9317700fe08000000000000c73f7700ff08000000000000d64d77000009000000000000e65b77000109000000000000f6697700020900000000000005787700030900000000000015867700040900000000000024947700050900000000000034a27700060900000000000044b07700070900000000000054be7700080900000000000064cc7700090900000000000074da77000a0900000000000084e877000b0900000000000094f677000c09000000000000a40478000d09000000000000b41278000e09000000000000c42078000f09000000000000d42e78001009000000000000e43c78001109000000000000f44a78001209000000000000045978001309000000000000146778001409000000000000247578001509000000000000348378001609000000000000449178001709000000000000529f7800180900000000000062ad780019090000000000004abb78001a0900000000000058c978001b0900000000000068d778001c0900000000000074e578001d0900000000000083f378001e09000000000000eb0379001f09000000000000531479002009000000000000bb24790021090000000000002235790022090000000000008a4579002309000000000000f255790024090000000000005a6679002509000000000000c276790026090000000000002a8779002709000000000000919779002809000000000000f8a77900290900000000000050b879002a09000000000000b2c879002b0900000000000017d979002c0900000000000079e979002d09000000000000d9f979002e090000000000003c0a7a002f09000000000000a21a7a003009000000000000092b7a003109000000000000713b7a003209000000000000d84b7a0033090000000000003e5c7a003409000000000000a56c7a0035090000000000000d7d7a003609000000000000758d7a003709000000000000dd9d7a00380900000000000045ae7a003909000000000000adbe7a003a0900000000000014cf7a003b0900000000000060df7a003c09000000000000a3ef7a003d09000000000000e3ff7a003e09000000000000e60f7b003f09000000000000dd1f7b00400900000000000000297b004109000000000000f52f7b00420900000000000000407b004309000000000000d24f7b004409000000000000a35f7b004509000000000000656f7b004609000000000000607f7b0047090000000000006e8f7b0048090000000000005a9f7b00490900000000000016af7b004a0900000000000009b87b004b09000000000000c9be7b004c0900000000000095ce7b004d090000000000006ade7b004e0900000000000039ee7b004f090000000000001afe7b005009000000000000140e7c005109000000000000191e7c005209000000000000212e7c0053090000000000002a3e7c005409000000000000044e7c005509000000000000ff5d7c005609000000000000116e7c005709000000000000397e7c005809000000000000608e7c005909000000000000909e7c005a09000000000000cdae7c005b09000000000000e4be7c005c09000000000000fcce7c005d0900000000000013df7c005e0900000000000043ef7c005f0900000000000067ff7c006009000000000000890f7d0061090000000000000e1b7d006209000000000000af1f7d006309000000000000882d7d006409000000000000d62f7d00650900000000000005407d0066090000000000009c447d00670900000000000026507d00680900000000000055607d00690900000000000074707d006a0900000000000096807d006b09000000000000ba907d006c09000000000000dda07d006d0900000000000004b17d006e090000000000002bc17d006f0900000000000053d17d0070090000000000008ae17d007109000000000000bff17d007209000000000000f3017e00730900000000000023127e007409000000000000a81d7e0075090000000000004c227e0076090000000000008f327e007709000000000000cf427e00780900000000000011537e0079090000000000004e637e007a090000000000008f737e007b09000000000000cb837e007c09000000000000e8937e007d09000000000000aba17e007e09000000000000f7a37e007f090000000000002fb47e00800900000000000068c47e008109000000000000a3d47e008209000000000000e2e47e00830900000000000020f57e00840900000000000061057f008509000000000000050a7f008609000000000000a2157f008709000000000000e4257f0088090000000000001c367f0089090000000000005c467f008a0900000000000097567f008b09000000000000ce667f008c090000000000000e777f008d0900000000000047877f008e0900000000000083977f008f09000000000000c7a77f00900900000000000007b87f00910900000000000040c87f00920900000000000074d87f009309000000000000b2e87f009409000000000000eef87f0095090000000000002709800096090000000000006619800097090000000000005b2080009809000000000000bb2980009909000000000000233a80009a09000000000000554a80009b09000000000000aa5a80009c09000000000000025d80009d09000000000000016b80009e09000000000000697b80009f09000000000000d08b8000a009000000000000389c8000a109000000000000a0ac8000a20900000000000008bd8000a3090000000000006fcd8000a409000000000000d7dd8000a5090000000000003fee8000a609000000000000a7fe8000a709000000000000af058100a8090000000000000f0f8100a909000000000000771f8100aa09000000000000df2f8100ab0900000000000047408100ac09000000000000ae508100ad0900000000000016618100ae090000000000007e718100af090000000000002e768100b009000000000000c1818100b109000000000000a08f8100b209000000000000f3918100b30900000000000019a28100b40900000000000057b28100b509000000000000bfc28100b60900000000000027d38100b7090000000000008fe38100b809000000000000c0f38100b90900000000000003048200ba090000000000003c148200bb0900000000000079248200bc09000000000000af348200bd09000000000000ef448200be090000000000002b558200bf0900000000000062658200c00900000000000094758200c1090000000000006f858200c20900000000000096908200c30900000000000034958200c40900000000000063a58200c50900000000000057b38200c60900000000000090c38200c709000000000000cdd38200c8090000000000000ce48200c90900000000000051f48200ca0900000000000086048300cb09000000000000cf148300cc0900000000000018258300cd09000000000000b4298300ce09000000000000572e8300cf09000000000000076d8300d00900000000000054a28300d109000000000000d40a8400d20900000000000092208500d309000000000000f6308500d40900000000000059418500d509000000000000bf518500d609000000000000856b8500d709000000000000eb7b8500d809000000000000528c8500d909000000000000af9c8500da0900000000000013ad8500db090000000000007bbd8500dc09000000000000e3cd8500dd090000000000004bde8500de09000000000000b3ee8500df090000000000001bff8500e009000000000000820f8600e109000000000000ea1f8600e20900000000000052308600e309000000000000b3408600e409000000000000bb478600e5090000000000001b518600e6090000000000007f618600e709000000000000e7718600e8090000000000004c828600e909000000000000b4928600ea090000000000001ca38600eb0900000000000084b38600ec09000000000000dec38600ed090000000000002ed48600ee0900000000000086e48600ef09000000000000d7f48600f00900000000000028058700f1090000000000006d158700f2090000000000009d258700f309000000000000dc358700f40900000000000014468700f50900000000000056568700f609000000000000a8668700f709000000000000f4768700f8090000000000004f878700f90900000000000098978700fa09000000000000eba78700fb0900000000000043b88700fc0900000000000093c88700fd09000000000000f9d88700fe0900000000000061e98700ff09000000000000c9f98700000a000000000000300a8800010a000000000000981a8800020a000000000000ff2a8800030a000000000000673b8800040a000000000000cf4b8800050a000000000000375c8800060a0000000000009e6c8800070a000000000000067d8800080a0000000000006d8d8800090a000000000000cf9d88000a0a00000000000037ae88000b0a0000000000009fbe88000c0a00000000000007cf88000d0a0000000000006fdf88000e0a000000000000d1ef88000f0a00000000000039008900100a000000000000a1108900110a00000000000009218900120a00000000000071318900130a000000000000d9418900140a00000000000041528900150a000000000000a6628900160a000000000000b6708900170a0000000000000d738900180a00000000000075838900190a000000000000dd9389001a0a00000000000044a489001b0a000000000000a4ad89001c0a000000000000acb489001d0a00000000000013c589001e0a00000000000078d589001f0a000000000000dee58900200a00000000000044f68900210a000000000000ab068a00220a00000000000013178a00230a00000000000079278a00240a000000000000dc378a00250a0000000000003f488a00260a000000000000a6588a00270a00000000000008698a00280a00000000000007778a00290a0000000000005f798a002a0a000000000000c2898a002b0a000000000000299a8a002c0a00000000000091aa8a002d0a000000000000f9ba8a002e0a00000000000061cb8a002f0a000000000000c0d48a00300a00000000000070d98a00310a000000000000c8db8a00320a0000000000002eec8a00330a00000000000086ee8a00340a00000000000096fc8a00350a000000000000fe0c8b00360a000000000000661d8b00370a000000000000ce2d8b00380a000000000000de3b8b00390a000000000000363e8b003a0a0000000000009e4e8b003b0a000000000000065f8b003c0a0000000000006e6f8b003d0a000000000000d47f8b003e0a0000000000002c828b003f0a0000000000003c908b00400a0000000000009da08b00410a00000000000005b18b00420a0000000000006dc18b00430a000000000000d5d18b00440a0000000000003ce28b00450a000000000000a4f28b00460a0000000000000c038c00470a00000000000074138c00480a000000000000dc238c00490a00000000000044348c004a0a000000000000ac448c004b0a00000000000014558c004c0a0000000000007b658c004d0a000000000000e1758c004e0a00000000000049868c004f0a000000000000b1968c00500a00000000000018a78c00510a00000000000080b78c00520a000000000000e8c78c00530a00000000000050d88c00540a000000000000b8e88c00550a0000000000001ff98c00560a00000000000087098d00570a000000000000370e8d00580a000000000000e7128d00590a0000000000003f158d005a0a000000000000ef198d005b0a000000000000572a8d005c0a000000000000bf3a8d005d0a000000000000274b8d005e0a0000000000008f5b8d005f0a000000000000f76b8d00600a0000000000005f7c8d00610a000000000000c78c8d00620a0000000000002e9d8d00630a00000000000096ad8d00640a000000000000febd8d00650a00000000000066ce8d00660a000000000000cede8d00670a00000000000036ef8d00680a0000000000009eff8d00690a00000000000006108e006a0a0000000000006e208e006b0a000000000000d6308e006c0a0000000000003e418e006d0a000000000000a6518e006e0a0000000000000e628e006f0a00000000000076728e00700a000000000000de828e00710a00000000000046938e00720a000000000000aea38e00730a00000000000016b48e00740a0000000000007ec48e00750a000000000000e6d48e00760a0000000000004de58e00770a000000000000b3f58e00780a0000000000001b068f00790a00000000000083168f007a0a000000000000eb268f007b0a00000000000052378f007c0a000000000000ba478f007d0a00000000000022588f007e0a00000000000089688f007f0a000000000000ef788f00800a00000000000057898f00810a000000000000bf998f00820a00000000000077a58f00830a00000000000027aa8f00840a0000000000008fba8f00850a000000000000f7ca8f00860a0000000000005fdb8f00870a000000000000c7eb8f00880a0000000000002ffc8f00890a000000000000970c90008a0a000000000000ff1c90008b0a000000000000662d90008c0a000000000000ce3d90008d0a000000000000364e90008e0a000000000000935e90008f0a000000000000fb6e9000900a000000000000637f9000910a000000000000c98f9000920a0000000000002ca09000930a00000000000093b09000940a000000000000fac09000950a00000000000061d19000960a000000000000c8e19000970a0000000000002ff29000980a000000000000ed049100990a000000000000531591009a0a000000000000b12591009b0a000000000000173691009c0a000000000000764691009d0a000000000000db5691009e0a000000000000436791009f0a000000000000ab779100a00a0000000000000d889100a10a00000000000075989100a20a000000000000daa89100a30a00000000000042b99100a40a000000000000aac99100a50a00000000000012da9100a60a0000000000007aea9100a70a000000000000e1fa9100a80a000000000000490b9200a90a000000000000b11b9200aa0a000000000000192c9200ab0a000000000000813c9200ac0a000000000000e94c9200ad0a000000000000a95f9200ae0a00000000000011709200af0a00000000000079809200b00a000000000000d8909200b10a0000000000003fa19200b20a000000000000a7b19200b30a0000000000000fc29200b40a00000000000077d29200b50a000000000000dfe29200b60a00000000000047f39200b70a000000000000af039300b80a00000000000017149300b90a0000000000007f249300ba0a000000000000e6349300bb0a0000000000004d459300bc0a000000000000b5559300bd0a0000000000001d669300be0a00000000000085769300bf0a000000000000ed869300c00a00000000000055979300c10a000000000000baa79300c20a00000000000022b89300c30a0000000000008ac89300c40a000000000000f2d89300c50a0000000000005ae99300c60a000000000000c2f99300c70a0000000000002a0a9400c80a000000000000921a9400c90a000000000000f92a9400ca0a000000000000613b9400cb0a000000000000c74b9400cc0a0000000000002f5c9400cd0a000000000000976c9400ce0a000000000000fe7c9400cf0a000000000000668d9400d00a000000000000ce9d9400d10a00000000000032ae9400d20a0000000000009abe9400d30a000000000000ffce9400d40a00000000000067df9400d50a000000000000cfef9400d60a00000000000031009500d70a00000000000081109500d80a000000000000d1209500d90a000000000000f1309500da0a0000000000002f419500db0a00000000000068519500dc0a000000000000a2619500dd0a000000000000dc719500de0a00000000000003829500df0a0000000000003a929500e00a000000000000c4a49500e10a000000000000ffb49500e20a0000000000002ec59500e30a000000000000bed79500e40a00000000000009e89500e50a00000000000071f89500e60a000000000000d4089600e70a0000000000003c199600e80a000000000000a0299600e90a000000000000013a9600ea0a000000000000674a9600eb0a000000000000cd5a9600ec0a0000000000007d5f9600ed0a000000000000336b9600ee0a000000000000977b9600ef0a000000000000fc8b9600f00a0000000000005d9c9600f10a000000000000bfac9600f20a00000000000012bd9600f30a000000000000adcf9600f40a000000000000f7df9600f50a00000000000054f09600f60a00000000000001039700f70a0000000000005b139700f80a000000000000c1239700f90a00000000000068369700fa0a00000000000022499700fb0a000000000000d05b9700fc0a000000000000896e9700fd0a00000000000043819700fe0a000000000000a6919700ff0a000000000000b59f9700000b000000000000c3ad9700010b000000000000cfbb9700020b000000000000d7c99700030b000000000000dbd09700040b00000000000033d39700050b000000000000e3d79700060b0000000000003de19700070b000000000000ebe59700080b000000000000f2f39700090b000000000000fd0198000a0b000000000000031098000b0b000000000000051e98000c0b0000000000000c2c98000d0b000000000000103a98000e0b000000000000134898000f0b0000000000000d569800100b00000000000017649800110b00000000000014729800120b0000000000001a809800130b000000000000248e9800140b000000000000309c9800150b00000000000036aa9800160b00000000000041b89800170b0000000000004ac69800180b0000000000004fd49800190b00000000000058e298001a0b0000000000005ff098001b0b00000000000067fe98001c0b0000000000006b0c99001d0b0000000000006f1a99001e0b000000000000772899001f0b0000000000007a369900200b0000000000007c449900210b00000000000078529900220b00000000000074609900230b000000000000756e9900240b000000000000767c9900250b000000000000868a9900260b00000000000095989900270b000000000000a3a69900280b000000000000b1b49900290b000000000000bfc299002a0b000000000000ced099002b0b000000000000ddde99002c0b000000000000ecec99002d0b000000000000fcfa99002e0b0000000000000b099a002f0b0000000000001a179a00300b00000000000027259a00310b0000000000002d339a00320b0000000000002a419a00330b000000000000304f9a00340b0000000000002a5d9a00350b000000000000266b9a00360b0000000000001e799a00370b00000000000013879a00380b0000000000000c959a00390b00000000000004a39a003a0b000000000000feb09a003b0b000000000000f3be9a003c0b000000000000efcc9a003d0b000000000000e4da9a003e0b000000000000cbe89a003f0b000000000000b9f69a00400b000000000000ac049b00410b000000000000a1129b00420b00000000000091209b00430b0000000000007d2e9b00440b000000000000733c9b00450b0000000000006c4a9b00460b00000000000060589b00470b0000000000004b669b00480b00000000000036749b00490b00000000000023829b004a0b00000000000025909b004b0b0000000000000c9e9b004c0b00000000000007ac9b004d0b000000000000eeb99b004e0b000000000000d3c79b004f0b000000000000bad59b00500b0000000000009ce39b00510b0000000000007df19b00520b0000000000006cff9b00530b000000000000550d9c00540b000000000000481b9c00550b0000000000004b299c00560b00000000000022379c00570b0000000000000d459c00580b000000000000de529c00590b000000000000c1609c005a0b000000000000af6e9c005b0b0000000000009b7c9c005c0b0000000000007e8a9c005d0b00000000000062989c005e0b00000000000039a69c005f0b00000000000012b49c00600b000000000000f2c19c00610b000000000000dccf9c00620b000000000000b0dd9c00630b0000000000008ceb9c00640b00000000000075f99c00650b00000000000074079d00660b0000000000007d159d00670b0000000000008a239d00680b00000000000089319d00690b000000000000663f9d006a0b0000000000004b4d9d006b0b0000000000002f5b9d006c0b00000000000011699d006d0b000000000000fc769d006e0b000000000000e6849d006f0b000000000000c1929d00700b000000000000b7a09d00710b00000000000099ae9d00720b00000000000093bc9d00730b0000000000008dca9d00740b00000000000088d89d00750b00000000000072e69d00760b00000000000073f49d00770b00000000000073029e00780b0000000000006c109e00790b000000000000761e9e007a0b000000000000852c9e007b0b000000000000953a9e007c0b000000000000a5489e007d0b000000000000b4569e007e0b000000000000ba649e007f0b00000000000012679e00800b000000000000ca729e00810b000000000000d9809e00820b000000000000e98e9e00830b000000000000f89c9e00840b00000000000008ab9e00850b00000000000018b99e00860b00000000000028c79e00870b00000000000038d59e00880b000000000000e8d99e00890b00000000000048e39e008a0b00000000000058f19e008b0b00000000000068ff9e008c0b000000000000780d9f008d0b000000000000881b9f008e0b00000000000098299f008f0b000000000000a6379f00900b00000000000003439f00910b0000000000000b519f00920b0000000000001b5f9f00930b0000000000002b6d9f00940b0000000000003b7b9f00950b0000000000004b899f00960b0000000000005b979f00970b0000000000006aa59f00980b000000000000caae9f00990b0000000000007ab39f009a0b0000000000008ac19f009b0b0000000000009acf9f009c0b000000000000aadd9f009d0b000000000000baeb9f009e0b000000000000caf99f009f0b000000000000da07a000a00b000000000000ea15a000a10b000000000000fa23a000a20b0000000000000a32a000a30b0000000000001a40a000a40b000000000000294ea000a50b000000000000375ca000a60b000000000000476aa000a70b0000000000005778a000a80b0000000000006786a000a90b0000000000006294a000aa0b0000000000005ea2a000ab0b00000000000060b0a000ac0b00000000000063bea000ad0b00000000000073cca000ae0b00000000000083daa000af0b00000000000093e8a000b00b000000000000a3f6a000b10b000000000000b004a100b20b0000000000008f12a100b30b0000000000004a20a100b40b0000000000004b2ea100b50b0000000000005a3ca100b60b0000000000006a4aa100b70b0000000000006458a100b80b0000000000006d66a100b90b0000000000007d74a100ba0b0000000000008d82a100bb0b0000000000009d90a100bc0b0000000000009e9ea100bd0b000000000000aeaca100be0b000000000000bebaa100bf0b000000000000cec8a100c00b000000000000ddd6a100c10b000000000000ede4a100c20b000000000000fdf2a100c30b0000000000000d01a200c40b0000000000001c0fa200c50b0000000000007c18a200c60b000000000000241da200c70b000000000000d128a200c80b000000000000272ba200c90b0000000000001f32a200ca0b0000000000001e39a200cb0b0000000000001d47a200cc0b000000000000c84ba200cd0b0000000000001c55a200ce0b0000000000002063a200cf0b0000000000001f71a200d00b0000000000001c7fa200d10b000000000000208da200d20b0000000000001e9ba200d30b00000000000024a9a200d40b00000000000028b7a200d50b00000000000023c5a200d60b0000000000002fd3a200d70b0000000000003fe1a200d80b0000000000004fefa200d90b0000000000005ffda200da0b0000000000006f0ba300db0b0000000000007e19a300dc0b0000000000008e27a300dd0b0000000000009e35a300de0b000000000000ae43a300df0b000000000000bd51a300e00b000000000000cd5fa300e10b000000000000dd6da300e20b000000000000ed7ba300e30b000000000000fd89a300e40b0000000000000d98a300e50b0000000000001ca6a300e60b000000000000d4b1a300e70b0000000000002cb4a300e80b0000000000003cc2a300"}}
diff --git a/rust/crates/truapi-server/src/smoldot_provider/wasm_helpers.rs b/rust/crates/truapi-server/src/smoldot_provider/wasm_helpers.rs
new file mode 100644
index 00000000..07c768da
--- /dev/null
+++ b/rust/crates/truapi-server/src/smoldot_provider/wasm_helpers.rs
@@ -0,0 +1,45 @@
+// SPDX-License-Identifier: Apache-2.0
+// Vendored from subxt-lightclient 0.50.0 (Apache-2.0 OR GPL-3.0), elected
+// under Apache-2.0. See ../../THIRD_PARTY_NOTICES.md for attribution.
+
+use super::wasm_socket::WasmSocket;
+
+use core::time::Duration;
+use futures_util::{FutureExt, future};
+
+/// Returns the current wall-clock time as a duration since the Unix epoch.
+pub fn now_from_unix_epoch() -> Duration {
+    web_time::SystemTime::now()
+        .duration_since(web_time::SystemTime::UNIX_EPOCH)
+        .unwrap_or_else(|_| {
+            panic!("Invalid systime cannot be configured earlier than `UNIX_EPOCH`")
+        })
+}
+
+/// Monotonic instant type used by the wasm smoldot platform.
+pub type Instant = web_time::Instant;
+
+/// Returns the current monotonic instant used by the wasm smoldot platform.
+pub fn now() -> Instant {
+    web_time::Instant::now()
+}
+
+/// Boxed delay future returned by `sleep`.
+pub type Delay = future::BoxFuture<'static, ()>;
+
+/// Creates a future that resolves after the provided duration.
+pub fn sleep(duration: Duration) -> Delay {
+    futures_timer::Delay::new(duration).boxed()
+}
+
+/// Smoldot expects a single concrete stream type with pinned access; the
+/// wrapper hides the buffer/socket pair behind a `pin_project` projection.
+#[pin_project::pin_project]
+pub struct Stream(
+    #[pin]
+    pub  smoldot::libp2p::with_buffers::WithBuffers<
+        future::BoxFuture<'static, Result<WasmSocket, std::io::Error>>,
+        WasmSocket,
+        Instant,
+    >,
+);
diff --git a/rust/crates/truapi-server/src/smoldot_provider/wasm_platform.rs b/rust/crates/truapi-server/src/smoldot_provider/wasm_platform.rs
new file mode 100644
index 00000000..c39c2598
--- /dev/null
+++ b/rust/crates/truapi-server/src/smoldot_provider/wasm_platform.rs
@@ -0,0 +1,220 @@
+// SPDX-License-Identifier: Apache-2.0
+// Vendored from subxt-lightclient 0.50.0 (Apache-2.0 OR GPL-3.0), elected
+// under Apache-2.0. See ../../THIRD_PARTY_NOTICES.md for attribution.
+
+use super::wasm_socket::WasmSocket;
+
+use core::{
+    fmt::{self, Write as _},
+    net::IpAddr,
+    time::Duration,
+};
+use futures::prelude::*;
+use smoldot::libp2p::with_buffers;
+use smoldot_light::platform::{
+    Address, ConnectionType, LogLevel, MultiStreamAddress, MultiStreamWebRtcConnection,
+    PlatformRef, SubstreamDirection,
+};
+use wasm_bindgen::JsValue;
+
+use std::{io, net::SocketAddr, pin::Pin};
+
+/// Alias for the platform reference type smoldot-light expects.
+pub type PlatformRefAlias = TrUApiWasmPlatform;
+
+/// Creates the wasm-backed smoldot platform implementation used by the server.
+pub fn make_platform() -> PlatformRefAlias {
+    TrUApiWasmPlatform::new()
+}
+
+/// Smoldot platform implementation backed by the browser WebSocket API and
+/// `wasm_bindgen_futures` for task spawning.
+#[derive(Clone)]
+pub struct TrUApiWasmPlatform {}
+
+impl TrUApiWasmPlatform {
+    /// Builds a fresh wasm platform handle. The handle is cheaply cloneable.
+    pub fn new() -> Self {
+        TrUApiWasmPlatform {}
+    }
+}
+
+impl Default for TrUApiWasmPlatform {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
+impl PlatformRef for TrUApiWasmPlatform {
+    type Delay = super::wasm_helpers::Delay;
+    type Instant = super::wasm_helpers::Instant;
+    type MultiStream = std::convert::Infallible;
+    type Stream = super::wasm_helpers::Stream;
+    type StreamConnectFuture = future::Ready<Self::Stream>;
+    type MultiStreamConnectFuture = future::Pending<MultiStreamWebRtcConnection<Self::MultiStream>>;
+    type ReadWriteAccess<'a> = with_buffers::ReadWriteAccess<'a, Self::Instant>;
+    type StreamUpdateFuture<'a> = future::BoxFuture<'a, ()>;
+    type StreamErrorRef<'a> = &'a std::io::Error;
+    type NextSubstreamFuture<'a> = future::Pending<Option<(Self::Stream, SubstreamDirection)>>;
+
+    fn now_from_unix_epoch(&self) -> Duration {
+        super::wasm_helpers::now_from_unix_epoch()
+    }
+
+    fn now(&self) -> Self::Instant {
+        super::wasm_helpers::now()
+    }
+
+    fn fill_random_bytes(&self, buffer: &mut [u8]) {
+        getrandom::getrandom(buffer).expect("Cannot fill random bytes");
+    }
+
+    fn sleep(&self, duration: Duration) -> Self::Delay {
+        super::wasm_helpers::sleep(duration)
+    }
+
+    fn sleep_until(&self, when: Self::Instant) -> Self::Delay {
+        self.sleep(when.saturating_duration_since(self.now()))
+    }
+
+    fn spawn_task(
+        &self,
+        _task_name: std::borrow::Cow<'_, str>,
+        task: impl future::Future<Output = ()> + Send + 'static,
+    ) {
+        wasm_bindgen_futures::spawn_local(task);
+    }
+
+    fn client_name(&self) -> std::borrow::Cow<'_, str> {
+        "truapi".into()
+    }
+
+    fn client_version(&self) -> std::borrow::Cow<'_, str> {
+        env!("CARGO_PKG_VERSION").into()
+    }
+
+    fn supports_connection_type(&self, connection_type: ConnectionType) -> bool {
+        matches!(
+            connection_type,
+            ConnectionType::WebSocketIpv4 { .. }
+                | ConnectionType::WebSocketIpv6 { .. }
+                | ConnectionType::WebSocketDns { .. }
+        )
+    }
+
+    fn connect_stream(&self, multiaddr: Address) -> Self::StreamConnectFuture {
+        let addr = match multiaddr {
+            Address::WebSocketDns {
+                hostname,
+                port,
+                secure: true,
+            } => {
+                format!("wss://{hostname}:{port}")
+            }
+            Address::WebSocketDns {
+                hostname,
+                port,
+                secure: false,
+            } => {
+                format!("ws://{hostname}:{port}")
+            }
+            Address::WebSocketIp {
+                ip: IpAddr::V4(ip),
+                port,
+            } => {
+                let addr = SocketAddr::from((ip, port));
+                format!("ws://{addr}")
+            }
+            Address::WebSocketIp {
+                ip: IpAddr::V6(ip),
+                port,
+            } => {
+                let addr = SocketAddr::from((ip, port));
+                format!("ws://{addr}")
+            }
+            _ => {
+                unreachable!("Unsupported connection type")
+            }
+        };
+
+        let socket_future = async move {
+            WasmSocket::new(addr.as_str()).map_err(|err| std::io::Error::other(err.to_string()))
+        };
+
+        future::ready(super::wasm_helpers::Stream(with_buffers::WithBuffers::new(
+            Box::pin(socket_future),
+        )))
+    }
+
+    fn connect_multistream(&self, _address: MultiStreamAddress) -> Self::MultiStreamConnectFuture {
+        panic!("Multistreams are not supported")
+    }
+
+    fn open_out_substream(&self, c: &mut Self::MultiStream) {
+        match *c {}
+    }
+
+    fn next_substream(&self, c: &'_ mut Self::MultiStream) -> Self::NextSubstreamFuture<'_> {
+        match *c {}
+    }
+
+    fn read_write_access<'a>(
+        &self,
+        stream: Pin<&'a mut Self::Stream>,
+    ) -> Result<Self::ReadWriteAccess<'a>, &'a io::Error> {
+        let stream = stream.project();
+        stream.0.read_write_access(Self::Instant::now())
+    }
+
+    fn wait_read_write_again<'a>(
+        &self,
+        stream: Pin<&'a mut Self::Stream>,
+    ) -> Self::StreamUpdateFuture<'a> {
+        let stream = stream.project();
+        Box::pin(stream.0.wait_read_write_again(|when| async move {
+            let now = super::wasm_helpers::now();
+            let duration = when.saturating_duration_since(now);
+            super::wasm_helpers::sleep(duration).await;
+        }))
+    }
+
+    fn log<'a>(
+        &self,
+        log_level: LogLevel,
+        log_target: &'a str,
+        message: &'a str,
+        key_values: impl Iterator<Item = (&'a str, &'a dyn fmt::Display)>,
+    ) {
+        // Smoldot is extremely chatty at debug/trace level (per-connection
+        // activity, gossip events, sync-service progress). Even with
+        // console.debug, which is hidden in Chrome's default verbosity,
+        // the volume costs measurable CPU on string formatting and shows
+        // up under Verbose. Suppress debug+trace entirely; warn/error/info
+        // still pass through so real problems surface.
+        if matches!(log_level, LogLevel::Debug | LogLevel::Trace) {
+            return;
+        }
+
+        let mut message_build = String::with_capacity(128);
+        message_build.push_str(message);
+        let mut first = true;
+        for (key, value) in key_values {
+            if first {
+                let _ = write!(message_build, "; ");
+                first = false;
+            } else {
+                let _ = write!(message_build, ", ");
+            }
+            let _ = write!(message_build, "{key}={value}");
+        }
+
+        let formatted = format!("[{log_target}] {message_build}");
+        let js = JsValue::from_str(&formatted);
+        match log_level {
+            LogLevel::Error => web_sys::console::error_1(&js),
+            LogLevel::Warn => web_sys::console::warn_1(&js),
+            LogLevel::Info => web_sys::console::info_1(&js),
+            LogLevel::Debug | LogLevel::Trace => unreachable!(),
+        }
+    }
+}
diff --git a/rust/crates/truapi-server/src/smoldot_provider/wasm_socket.rs b/rust/crates/truapi-server/src/smoldot_provider/wasm_socket.rs
new file mode 100644
index 00000000..ac96b881
--- /dev/null
+++ b/rust/crates/truapi-server/src/smoldot_provider/wasm_socket.rs
@@ -0,0 +1,230 @@
+// SPDX-License-Identifier: Apache-2.0
+// Vendored from subxt-lightclient 0.50.0 (Apache-2.0 OR GPL-3.0), elected
+// under Apache-2.0. See ../../THIRD_PARTY_NOTICES.md for attribution.
+
+use futures::{io, prelude::*};
+use send_wrapper::SendWrapper;
+use wasm_bindgen::{JsCast, prelude::*};
+
+use derive_more::Display;
+use std::{
+    collections::VecDeque,
+    pin::Pin,
+    sync::{Arc, Mutex},
+    task::Poll,
+    task::{Context, Waker},
+};
+
+/// Errors returned by the wasm-side socket constructor.
+#[derive(Debug, Display)]
+pub enum Error {
+    /// Wraps a JS-side connection failure.
+    #[display("Failed to connect {_0}")]
+    ConnectionError(String),
+}
+
+impl std::error::Error for Error {}
+
+/// WebSocket for WASM environments. Not safe to clone because the inner
+/// `web_sys::WebSocket` is not thread-safe and the wakers borrow the same
+/// `Mutex`.
+pub struct WasmSocket {
+    inner: Arc<Mutex<InnerWasmSocket>>,
+    socket: SendWrapper<web_sys::WebSocket>,
+    _callbacks: SendWrapper<Callbacks>,
+}
+
+#[derive(PartialEq, Eq, Clone, Copy)]
+enum ConnectionState {
+    Connecting,
+    Opened,
+    Closed,
+    Error,
+}
+
+struct InnerWasmSocket {
+    state: ConnectionState,
+    data: VecDeque<u8>,
+    waker: Option<Waker>,
+}
+
+type Callbacks = (
+    Closure<dyn FnMut()>,
+    Closure<dyn FnMut(web_sys::MessageEvent)>,
+    Closure<dyn FnMut(web_sys::Event)>,
+    Closure<dyn FnMut(web_sys::CloseEvent)>,
+);
+
+impl WasmSocket {
+    /// Opens a new WebSocket connection to the given URL. Returns an error
+    /// if the browser refuses to construct the underlying `WebSocket`
+    /// object.
+    pub fn new(addr: &str) -> Result<Self, Error> {
+        let socket = match web_sys::WebSocket::new(addr) {
+            Ok(socket) => socket,
+            Err(err) => return Err(Error::ConnectionError(format!("{err:?}"))),
+        };
+
+        socket.set_binary_type(web_sys::BinaryType::Arraybuffer);
+
+        let inner = Arc::new(Mutex::new(InnerWasmSocket {
+            state: ConnectionState::Connecting,
+            data: VecDeque::with_capacity(16384),
+            waker: None,
+        }));
+
+        let open_callback = Closure::<dyn FnMut()>::new({
+            let inner = inner.clone();
+            move || {
+                let mut inner = inner.lock().expect("Mutex is poised; qed");
+                inner.state = ConnectionState::Opened;
+
+                if let Some(waker) = inner.waker.take() {
+                    waker.wake();
+                }
+            }
+        });
+        socket.set_onopen(Some(open_callback.as_ref().unchecked_ref()));
+
+        let message_callback = Closure::<dyn FnMut(_)>::new({
+            let inner = inner.clone();
+            move |event: web_sys::MessageEvent| {
+                let Ok(buffer) = event.data().dyn_into::<js_sys::ArrayBuffer>() else {
+                    panic!("Unexpected data format {:?}", event.data());
+                };
+
+                let mut inner = inner.lock().expect("Mutex is poised; qed");
+                let bytes = js_sys::Uint8Array::new(&buffer).to_vec();
+                inner.data.extend(bytes);
+
+                if let Some(waker) = inner.waker.take() {
+                    waker.wake();
+                }
+            }
+        });
+        socket.set_onmessage(Some(message_callback.as_ref().unchecked_ref()));
+
+        let error_callback = Closure::<dyn FnMut(_)>::new({
+            let inner = inner.clone();
+            move |_event: web_sys::Event| {
+                let mut inner = inner.lock().expect("Mutex is poised; qed");
+                inner.state = ConnectionState::Error;
+
+                if let Some(waker) = inner.waker.take() {
+                    waker.wake();
+                }
+            }
+        });
+        socket.set_onerror(Some(error_callback.as_ref().unchecked_ref()));
+
+        let close_callback = Closure::<dyn FnMut(_)>::new({
+            let inner = inner.clone();
+            move |_event: web_sys::CloseEvent| {
+                let mut inner = inner.lock().expect("Mutex is poised; qed");
+                inner.state = ConnectionState::Closed;
+
+                if let Some(waker) = inner.waker.take() {
+                    waker.wake();
+                }
+            }
+        });
+        socket.set_onclose(Some(close_callback.as_ref().unchecked_ref()));
+
+        let callbacks = (
+            open_callback,
+            message_callback,
+            error_callback,
+            close_callback,
+        );
+
+        Ok(Self {
+            inner,
+            socket: SendWrapper::new(socket),
+            _callbacks: SendWrapper::new(callbacks),
+        })
+    }
+}
+
+impl AsyncRead for WasmSocket {
+    fn poll_read(
+        self: Pin<&mut Self>,
+        cx: &mut Context<'_>,
+        buf: &mut [u8],
+    ) -> Poll<Result<usize, io::Error>> {
+        let mut inner = self.inner.lock().expect("Mutex is poised; qed");
+        inner.waker = Some(cx.waker().clone());
+
+        if self.socket.ready_state() == web_sys::WebSocket::CONNECTING {
+            return Poll::Pending;
+        }
+
+        match inner.state {
+            ConnectionState::Error => Poll::Ready(Err(io::Error::other("Socket error"))),
+            ConnectionState::Closed => Poll::Ready(Err(io::ErrorKind::BrokenPipe.into())),
+            ConnectionState::Connecting => Poll::Pending,
+            ConnectionState::Opened => {
+                if inner.data.is_empty() {
+                    return Poll::Pending;
+                }
+
+                let n = inner.data.len().min(buf.len());
+                for k in buf.iter_mut().take(n) {
+                    *k = inner.data.pop_front().expect("Buffer non empty; qed");
+                }
+                Poll::Ready(Ok(n))
+            }
+        }
+    }
+}
+
+impl AsyncWrite for WasmSocket {
+    fn poll_write(
+        self: Pin<&mut Self>,
+        cx: &mut Context<'_>,
+        buf: &[u8],
+    ) -> Poll<Result<usize, io::Error>> {
+        let mut inner = self.inner.lock().expect("Mutex is poised; qed");
+        inner.waker = Some(cx.waker().clone());
+
+        match inner.state {
+            ConnectionState::Error => Poll::Ready(Err(io::Error::other("Socket error"))),
+            ConnectionState::Closed => Poll::Ready(Err(io::ErrorKind::BrokenPipe.into())),
+            ConnectionState::Connecting => Poll::Pending,
+            ConnectionState::Opened => match self.socket.send_with_u8_array(buf) {
+                Ok(()) => Poll::Ready(Ok(buf.len())),
+                Err(err) => Poll::Ready(Err(io::Error::other(format!("Write error: {err:?}")))),
+            },
+        }
+    }
+
+    fn poll_flush(self: Pin<&mut Self>, _: &mut Context<'_>) -> Poll<Result<(), io::Error>> {
+        Poll::Ready(Ok(()))
+    }
+
+    fn poll_close(self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Result<(), io::Error>> {
+        if self.socket.ready_state() == web_sys::WebSocket::CLOSED {
+            return Poll::Ready(Ok(()));
+        }
+
+        if self.socket.ready_state() != web_sys::WebSocket::CLOSING {
+            let _ = self.socket.close();
+        }
+
+        let mut inner = self.inner.lock().expect("Mutex is poised; qed");
+        inner.waker = Some(cx.waker().clone());
+        Poll::Pending
+    }
+}
+
+impl Drop for WasmSocket {
+    fn drop(&mut self) {
+        if self.socket.ready_state() != web_sys::WebSocket::CLOSING {
+            let _ = self.socket.close();
+        }
+
+        self.socket.set_onopen(None);
+        self.socket.set_onmessage(None);
+        self.socket.set_onerror(None);
+        self.socket.set_onclose(None);
+    }
+}
diff --git a/rust/crates/truapi-server/src/subscription.rs b/rust/crates/truapi-server/src/subscription.rs
new file mode 100644
index 00000000..eac73b51
--- /dev/null
+++ b/rust/crates/truapi-server/src/subscription.rs
@@ -0,0 +1,501 @@
+//! Subscription lifecycle management.
+//!
+//! Tracks active subscriptions (start/receive/stop/interrupt) and handles
+//! cleanup when either side terminates. Each registered subscription drives
+//! its stream on a caller-supplied [`Spawner`]; the manager itself never
+//! creates threads or runtimes.
+
+use std::collections::HashMap;
+use std::sync::atomic::{AtomicU64, Ordering};
+use std::sync::{Arc, Mutex};
+
+use futures::StreamExt;
+use futures::future::{BoxFuture, Either, select};
+use futures::stream::BoxStream;
+use parity_scale_codec::Encode;
+
+use crate::frame::{FrameKind, Payload, ProtocolMessage, compose_action};
+use crate::transport::Transport;
+
+type StopFn = Box<dyn FnOnce() + Send>;
+
+/// Spawns a subscription-driving future onto the caller's runtime. The
+/// future is `Send` because the inner [`SubscriptionStream`] is a
+/// `BoxStream<'static, _>` and every captured value the manager threads
+/// through it is also `Send`. Each platform bridge supplies an
+/// implementation that hands the future to the runtime driving its
+/// transport (tokio `LocalSet`, `wasm_bindgen_futures::spawn_local`, ...).
+pub type Spawner = Arc<dyn Fn(BoxFuture<'static, ()>) + Send + Sync>;
+
+/// Convenience spawner for tests and embedders that don't yet wire a
+/// real runtime: starts a fresh OS thread per subscription and drives the
+/// future with `futures::executor::block_on`. Not available on wasm32 since
+/// the platform has no threads.
+#[cfg(not(target_arch = "wasm32"))]
+pub fn thread_per_subscription_spawner() -> Spawner {
+    Arc::new(|fut: BoxFuture<'static, ()>| {
+        std::thread::spawn(move || futures::executor::block_on(fut));
+    })
+}
+
+/// One yielded value of a subscription stream after SCALE-encoding.
+pub enum SubscriptionOutput {
+    /// A regular subscription item to deliver as a `_receive` frame.
+    Item(Vec<u8>),
+    /// Stream-initiated termination delivered as an `_interrupt` frame.
+    Interrupt(Vec<u8>),
+}
+
+/// Boxed stream of [`SubscriptionOutput`] consumed by the dispatcher.
+pub type SubscriptionStream = BoxStream<'static, SubscriptionOutput>;
+
+/// Wrap a host-side stream of typed items into the SCALE-encoded
+/// [`SubscriptionStream`] that the dispatcher delivers to the transport.
+///
+/// `Item` is the versioned wrapper for each emitted value (e.g.
+/// `versioned::account::HostAccountConnectionStatusSubscribeItem`). The
+/// generated dispatcher calls this with the second type parameter inferred
+/// from the host trait return.
+pub fn subscription_stream<Item, S>(stream: S) -> SubscriptionStream
+where
+    Item: Encode + 'static,
+    S: futures::Stream<Item = Item> + Send + 'static,
+{
+    Box::pin(stream.map(|item| SubscriptionOutput::Item(item.encode())))
+}
+
+/// Generation-stamped slot tracking the lifecycle of one subscription id.
+/// `request_id` is client-controlled and may be reused or raced against a
+/// `_stop`, so each reservation carries a monotonic generation and only the
+/// owner of the current generation may transition or remove the slot.
+enum Slot {
+    /// Reserved by the dispatcher before its `_start` handler resolved.
+    /// `cancelled` flips to `true` if a `_stop` arrives in that window so
+    /// activation aborts instead of leaking an unstoppable stream.
+    Pending { generation: u64, cancelled: bool },
+    /// A live subscription with its cancellation handle.
+    Live { generation: u64, cancel: StopFn },
+}
+
+/// Handle returned by [`SubscriptionManager::reserve`] and presented back to
+/// [`SubscriptionManager::activate`]. Ties an activation to the exact
+/// reservation it belongs to so a superseding `_start` for the same id
+/// cannot be activated by a stale handler.
+pub struct ReservationToken {
+    request_id: String,
+    generation: u64,
+}
+
+/// Manages active subscriptions on the server side.
+pub struct SubscriptionManager {
+    active: Arc<Mutex<HashMap<String, Slot>>>,
+    next_generation: Arc<AtomicU64>,
+    spawner: Spawner,
+}
+
+impl SubscriptionManager {
+    /// Create an empty manager driven by `spawner`.
+    pub fn new(spawner: Spawner) -> Self {
+        Self {
+            active: Arc::new(Mutex::new(HashMap::new())),
+            next_generation: Arc::new(AtomicU64::new(0)),
+            spawner,
+        }
+    }
+
+    /// Reserve the slot for `request_id` before its subscription stream is
+    /// available. Any live subscription already under that id is stopped and
+    /// replaced (re-subscribe semantics). A `_stop` arriving before
+    /// [`activate`](Self::activate) flips the reservation to cancelled.
+    pub fn reserve(&self, request_id: String) -> ReservationToken {
+        let generation = self.next_generation.fetch_add(1, Ordering::Relaxed);
+        let mut active = self.active.lock().unwrap();
+        if let Some(Slot::Live { cancel, .. }) = active.insert(
+            request_id.clone(),
+            Slot::Pending {
+                generation,
+                cancelled: false,
+            },
+        ) {
+            cancel();
+        }
+        ReservationToken {
+            request_id,
+            generation,
+        }
+    }
+
+    /// Drop a reservation whose `_start` handler failed before producing a
+    /// stream. No-op if the slot was superseded by a newer reservation.
+    pub fn cancel_reservation(&self, token: ReservationToken) {
+        let mut active = self.active.lock().unwrap();
+        let owned = matches!(
+            active.get(&token.request_id),
+            Some(Slot::Pending { generation, .. }) if *generation == token.generation
+        );
+        if owned {
+            active.remove(&token.request_id);
+        }
+    }
+
+    /// Activate a reserved subscription with its stream, forwarding stream
+    /// items as `_receive` frames until the stream ends or `_stop` is
+    /// received. No-ops without starting the stream if the reservation was
+    /// cancelled by a `_stop` or superseded by a newer reservation for the
+    /// same id.
+    pub fn activate(
+        &self,
+        token: ReservationToken,
+        method: &str,
+        mut stream: SubscriptionStream,
+        transport: Arc<dyn Transport>,
+    ) {
+        let ReservationToken {
+            request_id,
+            generation,
+        } = token;
+        let action = compose_action(method, FrameKind::Receive);
+        let interrupt_action = compose_action(method, FrameKind::Interrupt);
+        let completed_interrupt_action = interrupt_action.clone();
+        let rid = request_id.clone();
+        let stream_transport = transport.clone();
+
+        // Cancellation channel.
+        let (cancel_tx, cancel_rx) = futures::channel::oneshot::channel::<()>();
+
+        // Transition the reserved slot to live, unless a `_stop` cancelled it
+        // or a newer reservation superseded it while the handler resolved.
+        {
+            let mut active = self.active.lock().unwrap();
+            match active.get(&request_id) {
+                Some(Slot::Pending {
+                    generation: g,
+                    cancelled,
+                }) if *g == generation => {
+                    if *cancelled {
+                        active.remove(&request_id);
+                        return;
+                    }
+                }
+                _ => return,
+            }
+            active.insert(
+                request_id.clone(),
+                Slot::Live {
+                    generation,
+                    cancel: Box::new(move || {
+                        let _ = cancel_tx.send(());
+                    }),
+                },
+            );
+        }
+
+        let active = self.active.clone();
+
+        let future: BoxFuture<'static, ()> = Box::pin(async move {
+            let completed = {
+                let mut cancel_rx = cancel_rx;
+                loop {
+                    match select(cancel_rx, stream.next()).await {
+                        Either::Left((_cancelled, _next)) => break false,
+                        Either::Right((item, next_cancel_rx)) => {
+                            cancel_rx = next_cancel_rx;
+                            match item {
+                                Some(SubscriptionOutput::Item(value)) => {
+                                    stream_transport.send(ProtocolMessage {
+                                        request_id: rid.clone(),
+                                        payload: Payload {
+                                            tag: action.clone(),
+                                            value,
+                                        },
+                                    })
+                                }
+                                Some(SubscriptionOutput::Interrupt(value)) => {
+                                    stream_transport.send(ProtocolMessage {
+                                        request_id: rid.clone(),
+                                        payload: Payload {
+                                            tag: interrupt_action.clone(),
+                                            value,
+                                        },
+                                    });
+                                    break false;
+                                }
+                                None => break true,
+                            }
+                        }
+                    }
+                }
+            };
+
+            // Only remove the slot if it still holds THIS generation; a
+            // superseding reservation owns its own cleanup.
+            let removed = {
+                let mut active = active.lock().unwrap();
+                let owned = matches!(
+                    active.get(&request_id),
+                    Some(Slot::Live { generation: g, .. }) if *g == generation
+                );
+                if owned {
+                    active.remove(&request_id);
+                }
+                owned
+            };
+
+            if completed && removed {
+                transport.send(ProtocolMessage {
+                    request_id,
+                    payload: Payload {
+                        tag: completed_interrupt_action,
+                        value: Vec::new(),
+                    },
+                });
+            }
+        });
+
+        (self.spawner)(future);
+    }
+
+    /// Convenience for callers that already hold the stream with no async gap
+    /// between reservation and activation (tests and synchronous embedders).
+    pub fn register(
+        &self,
+        request_id: String,
+        method: &str,
+        stream: SubscriptionStream,
+        transport: Arc<dyn Transport>,
+    ) {
+        let token = self.reserve(request_id);
+        self.activate(token, method, stream, transport);
+    }
+
+    /// Handle a `_stop` frame from the product side. Cancels a live
+    /// subscription, or marks a still-pending reservation cancelled so its
+    /// in-flight activation aborts rather than leaking an unstoppable stream.
+    pub fn handle_stop(&self, request_id: &str) {
+        let mut active = self.active.lock().unwrap();
+        match active.get_mut(request_id) {
+            Some(Slot::Pending { cancelled, .. }) => {
+                *cancelled = true;
+            }
+            Some(Slot::Live { .. }) => {
+                if let Some(Slot::Live { cancel, .. }) = active.remove(request_id) {
+                    cancel();
+                }
+            }
+            None => {}
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use futures::stream;
+    use std::sync::atomic::{AtomicUsize, Ordering};
+
+    /// Transport that records every frame and notifies waiters when it
+    /// reaches a target count. Used to wait for the subscription's
+    /// background thread to drain a known number of frames.
+    struct RecordingTransport {
+        sent: Mutex<Vec<ProtocolMessage>>,
+        cvar: std::sync::Condvar,
+    }
+
+    impl RecordingTransport {
+        fn new() -> Self {
+            Self {
+                sent: Mutex::new(Vec::new()),
+                cvar: std::sync::Condvar::new(),
+            }
+        }
+        fn sent(&self) -> Vec<ProtocolMessage> {
+            self.sent.lock().unwrap().clone()
+        }
+        /// Wait until at least `count` frames have been recorded, or
+        /// `timeout` elapses. Returns the number of frames recorded at
+        /// wake-up time.
+        fn wait_for(&self, count: usize, timeout: std::time::Duration) -> usize {
+            let mut guard = self.sent.lock().unwrap();
+            let deadline = std::time::Instant::now() + timeout;
+            while guard.len() < count {
+                let now = std::time::Instant::now();
+                if now >= deadline {
+                    break;
+                }
+                let (new_guard, _) = self.cvar.wait_timeout(guard, deadline - now).unwrap();
+                guard = new_guard;
+            }
+            guard.len()
+        }
+    }
+
+    impl Transport for RecordingTransport {
+        fn send(&self, message: ProtocolMessage) {
+            self.sent.lock().unwrap().push(message);
+            self.cvar.notify_all();
+        }
+        fn on_message(
+            &self,
+            _handler: Box<dyn Fn(ProtocolMessage) + Send + Sync>,
+        ) -> Box<dyn FnOnce()> {
+            Box::new(|| {})
+        }
+    }
+
+    fn dummy_stream(items: Vec<Vec<u8>>) -> SubscriptionStream {
+        Box::pin(stream::iter(
+            items.into_iter().map(SubscriptionOutput::Item),
+        ))
+    }
+
+    /// Register a never-ending stream then immediately stop it. The
+    /// stream's first poll must observe cancellation and exit without
+    /// having pushed any frame.
+    #[test]
+    fn register_then_stop_emits_no_extra_frames() {
+        let transport_typed = Arc::new(RecordingTransport::new());
+        let transport_dyn: Arc<dyn Transport> = transport_typed.clone();
+        let manager = SubscriptionManager::new(thread_per_subscription_spawner());
+        let slow_stream: SubscriptionStream = Box::pin(stream::pending());
+        manager.register("p:1".to_string(), "demo_method", slow_stream, transport_dyn);
+        manager.handle_stop("p:1");
+        // Give the worker thread a beat to observe the cancel.
+        std::thread::sleep(std::time::Duration::from_millis(50));
+        assert!(
+            transport_typed.sent().is_empty(),
+            "stopped subscription must not push any frame"
+        );
+    }
+
+    /// A stream that yields 2 items then ends naturally must produce 2
+    /// `_receive` frames followed by one `_interrupt` frame.
+    #[test]
+    fn register_completion_emits_interrupt() {
+        let transport_typed = Arc::new(RecordingTransport::new());
+        let transport_dyn: Arc<dyn Transport> = transport_typed.clone();
+        let manager = SubscriptionManager::new(thread_per_subscription_spawner());
+        let items = dummy_stream(vec![vec![0xaa], vec![0xbb]]);
+        manager.register("p:1".to_string(), "demo_method", items, transport_dyn);
+        let observed = transport_typed.wait_for(3, std::time::Duration::from_secs(2));
+        assert_eq!(observed, 3, "expected 2 receive frames + 1 interrupt");
+        let frames = transport_typed.sent();
+        assert_eq!(frames[0].payload.tag, "demo_method_receive");
+        assert_eq!(frames[0].payload.value, vec![0xaa]);
+        assert_eq!(frames[1].payload.tag, "demo_method_receive");
+        assert_eq!(frames[1].payload.value, vec![0xbb]);
+        assert_eq!(frames[2].payload.tag, "demo_method_interrupt");
+        assert_eq!(frames[2].payload.value, Vec::<u8>::new());
+    }
+
+    /// Calling `handle_stop` twice on the same request id must be a
+    /// no-op the second time around (the entry has already been removed,
+    /// no panic, no extra frames).
+    #[test]
+    fn double_stop_is_idempotent() {
+        let transport_typed = Arc::new(RecordingTransport::new());
+        let transport_dyn: Arc<dyn Transport> = transport_typed.clone();
+        let manager = SubscriptionManager::new(thread_per_subscription_spawner());
+        let slow_stream: SubscriptionStream = Box::pin(stream::pending());
+        manager.register("p:1".to_string(), "demo_method", slow_stream, transport_dyn);
+        manager.handle_stop("p:1");
+        // Second call must not panic and must not emit any frame.
+        manager.handle_stop("p:1");
+        std::thread::sleep(std::time::Duration::from_millis(50));
+        assert!(
+            transport_typed.sent().is_empty(),
+            "double-stop must not emit any frame"
+        );
+    }
+
+    /// The manager must drive subscriptions through the injected spawner,
+    /// not by reaching out to `std::thread::spawn` itself. The counter
+    /// inside the test spawner is the proof.
+    #[test]
+    fn subscription_uses_provided_spawner_not_native_thread() {
+        let invocations = Arc::new(AtomicUsize::new(0));
+        let invocations_for_spawner = invocations.clone();
+        let spawner: Spawner = Arc::new(move |fut: BoxFuture<'static, ()>| {
+            invocations_for_spawner.fetch_add(1, Ordering::SeqCst);
+            std::thread::spawn(move || futures::executor::block_on(fut));
+        });
+
+        let transport_typed = Arc::new(RecordingTransport::new());
+        let transport_dyn: Arc<dyn Transport> = transport_typed.clone();
+        let manager = SubscriptionManager::new(spawner);
+        let items = dummy_stream(vec![vec![0xcc]]);
+        manager.register("p:1".to_string(), "demo_method", items, transport_dyn);
+
+        // Wait for the worker future to drain to completion so we know
+        // the spawner closure ran on this path.
+        let _ = transport_typed.wait_for(2, std::time::Duration::from_secs(2));
+        assert_eq!(
+            invocations.load(Ordering::SeqCst),
+            1,
+            "spawner must be invoked exactly once per register",
+        );
+    }
+
+    /// A `_stop` arriving before `activate` (the stop-before-register race on
+    /// non-serialized transports) must abort the subscription: no `_receive`
+    /// frames are emitted even though the stream had items to yield.
+    #[test]
+    fn stop_before_activate_aborts_subscription() {
+        let transport_typed = Arc::new(RecordingTransport::new());
+        let transport_dyn: Arc<dyn Transport> = transport_typed.clone();
+        let manager = SubscriptionManager::new(thread_per_subscription_spawner());
+        let token = manager.reserve("p:1".to_string());
+        manager.handle_stop("p:1");
+        let items = dummy_stream(vec![vec![0x01], vec![0x02]]);
+        manager.activate(token, "demo_method", items, transport_dyn);
+        std::thread::sleep(std::time::Duration::from_millis(50));
+        assert!(
+            transport_typed.sent().is_empty(),
+            "a stop before activate must abort the subscription"
+        );
+    }
+
+    /// Re-using a live request id (the duplicate-`_start` case) supersedes the
+    /// previous subscription rather than leaking it: the first stream is
+    /// stopped, only the second runs, and the superseded stream leaves no
+    /// frames behind.
+    #[test]
+    fn duplicate_start_supersedes_previous_without_leak() {
+        let transport_typed = Arc::new(RecordingTransport::new());
+        let transport_dyn: Arc<dyn Transport> = transport_typed.clone();
+        let manager = SubscriptionManager::new(thread_per_subscription_spawner());
+
+        // First subscription never yields; the second reservation for the
+        // same id must stop it.
+        let pending: SubscriptionStream = Box::pin(stream::pending());
+        manager.register(
+            "p:1".to_string(),
+            "demo_method",
+            pending,
+            transport_dyn.clone(),
+        );
+
+        // Second subscription yields one item then ends.
+        let items = dummy_stream(vec![vec![0xaa]]);
+        manager.register("p:1".to_string(), "demo_method", items, transport_dyn);
+
+        // Exactly the second stream's frames appear: one receive + one
+        // completion interrupt. The first (pending) stream contributes none.
+        let observed = transport_typed.wait_for(2, std::time::Duration::from_secs(2));
+        assert_eq!(
+            observed, 2,
+            "expected the second stream's receive + interrupt only"
+        );
+        let frames = transport_typed.sent();
+        assert_eq!(frames[0].payload.tag, "demo_method_receive");
+        assert_eq!(frames[0].payload.value, vec![0xaa]);
+        assert_eq!(frames[1].payload.tag, "demo_method_interrupt");
+
+        manager.handle_stop("p:1");
+        std::thread::sleep(std::time::Duration::from_millis(50));
+        assert_eq!(
+            transport_typed.sent().len(),
+            2,
+            "no leaked frames from the superseded stream"
+        );
+    }
+}
diff --git a/rust/crates/truapi-server/src/transport.rs b/rust/crates/truapi-server/src/transport.rs
new file mode 100644
index 00000000..ba58481f
--- /dev/null
+++ b/rust/crates/truapi-server/src/transport.rs
@@ -0,0 +1,12 @@
+//! Transport abstraction over platform-specific IPC mechanisms.
+
+use crate::frame::ProtocolMessage;
+
+/// A raw message pipe. Platform-specific implementations provide this.
+pub trait Transport: Send + Sync {
+    /// Send a protocol message to the other side.
+    fn send(&self, message: ProtocolMessage);
+
+    /// Register a handler for incoming messages. Returns an unsubscribe handle.
+    fn on_message(&self, handler: Box<dyn Fn(ProtocolMessage) + Send + Sync>) -> Box<dyn FnOnce()>;
+}
diff --git a/rust/crates/truapi-server/src/wasm.rs b/rust/crates/truapi-server/src/wasm.rs
new file mode 100644
index 00000000..4af5a019
--- /dev/null
+++ b/rust/crates/truapi-server/src/wasm.rs
@@ -0,0 +1,569 @@
+//! wasm-bindgen surface. Exposes [`WasmTrUApiCore`] to JavaScript hosts so
+//! they can wire the TrUAPI core into a browser or worker shell.
+//!
+//! The browser side hands a `callbacks` object (a `JsBridge`) to the
+//! constructor. The bridge implements every host-side capability the
+//! [`truapi_platform::Platform`] trait set requires. Internally the bridge
+//! is wrapped in a [`SendWrapper`] so it satisfies the `Send` bound the
+//! platform trait set imposes; sound on wasm32 because the runtime is
+//! single-threaded.
+
+use std::cell::Cell;
+use std::rc::Rc;
+use std::sync::Arc;
+use std::sync::atomic::{AtomicBool, Ordering};
+
+use futures::channel::mpsc;
+use futures::stream::{BoxStream, StreamExt};
+use js_sys::{Function, Reflect, Uint8Array};
+use parity_scale_codec::{Decode, Encode};
+use send_wrapper::SendWrapper;
+use truapi::v01;
+use truapi::versioned::system::{HostFeatureSupportedRequest, HostFeatureSupportedResponse};
+use truapi_platform::{
+    ChainProvider, Features, JsonRpcConnection, Navigation, Notifications, Permissions, Storage,
+};
+use wasm_bindgen::JsCast;
+use wasm_bindgen::prelude::*;
+
+use crate::TrUApiCore;
+use crate::frame::ProtocolMessage;
+use crate::subscription::Spawner;
+use crate::transport::Transport;
+
+/// Bundle of JS-side callbacks the bridge invokes. Names map to camelCase
+/// keys on the JS object passed to the constructor.
+struct JsBridge {
+    navigate_to: Function,
+    push_notification: Function,
+    device_permission: Function,
+    remote_permission: Function,
+    feature_supported: Function,
+    local_storage_read: Function,
+    local_storage_write: Function,
+    local_storage_clear: Function,
+    /// Optional. Hosts that own JSON-RPC connections (e.g. dotli with its
+    /// "smoldot vs RPC node" toggle) provide this; otherwise chain calls
+    /// fail with an "unavailable" reason.
+    chain_connect: Option<Function>,
+    emit_frame: Function,
+    dispose: Function,
+}
+
+impl JsBridge {
+    fn from_js(callbacks: &JsValue) -> Result<Self, JsValue> {
+        Ok(Self {
+            navigate_to: get_function(callbacks, "navigateTo")?,
+            push_notification: get_function(callbacks, "pushNotification")?,
+            device_permission: get_function(callbacks, "devicePermission")?,
+            remote_permission: get_function(callbacks, "remotePermission")?,
+            feature_supported: get_function(callbacks, "featureSupported")?,
+            local_storage_read: get_function(callbacks, "localStorageRead")?,
+            local_storage_write: get_function(callbacks, "localStorageWrite")?,
+            local_storage_clear: get_function(callbacks, "localStorageClear")?,
+            chain_connect: get_optional_function(callbacks, "chainConnect")?,
+            emit_frame: get_function(callbacks, "emitFrame")?,
+            dispose: get_optional_function(callbacks, "dispose")?.unwrap_or_else(noop_function),
+        })
+    }
+}
+
+struct WasmCallbackTransport {
+    bridge: SendWrapper<Arc<JsBridge>>,
+    disposed: Arc<AtomicBool>,
+}
+
+impl Transport for WasmCallbackTransport {
+    fn send(&self, message: ProtocolMessage) {
+        if self.disposed.load(Ordering::Relaxed) {
+            return;
+        }
+        let frame = Uint8Array::from(message.encode().as_slice());
+        if let Err(err) = self.bridge.emit_frame.call1(&JsValue::NULL, &frame) {
+            web_sys::console::error_1(&err);
+        }
+    }
+
+    fn on_message(
+        &self,
+        _handler: Box<dyn Fn(ProtocolMessage) + Send + Sync>,
+    ) -> Box<dyn FnOnce()> {
+        Box::new(|| {})
+    }
+}
+
+struct WasmPlatform {
+    bridge: SendWrapper<Arc<JsBridge>>,
+}
+
+impl WasmPlatform {
+    fn new(bridge: Arc<JsBridge>) -> Self {
+        Self {
+            bridge: SendWrapper::new(bridge),
+        }
+    }
+}
+
+impl Navigation for WasmPlatform {
+    async fn navigate_to(&self, url: String) -> Result<(), v01::HostNavigateToError> {
+        invoke_navigate_to(&self.bridge, &url)
+            .await
+            .map_err(|reason| v01::HostNavigateToError::Unknown { reason })
+    }
+}
+
+impl Notifications for WasmPlatform {
+    async fn push_notification(
+        &self,
+        notification: v01::HostPushNotificationRequest,
+    ) -> Result<(), v01::GenericError> {
+        invoke_unit(&self.bridge.push_notification, notification.encode())
+            .await
+            .map_err(generic)
+    }
+}
+
+impl Permissions for WasmPlatform {
+    async fn device_permission(
+        &self,
+        request: v01::HostDevicePermissionRequest,
+    ) -> Result<v01::HostDevicePermissionResponse, v01::GenericError> {
+        let granted = invoke_bool(&self.bridge.device_permission, request.encode())
+            .await
+            .map_err(generic)?;
+        Ok(v01::HostDevicePermissionResponse { granted })
+    }
+
+    async fn remote_permission(
+        &self,
+        request: v01::RemotePermissionRequest,
+    ) -> Result<v01::RemotePermissionResponse, v01::GenericError> {
+        let granted = invoke_bool(&self.bridge.remote_permission, request.encode())
+            .await
+            .map_err(generic)?;
+        Ok(v01::RemotePermissionResponse { granted })
+    }
+}
+
+impl Features for WasmPlatform {
+    async fn feature_supported(
+        &self,
+        request: HostFeatureSupportedRequest,
+    ) -> Result<HostFeatureSupportedResponse, v01::GenericError> {
+        let supported = invoke_bool(&self.bridge.feature_supported, request.encode())
+            .await
+            .map_err(generic)?;
+        Ok(HostFeatureSupportedResponse::V1(
+            v01::HostFeatureSupportedResponse { supported },
+        ))
+    }
+}
+
+impl Storage for WasmPlatform {
+    async fn read(&self, key: String) -> Result<Option<Vec<u8>>, v01::HostLocalStorageReadError> {
+        invoke_local_storage_read(&self.bridge, &key)
+            .await
+            .map_err(|reason| v01::HostLocalStorageReadError::Unknown { reason })
+    }
+
+    async fn write(
+        &self,
+        key: String,
+        value: Vec<u8>,
+    ) -> Result<(), v01::HostLocalStorageReadError> {
+        invoke_local_storage_write(&self.bridge, &key, &value)
+            .await
+            .map_err(|reason| v01::HostLocalStorageReadError::Unknown { reason })
+    }
+
+    async fn clear(&self, key: String) -> Result<(), v01::HostLocalStorageReadError> {
+        invoke_local_storage_clear(&self.bridge, &key)
+            .await
+            .map_err(|reason| v01::HostLocalStorageReadError::Unknown { reason })
+    }
+}
+
+impl ChainProvider for WasmPlatform {
+    async fn connect(
+        &self,
+        genesis_hash: Vec<u8>,
+    ) -> Result<Box<dyn JsonRpcConnection>, v01::GenericError> {
+        let chain_connect = match self.bridge.chain_connect.clone() {
+            Some(f) => f,
+            None => {
+                return Err(generic(
+                    "chainConnect callback not provided by host".to_string(),
+                ));
+            }
+        };
+        let chain_connect = SendWrapper::new(chain_connect);
+        SendWrapper::new(async move {
+            let (response_tx, response_rx) = mpsc::unbounded::<String>();
+            let on_response = Closure::wrap(Box::new(move |json: JsValue| {
+                // The host must hand back JSON-RPC frames as strings. Drop (and
+                // log) non-string values rather than forwarding an empty frame
+                // that would desync request/response correlation.
+                match json.as_string() {
+                    Some(s) => {
+                        let _ = response_tx.unbounded_send(s);
+                    }
+                    None => web_sys::console::error_1(&JsValue::from_str(
+                        "chainConnect onResponse expected a JSON string; dropping non-string value",
+                    )),
+                }
+            }) as Box<dyn FnMut(JsValue)>);
+
+            let genesis_hex = genesis_hash.iter().fold(
+                String::with_capacity(2 + genesis_hash.len() * 2),
+                |mut s, b| {
+                    use std::fmt::Write;
+                    let _ = write!(s, "{b:02x}");
+                    s
+                },
+            );
+            let genesis_arg = JsValue::from_str(&format!("0x{genesis_hex}"));
+            let returned = chain_connect
+                .call2(
+                    &JsValue::NULL,
+                    &genesis_arg,
+                    on_response.as_ref().unchecked_ref(),
+                )
+                .map_err(|err| generic(js_to_string(err)))?;
+            let resolved = await_optional_promise(returned).await.map_err(generic)?;
+            if resolved.is_null() || resolved.is_undefined() {
+                return Err(generic("chainConnect returned no connection".into()));
+            }
+            let send_fn = Reflect::get(&resolved, &JsValue::from_str("send"))
+                .map_err(|_| generic("chainConnect must return { send, close }".into()))?
+                .dyn_into::<Function>()
+                .map_err(|_| generic("chainConnect.send must be a function".into()))?;
+            let close_fn = Reflect::get(&resolved, &JsValue::from_str("close"))
+                .map_err(|_| generic("chainConnect.close must be a function".into()))?
+                .dyn_into::<Function>()
+                .map_err(|_| generic("chainConnect.close must be a function".into()))?;
+
+            Ok(Box::new(JsCallbackJsonRpcConnection {
+                send_fn: SendWrapper::new(send_fn),
+                close_fn: SendWrapper::new(close_fn),
+                _on_response: SendWrapper::new(on_response),
+                response_rx: std::sync::Mutex::new(Some(response_rx)),
+            }) as Box<dyn JsonRpcConnection>)
+        })
+        .await
+    }
+}
+
+// Account, signing, statement-store, and preimage flows live in the Rust
+// core itself. Their `truapi::api::*` trait defaults return `Unsupported`
+// until those in-core implementations land. The JS bridge only carries
+// callbacks for the platform capabilities the core cannot satisfy alone.
+
+struct JsCallbackJsonRpcConnection {
+    send_fn: SendWrapper<Function>,
+    close_fn: SendWrapper<Function>,
+    /// Closure must outlive the connection so JS keeps a live ref to the
+    /// response sink. Dropped together with the rest of the struct.
+    _on_response: SendWrapper<Closure<dyn FnMut(JsValue)>>,
+    response_rx: std::sync::Mutex<Option<mpsc::UnboundedReceiver<String>>>,
+}
+
+impl JsonRpcConnection for JsCallbackJsonRpcConnection {
+    fn send(&self, request: String) {
+        let arg = JsValue::from_str(&request);
+        if let Err(err) = self.send_fn.call1(&JsValue::NULL, &arg) {
+            web_sys::console::error_1(&err);
+        }
+    }
+
+    /// Single-take: the response receiver is handed out exactly once. A second
+    /// call yields an empty stream (and logs), since the channel has one
+    /// consumer.
+    fn responses(&self) -> BoxStream<'static, String> {
+        let mut guard = self.response_rx.lock().unwrap();
+        match guard.take() {
+            Some(rx) => rx.boxed(),
+            None => {
+                web_sys::console::error_1(&JsValue::from_str(
+                    "JsCallbackJsonRpcConnection::responses() called more than once",
+                ));
+                futures::stream::empty().boxed()
+            }
+        }
+    }
+}
+
+impl Drop for JsCallbackJsonRpcConnection {
+    fn drop(&mut self) {
+        let _ = self.close_fn.call0(&JsValue::NULL);
+    }
+}
+
+fn generic(reason: String) -> v01::GenericError {
+    v01::GenericError { reason }
+}
+
+/// Await the JS callback's return value if it's a Promise; pass other
+/// values through unchanged. Every host callback resolves through this so
+/// the JS side is free to be sync or async.
+async fn await_optional_promise(returned: JsValue) -> Result<JsValue, String> {
+    if returned.is_instance_of::<js_sys::Promise>() {
+        let promise = returned.unchecked_into::<js_sys::Promise>();
+        wasm_bindgen_futures::JsFuture::from(promise)
+            .await
+            .map_err(js_to_string)
+    } else {
+        Ok(returned)
+    }
+}
+
+fn invoke_navigate_to(
+    bridge: &JsBridge,
+    url: &str,
+) -> impl std::future::Future<Output = Result<(), String>> + Send {
+    let fn_ = bridge.navigate_to.clone();
+    let url = url.to_string();
+    SendWrapper::new(async move {
+        let arg = JsValue::from_str(&url);
+        let returned = fn_.call1(&JsValue::NULL, &arg).map_err(js_to_string)?;
+        await_optional_promise(returned).await.map(|_| ())
+    })
+}
+
+fn invoke_unit(
+    fn_: &Function,
+    payload: Vec<u8>,
+) -> impl std::future::Future<Output = Result<(), String>> + Send {
+    let fn_ = fn_.clone();
+    SendWrapper::new(async move {
+        let arg = Uint8Array::from(payload.as_slice());
+        let returned = fn_.call1(&JsValue::NULL, &arg).map_err(js_to_string)?;
+        await_optional_promise(returned).await.map(|_| ())
+    })
+}
+
+fn invoke_bool(
+    fn_: &Function,
+    payload: Vec<u8>,
+) -> impl std::future::Future<Output = Result<bool, String>> + Send {
+    let fn_ = fn_.clone();
+    SendWrapper::new(async move {
+        let arg = Uint8Array::from(payload.as_slice());
+        let returned = fn_.call1(&JsValue::NULL, &arg).map_err(js_to_string)?;
+        let resolved = await_optional_promise(returned).await?;
+        // A non-boolean resolved value is a host contract violation; surface it
+        // rather than silently masking it as `false` (which would read as a
+        // denial / unsupported and hide the host bug).
+        resolved
+            .as_bool()
+            .ok_or_else(|| "callback must resolve to a boolean".to_string())
+    })
+}
+
+fn invoke_local_storage_read(
+    bridge: &JsBridge,
+    key: &str,
+) -> impl std::future::Future<Output = Result<Option<Vec<u8>>, String>> + Send {
+    let fn_ = bridge.local_storage_read.clone();
+    let key = key.to_string();
+    SendWrapper::new(async move {
+        let arg = JsValue::from_str(&key);
+        let returned = fn_.call1(&JsValue::NULL, &arg).map_err(js_to_string)?;
+        let resolved = await_optional_promise(returned).await?;
+        if resolved.is_null() || resolved.is_undefined() {
+            return Ok(None);
+        }
+        let array = resolved.dyn_into::<Uint8Array>().map_err(|_| {
+            "localStorageRead must resolve to Uint8Array, null or undefined".to_string()
+        })?;
+        Ok(Some(array.to_vec()))
+    })
+}
+
+fn invoke_local_storage_write(
+    bridge: &JsBridge,
+    key: &str,
+    value: &[u8],
+) -> impl std::future::Future<Output = Result<(), String>> + Send {
+    let fn_ = bridge.local_storage_write.clone();
+    let key = key.to_string();
+    let value = value.to_vec();
+    SendWrapper::new(async move {
+        let key_arg = JsValue::from_str(&key);
+        let value_arg = Uint8Array::from(value.as_slice());
+        let returned = fn_
+            .call2(&JsValue::NULL, &key_arg, &value_arg)
+            .map_err(js_to_string)?;
+        await_optional_promise(returned).await.map(|_| ())
+    })
+}
+
+fn invoke_local_storage_clear(
+    bridge: &JsBridge,
+    key: &str,
+) -> impl std::future::Future<Output = Result<(), String>> + Send {
+    let fn_ = bridge.local_storage_clear.clone();
+    let key = key.to_string();
+    SendWrapper::new(async move {
+        let arg = JsValue::from_str(&key);
+        let returned = fn_.call1(&JsValue::NULL, &arg).map_err(js_to_string)?;
+        await_optional_promise(returned).await.map(|_| ())
+    })
+}
+
+fn js_to_string(value: JsValue) -> String {
+    value
+        .as_string()
+        .or_else(|| {
+            value
+                .dyn_ref::<js_sys::Error>()
+                .map(|err| err.message().into())
+        })
+        .unwrap_or_else(|| format!("{value:?}"))
+}
+
+fn get_function(callbacks: &JsValue, name: &str) -> Result<Function, JsValue> {
+    let value = Reflect::get(callbacks, &JsValue::from_str(name))?;
+    value
+        .dyn_into::<Function>()
+        .map_err(|_| JsValue::from_str(&format!("callbacks.{name} must be a function")))
+}
+
+fn get_optional_function(callbacks: &JsValue, name: &str) -> Result<Option<Function>, JsValue> {
+    let value = Reflect::get(callbacks, &JsValue::from_str(name))?;
+    if value.is_null() || value.is_undefined() {
+        return Ok(None);
+    }
+    value
+        .dyn_into::<Function>()
+        .map(Some)
+        .map_err(|_| JsValue::from_str(&format!("callbacks.{name} must be a function")))
+}
+
+fn noop_function() -> Function {
+    Function::new_no_args("")
+}
+
+struct WasmCoreInner {
+    core: TrUApiCore,
+    transport: Arc<WasmCallbackTransport>,
+    dispose_fn: SendWrapper<Function>,
+    disposed: Cell<bool>,
+    disposing: Cell<bool>,
+}
+
+/// Toggle [`crate::debug_log`] output. Hosts read their `truapi:debug`
+/// flag (web: localStorage) and call this once during boot.
+#[wasm_bindgen(js_name = setDebugEnabled)]
+pub fn set_debug_enabled(enabled: bool) {
+    crate::debug_log::set_enabled(enabled);
+}
+
+/// JS-callable handle to the TrUAPI core. Constructed once per shell boot.
+#[wasm_bindgen]
+pub struct WasmTrUApiCore {
+    inner: Rc<WasmCoreInner>,
+}
+
+#[wasm_bindgen]
+impl WasmTrUApiCore {
+    /// Build the core from a JS callbacks object. The object must define
+    /// every host capability the [`truapi_platform::Platform`] trait set
+    /// requires (camelCase property names; see the source for the full
+    /// list).
+    #[wasm_bindgen(constructor)]
+    pub fn new(callbacks: JsValue) -> Result<WasmTrUApiCore, JsValue> {
+        // Surface Rust panics to the browser console. A panic mid-dispatch
+        // aborts the call as a wasm trap; the host should treat a thrown error
+        // from `receiveFromProduct` as a fatal-instance signal and rebuild the
+        // core rather than continue using it.
+        console_error_panic_hook::set_once();
+        let bridge = Arc::new(JsBridge::from_js(&callbacks)?);
+        let disposed = Arc::new(AtomicBool::new(false));
+        let transport = Arc::new(WasmCallbackTransport {
+            bridge: SendWrapper::new(bridge.clone()),
+            disposed: disposed.clone(),
+        });
+        let dispose_fn = SendWrapper::new(bridge.dispose.clone());
+        let platform = Arc::new(WasmPlatform::new(bridge));
+        let spawner: Spawner = Arc::new(|fut| {
+            wasm_bindgen_futures::spawn_local(fut);
+        });
+        let core = TrUApiCore::from_platform(platform, spawner);
+        Ok(Self {
+            inner: Rc::new(WasmCoreInner {
+                core,
+                transport,
+                dispose_fn,
+                disposed: Cell::new(false),
+                disposing: Cell::new(false),
+            }),
+        })
+    }
+
+    /// Push a SCALE-encoded protocol frame into the dispatcher. Responses
+    /// (and subscription items) flow back through the `emitFrame`
+    /// callback.
+    #[wasm_bindgen(js_name = receiveFromProduct)]
+    pub async fn receive_from_product(&self, frame: Vec<u8>) -> Result<(), JsValue> {
+        if self.inner.disposed.get() {
+            return Ok(());
+        }
+
+        let message = ProtocolMessage::decode(&mut &*frame)
+            .map_err(|err| JsValue::from_str(&format!("invalid frame: {err}")))?;
+
+        let transport: Arc<dyn Transport> = self.inner.transport.clone();
+        self.inner.core.dispatch(message, transport).await;
+        Ok(())
+    }
+
+    /// Tear down the bridge. Invokes the JS-side `dispose` callback so the
+    /// host can drop its end of the wiring.
+    pub fn dispose(&self) -> Result<(), JsValue> {
+        if self.inner.disposing.replace(true) {
+            return Ok(());
+        }
+
+        self.inner.transport.disposed.store(true, Ordering::Relaxed);
+
+        let result = self.inner.dispose_fn.call0(&JsValue::NULL).map(|_| ());
+
+        self.inner.disposed.set(true);
+        self.inner.disposing.set(false);
+        result
+    }
+
+    /// Push the currently-paired session into the core. Called by the
+    /// host shell whenever the user pairs / unpairs. `pubkey` must be
+    /// exactly 32 bytes (sr25519 root public key); usernames may be
+    /// null / undefined when the identity record carries no value.
+    #[wasm_bindgen(js_name = setActiveSession)]
+    pub fn set_active_session(
+        &self,
+        pubkey: Vec<u8>,
+        lite_username: Option<String>,
+        full_username: Option<String>,
+    ) -> Result<(), JsValue> {
+        let public_key: [u8; 32] = pubkey.as_slice().try_into().map_err(|_| {
+            JsValue::from_str(&format!(
+                "setActiveSession: pubkey must be 32 bytes, got {}",
+                pubkey.len()
+            ))
+        })?;
+        self.inner
+            .core
+            .session_state()
+            .set_session(crate::host_logic::session::SessionInfo {
+                public_key,
+                lite_username,
+                full_username,
+            });
+        Ok(())
+    }
+
+    /// Drop the currently-paired session.
+    #[wasm_bindgen(js_name = clearActiveSession)]
+    pub fn clear_active_session(&self) {
+        self.inner.core.session_state().clear_session();
+    }
+}
diff --git a/rust/crates/truapi-server/src/ws_bridge.rs b/rust/crates/truapi-server/src/ws_bridge.rs
new file mode 100644
index 00000000..015935d6
--- /dev/null
+++ b/rust/crates/truapi-server/src/ws_bridge.rs
@@ -0,0 +1,632 @@
+//! Localhost WebSocket bridge. Binds to `127.0.0.1:<port>`, gates each
+//! connection on a session token, and relays SCALE-encoded
+//! [`ProtocolMessage`] frames into a [`TrUApiCore`].
+//!
+//! Feature-gated (`ws-bridge`) so wasm32 and no-tokio build paths stay lean.
+//!
+//! The bridge owns a `tokio` runtime spawned at [`WsBridge::start`] time and
+//! shuts down both the accept loop and the runtime when the handle is dropped
+//! or [`WsBridge::stop`] is called.
+//!
+//! Security model: the listener binds to `127.0.0.1` only, and every
+//! connection must present the per-session 256-bit token (`?t=<token>`,
+//! drawn from the OS CSPRNG) before the WebSocket upgrade completes. The token
+//! is the sole authentication gate and is compared in constant time. It is
+//! handed only to the host's embedded WebView, so the bridge does not also pin
+//! the `Origin` header (the WebView's origin is not known a priori). Inbound
+//! messages are size-capped, and the per-connection outbound queue and the
+//! total connection count are bounded to contain a misbehaving local peer.
+
+use std::io;
+use std::net::SocketAddr;
+use std::sync::{Arc, Mutex};
+use std::thread;
+
+use futures::{SinkExt, StreamExt};
+use parity_scale_codec::{Decode, Encode};
+use rand::RngCore;
+use tokio::net::TcpListener;
+use tokio::sync::{mpsc, oneshot};
+use tokio::task::LocalSet;
+use tokio_tungstenite::tungstenite::Message as WsMessage;
+use tokio_tungstenite::tungstenite::handshake::server::{ErrorResponse, Request, Response};
+use tokio_tungstenite::tungstenite::http::{Response as HttpResponse, StatusCode};
+use tokio_tungstenite::tungstenite::protocol::CloseFrame;
+use tokio_tungstenite::tungstenite::protocol::WebSocketConfig;
+use tokio_tungstenite::tungstenite::protocol::frame::coding::CloseCode;
+
+use crate::{ProtocolMessage, TrUApiCore, Transport};
+
+/// Maximum simultaneous connections the bridge will service. The product uses
+/// a single connection; the cap bounds resource use from a buggy or hostile
+/// local peer opening many sockets.
+const MAX_WS_BRIDGE_CONNECTIONS: usize = 32;
+
+/// Bound on the per-connection outbound frame queue. A peer that stops reading
+/// cannot make the core buffer responses without limit; once the queue fills
+/// the connection is treated as closed.
+const OUTBOUND_QUEUE_CAP: usize = 4096;
+
+/// Ceiling on a single inbound WebSocket message / frame. `ProtocolMessage`
+/// frames on this SCALE control channel are small; the cap prevents a
+/// memory-amplification DoS well below tungstenite's 64 MiB default.
+const MAX_WS_MESSAGE_BYTES: usize = 8 << 20;
+
+/// Per-session descriptor returned to the host: product uses `port + token`
+/// to build its WebSocket URL (e.g. `ws://127.0.0.1:<port>/?t=<token>`).
+#[derive(Clone, Debug, uniffi::Record)]
+pub struct WsBridgeEndpoint {
+    /// Localhost port the bridge is listening on.
+    pub port: u16,
+    /// Session token; the connecting client must supply this as the
+    /// `?t=<token>` query parameter to be accepted.
+    pub token: String,
+}
+
+/// Failure modes returned from host-facing `start_ws_bridge` wrappers.
+#[derive(Debug, thiserror::Error, uniffi::Error)]
+#[uniffi(flat_error)]
+pub enum WsBridgeStartError {
+    /// A bridge is already running for this host.
+    #[error("ws bridge already running")]
+    AlreadyRunning,
+    /// Anything else (bind failure, runtime spin-up failure, ...).
+    #[error("ws bridge start failed: {0}")]
+    Io(String),
+}
+
+impl From<io::Error> for WsBridgeStartError {
+    fn from(err: io::Error) -> Self {
+        if err.kind() == io::ErrorKind::AlreadyExists {
+            WsBridgeStartError::AlreadyRunning
+        } else {
+            WsBridgeStartError::Io(err.to_string())
+        }
+    }
+}
+
+/// Logger callback shape used by the bridge for lifecycle events. The
+/// Android and iOS wrappers adapt their per-platform callback interfaces to
+/// this platform-neutral shape.
+pub type BridgeLogger = Arc<dyn Fn(&str, &str) + Send + Sync>;
+
+/// Running bridge handle. Drop or call [`WsBridge::stop`] to shut down.
+///
+/// The bridge owns a dedicated OS thread that runs a `tokio` current-thread
+/// runtime + `LocalSet`. Using `spawn_local` is required because the
+/// dispatcher's per-method futures are `LocalBoxFuture` (the truapi trait
+/// uses `async fn`, whose auto-generated futures are not `Send`).
+pub struct WsBridge {
+    shutdown: Option<oneshot::Sender<()>>,
+    thread: Option<thread::JoinHandle<()>>,
+}
+
+impl WsBridge {
+    /// Bind a localhost listener and start the accept loop on a dedicated
+    /// OS thread. Returns the [`WsBridgeEndpoint`] descriptor the host
+    /// hands to the product alongside the bridge handle.
+    pub fn start(
+        bind_port: u16,
+        core: Arc<TrUApiCore>,
+        logger: BridgeLogger,
+    ) -> io::Result<(Self, WsBridgeEndpoint)> {
+        let mut token_bytes = [0u8; 32];
+        rand::thread_rng().fill_bytes(&mut token_bytes);
+        let token = hex::encode(token_bytes);
+
+        // Bind synchronously so we can surface bind errors back to the
+        // caller and discover the actual port the OS handed back. The
+        // listener is registered with tokio inside the worker thread
+        // because a `tokio::net::TcpListener` is bound to the runtime that
+        // created it.
+        let std_listener =
+            std::net::TcpListener::bind(SocketAddr::from(([127, 0, 0, 1], bind_port)))?;
+        std_listener.set_nonblocking(true)?;
+        let port = std_listener.local_addr()?.port();
+
+        let (shutdown_tx, shutdown_rx) = oneshot::channel::<()>();
+        let (ready_tx, ready_rx) = std::sync::mpsc::channel::<io::Result<()>>();
+        let accept_token = token.clone();
+        let accept_logger = logger.clone();
+        let worker_logger = logger.clone();
+        let thread = thread::Builder::new()
+            .name("truapi-ws-bridge".to_string())
+            .spawn(move || {
+                let rt = match tokio::runtime::Builder::new_current_thread()
+                    .enable_all()
+                    .build()
+                {
+                    Ok(rt) => rt,
+                    Err(err) => {
+                        let _ = ready_tx.send(Err(io::Error::other(err.to_string())));
+                        return;
+                    }
+                };
+                let local = LocalSet::new();
+                let listener_setup = rt.block_on(async { TcpListener::from_std(std_listener) });
+                let listener = match listener_setup {
+                    Ok(listener) => {
+                        let _ = ready_tx.send(Ok(()));
+                        listener
+                    }
+                    Err(err) => {
+                        let _ = ready_tx.send(Err(err));
+                        return;
+                    }
+                };
+                local.block_on(
+                    &rt,
+                    accept_loop(listener, core, accept_token, accept_logger, shutdown_rx),
+                );
+                worker_logger("truapi.ws_bridge.worker_exit", "worker thread exiting");
+            })?;
+
+        // Block until the worker thread reports the listener is registered
+        // with its runtime, so the caller knows the bridge is ready to
+        // accept connections by the time `start` returns.
+        match ready_rx.recv() {
+            Ok(Ok(())) => {}
+            Ok(Err(err)) => return Err(err),
+            Err(err) => return Err(io::Error::other(err.to_string())),
+        }
+
+        logger(
+            "truapi.ws_bridge.started",
+            &format!("port={port} token_len={}", token.len()),
+        );
+
+        Ok((
+            Self {
+                shutdown: Some(shutdown_tx),
+                thread: Some(thread),
+            },
+            WsBridgeEndpoint { port, token },
+        ))
+    }
+
+    /// Signal the accept loop to exit and join the worker thread.
+    pub fn stop(&mut self) {
+        if let Some(tx) = self.shutdown.take() {
+            let _ = tx.send(());
+        }
+        if let Some(handle) = self.thread.take() {
+            let _ = handle.join();
+        }
+    }
+}
+
+impl Drop for WsBridge {
+    fn drop(&mut self) {
+        self.stop();
+    }
+}
+
+async fn accept_loop(
+    listener: TcpListener,
+    core: Arc<TrUApiCore>,
+    expected_token: String,
+    logger: BridgeLogger,
+    mut shutdown: oneshot::Receiver<()>,
+) {
+    let mut handles: Vec<tokio::task::JoinHandle<()>> = Vec::new();
+    loop {
+        tokio::select! {
+            _ = &mut shutdown => {
+                logger("truapi.ws_bridge.shutdown", "accept loop exiting");
+                for h in &handles {
+                    h.abort();
+                }
+                break;
+            }
+            accepted = listener.accept() => {
+                let (stream, peer) = match accepted {
+                    Ok(pair) => pair,
+                    Err(err) => {
+                        logger("truapi.ws_bridge.accept_error", &err.to_string());
+                        continue;
+                    }
+                };
+                handles.retain(|h| !h.is_finished());
+                if handles.len() >= MAX_WS_BRIDGE_CONNECTIONS {
+                    logger("truapi.ws_bridge.connection_limit", &peer.to_string());
+                    drop(stream);
+                    continue;
+                }
+                let core = core.clone();
+                let logger = logger.clone();
+                let expected = expected_token.clone();
+                handles.push(tokio::task::spawn_local(async move {
+                    handle_connection(stream, peer, core, expected, logger).await;
+                }));
+            }
+        }
+    }
+}
+
+// `clippy::result_large_err` fires on the handshake callback because
+// tokio-tungstenite's `ErrorResponse` type carries the full HTTP response
+// (~136 bytes). The closure signature is dictated by tokio-tungstenite's
+// API, so the lint can only be silenced at the call site.
+#[allow(clippy::result_large_err)]
+async fn handle_connection(
+    stream: tokio::net::TcpStream,
+    peer: SocketAddr,
+    core: Arc<TrUApiCore>,
+    expected_token: String,
+    logger: BridgeLogger,
+) {
+    let auth_logger = logger.clone();
+    let callback = |req: &Request, resp: Response| -> Result<Response, ErrorResponse> {
+        if path_token_matches(
+            req.uri().path_and_query().map(|p| p.as_str()),
+            &expected_token,
+        ) {
+            Ok(resp)
+        } else {
+            auth_logger("truapi.ws_bridge.reject_unauthorized", &peer.to_string());
+            let mut err: ErrorResponse = HttpResponse::new(Some("invalid token".to_string()));
+            *err.status_mut() = StatusCode::UNAUTHORIZED;
+            Err(err)
+        }
+    };
+
+    // Cap inbound message/frame size so a peer cannot force the runtime to
+    // buffer up to tungstenite's 64 MiB default on this small control channel.
+    let config = WebSocketConfig {
+        max_message_size: Some(MAX_WS_MESSAGE_BYTES),
+        max_frame_size: Some(MAX_WS_MESSAGE_BYTES),
+        ..Default::default()
+    };
+    let ws = match tokio_tungstenite::accept_hdr_async_with_config(stream, callback, Some(config))
+        .await
+    {
+        Ok(ws) => ws,
+        Err(err) => {
+            logger("truapi.ws_bridge.handshake_error", &err.to_string());
+            return;
+        }
+    };
+
+    logger("truapi.ws_bridge.connection_open", &peer.to_string());
+    let (mut sink, mut source) = ws.split();
+    let (out_tx, mut out_rx) = mpsc::channel::<Vec<u8>>(OUTBOUND_QUEUE_CAP);
+    let transport: Arc<dyn Transport> = Arc::new(WsTransport::new(out_tx));
+
+    let pump_logger = logger.clone();
+    let pump = tokio::task::spawn_local(async move {
+        while let Some(bytes) = out_rx.recv().await {
+            if let Err(err) = sink.send(WsMessage::Binary(bytes)).await {
+                pump_logger("truapi.ws_bridge.send_error", &err.to_string());
+                break;
+            }
+        }
+        let _ = sink
+            .send(WsMessage::Close(Some(CloseFrame {
+                code: CloseCode::Normal,
+                reason: "bridge closing".into(),
+            })))
+            .await;
+        let _ = sink.close().await;
+    });
+
+    while let Some(frame) = source.next().await {
+        match frame {
+            Ok(WsMessage::Binary(bytes)) => {
+                let message = match ProtocolMessage::decode(&mut &*bytes) {
+                    Ok(m) => m,
+                    Err(err) => {
+                        logger("truapi.ws_bridge.decode_error", &err.to_string());
+                        continue;
+                    }
+                };
+                core.dispatch(message, transport.clone()).await;
+            }
+            Ok(WsMessage::Text(_)) => {
+                logger("truapi.ws_bridge.text_frame_ignored", "");
+            }
+            Ok(WsMessage::Close(_)) => break,
+            Ok(_) => {}
+            Err(err) => {
+                logger("truapi.ws_bridge.read_error", &err.to_string());
+                break;
+            }
+        }
+    }
+
+    drop(transport);
+    let _ = pump.await;
+    logger("truapi.ws_bridge.connection_closed", &peer.to_string());
+}
+
+fn path_token_matches(path_and_query: Option<&str>, expected: &str) -> bool {
+    let Some(raw) = path_and_query else {
+        return false;
+    };
+    let query = match raw.find('?') {
+        Some(idx) => &raw[idx + 1..],
+        None => return false,
+    };
+    for pair in query.split('&') {
+        let (key, value) = match pair.split_once('=') {
+            Some(kv) => kv,
+            None => continue,
+        };
+        if key == "t" && constant_time_eq(value.as_bytes(), expected.as_bytes()) {
+            return true;
+        }
+    }
+    false
+}
+
+/// Constant-time byte-slice equality, used for the session-token check so a
+/// local peer cannot recover the token via early-exit comparison timing. The
+/// token length is fixed and public, so a length mismatch may short-circuit;
+/// only the value comparison must be constant time.
+fn constant_time_eq(a: &[u8], b: &[u8]) -> bool {
+    if a.len() != b.len() {
+        return false;
+    }
+    let mut diff = 0u8;
+    for (x, y) in a.iter().zip(b.iter()) {
+        diff |= x ^ y;
+    }
+    diff == 0
+}
+
+struct WsTransport {
+    outbound: mpsc::Sender<Vec<u8>>,
+    closed: Mutex<bool>,
+}
+
+impl WsTransport {
+    fn new(outbound: mpsc::Sender<Vec<u8>>) -> Self {
+        Self {
+            outbound,
+            closed: Mutex::new(false),
+        }
+    }
+}
+
+impl Transport for WsTransport {
+    fn send(&self, message: ProtocolMessage) {
+        if *self.closed.lock().unwrap() {
+            return;
+        }
+        // Non-blocking: a full queue means the peer stopped reading, so the
+        // connection is treated as closed rather than buffering without bound.
+        if self.outbound.try_send(message.encode()).is_err() {
+            *self.closed.lock().unwrap() = true;
+        }
+    }
+
+    fn on_message(
+        &self,
+        _handler: Box<dyn Fn(ProtocolMessage) + Send + Sync>,
+    ) -> Box<dyn FnOnce()> {
+        Box::new(|| {})
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use futures::stream::{self, BoxStream};
+    use parity_scale_codec::Encode;
+    use truapi::v01;
+    use truapi::versioned::system::{HostFeatureSupportedRequest, HostFeatureSupportedResponse};
+    use truapi_platform::{
+        ChainProvider, Features, JsonRpcConnection, Navigation, Notifications, Permissions, Storage,
+    };
+
+    use crate::frame::{FrameKind, Payload, compose_action};
+
+    struct StubPlatform;
+
+    impl Storage for StubPlatform {
+        async fn read(
+            &self,
+            _key: String,
+        ) -> Result<Option<Vec<u8>>, v01::HostLocalStorageReadError> {
+            Ok(None)
+        }
+        async fn write(
+            &self,
+            _key: String,
+            _value: Vec<u8>,
+        ) -> Result<(), v01::HostLocalStorageReadError> {
+            Ok(())
+        }
+        async fn clear(&self, _key: String) -> Result<(), v01::HostLocalStorageReadError> {
+            Ok(())
+        }
+    }
+
+    impl Navigation for StubPlatform {
+        async fn navigate_to(&self, _url: String) -> Result<(), v01::HostNavigateToError> {
+            Ok(())
+        }
+    }
+
+    impl Notifications for StubPlatform {
+        async fn push_notification(
+            &self,
+            _notification: v01::HostPushNotificationRequest,
+        ) -> Result<(), v01::GenericError> {
+            Ok(())
+        }
+    }
+
+    impl Permissions for StubPlatform {
+        async fn device_permission(
+            &self,
+            _request: v01::HostDevicePermissionRequest,
+        ) -> Result<v01::HostDevicePermissionResponse, v01::GenericError> {
+            Ok(v01::HostDevicePermissionResponse { granted: true })
+        }
+        async fn remote_permission(
+            &self,
+            _request: v01::RemotePermissionRequest,
+        ) -> Result<v01::RemotePermissionResponse, v01::GenericError> {
+            Ok(v01::RemotePermissionResponse { granted: true })
+        }
+    }
+
+    impl Features for StubPlatform {
+        async fn feature_supported(
+            &self,
+            request: HostFeatureSupportedRequest,
+        ) -> Result<HostFeatureSupportedResponse, v01::GenericError> {
+            let HostFeatureSupportedRequest::V1(_) = request;
+            Ok(HostFeatureSupportedResponse::V1(
+                v01::HostFeatureSupportedResponse { supported: true },
+            ))
+        }
+    }
+
+    struct DeadConnection;
+    impl JsonRpcConnection for DeadConnection {
+        fn send(&self, _request: String) {}
+        fn responses(&self) -> BoxStream<'static, String> {
+            Box::pin(stream::empty())
+        }
+    }
+
+    impl ChainProvider for StubPlatform {
+        async fn connect(
+            &self,
+            _genesis_hash: Vec<u8>,
+        ) -> Result<Box<dyn JsonRpcConnection>, v01::GenericError> {
+            Ok(Box::new(DeadConnection))
+        }
+    }
+
+    #[test]
+    fn path_token_matches_exact() {
+        assert!(path_token_matches(Some("/?t=abc"), "abc"));
+        assert!(path_token_matches(Some("/?foo=1&t=abc"), "abc"));
+        assert!(!path_token_matches(Some("/?t=other"), "abc"));
+        assert!(!path_token_matches(Some("/?token=abc"), "abc"));
+        assert!(!path_token_matches(Some("/"), "abc"));
+        assert!(!path_token_matches(None, "abc"));
+    }
+
+    /// Spin the bridge up on `127.0.0.1:0`, dial it with a real
+    /// `tokio-tungstenite` client, send a known SCALE frame, and verify
+    /// the bridge echoes the SCALE-encoded `feature_supported` response.
+    #[test]
+    fn round_trip_feature_supported_through_bridge() {
+        let core = Arc::new(TrUApiCore::from_platform(
+            Arc::new(StubPlatform),
+            crate::subscription::thread_per_subscription_spawner(),
+        ));
+        let logger: BridgeLogger = Arc::new(|_, _| {});
+        let (mut bridge, endpoint) = WsBridge::start(0, core, logger).expect("start bridge");
+        let url = format!("ws://127.0.0.1:{}/?t={}", endpoint.port, endpoint.token);
+
+        // Use a fresh `tokio` runtime on the test thread so we don't fight
+        // the bridge's runtime, which lives on a different worker thread.
+        let rt = tokio::runtime::Builder::new_current_thread()
+            .enable_all()
+            .build()
+            .expect("test runtime");
+
+        let response_bytes = rt.block_on(async {
+            let (mut ws, _) = tokio_tungstenite::connect_async(&url).await.expect("dial");
+
+            let request_frame = ProtocolMessage {
+                request_id: "p:1".into(),
+                payload: Payload {
+                    tag: compose_action("system_feature_supported", FrameKind::Request),
+                    value: HostFeatureSupportedRequest::V1(
+                        v01::HostFeatureSupportedRequest::Chain {
+                            genesis_hash: vec![0u8; 32],
+                        },
+                    )
+                    .encode(),
+                },
+            };
+            ws.send(WsMessage::Binary(request_frame.encode()))
+                .await
+                .expect("send");
+
+            // Block until the bridge replies with the response frame.
+            loop {
+                match ws.next().await {
+                    Some(Ok(WsMessage::Binary(bytes))) => break bytes,
+                    Some(Ok(_)) => continue,
+                    Some(Err(err)) => panic!("ws error: {err}"),
+                    None => panic!("connection closed before response"),
+                }
+            }
+        });
+
+        let response = ProtocolMessage::decode(&mut &response_bytes[..]).expect("decode response");
+        assert_eq!(response.request_id, "p:1");
+        assert_eq!(
+            response.payload.tag,
+            compose_action("system_feature_supported", FrameKind::Response),
+        );
+        // Wire payload is `Result<Ok, Err>`-shaped:
+        // [Ok disc=0x00][V1 variant 0x00][supported=1]
+        assert_eq!(response.payload.value, vec![0x00, 0x00, 0x01]);
+
+        bridge.stop();
+    }
+
+    /// A handshake with the wrong `?t=` token must be rejected at the HTTP
+    /// upgrade step with a 401, not silently dropped.
+    #[test]
+    fn wrong_token_is_rejected_at_handshake() {
+        let core = Arc::new(TrUApiCore::from_platform(
+            Arc::new(StubPlatform),
+            crate::subscription::thread_per_subscription_spawner(),
+        ));
+        let logger: BridgeLogger = Arc::new(|_, _| {});
+        let (mut bridge, endpoint) = WsBridge::start(0, core, logger).expect("start bridge");
+        let url = format!("ws://127.0.0.1:{}/?t=bogus", endpoint.port);
+
+        let rt = tokio::runtime::Builder::new_current_thread()
+            .enable_all()
+            .build()
+            .expect("test runtime");
+
+        let err = rt
+            .block_on(async { tokio_tungstenite::connect_async(&url).await })
+            .expect_err("connection must be refused");
+        let msg = format!("{err}");
+        assert!(
+            msg.contains("401") || msg.to_lowercase().contains("unauthorized"),
+            "expected 401/unauthorized rejection, got: {msg}",
+        );
+
+        bridge.stop();
+    }
+
+    /// Dropping a `WsBridge` handle without an explicit `stop()` must still
+    /// shut the worker thread down cleanly. `Drop::drop` calls `stop`, and
+    /// a second `stop` (from drop after the test's explicit one) is a
+    /// no-op.
+    #[test]
+    fn drop_calls_stop_idempotently() {
+        let core = Arc::new(TrUApiCore::from_platform(
+            Arc::new(StubPlatform),
+            crate::subscription::thread_per_subscription_spawner(),
+        ));
+        let logger: BridgeLogger = Arc::new(|_, _| {});
+        let (bridge, _endpoint) = WsBridge::start(0, core, logger).expect("start bridge");
+        // Drop the bridge; the worker thread must join via Drop.
+        drop(bridge);
+
+        // Build a second bridge and explicitly stop twice. The second
+        // call has no shutdown sender and no thread handle left to join,
+        // so it returns without panicking.
+        let core = Arc::new(TrUApiCore::from_platform(
+            Arc::new(StubPlatform),
+            crate::subscription::thread_per_subscription_spawner(),
+        ));
+        let logger: BridgeLogger = Arc::new(|_, _| {});
+        let (mut bridge, _endpoint) = WsBridge::start(0, core, logger).expect("start bridge");
+        bridge.stop();
+        bridge.stop();
+    }
+}
diff --git a/rust/crates/truapi-server/tests/golden_frame.rs b/rust/crates/truapi-server/tests/golden_frame.rs
new file mode 100644
index 00000000..4c4588ea
--- /dev/null
+++ b/rust/crates/truapi-server/tests/golden_frame.rs
@@ -0,0 +1,52 @@
+//! Binary golden-frame regression test.
+//!
+//! Loads `tests/snapshots/golden-account-get.bin` (the captured raw bytes
+//! of an `account_get_account_request` frame) and asserts that
+//! `ProtocolMessage::decode` produces the expected in-memory shape.
+//!
+//! The frame encodes:
+//!   requestId = "p:1"
+//!   payload   = account_get_account_request,
+//!               inner = HostAccountGetRequest::V1(("foo", 0u32))
+//!
+//! On the wire (14 bytes):
+//!   [0c 70 3a 31]                      requestId = compact-len(3) + "p:1"
+//!   [16]                               discriminant 22 = account_get_account_request
+//!   [00]                               versioned wrapper variant V1
+//!   [0c 66 6f 6f]                      "foo"
+//!   [00 00 00 00]                      u32 = 0
+//!
+//! If this test fails after a wire-protocol change, regenerate the file
+//! deliberately and re-check the change against the wire table.
+
+use parity_scale_codec::{Decode, Encode};
+use truapi_server::{Payload, ProtocolMessage};
+
+const GOLDEN: &[u8] = include_bytes!("snapshots/golden-account-get.bin");
+
+#[test]
+fn golden_account_get_frame_decodes_to_expected_message() {
+    let decoded = ProtocolMessage::decode(&mut &GOLDEN[..])
+        .expect("golden frame must decode with the current wire codec");
+
+    let mut expected_inner = Vec::new();
+    expected_inner.push(0x00u8); // V1 variant
+    "foo".to_string().encode_to(&mut expected_inner);
+    0u32.encode_to(&mut expected_inner);
+
+    let expected = ProtocolMessage {
+        request_id: "p:1".to_string(),
+        payload: Payload {
+            tag: "account_get_account_request".to_string(),
+            value: expected_inner,
+        },
+    };
+    assert_eq!(decoded, expected);
+}
+
+#[test]
+fn golden_account_get_frame_round_trips() {
+    // Encoding the in-memory shape must reproduce the on-disk bytes exactly.
+    let decoded = ProtocolMessage::decode(&mut &GOLDEN[..]).expect("decode");
+    assert_eq!(decoded.encode(), GOLDEN);
+}
diff --git a/rust/crates/truapi-server/tests/snapshots/golden-account-get.bin b/rust/crates/truapi-server/tests/snapshots/golden-account-get.bin
new file mode 100644
index 00000000..c66be11b
Binary files /dev/null and b/rust/crates/truapi-server/tests/snapshots/golden-account-get.bin differ
diff --git a/rust/crates/truapi-server/tests/wire_result_shape.rs b/rust/crates/truapi-server/tests/wire_result_shape.rs
new file mode 100644
index 00000000..881d8e29
--- /dev/null
+++ b/rust/crates/truapi-server/tests/wire_result_shape.rs
@@ -0,0 +1,301 @@
+//! Result-wire-shape regression test.
+//!
+//! The TS host/client codec expects every request response to be
+//! `Result<Ok, Err>`-shaped on the wire (one leading discriminant byte
+//! followed by the SCALE-encoded value). This test stands up a
+//! `TrUApiCore::from_platform` with a `StubPlatform` whose `Features`
+//! impl returns `Ok(supported = true)` and asserts:
+//!
+//! - A `system_feature_supported_request` produces a response whose
+//!   payload begins with `0x00` (Ok), followed by the encoded
+//!   `HostFeatureSupportedResponse::V1(true)`.
+//! - A `local_storage_read_request` whose stub returns
+//!   `Err(HostLocalStorageReadError::Full)` produces a response whose
+//!   payload begins with `0x01` (Err), followed by the encoded
+//!   `CallError::Domain(Full)`.
+//!
+//! Both halves prove the wire layout stays in lockstep with the TS
+//! `S.Result(ok, err)` codec.
+
+use std::sync::Arc;
+
+use futures::stream::{self, BoxStream};
+use parity_scale_codec::{Decode, Encode};
+
+use truapi::v01;
+use truapi::versioned::system::{HostFeatureSupportedRequest, HostFeatureSupportedResponse};
+
+use truapi_platform::{
+    ChainProvider, Features, JsonRpcConnection, Navigation, Notifications, Permissions, Storage,
+};
+
+use truapi_server::{FrameKind, Payload, ProtocolMessage, TrUApiCore, compose_action};
+
+struct StubPlatform;
+
+impl Storage for StubPlatform {
+    async fn read(&self, _key: String) -> Result<Option<Vec<u8>>, v01::HostLocalStorageReadError> {
+        // Drive the error-path test: return `Full` so we can assert the
+        // wire-Err discriminant precedes the SCALE-encoded `CallError::Domain(Full)`.
+        Err(v01::HostLocalStorageReadError::Full)
+    }
+    async fn write(
+        &self,
+        _key: String,
+        _value: Vec<u8>,
+    ) -> Result<(), v01::HostLocalStorageReadError> {
+        Ok(())
+    }
+    async fn clear(&self, _key: String) -> Result<(), v01::HostLocalStorageReadError> {
+        Ok(())
+    }
+}
+
+impl Navigation for StubPlatform {
+    async fn navigate_to(&self, _url: String) -> Result<(), v01::HostNavigateToError> {
+        Ok(())
+    }
+}
+
+impl Notifications for StubPlatform {
+    async fn push_notification(
+        &self,
+        _notification: v01::HostPushNotificationRequest,
+    ) -> Result<(), v01::GenericError> {
+        Ok(())
+    }
+}
+
+impl Permissions for StubPlatform {
+    async fn device_permission(
+        &self,
+        _request: v01::HostDevicePermissionRequest,
+    ) -> Result<v01::HostDevicePermissionResponse, v01::GenericError> {
+        Ok(v01::HostDevicePermissionResponse { granted: true })
+    }
+    async fn remote_permission(
+        &self,
+        _request: v01::RemotePermissionRequest,
+    ) -> Result<v01::RemotePermissionResponse, v01::GenericError> {
+        Ok(v01::RemotePermissionResponse { granted: true })
+    }
+}
+
+impl Features for StubPlatform {
+    async fn feature_supported(
+        &self,
+        _request: HostFeatureSupportedRequest,
+    ) -> Result<HostFeatureSupportedResponse, v01::GenericError> {
+        Ok(HostFeatureSupportedResponse::V1(
+            v01::HostFeatureSupportedResponse { supported: true },
+        ))
+    }
+}
+
+struct DeadConnection;
+impl JsonRpcConnection for DeadConnection {
+    fn send(&self, _request: String) {}
+    fn responses(&self) -> BoxStream<'static, String> {
+        Box::pin(stream::empty())
+    }
+}
+
+impl ChainProvider for StubPlatform {
+    async fn connect(
+        &self,
+        _genesis_hash: Vec<u8>,
+    ) -> Result<Box<dyn JsonRpcConnection>, v01::GenericError> {
+        Ok(Box::new(DeadConnection))
+    }
+}
+
+fn dispatch(core: &TrUApiCore, frame: ProtocolMessage) -> ProtocolMessage {
+    let encoded = frame.encode();
+    let response_bytes = core
+        .receive_from_product(&encoded)
+        .expect("dispatcher emitted a response frame");
+    ProtocolMessage::decode(&mut &response_bytes[..]).expect("decode response")
+}
+
+#[test]
+fn feature_supported_ok_response_uses_ok_discriminant() {
+    let core = TrUApiCore::from_platform(
+        Arc::new(StubPlatform),
+        truapi_server::subscription::thread_per_subscription_spawner(),
+    );
+    let request = HostFeatureSupportedRequest::V1(v01::HostFeatureSupportedRequest::Chain {
+        genesis_hash: vec![0u8; 32],
+    });
+    let frame = ProtocolMessage {
+        request_id: "p:1".into(),
+        payload: Payload {
+            tag: compose_action("system_feature_supported", FrameKind::Request),
+            value: request.encode(),
+        },
+    };
+    let response = dispatch(&core, frame);
+    assert_eq!(response.request_id, "p:1");
+    assert_eq!(
+        response.payload.tag,
+        compose_action("system_feature_supported", FrameKind::Response),
+    );
+
+    // Wire payload: [Ok disc=0x00][encoded versioned response]
+    let mut expected = vec![0x00u8];
+    HostFeatureSupportedResponse::V1(v01::HostFeatureSupportedResponse { supported: true })
+        .encode_to(&mut expected);
+    assert_eq!(response.payload.value, expected);
+    // The Result-disc byte is unambiguously 0x00 for Ok.
+    assert_eq!(response.payload.value.first(), Some(&0x00));
+}
+
+#[test]
+fn local_storage_read_err_response_uses_err_discriminant() {
+    let core = TrUApiCore::from_platform(
+        Arc::new(StubPlatform),
+        truapi_server::subscription::thread_per_subscription_spawner(),
+    );
+    let request = truapi::versioned::local_storage::HostLocalStorageReadRequest::V1(
+        v01::HostLocalStorageReadRequest {
+            key: "missing".to_string(),
+        },
+    );
+    let frame = ProtocolMessage {
+        request_id: "p:2".into(),
+        payload: Payload {
+            tag: compose_action("local_storage_read", FrameKind::Request),
+            value: request.encode(),
+        },
+    };
+    let response = dispatch(&core, frame);
+    assert_eq!(response.request_id, "p:2");
+    assert_eq!(
+        response.payload.tag,
+        compose_action("local_storage_read", FrameKind::Response),
+    );
+
+    // Wire payload: `[Err disc=0x01][CallError::Domain variant=0x00][encoded
+    // domain error]`. Build the expected bytes from the typed value the runtime
+    // wraps (the stub returns `Full`) rather than a hand-written literal, so a
+    // reorder of any domain enum variant is caught instead of silently passing.
+    let domain = truapi::versioned::local_storage::HostLocalStorageReadError::V1(
+        v01::HostLocalStorageReadError::Full,
+    );
+    let mut expected = vec![0x01u8, 0x00u8];
+    domain.encode_to(&mut expected);
+    assert_eq!(response.payload.value, expected);
+    assert_eq!(response.payload.value.first(), Some(&0x01));
+}
+
+fn make_core() -> TrUApiCore {
+    TrUApiCore::from_platform(
+        Arc::new(StubPlatform),
+        truapi_server::subscription::thread_per_subscription_spawner(),
+    )
+}
+
+/// Untrusted product input that is not a decodable frame must be dropped
+/// (return `None`), never panic. Exercises the decode-failure boundary in
+/// `receive_from_product` that the happy-path tests above bypass.
+#[test]
+fn malformed_frames_are_dropped_without_panic() {
+    let core = make_core();
+
+    // Empty input and arbitrary garbage.
+    assert!(core.receive_from_product(&[]).is_none());
+    assert!(
+        core.receive_from_product(&[0xff, 0xff, 0xff, 0xff])
+            .is_none()
+    );
+
+    // A truncated SCALE string header (claims length but no body).
+    assert!(
+        core.receive_from_product(&[200u8 << 2, 0x61, 0x62])
+            .is_none()
+    );
+
+    // A well-formed requestId envelope carrying an unknown wire discriminant.
+    let mut unknown_disc = Vec::new();
+    "p:1".to_string().encode_to(&mut unknown_disc);
+    unknown_disc.push(0xFA);
+    unknown_disc.extend_from_slice(&[0u8; 4]);
+    assert!(core.receive_from_product(&unknown_disc).is_none());
+}
+
+/// Drive a subscription through the encoded-frame boundary: `_start` yields
+/// the initial `_receive`, then `_stop` tears it down so a later session
+/// change produces no further frames. Covers the wire layer the in-crate
+/// `subscription.rs` unit tests bypass.
+#[test]
+fn subscription_start_receive_stop_through_wire_boundary() {
+    use std::sync::Mutex;
+    use std::time::{Duration, Instant};
+    use truapi_server::Transport;
+
+    #[derive(Default)]
+    struct RecordingTransport {
+        sent: Mutex<Vec<ProtocolMessage>>,
+    }
+    impl Transport for RecordingTransport {
+        fn send(&self, message: ProtocolMessage) {
+            self.sent.lock().unwrap().push(message);
+        }
+        fn on_message(
+            &self,
+            _handler: Box<dyn Fn(ProtocolMessage) + Send + Sync>,
+        ) -> Box<dyn FnOnce()> {
+            Box::new(|| {})
+        }
+    }
+
+    let core = make_core();
+    let transport = Arc::new(RecordingTransport::default());
+    let dyn_transport: Arc<dyn Transport> = transport.clone();
+
+    let method = "account_connection_status_subscribe";
+    let start = ProtocolMessage {
+        request_id: "p:1".into(),
+        payload: Payload {
+            tag: compose_action(method, FrameKind::Start),
+            value: Vec::new(),
+        },
+    };
+    futures::executor::block_on(core.dispatch(start, dyn_transport.clone()));
+
+    // Wait for the initial `_receive` item (Disconnected).
+    let deadline = Instant::now() + Duration::from_secs(2);
+    while transport.sent.lock().unwrap().is_empty() {
+        assert!(Instant::now() < deadline, "no initial _receive frame");
+        std::thread::sleep(Duration::from_millis(10));
+    }
+    assert_eq!(
+        transport.sent.lock().unwrap()[0].payload.tag,
+        compose_action(method, FrameKind::Receive),
+    );
+
+    // Stop the subscription, then push a session change. A live subscription
+    // would emit a Connected `_receive`; a stopped one must stay silent.
+    let stop = ProtocolMessage {
+        request_id: "p:1".into(),
+        payload: Payload {
+            tag: compose_action(method, FrameKind::Stop),
+            value: Vec::new(),
+        },
+    };
+    futures::executor::block_on(core.dispatch(stop, dyn_transport));
+    std::thread::sleep(Duration::from_millis(50));
+
+    core.session_state()
+        .set_session(truapi_server::host_logic::session::SessionInfo {
+            public_key: [7u8; 32],
+            lite_username: None,
+            full_username: None,
+        });
+    std::thread::sleep(Duration::from_millis(50));
+
+    assert_eq!(
+        transport.sent.lock().unwrap().len(),
+        1,
+        "stopped subscription must emit no further frames"
+    );
+}
diff --git a/rust/crates/truapi-server/tests/wire_table_ts_parity.rs b/rust/crates/truapi-server/tests/wire_table_ts_parity.rs
new file mode 100644
index 00000000..2692291f
--- /dev/null
+++ b/rust/crates/truapi-server/tests/wire_table_ts_parity.rs
@@ -0,0 +1,212 @@
+//! Cross-language parity check: the Rust `WIRE_TABLE` and the TS
+//! `wire-table.ts` must list the exact same `(method, request_id, response_id)`
+//! tuples in the same order. A drift here means a product built against one
+//! side will fail to decode frames produced by the other.
+//!
+//! Both files are auto-generated text artifacts of `truapi-codegen`; the
+//! parser is a small line scanner so the test runs as part of `cargo test`
+//! without any node/bun dependency.
+//!
+//! The TS file lives under `js/packages/truapi/src/generated/wire-table.ts`
+//! and is `.gitignore`d (regenerated by `scripts/codegen.sh`). When the
+//! generated file is absent, the test logs a skip notice and passes; once
+//! the TS codegen lands and the file is regenerated, the parity check
+//! becomes load-bearing automatically.
+
+use std::path::PathBuf;
+
+const RUST_TABLE: &str = include_str!("../src/generated/wire_table.rs");
+
+#[derive(Debug, PartialEq, Eq)]
+struct Row {
+    method: String,
+    request_or_start: u8,
+    response_or_receive: u8,
+    /// Subscription `_stop` / `_interrupt` ids; `None` for request methods.
+    stop: Option<u8>,
+    interrupt: Option<u8>,
+    is_subscription: bool,
+}
+
+/// Parse a wire id. A malformed id is a hard failure, never a silent `0`: a
+/// defensive fallback here would let a symmetric codegen-format change collapse
+/// both tables to `0`s and pass the parity check while real drift slipped by.
+fn parse_id(raw: &str, method: &str) -> u8 {
+    raw.trim_end_matches(',')
+        .trim()
+        .parse()
+        .unwrap_or_else(|_| panic!("unparseable wire id for `{method}`: {raw:?}"))
+}
+
+fn parse_rust(src: &str) -> Vec<Row> {
+    // Walks the `pub const WIRE_TABLE: &[WireEntry] = &[ ... ];` body and
+    // pulls out each `WireEntry { method: "x", kind: ... }`.
+    let mut out = Vec::new();
+    let mut iter = src.lines().peekable();
+    while let Some(line) = iter.next() {
+        let trimmed = line.trim();
+        let Some(rest) = trimmed.strip_prefix("method: \"") else {
+            continue;
+        };
+        let Some(end) = rest.find('"') else { continue };
+        let method = rest[..end].to_string();
+        let mut request_or_start = None;
+        let mut response_or_receive = None;
+        let mut stop = None;
+        let mut interrupt = None;
+        let mut is_subscription = false;
+        for inner in iter.by_ref() {
+            let t = inner.trim();
+            if t.contains("WireKind::Subscription") {
+                is_subscription = true;
+            }
+            if let Some(rest) = t
+                .strip_prefix("request_id: ")
+                .or_else(|| t.strip_prefix("start_id: "))
+            {
+                request_or_start = Some(parse_id(rest, &method));
+            }
+            if let Some(rest) = t
+                .strip_prefix("response_id: ")
+                .or_else(|| t.strip_prefix("receive_id: "))
+            {
+                response_or_receive = Some(parse_id(rest, &method));
+            }
+            if let Some(rest) = t.strip_prefix("stop_id: ") {
+                stop = Some(parse_id(rest, &method));
+            }
+            if let Some(rest) = t.strip_prefix("interrupt_id: ") {
+                interrupt = Some(parse_id(rest, &method));
+            }
+            if t == "},"
+                && let (Some(rs), Some(rr)) = (request_or_start, response_or_receive)
+            {
+                out.push(Row {
+                    method,
+                    request_or_start: rs,
+                    response_or_receive: rr,
+                    stop,
+                    interrupt,
+                    is_subscription,
+                });
+                break;
+            }
+        }
+    }
+    out
+}
+
+fn parse_ts(src: &str) -> Vec<Row> {
+    // The TS codegen emits one named `export const FOO_BAR = { ... }` per
+    // method. The const name is `SCREAMING_SNAKE_CASE` of the method name;
+    // we lowercase it to match the Rust `method:` strings.
+    let mut out = Vec::new();
+    let mut iter = src.lines().peekable();
+    while let Some(line) = iter.next() {
+        let trimmed = line.trim();
+        let Some(rest) = trimmed.strip_prefix("export const ") else {
+            continue;
+        };
+        let Some(name_end) = rest.find(|c: char| !(c.is_ascii_alphanumeric() || c == '_')) else {
+            continue;
+        };
+        let method = rest[..name_end].to_ascii_lowercase();
+        let mut request_or_start = None;
+        let mut response_or_receive = None;
+        let mut stop = None;
+        let mut interrupt = None;
+        let mut is_subscription = false;
+        for inner in iter.by_ref() {
+            let t = inner.trim();
+            if t.starts_with("start:") || t.contains("SubscriptionFrameIds") {
+                is_subscription = true;
+            }
+            if let Some(rest) = t
+                .strip_prefix("request: ")
+                .or_else(|| t.strip_prefix("start: "))
+            {
+                request_or_start = Some(parse_id(rest, &method));
+            }
+            if let Some(rest) = t
+                .strip_prefix("response: ")
+                .or_else(|| t.strip_prefix("receive: "))
+            {
+                response_or_receive = Some(parse_id(rest, &method));
+            }
+            if let Some(rest) = t.strip_prefix("stop: ") {
+                stop = Some(parse_id(rest, &method));
+            }
+            if let Some(rest) = t.strip_prefix("interrupt: ") {
+                interrupt = Some(parse_id(rest, &method));
+            }
+            if t.starts_with("} as const") || t == "}" {
+                if let (Some(rs), Some(rr)) = (request_or_start, response_or_receive) {
+                    out.push(Row {
+                        method,
+                        request_or_start: rs,
+                        response_or_receive: rr,
+                        stop,
+                        interrupt,
+                        is_subscription,
+                    });
+                }
+                break;
+            }
+        }
+    }
+    out
+}
+
+#[test]
+fn rust_and_ts_wire_tables_agree() {
+    let manifest = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
+    let ts_path = manifest
+        .join("../../../js/packages/truapi/src/generated/wire-table.ts")
+        .canonicalize();
+
+    let ts_path = match ts_path {
+        Ok(p) => p,
+        Err(_) => {
+            eprintln!(
+                "skipping wire-table parity check: TS wire-table.ts is not present \
+                 (run scripts/codegen.sh once the TS codegen is wired up)"
+            );
+            return;
+        }
+    };
+
+    let ts_src = match std::fs::read_to_string(&ts_path) {
+        Ok(s) => s,
+        Err(_) => {
+            eprintln!(
+                "skipping wire-table parity check: could not read {}",
+                ts_path.display()
+            );
+            return;
+        }
+    };
+
+    let rust_rows = parse_rust(RUST_TABLE);
+    let ts_rows = parse_ts(&ts_src);
+    // Lower bound pinned to the known table size so a parser/codegen regression
+    // that quietly shrinks both tables in lockstep cannot pass: `assert_eq!`
+    // alone is satisfied by two equal-but-truncated tables.
+    const MIN_EXPECTED_ROWS: usize = 60;
+    assert!(
+        rust_rows.len() >= MIN_EXPECTED_ROWS,
+        "rust parser produced {} entries (expected >= {MIN_EXPECTED_ROWS}); \
+         wire_table.rs format may have changed",
+        rust_rows.len()
+    );
+    assert!(
+        ts_rows.len() >= MIN_EXPECTED_ROWS,
+        "ts parser produced {} entries (expected >= {MIN_EXPECTED_ROWS}); \
+         wire-table.ts format may have changed",
+        ts_rows.len()
+    );
+    assert_eq!(
+        rust_rows, ts_rows,
+        "Rust WIRE_TABLE and TS wire-table.ts diverged. Regenerate both via \
+         `scripts/codegen.sh` so the codegen pipeline produces them in lockstep.",
+    );
+}
diff --git a/rust/crates/uniffi-bindgen-cli/Cargo.toml b/rust/crates/uniffi-bindgen-cli/Cargo.toml
new file mode 100644
index 00000000..c0b5904f
--- /dev/null
+++ b/rust/crates/uniffi-bindgen-cli/Cargo.toml
@@ -0,0 +1,13 @@
+[package]
+name = "uniffi-bindgen-cli"
+version = "0.1.0"
+edition = "2024"
+description = "Thin CLI wrapper around uniffi::uniffi_bindgen_main() for the TrUAPI workspace"
+license = "MIT"
+
+[[bin]]
+name = "uniffi-bindgen"
+path = "src/main.rs"
+
+[dependencies]
+uniffi = { version = "0.29.4", features = ["cli"] }
diff --git a/rust/crates/uniffi-bindgen-cli/README.md b/rust/crates/uniffi-bindgen-cli/README.md
new file mode 100644
index 00000000..2977e632
--- /dev/null
+++ b/rust/crates/uniffi-bindgen-cli/README.md
@@ -0,0 +1,27 @@
+# uniffi-bindgen-cli
+
+Thin CLI wrapper around `uniffi::uniffi_bindgen_main()` for generating native bindings (Swift and Kotlin) from UniFFI inputs in this workspace.
+
+This crate exists so TrUAPI's native host SDKs (`android`, `ios`) can regenerate bindings via workspace-local tooling rather than relying on a globally installed `uniffi-bindgen`.
+
+It does not add custom logic. It forwards directly into UniFFI's standard CLI entry point.
+
+## Usage
+
+```bash
+cargo run -p uniffi-bindgen-cli -- generate \
+  --library target/debug/libtruapi_server.so \
+  --language kotlin \
+  --out-dir android/truapi-host/src/main/kotlin/generated
+```
+
+Swift bindings land in `ios/truapi-host/Sources/TrUAPIHost/truapi_server.swift`
+with the C header / module map under
+`ios/truapi-host/Sources/truapi_serverFFI/include/`. The CLI emits all three
+files into one directory, then the modulemap is renamed to `module.modulemap`
+and colocated with the header so SwiftPM's `systemLibrary` target picks them up.
+The simplest path is `make uniffi` from the repo root; see
+[`ios/truapi-host/README.md`](../../../ios/truapi-host/README.md) for the exact
+generate-and-relocate steps.
+
+See `uniffi-bindgen --help` for the full CLI surface.
diff --git a/rust/crates/uniffi-bindgen-cli/src/main.rs b/rust/crates/uniffi-bindgen-cli/src/main.rs
new file mode 100644
index 00000000..fde8861e
--- /dev/null
+++ b/rust/crates/uniffi-bindgen-cli/src/main.rs
@@ -0,0 +1,9 @@
+//! Thin CLI wrapper around `uniffi::uniffi_bindgen_main()`.
+//!
+//! Lets the TrUAPI workspace regenerate Kotlin and Swift bindings from
+//! `truapi-server`'s UniFFI scaffolding without depending on a globally
+//! installed `uniffi-bindgen`.
+
+fn main() {
+    uniffi::uniffi_bindgen_main();
+}
diff --git a/scripts/codegen.sh b/scripts/codegen.sh
index 8584b0c4..e58237dc 100755
--- a/scripts/codegen.sh
+++ b/scripts/codegen.sh
@@ -1,13 +1,18 @@
 #!/usr/bin/env bash
-# Regenerate js/packages/truapi/src/generated/* from rust/crates/truapi.
+# Regenerate js/packages/truapi/src/generated/* from rust/crates/truapi
+# plus js/packages/truapi-host-wasm/src/generated/* from rust/crates/truapi-platform.
 #
 # Pipeline:
 #   1. cargo +nightly rustdoc -p truapi --output-format json -> target/doc/truapi.json
-#   2. cargo run -p truapi-codegen -- --input target/doc/truapi.json
+#   2. cargo +nightly rustdoc -p truapi-platform --output-format json -> target/doc/truapi_platform.json
+#   3. cargo run -p truapi-codegen -- --input target/doc/truapi.json
 #                                     --output js/packages/truapi/src/generated
 #                                     --playground-output js/packages/truapi/src/playground
 #                                     --client-examples-output playground/test/generated/examples
 #                                     --host-output js/packages/truapi-host/src/generated
+#                                     --platform-input target/doc/truapi_platform.json
+#                                     --platform-ts-output js/packages/truapi-host-wasm/src/generated
+#                                     --explorer-output js/packages/truapi/src/explorer
 #                                     --codec-version 1
 #
 # The client surface defaults to the latest wire version any versioned
@@ -22,12 +27,15 @@ ROOT="$(cd "$(dirname "$0")/.." && pwd)"
 cd "$ROOT"
 
 cargo +nightly rustdoc -p truapi -- -Z unstable-options --output-format json
+cargo +nightly rustdoc -p truapi-platform -- -Z unstable-options --output-format json
 cargo run -p truapi-codegen -- \
   --input target/doc/truapi.json \
   --output js/packages/truapi/src/generated \
   --playground-output js/packages/truapi/src/playground \
   --client-examples-output playground/test/generated/examples \
   --host-output js/packages/truapi-host/src/generated \
+  --platform-input target/doc/truapi_platform.json \
+  --platform-ts-output js/packages/truapi-host-wasm/src/generated \
   --explorer-output js/packages/truapi/src/explorer \
   --codec-version 1
 
@@ -38,7 +46,8 @@ npm exec --yes -- prettier --write \
   "js/packages/truapi/src/playground/**/*.ts" \
   "js/packages/truapi/src/explorer/**/*.ts" \
   "playground/test/generated/examples/**/*.ts" \
-  "js/packages/truapi-host/src/generated/**/*.ts"
+  "js/packages/truapi-host/src/generated/**/*.ts" \
+  "js/packages/truapi-host-wasm/src/generated/**/*.ts"
 
 # Rebuild dist/ so downstream consumers (in particular the playground,
 # which picks up @parity/truapi via yarn 1.x file: snapshot) see the
@@ -64,3 +73,4 @@ echo "Generated client at js/packages/truapi/src/generated/"
 echo "Generated playground metadata at js/packages/truapi/src/playground/codegen/"
 echo "Generated client examples at playground/test/generated/examples/"
 echo "Generated host package at js/packages/truapi-host/src/generated/"
+echo "Generated host-callbacks at js/packages/truapi-host-wasm/src/generated/"
diff --git a/settings.gradle.kts b/settings.gradle.kts
new file mode 100644
index 00000000..4fb21d1c
--- /dev/null
+++ b/settings.gradle.kts
@@ -0,0 +1,30 @@
+// Gradle workspace root for the Android host packages.
+//
+// Library modules live one level down at `android/<package>/`. Run
+// `gradle :<package>:publish*` from this directory; consumers integrate
+// via Maven coordinates, not by including a module from their own
+// settings.gradle.kts.
+//
+// The rest of the repo (Rust crates, JS packages, iOS Swift Package) does
+// not use Gradle.
+
+pluginManagement {
+    repositories {
+        gradlePluginPortal()
+        google()
+        mavenCentral()
+    }
+}
+
+dependencyResolutionManagement {
+    repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
+    repositories {
+        google()
+        mavenCentral()
+    }
+}
+
+rootProject.name = "truapi"
+
+include(":truapi-host")
+project(":truapi-host").projectDir = file("android/truapi-host")