diff --git a/Cargo.lock b/Cargo.lock
index 9bce3f0..034f52b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2,21 +2,47 @@
 # It is not intended for manual editing.
 version = 4
 
-[[package]]
-name = "addr2line"
-version = "0.24.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1"
-dependencies = [
- "gimli",
-]
-
 [[package]]
 name = "adler2"
 version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
 
+[[package]]
+name = "aead"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0"
+dependencies = [
+ "crypto-common 0.1.7",
+ "generic-array",
+]
+
+[[package]]
+name = "aes"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b169f7a6d4742236a0a00c541b845991d0ac43e546831af1249753ab4c3aa3a0"
+dependencies = [
+ "cfg-if",
+ "cipher",
+ "cpufeatures",
+]
+
+[[package]]
+name = "aes-gcm"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "831010a0f742e1209b3bcea8fab6a8e149051ba6099432c8cb2cc117dec3ead1"
+dependencies = [
+ "aead",
+ "aes",
+ "cipher",
+ "ctr",
+ "ghash",
+ "subtle",
+]
+
 [[package]]
 name = "ahash"
 version = "0.8.12"
@@ -24,6 +50,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
 dependencies = [
  "cfg-if",
+ "const-random",
  "getrandom 0.3.4",
  "once_cell",
  "version_check",
@@ -117,20 +144,14 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5f0e0fee31ef5ed1ba1316088939cea399010ed7731dba877ed44aeb407a75ea"
 
 [[package]]
-name = "ar_archive_writer"
-version = "0.5.1"
+name = "arc-swap"
+version = "1.8.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7eb93bbb63b9c227414f6eb3a0adfddca591a8ce1e9b60661bb08969b87e340b"
+checksum = "f9f3647c145568cec02c42054e07bdf9a5a698e15b466fb2341bfc393cd24aa5"
 dependencies = [
- "object 0.37.3",
+ "rustversion",
 ]
 
-[[package]]
-name = "arbitrary"
-version = "1.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3d036a3c4ab069c7b410a2ce876bd74808d2d0888a82667669f8e783a898bf1"
-
 [[package]]
 name = "arrayref"
 version = "0.3.9"
@@ -149,6 +170,45 @@ version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d92bec98840b8f03a5ff5413de5293bfcd8bf96467cf5452609f939ec6f5de16"
 
+[[package]]
+name = "asn1-rs"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56624a96882bb8c26d61312ae18cb45868e5a9992ea73c58e45c3101e56a1e60"
+dependencies = [
+ "asn1-rs-derive",
+ "asn1-rs-impl",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+ "thiserror 2.0.18",
+ "time",
+]
+
+[[package]]
+name = "asn1-rs-derive"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3109e49b1e4909e9db6515a30c633684d68cdeaa252f215214cb4fa1a5bfee2c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "asn1-rs-impl"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b18050c2cd6fe86c3a76584ef5e0baf286d038cda203eb6223df2cc413565f7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
 [[package]]
 name = "async-compat"
 version = "0.2.5"
@@ -205,7 +265,7 @@ version = "0.30.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "16e2cdb6d5ed835199484bb92bb8b3edd526effe995c61732580439c1a67e2e9"
 dependencies = [
- "base64 0.22.1",
+ "base64",
  "http",
  "log",
  "url",
@@ -239,6 +299,58 @@ dependencies = [
  "fs_extra",
 ]
 
+[[package]]
+name = "axum"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b52af3cb4058c895d37317bb27508dccc8e5f2d39454016b297bf4a400597b8"
+dependencies = [
+ "axum-core",
+ "bytes",
+ "form_urlencoded",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "itoa",
+ "matchit",
+ "memchr",
+ "mime",
+ "percent-encoding",
+ "pin-project-lite",
+ "serde_core",
+ "serde_json",
+ "serde_path_to_error",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "axum-core"
+version = "0.5.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08c78f31d7b1291f7ee735c1c6780ccde7785daae9a9206026862dab7d8792d1"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "http-body-util",
+ "mime",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
 [[package]]
 name = "backon"
 version = "1.6.0"
@@ -250,18 +362,18 @@ dependencies = [
  "tokio",
 ]
 
+[[package]]
+name = "base16ct"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c7f02d4ea65f2c1853089ffd8d2787bdbc63de2f0d29dedbcf8ccdfa0ccd4cf"
+
 [[package]]
 name = "base32"
 version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "022dfe9eb35f19ebbcb51e0b40a5ab759f46ad60cadf7297e0bd085afb50e076"
 
-[[package]]
-name = "base64"
-version = "0.21.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567"
-
 [[package]]
 name = "base64"
 version = "0.22.1"
@@ -274,6 +386,17 @@ version = "1.8.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
 
+[[package]]
+name = "bcrypt-pbkdf"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6aeac2e1fe888769f34f05ac343bbef98b14d1ffb292ab69d4608b3abc86f2a2"
+dependencies = [
+ "blowfish",
+ "pbkdf2",
+ "sha2 0.10.9",
+]
+
 [[package]]
 name = "bit-set"
 version = "0.8.0"
@@ -294,6 +417,9 @@ name = "bitflags"
 version = "2.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af"
+dependencies = [
+ "serde_core",
+]
 
 [[package]]
 name = "blake3"
@@ -327,6 +453,15 @@ dependencies = [
  "hybrid-array",
 ]
 
+[[package]]
+name = "block-padding"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8894febbff9f758034a5b8e12d87918f56dfc64a8e1fe757d65e29041538d93"
+dependencies = [
+ "generic-array",
+]
+
 [[package]]
 name = "block2"
 version = "0.6.2"
@@ -336,14 +471,30 @@ dependencies = [
  "objc2",
 ]
 
+[[package]]
+name = "blowfish"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e412e2cd0f2b2d93e02543ceae7917b3c70331573df19ee046bcbc35e45e87d7"
+dependencies = [
+ "byteorder",
+ "cipher",
+]
+
+[[package]]
+name = "bs58"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf88ba1141d185c399bee5288d850d63b8369520c1eafc32a0430b5b6c287bf4"
+dependencies = [
+ "tinyvec",
+]
+
 [[package]]
 name = "bumpalo"
 version = "3.19.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
-dependencies = [
- "allocator-api2",
-]
 
 [[package]]
 name = "byteorder"
@@ -378,6 +529,15 @@ dependencies = [
  "rustversion",
 ]
 
+[[package]]
+name = "cbc"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26b52a9543ae338f279b96b0b9fed9c8093744685043739079ce85cd58f289a6"
+dependencies = [
+ "cipher",
+]
+
 [[package]]
 name = "cc"
 version = "1.2.56"
@@ -408,6 +568,17 @@ version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
 
+[[package]]
+name = "chacha20"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3613f74bd2eac03dad61bd53dbe620703d4371614fe0bc3b9f04dd36fe4e818"
+dependencies = [
+ "cfg-if",
+ "cipher",
+ "cpufeatures",
+]
+
 [[package]]
 name = "choice"
 version = "0.0.2"
@@ -421,8 +592,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fac4744fb15ae8337dc853fee7fb3f4e48c0fbaa23d0afe49c447b4fab126118"
 dependencies = [
  "iana-time-zone",
+ "js-sys",
  "num-traits",
  "serde",
+ "wasm-bindgen",
  "windows-link",
 ]
 
@@ -432,21 +605,6 @@ version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6e4de3bc4ea267985becf712dc6d9eed8b04c953b3fcfb339ebc87acd9804901"
 
-[[package]]
-name = "ci-relay"
-version = "0.1.0"
-dependencies = [
- "clap",
- "hex",
- "hmac",
- "iroh",
- "serde_json",
- "sha2 0.10.9",
- "swactor-ci",
- "tiny_http",
- "tokio",
-]
-
 [[package]]
 name = "ciborium"
 version = "0.2.2"
@@ -474,6 +632,16 @@ dependencies = [
  "half",
 ]
 
+[[package]]
+name = "cipher"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773f3b9af64447d2ce9850330c473515014aa235e6a783b02db81ff39e4a3dad"
+dependencies = [
+ "crypto-common 0.1.7",
+ "inout",
+]
+
 [[package]]
 name = "clap"
 version = "4.5.58"
@@ -574,6 +742,26 @@ version = "0.10.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
 
+[[package]]
+name = "const-random"
+version = "0.1.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "87e00182fe74b066627d63b85fd550ac2998d4b0bd86bfed477a0ae4c7c71359"
+dependencies = [
+ "const-random-macro",
+]
+
+[[package]]
+name = "const-random-macro"
+version = "0.1.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9d839f2a20b0aee515dc581a6172f2321f96cab76c1a38a4c584a194955390e"
+dependencies = [
+ "getrandom 0.2.17",
+ "once_cell",
+ "tiny-keccak",
+]
+
 [[package]]
 name = "constant_time_eq"
 version = "0.4.2"
@@ -625,15 +813,6 @@ version = "0.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
-[[package]]
-name = "cpp_demangle"
-version = "0.4.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2bb79cb74d735044c972aae58ed0aaa9a837e85b01106a54c39e42e97f62253"
-dependencies = [
- "cfg-if",
-]
-
 [[package]]
 name = "cpufeatures"
 version = "0.2.17"
@@ -643,113 +822,6 @@ dependencies = [
  "libc",
 ]
 
-[[package]]
-name = "cranelift-bforest"
-version = "0.116.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e15d04a0ce86cb36ead88ad68cf693ffd6cda47052b9e0ac114bc47fd9cd23c4"
-dependencies = [
- "cranelift-entity",
-]
-
-[[package]]
-name = "cranelift-bitset"
-version = "0.116.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c6e3969a7ce267259ce244b7867c5d3bc9e65b0a87e81039588dfdeaede9f34"
-dependencies = [
- "serde",
- "serde_derive",
-]
-
-[[package]]
-name = "cranelift-codegen"
-version = "0.116.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2c22032c4cb42558371cf516bb47f26cdad1819d3475c133e93c49f50ebf304e"
-dependencies = [
- "bumpalo",
- "cranelift-bforest",
- "cranelift-bitset",
- "cranelift-codegen-meta",
- "cranelift-codegen-shared",
- "cranelift-control",
- "cranelift-entity",
- "cranelift-isle",
- "gimli",
- "hashbrown 0.14.5",
- "log",
- "regalloc2",
- "rustc-hash",
- "serde",
- "smallvec",
- "target-lexicon 0.13.5",
-]
-
-[[package]]
-name = "cranelift-codegen-meta"
-version = "0.116.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c904bc71c61b27fc57827f4a1379f29de64fe95653b620a3db77d59655eee0b8"
-dependencies = [
- "cranelift-codegen-shared",
-]
-
-[[package]]
-name = "cranelift-codegen-shared"
-version = "0.116.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "40180f5497572f644ce88c255480981ae2ec1d7bb4d8e0c0136a13b87a2f2ceb"
-
-[[package]]
-name = "cranelift-control"
-version = "0.116.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "26d132c6d0bd8a489563472afc171759da0707804a65ece7ceb15a8c6d7dd5ef"
-dependencies = [
- "arbitrary",
-]
-
-[[package]]
-name = "cranelift-entity"
-version = "0.116.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4b2d0d9618275474fbf679dd018ac6e009acbd6ae6850f6a67be33fb3b00b323"
-dependencies = [
- "cranelift-bitset",
- "serde",
- "serde_derive",
-]
-
-[[package]]
-name = "cranelift-frontend"
-version = "0.116.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fac41e16729107393174b0c9e3730fb072866100e1e64e80a1a963b2e484d57"
-dependencies = [
- "cranelift-codegen",
- "log",
- "smallvec",
- "target-lexicon 0.13.5",
-]
-
-[[package]]
-name = "cranelift-isle"
-version = "0.116.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1ca20d576e5070044d0a72a9effc2deacf4d6aa650403189d8ea50126483944d"
-
-[[package]]
-name = "cranelift-native"
-version = "0.116.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8dee82f3f1f2c4cba9177f1cc5e350fe98764379bcd29340caa7b01f85076c7"
-dependencies = [
- "cranelift-codegen",
- "libc",
- "target-lexicon 0.13.5",
-]
-
 [[package]]
 name = "crc32fast"
 version = "1.5.0"
@@ -875,6 +947,18 @@ version = "0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
 
+[[package]]
+name = "crypto-bigint"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0dc92fb57ca44df6db8059111ab3af99a63d5d0f8375d9972e319a379c6bab76"
+dependencies = [
+ "generic-array",
+ "rand_core 0.6.4",
+ "subtle",
+ "zeroize",
+]
+
 [[package]]
 name = "crypto-common"
 version = "0.1.7"
@@ -882,6 +966,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
 dependencies = [
  "generic-array",
+ "rand_core 0.6.4",
  "typenum",
 ]
 
@@ -894,6 +979,15 @@ dependencies = [
  "hybrid-array",
 ]
 
+[[package]]
+name = "ctr"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0369ee1ad671834580515889b80f2ea915f23b8be8d0daa4bbaf2ac5c7590835"
+dependencies = [
+ "cipher",
+]
+
 [[package]]
 name = "ctrlc"
 version = "3.5.1"
@@ -1019,6 +1113,25 @@ dependencies = [
  "syn",
 ]
 
+[[package]]
+name = "dashboard"
+version = "0.1.0"
+dependencies = [
+ "axum",
+ "clap",
+ "crossbeam-queue",
+ "crossterm",
+ "ctrlc",
+ "ratatui",
+ "serde",
+ "serde_json",
+ "swactor",
+ "tokio",
+ "tokio-stream",
+ "tracing",
+ "tracing-subscriber",
+]
+
 [[package]]
 name = "dashmap"
 version = "6.1.0"
@@ -1040,12 +1153,14 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea"
 
 [[package]]
-name = "debugid"
-version = "0.8.0"
+name = "delegate"
+version = "0.13.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bef552e6f588e446098f6ba40d89ac146c8c7b64aade83c051ee00bb5d2bc18d"
+checksum = "780eb241654bf097afb00fc5f054a09b687dad862e485fdcf8399bb056565370"
 dependencies = [
- "uuid",
+ "proc-macro2",
+ "quote",
+ "syn",
 ]
 
 [[package]]
@@ -1055,6 +1170,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
 dependencies = [
  "const-oid 0.9.6",
+ "pem-rfc7468 0.7.0",
  "zeroize",
 ]
 
@@ -1065,10 +1181,24 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "71fd89660b2dc699704064e59e9dba0147b903e85319429e131620d022be411b"
 dependencies = [
  "const-oid 0.10.2",
- "pem-rfc7468",
+ "pem-rfc7468 1.0.0",
  "zeroize",
 ]
 
+[[package]]
+name = "der-parser"
+version = "10.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07da5016415d5a3c4dd39b11ed26f915f52fc4e0dc197d87908bc916e51bc1a6"
+dependencies = [
+ "asn1-rs",
+ "displaydoc",
+ "nom",
+ "num-bigint",
+ "num-traits",
+ "rusticata-macros",
+]
+
 [[package]]
 name = "deranged"
 version = "0.5.6"
@@ -1132,6 +1262,15 @@ dependencies = [
  "unicode-xid",
 ]
 
+[[package]]
+name = "des"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ffdd80ce8ce993de27e9f063a444a4d53ce8e8db4c1f00cc03af5ad5a9867a1e"
+dependencies = [
+ "cipher",
+]
+
 [[package]]
 name = "diatomic-waker"
 version = "0.2.3"
@@ -1145,6 +1284,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
 dependencies = [
  "block-buffer 0.10.4",
+ "const-oid 0.9.6",
  "crypto-common 0.1.7",
  "subtle",
 ]
@@ -1160,27 +1300,6 @@ dependencies = [
  "crypto-common 0.2.0",
 ]
 
-[[package]]
-name = "directories-next"
-version = "2.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "339ee130d97a610ea5a5872d2bbb130fdf68884ff09d3028b81bec8a1ac23bbc"
-dependencies = [
- "cfg-if",
- "dirs-sys-next",
-]
-
-[[package]]
-name = "dirs-sys-next"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ebda144c4fe02d1f7ea1a7d9641b6fc6b580adcfa024ae48797ecdeb6825b4d"
-dependencies = [
- "libc",
- "redox_users",
- "winapi",
-]
-
 [[package]]
 name = "dispatch2"
 version = "0.3.0"
@@ -1210,11 +1329,12 @@ version = "0.1.0"
 dependencies = [
  "ed25519-dalek 2.2.0",
  "iroh",
+ "iroh-relay",
  "rand_core 0.6.4",
  "serde",
  "serde_json",
- "shared-types",
  "swactor",
+ "swactor-transport",
  "tokio",
 ]
 
@@ -1260,6 +1380,20 @@ version = "1.0.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
 
+[[package]]
+name = "ecdsa"
+version = "0.16.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee27f32b5c5292967d2d4a9d7f1e0b0aed2c15daded5a60300e4abb9d8020bca"
+dependencies = [
+ "der 0.7.10",
+ "digest 0.10.7",
+ "elliptic-curve",
+ "rfc6979",
+ "signature 2.2.0",
+ "spki 0.7.3",
+]
+
 [[package]]
 name = "ed25519"
 version = "2.2.3"
@@ -1318,6 +1452,27 @@ version = "1.15.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
 
+[[package]]
+name = "elliptic-curve"
+version = "0.13.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5e6043086bf7973472e0c7dff2142ea0b680d30e18d9cc40f267efbf222bd47"
+dependencies = [
+ "base16ct",
+ "crypto-bigint",
+ "digest 0.10.7",
+ "ff",
+ "generic-array",
+ "group",
+ "hkdf",
+ "pem-rfc7468 0.7.0",
+ "pkcs8 0.10.2",
+ "rand_core 0.6.4",
+ "sec1",
+ "subtle",
+ "zeroize",
+]
+
 [[package]]
 name = "embedded-io"
 version = "0.4.0"
@@ -1378,12 +1533,6 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
-[[package]]
-name = "fallible-iterator"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2acce4a10f12dc2fb14a218589d4f1f62ef011b2d0cc4b3cb1bba8e94da14649"
-
 [[package]]
 name = "fastbloom"
 version = "0.14.1"
@@ -1392,7 +1541,7 @@ checksum = "4e7f34442dbe69c60fe8eaf58a8cafff81a1f278816d8ab4db255b3bef4ac3c4"
 dependencies = [
  "getrandom 0.3.4",
  "libm",
- "rand",
+ "rand 0.9.2",
  "siphasher",
 ]
 
@@ -1402,6 +1551,16 @@ version = "2.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
 
+[[package]]
+name = "ff"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0b50bfb653653f9ca9095b427bed08ab8d75a137839d9ad64eb11810d5b6393"
+dependencies = [
+ "rand_core 0.6.4",
+ "subtle",
+]
+
 [[package]]
 name = "fiat-crypto"
 version = "0.2.9"
@@ -1430,6 +1589,18 @@ dependencies = [
  "miniz_oxide",
 ]
 
+[[package]]
+name = "flurry"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf5efcf77a4da27927d3ab0509dec5b0954bb3bc59da5a1de9e52642ebd4cdf9"
+dependencies = [
+ "ahash",
+ "num_cpus",
+ "parking_lot",
+ "seize 0.3.3",
+]
+
 [[package]]
 name = "fnv"
 version = "1.0.7"
@@ -1592,28 +1763,6 @@ dependencies = [
  "slab",
 ]
 
-[[package]]
-name = "fxhash"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c31b6d751ae2c7f11320402d34e41349dd1016f8d5d45e48c4312bc8625af50c"
-dependencies = [
- "byteorder",
-]
-
-[[package]]
-name = "fxprof-processed-profile"
-version = "0.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "27d12c0aed7f1e24276a241aadc4cb8ea9f83000f34bc062b7cc2d51e3b0fabd"
-dependencies = [
- "bitflags",
- "debugid",
- "fxhash",
- "serde",
- "serde_json",
-]
-
 [[package]]
 name = "generator"
 version = "0.8.8"
@@ -1626,7 +1775,7 @@ dependencies = [
  "log",
  "rustversion",
  "windows-link",
- "windows-result",
+ "windows-result 0.4.1",
 ]
 
 [[package]]
@@ -1637,6 +1786,7 @@ checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
 dependencies = [
  "typenum",
  "version_check",
+ "zeroize",
 ]
 
 [[package]]
@@ -1682,14 +1832,13 @@ dependencies = [
 ]
 
 [[package]]
-name = "gimli"
-version = "0.31.1"
+name = "ghash"
+version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f"
+checksum = "f0d8a4362ccb29cb0b265253fb0a2728f592895ee6854fd9bc13f2ffda266ff1"
 dependencies = [
- "fallible-iterator",
- "indexmap",
- "stable_deref_trait",
+ "opaque-debug",
+ "polyval",
 ]
 
 [[package]]
@@ -1704,6 +1853,17 @@ dependencies = [
  "wasm-bindgen",
 ]
 
+[[package]]
+name = "group"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0f9ef7462f7c099f518d754361858f86d8a07af53ba9af0fe635bbccb151a63"
+dependencies = [
+ "ff",
+ "rand_core 0.6.4",
+ "subtle",
+]
+
 [[package]]
 name = "h2"
 version = "0.4.13"
@@ -1748,9 +1908,6 @@ name = "hashbrown"
 version = "0.14.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
-dependencies = [
- "ahash",
-]
 
 [[package]]
 name = "hashbrown"
@@ -1761,7 +1918,6 @@ dependencies = [
  "allocator-api2",
  "equivalent",
  "foldhash 0.1.5",
- "serde",
 ]
 
 [[package]]
@@ -1802,10 +1958,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fc0fef456e4baa96da950455cd02c081ca953b141298e41db3fc7e36b1da849c"
 
 [[package]]
-name = "hex"
-version = "0.4.3"
+name = "hex-literal"
+version = "0.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+checksum = "6fe2267d4ed49bc07b63801559be28c718ea06c4738b7a03c94df7386d2cde46"
 
 [[package]]
 name = "hickory-proto"
@@ -1826,7 +1982,7 @@ dependencies = [
  "idna",
  "ipnet",
  "once_cell",
- "rand",
+ "rand 0.9.2",
  "ring",
  "rustls",
  "thiserror 2.0.18",
@@ -1850,7 +2006,7 @@ dependencies = [
  "moka",
  "once_cell",
  "parking_lot",
- "rand",
+ "rand 0.9.2",
  "resolv-conf",
  "rustls",
  "smallvec",
@@ -1860,6 +2016,15 @@ dependencies = [
  "tracing",
 ]
 
+[[package]]
+name = "hkdf"
+version = "0.12.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
+dependencies = [
+ "hmac",
+]
+
 [[package]]
 name = "hmac"
 version = "0.12.1"
@@ -1869,6 +2034,15 @@ dependencies = [
  "digest 0.10.7",
 ]
 
+[[package]]
+name = "home"
+version = "0.5.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc627f471c528ff0c4a49e1d5e60450c8f6461dd6d10ba9dcd3a61d3dff7728d"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
 [[package]]
 name = "http"
 version = "1.4.0"
@@ -1985,7 +2159,7 @@ version = "0.1.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
 dependencies = [
- "base64 0.22.1",
+ "base64",
  "bytes",
  "futures-channel",
  "futures-util",
@@ -2016,7 +2190,7 @@ dependencies = [
  "js-sys",
  "log",
  "wasm-bindgen",
- "windows-core",
+ "windows-core 0.62.2",
 ]
 
 [[package]]
@@ -2169,7 +2343,7 @@ dependencies = [
  "hyper",
  "hyper-util",
  "log",
- "rand",
+ "rand 0.9.2",
  "tokio",
  "url",
  "xmltree",
@@ -2196,6 +2370,16 @@ dependencies = [
  "rustversion",
 ]
 
+[[package]]
+name = "inout"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01"
+dependencies = [
+ "block-padding",
+ "generic-array",
+]
+
 [[package]]
 name = "instability"
 version = "0.3.11"
@@ -2209,6 +2393,19 @@ dependencies = [
  "syn",
 ]
 
+[[package]]
+name = "integration-tests"
+version = "0.1.0"
+dependencies = [
+ "dashboard",
+ "distribution",
+ "iroh",
+ "serde_json",
+ "swactor",
+ "swactor-datastore",
+ "ureq",
+]
+
 [[package]]
 name = "ipconfig"
 version = "0.3.2"
@@ -2270,7 +2467,7 @@ dependencies = [
  "pkarr",
  "pkcs8 0.11.0-rc.11",
  "portmapper",
- "rand",
+ "rand 0.9.2",
  "reqwest 0.12.28",
  "rustc-hash",
  "rustls",
@@ -2316,12 +2513,17 @@ version = "0.38.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c946095f060e6e59b9ff30cc26c75cdb758e7fb0cde8312c89e2144654989fcb"
 dependencies = [
+ "http-body-util",
+ "hyper",
+ "hyper-util",
  "iroh-metrics-derive",
  "itoa",
  "n0-error",
  "postcard",
+ "reqwest 0.12.28",
  "ryu",
  "serde",
+ "tokio",
  "tracing",
 ]
 
@@ -2371,11 +2573,12 @@ dependencies = [
  "getrandom 0.3.4",
  "identity-hash",
  "lru-slab",
- "rand",
+ "rand 0.9.2",
  "ring",
  "rustc-hash",
  "rustls",
  "rustls-pki-types",
+ "rustls-platform-verifier",
  "slab",
  "sorted-index-buffer",
  "thiserror 2.0.18",
@@ -2403,9 +2606,12 @@ version = "0.96.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cd2b63e654b9dec799a73372cdc79b529ca6c7248c0c8de7da78a02e3a46f03c"
 dependencies = [
+ "ahash",
  "blake3",
  "bytes",
  "cfg_aliases",
+ "clap",
+ "dashmap",
  "data-encoding",
  "derive_more",
  "getrandom 0.3.4",
@@ -2425,18 +2631,29 @@ dependencies = [
  "pin-project",
  "pkarr",
  "postcard",
- "rand",
+ "rand 0.9.2",
+ "rcgen",
+ "reloadable-state",
  "reqwest 0.12.28",
  "rustls",
+ "rustls-cert-file-reader",
+ "rustls-cert-reloadable-resolver",
  "rustls-pki-types",
  "serde",
  "serde_bytes",
+ "serde_json",
+ "sha1 0.11.0-rc.4",
+ "simdutf8",
  "strum 0.27.2",
+ "time",
  "tokio",
  "tokio-rustls",
+ "tokio-rustls-acme",
  "tokio-util",
  "tokio-websockets",
+ "toml 0.9.12+spec-1.1.0",
  "tracing",
+ "tracing-subscriber",
  "url",
  "vergen-gitcl",
  "webpki-roots 1.0.6",
@@ -2470,15 +2687,6 @@ dependencies = [
  "either",
 ]
 
-[[package]]
-name = "itertools"
-version = "0.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ba291022dbbd398a455acf126c1e341954079855bc60dfdda641363bd6922569"
-dependencies = [
- "either",
-]
-
 [[package]]
 name = "itertools"
 version = "0.13.0"
@@ -2494,26 +2702,6 @@ version = "1.0.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2"
 
-[[package]]
-name = "ittapi"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6b996fe614c41395cdaedf3cf408a9534851090959d90d54a535f675550b64b1"
-dependencies = [
- "anyhow",
- "ittapi-sys",
- "log",
-]
-
-[[package]]
-name = "ittapi-sys"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52f5385394064fa2c886205dba02598013ce83d3e92d33dbdc0c52fe0e7bf4fc"
-dependencies = [
- "cc",
-]
-
 [[package]]
 name = "jni"
 version = "0.21.1"
@@ -2561,12 +2749,9 @@ name = "lazy_static"
 version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
-
-[[package]]
-name = "leb128"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "884e2677b40cc8c339eaefcb701c32ef1fd2493d71118dc0ca4b6a736c93bd67"
+dependencies = [
+ "spin 0.9.8",
+]
 
 [[package]]
 name = "leb128fmt"
@@ -2586,16 +2771,6 @@ version = "0.2.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b6d2cec3eae94f9f509c767b45932f1ada8350c4bdb85af2fcab4a3c14807981"
 
-[[package]]
-name = "libredox"
-version = "0.1.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d0b95e02c851351f877147b7deea7b1afb1df71b63aa5f8270716e0c5720616"
-dependencies = [
- "bitflags",
- "libc",
-]
-
 [[package]]
 name = "linux-raw-sys"
 version = "0.4.15"
@@ -2620,20 +2795,6 @@ version = "1.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "11d3d7f243d5c5a8b9bb5d6dd2b1602c0cb0b9db1621bafc7ed66e35ff9fe092"
 
-[[package]]
-name = "local-runner"
-version = "0.1.0"
-dependencies = [
- "clap",
- "ctrlc",
- "iroh",
- "runtime-dashboard",
- "serde_json",
- "swactor",
- "swactor-ci",
- "tokio",
-]
-
 [[package]]
 name = "lock_api"
 version = "0.4.14"
@@ -2692,15 +2853,6 @@ version = "0.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d3d25b0e0b648a86960ac23b7ad4abb9717601dec6f66c165f5b037f3f03065f"
 
-[[package]]
-name = "mach2"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d640282b302c0bb0a2a8e0233ead9035e3bed871f0b7e81fe4a1ec829765db44"
-dependencies = [
- "libc",
-]
-
 [[package]]
 name = "matchers"
 version = "0.2.0"
@@ -2710,21 +2862,24 @@ dependencies = [
  "regex-automata",
 ]
 
+[[package]]
+name = "matchit"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47e1ffaa40ddd1f3ed91f717a33c8c0ee23fff369e3aa8772b9605cc1d22f4c3"
+
+[[package]]
+name = "md5"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "490cc448043f947bae3cbee9c203358d62dbee0db12107a74be5c30ccfd09771"
+
 [[package]]
 name = "memchr"
 version = "2.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
 
-[[package]]
-name = "memfd"
-version = "0.6.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ad38eb12aea514a0466ea40a80fd8cc83637065948eb4a426e4aa46261175227"
-dependencies = [
- "rustix 1.1.3",
-]
-
 [[package]]
 name = "memoffset"
 version = "0.9.1"
@@ -2740,6 +2895,12 @@ version = "0.3.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
 
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
 [[package]]
 name = "miniz_oxide"
 version = "0.8.9"
@@ -2962,8 +3123,8 @@ dependencies = [
  "tokio-util",
  "tracing",
  "web-sys",
- "windows",
- "windows-result",
+ "windows 0.62.2",
+ "windows-result 0.4.1",
  "wmi",
 ]
 
@@ -2979,12 +3140,40 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "node"
+version = "0.1.0"
+dependencies = [
+ "clap",
+ "ctrlc",
+ "dashboard",
+ "distribution",
+ "iroh",
+ "libc",
+ "serde",
+ "serde_json",
+ "swactor",
+ "swactor-datastore",
+ "swactor-transport",
+ "toml 0.8.23",
+]
+
 [[package]]
 name = "nohash-hasher"
 version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2bf50223579dc7cdcfb3bfcacf7069ff68243f8c363f62ffa99cf000a6b9c451"
 
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
 [[package]]
 name = "ntimestamp"
 version = "1.0.0"
@@ -3009,12 +3198,59 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "num-bigint"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5e44f723f1133c9deac646763579fdb3ac745e418f2a7af9cd0c431da1f20b9"
+dependencies = [
+ "num-integer",
+ "num-traits",
+ "rand 0.8.5",
+]
+
+[[package]]
+name = "num-bigint-dig"
+version = "0.8.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e661dda6640fad38e827a6d4a310ff4763082116fe217f279885c97f511bb0b7"
+dependencies = [
+ "lazy_static",
+ "libm",
+ "num-integer",
+ "num-iter",
+ "num-traits",
+ "rand 0.8.5",
+ "smallvec",
+ "zeroize",
+]
+
 [[package]]
 name = "num-conv"
 version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cf97ec579c3c42f953ef76dbf8d55ac91fb219dde70e49aa4a6b7d74e9919050"
 
+[[package]]
+name = "num-integer"
+version = "0.1.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-iter"
+version = "0.1.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1429034a0490724d0075ebb2bc9e875d6503c3cf69e235a8941aa757d83ef5bf"
+dependencies = [
+ "autocfg",
+ "num-integer",
+ "num-traits",
+]
+
 [[package]]
 name = "num-traits"
 version = "0.2.19"
@@ -3022,6 +3258,17 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
 dependencies = [
  "autocfg",
+ "libm",
+]
+
+[[package]]
+name = "num_cpus"
+version = "1.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91df4bbde75afed763b708b7eee1e8e7651e02d97f6d5dd763e89367e957b23b"
+dependencies = [
+ "hermit-abi",
+ "libc",
 ]
 
 [[package]]
@@ -3109,24 +3356,12 @@ dependencies = [
 ]
 
 [[package]]
-name = "object"
-version = "0.36.7"
+name = "oid-registry"
+version = "0.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87"
+checksum = "12f40cff3dde1b6087cc5d5f5d4d65712f34016a03ed60e9c08dcc392736b5b7"
 dependencies = [
- "crc32fast",
- "hashbrown 0.15.5",
- "indexmap",
- "memchr",
-]
-
-[[package]]
-name = "object"
-version = "0.37.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe"
-dependencies = [
- "memchr",
+ "asn1-rs",
 ]
 
 [[package]]
@@ -3151,6 +3386,12 @@ version = "11.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d6790f58c7ff633d8771f42965289203411a5e5c68388703c06e14f24770b41e"
 
+[[package]]
+name = "opaque-debug"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08d65885ee38876c4f86fa503fb49d7b507c2b62552df7c70b2fce627e06381"
+
 [[package]]
 name = "openssl"
 version = "0.10.75"
@@ -3195,6 +3436,59 @@ dependencies = [
  "vcpkg",
 ]
 
+[[package]]
+name = "p256"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9863ad85fa8f4460f9c48cb909d38a0d689dba1f6f6988a5e3e0d31071bcd4b"
+dependencies = [
+ "ecdsa",
+ "elliptic-curve",
+ "primeorder",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "p384"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe42f1670a52a47d448f14b6a5c61dd78fce51856e68edaa38f7ae3a46b8d6b6"
+dependencies = [
+ "ecdsa",
+ "elliptic-curve",
+ "primeorder",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "p521"
+version = "0.13.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fc9e2161f1f215afdfce23677034ae137bbd45016a880c2eb3ba8eb95f085b2"
+dependencies = [
+ "base16ct",
+ "ecdsa",
+ "elliptic-curve",
+ "primeorder",
+ "rand_core 0.6.4",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "pageant"
+version = "0.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "032d6201d2fb765158455ae0d5a510c016bb6da7232e5040e39e9c8db12b0afc"
+dependencies = [
+ "bytes",
+ "delegate",
+ "futures",
+ "rand 0.8.5",
+ "thiserror 1.0.69",
+ "tokio",
+ "windows 0.58.0",
+]
+
 [[package]]
 name = "papaya"
 version = "0.2.3"
@@ -3202,7 +3496,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f92dd0b07c53a0a0c764db2ace8c541dc47320dad97c2200c2a637ab9dd2328f"
 dependencies = [
  "equivalent",
- "seize",
+ "seize 0.5.1",
 ]
 
 [[package]]
@@ -3240,6 +3534,35 @@ version = "1.0.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
 
+[[package]]
+name = "pbkdf2"
+version = "0.12.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8ed6a7761f76e3b9f92dfb0a60a6a6477c61024b775147ff0973a02653abaf2"
+dependencies = [
+ "digest 0.10.7",
+ "hmac",
+]
+
+[[package]]
+name = "pem"
+version = "3.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d30c53c26bc5b31a98cd02d20f25a7c8567146caf63ed593a9d87b2775291be"
+dependencies = [
+ "base64",
+ "serde_core",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88b39c9bfcfc231068454382784bb460aae594343fb030d46e9f50a645418412"
+dependencies = [
+ "base64ct",
+]
+
 [[package]]
 name = "pem-rfc7468"
 version = "1.0.0"
@@ -3328,6 +3651,32 @@ dependencies = [
  "wasm-bindgen-futures",
 ]
 
+[[package]]
+name = "pkcs1"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8ffb9f10fa047879315e6625af03c164b16962a5368d724ed16323b68ace47f"
+dependencies = [
+ "der 0.7.10",
+ "pkcs8 0.10.2",
+ "spki 0.7.3",
+]
+
+[[package]]
+name = "pkcs5"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e847e2c91a18bfa887dd028ec33f2fe6f25db77db3619024764914affe8b69a6"
+dependencies = [
+ "aes",
+ "cbc",
+ "der 0.7.10",
+ "pbkdf2",
+ "scrypt",
+ "sha2 0.10.9",
+ "spki 0.7.3",
+]
+
 [[package]]
 name = "pkcs8"
 version = "0.10.2"
@@ -3335,6 +3684,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7"
 dependencies = [
  "der 0.7.10",
+ "pkcs5",
+ "rand_core 0.6.4",
  "spki 0.7.3",
 ]
 
@@ -3360,7 +3711,7 @@ version = "1.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "740ebea15c5d1428f910cd1a5f52cebf8d25006245ed8ade92702f4943d91e07"
 dependencies = [
- "base64 0.22.1",
+ "base64",
  "indexmap",
  "quick-xml",
  "serde",
@@ -3395,6 +3746,29 @@ dependencies = [
  "plotters-backend",
 ]
 
+[[package]]
+name = "poly1305"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8159bd90725d2df49889a078b54f4f79e87f1f8a8444194cdca81d38f5393abf"
+dependencies = [
+ "cpufeatures",
+ "opaque-debug",
+ "universal-hash",
+]
+
+[[package]]
+name = "polyval"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d1fe60d06143b2430aa532c94cfe9e29783047f06c0d7fd359a9a51b729fa25"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "opaque-debug",
+ "universal-hash",
+]
+
 [[package]]
 name = "portable-atomic"
 version = "1.13.1"
@@ -3407,7 +3781,7 @@ version = "0.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7d2a8825353ace3285138da3378b1e21860d60351942f7aa3b99b13b41f80318"
 dependencies = [
- "base64 0.22.1",
+ "base64",
  "bytes",
  "derive_more",
  "futures-lite",
@@ -3419,7 +3793,7 @@ dependencies = [
  "n0-error",
  "netwatch",
  "num_enum",
- "rand",
+ "rand 0.9.2",
  "serde",
  "smallvec",
  "socket2 0.6.2",
@@ -3490,6 +3864,15 @@ dependencies = [
  "syn",
 ]
 
+[[package]]
+name = "primeorder"
+version = "0.13.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "353e1ca18966c16d9deb1c69278edbc5f194139612772bd9537af60ac231e1e6"
+dependencies = [
+ "elliptic-curve",
+]
+
 [[package]]
 name = "proc-macro-crate"
 version = "3.4.0"
@@ -3518,8 +3901,8 @@ dependencies = [
  "bit-vec",
  "bitflags",
  "num-traits",
- "rand",
- "rand_chacha",
+ "rand 0.9.2",
+ "rand_chacha 0.9.0",
  "rand_xorshift",
  "regex-syntax",
  "rusty-fork",
@@ -3536,28 +3919,6 @@ dependencies = [
  "proptest",
 ]
 
-[[package]]
-name = "psm"
-version = "0.1.30"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3852766467df634d74f0b2d7819bf8dc483a0eb2e3b0f50f756f9cfe8b0d18d8"
-dependencies = [
- "ar_archive_writer",
- "cc",
-]
-
-[[package]]
-name = "pulley-interpreter"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "62d95f8575df49a2708398182f49a888cf9dc30210fb1fd2df87c889edcee75d"
-dependencies = [
- "cranelift-bitset",
- "log",
- "sptr",
- "wasmtime-math",
-]
-
 [[package]]
 name = "pyo3"
 version = "0.23.5"
@@ -3583,7 +3944,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "94f6cbe86ef3bf18998d9df6e0f3fc1050a8c5efa409bf712e661a4366e010fb"
 dependencies = [
  "once_cell",
- "target-lexicon 0.12.16",
+ "target-lexicon",
 ]
 
 [[package]]
@@ -3674,7 +4035,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.4",
  "lru-slab",
- "rand",
+ "rand 0.9.2",
  "ring",
  "rustc-hash",
  "rustls",
@@ -3715,16 +4076,37 @@ version = "5.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
 
+[[package]]
+name = "rand"
+version = "0.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+dependencies = [
+ "libc",
+ "rand_chacha 0.3.1",
+ "rand_core 0.6.4",
+]
+
 [[package]]
 name = "rand"
 version = "0.9.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
 dependencies = [
- "rand_chacha",
+ "rand_chacha 0.9.0",
  "rand_core 0.9.5",
 ]
 
+[[package]]
+name = "rand_chacha"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.6.4",
+]
+
 [[package]]
 name = "rand_chacha"
 version = "0.9.0"
@@ -3803,6 +4185,20 @@ dependencies = [
  "crossbeam-utils",
 ]
 
+[[package]]
+name = "rcgen"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10b99e0098aa4082912d4c649628623db6aba77335e4f4569ff5083a6448b32e"
+dependencies = [
+ "pem",
+ "ring",
+ "rustls-pki-types",
+ "time",
+ "x509-parser",
+ "yasna",
+]
+
 [[package]]
 name = "redox_syscall"
 version = "0.5.18"
@@ -3812,31 +4208,6 @@ dependencies = [
  "bitflags",
 ]
 
-[[package]]
-name = "redox_users"
-version = "0.4.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ba009ff324d1fc1b900bd1fdb31564febe58a8ccc8a6fdbb93b543d33b13ca43"
-dependencies = [
- "getrandom 0.2.17",
- "libredox",
- "thiserror 1.0.69",
-]
-
-[[package]]
-name = "regalloc2"
-version = "0.11.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc06e6b318142614e4a48bc725abbf08ff166694835c43c9dae5a9009704639a"
-dependencies = [
- "allocator-api2",
- "bumpalo",
- "hashbrown 0.15.5",
- "log",
- "rustc-hash",
- "smallvec",
-]
-
 [[package]]
 name = "regex"
 version = "1.12.3"
@@ -3866,13 +4237,30 @@ version = "0.8.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a96887878f22d7bad8a3b6dc5b7440e0ada9a245242924394987b21cf2210a4c"
 
+[[package]]
+name = "reloadable-core"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1dc20ac1418988b60072d783c9f68e28a173fb63493c127952f6face3b40c6e0"
+
+[[package]]
+name = "reloadable-state"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3853ef78d45b50f8b989896304a85239539d39b7f866a000e8846b9b72d74ce8"
+dependencies = [
+ "arc-swap",
+ "reloadable-core",
+ "tokio",
+]
+
 [[package]]
 name = "reqwest"
 version = "0.12.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
 dependencies = [
- "base64 0.22.1",
+ "base64",
  "bytes",
  "encoding_rs",
  "futures-channel",
@@ -3920,7 +4308,7 @@ version = "0.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ab3f43e3283ab1488b624b44b0e988d0acea0b3214e694730a055cb6b2efa801"
 dependencies = [
- "base64 0.22.1",
+ "base64",
  "bytes",
  "futures-core",
  "http",
@@ -3955,6 +4343,16 @@ version = "0.7.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1e061d1b48cb8d38042de4ae0a7a6401009d6143dc80d2e2d6f31f0bdd6470c7"
 
+[[package]]
+name = "rfc6979"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dd2a808d456c4a54e300a23e9f5a67e122c3024119acbfd73e3bf664491cb2"
+dependencies = [
+ "hmac",
+ "subtle",
+]
+
 [[package]]
 name = "ring"
 version = "0.17.14"
@@ -3970,30 +4368,163 @@ dependencies = [
 ]
 
 [[package]]
-name = "runtime-dashboard"
-version = "0.1.0"
+name = "rsa"
+version = "0.9.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8573f03f5883dcaebdfcf4725caa1ecb9c15b2ef50c43a07b816e06799bb12d"
 dependencies = [
- "clap",
- "crossbeam-queue",
- "crossterm",
- "ctrlc",
- "distribution",
- "iroh",
- "ratatui",
- "serde",
- "serde_json",
- "swactor",
- "swactor-ci",
- "tiny_http",
- "tracing",
- "tracing-subscriber",
+ "const-oid 0.9.6",
+ "digest 0.10.7",
+ "num-bigint-dig",
+ "num-integer",
+ "num-traits",
+ "pkcs1",
+ "pkcs8 0.10.2",
+ "rand_core 0.6.4",
+ "sha2 0.10.9",
+ "signature 2.2.0",
+ "spki 0.7.3",
+ "subtle",
+ "zeroize",
 ]
 
 [[package]]
-name = "rustc-demangle"
-version = "0.1.27"
+name = "russh"
+version = "0.46.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b50b8869d9fc858ce7266cce0194bd74df58b9d0e3f6df3a9fc8eb470d95c09d"
+checksum = "c536b90d8e2468d8dedc8de2369383c101325e23fffa3a30de713032862a11d4"
+dependencies = [
+ "aes",
+ "aes-gcm",
+ "async-trait",
+ "bitflags",
+ "byteorder",
+ "cbc",
+ "chacha20",
+ "ctr",
+ "curve25519-dalek 4.1.3",
+ "des",
+ "digest 0.10.7",
+ "elliptic-curve",
+ "flate2",
+ "futures",
+ "generic-array",
+ "hex-literal",
+ "hmac",
+ "log",
+ "num-bigint",
+ "once_cell",
+ "p256",
+ "p384",
+ "p521",
+ "poly1305",
+ "rand 0.8.5",
+ "rand_core 0.6.4",
+ "russh-cryptovec",
+ "russh-keys",
+ "russh-sftp",
+ "russh-util",
+ "sha1 0.10.6",
+ "sha2 0.10.9",
+ "ssh-encoding",
+ "ssh-key",
+ "subtle",
+ "thiserror 1.0.69",
+ "tokio",
+]
+
+[[package]]
+name = "russh-cryptovec"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fadd2c0ab350e21c66556f94ee06f766d8bdae3213857ba7610bfd8e10e51880"
+dependencies = [
+ "libc",
+ "winapi",
+]
+
+[[package]]
+name = "russh-keys"
+version = "0.46.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e3db166c8678c824627c2c46f619ed5ce4ae33f38a35403c62f6ab8f3985867"
+dependencies = [
+ "aes",
+ "async-trait",
+ "bcrypt-pbkdf",
+ "block-padding",
+ "byteorder",
+ "cbc",
+ "ctr",
+ "data-encoding",
+ "der 0.7.10",
+ "digest 0.10.7",
+ "ecdsa",
+ "ed25519-dalek 2.2.0",
+ "elliptic-curve",
+ "futures",
+ "getrandom 0.2.17",
+ "hmac",
+ "home",
+ "inout",
+ "log",
+ "md5",
+ "num-integer",
+ "p256",
+ "p384",
+ "p521",
+ "pageant",
+ "pbkdf2",
+ "pkcs1",
+ "pkcs5",
+ "pkcs8 0.10.2",
+ "rand 0.8.5",
+ "rand_core 0.6.4",
+ "rsa",
+ "russh-cryptovec",
+ "russh-util",
+ "sec1",
+ "serde",
+ "sha1 0.10.6",
+ "sha2 0.10.9",
+ "spki 0.7.3",
+ "ssh-encoding",
+ "ssh-key",
+ "thiserror 1.0.69",
+ "tokio",
+ "tokio-stream",
+ "typenum",
+ "zeroize",
+]
+
+[[package]]
+name = "russh-sftp"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3bb94393cafad0530145b8f626d8687f1ee1dedb93d7ba7740d6ae81868b13b5"
+dependencies = [
+ "bitflags",
+ "bytes",
+ "chrono",
+ "flurry",
+ "log",
+ "serde",
+ "thiserror 2.0.18",
+ "tokio",
+ "tokio-util",
+]
+
+[[package]]
+name = "russh-util"
+version = "0.46.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63aeb9d2b74f8f38befdc0c5172d5ffcf58f3d2ffcb423f3b6cdfe2c2d747b80"
+dependencies = [
+ "chrono",
+ "tokio",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+]
 
 [[package]]
 name = "rustc-hash"
@@ -4010,6 +4541,15 @@ dependencies = [
  "semver",
 ]
 
+[[package]]
+name = "rusticata-macros"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "faf0c4a6ece9950b9abdb62b1cfcf2a68b3b67a10ba445b3bb85be2a293d0632"
+dependencies = [
+ "nom",
+]
+
 [[package]]
 name = "rustix"
 version = "0.38.44"
@@ -4052,6 +4592,40 @@ dependencies = [
  "zeroize",
 ]
 
+[[package]]
+name = "rustls-cert-file-reader"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8bb47c2a50fdfdaf95b0ac8b12620fc327da1fd4adbb30d0c56d866b005873ff"
+dependencies = [
+ "rustls-cert-read",
+ "rustls-pki-types",
+ "thiserror 2.0.18",
+ "tokio",
+]
+
+[[package]]
+name = "rustls-cert-read"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd46e8c5ae4de3345c4786a83f99ec7aff287209b9e26fa883c473aeb28f19d5"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "rustls-cert-reloadable-resolver"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe1baa8a3a1f05eaa9fc55aed4342867f70e5c170ea3bfed1b38c51a4857c0c8"
+dependencies = [
+ "futures-util",
+ "reloadable-state",
+ "rustls",
+ "rustls-cert-read",
+ "thiserror 2.0.18",
+]
+
 [[package]]
 name = "rustls-native-certs"
 version = "0.8.3"
@@ -4137,6 +4711,15 @@ version = "1.0.23"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
 
+[[package]]
+name = "salsa20"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97a22f5af31f73a954c10289c93e8a50cc23d971e80ee446f1f6f7137a088213"
+dependencies = [
+ "cipher",
+]
+
 [[package]]
 name = "same-file"
 version = "1.0.6"
@@ -4167,6 +4750,31 @@ version = "1.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
 
+[[package]]
+name = "scrypt"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0516a385866c09368f0b5bcd1caff3366aace790fcd46e2bb032697bb172fd1f"
+dependencies = [
+ "pbkdf2",
+ "salsa20",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "sec1"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3e97a565f76233a6003f9f5c54be1d9c5bdfa3eccfb189469f11ec4901c47dc"
+dependencies = [
+ "base16ct",
+ "der 0.7.10",
+ "generic-array",
+ "pkcs8 0.10.2",
+ "subtle",
+ "zeroize",
+]
+
 [[package]]
 name = "security-framework"
 version = "3.6.0"
@@ -4190,6 +4798,12 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "seize"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "689224d06523904ebcc9b482c6a3f4f7fb396096645c4cd10c0d2ff7371a34d3"
+
 [[package]]
 name = "seize"
 version = "0.5.1"
@@ -4211,10 +4825,6 @@ name = "semver"
 version = "1.0.27"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
-dependencies = [
- "serde",
- "serde_core",
-]
 
 [[package]]
 name = "send_wrapper"
@@ -4275,6 +4885,17 @@ dependencies = [
  "zmij",
 ]
 
+[[package]]
+name = "serde_path_to_error"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10a9ff822e371bb5403e391ecd83e182e0e77ba7f6fe0160b795797109d1b457"
+dependencies = [
+ "itoa",
+ "serde",
+ "serde_core",
+]
+
 [[package]]
 name = "serde_spanned"
 version = "0.6.9"
@@ -4284,6 +4905,15 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "serde_spanned"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8bbf91e5a4d6315eee45e704372590b30e260ee83af6639d64557f51b067776"
+dependencies = [
+ "serde_core",
+]
+
 [[package]]
 name = "serde_urlencoded"
 version = "0.7.1"
@@ -4309,6 +4939,28 @@ dependencies = [
  "unsafe-libyaml",
 ]
 
+[[package]]
+name = "sha1"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha1"
+version = "0.11.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c777f0a122a53fddb0beb6e706771197000b8eb5c9f42b5b850f450ef48c788"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest 0.11.0-rc.10",
+]
+
 [[package]]
 name = "sha1_smol"
 version = "1.0.1"
@@ -4346,14 +4998,6 @@ dependencies = [
  "lazy_static",
 ]
 
-[[package]]
-name = "shared-types"
-version = "0.1.0"
-dependencies = [
- "blake3",
- "serde",
-]
-
 [[package]]
 name = "shlex"
 version = "1.3.0"
@@ -4397,6 +5041,7 @@ version = "2.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
 dependencies = [
+ "digest 0.10.7",
  "rand_core 0.6.4",
 ]
 
@@ -4438,9 +5083,8 @@ dependencies = [
  "serde_json",
  "simulation",
  "swactor",
- "swactor-ci",
  "tiny_http",
- "toml",
+ "toml 0.8.23",
 ]
 
 [[package]]
@@ -4460,9 +5104,6 @@ name = "smallvec"
 version = "1.15.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
-dependencies = [
- "serde",
-]
 
 [[package]]
 name = "socket2"
@@ -4537,10 +5178,55 @@ dependencies = [
 ]
 
 [[package]]
-name = "sptr"
-version = "0.3.2"
+name = "ssh-cipher"
+version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b9b39299b249ad65f3b7e96443bad61c02ca5cd3589f46cb6d610a0fd6c0d6a"
+checksum = "caac132742f0d33c3af65bfcde7f6aa8f62f0e991d80db99149eb9d44708784f"
+dependencies = [
+ "aes",
+ "aes-gcm",
+ "cbc",
+ "chacha20",
+ "cipher",
+ "ctr",
+ "poly1305",
+ "ssh-encoding",
+ "subtle",
+]
+
+[[package]]
+name = "ssh-encoding"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eb9242b9ef4108a78e8cd1a2c98e193ef372437f8c22be363075233321dd4a15"
+dependencies = [
+ "base64ct",
+ "pem-rfc7468 0.7.0",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "ssh-key"
+version = "0.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b86f5297f0f04d08cabaa0f6bff7cb6aec4d9c3b49d87990d63da9d9156a8c3"
+dependencies = [
+ "bcrypt-pbkdf",
+ "ed25519-dalek 2.2.0",
+ "num-bigint-dig",
+ "p256",
+ "p384",
+ "p521",
+ "rand_core 0.6.4",
+ "rsa",
+ "sec1",
+ "sha2 0.10.9",
+ "signature 2.2.0",
+ "ssh-cipher",
+ "ssh-encoding",
+ "subtle",
+ "zeroize",
+]
 
 [[package]]
 name = "stable_deref_trait"
@@ -4562,7 +5248,7 @@ dependencies = [
  "log",
  "nohash-hasher",
  "parking_lot",
- "rand",
+ "rand 0.9.2",
  "serde",
  "serde_json",
  "tiny_http",
@@ -4640,74 +5326,66 @@ dependencies = [
  "proptest",
  "proptest-state-machine",
  "serde",
- "swactor-std",
  "tracing",
  "web-time 0.2.4",
 ]
 
-[[package]]
-name = "swactor-bin-runner"
-version = "0.1.0"
-dependencies = [
- "proptest",
- "swactor",
- "swactor-std",
- "wasmtime",
- "wat",
-]
-
-[[package]]
-name = "swactor-ci"
-version = "0.1.0"
-dependencies = [
- "hex",
- "hmac",
- "serde",
- "serde_json",
- "serde_yaml",
- "sha2 0.10.9",
- "swactor",
- "tiny_http",
- "ureq",
-]
-
-[[package]]
-name = "swactor-crypto-wasm"
-version = "0.1.0"
-dependencies = [
- "ed25519-dalek 2.2.0",
-]
-
 [[package]]
 name = "swactor-datastore"
 version = "0.1.0"
 dependencies = [
  "blake3",
  "clap",
+ "crossbeam-queue",
  "ctrlc",
- "distribution",
+ "ed25519-dalek 2.2.0",
  "getrandom 0.2.17",
+ "iroh",
  "proptest",
  "proptest-state-machine",
- "runtime-dashboard",
+ "rand_core 0.6.4",
  "serde",
  "serde_json",
- "shared-types",
  "stateright",
  "swactor",
- "swactor-std",
  "tempfile",
  "tiny_http",
- "toml",
+ "tokio",
+ "toml 0.8.23",
  "ureq",
 ]
 
 [[package]]
-name = "swactor-std"
+name = "swactor-process"
 version = "0.1.0"
 dependencies = [
- "getrandom 0.2.17",
+ "async-trait",
+ "crossbeam-queue",
+ "libc",
+ "proptest",
+ "proptest-state-machine",
+ "russh",
+ "russh-keys",
+ "serde",
+ "serde_json",
+ "serde_yaml",
  "swactor",
+ "tokio",
+]
+
+[[package]]
+name = "swactor-transport"
+version = "0.1.0"
+dependencies = [
+ "bs58",
+ "ed25519-dalek 2.2.0",
+ "iroh",
+ "iroh-relay",
+ "rand_core 0.6.4",
+ "serde",
+ "serde_json",
+ "swactor",
+ "tokio",
 ]
 
 [[package]]
@@ -4774,12 +5452,6 @@ version = "0.12.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
 
-[[package]]
-name = "target-lexicon"
-version = "0.13.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
-
 [[package]]
 name = "tempfile"
 version = "3.25.0"
@@ -4793,15 +5465,6 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
-[[package]]
-name = "termcolor"
-version = "1.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06794f8f6c5c898b3275aebefa6b8a1cb24cd2c6c79397ab15774837a0bc5755"
-dependencies = [
- "winapi-util",
-]
-
 [[package]]
 name = "thiserror"
 version = "1.0.69"
@@ -4885,6 +5548,15 @@ dependencies = [
  "time-core",
 ]
 
+[[package]]
+name = "tiny-keccak"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c9d3793400a45f954c52e73d068316d76b6f4e36977e3fcebb13a2721e80237"
+dependencies = [
+ "crunchy",
+]
+
 [[package]]
 name = "tiny_http"
 version = "0.12.0"
@@ -4979,6 +5651,34 @@ dependencies = [
  "tokio",
 ]
 
+[[package]]
+name = "tokio-rustls-acme"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c31fcc374ec87d754358a5d0709ed1ab7671d51e0f70ddc3b17a11ac36604cfa"
+dependencies = [
+ "async-trait",
+ "base64",
+ "chrono",
+ "futures",
+ "log",
+ "num-bigint",
+ "pem",
+ "proc-macro2",
+ "rcgen",
+ "reqwest 0.12.28",
+ "ring",
+ "rustls",
+ "serde",
+ "serde_json",
+ "thiserror 2.0.18",
+ "time",
+ "tokio",
+ "tokio-rustls",
+ "webpki-roots 1.0.6",
+ "x509-parser",
+]
+
 [[package]]
 name = "tokio-stream"
 version = "0.1.18"
@@ -5011,14 +5711,14 @@ version = "0.12.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b1b6348ebfaaecd771cecb69e832961d277f59845d4220a584701f72728152b7"
 dependencies = [
- "base64 0.22.1",
+ "base64",
  "bytes",
  "futures-core",
  "futures-sink",
  "getrandom 0.3.4",
  "http",
  "httparse",
- "rand",
+ "rand 0.9.2",
  "ring",
  "rustls-pki-types",
  "simdutf8",
@@ -5034,11 +5734,26 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362"
 dependencies = [
  "serde",
- "serde_spanned",
+ "serde_spanned 0.6.9",
  "toml_datetime 0.6.11",
  "toml_edit 0.22.27",
 ]
 
+[[package]]
+name = "toml"
+version = "0.9.12+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf92845e79fc2e2def6a5d828f0801e29a2f8acc037becc5ab08595c7d5e9863"
+dependencies = [
+ "indexmap",
+ "serde_core",
+ "serde_spanned 1.0.4",
+ "toml_datetime 0.7.5+spec-1.1.0",
+ "toml_parser",
+ "toml_writer",
+ "winnow",
+]
+
 [[package]]
 name = "toml_datetime"
 version = "0.6.11"
@@ -5065,7 +5780,7 @@ checksum = "41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a"
 dependencies = [
  "indexmap",
  "serde",
- "serde_spanned",
+ "serde_spanned 0.6.9",
  "toml_datetime 0.6.11",
  "toml_write",
  "winnow",
@@ -5098,6 +5813,12 @@ version = "0.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5d99f8c9a7727884afe522e9bd5edbfc91a3312b36a77b5fb8926e4c31a41801"
 
+[[package]]
+name = "toml_writer"
+version = "1.0.6+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab16f14aed21ee8bfd8ec22513f7287cd4a91aa92e44edfe2c17ddd004e92607"
+
 [[package]]
 name = "tower"
 version = "0.5.3"
@@ -5111,6 +5832,7 @@ dependencies = [
  "tokio",
  "tower-layer",
  "tower-service",
+ "tracing",
 ]
 
 [[package]]
@@ -5205,17 +5927,6 @@ dependencies = [
  "tracing-log",
 ]
 
-[[package]]
-name = "trait-variant"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "70977707304198400eb4835a78f6a9f928bf41bba420deb8fdb175cd965d77a7"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
 [[package]]
 name = "try-lock"
 version = "0.2.5"
@@ -5281,6 +5992,16 @@ version = "0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7264e107f553ccae879d21fbea1d6724ac785e8c3bfc762137959b5802826ef3"
 
+[[package]]
+name = "universal-hash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc1de2c688dc15305988b563c3854064043356019f97a4b46276fe734c4f07ea"
+dependencies = [
+ "crypto-common 0.1.7",
+ "subtle",
+]
+
 [[package]]
 name = "unsafe-libyaml"
 version = "0.2.11"
@@ -5299,7 +6020,7 @@ version = "2.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "02d1a66277ed75f640d608235660df48c8e3c19f3b4edb6a263315626cc3c01d"
 dependencies = [
- "base64 0.22.1",
+ "base64",
  "flate2",
  "log",
  "once_cell",
@@ -5465,15 +6186,6 @@ dependencies = [
  "wit-bindgen",
 ]
 
-[[package]]
-name = "wasm"
-version = "0.1.0"
-dependencies = [
- "swactor",
- "swactor-std",
- "wasm-bindgen",
-]
-
 [[package]]
 name = "wasm-bindgen"
 version = "0.2.108"
@@ -5533,16 +6245,6 @@ dependencies = [
  "unicode-ident",
 ]
 
-[[package]]
-name = "wasm-encoder"
-version = "0.221.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc8444fe4920de80a4fe5ab564fff2ae58b6b73166b89751f8c6c93509da32e5"
-dependencies = [
- "leb128",
- "wasmparser 0.221.3",
-]
-
 [[package]]
 name = "wasm-encoder"
 version = "0.244.0"
@@ -5550,17 +6252,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
 dependencies = [
  "leb128fmt",
- "wasmparser 0.244.0",
-]
-
-[[package]]
-name = "wasm-encoder"
-version = "0.245.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f9dca005e69bf015e45577e415b9af8c67e8ee3c0e38b5b0add5aa92581ed5c"
-dependencies = [
- "leb128fmt",
- "wasmparser 0.245.1",
+ "wasmparser",
 ]
 
 [[package]]
@@ -5571,8 +6263,16 @@ checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
 dependencies = [
  "anyhow",
  "indexmap",
- "wasm-encoder 0.244.0",
- "wasmparser 0.244.0",
+ "wasm-encoder",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasm-runtime"
+version = "0.1.0"
+dependencies = [
+ "swactor",
+ "wasm-bindgen",
 ]
 
 [[package]]
@@ -5588,19 +6288,6 @@ dependencies = [
  "web-sys",
 ]
 
-[[package]]
-name = "wasmparser"
-version = "0.221.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d06bfa36ab3ac2be0dee563380147a5b81ba10dd8885d7fbbc9eb574be67d185"
-dependencies = [
- "bitflags",
- "hashbrown 0.15.5",
- "indexmap",
- "semver",
- "serde",
-]
-
 [[package]]
 name = "wasmparser"
 version = "0.244.0"
@@ -5613,303 +6300,6 @@ dependencies = [
  "semver",
 ]
 
-[[package]]
-name = "wasmparser"
-version = "0.245.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4f08c9adee0428b7bddf3890fc27e015ac4b761cc608c822667102b8bfd6995e"
-dependencies = [
- "bitflags",
- "indexmap",
- "semver",
-]
-
-[[package]]
-name = "wasmprinter"
-version = "0.221.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7343c42a97f2926c7819ff81b64012092ae954c5d83ddd30c9fcdefd97d0b283"
-dependencies = [
- "anyhow",
- "termcolor",
- "wasmparser 0.221.3",
-]
-
-[[package]]
-name = "wasmtime"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "11976a250672556d1c4c04c6d5d7656ac9192ac9edc42a4587d6c21460010e69"
-dependencies = [
- "addr2line",
- "anyhow",
- "async-trait",
- "bitflags",
- "bumpalo",
- "cc",
- "cfg-if",
- "encoding_rs",
- "fxprof-processed-profile",
- "gimli",
- "hashbrown 0.14.5",
- "indexmap",
- "ittapi",
- "libc",
- "log",
- "mach2",
- "memfd",
- "object 0.36.7",
- "once_cell",
- "paste",
- "postcard",
- "psm",
- "pulley-interpreter",
- "rayon",
- "rustix 0.38.44",
- "semver",
- "serde",
- "serde_derive",
- "serde_json",
- "smallvec",
- "sptr",
- "target-lexicon 0.13.5",
- "trait-variant",
- "wasm-encoder 0.221.3",
- "wasmparser 0.221.3",
- "wasmtime-asm-macros",
- "wasmtime-cache",
- "wasmtime-component-macro",
- "wasmtime-component-util",
- "wasmtime-cranelift",
- "wasmtime-environ",
- "wasmtime-fiber",
- "wasmtime-jit-debug",
- "wasmtime-jit-icache-coherence",
- "wasmtime-math",
- "wasmtime-slab",
- "wasmtime-versioned-export-macros",
- "wasmtime-winch",
- "wat",
- "windows-sys 0.59.0",
-]
-
-[[package]]
-name = "wasmtime-asm-macros"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1f178b0d125201fbe9f75beaf849bd3e511891f9e45ba216a5b620802ccf64f2"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "wasmtime-cache"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b1161c8f62880deea07358bc40cceddc019f1c81d46007bc390710b2fe24ffc"
-dependencies = [
- "anyhow",
- "base64 0.21.7",
- "directories-next",
- "log",
- "postcard",
- "rustix 0.38.44",
- "serde",
- "serde_derive",
- "sha2 0.10.9",
- "toml",
- "windows-sys 0.59.0",
- "zstd",
-]
-
-[[package]]
-name = "wasmtime-component-macro"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d74de6592ed945d0a602f71243982a304d5d02f1e501b638addf57f42d57dfaf"
-dependencies = [
- "anyhow",
- "proc-macro2",
- "quote",
- "syn",
- "wasmtime-component-util",
- "wasmtime-wit-bindgen",
- "wit-parser 0.221.3",
-]
-
-[[package]]
-name = "wasmtime-component-util"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "707dc7b3c112ab5a366b30cfe2fb5b2f8e6a0f682f16df96a5ec582bfe6f056e"
-
-[[package]]
-name = "wasmtime-cranelift"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "366be722674d4bf153290fbcbc4d7d16895cc82fb3e869f8d550ff768f9e9e87"
-dependencies = [
- "anyhow",
- "cfg-if",
- "cranelift-codegen",
- "cranelift-control",
- "cranelift-entity",
- "cranelift-frontend",
- "cranelift-native",
- "gimli",
- "itertools 0.12.1",
- "log",
- "object 0.36.7",
- "smallvec",
- "target-lexicon 0.13.5",
- "thiserror 1.0.69",
- "wasmparser 0.221.3",
- "wasmtime-environ",
- "wasmtime-versioned-export-macros",
-]
-
-[[package]]
-name = "wasmtime-environ"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cdadc1af7097347aa276a4f008929810f726b5b46946971c660b6d421e9994ad"
-dependencies = [
- "anyhow",
- "cpp_demangle",
- "cranelift-bitset",
- "cranelift-entity",
- "gimli",
- "indexmap",
- "log",
- "object 0.36.7",
- "postcard",
- "rustc-demangle",
- "semver",
- "serde",
- "serde_derive",
- "smallvec",
- "target-lexicon 0.13.5",
- "wasm-encoder 0.221.3",
- "wasmparser 0.221.3",
- "wasmprinter",
- "wasmtime-component-util",
-]
-
-[[package]]
-name = "wasmtime-fiber"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ccba90d4119f081bca91190485650730a617be1fff5228f8c4757ce133d21117"
-dependencies = [
- "anyhow",
- "cc",
- "cfg-if",
- "rustix 0.38.44",
- "wasmtime-asm-macros",
- "wasmtime-versioned-export-macros",
- "windows-sys 0.59.0",
-]
-
-[[package]]
-name = "wasmtime-jit-debug"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3e7b61488a5ee00c35c8c22de707c36c0aecacf419a3be803a6a2ba5e860f56a"
-dependencies = [
- "object 0.36.7",
- "rustix 0.38.44",
- "wasmtime-versioned-export-macros",
-]
-
-[[package]]
-name = "wasmtime-jit-icache-coherence"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec5e8552e01692e6c2e5293171704fed8abdec79d1a6995a0870ab190e5747d1"
-dependencies = [
- "anyhow",
- "cfg-if",
- "libc",
- "windows-sys 0.59.0",
-]
-
-[[package]]
-name = "wasmtime-math"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "29210ec2aa25e00f4d54605cedaf080f39ec01a872c5bd520ad04c67af1dde17"
-dependencies = [
- "libm",
-]
-
-[[package]]
-name = "wasmtime-slab"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fcb5821a96fa04ac14bc7b158bb3d5cd7729a053db5a74dad396cd513a5e5ccf"
-
-[[package]]
-name = "wasmtime-versioned-export-macros"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "86ff86db216dc0240462de40c8290887a613dddf9685508eb39479037ba97b5b"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "wasmtime-winch"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fdbabfb8f20502d5e1d81092b9ead3682ae59988487aafcd7567387b7a43cf8f"
-dependencies = [
- "anyhow",
- "cranelift-codegen",
- "gimli",
- "object 0.36.7",
- "target-lexicon 0.13.5",
- "wasmparser 0.221.3",
- "wasmtime-cranelift",
- "wasmtime-environ",
- "winch-codegen",
-]
-
-[[package]]
-name = "wasmtime-wit-bindgen"
-version = "29.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8358319c2dd1e4db79e3c1c5d3a5af84956615343f9f89f4e4996a36816e06e6"
-dependencies = [
- "anyhow",
- "heck",
- "indexmap",
- "wit-parser 0.221.3",
-]
-
-[[package]]
-name = "wast"
-version = "245.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "28cf1149285569120b8ce39db8b465e8a2b55c34cbb586bd977e43e2bc7300bf"
-dependencies = [
- "bumpalo",
- "leb128fmt",
- "memchr",
- "unicode-width 0.2.0",
- "wasm-encoder 0.245.1",
-]
-
-[[package]]
-name = "wat"
-version = "1.245.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cd48d1679b6858988cb96b154dda0ec5bbb09275b71db46057be37332d5477be"
-dependencies = [
- "wast",
-]
-
 [[package]]
 name = "web-sys"
 version = "0.3.85"
@@ -6005,21 +6395,13 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
 
 [[package]]
-name = "winch-codegen"
-version = "29.0.1"
+name = "windows"
+version = "0.58.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2f849ef2c5f46cb0a20af4b4487aaa239846e52e2c03f13fa3c784684552859c"
+checksum = "dd04d41d93c4992d421894c18c8b43496aa748dd4c081bac0dc93eb0489272b6"
 dependencies = [
- "anyhow",
- "cranelift-codegen",
- "gimli",
- "regalloc2",
- "smallvec",
- "target-lexicon 0.13.5",
- "thiserror 1.0.69",
- "wasmparser 0.221.3",
- "wasmtime-cranelift",
- "wasmtime-environ",
+ "windows-core 0.58.0",
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -6029,7 +6411,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
 dependencies = [
  "windows-collections",
- "windows-core",
+ "windows-core 0.62.2",
  "windows-future",
  "windows-numerics",
 ]
@@ -6040,7 +6422,20 @@ version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
 dependencies = [
- "windows-core",
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ba6d44ec8c2591c134257ce647b7ea6b20335bf6379a27dac5f1641fcf59f99"
+dependencies = [
+ "windows-implement 0.58.0",
+ "windows-interface 0.58.0",
+ "windows-result 0.2.0",
+ "windows-strings 0.1.0",
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -6049,11 +6444,11 @@ version = "0.62.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
 dependencies = [
- "windows-implement",
- "windows-interface",
+ "windows-implement 0.60.2",
+ "windows-interface 0.59.3",
  "windows-link",
- "windows-result",
- "windows-strings",
+ "windows-result 0.4.1",
+ "windows-strings 0.5.1",
 ]
 
 [[package]]
@@ -6062,11 +6457,22 @@ version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
 dependencies = [
- "windows-core",
+ "windows-core 0.62.2",
  "windows-link",
  "windows-threading",
 ]
 
+[[package]]
+name = "windows-implement"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2bbd5b46c938e506ecbce286b6628a02171d56153ba733b6c741fc627ec9579b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
 [[package]]
 name = "windows-implement"
 version = "0.60.2"
@@ -6078,6 +6484,17 @@ dependencies = [
  "syn",
 ]
 
+[[package]]
+name = "windows-interface"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053c4c462dc91d3b1504c6fe5a726dd15e216ba718e84a0e46a88fbe5ded3515"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
 [[package]]
 name = "windows-interface"
 version = "0.59.3"
@@ -6101,7 +6518,7 @@ version = "0.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
 dependencies = [
- "windows-core",
+ "windows-core 0.62.2",
  "windows-link",
 ]
 
@@ -6112,8 +6529,17 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "02752bf7fbdcce7f2a27a742f798510f3e5ad88dbe84871e5168e2120c3d5720"
 dependencies = [
  "windows-link",
- "windows-result",
- "windows-strings",
+ "windows-result 0.4.1",
+ "windows-strings 0.5.1",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d1043d8214f791817bab27572aaa8af63732e11bf84aa21a45a78d6c317ae0e"
+dependencies = [
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -6125,6 +6551,16 @@ dependencies = [
  "windows-link",
 ]
 
+[[package]]
+name = "windows-strings"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd9b125c486025df0eabcb585e62173c6c9eddcec5d117d3b6e8c30e2ee4d10"
+dependencies = [
+ "windows-result 0.2.0",
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-strings"
 version = "0.5.1"
@@ -6476,7 +6912,7 @@ checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"
 dependencies = [
  "anyhow",
  "heck",
- "wit-parser 0.244.0",
+ "wit-parser",
 ]
 
 [[package]]
@@ -6523,28 +6959,10 @@ dependencies = [
  "serde",
  "serde_derive",
  "serde_json",
- "wasm-encoder 0.244.0",
+ "wasm-encoder",
  "wasm-metadata",
- "wasmparser 0.244.0",
- "wit-parser 0.244.0",
-]
-
-[[package]]
-name = "wit-parser"
-version = "0.221.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "896112579ed56b4a538b07a3d16e562d101ff6265c46b515ce0c701eef16b2ac"
-dependencies = [
- "anyhow",
- "id-arena",
- "indexmap",
- "log",
- "semver",
- "serde",
- "serde_derive",
- "serde_json",
- "unicode-xid",
- "wasmparser 0.221.3",
+ "wasmparser",
+ "wit-parser",
 ]
 
 [[package]]
@@ -6562,7 +6980,7 @@ dependencies = [
  "serde_derive",
  "serde_json",
  "unicode-xid",
- "wasmparser 0.244.0",
+ "wasmparser",
 ]
 
 [[package]]
@@ -6576,8 +6994,8 @@ dependencies = [
  "log",
  "serde",
  "thiserror 2.0.18",
- "windows",
- "windows-core",
+ "windows 0.62.2",
+ "windows-core 0.62.2",
 ]
 
 [[package]]
@@ -6605,6 +7023,24 @@ dependencies = [
  "web-sys",
 ]
 
+[[package]]
+name = "x509-parser"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d43b0f71ce057da06bc0851b23ee24f3f86190b07203dd8f567d0b706a185202"
+dependencies = [
+ "asn1-rs",
+ "data-encoding",
+ "der-parser",
+ "lazy_static",
+ "nom",
+ "oid-registry",
+ "ring",
+ "rusticata-macros",
+ "thiserror 2.0.18",
+ "time",
+]
+
 [[package]]
 name = "xml-rs"
 version = "0.8.28"
@@ -6625,9 +7061,15 @@ name = "xtask"
 version = "0.1.0"
 dependencies = [
  "clap",
- "libc",
- "serde",
- "toml",
+]
+
+[[package]]
+name = "yasna"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e17bb3549cc1321ae1296b9cdc2698e2b6cb1992adfa19a8c72e5b7a738f44cd"
+dependencies = [
+ "time",
 ]
 
 [[package]]
@@ -6758,31 +7200,3 @@ name = "zmij"
 version = "1.0.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
-
-[[package]]
-name = "zstd"
-version = "0.13.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a"
-dependencies = [
- "zstd-safe",
-]
-
-[[package]]
-name = "zstd-safe"
-version = "7.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f49c4d5f0abb602a93fb8736af2a4f4dd9512e36f7f570d66e65ff867ed3b9d"
-dependencies = [
- "zstd-sys",
-]
-
-[[package]]
-name = "zstd-sys"
-version = "2.0.16+zstd.1.5.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "91e19ebc2adc8f83e43039e79776e3fda8ca919132d68a1fed6a5faca2683748"
-dependencies = [
- "cc",
- "pkg-config",
-]
diff --git a/Cargo.toml b/Cargo.toml
index 1f5565d..b940538 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,23 +1,20 @@
 [workspace]
 members = [
     ".",
-    "crates/python",
-    "crates/wasm/runtime",
-    "crates/bin-runner",
+    "crates/bindings/python",
+    "crates/bindings/wasm-runtime",
     "crates/simulation",
     "crates/dashboard",
     "crates/distribution",
-    "crates/std",
     "crates/process",
     "crates/datastore",
-    "crates/shared-types",
-    "crates/swactor-node",
-    "crates/streams",
+    "crates/transport",
+    "crates/node",
     "tests/docker",
-    "crates/ci",
+    "tests/integration",
     "xtask",
 ]
-exclude = ["tools/depgraph", "crates/wasm/crypto"]
+exclude = ["crates/bindings/wasm-crypto"]
 
 [package]
 name = "swactor"
@@ -33,7 +30,8 @@ strip = false
 crate-type = ["rlib"]
 
 [features]
-default = ["getrandom"]
+default = ["getrandom", "std"]
+std = [] # OTP patterns: supervisors, registries, timers, routers
 getrandom = ["dep:getrandom"]
 serde = ["dep:serde"]
 tracing = ["dep:tracing"]
@@ -54,7 +52,6 @@ crossbeam-utils = "0.8.21"
 criterion = { version = "0.5", features = ["html_reports"] }
 proptest = "1"
 proptest-state-machine = "0.3"
-swactor-std = { path = "crates/std" }
 
 [[bench]]
 name = "runtime_benchmarks"
@@ -68,6 +65,3 @@ harness = false
 name = "hasher_benchmarks"
 harness = false
 
-[[example]]
-name = "tcp_ping_pong"
-required-features = ["transport"]
diff --git a/README.md b/README.md
index 861a90b..cc69109 100644
--- a/README.md
+++ b/README.md
@@ -1,152 +1,24 @@
 # swactor
 
-Minimal actor runtime for Rust. Single-threaded or multi-threaded, with
-Python and WebAssembly bindings.
+Minimal actor runtime for Rust. One trait, one message type.
+Single-threaded (`tick()`) or multi-threaded (`run()`).
 
-## Quick Start
+## Description
 
-```rust
-use swactor::actor::{ActorAddress, ActorInterface};
-use swactor::runtime::{Ctx, Runtime, RuntimeConfig};
+Core runtime is `src/`. Actors implement `ActorInterface` (in `actor.rs`),
+interact through `Ctx` (in `runtime.rs`), and run on worker threads (`worker.rs`).
 
-#[derive(Clone)]
-struct Greet { name: String, reply_to: ActorAddress }
+`crates/` builds upward: `std` adds OTP patterns (supervision, monitoring, groups),
+`distribution` adds clustering, everything else composes from there.
 
-#[derive(Clone)]
-struct Greeting(String);
+## Dev commands
 
-struct Greeter;
+`cargo xtask --help` for available test groups.
 
-impl ActorInterface for Greeter {
-    type Incoming = Greet;
-    type Response = Greeting;
+## Testing
 
-    fn handle(&mut self, ctx: &Ctx, msg: Greet) {
-        let _ = ctx.send(msg.reply_to, Greeting(format!("Hello, {}!", msg.name)));
-    }
-}
-
-fn main() {
-    let rt = Runtime::new(RuntimeConfig::default());
-    let addr = rt.spawn(Greeter).unwrap();
-    let inbox = rt.new_inbox::<Greeting>().unwrap();
-
-    rt.send_to(addr, Greet { name: "world".into(), reply_to: *inbox.addr() }).unwrap();
-    rt.tick();
-    rt.tick();
-
-    println!("{}", inbox.try_recv().unwrap().0); // "Hello, world!"
-}
 ```
-
-## Features
-
-### Actor Model
-
-Actors implement one trait (`ActorInterface`), receive one message type, and
-hold mutable state. No lifecycle hooks, no supervision trees, no async.
-
-Every actor gets a 32-byte globally unique `ActorAddress`. The same
-`ctx.send(addr, msg)` call works whether the target is on the same worker,
-a different worker thread, an external inbox, or a remote process.
-
-Single-threaded mode (`rt.tick()`) gives deterministic frame-level control.
-Multi-threaded mode (`rt.run()`) spawns OS threads with adaptive backoff.
-
-See [docs/runtime/actor-model.md](docs/runtime/actor-model.md) and
-[docs/runtime/runtime.md](docs/runtime/runtime.md) for the full model.
-
-### Transport
-
-Pluggable cross-process messaging. User-provided codecs handle serialization
-(gRPC/protobuf, bincode, hand-rolled — no serde bounds imposed) and
-user-provided transports handle delivery (TCP, in-memory, gRPC channel).
-
-```bash
-cargo build --features transport
-cargo run --example tcp_ping_pong --features transport -- receiver  # terminal 1
-cargo run --example tcp_ping_pong --features transport -- sender    # terminal 2
+cargo check --workspace
+cargo xtask test <your-feature-crate>
+cargo xtask test essential
 ```
-
-See [docs/distribution/transport.md](docs/distribution/transport.md) for the routing chain, codec
-registry, and address resolution.
-
-### Runtime Dashboard
-
-Live web dashboard for monitoring actors, message throughput, and mailbox
-depths. Supports trace recording and replay at configurable speed.
-
-Includes hand-authored SVG diagrams (actor lifecycle, message lifecycle,
-tick cycle, transport routing) and generated diagrams from DOT sources
-(architecture, dataflow, type erasure).
-
-See [crates/runtime-dashboard/](crates/runtime-dashboard/README.md).
-
-### Language Bindings
-
-**Python** — PyO3 via Maturin. Spawn actors from Python callables, pass
-dicts as messages, single-threaded or multi-threaded.
-
-```bash
-cd crates/swactor-python && maturin develop
-```
-
-Examples in `examples/python/` (single-thread, async, Jupyter notebook).
-
-**WASM** — wasm-bindgen. Runs single-threaded with deterministic addressing
-(`no_random` feature).
-
-```bash
-cd crates/swactor-wasm && wasm-pack build --target nodejs
-```
-
-### Connectome Analysis
-
-Structural analysis of the internal dependency graph.
-
-- **depgraph** (`tools/depgraph/`) — AST-based extraction of module
-  dependencies, outputs GraphViz DOT
-- **spectral** (`tools/spectral/`) — Laplacian eigenvalue analysis,
-  Connectome Complexity Index (CCI), coupling heatmaps, interactive HTML
-  dashboard
-
-```bash
-cargo run --manifest-path tools/depgraph/Cargo.toml -- --src-dir src/ --output deps
-python tools/spectral/spectral_analysis.py deps.dot
-```
-
-See [docs/connectome/connectome.md](docs/connectome/connectome.md) for metric interpretation.
-
-## Building & Testing
-
-```bash
-cargo test                              # all tests
-cargo test --features transport         # include transport tests
-cargo run --example hello               # single actor example
-cargo run --example ring                # 500-actor ring topology
-cargo bench                             # benchmarks (criterion)
-```
-
-## Feature Flags
-
-| Flag | Default | What it does |
-|------|---------|--------------|
-| `getrandom` | yes | System RNG for actor addresses |
-| `no_random` | no | Deterministic counter (WASM / reproducible tests) |
-| `transport` | no | Pluggable remote messaging (codec + transport) |
-| `tracing` | no | `tracing` instrumentation for runtime internals |
-| `serde` | no | Serde derives for stats types |
-| `python` | no | PyO3 bindings (cdylib wheel) |
-
-## Documentation
-
-| Document | Covers |
-|----------|--------|
-| [Actor Model](docs/runtime/actor-model.md) | Traits, type erasure, addresses |
-| [Runtime](docs/runtime/runtime.md) | Runtime, Ctx, Inbox, RuntimeHandle, stats |
-| [Worker Thread](docs/runtime/worker-thread.md) | Tick phases, backoff, routing, full system topology |
-| [Channels](docs/runtime/channels.md) | HybridChannel, AddressMap, Placement |
-| [Transport](docs/distribution/transport.md) | Codec, Transport, remote messaging, address resolution |
-| [Distribution](docs/distribution/distribution.md) | SWIM membership, Kademlia, NodeDriver |
-| [Connectome](docs/connectome/connectome.md) | CCI metrics, spectral analysis interpretation |
-| [Dashboard](crates/runtime-dashboard/README.md) | Live web UI, trace recording, diagram index |
diff --git a/benches/runtime_benchmarks.rs b/benches/runtime_benchmarks.rs
index b308c04..0270440 100644
--- a/benches/runtime_benchmarks.rs
+++ b/benches/runtime_benchmarks.rs
@@ -7,7 +7,7 @@ use swactor::{
     config::RuntimeConfig,
     runtime::{Ctx, Runtime},
 };
-use swactor_std::{RuntimeGroups, RuntimeNaming, StdExtension};
+use swactor::std::{RuntimeGroups, RuntimeNaming, StdExtension};
 
 // ---------------------------------------------------------------------------
 // Helper
diff --git a/crates/bin-runner/Cargo.toml b/crates/bin-runner/Cargo.toml
deleted file mode 100644
index d7891dd..0000000
--- a/crates/bin-runner/Cargo.toml
+++ /dev/null
@@ -1,14 +0,0 @@
-[package]
-name = "swactor-bin-runner"
-version = "0.1.0"
-edition = "2024"
-
-[dependencies]
-swactor = { path = "../.." }
-wasmtime = "29"
-
-[dev-dependencies]
-swactor = { path = "../..", features = ["getrandom"] }
-swactor-std = { path = "../std" }
-wat = "1"
-proptest = "1"
diff --git a/crates/bin-runner/build.rs b/crates/bin-runner/build.rs
deleted file mode 100644
index c1c291d..0000000
--- a/crates/bin-runner/build.rs
+++ /dev/null
@@ -1,28 +0,0 @@
-use std::path::Path;
-use std::process::Command;
-
-fn main() {
-    let manifest_dir = env!("CARGO_MANIFEST_DIR");
-    let guests_dir = Path::new(manifest_dir).join("tests/guests");
-
-    for guest in &["echo", "double", "silent"] {
-        let guest_dir = guests_dir.join(guest);
-
-        println!(
-            "cargo:rerun-if-changed={}",
-            guest_dir.join("src/lib.rs").display()
-        );
-        println!(
-            "cargo:rerun-if-changed={}",
-            guest_dir.join("Cargo.toml").display()
-        );
-
-        let status = Command::new("cargo")
-            .args(["build", "--target", "wasm32-unknown-unknown", "--release"])
-            .current_dir(&guest_dir)
-            .status()
-            .unwrap_or_else(|e| panic!("failed to run cargo build for {guest} guest: {e}"));
-
-        assert!(status.success(), "failed to build {guest} guest");
-    }
-}
diff --git a/crates/bin-runner/src/actor.rs b/crates/bin-runner/src/actor.rs
deleted file mode 100644
index 93d1c0a..0000000
--- a/crates/bin-runner/src/actor.rs
+++ /dev/null
@@ -1,63 +0,0 @@
-use swactor::actor::{ActorInterface, Ctx};
-use wasmtime::{Memory, Store, TypedFunc};
-
-use crate::ByteMessage;
-
-/// State accessible to host functions during guest execution.
-#[derive(Default)]
-pub(crate) struct HostState {
-    pub outbox: Vec<(swactor::actor::ActorAddress, Vec<u8>)>,
-}
-
-/// An actor whose logic is defined by a WebAssembly guest module.
-///
-/// Messages arrive as [`ByteMessage`], are copied into Wasm linear memory,
-/// and processed by the guest's `handle` export. The guest can send messages
-/// back via the `swactor.send` host import.
-pub struct WasmActor {
-    pub(crate) store: Store<HostState>,
-    pub(crate) memory: Memory,
-    pub(crate) alloc: TypedFunc<i32, i32>,
-    pub(crate) handle: TypedFunc<(i32, i32), ()>,
-}
-
-impl ActorInterface for WasmActor {
-    type Incoming = ByteMessage;
-    type Response = ();
-
-    fn handle(&mut self, ctx: &Ctx, msg: ByteMessage) {
-        let bytes = &msg.0;
-        let len: i32 = match i32::try_from(bytes.len()) {
-            Ok(n) => n,
-            Err(_) => return, // message too large for i32 ABI
-        };
-
-        // 1. Allocate space in guest memory
-        let ptr = match self.alloc.call(&mut self.store, len) {
-            Ok(ptr) if ptr < 0 => return,        // invalid pointer
-            Ok(0) if len > 0 => return,           // OOM — drop message
-            Ok(ptr) => ptr,
-            Err(_) => return,                     // alloc trapped — drop message
-        };
-
-        // 2. Write message bytes into guest memory
-        let mem = self.memory.data_mut(&mut self.store);
-        let end = (ptr as usize).saturating_add(bytes.len());
-        if end > mem.len() {
-            return; // alloc returned OOB pointer — drop message
-        }
-        mem[ptr as usize..end].copy_from_slice(bytes);
-
-        // 3. Call guest handle
-        if self.handle.call(&mut self.store, (ptr, len)).is_err() {
-            self.store.data_mut().outbox.clear(); // discard sends from incomplete operation
-            return; // handle trapped — drop message, keep actor alive
-        }
-
-        // 4. Drain outbox → send via ctx
-        let outbox: Vec<_> = self.store.data_mut().outbox.drain(..).collect();
-        for (dest, payload) in outbox {
-            let _ = ctx.send(dest, ByteMessage(payload));
-        }
-    }
-}
diff --git a/crates/bin-runner/src/builder.rs b/crates/bin-runner/src/builder.rs
deleted file mode 100644
index 06a199c..0000000
--- a/crates/bin-runner/src/builder.rs
+++ /dev/null
@@ -1,109 +0,0 @@
-use swactor::actor::ActorAddress;
-use wasmtime::{Linker, Module, Store, TypedFunc};
-
-use crate::actor::{HostState, WasmActor};
-use crate::engine::SharedEngine;
-use crate::error::WasmActorError;
-
-/// Compiles a Wasm module and produces a ready-to-use [`WasmActor`].
-pub struct WasmActorBuilder {
-    engine: SharedEngine,
-    wasm_bytes: Vec<u8>,
-}
-
-impl WasmActorBuilder {
-    pub fn new(engine: SharedEngine, wasm_bytes: impl Into<Vec<u8>>) -> Self {
-        Self {
-            engine,
-            wasm_bytes: wasm_bytes.into(),
-        }
-    }
-
-    /// Compile the module, link host functions, and instantiate.
-    pub fn build(self) -> Result<WasmActor, WasmActorError> {
-        let engine = self.engine.inner();
-        let module = Module::new(engine, &self.wasm_bytes)?;
-
-        let mut linker: Linker<HostState> = Linker::new(engine);
-        Self::link_send(&mut linker)?;
-
-        let mut store = Store::new(engine, HostState::default());
-        let instance = linker.instantiate(&mut store, &module)?;
-
-        // Extract required exports
-        let memory = instance
-            .get_memory(&mut store, "memory")
-            .ok_or(WasmActorError::MissingExport("memory"))?;
-
-        let alloc: TypedFunc<i32, i32> = instance
-            .get_typed_func(&mut store, "alloc")
-            .map_err(|_| WasmActorError::MissingExport("alloc"))?;
-
-        let handle: TypedFunc<(i32, i32), ()> = instance
-            .get_typed_func(&mut store, "handle")
-            .map_err(|_| WasmActorError::MissingExport("handle"))?;
-
-        Ok(WasmActor {
-            store,
-            memory,
-            alloc,
-            handle,
-        })
-    }
-
-    /// Link the `swactor.send` host import.
-    fn link_send(linker: &mut Linker<HostState>) -> Result<(), WasmActorError> {
-        linker.func_wrap(
-            "swactor",
-            "send",
-            |mut caller: wasmtime::Caller<'_, HostState>,
-             dest_ptr: i32,
-             payload_ptr: i32,
-             payload_len: i32|
-             -> Result<(), wasmtime::Error> {
-                let mem = caller
-                    .get_export("memory")
-                    .and_then(|e| e.into_memory())
-                    .ok_or_else(|| wasmtime::Error::msg("guest must export memory"))?;
-                let data = mem.data(&caller);
-                let mem_len = data.len();
-
-                // Validate non-negative arguments
-                if dest_ptr < 0 || payload_ptr < 0 || payload_len < 0 {
-                    return Err(wasmtime::Error::msg(
-                        "negative argument in swactor.send",
-                    ));
-                }
-
-                let dest_ptr = dest_ptr as usize;
-                let payload_ptr = payload_ptr as usize;
-                let payload_len = payload_len as usize;
-
-                // Bounds-check with overflow protection
-                let dest_end = dest_ptr
-                    .checked_add(32)
-                    .ok_or_else(|| wasmtime::Error::msg("dest_ptr overflow"))?;
-                let payload_end = payload_ptr
-                    .checked_add(payload_len)
-                    .ok_or_else(|| wasmtime::Error::msg("payload range overflow"))?;
-                if dest_end > mem_len || payload_end > mem_len {
-                    return Err(wasmtime::Error::msg(
-                        "out-of-bounds memory access in swactor.send",
-                    ));
-                }
-
-                // Read 32-byte destination address
-                let mut addr_bytes = [0u8; 32];
-                addr_bytes.copy_from_slice(&data[dest_ptr..dest_end]);
-                let dest = ActorAddress(addr_bytes);
-
-                // Read payload
-                let payload = data[payload_ptr..payload_end].to_vec();
-
-                caller.data_mut().outbox.push((dest, payload));
-                Ok(())
-            },
-        )?;
-        Ok(())
-    }
-}
diff --git a/crates/bin-runner/src/engine.rs b/crates/bin-runner/src/engine.rs
deleted file mode 100644
index 8cc2dfc..0000000
--- a/crates/bin-runner/src/engine.rs
+++ /dev/null
@@ -1,35 +0,0 @@
-use std::sync::Arc;
-
-use wasmtime::Engine;
-
-/// A shared, cheaply-cloneable Wasm engine.
-///
-/// Created once and reused across multiple [`WasmActor`](crate::WasmActor) instances.
-/// Configured with maximum sandboxing — no threads, no SIMD, no reference types.
-#[derive(Clone)]
-pub struct SharedEngine(Arc<Engine>);
-
-impl std::fmt::Debug for SharedEngine {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.debug_tuple("SharedEngine").field(&"<Engine>").finish()
-    }
-}
-
-impl SharedEngine {
-    /// Create a new engine with sandboxed defaults.
-    pub fn new() -> Result<Self, wasmtime::Error> {
-        let mut config = wasmtime::Config::new();
-        config.wasm_threads(false);
-        config.wasm_simd(false);
-        config.wasm_relaxed_simd(false);
-        config.wasm_reference_types(false);
-        config.wasm_multi_value(false);
-        config.wasm_bulk_memory(true);
-        let engine = Engine::new(&config)?;
-        Ok(Self(Arc::new(engine)))
-    }
-
-    pub(crate) fn inner(&self) -> &Engine {
-        &self.0
-    }
-}
diff --git a/crates/bin-runner/src/error.rs b/crates/bin-runner/src/error.rs
deleted file mode 100644
index b91c052..0000000
--- a/crates/bin-runner/src/error.rs
+++ /dev/null
@@ -1,27 +0,0 @@
-use std::fmt;
-
-/// Errors that can occur when building or running a WasmActor.
-#[derive(Debug)]
-pub enum WasmActorError {
-    /// A required export is missing from the Wasm module.
-    MissingExport(&'static str),
-    /// The Wasm module failed to compile or instantiate.
-    Wasmtime(wasmtime::Error),
-}
-
-impl fmt::Display for WasmActorError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::MissingExport(name) => write!(f, "missing required export: `{name}`"),
-            Self::Wasmtime(e) => write!(f, "wasmtime error: {e}"),
-        }
-    }
-}
-
-impl std::error::Error for WasmActorError {}
-
-impl From<wasmtime::Error> for WasmActorError {
-    fn from(e: wasmtime::Error) -> Self {
-        Self::Wasmtime(e)
-    }
-}
diff --git a/crates/bin-runner/src/lib.rs b/crates/bin-runner/src/lib.rs
deleted file mode 100644
index 3f744c2..0000000
--- a/crates/bin-runner/src/lib.rs
+++ /dev/null
@@ -1,13 +0,0 @@
-mod actor;
-mod builder;
-mod engine;
-mod error;
-
-pub use actor::WasmActor;
-pub use builder::WasmActorBuilder;
-pub use engine::SharedEngine;
-pub use error::WasmActorError;
-
-/// A message carrying raw bytes, suitable for passing to/from Wasm guests.
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ByteMessage(pub Vec<u8>);
diff --git a/crates/bin-runner/tests/guests/double/Cargo.lock b/crates/bin-runner/tests/guests/double/Cargo.lock
deleted file mode 100644
index b46d745..0000000
--- a/crates/bin-runner/tests/guests/double/Cargo.lock
+++ /dev/null
@@ -1,7 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "double-guest"
-version = "0.1.0"
diff --git a/crates/bin-runner/tests/guests/double/Cargo.toml b/crates/bin-runner/tests/guests/double/Cargo.toml
deleted file mode 100644
index 943eabe..0000000
--- a/crates/bin-runner/tests/guests/double/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[workspace]
-
-[package]
-name = "double-guest"
-version = "0.1.0"
-edition = "2024"
-
-[lib]
-crate-type = ["cdylib"]
-
-[profile.release]
-opt-level = "s"
-lto = true
diff --git a/crates/bin-runner/tests/guests/double/src/lib.rs b/crates/bin-runner/tests/guests/double/src/lib.rs
deleted file mode 100644
index 2ea9158..0000000
--- a/crates/bin-runner/tests/guests/double/src/lib.rs
+++ /dev/null
@@ -1,63 +0,0 @@
-#![no_std]
-
-use core::cell::UnsafeCell;
-use core::panic::PanicInfo;
-
-// --- bump allocator ---
-const HEAP_SIZE: usize = 65536;
-
-struct BumpAlloc {
-    heap: UnsafeCell<[u8; HEAP_SIZE]>,
-    offset: UnsafeCell<usize>,
-}
-
-unsafe impl Sync for BumpAlloc {}
-
-static ALLOC: BumpAlloc = BumpAlloc {
-    heap: UnsafeCell::new([0u8; HEAP_SIZE]),
-    offset: UnsafeCell::new(0),
-};
-
-#[unsafe(no_mangle)]
-pub extern "C" fn alloc(size: i32) -> i32 {
-    unsafe {
-        let offset = &mut *ALLOC.offset.get();
-        let heap = &mut *ALLOC.heap.get();
-        let align = 8;
-        let start = (*offset + align - 1) & !(align - 1);
-        let end = start + size as usize;
-        if end > heap.len() {
-            return 0; // OOM
-        }
-        *offset = end;
-        heap.as_ptr().add(start) as i32
-    }
-}
-
-// --- host import ---
-#[link(wasm_import_module = "swactor")]
-unsafe extern "C" {
-    #[link_name = "send"]
-    fn host_send(dest_ptr: i32, payload_ptr: i32, payload_len: i32);
-}
-
-/// Message format: first 32 bytes = destination address, rest = payload.
-/// Sends the payload back twice to demonstrate multi-send.
-#[unsafe(no_mangle)]
-pub extern "C" fn handle(ptr: i32, len: i32) {
-    if len < 32 {
-        return;
-    }
-    let dest_ptr = ptr;
-    let payload_ptr = ptr + 32;
-    let payload_len = len - 32;
-    unsafe {
-        host_send(dest_ptr, payload_ptr, payload_len);
-        host_send(dest_ptr, payload_ptr, payload_len);
-    }
-}
-
-#[panic_handler]
-fn panic(_info: &PanicInfo) -> ! {
-    loop {}
-}
diff --git a/crates/bin-runner/tests/guests/echo/Cargo.lock b/crates/bin-runner/tests/guests/echo/Cargo.lock
deleted file mode 100644
index 224c914..0000000
--- a/crates/bin-runner/tests/guests/echo/Cargo.lock
+++ /dev/null
@@ -1,7 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "echo-guest"
-version = "0.1.0"
diff --git a/crates/bin-runner/tests/guests/echo/Cargo.toml b/crates/bin-runner/tests/guests/echo/Cargo.toml
deleted file mode 100644
index 7c33f5c..0000000
--- a/crates/bin-runner/tests/guests/echo/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[workspace]
-
-[package]
-name = "echo-guest"
-version = "0.1.0"
-edition = "2024"
-
-[lib]
-crate-type = ["cdylib"]
-
-[profile.release]
-opt-level = "s"
-lto = true
diff --git a/crates/bin-runner/tests/guests/echo/src/lib.rs b/crates/bin-runner/tests/guests/echo/src/lib.rs
deleted file mode 100644
index edc69a5..0000000
--- a/crates/bin-runner/tests/guests/echo/src/lib.rs
+++ /dev/null
@@ -1,62 +0,0 @@
-#![no_std]
-
-use core::cell::UnsafeCell;
-use core::panic::PanicInfo;
-
-// --- bump allocator ---
-const HEAP_SIZE: usize = 65536;
-
-struct BumpAlloc {
-    heap: UnsafeCell<[u8; HEAP_SIZE]>,
-    offset: UnsafeCell<usize>,
-}
-
-unsafe impl Sync for BumpAlloc {}
-
-static ALLOC: BumpAlloc = BumpAlloc {
-    heap: UnsafeCell::new([0u8; HEAP_SIZE]),
-    offset: UnsafeCell::new(0),
-};
-
-#[unsafe(no_mangle)]
-pub extern "C" fn alloc(size: i32) -> i32 {
-    unsafe {
-        let offset = &mut *ALLOC.offset.get();
-        let heap = &mut *ALLOC.heap.get();
-        let align = 8;
-        let start = (*offset + align - 1) & !(align - 1);
-        let end = start + size as usize;
-        if end > heap.len() {
-            return 0; // OOM
-        }
-        *offset = end;
-        heap.as_ptr().add(start) as i32
-    }
-}
-
-// --- host import ---
-#[link(wasm_import_module = "swactor")]
-unsafe extern "C" {
-    #[link_name = "send"]
-    fn host_send(dest_ptr: i32, payload_ptr: i32, payload_len: i32);
-}
-
-/// Message format: first 32 bytes = destination address, rest = payload.
-/// Echo sends the payload portion back to the specified destination.
-#[unsafe(no_mangle)]
-pub extern "C" fn handle(ptr: i32, len: i32) {
-    if len < 32 {
-        return;
-    }
-    let dest_ptr = ptr;
-    let payload_ptr = ptr + 32;
-    let payload_len = len - 32;
-    unsafe {
-        host_send(dest_ptr, payload_ptr, payload_len);
-    }
-}
-
-#[panic_handler]
-fn panic(_info: &PanicInfo) -> ! {
-    loop {}
-}
diff --git a/crates/bin-runner/tests/guests/silent/Cargo.lock b/crates/bin-runner/tests/guests/silent/Cargo.lock
deleted file mode 100644
index aff96a4..0000000
--- a/crates/bin-runner/tests/guests/silent/Cargo.lock
+++ /dev/null
@@ -1,7 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "silent-guest"
-version = "0.1.0"
diff --git a/crates/bin-runner/tests/guests/silent/Cargo.toml b/crates/bin-runner/tests/guests/silent/Cargo.toml
deleted file mode 100644
index 14e524f..0000000
--- a/crates/bin-runner/tests/guests/silent/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[workspace]
-
-[package]
-name = "silent-guest"
-version = "0.1.0"
-edition = "2024"
-
-[lib]
-crate-type = ["cdylib"]
-
-[profile.release]
-opt-level = "s"
-lto = true
diff --git a/crates/bin-runner/tests/guests/silent/src/lib.rs b/crates/bin-runner/tests/guests/silent/src/lib.rs
deleted file mode 100644
index c1d2a1c..0000000
--- a/crates/bin-runner/tests/guests/silent/src/lib.rs
+++ /dev/null
@@ -1,45 +0,0 @@
-#![no_std]
-
-use core::cell::UnsafeCell;
-use core::panic::PanicInfo;
-
-// --- bump allocator ---
-const HEAP_SIZE: usize = 65536;
-
-struct BumpAlloc {
-    heap: UnsafeCell<[u8; HEAP_SIZE]>,
-    offset: UnsafeCell<usize>,
-}
-
-unsafe impl Sync for BumpAlloc {}
-
-static ALLOC: BumpAlloc = BumpAlloc {
-    heap: UnsafeCell::new([0u8; HEAP_SIZE]),
-    offset: UnsafeCell::new(0),
-};
-
-#[unsafe(no_mangle)]
-pub extern "C" fn alloc(size: i32) -> i32 {
-    unsafe {
-        let offset = &mut *ALLOC.offset.get();
-        let heap = &mut *ALLOC.heap.get();
-        let align = 8;
-        let start = (*offset + align - 1) & !(align - 1);
-        let end = start + size as usize;
-        if end > heap.len() {
-            return 0; // OOM
-        }
-        *offset = end;
-        heap.as_ptr().add(start) as i32
-    }
-}
-
-#[unsafe(no_mangle)]
-pub extern "C" fn handle(_ptr: i32, _len: i32) {
-    // Silent: receive bytes, do nothing
-}
-
-#[panic_handler]
-fn panic(_info: &PanicInfo) -> ! {
-    loop {}
-}
diff --git a/crates/bin-runner/tests/wasm_actor.proptest-regressions b/crates/bin-runner/tests/wasm_actor.proptest-regressions
deleted file mode 100644
index 8a4ef8c..0000000
--- a/crates/bin-runner/tests/wasm_actor.proptest-regressions
+++ /dev/null
@@ -1,8 +0,0 @@
-# Seeds for failure cases proptest has generated in the past. It is
-# automatically read and these particular cases re-run before any
-# novel cases are generated.
-#
-# It is recommended to check this file in to source control so that
-# everyone who runs the test benefits from these saved cases.
-cc f8674b306ba8187ad75bcc5a33c4a679e497a0053dc6fdb2234ccaeaae8f85b7 # shrinks to guest_idx = 0, n_msgs = 0, ticks_before = 1, ticks_after = 1
-cc db98a9c0726c0477ba56ec6098a1f21518faaff4551d90e915790ce3c890dd53 # shrinks to payload = []
diff --git a/crates/bin-runner/tests/wasm_actor.rs b/crates/bin-runner/tests/wasm_actor.rs
deleted file mode 100644
index 341a2d8..0000000
--- a/crates/bin-runner/tests/wasm_actor.rs
+++ /dev/null
@@ -1,1367 +0,0 @@
-use swactor::actor::{ActorAddress, ActorInterface};
-use swactor::runtime::{Ctx, Runtime, RuntimeConfig};
-use swactor_bin_runner::{ByteMessage, SharedEngine, WasmActor, WasmActorBuilder, WasmActorError};
-use swactor_std::{CtxWatching, StdExtension};
-
-use proptest::prelude::*;
-
-fn guest_wasm(name: &str) -> Vec<u8> {
-    let path = format!(
-        "{}/tests/guests/{name}/target/wasm32-unknown-unknown/release/{name}_guest.wasm",
-        env!("CARGO_MANIFEST_DIR")
-    );
-    std::fs::read(&path).unwrap_or_else(|e| panic!("failed to read {path}: {e}"))
-}
-
-/// Build a message with an inbox address prepended (the guest contract).
-fn framed_msg(dest: &ActorAddress, payload: &[u8]) -> ByteMessage {
-    let mut buf = Vec::with_capacity(32 + payload.len());
-    buf.extend_from_slice(&dest.0);
-    buf.extend_from_slice(payload);
-    ByteMessage(buf)
-}
-
-/// Build a WAT module where alloc returns a constant value.
-fn alloc_returns_wat(alloc_val: i32) -> Vec<u8> {
-    let wat = format!(
-        r#"(module
-            (import "swactor" "send" (func $send (param i32 i32 i32)))
-            (memory (export "memory") 1)
-            (func (export "alloc") (param i32) (result i32) i32.const {alloc_val})
-            (func (export "handle") (param i32 i32))
-        )"#
-    );
-    wat::parse_str(&wat).unwrap()
-}
-
-/// Build a WAT module where handle calls send with specific arguments.
-fn send_args_wat(dest_ptr: i32, payload_ptr: i32, payload_len: i32) -> Vec<u8> {
-    let wat = format!(
-        r#"(module
-            (import "swactor" "send" (func $send (param i32 i32 i32)))
-            (memory (export "memory") 1)
-            (func (export "alloc") (param i32) (result i32) i32.const 256)
-            (func (export "handle") (param i32 i32)
-                i32.const {dest_ptr}
-                i32.const {payload_ptr}
-                i32.const {payload_len}
-                call $send
-            )
-        )"#
-    );
-    wat::parse_str(&wat).unwrap()
-}
-
-// ═══════════════════════════════════════════════════════════════════════════════
-// Group 1: Builder contract
-// ═══════════════════════════════════════════════════════════════════════════════
-
-#[test]
-fn build_succeeds_for_valid_modules() {
-    let engine = SharedEngine::new().unwrap();
-
-    // Pre-compiled guests
-    WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    WasmActorBuilder::new(engine.clone(), guest_wasm("double")).build().unwrap();
-    WasmActorBuilder::new(engine.clone(), guest_wasm("silent")).build().unwrap();
-
-    // Custom WAT with extra exports, data segments, funcref table
-    let extras = wat::parse_str(r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (data (i32.const 0) "hello")
-        (table 1 funcref)
-        (func (export "alloc") (param i32) (result i32) i32.const 256)
-        (func (export "handle") (param i32 i32))
-        (func (export "custom_fn") (result i32) i32.const 42)
-    )"#).unwrap();
-    WasmActorBuilder::new(engine.clone(), extras).build().unwrap();
-
-    // Module without send import (doesn't import swactor.send)
-    let no_send = wat::parse_str(r#"(module
-        (memory (export "memory") 1)
-        (func (export "alloc") (param i32) (result i32) i32.const 256)
-        (func (export "handle") (param i32 i32))
-    )"#).unwrap();
-    WasmActorBuilder::new(engine, no_send).build().unwrap();
-}
-
-#[test]
-fn build_rejects_missing_exports() {
-    let engine = SharedEngine::new().unwrap();
-
-    // Empty module — missing everything
-    let result = WasmActorBuilder::new(engine.clone(), wat::parse_str("(module)").unwrap()).build();
-    let err = result.err().expect("should fail");
-    let msg = format!("{err}");
-    assert!(msg.contains("memory") || msg.contains("alloc"), "got: {msg}");
-
-    // Memory only — missing alloc
-    let mem_only = wat::parse_str("(module (memory (export \"memory\") 1))").unwrap();
-    let err = WasmActorBuilder::new(engine.clone(), mem_only).build().err().expect("should fail");
-    assert!(format!("{err}").contains("alloc"));
-
-    // Memory + alloc — missing handle
-    let no_handle = wat::parse_str(r#"(module
-        (memory (export "memory") 1)
-        (func (export "alloc") (param i32) (result i32) i32.const 0)
-    )"#).unwrap();
-    let err = WasmActorBuilder::new(engine.clone(), no_handle).build().err().expect("should fail");
-    assert!(format!("{err}").contains("handle"));
-
-    // Wrong memory export name
-    let wrong_mem = wat::parse_str(r#"(module
-        (memory (export "mem") 1)
-        (func (export "alloc") (param i32) (result i32) i32.const 0)
-        (func (export "handle") (param i32 i32))
-    )"#).unwrap();
-    assert!(WasmActorBuilder::new(engine.clone(), wrong_mem).build().is_err());
-
-    // Wrong alloc signature (two params)
-    let wrong_alloc = wat::parse_str(r#"(module
-        (memory (export "memory") 1)
-        (func (export "alloc") (param i32 i32) (result i32) i32.const 0)
-        (func (export "handle") (param i32 i32))
-    )"#).unwrap();
-    assert!(WasmActorBuilder::new(engine.clone(), wrong_alloc).build().is_err());
-
-    // Wrong handle signature (returns i32)
-    let wrong_handle = wat::parse_str(r#"(module
-        (memory (export "memory") 1)
-        (func (export "alloc") (param i32) (result i32) i32.const 0)
-        (func (export "handle") (param i32 i32) (result i32) i32.const 0)
-    )"#).unwrap();
-    assert!(WasmActorBuilder::new(engine, wrong_handle).build().is_err());
-}
-
-#[test]
-fn build_rejects_invalid_wasm_and_disabled_features() {
-    let engine = SharedEngine::new().unwrap();
-
-    // Invalid bytes
-    assert!(WasmActorBuilder::new(engine.clone(), vec![0xDE, 0xAD]).build().is_err());
-
-    // Empty bytes
-    assert!(WasmActorBuilder::new(engine.clone(), vec![]).build().is_err());
-
-    // Truncated valid wasm
-    let valid = guest_wasm("echo");
-    let truncated = valid[..valid.len() / 2].to_vec();
-    assert!(WasmActorBuilder::new(engine.clone(), truncated).build().is_err());
-
-    // SIMD (disabled in engine config)
-    let simd = wat::parse_str(r#"(module
-        (memory (export "memory") 1)
-        (func (export "alloc") (param i32) (result i32) i32.const 0)
-        (func (export "handle") (param i32 i32)
-            v128.const i32x4 0 0 0 0
-            drop
-        )
-    )"#);
-    assert!(simd.is_err() || WasmActorBuilder::new(engine.clone(), simd.unwrap()).build().is_err());
-
-    // Multi-value (disabled)
-    let mv = wat::parse_str(r#"(module
-        (memory (export "memory") 1)
-        (func (export "alloc") (param i32) (result i32) i32.const 0)
-        (func (export "handle") (param i32 i32)
-            (block (result i32 i32)
-                i32.const 1
-                i32.const 2
-            )
-            drop drop
-        )
-    )"#);
-    assert!(mv.is_err() || WasmActorBuilder::new(engine, mv.unwrap()).build().is_err());
-}
-
-#[test]
-fn error_display_and_from_impls() {
-    // MissingExport
-    let missing = WasmActorError::MissingExport("memory");
-    let s = format!("{missing}");
-    assert!(s.contains("memory"), "MissingExport display: {s}");
-
-    // Wasmtime error via From
-    let wt_err = wasmtime::Error::msg("test error");
-    let converted: WasmActorError = wt_err.into();
-    let s = format!("{converted}");
-    assert!(s.contains("test error"), "Wasmtime display: {s}");
-
-    // Distinct display
-    let missing_s = format!("{}", WasmActorError::MissingExport("alloc"));
-    let wt_s = format!("{}", WasmActorError::Wasmtime(wasmtime::Error::msg("x")));
-    assert_ne!(missing_s, wt_s);
-
-    // Send + Sync
-    fn assert_send_sync<T: Send + Sync>() {}
-    assert_send_sync::<WasmActorError>();
-}
-
-proptest! {
-    #[test]
-    fn prop_builder_never_panics(
-        pages in 0u32..10,
-        alloc_return in prop_oneof![-100i32..0, 0i32..70000, Just(i32::MIN), Just(i32::MAX)],
-    ) {
-        let wat = format!(
-            r#"(module
-                (memory (export "memory") {pages})
-                (func (export "alloc") (param i32) (result i32) i32.const {alloc_return})
-                (func (export "handle") (param i32 i32))
-            )"#
-        );
-        if let Ok(wasm) = wat::parse_str(&wat) {
-            let engine = SharedEngine::new().unwrap();
-            // Should succeed or return clean error — never panic
-            let _ = WasmActorBuilder::new(engine, wasm).build();
-        }
-    }
-}
-
-// ═══════════════════════════════════════════════════════════════════════════════
-// Group 2: Echo round-trip
-// ═══════════════════════════════════════════════════════════════════════════════
-
-#[test]
-fn echo_round_trip_story() {
-    let engine = SharedEngine::new().unwrap();
-    let actor = WasmActorBuilder::new(engine, guest_wasm("echo")).build().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-    let addr = rt.spawn(actor).unwrap();
-
-    // Text payload
-    rt.send_to(addr, framed_msg(inbox.addr(), b"hello wasm")).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, b"hello wasm");
-
-    // Binary payload (all 256 byte values)
-    let binary: Vec<u8> = (0..=255).collect();
-    rt.send_to(addr, framed_msg(inbox.addr(), &binary)).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, binary);
-
-    // Empty message — echo needs >= 32 bytes, so no reply
-    rt.send_to(addr, ByteMessage(vec![])).unwrap();
-    rt.tick();
-    assert!(inbox.try_recv().is_none());
-
-    // Address-only message (32 bytes, 0 payload) — echo sends empty payload
-    rt.send_to(addr, framed_msg(inbox.addr(), b"")).unwrap();
-    rt.tick();
-    let resp = inbox.try_recv().unwrap();
-    assert!(resp.0.is_empty(), "address-only should echo empty payload");
-
-    // Single byte payload
-    rt.send_to(addr, framed_msg(inbox.addr(), &[0x42])).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, vec![0x42]);
-
-    // Actor still alive after all those messages
-    rt.send_to(addr, framed_msg(inbox.addr(), b"fin")).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, b"fin");
-}
-
-proptest! {
-    #[test]
-    fn prop_echo_preserves_arbitrary_payload(payload in proptest::collection::vec(any::<u8>(), 0..500)) {
-        let engine = SharedEngine::new().unwrap();
-        let actor = WasmActorBuilder::new(engine, guest_wasm("echo")).build().unwrap();
-        let rt = Runtime::new(RuntimeConfig::default());
-        let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-        let addr = rt.spawn(actor).unwrap();
-
-        rt.send_to(addr, framed_msg(inbox.addr(), &payload)).unwrap();
-        rt.tick();
-
-        if payload.is_empty() {
-            // echo guest: if len < 32, returns empty; if len == 32 (addr only), returns empty payload
-            let resp = inbox.try_recv();
-            // With 32-byte address + 0-byte payload, echo sends back empty
-            if let Some(msg) = resp {
-                prop_assert!(msg.0.is_empty());
-            }
-        } else {
-            let received = inbox.try_recv().expect("echo should reply for non-empty payload");
-            prop_assert_eq!(received.0, payload);
-        }
-    }
-}
-
-#[test]
-fn double_and_silent_contracts() {
-    let engine = SharedEngine::new().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-
-    // Double: 1 message in → exactly 2 out
-    let double = WasmActorBuilder::new(engine.clone(), guest_wasm("double")).build().unwrap();
-    let daddr = rt.spawn(double).unwrap();
-    rt.send_to(daddr, framed_msg(inbox.addr(), b"dup")).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, b"dup");
-    assert_eq!(inbox.try_recv().unwrap().0, b"dup");
-    assert!(inbox.try_recv().is_none(), "exactly 2");
-
-    // Silent: messages in → 0 out
-    let silent = WasmActorBuilder::new(engine, guest_wasm("silent")).build().unwrap();
-    let saddr = rt.spawn(silent).unwrap();
-    for _ in 0..10 {
-        rt.send_to(saddr, framed_msg(inbox.addr(), b"ignored")).unwrap();
-    }
-    rt.tick();
-    assert!(inbox.try_recv().is_none(), "silent never sends");
-}
-
-// ═══════════════════════════════════════════════════════════════════════════════
-// Group 3: Alloc failure resilience
-// ═══════════════════════════════════════════════════════════════════════════════
-
-proptest! {
-    #[test]
-    fn prop_any_alloc_return_never_kills_actor(
-        alloc_val in prop_oneof![
-            -100i32..0,
-            0i32..70000,
-            Just(i32::MIN),
-            Just(i32::MAX),
-            Just(0i32),
-            Just(65500i32),
-            Just(65536i32),
-        ],
-    ) {
-        let wasm = alloc_returns_wat(alloc_val);
-        let engine = SharedEngine::new().unwrap();
-        let actor = WasmActorBuilder::new(engine, wasm).build().unwrap();
-        let rt = Runtime::new(RuntimeConfig::default());
-        let addr = rt.spawn(actor).unwrap();
-
-        // Send two messages — actor must survive both regardless of alloc return
-        rt.send_to(addr, ByteMessage(vec![1, 2, 3])).unwrap();
-        rt.tick();
-        rt.send_to(addr, ByteMessage(vec![4, 5, 6])).unwrap();
-        rt.tick();
-    }
-}
-
-#[test]
-fn alloc_trap_recovery() {
-    // Alloc traps on first call (counter == 0), succeeds thereafter
-    let wat = r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (global $calls (mut i32) (i32.const 0))
-        (func (export "alloc") (param $len i32) (result i32)
-            (global.set $calls (i32.add (global.get $calls) (i32.const 1)))
-            (if (result i32) (i32.eq (global.get $calls) (i32.const 1))
-                (then unreachable)
-                (else i32.const 4096)
-            )
-        )
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            (if (i32.ge_u (local.get $len) (i32.const 33))
-                (then
-                    (call $send
-                        (local.get $ptr)
-                        (i32.add (local.get $ptr) (i32.const 32))
-                        (i32.sub (local.get $len) (i32.const 32))
-                    )
-                )
-            )
-        )
-    )"#;
-    let engine = SharedEngine::new().unwrap();
-    let actor = WasmActorBuilder::new(engine, wat::parse_str(wat).unwrap()).build().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-    let addr = rt.spawn(actor).unwrap();
-
-    // First message — alloc traps, dropped
-    rt.send_to(addr, framed_msg(inbox.addr(), b"first")).unwrap();
-    rt.tick();
-    assert!(inbox.try_recv().is_none(), "first msg dropped due to alloc trap");
-
-    // Second message — alloc succeeds, echoed
-    rt.send_to(addr, framed_msg(inbox.addr(), b"second")).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, b"second");
-}
-
-#[test]
-fn alloc_alternates_and_exhaustion() {
-    // Part A: alternating alloc (even calls succeed, odd calls return 0)
-    let wat = r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (global $calls (mut i32) (i32.const 0))
-        (func (export "alloc") (param $len i32) (result i32)
-            (global.set $calls (i32.add (global.get $calls) (i32.const 1)))
-            (if (result i32) (i32.rem_u (global.get $calls) (i32.const 2))
-                (then i32.const 4096)
-                (else i32.const 0)
-            )
-        )
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            (if (i32.ge_u (local.get $len) (i32.const 33))
-                (then
-                    (call $send
-                        (local.get $ptr)
-                        (i32.add (local.get $ptr) (i32.const 32))
-                        (i32.sub (local.get $len) (i32.const 32))
-                    )
-                )
-            )
-        )
-    )"#;
-    let engine = SharedEngine::new().unwrap();
-    let actor = WasmActorBuilder::new(engine.clone(), wat::parse_str(wat).unwrap()).build().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-    let addr = rt.spawn(actor).unwrap();
-
-    let mut echoed = 0;
-    for i in 0u8..6 {
-        rt.send_to(addr, framed_msg(inbox.addr(), &[i])).unwrap();
-        rt.tick();
-        if inbox.try_recv().is_some() { echoed += 1; }
-    }
-    assert_eq!(echoed, 3, "should echo on odd-numbered alloc calls only");
-
-    // Part B: echo guest under sustained load — bump allocator exhaustion
-    let echo = WasmActorBuilder::new(engine, guest_wasm("echo")).build().unwrap();
-    let rt2 = Runtime::new(RuntimeConfig::default());
-    let inbox2 = rt2.new_inbox::<ByteMessage>().unwrap();
-    let addr2 = rt2.spawn(echo).unwrap();
-
-    let mut total_echoed = 0;
-    for _ in 0..2000 {
-        rt2.send_to(addr2, framed_msg(inbox2.addr(), b"ping")).unwrap();
-        rt2.tick();
-        if inbox2.try_recv().is_some() { total_echoed += 1; }
-    }
-    // Some succeed (before OOM), some fail (after OOM). Actor survives throughout.
-    assert!(total_echoed > 0, "at least some messages should echo");
-    assert!(total_echoed < 2000, "bump allocator should eventually exhaust");
-}
-
-// ═══════════════════════════════════════════════════════════════════════════════
-// Group 4: Handle trap & outbox semantics
-// ═══════════════════════════════════════════════════════════════════════════════
-
-#[test]
-fn handle_trap_actor_survives() {
-    let engine = SharedEngine::new().unwrap();
-
-    // unreachable trap
-    let unreachable_wat = wat::parse_str(r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (func (export "alloc") (param i32) (result i32) i32.const 256)
-        (func (export "handle") (param i32 i32) unreachable)
-    )"#).unwrap();
-    let actor = WasmActorBuilder::new(engine.clone(), unreachable_wat).build().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let addr = rt.spawn(actor).unwrap();
-
-    // Send 3 messages — all trap, all dropped
-    for _ in 0..3 {
-        rt.send_to(addr, ByteMessage(vec![1])).unwrap();
-        rt.tick();
-    }
-
-    // Division by zero trap
-    let divzero_wat = wat::parse_str(r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (func (export "alloc") (param i32) (result i32) i32.const 256)
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            (drop (i32.div_u (local.get $len) (i32.const 0)))
-        )
-    )"#).unwrap();
-    let actor2 = WasmActorBuilder::new(engine, divzero_wat).build().unwrap();
-    let addr2 = rt.spawn(actor2).unwrap();
-    rt.send_to(addr2, ByteMessage(vec![1])).unwrap();
-    rt.tick(); // no panic
-}
-
-#[test]
-fn outbox_cleared_on_trap() {
-    // Guest sends once (valid), then traps. Outbox should be cleared.
-    let wat = r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (func (export "alloc") (param i32) (result i32) i32.const 256)
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            ;; Send a valid message
-            (call $send (local.get $ptr) (local.get $ptr) (i32.const 1))
-            ;; Then trap
-            unreachable
-        )
-    )"#;
-    let engine = SharedEngine::new().unwrap();
-    let actor = WasmActorBuilder::new(engine, wat::parse_str(wat).unwrap()).build().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-    let addr = rt.spawn(actor).unwrap();
-
-    rt.send_to(addr, framed_msg(inbox.addr(), b"data")).unwrap();
-    rt.tick();
-    assert!(inbox.try_recv().is_none(), "outbox cleared on trap — no messages delivered");
-
-    // Actor survives
-    rt.send_to(addr, ByteMessage(vec![1])).unwrap();
-    rt.tick();
-}
-
-proptest! {
-    #[test]
-    fn prop_any_send_args_never_crash_host(
-        dest_ptr in any::<i32>(),
-        payload_ptr in any::<i32>(),
-        payload_len in any::<i32>(),
-    ) {
-        let wasm = send_args_wat(dest_ptr, payload_ptr, payload_len);
-        let engine = SharedEngine::new().unwrap();
-        let actor = WasmActorBuilder::new(engine, wasm).build().unwrap();
-        let rt = Runtime::new(RuntimeConfig::default());
-        let addr = rt.spawn(actor).unwrap();
-
-        rt.send_to(addr, ByteMessage(vec![0u8; 64])).unwrap();
-        rt.tick(); // never panic
-    }
-}
-
-#[test]
-fn send_boundary_conditions() {
-    let engine = SharedEngine::new().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-
-    // Zero-length payload sends empty ByteMessage
-    let zero_len = wat::parse_str(r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (func (export "alloc") (param i32) (result i32) i32.const 256)
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            (call $send (local.get $ptr) (i32.const 0) (i32.const 0))
-        )
-    )"#).unwrap();
-    let actor = WasmActorBuilder::new(engine.clone(), zero_len).build().unwrap();
-    let addr = rt.spawn(actor).unwrap();
-    rt.send_to(addr, framed_msg(inbox.addr(), b"x")).unwrap();
-    rt.tick();
-    let msg = inbox.try_recv().expect("zero-len payload should deliver");
-    assert!(msg.0.is_empty());
-
-    // Dest at exact memory boundary: ptr=65504, needs 32 bytes → end=65536 = memory size. Works.
-    let exact_end = send_args_wat(65504, 0, 1);
-    let actor2 = WasmActorBuilder::new(engine.clone(), exact_end).build().unwrap();
-    let addr2 = rt.spawn(actor2).unwrap();
-    rt.send_to(addr2, ByteMessage(vec![0u8; 64])).unwrap();
-    rt.tick(); // should not trap (exact fit)
-
-    // Dest one past boundary: ptr=65505 → end=65537 > 65536. Traps.
-    let one_past = send_args_wat(65505, 0, 1);
-    let actor3 = WasmActorBuilder::new(engine.clone(), one_past).build().unwrap();
-    let addr3 = rt.spawn(actor3).unwrap();
-    rt.send_to(addr3, ByteMessage(vec![0u8; 64])).unwrap();
-    rt.tick(); // traps but actor survives
-
-    // Send to garbage address — silently dropped (no matching inbox)
-    let garbage = wat::parse_str(r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (data (i32.const 500) "\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff\ff")
-        (func (export "alloc") (param i32) (result i32) i32.const 256)
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            (call $send (i32.const 500) (i32.const 0) (i32.const 1))
-        )
-    )"#).unwrap();
-    let actor4 = WasmActorBuilder::new(engine, garbage).build().unwrap();
-    let addr4 = rt.spawn(actor4).unwrap();
-    rt.send_to(addr4, ByteMessage(vec![1])).unwrap();
-    rt.tick();
-    assert!(inbox.try_recv().is_none(), "garbage addr → no delivery to our inbox");
-}
-
-// ═══════════════════════════════════════════════════════════════════════════════
-// Group 5: Lifecycle & integration
-// ═══════════════════════════════════════════════════════════════════════════════
-
-#[test]
-fn full_lifecycle_story() {
-    let engine = SharedEngine::new().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-
-    // Spawn echo, use it
-    let echo = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    let addr1 = rt.spawn(echo).unwrap();
-    rt.send_to(addr1, framed_msg(inbox.addr(), b"alive")).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, b"alive");
-
-    // Stop it
-    let _ = rt.stop_actor(addr1);
-    rt.tick();
-    rt.tick();
-
-    // Send to dead actor — silently dropped
-    let _ = rt.send_to(addr1, framed_msg(inbox.addr(), b"dead"));
-    rt.tick();
-    assert!(inbox.try_recv().is_none());
-
-    // Respawn — different address, still works
-    let echo2 = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    let addr2 = rt.spawn(echo2).unwrap();
-    assert_ne!(addr1, addr2, "respawned actor gets different address");
-    rt.send_to(addr2, framed_msg(inbox.addr(), b"new")).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, b"new");
-
-    // Double-stop is fine
-    let _ = rt.stop_actor(addr2);
-    let _ = rt.stop_actor(addr2);
-    rt.tick();
-}
-
-struct Forwarder {
-    engine: SharedEngine,
-    wasm_bytes: Vec<u8>,
-    inbox_addr: ActorAddress,
-}
-
-#[derive(Clone)]
-struct ForwardMsg(Vec<u8>);
-
-impl ActorInterface for Forwarder {
-    type Incoming = ForwardMsg;
-    type Response = ();
-    fn handle(&mut self, ctx: &Ctx, msg: ForwardMsg) {
-        let wasm = WasmActorBuilder::new(self.engine.clone(), self.wasm_bytes.clone())
-            .build()
-            .unwrap();
-        let wasm_addr = ctx.spawn(wasm).unwrap();
-        let _ = ctx.send(wasm_addr, framed_msg(&self.inbox_addr, &msg.0));
-    }
-}
-
-#[test]
-fn wasm_native_interop() {
-    let engine = SharedEngine::new().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-
-    // Native forwarder spawns a WASM echo actor and forwards a message to it
-    let forwarder = Forwarder {
-        engine: engine.clone(),
-        wasm_bytes: guest_wasm("echo"),
-        inbox_addr: inbox.addr().clone(),
-    };
-    let fwd_addr = rt.spawn(forwarder).unwrap();
-    rt.send_to(fwd_addr, ForwardMsg(b"via-native".to_vec())).unwrap();
-    for _ in 0..5 { rt.tick(); }
-    assert_eq!(inbox.try_recv().unwrap().0, b"via-native");
-}
-
-#[test]
-fn wasm_relay_chain() {
-    // A→B→C→inbox: each echo actor strips 32 bytes of address and sends payload to that address
-    let engine = SharedEngine::new().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-
-    let a = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    let b = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    let c = WasmActorBuilder::new(engine, guest_wasm("echo")).build().unwrap();
-    let addr_a = rt.spawn(a).unwrap();
-    let addr_b = rt.spawn(b).unwrap();
-    let addr_c = rt.spawn(c).unwrap();
-
-    // Nested framed: [addr_b | addr_c | addr_inbox | "end"]
-    let mut payload = Vec::new();
-    payload.extend_from_slice(&addr_b.0);
-    payload.extend_from_slice(&addr_c.0);
-    payload.extend_from_slice(&inbox.addr().0);
-    payload.extend_from_slice(b"end");
-
-    rt.send_to(addr_a, ByteMessage(payload)).unwrap();
-    for _ in 0..3 { rt.tick(); }
-
-    // After 3 hops, inbox should have the final payload "end"
-    // A sends [addr_c | addr_inbox | "end"] to B
-    // B sends [addr_inbox | "end"] to C
-    // C sends "end" to inbox
-    let msg = inbox.try_recv().expect("relay chain should deliver");
-    assert_eq!(msg.0, b"end");
-}
-
-struct DeathCounter {
-    count: std::sync::Arc<std::sync::atomic::AtomicUsize>,
-}
-
-#[derive(Clone)]
-struct WatchAddr(ActorAddress);
-
-impl ActorInterface for DeathCounter {
-    type Incoming = WatchAddr;
-    type Response = ();
-    fn handle(&mut self, ctx: &Ctx, msg: WatchAddr) {
-        ctx.watch(msg.0);
-    }
-    fn on_actor_exit(&mut self, _ctx: &Ctx, _exited: swactor::actor::ActorExited) {
-        self.count.fetch_add(1, std::sync::atomic::Ordering::SeqCst);
-    }
-}
-
-#[test]
-fn watch_notification() {
-    let engine = SharedEngine::new().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default())
-        .with_extension(std::sync::Arc::new(StdExtension::new()));
-
-    let count = std::sync::Arc::new(std::sync::atomic::AtomicUsize::new(0));
-    let target = WasmActorBuilder::new(engine, guest_wasm("silent")).build().unwrap();
-    let target_addr = rt.spawn(target).unwrap();
-    let watcher_addr = rt.spawn(DeathCounter { count: count.clone() }).unwrap();
-
-    rt.send_to(watcher_addr, WatchAddr(target_addr)).unwrap();
-    for _ in 0..3 { rt.tick(); }
-
-    let _ = rt.stop_actor(target_addr);
-    for _ in 0..5 { rt.tick(); }
-
-    assert_eq!(count.load(std::sync::atomic::Ordering::SeqCst), 1);
-}
-
-proptest! {
-    #[test]
-    fn prop_lifecycle_fuzz(
-        guest_idx in 0usize..3,
-        n_msgs in 0u8..20,
-        ticks_before in 1usize..5,
-        ticks_after in 1usize..5,
-    ) {
-        let names = ["echo", "double", "silent"];
-        let engine = SharedEngine::new().unwrap();
-        let actor = WasmActorBuilder::new(engine, guest_wasm(names[guest_idx])).build().unwrap();
-        let rt = Runtime::new(RuntimeConfig::default());
-        let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-        let addr = rt.spawn(actor).unwrap();
-
-        for _ in 0..n_msgs {
-            let _ = rt.send_to(addr, framed_msg(inbox.addr(), b"x"));
-        }
-        for _ in 0..ticks_before { rt.tick(); }
-        let _ = rt.stop_actor(addr);
-        for _ in 0..ticks_after { rt.tick(); }
-        while inbox.try_recv().is_some() {}
-    }
-}
-
-proptest! {
-    #[test]
-    fn prop_mixed_guest_response_counts(
-        echo_n in 0usize..5,
-        double_n in 0usize..5,
-        silent_n in 0usize..5,
-    ) {
-        let engine = SharedEngine::new().unwrap();
-        let rt = Runtime::new(RuntimeConfig::default());
-        let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-
-        for _ in 0..echo_n {
-            let a = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-            let addr = rt.spawn(a).unwrap();
-            rt.send_to(addr, framed_msg(inbox.addr(), b"e")).unwrap();
-        }
-        for _ in 0..double_n {
-            let a = WasmActorBuilder::new(engine.clone(), guest_wasm("double")).build().unwrap();
-            let addr = rt.spawn(a).unwrap();
-            rt.send_to(addr, framed_msg(inbox.addr(), b"d")).unwrap();
-        }
-        for _ in 0..silent_n {
-            let a = WasmActorBuilder::new(engine.clone(), guest_wasm("silent")).build().unwrap();
-            let addr = rt.spawn(a).unwrap();
-            rt.send_to(addr, ByteMessage(b"s".to_vec())).unwrap();
-        }
-
-        rt.tick();
-        let total: usize = std::iter::from_fn(|| inbox.try_recv()).count();
-        prop_assert_eq!(total, echo_n + 2 * double_n);
-    }
-}
-
-#[test]
-fn non_byte_message_silently_ignored() {
-    // Send a String (wrong type) to a WASM actor — should be silently dropped
-    let engine = SharedEngine::new().unwrap();
-    let actor = WasmActorBuilder::new(engine, guest_wasm("echo")).build().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-    let addr = rt.spawn(actor).unwrap();
-
-    // send_to with wrong type — shouldn't panic
-    let _ = rt.send_to(addr, "wrong type".to_string());
-    rt.tick();
-    assert!(inbox.try_recv().is_none());
-
-    // Actor still alive
-    rt.send_to(addr, framed_msg(inbox.addr(), b"ok")).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, b"ok");
-}
-
-// ═══════════════════════════════════════════════════════════════════════════════
-// Group 6: Engine & runtime config
-// ═══════════════════════════════════════════════════════════════════════════════
-
-#[test]
-fn shared_engine_traits_and_clone() {
-    fn assert_send_sync<T: Send + Sync>() {}
-    fn assert_send<T: Send>() {}
-    assert_send_sync::<SharedEngine>();
-    assert_send::<WasmActor>();
-
-    let engine = SharedEngine::new().unwrap();
-    let _ = format!("{:?}", engine); // Debug doesn't panic
-
-    // Clone produces working independent engine
-    let clone = engine.clone();
-    let a1 = WasmActorBuilder::new(engine, guest_wasm("echo")).build().unwrap();
-    let a2 = WasmActorBuilder::new(clone, guest_wasm("echo")).build().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-    let addr1 = rt.spawn(a1).unwrap();
-    let addr2 = rt.spawn(a2).unwrap();
-    rt.send_to(addr1, framed_msg(inbox.addr(), b"c1")).unwrap();
-    rt.send_to(addr2, framed_msg(inbox.addr(), b"c2")).unwrap();
-    rt.tick();
-    let mut msgs: Vec<Vec<u8>> = std::iter::from_fn(|| inbox.try_recv().map(|m| m.0)).collect();
-    msgs.sort();
-    assert_eq!(msgs, vec![b"c1".to_vec(), b"c2".to_vec()]);
-
-    // ByteMessage traits
-    let bm = ByteMessage(vec![1, 2, 3]);
-    let bm2 = bm.clone();
-    assert_eq!(bm, bm2);
-    let _ = format!("{:?}", bm);
-}
-
-#[test]
-fn multi_thread_runtime() {
-    let engine = SharedEngine::new().unwrap();
-    let config = RuntimeConfig { num_threads: 4, ..RuntimeConfig::default() };
-    let rt = Runtime::new(config);
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-
-    let mut addrs = Vec::new();
-    for _ in 0..10 {
-        let actor = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-        addrs.push(rt.spawn(actor).unwrap());
-    }
-    for (i, addr) in addrs.iter().enumerate() {
-        rt.send_to(*addr, framed_msg(inbox.addr(), &[i as u8])).unwrap();
-    }
-
-    let handle = rt.run().unwrap();
-    let mut received = Vec::new();
-    for _ in 0..40 {
-        std::thread::sleep(std::time::Duration::from_millis(25));
-        while let Some(msg) = inbox.try_recv() {
-            received.push(msg.0[0]);
-        }
-        if received.len() == 10 { break; }
-    }
-    handle.shutdown();
-    received.sort();
-    assert_eq!(received, (0..10u8).collect::<Vec<_>>());
-}
-
-#[test]
-fn budget_and_mailbox() {
-    let engine = SharedEngine::new().unwrap();
-
-    // Budget=1: one message processed per tick
-    let mut cfg = RuntimeConfig::default();
-    cfg.actor_message_budget = 1;
-    let rt = Runtime::new(cfg);
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-    let echo = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    let addr = rt.spawn(echo).unwrap();
-    rt.send_to(addr, framed_msg(inbox.addr(), b"a")).unwrap();
-    rt.send_to(addr, framed_msg(inbox.addr(), b"b")).unwrap();
-    rt.send_to(addr, framed_msg(inbox.addr(), b"c")).unwrap();
-    rt.tick();
-    let first_tick: usize = std::iter::from_fn(|| inbox.try_recv()).count();
-    assert_eq!(first_tick, 1, "budget=1 processes exactly 1 per tick");
-    rt.tick();
-    rt.tick();
-    let rest: usize = std::iter::from_fn(|| inbox.try_recv()).count();
-    assert_eq!(rest, 2, "remaining 2 processed over next 2 ticks");
-
-    // Self-send loop bounded by budget — no explosion
-    let mut cfg2 = RuntimeConfig::default();
-    cfg2.actor_message_budget = 2;
-    let rt2 = Runtime::new(cfg2);
-    let echo2 = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    let self_addr = rt2.spawn(echo2).unwrap();
-    rt2.send_to(self_addr, framed_msg(&self_addr, b"loop")).unwrap();
-    for _ in 0..5 { rt2.tick(); } // no panic, bounded
-
-    // DropOldest mailbox
-    use swactor::runtime::MailboxOverflow;
-    let mut cfg3 = RuntimeConfig::default();
-    cfg3.default_mailbox_capacity = 3;
-    cfg3.mailbox_overflow = MailboxOverflow::DropOldest;
-    let rt3 = Runtime::new(cfg3);
-    let inbox3 = rt3.new_inbox::<ByteMessage>().unwrap();
-    let echo3 = WasmActorBuilder::new(engine, guest_wasm("echo")).build().unwrap();
-    let addr3 = rt3.spawn(echo3).unwrap();
-    for i in 0..10u8 {
-        rt3.send_to(addr3, framed_msg(inbox3.addr(), &[i])).unwrap();
-    }
-    rt3.tick();
-    let responses: Vec<_> = std::iter::from_fn(|| inbox3.try_recv()).collect();
-    assert!(responses.len() <= 3, "mailbox capacity limits processing: got {}", responses.len());
-}
-
-#[test]
-fn multiple_runtimes_and_scale() {
-    let engine = SharedEngine::new().unwrap();
-
-    // Two runtimes share engine
-    let rt1 = Runtime::new(RuntimeConfig::default());
-    let rt2 = Runtime::new(RuntimeConfig::default());
-    let inbox1 = rt1.new_inbox::<ByteMessage>().unwrap();
-    let inbox2 = rt2.new_inbox::<ByteMessage>().unwrap();
-    let a1 = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    let a2 = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    let addr1 = rt1.spawn(a1).unwrap();
-    let addr2 = rt2.spawn(a2).unwrap();
-    rt1.send_to(addr1, framed_msg(inbox1.addr(), b"rt1")).unwrap();
-    rt2.send_to(addr2, framed_msg(inbox2.addr(), b"rt2")).unwrap();
-    rt1.tick();
-    rt2.tick();
-    assert_eq!(inbox1.try_recv().unwrap().0, b"rt1");
-    assert_eq!(inbox2.try_recv().unwrap().0, b"rt2");
-
-    // 50 actors from same engine
-    let rt3 = Runtime::new(RuntimeConfig::default());
-    let inbox3 = rt3.new_inbox::<ByteMessage>().unwrap();
-    for i in 0..50u8 {
-        let a = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-        let addr = rt3.spawn(a).unwrap();
-        rt3.send_to(addr, framed_msg(inbox3.addr(), &[i])).unwrap();
-    }
-    rt3.tick();
-    let count: usize = std::iter::from_fn(|| inbox3.try_recv()).count();
-    assert_eq!(count, 50);
-
-    // Build+drop 100 actors without spawning — no leak
-    for _ in 0..100 {
-        let _ = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    }
-}
-
-#[test]
-fn ordering_and_determinism() {
-    let engine = SharedEngine::new().unwrap();
-
-    // FIFO ordering
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-    let echo = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    let addr = rt.spawn(echo).unwrap();
-    for i in 0..20u8 {
-        rt.send_to(addr, framed_msg(inbox.addr(), &[i])).unwrap();
-    }
-    rt.tick();
-    let msgs: Vec<u8> = std::iter::from_fn(|| inbox.try_recv().map(|m| m.0[0])).collect();
-    assert_eq!(msgs, (0..20u8).collect::<Vec<_>>(), "FIFO preserved");
-
-    // Determinism: same input → same output across runs
-    let mut results = Vec::new();
-    for _ in 0..5 {
-        let echo = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-        let rt = Runtime::new(RuntimeConfig::default());
-        let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-        let addr = rt.spawn(echo).unwrap();
-        rt.send_to(addr, framed_msg(inbox.addr(), b"deterministic")).unwrap();
-        rt.tick();
-        results.push(inbox.try_recv().unwrap().0);
-    }
-    assert!(results.windows(2).all(|w| w[0] == w[1]), "deterministic across runs");
-}
-
-// ═══════════════════════════════════════════════════════════════════════════════
-// Group 7: WASM feature coverage & guest computation
-// ═══════════════════════════════════════════════════════════════════════════════
-
-#[test]
-fn kitchen_sink_wat_module() {
-    // Single WAT module exercising as many supported WASM features as possible.
-    // If this builds and doesn't trap, the engine config is correct.
-    let wat = r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 2)
-
-        ;; Data segments
-        (data (i32.const 0) "kitchen-sink")
-
-        ;; Globals: mutable and immutable
-        (global $counter (mut i32) (i32.const 0))
-        (global $MAGIC i32 (i32.const 42))
-
-        ;; Table for call_indirect
-        (table 2 funcref)
-        (elem (i32.const 0) $helper_add $helper_sub)
-
-        ;; Internal helper functions
-        (func $helper_add (param i32 i32) (result i32)
-            (i32.add (local.get 0) (local.get 1)))
-        (func $helper_sub (param i32 i32) (result i32)
-            (i32.sub (local.get 0) (local.get 1)))
-        (func $deep_call (param $x i32) (result i32)
-            (i32.mul (local.get $x) (i32.const 2)))
-
-        (func (export "alloc") (param $len i32) (result i32) i32.const 4096)
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            (local $a i32)
-            (local $b i64)
-            (local $c f32)
-            (local $d f64)
-            (local $i i32)
-            (local $tmp i32)
-
-            ;; Increment global counter
-            (global.set $counter (i32.add (global.get $counter) (i32.const 1)))
-
-            ;; Read immutable global
-            (local.set $a (global.get $MAGIC))
-
-            ;; i32 arithmetic
-            (local.set $a (i32.add (local.get $a) (i32.const 10)))
-            (local.set $a (i32.sub (local.get $a) (i32.const 5)))
-            (local.set $a (i32.mul (local.get $a) (i32.const 3)))
-            (local.set $a (i32.div_u (local.get $a) (i32.const 2)))
-            (local.set $a (i32.rem_u (local.get $a) (i32.const 100)))
-
-            ;; Bitwise operations
-            (local.set $a (i32.and (local.get $a) (i32.const 0xFF)))
-            (local.set $a (i32.or  (local.get $a) (i32.const 0x10)))
-            (local.set $a (i32.xor (local.get $a) (i32.const 0x01)))
-            (local.set $a (i32.shl (local.get $a) (i32.const 2)))
-            (local.set $a (i32.shr_u (local.get $a) (i32.const 1)))
-            (local.set $a (i32.shr_s (local.get $a) (i32.const 1)))
-            (local.set $a (i32.rotl (local.get $a) (i32.const 3)))
-            (local.set $a (i32.rotr (local.get $a) (i32.const 3)))
-
-            ;; Bit counting
-            (drop (i32.clz (local.get $a)))
-            (drop (i32.ctz (local.get $a)))
-            (drop (i32.popcnt (local.get $a)))
-            (drop (i32.eqz (local.get $a)))
-
-            ;; Comparisons
-            (drop (i32.gt_s (local.get $a) (i32.const 0)))
-            (drop (i32.lt_s (local.get $a) (i32.const 100)))
-            (drop (i32.le_u (local.get $a) (i32.const 200)))
-            (drop (i32.ge_s (local.get $a) (i32.const -1)))
-
-            ;; i64 operations
-            (local.set $b (i64.const 9999999999))
-            (local.set $b (i64.add (local.get $b) (i64.const 1)))
-            (i64.store (i32.const 800) (local.get $b))
-            (drop (i64.load (i32.const 800)))
-
-            ;; i64 ↔ i32 conversions
-            (drop (i32.wrap_i64 (local.get $b)))
-            (drop (i64.extend_i32_s (local.get $a)))
-
-            ;; f32 operations
-            (local.set $c (f32.const 3.14))
-            (local.set $c (f32.add (local.get $c) (f32.const 1.0)))
-            (local.set $c (f32.mul (local.get $c) (f32.const 2.0)))
-            (f32.store (i32.const 900) (local.get $c))
-            (drop (f32.load (i32.const 900)))
-
-            ;; f64 operations
-            (local.set $d (f64.promote_f32 (local.get $c)))
-            (local.set $d (f64.mul (local.get $d) (f64.const 0.5)))
-            (f64.store (i32.const 920) (local.get $d))
-
-            ;; Sign extension
-            (drop (i32.extend8_s (i32.const 0x80)))
-            (drop (i32.extend16_s (i32.const 0x8000)))
-
-            ;; Memory store/load variants
-            (i32.store8 (i32.const 700) (i32.const 0xAB))
-            (i32.store16 (i32.const 702) (i32.const 0xCDEF))
-            (drop (i32.load8_u (i32.const 700)))
-            (drop (i32.load16_u (i32.const 702)))
-
-            ;; local.tee
-            (local.set $tmp (local.tee $a (i32.const 77)))
-
-            ;; Nested function calls
-            (drop (call $deep_call (i32.const 5)))
-            (drop (call $helper_add (i32.const 10) (i32.const 20)))
-
-            ;; call_indirect via table
-            (drop (call_indirect (type 0) (i32.const 7) (i32.const 3) (i32.const 0)))
-            (drop (call_indirect (type 0) (i32.const 7) (i32.const 3) (i32.const 1)))
-
-            ;; Control flow: if/else
-            (if (i32.gt_s (local.get $len) (i32.const 0))
-                (then nop)
-                (else nop)
-            )
-
-            ;; select
-            (drop (select (i32.const 10) (i32.const 20) (i32.const 1)))
-
-            ;; block + br_if
-            (block $skip
-                (br_if $skip (i32.eqz (local.get $len)))
-                nop
-            )
-
-            ;; loop with counter
-            (local.set $i (i32.const 0))
-            (block $exit
-                (loop $loop
-                    (br_if $exit (i32.ge_u (local.get $i) (i32.const 5)))
-                    (local.set $i (i32.add (local.get $i) (i32.const 1)))
-                    (br $loop)
-                )
-            )
-
-            ;; br_table dispatch
-            (block $b0 (block $b1 (block $b2
-                (br_table $b0 $b1 $b2 (i32.const 1))
-            ) nop) nop) ;; falls through
-
-            ;; Bulk memory: fill and copy
-            (memory.fill (i32.const 600) (i32.const 0xAA) (i32.const 32))
-            (memory.copy (i32.const 650) (i32.const 600) (i32.const 32))
-
-            ;; memory.size and memory.grow
-            (drop (memory.size))
-            (drop (memory.grow (i32.const 1)))
-
-            ;; nop
-            nop
-        )
-
-        ;; Type for call_indirect
-        (type (func (param i32 i32) (result i32)))
-    )"#;
-    let engine = SharedEngine::new().unwrap();
-    let actor = WasmActorBuilder::new(engine, wat::parse_str(wat).unwrap()).build().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let addr = rt.spawn(actor).unwrap();
-
-    // Send message, tick — no trap
-    rt.send_to(addr, ByteMessage(vec![1, 2, 3, 4])).unwrap();
-    rt.tick();
-
-    // Send again — global counter increments, still no trap
-    rt.send_to(addr, ByteMessage(vec![5, 6, 7, 8])).unwrap();
-    rt.tick();
-}
-
-#[test]
-fn guest_mutable_state_persists() {
-    // Global counter increments on each handle call, sends count back
-    let wat = r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (global $count (mut i32) (i32.const 0))
-        (func (export "alloc") (param $len i32) (result i32) i32.const 4096)
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            (if (i32.lt_u (local.get $len) (i32.const 32)) (then return))
-            (global.set $count (i32.add (global.get $count) (i32.const 1)))
-            (i32.store (i32.const 200) (global.get $count))
-            (call $send (local.get $ptr) (i32.const 200) (i32.const 4))
-        )
-    )"#;
-    let engine = SharedEngine::new().unwrap();
-    let actor = WasmActorBuilder::new(engine, wat::parse_str(wat).unwrap()).build().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-    let addr = rt.spawn(actor).unwrap();
-
-    for expected in 1..=5u32 {
-        rt.send_to(addr, framed_msg(inbox.addr(), b"x")).unwrap();
-        rt.tick();
-        let resp = inbox.try_recv().expect("should get count back");
-        let count = u32::from_le_bytes([resp.0[0], resp.0[1], resp.0[2], resp.0[3]]);
-        assert_eq!(count, expected, "counter should persist across messages");
-    }
-}
-
-#[test]
-fn guest_transforms_payload() {
-    let engine = SharedEngine::new().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-
-    // XOR each byte with 0xFF (bitwise NOT)
-    let xor_wat = r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (func (export "alloc") (param $len i32) (result i32) i32.const 4096)
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            (local $i i32)
-            (if (i32.lt_u (local.get $len) (i32.const 33)) (then return))
-            (local.set $i (i32.const 32))
-            (block $exit (loop $loop
-                (br_if $exit (i32.ge_u (local.get $i) (local.get $len)))
-                (i32.store8
-                    (i32.add (local.get $ptr) (local.get $i))
-                    (i32.xor (i32.load8_u (i32.add (local.get $ptr) (local.get $i))) (i32.const 0xFF)))
-                (local.set $i (i32.add (local.get $i) (i32.const 1)))
-                (br $loop)
-            ))
-            (call $send (local.get $ptr)
-                (i32.add (local.get $ptr) (i32.const 32))
-                (i32.sub (local.get $len) (i32.const 32)))
-        )
-    )"#;
-    let xor = WasmActorBuilder::new(engine.clone(), wat::parse_str(xor_wat).unwrap()).build().unwrap();
-    let xaddr = rt.spawn(xor).unwrap();
-    rt.send_to(xaddr, framed_msg(inbox.addr(), &[0x00, 0xFF, 0xAA])).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, vec![0xFF, 0x00, 0x55]);
-
-    // Reverse payload
-    let rev_wat = r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (func (export "alloc") (param $len i32) (result i32) i32.const 4096)
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            (local $i i32) (local $plen i32) (local $pstart i32)
-            (if (i32.lt_u (local.get $len) (i32.const 33)) (then return))
-            (local.set $pstart (i32.add (local.get $ptr) (i32.const 32)))
-            (local.set $plen (i32.sub (local.get $len) (i32.const 32)))
-            (local.set $i (i32.const 0))
-            (block $exit (loop $loop
-                (br_if $exit (i32.ge_u (local.get $i) (local.get $plen)))
-                (i32.store8
-                    (i32.add (i32.const 900) (local.get $i))
-                    (i32.load8_u (i32.add (local.get $pstart)
-                        (i32.sub (i32.sub (local.get $plen) (i32.const 1)) (local.get $i)))))
-                (local.set $i (i32.add (local.get $i) (i32.const 1)))
-                (br $loop)
-            ))
-            (call $send (local.get $ptr) (i32.const 900) (local.get $plen))
-        )
-    )"#;
-    let rev = WasmActorBuilder::new(engine, wat::parse_str(rev_wat).unwrap()).build().unwrap();
-    let raddr = rt.spawn(rev).unwrap();
-    rt.send_to(raddr, framed_msg(inbox.addr(), b"abcde")).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, b"edcba");
-}
-
-#[test]
-fn guest_multi_send_patterns() {
-    let engine = SharedEngine::new().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-
-    // Guest sends to 2 different destinations in one handle call
-    let two_dest_wat = r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (func (export "alloc") (param $len i32) (result i32) i32.const 1024)
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            ;; Layout: [addr1:32][addr2:32][payload:rest]
-            (if (i32.ge_u (local.get $len) (i32.const 65))
-                (then
-                    (call $send (local.get $ptr)
-                        (i32.add (local.get $ptr) (i32.const 64))
-                        (i32.sub (local.get $len) (i32.const 64)))
-                    (call $send (i32.add (local.get $ptr) (i32.const 32))
-                        (i32.add (local.get $ptr) (i32.const 64))
-                        (i32.sub (local.get $len) (i32.const 64)))
-                )
-            )
-        )
-    )"#;
-    let actor = WasmActorBuilder::new(engine.clone(), wat::parse_str(two_dest_wat).unwrap())
-        .build().unwrap();
-    let inbox2 = rt.new_inbox::<ByteMessage>().unwrap();
-    let addr = rt.spawn(actor).unwrap();
-
-    let mut msg = Vec::new();
-    msg.extend_from_slice(&inbox.addr().0);   // addr1
-    msg.extend_from_slice(&inbox2.addr().0);  // addr2
-    msg.extend_from_slice(b"shared");         // payload
-    rt.send_to(addr, ByteMessage(msg)).unwrap();
-    rt.tick();
-    assert_eq!(inbox.try_recv().unwrap().0, b"shared");
-    assert_eq!(inbox2.try_recv().unwrap().0, b"shared");
-
-    // Guest sends 100 messages in one handle call
-    let many_sends_wat = r#"(module
-        (import "swactor" "send" (func $send (param i32 i32 i32)))
-        (memory (export "memory") 1)
-        (func (export "alloc") (param $len i32) (result i32) i32.const 1024)
-        (func (export "handle") (param $ptr i32) (param $len i32)
-            (local $i i32)
-            (if (i32.lt_u (local.get $len) (i32.const 32)) (then return))
-            (local.set $i (i32.const 0))
-            (block $exit (loop $loop
-                (br_if $exit (i32.ge_u (local.get $i) (i32.const 100)))
-                (i32.store8 (i32.const 900) (local.get $i))
-                (call $send (local.get $ptr) (i32.const 900) (i32.const 1))
-                (local.set $i (i32.add (local.get $i) (i32.const 1)))
-                (br $loop)
-            ))
-        )
-    )"#;
-    let actor2 = WasmActorBuilder::new(engine, wat::parse_str(many_sends_wat).unwrap())
-        .build().unwrap();
-    let addr2 = rt.spawn(actor2).unwrap();
-    rt.send_to(addr2, framed_msg(inbox.addr(), b"go")).unwrap();
-    rt.tick();
-    let count: usize = std::iter::from_fn(|| inbox.try_recv()).count();
-    assert_eq!(count, 100, "all 100 sends should be delivered");
-}
-
-// ═══════════════════════════════════════════════════════════════════════════════
-// Group 8: Stress
-// ═══════════════════════════════════════════════════════════════════════════════
-
-#[test]
-fn echo_sustained_load() {
-    let engine = SharedEngine::new().unwrap();
-    let rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<ByteMessage>().unwrap();
-
-    // 500 messages to echo actor
-    let echo = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-    let addr = rt.spawn(echo).unwrap();
-    for i in 0..500u16 {
-        rt.send_to(addr, framed_msg(inbox.addr(), &i.to_le_bytes())).unwrap();
-    }
-    for _ in 0..20 { rt.tick(); }
-    let count: usize = std::iter::from_fn(|| inbox.try_recv()).count();
-    assert_eq!(count, 500, "all 500 messages echoed");
-
-    // Spawn and stop 100 actors — no panic, no leak
-    for _ in 0..100 {
-        let a = WasmActorBuilder::new(engine.clone(), guest_wasm("echo")).build().unwrap();
-        let a_addr = rt.spawn(a).unwrap();
-        rt.send_to(a_addr, framed_msg(inbox.addr(), b"x")).unwrap();
-        rt.tick();
-        let _ = rt.stop_actor(a_addr);
-        rt.tick();
-    }
-    // Drain inbox
-    while inbox.try_recv().is_some() {}
-}
diff --git a/crates/python/Cargo.toml b/crates/bindings/python/Cargo.toml
similarity index 85%
rename from crates/python/Cargo.toml
rename to crates/bindings/python/Cargo.toml
index 00cd26e..3488195 100644
--- a/crates/python/Cargo.toml
+++ b/crates/bindings/python/Cargo.toml
@@ -8,5 +8,5 @@ name = "swactor"
 crate-type = ["cdylib"]
 
 [dependencies]
-swactor = { path = "../.." }
+swactor = { path = "../../.." }
 pyo3 = { version = "0.23", features = ["extension-module"] }
diff --git a/crates/python/pyproject.toml b/crates/bindings/python/pyproject.toml
similarity index 100%
rename from crates/python/pyproject.toml
rename to crates/bindings/python/pyproject.toml
diff --git a/crates/python/src/lib.rs b/crates/bindings/python/src/lib.rs
similarity index 100%
rename from crates/python/src/lib.rs
rename to crates/bindings/python/src/lib.rs
diff --git a/crates/python/uv.lock b/crates/bindings/python/uv.lock
similarity index 100%
rename from crates/python/uv.lock
rename to crates/bindings/python/uv.lock
diff --git a/crates/wasm/crypto/Cargo.toml b/crates/bindings/wasm-crypto/Cargo.toml
similarity index 100%
rename from crates/wasm/crypto/Cargo.toml
rename to crates/bindings/wasm-crypto/Cargo.toml
diff --git a/crates/wasm/crypto/src/lib.rs b/crates/bindings/wasm-crypto/src/lib.rs
similarity index 100%
rename from crates/wasm/crypto/src/lib.rs
rename to crates/bindings/wasm-crypto/src/lib.rs
diff --git a/crates/wasm/runtime/Cargo.toml b/crates/bindings/wasm-runtime/Cargo.toml
similarity index 66%
rename from crates/wasm/runtime/Cargo.toml
rename to crates/bindings/wasm-runtime/Cargo.toml
index 156c268..a227dbc 100644
--- a/crates/wasm/runtime/Cargo.toml
+++ b/crates/bindings/wasm-runtime/Cargo.toml
@@ -7,6 +7,5 @@ edition = "2024"
 crate-type = ["cdylib"]
 
 [dependencies]
-swactor = { path = "../../..", default-features = false, features = ["wasm"] }
-swactor-std = { path = "../../std", default-features = false, features = ["wasm"] }
+swactor = { path = "../../..", default-features = false, features = ["wasm", "std"] }
 wasm-bindgen = "0.2"
diff --git a/crates/wasm/runtime/demo.html b/crates/bindings/wasm-runtime/demo.html
similarity index 100%
rename from crates/wasm/runtime/demo.html
rename to crates/bindings/wasm-runtime/demo.html
diff --git a/crates/wasm/runtime/src/lib.rs b/crates/bindings/wasm-runtime/src/lib.rs
similarity index 99%
rename from crates/wasm/runtime/src/lib.rs
rename to crates/bindings/wasm-runtime/src/lib.rs
index 1268b49..fafb01e 100644
--- a/crates/wasm/runtime/src/lib.rs
+++ b/crates/bindings/wasm-runtime/src/lib.rs
@@ -4,7 +4,7 @@ use wasm_bindgen::prelude::*;
 
 use swactor::actor::{ActorAddress, ActorExited, ActorInterface};
 use swactor::runtime::{Ctx, Inbox, Runtime, RuntimeConfig};
-use swactor_std::{CtxGroups, CtxWatching, RuntimeNaming, RuntimeGroups, StdExtension};
+use swactor::std::{CtxGroups, CtxWatching, RuntimeNaming, RuntimeGroups, StdExtension};
 
 // ─── Core JS-facing types ───────────────────────────────────────────────────
 
diff --git a/crates/wasm/runtime/test.mjs b/crates/bindings/wasm-runtime/test.mjs
similarity index 100%
rename from crates/wasm/runtime/test.mjs
rename to crates/bindings/wasm-runtime/test.mjs
diff --git a/crates/ci/Cargo.toml b/crates/ci/Cargo.toml
deleted file mode 100644
index 4473d9c..0000000
--- a/crates/ci/Cargo.toml
+++ /dev/null
@@ -1,60 +0,0 @@
-[package]
-name = "swactor-ci"
-version = "0.1.0"
-edition = "2024"
-
-[dependencies]
-swactor = { path = "../..", features = ["serde"] }
-serde = { version = "1", features = ["derive"] }
-serde_yaml = "0.9"
-serde_json = "1"
-
-# Shared optional deps (used by lib local feature and binaries)
-tiny_http = { version = "0.12", optional = true }
-ureq = { version = "2", features = ["json"], optional = true }
-hmac = { version = "0.12", optional = true }
-sha2 = { version = "0.10", optional = true }
-hex = { version = "0.4", optional = true }
-
-# Binary-only optional deps
-iroh = { version = "0.96", optional = true }
-tokio = { version = "1", features = ["rt-multi-thread"], optional = true }
-clap = { version = "4", features = ["derive"], optional = true }
-ctrlc = { version = "3", optional = true }
-dashboard = { path = "../dashboard", optional = true }
-
-[features]
-default = []
-local = [
-    "dep:tiny_http",
-    "dep:ureq",
-    "dep:hmac",
-    "dep:sha2",
-    "dep:hex",
-]
-relay = [
-    "local",
-    "dep:iroh",
-    "dep:tokio",
-    "dep:clap",
-]
-runner = [
-    "local",
-    "dep:iroh",
-    "dep:tokio",
-    "dep:clap",
-    "dep:ctrlc",
-    "dep:dashboard",
-]
-
-[dev-dependencies]
-
-[[bin]]
-name = "ci-relay"
-path = "src/bin/ci_relay.rs"
-required-features = ["relay"]
-
-[[bin]]
-name = "local-runner"
-path = "src/bin/local_runner.rs"
-required-features = ["runner"]
diff --git a/crates/ci/src/bin/ci_relay.rs b/crates/ci/src/bin/ci_relay.rs
deleted file mode 100644
index 1271b43..0000000
--- a/crates/ci/src/bin/ci_relay.rs
+++ /dev/null
@@ -1,243 +0,0 @@
-//! ci-relay — webhook relay for VPS side.
-//!
-//! Receives Forgejo webhook POSTs over HTTP, then forwards the parsed
-//! `WebhookEvent` payloads to the Thinkpad local-runner over iroh.
-
-use std::sync::Arc;
-use std::time::Duration;
-
-use clap::Parser;
-use iroh::{Endpoint, RelayMode};
-use tokio::sync::Mutex as TokioMutex;
-
-use swactor_ci::webhook_server::parse_webhook_json;
-use swactor_ci::{EventType, WebhookEvent};
-
-/// ALPN protocol identifier for CI relay traffic over iroh.
-const ALPN: &[u8] = b"swactor/ci/1";
-
-/// Wire tag for WebhookEvent messages.
-const WEBHOOK_TAG: &str = "ci::WebhookEvent";
-
-#[derive(Parser)]
-#[command(name = "ci-relay", about = "Webhook relay: Forgejo → iroh → local-runner")]
-struct Args {
-    /// HTTP port for receiving Forgejo webhooks.
-    #[arg(long, default_value = "8787")]
-    port: u16,
-
-    /// Webhook secret for HMAC-SHA256 verification (empty to skip).
-    #[arg(long, default_value = "")]
-    secret: String,
-}
-
-fn main() {
-    let args = Args::parse();
-
-    let rt = tokio::runtime::Builder::new_multi_thread()
-        .enable_all()
-        .build()
-        .expect("failed to build tokio runtime");
-
-    let endpoint = rt.block_on(async {
-        Endpoint::builder()
-            .alpns(vec![ALPN.to_vec()])
-            .relay_mode(RelayMode::Default)
-            .bind()
-            .await
-            .expect("failed to bind iroh endpoint")
-    });
-
-    let node_id = endpoint.id();
-    eprintln!("ci-relay started");
-    eprintln!("  Iroh Node ID: {node_id}");
-    eprintln!("  Webhook HTTP: http://0.0.0.0:{}", args.port);
-    eprintln!();
-    eprintln!("Waiting for runner to connect...");
-
-    // Shared state: the active connection from the Thinkpad runner.
-    let connection: Arc<TokioMutex<Option<iroh::endpoint::Connection>>> =
-        Arc::new(TokioMutex::new(None));
-
-    // Spawn a task that accepts inbound iroh connections from the runner.
-    {
-        let endpoint = endpoint.clone();
-        let connection = Arc::clone(&connection);
-        rt.spawn(async move {
-            loop {
-                match endpoint.accept().await {
-                    Some(incoming) => match incoming.await {
-                        Ok(conn) => {
-                            let remote = conn.remote_id();
-                            eprintln!("Runner connected: {remote}");
-                            *connection.lock().await = Some(conn);
-                        }
-                        Err(e) => {
-                            eprintln!("iroh accept error: {e}");
-                        }
-                    },
-                    None => {
-                        eprintln!("iroh endpoint closed");
-                        break;
-                    }
-                }
-            }
-        });
-    }
-
-    // Run the HTTP webhook listener on a standard thread (blocking).
-    let secret = args.secret.clone();
-    let server = tiny_http::Server::http(format!("0.0.0.0:{}", args.port))
-        .expect("failed to start HTTP server");
-
-    eprintln!("Listening for webhooks...");
-
-    for mut request in server.incoming_requests() {
-        let response = handle_webhook(&mut request, &secret, &connection, &rt);
-        let _ = request.respond(response);
-    }
-}
-
-/// Handle an incoming webhook HTTP request.
-///
-/// Parses and verifies the webhook, then forwards the event over iroh.
-fn handle_webhook(
-    request: &mut tiny_http::Request,
-    secret: &str,
-    connection: &Arc<TokioMutex<Option<iroh::endpoint::Connection>>>,
-    rt: &tokio::runtime::Runtime,
-) -> tiny_http::Response<std::io::Cursor<Vec<u8>>> {
-    use hmac::{Hmac, Mac};
-    use sha2::Sha256;
-
-    if request.method() != &tiny_http::Method::Post {
-        return tiny_http::Response::from_string("method not allowed").with_status_code(405);
-    }
-
-    // Read body.
-    let mut body = String::new();
-    if let Err(e) = std::io::Read::read_to_string(&mut request.as_reader(), &mut body) {
-        eprintln!("webhook: failed to read body: {e}");
-        return tiny_http::Response::from_string("bad request").with_status_code(400);
-    }
-
-    // Verify HMAC-SHA256 signature if secret is non-empty.
-    if !secret.is_empty() {
-        let sig_header = request
-            .headers()
-            .iter()
-            .find(|h| h.field.equiv("X-Forgejo-Signature"))
-            .map(|h| h.value.as_str().to_string());
-
-        match sig_header {
-            Some(sig_hex) => {
-                type HmacSha256 = Hmac<Sha256>;
-                let mut mac =
-                    HmacSha256::new_from_slice(secret.as_bytes()).expect("HMAC key creation");
-                hmac::Mac::update(&mut mac, body.as_bytes());
-                let expected = hex::encode(mac.finalize().into_bytes());
-                if sig_hex != expected {
-                    eprintln!("webhook: signature mismatch");
-                    return tiny_http::Response::from_string("unauthorized").with_status_code(401);
-                }
-            }
-            None => {
-                eprintln!("webhook: missing signature header");
-                return tiny_http::Response::from_string("unauthorized").with_status_code(401);
-            }
-        }
-    }
-
-    // Determine event type from Forgejo header.
-    let event_header = request
-        .headers()
-        .iter()
-        .find(|h| h.field.equiv("X-Forgejo-Event"))
-        .map(|h| h.value.as_str().to_string())
-        .unwrap_or_default();
-
-    let event_type = match event_header.as_str() {
-        "push" => EventType::Push,
-        "create" => EventType::Tag,
-        "pull_request" => EventType::Merge,
-        other => {
-            eprintln!("webhook: ignoring event type '{other}'");
-            return tiny_http::Response::from_string("ignored").with_status_code(200);
-        }
-    };
-
-    // Parse JSON body.
-    let json: serde_json::Value = match serde_json::from_str(&body) {
-        Ok(v) => v,
-        Err(e) => {
-            eprintln!("webhook: failed to parse JSON: {e}");
-            return tiny_http::Response::from_string("bad json").with_status_code(400);
-        }
-    };
-
-    let webhook_event = match parse_webhook_json(&json, event_type) {
-        Some(e) => e,
-        None => {
-            eprintln!("webhook: could not extract fields from JSON");
-            return tiny_http::Response::from_string("bad payload").with_status_code(400);
-        }
-    };
-
-    eprintln!(
-        "webhook: {} {} on {}/{}",
-        webhook_event.commit_sha.get(..8).unwrap_or(&webhook_event.commit_sha),
-        webhook_event.branch,
-        webhook_event.repo_owner,
-        webhook_event.repo_name,
-    );
-
-    // Forward over iroh.
-    match forward_event(&webhook_event, connection, rt) {
-        Ok(()) => {
-            eprintln!("  → forwarded to runner");
-            tiny_http::Response::from_string("ok").with_status_code(200)
-        }
-        Err(e) => {
-            eprintln!("  → forward failed: {e}");
-            tiny_http::Response::from_string("relay error").with_status_code(502)
-        }
-    }
-}
-
-/// Serialize and send a WebhookEvent over the iroh connection.
-fn forward_event(
-    event: &WebhookEvent,
-    connection: &Arc<TokioMutex<Option<iroh::endpoint::Connection>>>,
-    rt: &tokio::runtime::Runtime,
-) -> Result<(), Box<dyn std::error::Error>> {
-    let payload = serde_json::to_vec(event)?;
-
-    rt.block_on(async {
-        let guard = connection.lock().await;
-        let conn = guard.as_ref().ok_or("no runner connected")?;
-
-        let mut send = conn.open_uni().await?;
-        write_tagged_message(&mut send, WEBHOOK_TAG.as_bytes(), &payload).await?;
-        send.finish()?;
-
-        // Wait briefly for the stream to flush.
-        tokio::time::sleep(Duration::from_millis(50)).await;
-
-        Ok(())
-    })
-}
-
-/// Write a tagged message to a QUIC send stream.
-///
-/// Frame format: `[4B tag_len][tag_bytes][payload_bytes]`
-async fn write_tagged_message(
-    send: &mut iroh::endpoint::SendStream,
-    tag: &[u8],
-    payload: &[u8],
-) -> Result<(), Box<dyn std::error::Error>> {
-    let tag_len = (tag.len() as u32).to_be_bytes();
-    send.write_all(&tag_len).await?;
-    send.write_all(tag).await?;
-    send.write_all(payload).await?;
-    Ok(())
-}
diff --git a/crates/ci/src/bin/local_runner.rs b/crates/ci/src/bin/local_runner.rs
deleted file mode 100644
index 67adac4..0000000
--- a/crates/ci/src/bin/local_runner.rs
+++ /dev/null
@@ -1,386 +0,0 @@
-//! local-runner — single-machine CI runner for the Thinkpad.
-//!
-//! Receives Forgejo webhooks, queues pipelines, and executes jobs
-//! one at a time for benchmark isolation.
-
-use std::sync::atomic::{AtomicBool, Ordering};
-use std::sync::{Arc, Mutex};
-use std::thread;
-use std::time::Duration;
-
-use clap::Parser;
-
-use swactor::actor::ActorAddress;
-use swactor::config::RuntimeConfig;
-use swactor::runtime::Runtime;
-
-use dashboard::ci_collector::{
-    CiSnapshot, CiStatsProvider, JobSnapshot, PipelineSnapshot, ProvisionerStatus,
-};
-
-use swactor_ci::local_coordinator::{LocalCiSnapshot, LocalCoordinator, LocalCoordinatorMsg};
-use swactor_ci::pipeline::PipelineExecution;
-use swactor_ci::status_reporter::StatusReporter;
-use swactor_ci::webhook_server;
-use swactor_ci::yaml;
-use swactor_ci::{CiConfig, LocalCiConfig};
-
-#[derive(Parser)]
-#[command(name = "local-runner", about = "Swactor local CI runner")]
-struct Args {
-    /// Webhook listen port.
-    #[arg(long, default_value = "8787")]
-    port: u16,
-
-    /// Forgejo instance URL.
-    #[arg(long, default_value = "")]
-    forgejo_url: String,
-
-    /// Forgejo API token.
-    #[arg(long, default_value = "")]
-    forgejo_token: String,
-
-    /// Webhook secret for HMAC verification (empty to skip).
-    #[arg(long, default_value = "")]
-    secret: String,
-
-    /// Path to .ci.yml file.
-    #[arg(long, default_value = ".ci.yml")]
-    yaml: String,
-
-    /// Base directory for git checkouts.
-    #[arg(long, default_value = "./ci-work")]
-    work_dir: String,
-
-    /// Git clone URL for the repository.
-    #[arg(long, default_value = "")]
-    repo_url: String,
-
-    /// Dashboard HTTP port (omit to disable).
-    #[arg(long)]
-    dashboard_port: Option<u16>,
-
-    /// Iroh Node ID of the ci-relay on the VPS (hex).
-    /// When set, webhooks arrive via iroh instead of HTTP.
-    #[arg(long)]
-    relay_node_id: Option<String>,
-}
-
-/// Bridge from LocalCiSnapshot to CiSnapshot for the dashboard.
-struct LocalCiSnapshotProvider {
-    snapshot: Arc<Mutex<LocalCiSnapshot>>,
-}
-
-impl CiStatsProvider for LocalCiSnapshotProvider {
-    fn snapshot(&self) -> CiSnapshot {
-        let local = self.snapshot.lock().unwrap().clone();
-        CiSnapshot {
-            active_pipelines: local
-                .active_pipelines
-                .iter()
-                .map(pipeline_to_dashboard)
-                .collect(),
-            recent_pipelines: local
-                .recent_pipelines
-                .iter()
-                .map(pipeline_to_dashboard)
-                .collect(),
-            provisioner_status: ProvisionerStatus::Online,
-            active_instances: if local.has_running_job { 1 } else { 0 },
-        }
-    }
-}
-
-fn pipeline_to_dashboard(p: &PipelineExecution) -> PipelineSnapshot {
-    // Convert between swactor_ci types and dashboard::ci_collector types
-    // (structurally identical but separate to avoid a dependency cycle).
-    let status: dashboard::ci_collector::PipelineStatus =
-        serde_json::from_value(serde_json::to_value(&p.status).unwrap()).unwrap();
-
-    PipelineSnapshot {
-        pipeline_id: dashboard::ci_collector::PipelineId(p.pipeline_id.0),
-        pipeline_name: p.pipeline_name.clone(),
-        repo_owner: p.repo_owner.clone(),
-        repo_name: p.repo_name.clone(),
-        commit_sha: p.commit_sha.clone(),
-        branch: p.branch.clone(),
-        status,
-        jobs: p
-            .jobs
-            .values()
-            .map(|j| {
-                let job_status: dashboard::ci_collector::JobStatus =
-                    serde_json::from_value(serde_json::to_value(&j.status).unwrap()).unwrap();
-                JobSnapshot {
-                    job_id: dashboard::ci_collector::JobId {
-                        pipeline_id: dashboard::ci_collector::PipelineId(j.job_id.pipeline_id.0),
-                        job_name: j.job_id.job_name.clone(),
-                    },
-                    job_name: j.definition.name.clone(),
-                    status: job_status,
-                    output_line_count: j.output_lines.len(),
-                }
-            })
-            .collect(),
-    }
-}
-
-fn main() {
-    let args = Args::parse();
-    let stop = Arc::new(AtomicBool::new(false));
-
-    // Signal handler.
-    {
-        let stop = Arc::clone(&stop);
-        ctrlc::set_handler(move || {
-            stop.store(true, Ordering::Relaxed);
-        })
-        .expect("failed to set signal handler");
-    }
-
-    // Optionally start dashboard.
-    let dash = args.dashboard_port.map(|port| {
-        let d = dashboard::start_dashboard(dashboard::DashboardConfig {
-            port,
-            ..Default::default()
-        });
-        d.install_tracing();
-        d
-    });
-
-    // Create 2-thread runtime.
-    let num_threads = 2;
-    let collector = dashboard::collector::StatsCollector::new(num_threads);
-    let mut rt = Runtime::new(RuntimeConfig {
-        num_threads,
-        max_actors: 256,
-        channel_buffer_size: 2000,
-        ..Default::default()
-    });
-    rt.set_stats_hook(collector.clone());
-
-    // Build config.
-    let ci_config = CiConfig {
-        webhook_port: args.port,
-        webhook_secret: args.secret.clone(),
-        forgejo_url: args.forgejo_url.clone(),
-        forgejo_token: args.forgejo_token.clone(),
-        data_dir: args.work_dir.clone(),
-    };
-    let local_config = LocalCiConfig {
-        ci: ci_config,
-        repo_url: args.repo_url.clone(),
-        work_dir: args.work_dir.clone(),
-        ci_yaml_path: args.yaml.clone(),
-    };
-
-    // Spawn StatusReporter.
-    let reporter_addr = rt
-        .spawn(StatusReporter::new())
-        .expect("failed to spawn StatusReporter");
-
-    // Spawn LocalCoordinator.
-    let coordinator = LocalCoordinator::new(local_config).with_status_reporter(reporter_addr);
-    let ci_snapshot = coordinator.ci_snapshot();
-    let coordinator_addr = rt
-        .spawn(coordinator)
-        .expect("failed to spawn LocalCoordinator");
-
-    // Load CI YAML from disk.
-    let yaml_content = std::fs::read_to_string(&args.yaml)
-        .unwrap_or_else(|e| panic!("failed to read {}: {e}", args.yaml));
-    let ci_yaml = yaml::parse_ci_yaml(&yaml_content)
-        .unwrap_or_else(|e| panic!("failed to parse CI YAML: {e}"));
-
-    // Start runtime.
-    let handle = rt.run().expect("failed to start runtime");
-
-    // Send CiYaml to coordinator.
-    let _ = handle
-        .runtime
-        .send_to(coordinator_addr, LocalCoordinatorMsg::SetCiYaml(ci_yaml));
-
-    // Wire dashboard.
-    if let Some(ref d) = dash {
-        d.set_runtime(Arc::clone(&handle.runtime), collector);
-        let provider = Arc::new(LocalCiSnapshotProvider {
-            snapshot: ci_snapshot,
-        });
-        d.set_ci(provider);
-    }
-
-    // Start webhook source: iroh relay or HTTP listener.
-    if let Some(ref relay_id_hex) = args.relay_node_id {
-        start_iroh_receiver(
-            relay_id_hex,
-            Arc::clone(&handle.runtime),
-            coordinator_addr,
-            Arc::clone(&stop),
-        );
-    } else {
-        let _webhook_handle = webhook_server::start_webhook_listener(
-            args.port,
-            args.secret,
-            Arc::clone(&handle.runtime),
-            coordinator_addr,
-        );
-    }
-
-    eprintln!("Local CI runner started");
-    if args.relay_node_id.is_some() {
-        eprintln!("  Webhook: via iroh relay");
-    } else {
-        eprintln!("  Webhook: http://0.0.0.0:{}", args.port);
-    }
-    eprintln!("  YAML:    {}", args.yaml);
-    eprintln!("  Workdir: {}", args.work_dir);
-    if let Some(port) = args.dashboard_port {
-        eprintln!("  Dashboard: http://0.0.0.0:{port}");
-    }
-
-    // Main loop — just wait for ctrlc.
-    while !stop.load(Ordering::Relaxed) {
-        thread::sleep(Duration::from_millis(100));
-    }
-
-    eprintln!("\nShutting down...");
-    handle.shutdown();
-    if let Some(d) = dash {
-        d.shutdown();
-    }
-    handle.join();
-}
-
-// ─── Iroh Webhook Receiver ──────────────────────────────────────────────────
-
-/// ALPN protocol identifier — must match ci-relay.
-const CI_ALPN: &[u8] = b"swactor/ci/1";
-
-/// Connect to the VPS ci-relay via iroh and receive WebhookEvents.
-///
-/// Runs in a background thread with its own tokio runtime.
-fn start_iroh_receiver(
-    relay_id_hex: &str,
-    swactor_rt: Arc<Runtime>,
-    coordinator_addr: ActorAddress,
-    stop: Arc<AtomicBool>,
-) {
-    let relay_key: iroh::PublicKey = relay_id_hex
-        .parse()
-        .unwrap_or_else(|e| panic!("invalid relay node ID '{relay_id_hex}': {e}"));
-
-    thread::Builder::new()
-        .name("iroh-receiver".into())
-        .spawn(move || {
-            let rt = tokio::runtime::Builder::new_current_thread()
-                .enable_all()
-                .build()
-                .expect("failed to build tokio runtime for iroh receiver");
-
-            rt.block_on(async move {
-                let endpoint = iroh::Endpoint::builder()
-                    .alpns(vec![CI_ALPN.to_vec()])
-                    .relay_mode(iroh::RelayMode::Default)
-                    .bind()
-                    .await
-                    .expect("failed to bind iroh endpoint");
-
-                eprintln!("  Iroh local ID: {}", endpoint.id());
-
-                // Outer reconnection loop: reconnect when the connection drops.
-                while !stop.load(Ordering::Relaxed) {
-                    eprintln!("  Connecting to relay {relay_key}...");
-
-                    let conn = match endpoint.connect(relay_key, CI_ALPN).await {
-                        Ok(c) => c,
-                        Err(e) => {
-                            eprintln!("iroh: connect failed: {e}, retrying in 5s...");
-                            tokio::time::sleep(Duration::from_secs(5)).await;
-                            continue;
-                        }
-                    };
-
-                    eprintln!("  Connected to relay!");
-
-                    // Receive loop: the relay opens uni streams to send us events.
-                    while !stop.load(Ordering::Relaxed) {
-                        match tokio::time::timeout(Duration::from_secs(1), conn.accept_uni()).await
-                        {
-                            Ok(Ok(mut recv)) => {
-                                match read_tagged_message(&mut recv).await {
-                                    Ok((tag, payload)) => {
-                                        if tag == "ci::WebhookEvent" {
-                                            match serde_json::from_slice::<
-                                                swactor_ci::WebhookEvent,
-                                            >(
-                                                &payload
-                                            ) {
-                                                Ok(event) => {
-                                                    eprintln!(
-                                                        "iroh: received webhook {} on {}",
-                                                        event
-                                                            .commit_sha
-                                                            .get(..8)
-                                                            .unwrap_or(&event.commit_sha),
-                                                        event.branch,
-                                                    );
-                                                    let _ = swactor_rt.send_to(
-                                                        coordinator_addr,
-                                                        LocalCoordinatorMsg::Webhook(event),
-                                                    );
-                                                }
-                                                Err(e) => {
-                                                    eprintln!(
-                                                        "iroh: failed to deserialize event: {e}"
-                                                    )
-                                                }
-                                            }
-                                        } else {
-                                            eprintln!("iroh: unknown tag '{tag}', ignoring");
-                                        }
-                                    }
-                                    Err(e) => {
-                                        eprintln!("iroh: read error: {e}");
-                                        break;
-                                    }
-                                }
-                            }
-                            Ok(Err(e)) => {
-                                eprintln!("iroh: connection lost: {e}, reconnecting...");
-                                break;
-                            }
-                            Err(_) => {
-                                // 1s poll timeout — just loop and check stop flag.
-                            }
-                        }
-                    }
-                }
-
-                endpoint.close().await;
-            });
-        })
-        .expect("failed to spawn iroh-receiver thread");
-}
-
-/// Read a tagged message from a QUIC recv stream.
-///
-/// Frame format: `[4B tag_len][tag_bytes][payload_bytes]`
-async fn read_tagged_message(
-    recv: &mut iroh::endpoint::RecvStream,
-) -> Result<(String, Vec<u8>), Box<dyn std::error::Error>> {
-    let mut tag_len_buf = [0u8; 4];
-    recv.read_exact(&mut tag_len_buf).await?;
-    let tag_len = u32::from_be_bytes(tag_len_buf) as usize;
-
-    if tag_len > 1024 {
-        return Err("tag too large".into());
-    }
-
-    let mut tag_buf = vec![0u8; tag_len];
-    recv.read_exact(&mut tag_buf).await?;
-    let tag = String::from_utf8(tag_buf)?;
-
-    let payload = recv.read_to_end(64 * 1024).await?;
-
-    Ok((tag, payload))
-}
diff --git a/crates/ci/src/coordinator.rs b/crates/ci/src/coordinator.rs
deleted file mode 100644
index 1e94aac..0000000
--- a/crates/ci/src/coordinator.rs
+++ /dev/null
@@ -1,430 +0,0 @@
-//! Coordinator actor: central brain of the CI system.
-//!
-//! Receives webhook events, manages pipeline lifecycles, dispatches jobs
-//! to the Provisioner and RunnerSupervisor actors.
-
-use std::collections::HashMap;
-
-use swactor::actor::{ActorAddress, ActorInterface, Ctx};
-
-use crate::pipeline::PipelineExecution;
-use crate::yaml::{self, CiYaml};
-use crate::{
-    CiConfig, JobComplete, JobId, JobProgress, JobStatus, PipelineId, ProvisionRequest,
-    ProvisionResponse, StatusUpdate, TerminateRequest, WebhookEvent,
-};
-
-/// Messages the Coordinator can receive.
-#[derive(Debug, Clone)]
-pub enum CoordinatorMsg {
-    /// A webhook event from Forgejo.
-    Webhook(WebhookEvent),
-    /// The CI YAML config to use (loaded externally or from the repo).
-    SetCiYaml(CiYaml),
-    /// Response from the Provisioner.
-    ProvisionResponse(ProvisionResponse),
-    /// Streamed output from a RunnerSupervisor.
-    JobProgress(JobProgress),
-    /// Final result from a RunnerSupervisor.
-    JobComplete(JobComplete),
-    /// Notification that the provisioner is offline (detected via SWIM).
-    ProvisionerOffline,
-    /// Notification that the provisioner is back online.
-    ProvisionerOnline,
-}
-
-/// The Coordinator actor state.
-pub struct Coordinator {
-    config: CiConfig,
-    ci_yaml: Option<CiYaml>,
-    pipelines: HashMap<PipelineId, PipelineExecution>,
-    next_pipeline_id: u64,
-    provisioner_addr: Option<ActorAddress>,
-    provisioner_online: bool,
-    /// Maps job_id → runner supervisor address.
-    runner_addrs: HashMap<JobId, ActorAddress>,
-    /// Captured status updates (for testing/simulation).
-    status_updates: Vec<StatusUpdate>,
-    /// Jobs waiting for the provisioner to come online.
-    queued_provisions: Vec<ProvisionRequest>,
-}
-
-impl Coordinator {
-    pub fn new(config: CiConfig) -> Self {
-        Self {
-            config,
-            ci_yaml: None,
-            pipelines: HashMap::new(),
-            next_pipeline_id: 1,
-            provisioner_addr: None,
-            provisioner_online: false,
-            runner_addrs: HashMap::new(),
-            status_updates: Vec::new(),
-            queued_provisions: Vec::new(),
-        }
-    }
-
-    pub fn with_provisioner(mut self, addr: ActorAddress) -> Self {
-        self.provisioner_addr = Some(addr);
-        self.provisioner_online = true;
-        self
-    }
-
-    pub fn with_ci_yaml(mut self, yaml: CiYaml) -> Self {
-        self.ci_yaml = Some(yaml);
-        self
-    }
-
-    pub fn pipelines(&self) -> &HashMap<PipelineId, PipelineExecution> {
-        &self.pipelines
-    }
-
-    pub fn status_updates(&self) -> &[StatusUpdate] {
-        &self.status_updates
-    }
-
-    fn handle_webhook(&mut self, ctx: &Ctx, event: WebhookEvent) {
-        let ci = match &self.ci_yaml {
-            Some(ci) => ci.clone(),
-            None => return,
-        };
-
-        let matched = yaml::matching_pipelines(&ci, &event);
-        for pipeline_name in matched {
-            let pipeline_def = &ci.pipelines[&pipeline_name];
-            let pipeline_id = PipelineId(self.next_pipeline_id);
-            self.next_pipeline_id += 1;
-
-            // Build job definitions.
-            let job_defs: Vec<_> = pipeline_def
-                .jobs
-                .iter()
-                .map(|(name, def)| yaml::to_job_definition(name, def))
-                .collect();
-
-            let pipeline = PipelineExecution::new(
-                pipeline_id,
-                pipeline_name.clone(),
-                event.repo_owner.clone(),
-                event.repo_name.clone(),
-                event.commit_sha.clone(),
-                event.branch.clone(),
-                job_defs,
-            );
-
-            // Set pending status on Forgejo.
-            self.emit_status_update(StatusUpdate {
-                repo_owner: event.repo_owner.clone(),
-                repo_name: event.repo_name.clone(),
-                commit_sha: event.commit_sha.clone(),
-                state: "pending".into(),
-                context: format!("ci/{pipeline_name}"),
-                description: format!("Pipeline '{pipeline_name}' is pending"),
-                target_url: None,
-            });
-
-            self.pipelines.insert(pipeline_id, pipeline);
-
-            // Start eligible jobs.
-            self.advance_pipeline(ctx, pipeline_id);
-        }
-    }
-
-    fn advance_pipeline(&mut self, ctx: &Ctx, pipeline_id: PipelineId) {
-        let pipeline = match self.pipelines.get(&pipeline_id) {
-            Some(p) => p,
-            None => return,
-        };
-
-        // If pipeline is already terminal, emit final status.
-        if pipeline.status.is_terminal() {
-            let update = StatusUpdate {
-                repo_owner: pipeline.repo_owner.clone(),
-                repo_name: pipeline.repo_name.clone(),
-                commit_sha: pipeline.commit_sha.clone(),
-                state: pipeline.status.forgejo_state().into(),
-                context: format!("ci/{}", pipeline.pipeline_name),
-                description: format!(
-                    "Pipeline '{}' {}",
-                    pipeline.pipeline_name,
-                    pipeline.status.forgejo_state()
-                ),
-                target_url: None,
-            };
-            self.emit_status_update(update);
-            return;
-        }
-
-        let eligible = pipeline.eligible_jobs();
-        let repo_owner = pipeline.repo_owner.clone();
-        let repo_name = pipeline.repo_name.clone();
-        let commit_sha = pipeline.commit_sha.clone();
-
-        for job_name in eligible {
-            let job_id = JobId {
-                pipeline_id,
-                job_name: job_name.clone(),
-            };
-
-            let spec = {
-                let pipeline = self.pipelines.get(&pipeline_id).unwrap();
-                let job = &pipeline.jobs[&job_name];
-                crate::InstanceSpec {
-                    docker_required: job.definition.docker,
-                    ..Default::default()
-                }
-            };
-
-            if self.provisioner_online {
-                // Request provisioning.
-                if let Some(prov_addr) = self.provisioner_addr {
-                    let request = ProvisionRequest {
-                        job_id: job_id.clone(),
-                        instance_spec: spec,
-                    };
-                    let _ = ctx.send(prov_addr, crate::provisioner::ProvisionerMsg::Provision(request));
-                }
-                if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
-                    if let Some(job) = pipeline.jobs.get_mut(&job_name) {
-                        job.status = JobStatus::Provisioning;
-                    }
-                }
-            } else {
-                // Queue for later.
-                let request = ProvisionRequest {
-                    job_id: job_id.clone(),
-                    instance_spec: spec,
-                };
-                self.queued_provisions.push(request);
-                if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
-                    if let Some(job) = pipeline.jobs.get_mut(&job_name) {
-                        job.status = JobStatus::WaitingForProvisioner;
-                    }
-                }
-            }
-
-            // Emit per-job status.
-            self.emit_status_update(StatusUpdate {
-                repo_owner: repo_owner.clone(),
-                repo_name: repo_name.clone(),
-                commit_sha: commit_sha.clone(),
-                state: "pending".into(),
-                context: format!("ci/{job_name}"),
-                description: format!("Job '{job_name}' is provisioning"),
-                target_url: None,
-            });
-        }
-    }
-
-    fn handle_provision_response(&mut self, ctx: &Ctx, response: ProvisionResponse) {
-        let pipeline_id = response.job_id.pipeline_id;
-        let job_name = response.job_id.job_name.clone();
-
-        match response.result {
-            Ok(instance) => {
-                // Store instance_id for cleanup.
-                if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
-                    if let Some(job) = pipeline.jobs.get_mut(&job_name) {
-                        job.instance_id = Some(instance.instance_id.clone());
-                        job.status = JobStatus::Running;
-                    }
-                }
-
-                // Spawn a RunnerSupervisor for this job.
-                let pipeline = &self.pipelines[&pipeline_id];
-                let job = &pipeline.jobs[&job_name];
-
-                let start_job = crate::StartJob {
-                    job_id: response.job_id.clone(),
-                    instance: instance.clone(),
-                    repo_url: format!(
-                        "{}/{}/{}",
-                        self.config.forgejo_url, pipeline.repo_owner, pipeline.repo_name
-                    ),
-                    commit_sha: pipeline.commit_sha.clone(),
-                    job_def: job.definition.clone(),
-                };
-
-                let runner = crate::runner::RunnerSupervisor::new(
-                    ctx.self_addr(),
-                    start_job,
-                );
-
-                match ctx.spawn(runner) {
-                    Ok(runner_addr) => {
-                        self.runner_addrs.insert(response.job_id, runner_addr);
-                    }
-                    Err(_) => {
-                        // Failed to spawn runner — mark job as failed.
-                        if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
-                            pipeline.set_job_status(
-                                &job_name,
-                                JobStatus::Failed {
-                                    reason: "failed to spawn runner".into(),
-                                },
-                            );
-                        }
-                        self.advance_pipeline(ctx, pipeline_id);
-                    }
-                }
-            }
-            Err(err) => {
-                if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
-                    pipeline.set_job_status(
-                        &job_name,
-                        JobStatus::Failed {
-                            reason: err.to_string(),
-                        },
-                    );
-                }
-                self.advance_pipeline(ctx, pipeline_id);
-            }
-        }
-    }
-
-    fn handle_job_complete(&mut self, ctx: &Ctx, complete: JobComplete) {
-        let pipeline_id = complete.job_id.pipeline_id;
-        let job_name = complete.job_id.job_name.clone();
-
-        // Send terminate request for the instance.
-        if let Some(pipeline) = self.pipelines.get(&pipeline_id) {
-            if let Some(job) = pipeline.jobs.get(&job_name) {
-                if let Some(ref instance_id) = job.instance_id {
-                    let terminate = TerminateRequest {
-                        job_id: complete.job_id.clone(),
-                        instance_id: instance_id.clone(),
-                    };
-                    if let Some(prov_addr) = self.provisioner_addr {
-                        let _ = ctx.send(
-                            prov_addr,
-                            crate::provisioner::ProvisionerMsg::Terminate(terminate),
-                        );
-                    }
-                }
-            }
-        }
-
-        // Update job status.
-        let status = match complete.result {
-            Ok(_) => JobStatus::Passed,
-            Err(ref failure) => JobStatus::Failed {
-                reason: failure.to_string(),
-            },
-        };
-
-        let (repo_owner, repo_name, commit_sha) = {
-            let pipeline = match self.pipelines.get(&pipeline_id) {
-                Some(p) => p,
-                None => return,
-            };
-            (
-                pipeline.repo_owner.clone(),
-                pipeline.repo_name.clone(),
-                pipeline.commit_sha.clone(),
-            )
-        };
-
-        // Emit per-job final status.
-        self.emit_status_update(StatusUpdate {
-            repo_owner,
-            repo_name,
-            commit_sha,
-            state: match &status {
-                JobStatus::Passed => "success".into(),
-                _ => "failure".into(),
-            },
-            context: format!("ci/{job_name}"),
-            description: format!("Job '{job_name}' completed"),
-            target_url: None,
-        });
-
-        if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
-            pipeline.set_job_status(&job_name, status);
-        }
-
-        // Remove runner address.
-        self.runner_addrs.remove(&complete.job_id);
-
-        // Advance pipeline to schedule downstream jobs.
-        self.advance_pipeline(ctx, pipeline_id);
-    }
-
-    fn handle_provisioner_offline(&mut self) {
-        self.provisioner_online = false;
-
-        // Mark all provisioning jobs as waiting.
-        for pipeline in self.pipelines.values_mut() {
-            for job in pipeline.jobs.values_mut() {
-                if job.status == JobStatus::Provisioning {
-                    job.status = JobStatus::WaitingForProvisioner;
-                }
-            }
-        }
-    }
-
-    fn handle_provisioner_online(&mut self, ctx: &Ctx) {
-        self.provisioner_online = true;
-
-        // Flush queued provision requests.
-        let queued = std::mem::take(&mut self.queued_provisions);
-        for request in queued {
-            if let Some(prov_addr) = self.provisioner_addr {
-                let _ = ctx.send(prov_addr, crate::provisioner::ProvisionerMsg::Provision(request));
-            }
-        }
-
-        // Re-advance pipelines that have waiting jobs.
-        let pipeline_ids: Vec<PipelineId> = self.pipelines.keys().copied().collect();
-        for pid in pipeline_ids {
-            // Move waiting jobs back to provisioning.
-            if let Some(pipeline) = self.pipelines.get_mut(&pid) {
-                let waiting_jobs: Vec<String> = pipeline
-                    .jobs
-                    .iter()
-                    .filter(|(_, j)| j.status == JobStatus::WaitingForProvisioner)
-                    .map(|(name, _)| name.clone())
-                    .collect();
-
-                for job_name in waiting_jobs {
-                    if let Some(job) = pipeline.jobs.get_mut(&job_name) {
-                        job.status = JobStatus::Pending;
-                    }
-                }
-            }
-            self.advance_pipeline(ctx, pid);
-        }
-    }
-
-    fn emit_status_update(&mut self, update: StatusUpdate) {
-        self.status_updates.push(update);
-    }
-}
-
-impl ActorInterface for Coordinator {
-    type Incoming = CoordinatorMsg;
-    type Response = ();
-
-    fn handle(&mut self, ctx: &Ctx, msg: CoordinatorMsg) {
-        match msg {
-            CoordinatorMsg::Webhook(event) => self.handle_webhook(ctx, event),
-            CoordinatorMsg::SetCiYaml(yaml) => {
-                self.ci_yaml = Some(yaml);
-            }
-            CoordinatorMsg::ProvisionResponse(resp) => {
-                self.handle_provision_response(ctx, resp);
-            }
-            CoordinatorMsg::JobProgress(progress) => {
-                if let Some(pipeline) = self.pipelines.get_mut(&progress.job_id.pipeline_id) {
-                    if let Some(job) = pipeline.jobs.get_mut(&progress.job_id.job_name) {
-                        job.output_lines.push(progress.output_line);
-                    }
-                }
-            }
-            CoordinatorMsg::JobComplete(complete) => {
-                self.handle_job_complete(ctx, complete);
-            }
-            CoordinatorMsg::ProvisionerOffline => self.handle_provisioner_offline(),
-            CoordinatorMsg::ProvisionerOnline => self.handle_provisioner_online(ctx),
-        }
-    }
-}
diff --git a/crates/ci/src/lib.rs b/crates/ci/src/lib.rs
deleted file mode 100644
index 5a0f2ad..0000000
--- a/crates/ci/src/lib.rs
+++ /dev/null
@@ -1,315 +0,0 @@
-pub mod coordinator;
-pub mod local_coordinator;
-pub mod local_runner;
-pub mod pipeline;
-pub mod provisioner;
-pub mod runner;
-pub mod status_reporter;
-pub mod webhook_server;
-pub mod yaml;
-
-use std::collections::HashMap;
-use std::fmt;
-use std::net::IpAddr;
-
-use serde::{Deserialize, Serialize};
-
-// ─── Core Identifiers ───────────────────────────────────────────────────────
-
-/// Unique identifier for a pipeline execution.
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
-pub struct PipelineId(pub u64);
-
-impl fmt::Display for PipelineId {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "pipeline-{}", self.0)
-    }
-}
-
-/// Unique identifier for a job within a pipeline.
-#[derive(Debug, Clone, PartialEq, Eq, Hash, Serialize, Deserialize)]
-pub struct JobId {
-    pub pipeline_id: PipelineId,
-    pub job_name: String,
-}
-
-impl fmt::Display for JobId {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}/{}", self.pipeline_id, self.job_name)
-    }
-}
-
-// ─── Job Status ─────────────────────────────────────────────────────────────
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub enum JobStatus {
-    Pending,
-    WaitingForProvisioner,
-    Provisioning,
-    Running,
-    Passed,
-    Failed { reason: String },
-    Skipped,
-    Interrupted,
-}
-
-impl JobStatus {
-    pub fn is_terminal(&self) -> bool {
-        matches!(
-            self,
-            JobStatus::Passed | JobStatus::Failed { .. } | JobStatus::Skipped | JobStatus::Interrupted
-        )
-    }
-}
-
-// ─── Pipeline Status ────────────────────────────────────────────────────────
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub enum PipelineStatus {
-    Pending,
-    Running,
-    Passed,
-    Failed,
-    Error { reason: String },
-}
-
-impl PipelineStatus {
-    pub fn is_terminal(&self) -> bool {
-        matches!(
-            self,
-            PipelineStatus::Passed | PipelineStatus::Failed | PipelineStatus::Error { .. }
-        )
-    }
-
-    /// Convert to Forgejo commit status string.
-    pub fn forgejo_state(&self) -> &'static str {
-        match self {
-            PipelineStatus::Pending => "pending",
-            PipelineStatus::Running => "pending",
-            PipelineStatus::Passed => "success",
-            PipelineStatus::Failed => "failure",
-            PipelineStatus::Error { .. } => "error",
-        }
-    }
-}
-
-// ─── Instance Types ─────────────────────────────────────────────────────────
-
-/// Specification for a spot instance.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct InstanceSpec {
-    pub min_cpus: u32,
-    pub min_ram_mb: u32,
-    pub min_disk_gb: u32,
-    pub docker_required: bool,
-    pub region_preferences: Vec<String>,
-}
-
-impl Default for InstanceSpec {
-    fn default() -> Self {
-        Self {
-            min_cpus: 2,
-            min_ram_mb: 2048,
-            min_disk_gb: 20,
-            docker_required: false,
-            region_preferences: Vec::new(),
-        }
-    }
-}
-
-/// Connection details for a provisioned spot instance.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct InstanceReady {
-    pub instance_id: String,
-    pub ip: IpAddr,
-    pub ssh_port: u16,
-    pub ssh_host_key: String,
-}
-
-// ─── Provisioner ↔ Coordinator Messages ─────────────────────────────────────
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct ProvisionRequest {
-    pub job_id: JobId,
-    pub instance_spec: InstanceSpec,
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct ProvisionResponse {
-    pub job_id: JobId,
-    pub result: Result<InstanceReady, ProvisionError>,
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub enum ProvisionError {
-    NoCapacity,
-    ProviderError(String),
-    Timeout,
-    ProvisionerOffline,
-}
-
-impl fmt::Display for ProvisionError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            ProvisionError::NoCapacity => write!(f, "no capacity available"),
-            ProvisionError::ProviderError(msg) => write!(f, "provider error: {msg}"),
-            ProvisionError::Timeout => write!(f, "provisioning timed out"),
-            ProvisionError::ProvisionerOffline => write!(f, "provisioner is offline"),
-        }
-    }
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct TerminateRequest {
-    pub job_id: JobId,
-    pub instance_id: String,
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct TerminateAck {
-    pub job_id: JobId,
-}
-
-// ─── Coordinator ↔ RunnerSupervisor Messages ────────────────────────────────
-
-/// Sent from Coordinator to RunnerSupervisor to begin a job.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct StartJob {
-    pub job_id: JobId,
-    pub instance: InstanceReady,
-    pub repo_url: String,
-    pub commit_sha: String,
-    pub job_def: JobDefinition,
-}
-
-/// Streamed output from RunnerSupervisor back to Coordinator.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct JobProgress {
-    pub job_id: JobId,
-    pub output_line: String,
-}
-
-/// Final result from RunnerSupervisor.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct JobComplete {
-    pub job_id: JobId,
-    pub result: Result<JobSuccess, JobFailure>,
-    pub artifacts: Vec<String>,
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct JobSuccess;
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub enum JobFailure {
-    CommandFailed { exit_code: i32, last_lines: Vec<String> },
-    SshError(String),
-    ExecError(String),
-    Timeout,
-    Interrupted,
-}
-
-impl fmt::Display for JobFailure {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            JobFailure::CommandFailed { exit_code, .. } => {
-                write!(f, "command exited with code {exit_code}")
-            }
-            JobFailure::SshError(msg) => write!(f, "SSH error: {msg}"),
-            JobFailure::ExecError(msg) => write!(f, "exec error: {msg}"),
-            JobFailure::Timeout => write!(f, "job timed out"),
-            JobFailure::Interrupted => write!(f, "spot instance interrupted"),
-        }
-    }
-}
-
-// ─── Job Definition ─────────────────────────────────────────────────────────
-
-/// A parsed job from the .ci.yml file.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct JobDefinition {
-    pub name: String,
-    pub run: Vec<String>,
-    pub needs: Vec<String>,
-    pub timeout_secs: u64,
-    pub docker: bool,
-    pub artifacts: Vec<String>,
-    pub env: HashMap<String, String>,
-}
-
-// ─── Webhook Types ──────────────────────────────────────────────────────────
-
-/// Parsed webhook event from Forgejo.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct WebhookEvent {
-    pub event_type: EventType,
-    pub repo_owner: String,
-    pub repo_name: String,
-    pub branch: String,
-    pub commit_sha: String,
-    pub tag: Option<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub enum EventType {
-    Push,
-    Tag,
-    Merge,
-}
-
-// ─── Forgejo Status Updates ─────────────────────────────────────────────────
-
-/// A commit status update to send to Forgejo's API.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct StatusUpdate {
-    pub repo_owner: String,
-    pub repo_name: String,
-    pub commit_sha: String,
-    pub state: String,
-    pub context: String,
-    pub description: String,
-    pub target_url: Option<String>,
-}
-
-// ─── Coordinator Config ─────────────────────────────────────────────────────
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct CiConfig {
-    pub webhook_port: u16,
-    pub webhook_secret: String,
-    pub forgejo_url: String,
-    pub forgejo_token: String,
-    pub data_dir: String,
-}
-
-impl Default for CiConfig {
-    fn default() -> Self {
-        Self {
-            webhook_port: 8787,
-            webhook_secret: String::new(),
-            forgejo_url: String::new(),
-            forgejo_token: String::new(),
-            data_dir: "./ci-data".into(),
-        }
-    }
-}
-
-// ─── Local CI Types ──────────────────────────────────────────────────────────
-
-/// Job execution request for local runner (no InstanceReady needed).
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct LocalStartJob {
-    pub job_id: JobId,
-    pub work_dir: String,
-    pub job_def: JobDefinition,
-    pub env_overrides: HashMap<String, String>,
-}
-
-/// Configuration for the local CI runner.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct LocalCiConfig {
-    pub ci: CiConfig,
-    pub repo_url: String,
-    pub work_dir: String,
-    pub ci_yaml_path: String,
-}
diff --git a/crates/ci/src/local_coordinator.rs b/crates/ci/src/local_coordinator.rs
deleted file mode 100644
index 2858662..0000000
--- a/crates/ci/src/local_coordinator.rs
+++ /dev/null
@@ -1,565 +0,0 @@
-//! LocalCoordinator actor: single-machine CI brain.
-//!
-//! Receives webhook events, queues pipelines, executes jobs one at a time
-//! directly on the host. Supports branch-level supersede for queued pipelines.
-
-use std::collections::{HashMap, VecDeque};
-use std::process::Command;
-use std::sync::{Arc, Mutex};
-
-use swactor::actor::{ActorAddress, ActorInterface, Ctx};
-
-use crate::pipeline::PipelineExecution;
-use crate::status_reporter::{JobOutput, StatusReporterMsg};
-use crate::yaml::{self, CiYaml};
-use crate::{
-    JobComplete, JobId, JobProgress, JobStatus, LocalCiConfig, LocalStartJob, PipelineId,
-    PipelineStatus, StatusUpdate, WebhookEvent,
-};
-
-/// Messages the LocalCoordinator can receive.
-#[derive(Debug, Clone)]
-pub enum LocalCoordinatorMsg {
-    Webhook(WebhookEvent),
-    SetCiYaml(CiYaml),
-    JobProgress(JobProgress),
-    JobComplete(JobComplete),
-    GitReady {
-        pipeline_id: PipelineId,
-        job_name: String,
-        work_dir: String,
-    },
-}
-
-/// Lightweight snapshot of coordinator state (no dashboard dependency).
-/// The binary layer converts this to `CiSnapshot` for the dashboard.
-#[derive(Debug, Clone, Default)]
-pub struct LocalCiSnapshot {
-    pub active_pipelines: Vec<PipelineExecution>,
-    pub recent_pipelines: Vec<PipelineExecution>,
-    pub has_running_job: bool,
-}
-
-/// The LocalCoordinator actor state.
-pub struct LocalCoordinator {
-    config: LocalCiConfig,
-    ci_yaml: Option<CiYaml>,
-    pipelines: HashMap<PipelineId, PipelineExecution>,
-    next_pipeline_id: u64,
-    /// FIFO queue of pipeline IDs awaiting execution.
-    queue: VecDeque<PipelineId>,
-    /// The pipeline currently being executed.
-    active_pipeline: Option<PipelineId>,
-    /// At most one running job (job_id, runner actor address).
-    running_job: Option<(JobId, ActorAddress)>,
-    /// Status reporter actor address.
-    status_reporter_addr: Option<ActorAddress>,
-    /// Bounded ring of finished pipelines.
-    completed: VecDeque<PipelineExecution>,
-    /// Shared snapshot for external consumers (e.g. dashboard binary).
-    ci_snapshot: Arc<Mutex<LocalCiSnapshot>>,
-}
-
-impl LocalCoordinator {
-    pub fn new(config: LocalCiConfig) -> Self {
-        Self {
-            config,
-            ci_yaml: None,
-            pipelines: HashMap::new(),
-            next_pipeline_id: 1,
-            queue: VecDeque::new(),
-            active_pipeline: None,
-            running_job: None,
-            status_reporter_addr: None,
-            completed: VecDeque::new(),
-            ci_snapshot: Arc::new(Mutex::new(LocalCiSnapshot::default())),
-        }
-    }
-
-    pub fn with_status_reporter(mut self, addr: ActorAddress) -> Self {
-        self.status_reporter_addr = Some(addr);
-        self
-    }
-
-    pub fn with_ci_yaml(mut self, yaml: CiYaml) -> Self {
-        self.ci_yaml = Some(yaml);
-        self
-    }
-
-    pub fn ci_snapshot(&self) -> Arc<Mutex<LocalCiSnapshot>> {
-        Arc::clone(&self.ci_snapshot)
-    }
-
-    pub fn pipelines(&self) -> &HashMap<PipelineId, PipelineExecution> {
-        &self.pipelines
-    }
-
-    pub fn completed(&self) -> &VecDeque<PipelineExecution> {
-        &self.completed
-    }
-
-    pub fn queue(&self) -> &VecDeque<PipelineId> {
-        &self.queue
-    }
-
-    pub fn active_pipeline(&self) -> Option<PipelineId> {
-        self.active_pipeline
-    }
-
-    pub fn running_job(&self) -> Option<&(JobId, ActorAddress)> {
-        self.running_job.as_ref()
-    }
-
-    fn handle_webhook(&mut self, ctx: &Ctx, event: WebhookEvent) {
-        let ci = match &self.ci_yaml {
-            Some(ci) => ci.clone(),
-            None => return,
-        };
-
-        let matched = yaml::matching_pipelines(&ci, &event);
-        for pipeline_name in matched {
-            let pipeline_def = &ci.pipelines[&pipeline_name];
-            let pipeline_id = PipelineId(self.next_pipeline_id);
-            self.next_pipeline_id += 1;
-
-            let job_defs: Vec<_> = pipeline_def
-                .jobs
-                .iter()
-                .map(|(name, def)| yaml::to_job_definition(name, def))
-                .collect();
-
-            let pipeline = PipelineExecution::new(
-                pipeline_id,
-                pipeline_name.clone(),
-                event.repo_owner.clone(),
-                event.repo_name.clone(),
-                event.commit_sha.clone(),
-                event.branch.clone(),
-                job_defs,
-            );
-
-            self.emit_status(
-                ctx,
-                StatusUpdate {
-                    repo_owner: event.repo_owner.clone(),
-                    repo_name: event.repo_name.clone(),
-                    commit_sha: event.commit_sha.clone(),
-                    state: "pending".into(),
-                    context: format!("ci/{pipeline_name}"),
-                    description: format!("Pipeline '{pipeline_name}' is pending"),
-                    target_url: None,
-                },
-            );
-
-            self.pipelines.insert(pipeline_id, pipeline);
-            self.enqueue_pipeline(pipeline_id, &event.branch);
-        }
-
-        self.try_schedule_next(ctx);
-    }
-
-    /// Enqueue a pipeline, superseding any queued pipeline for the same branch.
-    fn enqueue_pipeline(&mut self, pipeline_id: PipelineId, branch: &str) {
-        // Scan queue for entry with same branch (not the active pipeline).
-        let supersede_idx = self.queue.iter().position(|&qid| {
-            self.pipelines
-                .get(&qid)
-                .map(|p| p.branch == branch)
-                .unwrap_or(false)
-        });
-
-        if let Some(idx) = supersede_idx {
-            let old_id = self.queue[idx];
-            // Mark old pipeline as superseded.
-            if let Some(old_pipeline) = self.pipelines.get_mut(&old_id) {
-                old_pipeline.status = PipelineStatus::Error {
-                    reason: "superseded".into(),
-                };
-                // Mark all pending jobs as skipped.
-                let job_names: Vec<String> = old_pipeline.jobs.keys().cloned().collect();
-                for name in job_names {
-                    if old_pipeline.jobs[&name].status == JobStatus::Pending {
-                        old_pipeline.set_job_status(&name, JobStatus::Skipped);
-                    }
-                }
-            }
-            // Archive the superseded pipeline.
-            if let Some(old_pipeline) = self.pipelines.remove(&old_id) {
-                self.archive_pipeline(old_pipeline);
-            }
-            // Replace queue entry.
-            self.queue[idx] = pipeline_id;
-        } else {
-            self.queue.push_back(pipeline_id);
-        }
-    }
-
-    /// Core scheduling: one job at a time.
-    fn try_schedule_next(&mut self, ctx: &Ctx) {
-        // If a job is already running, nothing to do.
-        if self.running_job.is_some() {
-            return;
-        }
-
-        // If we have an active pipeline, try to find eligible jobs.
-        if let Some(active_id) = self.active_pipeline {
-            if let Some(pipeline) = self.pipelines.get(&active_id) {
-                let eligible = pipeline.eligible_jobs();
-                if !eligible.is_empty() {
-                    let job_name = eligible[0].clone();
-                    self.start_job(ctx, active_id, &job_name);
-                    return;
-                }
-
-                // No eligible jobs — check if pipeline is terminal.
-                if pipeline.status.is_terminal() {
-                    let pipeline = self.pipelines.remove(&active_id).unwrap();
-                    self.emit_status(
-                        ctx,
-                        StatusUpdate {
-                            repo_owner: pipeline.repo_owner.clone(),
-                            repo_name: pipeline.repo_name.clone(),
-                            commit_sha: pipeline.commit_sha.clone(),
-                            state: pipeline.status.forgejo_state().into(),
-                            context: format!("ci/{}", pipeline.pipeline_name),
-                            description: format!(
-                                "Pipeline '{}' {}",
-                                pipeline.pipeline_name,
-                                pipeline.status.forgejo_state()
-                            ),
-                            target_url: None,
-                        },
-                    );
-                    self.emit_pipeline_comment(ctx, &pipeline);
-                    self.archive_pipeline(pipeline);
-                    self.active_pipeline = None;
-                    // Recurse to pick next from queue.
-                    self.try_schedule_next(ctx);
-                    return;
-                }
-            }
-            // Pipeline exists but no eligible jobs and not terminal — waiting for running job.
-            return;
-        }
-
-        // No active pipeline — pop from queue.
-        if let Some(next_id) = self.queue.pop_front() {
-            self.active_pipeline = Some(next_id);
-            self.try_schedule_next(ctx);
-        }
-    }
-
-    fn start_job(&mut self, ctx: &Ctx, pipeline_id: PipelineId, job_name: &str) {
-        let pipeline = match self.pipelines.get_mut(&pipeline_id) {
-            Some(p) => p,
-            None => return,
-        };
-        let job = match pipeline.jobs.get_mut(job_name) {
-            Some(j) => j,
-            None => return,
-        };
-
-        job.status = JobStatus::Running;
-
-        let work_dir = format!(
-            "{}/pipeline-{}",
-            self.config.work_dir, pipeline_id.0
-        );
-
-        // Build CI env overrides.
-        let mut env_overrides = HashMap::new();
-        env_overrides.insert("CI".into(), "true".into());
-        env_overrides.insert("CI_COMMIT_SHA".into(), pipeline.commit_sha.clone());
-        env_overrides.insert("CI_BRANCH".into(), pipeline.branch.clone());
-        env_overrides.insert("CI_PIPELINE_ID".into(), pipeline_id.0.to_string());
-        env_overrides.insert("CI_JOB_NAME".into(), job_name.to_string());
-
-        let start_job = LocalStartJob {
-            job_id: job.job_id.clone(),
-            work_dir: work_dir.clone(),
-            job_def: job.definition.clone(),
-            env_overrides,
-        };
-
-        // Perform git checkout inline (blocks this worker, acceptable for local runner).
-        let sha = pipeline.commit_sha.clone();
-        let repo_url = self.config.repo_url.clone();
-        let git_ok = self.git_checkout(&repo_url, &sha, &work_dir);
-
-        if !git_ok {
-            if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
-                pipeline.set_job_status(
-                    job_name,
-                    JobStatus::Failed {
-                        reason: "git checkout failed".into(),
-                    },
-                );
-            }
-            self.try_schedule_next(ctx);
-            return;
-        }
-
-        // Emit per-job running status.
-        if let Some(pipeline) = self.pipelines.get(&pipeline_id) {
-            self.emit_status(
-                ctx,
-                StatusUpdate {
-                    repo_owner: pipeline.repo_owner.clone(),
-                    repo_name: pipeline.repo_name.clone(),
-                    commit_sha: pipeline.commit_sha.clone(),
-                    state: "pending".into(),
-                    context: format!("ci/{job_name}"),
-                    description: format!("Job '{job_name}' is running"),
-                    target_url: None,
-                },
-            );
-        }
-
-        // Spawn LocalRunner actor.
-        let runner =
-            crate::local_runner::LocalRunner::new(ctx.self_addr(), start_job);
-
-        match ctx.spawn(runner) {
-            Ok(runner_addr) => {
-                let job_id = JobId {
-                    pipeline_id,
-                    job_name: job_name.to_string(),
-                };
-                self.running_job = Some((job_id, runner_addr));
-            }
-            Err(_) => {
-                if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
-                    pipeline.set_job_status(
-                        job_name,
-                        JobStatus::Failed {
-                            reason: "failed to spawn runner".into(),
-                        },
-                    );
-                }
-                self.try_schedule_next(ctx);
-            }
-        }
-    }
-
-    fn git_checkout(&self, repo_url: &str, sha: &str, work_dir: &str) -> bool {
-        let path = std::path::Path::new(work_dir);
-        if path.join(".git").exists() {
-            // Already cloned — fetch and checkout.
-            let fetch = Command::new("git")
-                .args(["fetch", "origin"])
-                .current_dir(work_dir)
-                .output();
-            if fetch.is_err() || !fetch.unwrap().status.success() {
-                return false;
-            }
-            let checkout = Command::new("git")
-                .args(["checkout", sha])
-                .current_dir(work_dir)
-                .output();
-            checkout.map(|o| o.status.success()).unwrap_or(false)
-        } else {
-            // Fresh clone.
-            if let Some(parent) = path.parent() {
-                let _ = std::fs::create_dir_all(parent);
-            }
-            let clone = Command::new("git")
-                .args(["clone", repo_url, work_dir])
-                .output();
-            if clone.is_err() || !clone.as_ref().unwrap().status.success() {
-                return false;
-            }
-            let checkout = Command::new("git")
-                .args(["checkout", sha])
-                .current_dir(work_dir)
-                .output();
-            checkout.map(|o| o.status.success()).unwrap_or(false)
-        }
-    }
-
-    fn handle_job_complete(&mut self, ctx: &Ctx, complete: JobComplete) {
-        let pipeline_id = complete.job_id.pipeline_id;
-        let job_name = complete.job_id.job_name.clone();
-
-        let status = match complete.result {
-            Ok(_) => JobStatus::Passed,
-            Err(ref failure) => JobStatus::Failed {
-                reason: failure.to_string(),
-            },
-        };
-
-        // Build a description with output tail for failures.
-        let description = match &status {
-            JobStatus::Passed => format!("Job '{job_name}' passed"),
-            JobStatus::Failed { reason } => {
-                let output_tail = self
-                    .pipelines
-                    .get(&pipeline_id)
-                    .and_then(|p| p.jobs.get(&job_name))
-                    .map(|j| {
-                        let lines: Vec<&str> = j
-                            .output_lines
-                            .iter()
-                            .rev()
-                            .take(10)
-                            .map(|s| s.as_str())
-                            .collect();
-                        lines.into_iter().rev().collect::<Vec<_>>().join("\n")
-                    })
-                    .unwrap_or_default();
-
-                let mut desc = format!("Job '{job_name}' failed: {reason}");
-                if !output_tail.is_empty() {
-                    desc.push_str("\n");
-                    desc.push_str(&output_tail);
-                }
-                // Cap at ~250 chars for the status description field.
-                if desc.len() > 250 {
-                    desc.truncate(247);
-                    desc.push_str("...");
-                }
-                desc
-            }
-            _ => format!("Job '{job_name}' completed"),
-        };
-
-        // Emit per-job final status.
-        if let Some(pipeline) = self.pipelines.get(&pipeline_id) {
-            self.emit_status(
-                ctx,
-                StatusUpdate {
-                    repo_owner: pipeline.repo_owner.clone(),
-                    repo_name: pipeline.repo_name.clone(),
-                    commit_sha: pipeline.commit_sha.clone(),
-                    state: match &status {
-                        JobStatus::Passed => "success".into(),
-                        _ => "failure".into(),
-                    },
-                    context: format!("ci/{job_name}"),
-                    description,
-                    target_url: None,
-                },
-            );
-        }
-
-        if let Some(pipeline) = self.pipelines.get_mut(&pipeline_id) {
-            pipeline.set_job_status(&job_name, status);
-        }
-
-        // Clear running job.
-        self.running_job = None;
-
-        // Schedule next.
-        self.try_schedule_next(ctx);
-    }
-
-    fn emit_status(&self, ctx: &Ctx, update: StatusUpdate) {
-        if let Some(reporter_addr) = self.status_reporter_addr {
-            let _ = ctx.send(
-                reporter_addr,
-                StatusReporterMsg::Report {
-                    update,
-                    forgejo_url: self.config.ci.forgejo_url.clone(),
-                    forgejo_token: self.config.ci.forgejo_token.clone(),
-                },
-            );
-        }
-    }
-
-    fn emit_pipeline_comment(&self, ctx: &Ctx, pipeline: &crate::pipeline::PipelineExecution) {
-        let reporter_addr = match self.status_reporter_addr {
-            Some(addr) => addr,
-            None => return,
-        };
-
-        let job_outputs: Vec<JobOutput> = pipeline
-            .jobs
-            .values()
-            .map(|job| {
-                let passed = job.status == JobStatus::Passed;
-                let failure_reason = match &job.status {
-                    JobStatus::Failed { reason } => Some(reason.clone()),
-                    _ => None,
-                };
-                JobOutput {
-                    job_name: job.definition.name.clone(),
-                    passed,
-                    failure_reason,
-                    output_lines: job.output_lines.clone(),
-                }
-            })
-            .collect();
-
-        let _ = ctx.send(
-            reporter_addr,
-            StatusReporterMsg::PostPipelineComment {
-                repo_owner: pipeline.repo_owner.clone(),
-                repo_name: pipeline.repo_name.clone(),
-                commit_sha: pipeline.commit_sha.clone(),
-                branch: pipeline.branch.clone(),
-                pipeline_name: pipeline.pipeline_name.clone(),
-                pipeline_state: pipeline.status.forgejo_state().to_string(),
-                job_outputs,
-                forgejo_url: self.config.ci.forgejo_url.clone(),
-                forgejo_token: self.config.ci.forgejo_token.clone(),
-            },
-        );
-    }
-
-    fn archive_pipeline(&mut self, pipeline: PipelineExecution) {
-        self.completed.push_back(pipeline);
-        if self.completed.len() > 50 {
-            self.completed.pop_front();
-        }
-    }
-
-    fn update_snapshot(&self) {
-        let active: Vec<PipelineExecution> = self.pipelines.values().cloned().collect();
-        let recent: Vec<PipelineExecution> = self
-            .completed
-            .iter()
-            .rev()
-            .take(20)
-            .cloned()
-            .collect();
-
-        if let Ok(mut snap) = self.ci_snapshot.lock() {
-            snap.active_pipelines = active;
-            snap.recent_pipelines = recent;
-            snap.has_running_job = self.running_job.is_some();
-        }
-    }
-}
-
-impl ActorInterface for LocalCoordinator {
-    type Incoming = LocalCoordinatorMsg;
-    type Response = ();
-
-    fn handle(&mut self, ctx: &Ctx, msg: LocalCoordinatorMsg) {
-        match msg {
-            LocalCoordinatorMsg::Webhook(event) => self.handle_webhook(ctx, event),
-            LocalCoordinatorMsg::SetCiYaml(yaml) => {
-                self.ci_yaml = Some(yaml);
-            }
-            LocalCoordinatorMsg::JobProgress(progress) => {
-                if let Some(pipeline) = self.pipelines.get_mut(&progress.job_id.pipeline_id) {
-                    if let Some(job) = pipeline.jobs.get_mut(&progress.job_id.job_name) {
-                        job.output_lines.push(progress.output_line);
-                    }
-                }
-            }
-            LocalCoordinatorMsg::JobComplete(complete) => {
-                self.handle_job_complete(ctx, complete);
-            }
-            LocalCoordinatorMsg::GitReady {
-                pipeline_id,
-                job_name,
-                work_dir,
-            } => {
-                // Git ready is used in the async variant; for now handled inline in start_job.
-                let _ = (pipeline_id, job_name, work_dir);
-            }
-        }
-
-        self.update_snapshot();
-    }
-}
diff --git a/crates/ci/src/local_runner.rs b/crates/ci/src/local_runner.rs
deleted file mode 100644
index 0cd0b7f..0000000
--- a/crates/ci/src/local_runner.rs
+++ /dev/null
@@ -1,304 +0,0 @@
-//! LocalRunner actor: executes job commands directly on the host via shell.
-//!
-//! Short-lived actor, one per job. Spawned by LocalCoordinator when a job
-//! is ready to execute.
-
-use std::io::BufRead;
-use std::process::{Child, Command, Stdio};
-use std::sync::{Arc, Mutex};
-
-use swactor::actor::{ActorAddress, ActorInterface, Ctx};
-
-use crate::local_coordinator::LocalCoordinatorMsg;
-use crate::{JobComplete, JobFailure, JobProgress, JobSuccess, LocalStartJob};
-
-/// Messages the LocalRunner can receive.
-#[derive(Debug, Clone)]
-pub enum LocalRunnerMsg {
-    /// Begin executing the job (sent to self in on_start).
-    Execute,
-    /// Simulated: job completed (for testing without real shell).
-    SimComplete(Result<(), String>),
-}
-
-/// LocalRunner actor state.
-pub struct LocalRunner {
-    coordinator_addr: ActorAddress,
-    start_job: LocalStartJob,
-}
-
-impl LocalRunner {
-    pub fn new(coordinator_addr: ActorAddress, start_job: LocalStartJob) -> Self {
-        Self {
-            coordinator_addr,
-            start_job,
-        }
-    }
-
-    /// Execute all commands in the job definition, streaming output back.
-    fn execute(&self, ctx: &Ctx) {
-        let job_id = &self.start_job.job_id;
-        let work_dir = &self.start_job.work_dir;
-        let timeout_secs = self.start_job.job_def.timeout_secs;
-
-        eprintln!(
-            "[runner] job {}/{} starting ({} commands, timeout {}s, workdir {})",
-            job_id.pipeline_id.0,
-            job_id.job_name,
-            self.start_job.job_def.run.len(),
-            timeout_secs,
-            work_dir,
-        );
-
-        for cmd_str in &self.start_job.job_def.run {
-            eprintln!("[runner] exec: {cmd_str}");
-
-            // Send progress: command being run.
-            let _ = ctx.send(
-                self.coordinator_addr,
-                LocalCoordinatorMsg::JobProgress(JobProgress {
-                    job_id: job_id.clone(),
-                    output_line: format!("$ {cmd_str}"),
-                }),
-            );
-
-            let child_result = Command::new("sh")
-                .arg("-c")
-                .arg(cmd_str)
-                .current_dir(work_dir)
-                .envs(&self.start_job.env_overrides)
-                .envs(&self.start_job.job_def.env)
-                .stdout(Stdio::piped())
-                .stderr(Stdio::piped())
-                .spawn();
-
-            let mut child = match child_result {
-                Ok(c) => c,
-                Err(e) => {
-                    eprintln!("[runner] spawn failed: {e}");
-                    let _ = ctx.send(
-                        self.coordinator_addr,
-                        LocalCoordinatorMsg::JobComplete(JobComplete {
-                            job_id: job_id.clone(),
-                            result: Err(JobFailure::ExecError(e.to_string())),
-                            artifacts: Vec::new(),
-                        }),
-                    );
-                    ctx.stop_self();
-                    return;
-                }
-            };
-
-            // Timeout: spawn a thread that kills the child after timeout_secs.
-            let child_id = child.id();
-            let kill_flag = Arc::new(Mutex::new(false));
-            let kill_flag_clone = Arc::clone(&kill_flag);
-            let (done_tx, done_rx) = std::sync::mpsc::channel::<()>();
-            let timeout_handle = std::thread::spawn(move || {
-                if done_rx
-                    .recv_timeout(std::time::Duration::from_secs(timeout_secs))
-                    .is_err()
-                {
-                    *kill_flag_clone.lock().unwrap() = true;
-                    // Actually kill the child process so the pipe readers unblock.
-                    let _ = std::process::Command::new("kill")
-                        .args(["-9", &child_id.to_string()])
-                        .status();
-                }
-            });
-
-            // Read stdout and stderr concurrently to avoid pipe-buffer deadlock.
-            let (last_lines, timed_out) =
-                drain_child_output(&mut child, job_id, ctx, self.coordinator_addr, &kill_flag);
-
-            let status = child.wait();
-
-            // Signal timeout thread that we're done.
-            let _ = done_tx.send(());
-            let _ = timeout_handle.join();
-
-            if timed_out || *kill_flag.lock().unwrap() {
-                eprintln!("[runner] command timed out after {timeout_secs}s");
-                let _ = ctx.send(
-                    self.coordinator_addr,
-                    LocalCoordinatorMsg::JobComplete(JobComplete {
-                        job_id: job_id.clone(),
-                        result: Err(JobFailure::Timeout),
-                        artifacts: Vec::new(),
-                    }),
-                );
-                ctx.stop_self();
-                return;
-            }
-
-            match status {
-                Ok(exit) if exit.success() => {
-                    eprintln!("[runner] command succeeded");
-                }
-                Ok(exit) => {
-                    let exit_code = exit.code().unwrap_or(-1);
-                    eprintln!("[runner] command failed (exit {exit_code})");
-                    for line in &last_lines {
-                        eprintln!("[runner]   {line}");
-                    }
-                    let _ = ctx.send(
-                        self.coordinator_addr,
-                        LocalCoordinatorMsg::JobComplete(JobComplete {
-                            job_id: job_id.clone(),
-                            result: Err(JobFailure::CommandFailed {
-                                exit_code,
-                                last_lines,
-                            }),
-                            artifacts: Vec::new(),
-                        }),
-                    );
-                    ctx.stop_self();
-                    return;
-                }
-                Err(e) => {
-                    eprintln!("[runner] wait failed: {e}");
-                    let _ = ctx.send(
-                        self.coordinator_addr,
-                        LocalCoordinatorMsg::JobComplete(JobComplete {
-                            job_id: job_id.clone(),
-                            result: Err(JobFailure::ExecError(e.to_string())),
-                            artifacts: Vec::new(),
-                        }),
-                    );
-                    ctx.stop_self();
-                    return;
-                }
-            }
-        }
-
-        eprintln!(
-            "[runner] job {}/{} passed",
-            job_id.pipeline_id.0, job_id.job_name
-        );
-        let _ = ctx.send(
-            self.coordinator_addr,
-            LocalCoordinatorMsg::JobComplete(JobComplete {
-                job_id: job_id.clone(),
-                result: Ok(JobSuccess),
-                artifacts: Vec::new(),
-            }),
-        );
-        ctx.stop_self();
-    }
-}
-
-/// Drain stdout and stderr from a child process concurrently.
-///
-/// Spawns a background thread for stderr so that both pipes are consumed
-/// in parallel, preventing the classic pipe-buffer deadlock where the child
-/// blocks writing to a full stderr while the parent blocks reading stdout.
-///
-/// Returns (last_lines, timed_out).
-fn drain_child_output(
-    child: &mut Child,
-    job_id: &crate::JobId,
-    ctx: &Ctx,
-    coordinator_addr: ActorAddress,
-    kill_flag: &Arc<Mutex<bool>>,
-) -> (Vec<String>, bool) {
-    let stdout = child.stdout.take();
-    let stderr = child.stderr.take();
-
-    // Collect stderr on a background thread.
-    let stderr_job_id = job_id.clone();
-    let stderr_kill = Arc::clone(kill_flag);
-    let stderr_handle = std::thread::spawn(move || {
-        let mut lines = Vec::new();
-        if let Some(stderr) = stderr {
-            let reader = std::io::BufReader::new(stderr);
-            for line in reader.lines() {
-                if *stderr_kill.lock().unwrap() {
-                    break;
-                }
-                if let Ok(line) = line {
-                    lines.push(line);
-                }
-            }
-        }
-        lines
-    });
-
-    // Read stdout on the current thread, streaming progress.
-    let mut last_lines: Vec<String> = Vec::new();
-    if let Some(stdout) = stdout {
-        let reader = std::io::BufReader::new(stdout);
-        for line in reader.lines() {
-            if let Ok(line) = line {
-                let _ = ctx.send(
-                    coordinator_addr,
-                    LocalCoordinatorMsg::JobProgress(JobProgress {
-                        job_id: job_id.clone(),
-                        output_line: line.clone(),
-                    }),
-                );
-                last_lines.push(line);
-                if last_lines.len() > 50 {
-                    last_lines.remove(0);
-                }
-            }
-        }
-    }
-
-    // Join stderr thread and stream its lines as progress.
-    let timed_out = *kill_flag.lock().unwrap();
-    let stderr_lines = stderr_handle.join().unwrap_or_default();
-    for line in &stderr_lines {
-        let _ = ctx.send(
-            coordinator_addr,
-            LocalCoordinatorMsg::JobProgress(JobProgress {
-                job_id: stderr_job_id.clone(),
-                output_line: format!("[stderr] {line}"),
-            }),
-        );
-    }
-
-    // Merge stderr into last_lines tail.
-    for line in stderr_lines {
-        last_lines.push(line);
-        if last_lines.len() > 50 {
-            last_lines.remove(0);
-        }
-    }
-
-    (last_lines, timed_out)
-}
-
-impl ActorInterface for LocalRunner {
-    type Incoming = LocalRunnerMsg;
-    type Response = ();
-
-    fn on_start(&mut self, ctx: &Ctx) {
-        let _ = ctx.send(ctx.self_addr(), LocalRunnerMsg::Execute);
-    }
-
-    fn handle(&mut self, ctx: &Ctx, msg: LocalRunnerMsg) {
-        match msg {
-            LocalRunnerMsg::Execute => {
-                self.execute(ctx);
-            }
-            LocalRunnerMsg::SimComplete(result) => {
-                let complete = JobComplete {
-                    job_id: self.start_job.job_id.clone(),
-                    result: match result {
-                        Ok(()) => Ok(JobSuccess),
-                        Err(msg) => Err(JobFailure::CommandFailed {
-                            exit_code: 1,
-                            last_lines: vec![msg],
-                        }),
-                    },
-                    artifacts: Vec::new(),
-                };
-                let _ = ctx.send(
-                    self.coordinator_addr,
-                    LocalCoordinatorMsg::JobComplete(complete),
-                );
-                ctx.stop_self();
-            }
-        }
-    }
-}
diff --git a/crates/ci/src/provisioner.rs b/crates/ci/src/provisioner.rs
deleted file mode 100644
index 26b007c..0000000
--- a/crates/ci/src/provisioner.rs
+++ /dev/null
@@ -1,86 +0,0 @@
-//! Provisioner actor: manages spot instance lifecycle via pluggable provider scripts.
-//!
-//! In real deployment, runs on the developer's laptop and calls cloud provider APIs.
-//! In simulation, provisions are driven by the simulation harness.
-
-use swactor::actor::{ActorAddress, ActorInterface, Ctx};
-
-use crate::coordinator::CoordinatorMsg;
-use crate::{
-    InstanceReady, ProvisionError, ProvisionRequest, ProvisionResponse, TerminateRequest,
-};
-
-/// Messages the Provisioner can receive.
-#[derive(Debug, Clone)]
-pub enum ProvisionerMsg {
-    /// Request to provision a new spot instance.
-    Provision(ProvisionRequest),
-    /// Request to terminate a spot instance.
-    Terminate(TerminateRequest),
-    /// Simulated: provisioning result delivered asynchronously.
-    SimProvisionResult {
-        request: ProvisionRequest,
-        result: Result<InstanceReady, ProvisionError>,
-    },
-}
-
-/// Provisioner actor state.
-///
-/// In real deployment, this would invoke provider scripts.
-/// In simulation, the sim harness controls provision outcomes.
-pub struct Provisioner {
-    coordinator_addr: ActorAddress,
-    /// Active instances tracked for cleanup.
-    active_instances: Vec<String>,
-}
-
-impl Provisioner {
-    pub fn new(coordinator_addr: ActorAddress) -> Self {
-        Self {
-            coordinator_addr,
-            active_instances: Vec::new(),
-        }
-    }
-
-    pub fn active_instances(&self) -> &[String] {
-        &self.active_instances
-    }
-}
-
-impl ActorInterface for Provisioner {
-    type Incoming = ProvisionerMsg;
-    type Response = ();
-
-    fn handle(&mut self, ctx: &Ctx, msg: ProvisionerMsg) {
-        match msg {
-            ProvisionerMsg::Provision(_request) => {
-                // In real deployment: invoke provider script, await result.
-                // In simulation: the sim harness sends SimProvisionResult.
-            }
-            ProvisionerMsg::Terminate(request) => {
-                self.active_instances.retain(|id| id != &request.instance_id);
-                // In real deployment: invoke provider destroy script.
-                // In simulation: just track the termination.
-                let _ = ctx.send(
-                    self.coordinator_addr,
-                    CoordinatorMsg::ProvisionResponse(ProvisionResponse {
-                        job_id: request.job_id.clone(),
-                        result: Err(ProvisionError::NoCapacity), // placeholder, terminate doesn't need response
-                    }),
-                );
-            }
-            ProvisionerMsg::SimProvisionResult { request, result } => {
-                if let Ok(ref instance) = result {
-                    self.active_instances.push(instance.instance_id.clone());
-                }
-                let _ = ctx.send(
-                    self.coordinator_addr,
-                    CoordinatorMsg::ProvisionResponse(ProvisionResponse {
-                        job_id: request.job_id,
-                        result,
-                    }),
-                );
-            }
-        }
-    }
-}
diff --git a/crates/ci/src/runner.rs b/crates/ci/src/runner.rs
deleted file mode 100644
index 99c0357..0000000
--- a/crates/ci/src/runner.rs
+++ /dev/null
@@ -1,84 +0,0 @@
-//! RunnerSupervisor actor: manages SSH session and job execution on a spot instance.
-//!
-//! Spawned per-job by the Coordinator. Owns the connection to the spot instance.
-
-use swactor::actor::{ActorAddress, ActorInterface, Ctx};
-
-use crate::coordinator::CoordinatorMsg;
-use crate::{JobComplete, JobFailure, JobProgress, JobSuccess, StartJob};
-
-/// Messages the RunnerSupervisor can receive.
-#[derive(Debug, Clone)]
-pub enum RunnerMsg {
-    /// Begin executing the job (sent immediately after spawn via on_start).
-    Execute,
-    /// Simulated: job command output line.
-    OutputLine(String),
-    /// Simulated: job completed successfully.
-    SimComplete(Result<(), String>),
-}
-
-/// RunnerSupervisor actor state.
-///
-/// In real deployment, this would manage an SSH connection.
-/// In simulation, job execution is driven by external messages.
-pub struct RunnerSupervisor {
-    coordinator_addr: ActorAddress,
-    start_job: StartJob,
-}
-
-impl RunnerSupervisor {
-    pub fn new(coordinator_addr: ActorAddress, start_job: StartJob) -> Self {
-        Self {
-            coordinator_addr,
-            start_job,
-        }
-    }
-}
-
-impl ActorInterface for RunnerSupervisor {
-    type Incoming = RunnerMsg;
-    type Response = ();
-
-    fn on_start(&mut self, ctx: &Ctx) {
-        // In simulation, the sim harness will send SimComplete messages.
-        // In real deployment, this would initiate SSH connection + command execution.
-        let _ = ctx.send(ctx.self_addr(), RunnerMsg::Execute);
-    }
-
-    fn handle(&mut self, ctx: &Ctx, msg: RunnerMsg) {
-        match msg {
-            RunnerMsg::Execute => {
-                // In real mode, we'd SSH into the instance and run commands.
-                // In simulation, this is a no-op; SimComplete drives completion.
-            }
-            RunnerMsg::OutputLine(line) => {
-                let _ = ctx.send(
-                    self.coordinator_addr,
-                    CoordinatorMsg::JobProgress(JobProgress {
-                        job_id: self.start_job.job_id.clone(),
-                        output_line: line,
-                    }),
-                );
-            }
-            RunnerMsg::SimComplete(result) => {
-                let complete = JobComplete {
-                    job_id: self.start_job.job_id.clone(),
-                    result: match result {
-                        Ok(()) => Ok(JobSuccess),
-                        Err(msg) => Err(JobFailure::CommandFailed {
-                            exit_code: 1,
-                            last_lines: vec![msg],
-                        }),
-                    },
-                    artifacts: Vec::new(),
-                };
-                let _ = ctx.send(
-                    self.coordinator_addr,
-                    CoordinatorMsg::JobComplete(complete),
-                );
-                ctx.stop_self();
-            }
-        }
-    }
-}
diff --git a/crates/ci/src/status_reporter.rs b/crates/ci/src/status_reporter.rs
deleted file mode 100644
index 35f08e6..0000000
--- a/crates/ci/src/status_reporter.rs
+++ /dev/null
@@ -1,327 +0,0 @@
-//! StatusReporter actor: fire-and-forget Forgejo commit status updates.
-//!
-//! Receives status update messages and POSTs them to the Forgejo API.
-//! Can also post pipeline summary comments to PRs.
-
-use swactor::actor::{ActorInterface, Ctx};
-
-use crate::StatusUpdate;
-
-/// Captured output for a single job, used to build PR comments.
-#[derive(Debug, Clone)]
-pub struct JobOutput {
-    pub job_name: String,
-    pub passed: bool,
-    pub failure_reason: Option<String>,
-    pub output_lines: Vec<String>,
-}
-
-/// Messages the StatusReporter can receive.
-#[derive(Debug, Clone)]
-pub enum StatusReporterMsg {
-    Report {
-        update: StatusUpdate,
-        forgejo_url: String,
-        forgejo_token: String,
-    },
-    PostPipelineComment {
-        repo_owner: String,
-        repo_name: String,
-        commit_sha: String,
-        branch: String,
-        pipeline_name: String,
-        pipeline_state: String,
-        job_outputs: Vec<JobOutput>,
-        forgejo_url: String,
-        forgejo_token: String,
-    },
-}
-
-/// StatusReporter actor state.
-pub struct StatusReporter;
-
-impl StatusReporter {
-    pub fn new() -> Self {
-        Self
-    }
-
-    #[cfg(feature = "local")]
-    fn post_status(update: &StatusUpdate, forgejo_url: &str, forgejo_token: &str) {
-        let url = format!(
-            "{}/api/v1/repos/{}/{}/statuses/{}",
-            forgejo_url.trim_end_matches('/'),
-            update.repo_owner,
-            update.repo_name,
-            update.commit_sha,
-        );
-
-        let mut body = serde_json::json!({
-            "state": update.state,
-            "context": update.context,
-            "description": update.description,
-        });
-
-        if let Some(ref target_url) = update.target_url {
-            body["target_url"] = serde_json::Value::String(target_url.clone());
-        }
-
-        let result = ureq::post(&url)
-            .set("Authorization", &format!("token {forgejo_token}"))
-            .set("Content-Type", "application/json")
-            .send_string(&body.to_string());
-
-        if let Err(e) = result {
-            eprintln!("StatusReporter: failed to post status to {url}: {e}");
-        }
-    }
-
-    #[cfg(feature = "local")]
-    fn find_pr_for_branch(
-        forgejo_url: &str,
-        forgejo_token: &str,
-        repo_owner: &str,
-        repo_name: &str,
-        branch: &str,
-    ) -> Option<u64> {
-        let url = format!(
-            "{}/api/v1/repos/{}/{}/pulls?state=open&limit=50",
-            forgejo_url.trim_end_matches('/'),
-            repo_owner,
-            repo_name,
-        );
-
-        let response = ureq::get(&url)
-            .set("Authorization", &format!("token {forgejo_token}"))
-            .call();
-
-        let response = match response {
-            Ok(r) => r,
-            Err(e) => {
-                eprintln!("StatusReporter: failed to list PRs: {e}");
-                return None;
-            }
-        };
-
-        let body: serde_json::Value = match response.into_json() {
-            Ok(v) => v,
-            Err(e) => {
-                eprintln!("StatusReporter: failed to parse PR list: {e}");
-                return None;
-            }
-        };
-
-        let prs = body.as_array()?;
-        for pr in prs {
-            let head_ref = pr.get("head")?.get("ref")?.as_str()?;
-            if head_ref == branch {
-                return pr.get("number")?.as_u64();
-            }
-        }
-        None
-    }
-
-    #[cfg(feature = "local")]
-    fn post_pr_comment(
-        forgejo_url: &str,
-        forgejo_token: &str,
-        repo_owner: &str,
-        repo_name: &str,
-        pr_number: u64,
-        body_text: &str,
-    ) -> Option<String> {
-        let url = format!(
-            "{}/api/v1/repos/{}/{}/issues/{}/comments",
-            forgejo_url.trim_end_matches('/'),
-            repo_owner,
-            repo_name,
-            pr_number,
-        );
-
-        let body = serde_json::json!({
-            "body": body_text,
-        });
-
-        let result = ureq::post(&url)
-            .set("Authorization", &format!("token {forgejo_token}"))
-            .set("Content-Type", "application/json")
-            .send_string(&body.to_string());
-
-        match result {
-            Ok(response) => {
-                let json: serde_json::Value = response.into_json().ok()?;
-                json.get("html_url")?.as_str().map(|s| s.to_string())
-            }
-            Err(e) => {
-                eprintln!("StatusReporter: failed to post PR comment: {e}");
-                None
-            }
-        }
-    }
-
-    #[cfg(feature = "local")]
-    fn build_pipeline_comment(
-        pipeline_name: &str,
-        pipeline_state: &str,
-        commit_sha: &str,
-        job_outputs: &[JobOutput],
-    ) -> String {
-        let mut md = format!("## Pipeline `{pipeline_name}` — {pipeline_state}\n\n");
-        let short_sha = if commit_sha.len() > 7 {
-            &commit_sha[..7]
-        } else {
-            commit_sha
-        };
-        md.push_str(&format!("Commit: `{short_sha}`\n\n"));
-
-        for job in job_outputs {
-            let status_label = if job.passed {
-                "passed".to_string()
-            } else {
-                match &job.failure_reason {
-                    Some(reason) => format!("failed: {reason}"),
-                    None => "failed".to_string(),
-                }
-            };
-
-            md.push_str(&format!(
-                "<details>\n<summary>{} — {}</summary>\n\n",
-                job.job_name, status_label
-            ));
-
-            let max_lines = 100;
-            let total = job.output_lines.len();
-            let lines: &[String] = if total > max_lines {
-                md.push_str(&format!("_Showing last {max_lines} of {total} lines_\n\n"));
-                &job.output_lines[total - max_lines..]
-            } else {
-                &job.output_lines
-            };
-
-            md.push_str("```\n");
-            for line in lines {
-                md.push_str(line);
-                md.push('\n');
-            }
-            md.push_str("```\n\n</details>\n\n");
-        }
-
-        md
-    }
-
-    #[cfg(feature = "local")]
-    fn handle_pipeline_comment(
-        repo_owner: &str,
-        repo_name: &str,
-        commit_sha: &str,
-        branch: &str,
-        pipeline_name: &str,
-        pipeline_state: &str,
-        job_outputs: &[JobOutput],
-        forgejo_url: &str,
-        forgejo_token: &str,
-    ) {
-        let pr_number = match Self::find_pr_for_branch(
-            forgejo_url,
-            forgejo_token,
-            repo_owner,
-            repo_name,
-            branch,
-        ) {
-            Some(n) => n,
-            None => {
-                eprintln!(
-                    "StatusReporter: no open PR for branch '{branch}', skipping comment"
-                );
-                return;
-            }
-        };
-
-        let comment_body =
-            Self::build_pipeline_comment(pipeline_name, pipeline_state, commit_sha, job_outputs);
-
-        let comment_url = Self::post_pr_comment(
-            forgejo_url,
-            forgejo_token,
-            repo_owner,
-            repo_name,
-            pr_number,
-            &comment_body,
-        );
-
-        // Re-post pipeline status with target_url pointing to the comment.
-        if let Some(ref url) = comment_url {
-            let update = StatusUpdate {
-                repo_owner: repo_owner.to_string(),
-                repo_name: repo_name.to_string(),
-                commit_sha: commit_sha.to_string(),
-                state: pipeline_state.to_string(),
-                context: format!("ci/{pipeline_name}"),
-                description: format!("Pipeline '{pipeline_name}' {pipeline_state}"),
-                target_url: Some(url.clone()),
-            };
-            Self::post_status(&update, forgejo_url, forgejo_token);
-        }
-    }
-}
-
-impl ActorInterface for StatusReporter {
-    type Incoming = StatusReporterMsg;
-    type Response = ();
-
-    fn handle(&mut self, _ctx: &Ctx, msg: StatusReporterMsg) {
-        match msg {
-            StatusReporterMsg::Report {
-                update,
-                forgejo_url,
-                forgejo_token,
-            } => {
-                #[cfg(feature = "local")]
-                Self::post_status(&update, &forgejo_url, &forgejo_token);
-
-                #[cfg(not(feature = "local"))]
-                {
-                    let _ = (update, forgejo_url, forgejo_token);
-                }
-            }
-            StatusReporterMsg::PostPipelineComment {
-                repo_owner,
-                repo_name,
-                commit_sha,
-                branch,
-                pipeline_name,
-                pipeline_state,
-                job_outputs,
-                forgejo_url,
-                forgejo_token,
-            } => {
-                #[cfg(feature = "local")]
-                Self::handle_pipeline_comment(
-                    &repo_owner,
-                    &repo_name,
-                    &commit_sha,
-                    &branch,
-                    &pipeline_name,
-                    &pipeline_state,
-                    &job_outputs,
-                    &forgejo_url,
-                    &forgejo_token,
-                );
-
-                #[cfg(not(feature = "local"))]
-                {
-                    let _ = (
-                        repo_owner,
-                        repo_name,
-                        commit_sha,
-                        branch,
-                        pipeline_name,
-                        pipeline_state,
-                        job_outputs,
-                        forgejo_url,
-                        forgejo_token,
-                    );
-                }
-            }
-        }
-    }
-}
diff --git a/crates/ci/src/webhook_server.rs b/crates/ci/src/webhook_server.rs
deleted file mode 100644
index f636ebd..0000000
--- a/crates/ci/src/webhook_server.rs
+++ /dev/null
@@ -1,188 +0,0 @@
-//! Webhook HTTP listener: receives Forgejo webhook POSTs and forwards
-//! them to the LocalCoordinator actor.
-//!
-//! Runs as a standard thread (not an actor) using `tiny_http`.
-
-use crate::{EventType, WebhookEvent};
-
-/// Start the webhook listener in a new thread.
-///
-/// Returns a join handle for the listener thread.
-#[cfg(feature = "local")]
-pub fn start_webhook_listener(
-    port: u16,
-    secret: String,
-    runtime: std::sync::Arc<swactor::runtime::Runtime>,
-    coordinator_addr: swactor::actor::ActorAddress,
-) -> std::thread::JoinHandle<()> {
-    std::thread::Builder::new()
-        .name("webhook-listener".into())
-        .spawn(move || {
-            let server = tiny_http::Server::http(format!("0.0.0.0:{port}"))
-                .expect("failed to start webhook server");
-
-            eprintln!("Webhook listener on http://0.0.0.0:{port}");
-
-            for mut request in server.incoming_requests() {
-                let response = handle_request(&mut request, &secret, &runtime, coordinator_addr);
-                let _ = request.respond(response);
-            }
-        })
-        .expect("failed to spawn webhook listener thread")
-}
-
-#[cfg(feature = "local")]
-fn handle_request(
-    request: &mut tiny_http::Request,
-    secret: &str,
-    runtime: &std::sync::Arc<swactor::runtime::Runtime>,
-    coordinator_addr: swactor::actor::ActorAddress,
-) -> tiny_http::Response<std::io::Cursor<Vec<u8>>> {
-    use hmac::{Hmac, Mac};
-    use sha2::Sha256;
-    use crate::local_coordinator::LocalCoordinatorMsg;
-
-    // Only accept POST.
-    if request.method() != &tiny_http::Method::Post {
-        return tiny_http::Response::from_string("method not allowed")
-            .with_status_code(405);
-    }
-
-    // Read body.
-    let mut body = String::new();
-    if let Err(e) = std::io::Read::read_to_string(&mut request.as_reader(), &mut body) {
-        eprintln!("webhook: failed to read body: {e}");
-        return tiny_http::Response::from_string("bad request")
-            .with_status_code(400);
-    }
-
-    // Verify HMAC-SHA256 signature if secret is non-empty.
-    if !secret.is_empty() {
-        let sig_header = request
-            .headers()
-            .iter()
-            .find(|h| h.field.equiv("X-Forgejo-Signature"))
-            .map(|h| h.value.as_str().to_string());
-
-        match sig_header {
-            Some(sig_hex) => {
-                type HmacSha256 = Hmac<Sha256>;
-                let mut mac = HmacSha256::new_from_slice(secret.as_bytes())
-                    .expect("HMAC key creation");
-                hmac::Mac::update(&mut mac, body.as_bytes());
-                let expected = hex::encode(mac.finalize().into_bytes());
-                if sig_hex != expected {
-                    eprintln!("webhook: signature mismatch");
-                    return tiny_http::Response::from_string("unauthorized")
-                        .with_status_code(401);
-                }
-            }
-            None => {
-                eprintln!("webhook: missing signature header");
-                return tiny_http::Response::from_string("unauthorized")
-                    .with_status_code(401);
-            }
-        }
-    }
-
-    // Determine event type from Forgejo header.
-    let event_header = request
-        .headers()
-        .iter()
-        .find(|h| h.field.equiv("X-Forgejo-Event"))
-        .map(|h| h.value.as_str().to_string())
-        .unwrap_or_default();
-
-    let event_type = match event_header.as_str() {
-        "push" => EventType::Push,
-        "create" => EventType::Tag,
-        "pull_request" => EventType::Merge,
-        other => {
-            eprintln!("webhook: ignoring event type '{other}'");
-            return tiny_http::Response::from_string("ignored").with_status_code(200);
-        }
-    };
-
-    // Parse JSON body to extract fields.
-    let json: serde_json::Value = match serde_json::from_str(&body) {
-        Ok(v) => v,
-        Err(e) => {
-            eprintln!("webhook: failed to parse JSON: {e}");
-            return tiny_http::Response::from_string("bad json").with_status_code(400);
-        }
-    };
-
-    let webhook_event = match parse_webhook_json(&json, event_type) {
-        Some(e) => e,
-        None => {
-            eprintln!("webhook: could not extract webhook fields from JSON");
-            return tiny_http::Response::from_string("bad payload").with_status_code(400);
-        }
-    };
-
-    // Send to coordinator.
-    let _ = runtime.send_to(coordinator_addr, LocalCoordinatorMsg::Webhook(webhook_event));
-
-    tiny_http::Response::from_string("ok").with_status_code(200)
-}
-
-/// Parse a Forgejo webhook JSON payload into a WebhookEvent.
-pub fn parse_webhook_json(json: &serde_json::Value, event_type: EventType) -> Option<WebhookEvent> {
-    let repo = json.get("repository")?;
-    let repo_owner = repo
-        .get("owner")
-        .and_then(|o| o.get("login"))
-        .or_else(|| repo.get("owner").and_then(|o| o.get("username")))
-        .and_then(|v| v.as_str())?
-        .to_string();
-    let repo_name = repo.get("name").and_then(|v| v.as_str())?.to_string();
-
-    let (branch, commit_sha, tag) = match event_type {
-        EventType::Push => {
-            let reference = json.get("ref").and_then(|v| v.as_str()).unwrap_or("");
-            let branch = reference.strip_prefix("refs/heads/").unwrap_or(reference);
-            let sha = json
-                .get("after")
-                .and_then(|v| v.as_str())
-                .unwrap_or("")
-                .to_string();
-            (branch.to_string(), sha, None)
-        }
-        EventType::Tag => {
-            let reference = json.get("ref").and_then(|v| v.as_str()).unwrap_or("");
-            let tag_name = reference.strip_prefix("refs/tags/").unwrap_or(reference);
-            let sha = json
-                .get("sha")
-                .or_else(|| json.get("after"))
-                .and_then(|v| v.as_str())
-                .unwrap_or("")
-                .to_string();
-            (String::new(), sha, Some(tag_name.to_string()))
-        }
-        EventType::Merge => {
-            let pr = json.get("pull_request")?;
-            let branch = pr
-                .get("head")
-                .and_then(|h| h.get("ref"))
-                .and_then(|v| v.as_str())
-                .unwrap_or("")
-                .to_string();
-            let sha = pr
-                .get("head")
-                .and_then(|h| h.get("sha"))
-                .and_then(|v| v.as_str())
-                .unwrap_or("")
-                .to_string();
-            (branch, sha, None)
-        }
-    };
-
-    Some(WebhookEvent {
-        event_type,
-        repo_owner,
-        repo_name,
-        branch,
-        commit_sha,
-        tag,
-    })
-}
diff --git a/crates/dashboard/AGENTS.md b/crates/dashboard/AGENTS.md
index 51ffad5..89542fe 100644
--- a/crates/dashboard/AGENTS.md
+++ b/crates/dashboard/AGENTS.md
@@ -9,13 +9,13 @@ to stdout (one object per line). Human-readable output goes to stderr.
 ### Launching
 
 ```bash
-cargo run -p runtime-dashboard --example investigate_demo
+cargo run -p dashboard --example investigate_demo
 ```
 
 Or programmatically against any running runtime:
 
 ```rust
-use runtime_dashboard::investigate::run_investigate;
+use dashboard::investigate::run_investigate;
 run_investigate(runtime_arc, collector_arc)?;   // blocks on stdin
 ```
 
diff --git a/crates/dashboard/Cargo.toml b/crates/dashboard/Cargo.toml
index 5d7fd03..4601dea 100644
--- a/crates/dashboard/Cargo.toml
+++ b/crates/dashboard/Cargo.toml
@@ -5,7 +5,6 @@ edition = "2024"
 
 [dependencies]
 swactor = { path = "../..", features = ["serde", "tracing"] }
-swactor-std = { path = "../std", default-features = false }
 tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["registry"] }
 serde = { version = "1", features = ["derive"] }
@@ -16,25 +15,14 @@ tokio-stream = "0.1"
 crossbeam-queue = "0.3.12"
 ratatui = { version = "0.29", optional = true, default-features = false, features = ["crossterm"] }
 crossterm = { version = "0.28", optional = true }
-distribution = { path = "../distribution", optional = true }
 clap = { version = "4", features = ["derive"], optional = true }
 ctrlc = "3"
-iroh = { version = "0.96", optional = true }
 
 [features]
-default = ["distribution"]
+default = []
 tui = ["dep:ratatui", "dep:crossterm"]
-distribution = ["dep:distribution"]
-node = ["distribution", "dep:clap", "swactor/transport", "tcp"]
-tcp = ["distribution/tcp"]
-iroh = ["distribution/iroh", "dep:iroh"]
 
 [[bin]]
 name = "swactor-tui"
 path = "src/bin/tui.rs"
 required-features = ["tui"]
-
-[[bin]]
-name = "swactor-node"
-path = "src/bin/swactor-node.rs"
-required-features = ["node"]
diff --git a/crates/dashboard/README.md b/crates/dashboard/README.md
index e9a70ab..3290178 100644
--- a/crates/dashboard/README.md
+++ b/crates/dashboard/README.md
@@ -1,4 +1,4 @@
-# runtime-dashboard
+# dashboard
 
 Visual dashboard for the swactor runtime. Provides a live HTTP dashboard, a
 terminal UI (TUI), trace recording/replay, and an HTTP API for programmatic
@@ -16,7 +16,7 @@ runtime investigation.
 Start the dashboard demo and open it in a browser:
 
 ```bash
-cargo run -p runtime-dashboard --example dashboard_demo
+cargo run -p dashboard --example dashboard_demo
 ```
 
 Pages:
@@ -33,9 +33,9 @@ membership and actor registrations in the directory/cache.
 A standalone binary that connects to any running dashboard over SSE:
 
 ```bash
-cargo run -p runtime-dashboard --features tui --bin swactor-tui
+cargo run -p dashboard --features tui --bin swactor-tui
 # or point at a specific endpoint
-cargo run -p runtime-dashboard --features tui --bin swactor-tui -- http://localhost:9090
+cargo run -p dashboard --features tui --bin swactor-tui -- http://localhost:9090
 ```
 
 Views (cycle with Tab):
@@ -70,7 +70,7 @@ All examples are run from the workspace root.
 **HTTP dashboard** — live workload with distribution cluster, Ctrl+C to stop:
 
 ```bash
-cargo run -p runtime-dashboard --example dashboard_demo
+cargo run -p dashboard --example dashboard_demo
 # http://localhost:9090              — runtime overview
 # http://localhost:9090/distribution — cluster view
 ```
@@ -78,14 +78,14 @@ cargo run -p runtime-dashboard --example dashboard_demo
 **Benchmarks** — four automated scenarios (~20 s total):
 
 ```bash
-cargo run -p runtime-dashboard --example bench_dashboard
+cargo run -p dashboard --example bench_dashboard
 # open http://localhost:9090
 ```
 
 **Record & replay** — records ~10 s of activity, then serves a replay:
 
 ```bash
-cargo run -p runtime-dashboard --example record_and_replay_demo
+cargo run -p dashboard --example record_and_replay_demo
 # live dashboard at http://localhost:9090 during recording
 # replay dashboard at http://localhost:9091 after recording finishes
 # Ctrl+C to stop
diff --git a/crates/dashboard/examples/bench_dashboard.rs b/crates/dashboard/examples/bench_dashboard.rs
deleted file mode 100644
index a2ed48f..0000000
--- a/crates/dashboard/examples/bench_dashboard.rs
+++ /dev/null
@@ -1,224 +0,0 @@
-use std::thread;
-use std::time::{Duration, Instant};
-
-use swactor::actor::{ActorAddress, ActorInterface, Ctx};
-use swactor::config::{BackoffPolicy, RuntimeConfig};
-use swactor::runtime::Runtime;
-
-use dashboard::collector::StatsCollector;
-use dashboard::{start_dashboard, DashboardConfig};
-
-// ---------------------------------------------------------------------------
-// Actors
-// ---------------------------------------------------------------------------
-
-#[derive(Clone)]
-struct Work;
-
-struct SinkActor {
-    count: u64,
-}
-
-impl SinkActor {
-    fn new() -> Self {
-        Self { count: 0 }
-    }
-}
-
-impl ActorInterface for SinkActor {
-    type Incoming = Work;
-    type Response = ();
-    fn handle(&mut self, _ctx: &Ctx, _msg: Work) {
-        self.count += 1;
-    }
-}
-
-#[derive(Clone)]
-struct RingMsg;
-
-struct RingActor {
-    next: ActorAddress,
-}
-
-impl ActorInterface for RingActor {
-    type Incoming = RingMsg;
-    type Response = ();
-    fn handle(&mut self, ctx: &Ctx, _msg: RingMsg) {
-        let _ = ctx.send(self.next, RingMsg);
-    }
-}
-
-#[derive(Clone)]
-struct SpawnCmd;
-
-struct SpawnerActor {
-    spawned: u64,
-}
-
-impl SpawnerActor {
-    fn new() -> Self {
-        Self { spawned: 0 }
-    }
-}
-
-impl ActorInterface for SpawnerActor {
-    type Incoming = SpawnCmd;
-    type Response = ();
-    fn handle(&mut self, ctx: &Ctx, _msg: SpawnCmd) {
-        for _ in 0..20 {
-            let _ = ctx.spawn(SinkActor::new());
-            self.spawned += 1;
-        }
-    }
-}
-
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-
-fn bench_config(threads: usize, max_actors: usize, max_messages: usize) -> RuntimeConfig {
-    RuntimeConfig {
-        num_threads: threads,
-        max_actors,
-        channel_buffer_size: max_messages,
-        backoff_policy: BackoffPolicy {
-            spin_threshold: 32,
-            yield_threshold: 64,
-            sleep_increment_us: 10,
-            sleep_max_us: 100,
-        },
-        ..Default::default()
-    }
-}
-
-fn run_for(duration: Duration, mut tick: impl FnMut()) {
-    let deadline = Instant::now() + duration;
-    while Instant::now() < deadline {
-        tick();
-    }
-}
-
-// ---------------------------------------------------------------------------
-// Scenarios
-// ---------------------------------------------------------------------------
-
-fn scenario_single_actor(dash: &dashboard::DashboardHandle) {
-    eprintln!("  [1/4] Single-actor bombardment (5s)");
-    let collector = StatsCollector::new(4);
-    let mut rt = Runtime::new(bench_config(4, 64, 100_000));
-    rt.set_stats_hook(collector.clone());
-    let addr = rt.spawn(SinkActor::new()).unwrap();
-    let handle = rt.run().unwrap();
-    dash.set_runtime(handle.runtime.clone(), collector);
-
-    run_for(Duration::from_secs(5), || {
-        for _ in 0..100 {
-            let _ = handle.runtime.send_to(addr, Work);
-        }
-        thread::sleep(Duration::from_millis(10));
-    });
-
-    handle.shutdown();
-    handle.join();
-}
-
-fn scenario_multi_actor(dash: &dashboard::DashboardHandle) {
-    eprintln!("  [2/4] Multi-actor fan-out (5s)");
-    let collector = StatsCollector::new(4);
-    let mut rt = Runtime::new(bench_config(4, 128, 10_000));
-    rt.set_stats_hook(collector.clone());
-    let addrs: Vec<_> = (0..50)
-        .map(|_| rt.spawn(SinkActor::new()).unwrap())
-        .collect();
-    let handle = rt.run().unwrap();
-    dash.set_runtime(handle.runtime.clone(), collector);
-
-    run_for(Duration::from_secs(5), || {
-        for &addr in &addrs {
-            for _ in 0..10 {
-                let _ = handle.runtime.send_to(addr, Work);
-            }
-        }
-        thread::sleep(Duration::from_millis(20));
-    });
-
-    handle.shutdown();
-    handle.join();
-}
-
-fn scenario_ring(dash: &dashboard::DashboardHandle) {
-    eprintln!("  [3/4] Ring topology (5s)");
-    let ring_size = 100;
-    let collector = StatsCollector::new(4);
-    let mut rt = Runtime::new(bench_config(4, ring_size + 64, 1_024));
-    rt.set_stats_hook(collector.clone());
-
-    // Build ring backwards: last spawned actor is the entry point
-    let mut addrs = Vec::with_capacity(ring_size);
-    // First actor has no valid next yet — will be the tail of the chain
-    let first = rt.spawn(RingActor { next: ActorAddress::default() }).unwrap();
-    addrs.push(first);
-    let mut prev = first;
-    for _ in 1..ring_size {
-        let addr = rt.spawn(RingActor { next: prev }).unwrap();
-        addrs.push(addr);
-        prev = addr;
-    }
-    // The first actor's "next" should be the last actor to close the ring,
-    // but we can't mutate it. Instead, we inject at the last actor and
-    // the message flows: last -> second-to-last -> ... -> first -> (dead end).
-    // For dashboard visualization, a chain is fine — it creates sustained cross-worker traffic.
-    let entry = *addrs.last().unwrap();
-
-    let handle = rt.run().unwrap();
-    dash.set_runtime(handle.runtime.clone(), collector);
-
-    run_for(Duration::from_secs(5), || {
-        let _ = handle.runtime.send_to(entry, RingMsg);
-        thread::sleep(Duration::from_millis(50));
-    });
-
-    handle.shutdown();
-    handle.join();
-}
-
-fn scenario_spawn_storm(dash: &dashboard::DashboardHandle) {
-    eprintln!("  [4/4] Spawn storm (5s)");
-    let collector = StatsCollector::new(4);
-    let mut rt = Runtime::new(bench_config(4, 50_000, 1_024));
-    rt.set_stats_hook(collector.clone());
-    let spawner = rt.spawn(SpawnerActor::new()).unwrap();
-    let handle = rt.run().unwrap();
-    dash.set_runtime(handle.runtime.clone(), collector);
-
-    run_for(Duration::from_secs(5), || {
-        let _ = handle.runtime.send_to(spawner, SpawnCmd);
-        thread::sleep(Duration::from_millis(200));
-    });
-
-    handle.shutdown();
-    handle.join();
-}
-
-// ---------------------------------------------------------------------------
-// Main
-// ---------------------------------------------------------------------------
-
-fn main() {
-    let dash = start_dashboard(DashboardConfig {
-        port: 9090,
-        ..Default::default()
-    });
-    dash.install_tracing();
-
-    eprintln!("Dashboard at http://localhost:9090");
-    eprintln!("Running 4 benchmark scenarios (~20s total)...\n");
-
-    scenario_single_actor(&dash);
-    scenario_multi_actor(&dash);
-    scenario_ring(&dash);
-    scenario_spawn_storm(&dash);
-
-    eprintln!("\nAll scenarios complete. Shutting down.");
-    dash.shutdown();
-}
diff --git a/crates/dashboard/examples/dashboard_demo.rs b/crates/dashboard/examples/dashboard_demo.rs
deleted file mode 100644
index 0b3c9d8..0000000
--- a/crates/dashboard/examples/dashboard_demo.rs
+++ /dev/null
@@ -1,503 +0,0 @@
-use std::sync::atomic::{AtomicBool, Ordering};
-use std::sync::{Arc, Mutex};
-use std::thread;
-use std::time::Duration;
-
-use swactor::actor::{ActorAddress, ActorInterface, Ctx};
-use swactor::config::RuntimeConfig;
-use swactor::runtime::Runtime;
-
-use distribution::node::{DistributedNode, DistributedNodeConfig, ResolveResult};
-use distribution::snapshot::DistributionNodeSnapshot;
-use distribution::swim::node::NodeAction;
-use distribution::swim::probe::SwimConfig;
-use distribution::types::NodeId;
-
-use dashboard::collector::StatsCollector;
-use dashboard::distribution_collector::DistributionStatsProvider;
-use dashboard::{start_dashboard, DashboardConfig};
-
-// ── Demo actors ─────────────────────────────────────────────────────────
-
-#[derive(Clone)]
-struct Ping(ActorAddress);
-
-struct PingActor {
-    count: u32,
-}
-
-impl PingActor {
-    fn new() -> Self {
-        Self { count: 0 }
-    }
-}
-
-impl ActorInterface for PingActor {
-    type Incoming = Ping;
-    type Response = ();
-
-    fn handle(&mut self, ctx: &Ctx, msg: Ping) {
-        self.count += 1;
-        // Forward to the target — creates cross-worker traffic
-        if self.count < 10_000 {
-            let _ = ctx.send(msg.0, Ping(ctx.self_addr()));
-        }
-    }
-}
-
-#[derive(Clone)]
-struct Tick;
-
-struct CounterActor {
-    ticks: u64,
-}
-
-impl CounterActor {
-    fn new() -> Self {
-        Self { ticks: 0 }
-    }
-}
-
-impl ActorInterface for CounterActor {
-    type Incoming = Tick;
-    type Response = ();
-
-    fn handle(&mut self, _ctx: &Ctx, _msg: Tick) {
-        self.ticks += 1;
-    }
-}
-
-// ── Snapshot provider ───────────────────────────────────────────────────
-
-struct SnapshotProvider {
-    snapshot: Arc<Mutex<Option<DistributionNodeSnapshot>>>,
-}
-
-impl DistributionStatsProvider for SnapshotProvider {
-    fn snapshot(&self) -> Option<DistributionNodeSnapshot> {
-        self.snapshot.lock().unwrap().clone()
-    }
-}
-
-// ── In-process action delivery ──────────────────────────────────────────
-
-/// Tick all live nodes and deliver their actions to other nodes.
-fn tick_all_and_deliver(
-    nodes: &mut [Option<DistributedNode>],
-    node_ids: &[NodeId],
-) {
-    let n = nodes.len();
-
-    // Collect tick actions from all live nodes.
-    let mut all_actions: Vec<(usize, Vec<NodeAction>)> = Vec::new();
-    for idx in 0..n {
-        if let Some(ref mut node) = nodes[idx] {
-            let actions = node.tick();
-            if !actions.is_empty() {
-                all_actions.push((idx, actions));
-            }
-        }
-    }
-
-    // Deliver all actions and collect responses.
-    for (sender_idx, actions) in all_actions {
-        let tagged_responses = deliver_actions_tagged(
-            &actions,
-            node_ids[sender_idx],
-            nodes,
-            node_ids,
-        );
-        for (responder_idx, response_actions) in tagged_responses {
-            deliver_actions_tagged(
-                &response_actions,
-                node_ids[responder_idx],
-                nodes,
-                node_ids,
-            );
-        }
-    }
-}
-
-/// Deliver actions to the appropriate target nodes.
-/// Returns responses tagged with the index of the responding node.
-/// `None` nodes (killed) silently drop actions — simulates network loss.
-fn deliver_actions_tagged(
-    actions: &[NodeAction],
-    sender_id: NodeId,
-    nodes: &mut [Option<DistributedNode>],
-    node_ids: &[NodeId],
-) -> Vec<(usize, Vec<NodeAction>)> {
-    let mut tagged_responses: Vec<(usize, Vec<NodeAction>)> = Vec::new();
-
-    for action in actions {
-        match action {
-            NodeAction::SendPing {
-                to,
-                sequence,
-                piggyback,
-            } => {
-                if let Some(idx) = node_ids.iter().position(|id| id == to) {
-                    if let Some(ref mut node) = nodes[idx] {
-                        let resp =
-                            node.handle_ping(sender_id, *sequence, piggyback);
-                        if !resp.is_empty() {
-                            tagged_responses.push((idx, resp));
-                        }
-                    }
-                }
-            }
-            NodeAction::SendAck {
-                to,
-                sequence,
-                piggyback,
-            } => {
-                if let Some(idx) = node_ids.iter().position(|id| id == to) {
-                    if let Some(ref mut node) = nodes[idx] {
-                        let resp = node.handle_ack(sender_id, *sequence, piggyback);
-                        if !resp.is_empty() {
-                            tagged_responses.push((idx, resp));
-                        }
-                    }
-                }
-            }
-            NodeAction::SendJoinResponse { to, members, .. } => {
-                if let Some(idx) = node_ids.iter().position(|id| id == to) {
-                    if let Some(ref mut node) = nodes[idx] {
-                        let resp = node.handle_join_response(members.clone());
-                        if !resp.is_empty() {
-                            tagged_responses.push((idx, resp));
-                        }
-                    }
-                }
-            }
-            NodeAction::SendPingReq {
-                relay,
-                target,
-                sequence,
-                piggyback,
-            } => {
-                if let Some(idx) = node_ids.iter().position(|id| id == relay) {
-                    if let Some(ref mut node) = nodes[idx] {
-                        let resp = node.handle_ping_req(
-                            sender_id,
-                            *target,
-                            *sequence,
-                            piggyback,
-                        );
-                        if !resp.is_empty() {
-                            tagged_responses.push((idx, resp));
-                        }
-                    }
-                }
-            }
-            NodeAction::ForwardAck { to, target, sequence, piggyback } => {
-                if let Some(idx) = node_ids.iter().position(|id| id == to) {
-                    if let Some(ref mut node) = nodes[idx] {
-                        let resp = node.handle_indirect_ack(*target, *sequence, piggyback);
-                        if !resp.is_empty() {
-                            tagged_responses.push((idx, resp));
-                        }
-                    }
-                }
-            }
-            NodeAction::MembershipChanged { .. } => {
-                // Notifications — no delivery needed
-            }
-        }
-    }
-
-    tagged_responses
-}
-
-/// Simulate a join handshake: the joining node sends a join request to the
-/// seed, and the seed's response is delivered back.
-fn simulate_join(
-    joining_idx: usize,
-    seed_idx: usize,
-    nodes: &mut [Option<DistributedNode>],
-    node_ids: &[NodeId],
-) {
-    let joining_id = node_ids[joining_idx];
-
-    // Seed handles the join request
-    let response_actions = if let Some(ref mut seed) = nodes[seed_idx] {
-        seed.handle_join_request(joining_id)
-    } else {
-        return;
-    };
-
-    // Deliver responses (SendJoinResponse) back to the joining node
-    let seed_id = node_ids[seed_idx];
-    let tagged = deliver_actions_tagged(&response_actions, seed_id, nodes, node_ids);
-    for (responder_idx, response_actions) in tagged {
-        deliver_actions_tagged(&response_actions, node_ids[responder_idx], nodes, node_ids);
-    }
-}
-
-// ── Main ────────────────────────────────────────────────────────────────
-
-fn main() {
-    let stop = Arc::new(AtomicBool::new(false));
-
-    // Handle Ctrl+C gracefully
-    {
-        let stop = Arc::clone(&stop);
-        ctrlc::set_handler(move || {
-            stop.store(true, Ordering::Relaxed);
-        })
-        .expect("failed to set Ctrl+C handler");
-    }
-
-    let dash = start_dashboard(DashboardConfig {
-        port: 9090,
-        ..Default::default()
-    });
-    dash.install_tracing();
-
-    let num_threads = 4;
-    let collector = StatsCollector::new(num_threads);
-
-    let mut rt = Runtime::new(RuntimeConfig {
-        num_threads,
-        max_actors: 1024,
-        channel_buffer_size: 2000,
-        ..Default::default()
-    });
-    rt.set_stats_hook(collector.clone());
-
-    // Spawn ping actors for cross-worker traffic
-    let mut ping_addrs = Vec::new();
-    for _ in 0..16 {
-        let addr = rt.spawn(PingActor::new()).unwrap();
-        ping_addrs.push(addr);
-    }
-
-    // Spawn counter actors for sustained traffic
-    let mut counter_addrs = Vec::new();
-    for _ in 0..20 {
-        let addr = rt.spawn(CounterActor::new()).unwrap();
-        counter_addrs.push(addr);
-    }
-
-    let handle = rt.run().expect("failed to start runtime");
-    dash.set_runtime(handle.runtime.clone(), collector);
-
-    // ── Distribution cluster ────────────────────────────────────────────
-
-    let swim_config = SwimConfig {
-        probe_interval: 5,
-        probe_timeout: 2,
-        indirect_probes: 2,
-        suspicion_timeout: 20,
-        dead_reprobe_interval: 50,
-    };
-
-    let num_nodes = 9; // 1 main + 8 peers
-    let mut nodes: Vec<Option<DistributedNode>> = Vec::with_capacity(num_nodes);
-    let mut node_ids: Vec<NodeId> = Vec::with_capacity(num_nodes);
-
-    for i in 0..num_nodes {
-        let config = DistributedNodeConfig {
-            swim: swim_config.clone(),
-            cache_capacity: if i == 0 { 1000 } else { 100 },
-            republish_interval: 500,
-            ..Default::default()
-        };
-        let node = DistributedNode::new(config);
-        node_ids.push(node.node_id());
-        nodes.push(Some(node));
-    }
-
-    // Join handshakes: nodes[1..] join via seed (node 0).
-    for i in 1..num_nodes {
-        simulate_join(i, 0, &mut nodes, &node_ids);
-    }
-
-    // Settle: let SWIM converge initial membership.
-    for _ in 0..5 {
-        tick_all_and_deliver(&mut nodes, &node_ids);
-    }
-
-    // Register spawned actors in the main node's directory.
-    for addr in ping_addrs.iter().chain(counter_addrs.iter()) {
-        if let Some(ref mut node) = nodes[0] {
-            node.register_actor(*addr, 1);
-        }
-    }
-
-    // Snapshot provider for the dashboard.
-    let cached_snapshot = Arc::new(Mutex::new(
-        nodes[0].as_ref().map(|n| n.snapshot()),
-    ));
-    let provider = SnapshotProvider {
-        snapshot: Arc::clone(&cached_snapshot),
-    };
-    dash.set_distribution(Arc::new(provider));
-
-    // ── Run ─────────────────────────────────────────────────────────────
-
-    eprintln!("Dashboard at http://localhost:9090 — press Ctrl+C to stop");
-    eprintln!("Distribution at http://localhost:9090/distribution");
-
-    // Kick off ping-pong chains
-    for i in 0..ping_addrs.len() {
-        let target = ping_addrs[(i + 1) % ping_addrs.len()];
-        let _ = handle.runtime.send_to(ping_addrs[i], Ping(target));
-    }
-
-    let mut round: u64 = 0;
-    while !stop.load(Ordering::Relaxed) {
-        // Send ticks to all counter actors
-        for addr in &counter_addrs {
-            let _ = handle.runtime.send_to(*addr, Tick);
-        }
-
-        // Periodically spawn more actors and register them
-        if round % 150 == 75 && counter_addrs.len() < 500 {
-            for _ in 0..8 {
-                match handle.runtime.spawn(CounterActor::new()) {
-                    Ok(addr) => {
-                        counter_addrs.push(addr);
-                        if let Some(ref mut node) = nodes[0] {
-                            node.register_actor(addr, 1);
-                        }
-                    }
-                    Err(_) => break,
-                }
-            }
-        }
-
-        // Periodically re-kick ping chains
-        if round % 80 == 0 && round > 0 {
-            for i in 0..ping_addrs.len() {
-                let target = ping_addrs[(i + 1) % ping_addrs.len()];
-                let _ = handle.runtime.send_to(ping_addrs[i], Ping(target));
-            }
-        }
-
-        // Tick all distribution nodes and deliver SWIM actions
-        tick_all_and_deliver(&mut nodes, &node_ids);
-
-        // Periodically resolve actors from main node
-        if round % 50 == 25 {
-            if let Some(ref mut main_node) = nodes[0] {
-                let actor = ping_addrs[(round as usize / 50) % ping_addrs.len()];
-                match main_node.resolve_actor(&actor) {
-                    ResolveResult::Cached(found_on) => {
-                        tracing::info!(actor = ?&actor.0[..4], ?found_on, "resolved actor (cached)");
-                    }
-                    ResolveResult::NeedsLookup { .. } => {
-                        tracing::info!(actor = ?&actor.0[..4], "resolve: needs lookup");
-                    }
-                    ResolveResult::NotFound => {
-                        tracing::info!(actor = ?&actor.0[..4], "resolve: not found");
-                    }
-                }
-            }
-        }
-
-        // Periodically register actors on a peer and propagate entries to main node
-        if round % 100 == 0 && round > 0 {
-            let peer_idx = 1 + ((round as usize / 100) % (num_nodes - 1));
-            // Register on the peer, collect entries
-            let mut entries = Vec::new();
-            if let Some(ref mut peer) = nodes[peer_idx] {
-                for _ in 0..3 {
-                    let actor = ActorAddress::new_random();
-                    let entry = peer.register_actor(actor, round);
-                    entries.push(entry);
-                }
-            }
-            // Propagate to main node (separate borrow)
-            if let Some(ref mut main_node) = nodes[0] {
-                for entry in entries {
-                    main_node.store_directory_entry(entry);
-                }
-            }
-        }
-
-        // ── Churn cycle (repeats every 400 rounds, starts at round 200) ──
-        //
-        // Offsets within each 400-round cycle:
-        //   0   → kill peer 8 (simulated crash)
-        //   150 → revive peer 8 (rejoin cluster)
-        //   200 → graceful leave for peer 7
-        //   350 → rejoin peer 7
-        if round >= 200 {
-            let churn_pos = (round - 200) % 400;
-
-            // Kill peer 8 (simulated crash — set to None)
-            if churn_pos == 0 {
-                nodes[8] = None;
-                tracing::info!("killed peer 8 (simulated crash)");
-            }
-
-            // Revive peer 8 (new node + rejoin)
-            if churn_pos == 150 {
-                let config = DistributedNodeConfig {
-                    swim: swim_config.clone(),
-                    cache_capacity: 100,
-                    republish_interval: 500,
-                    ..Default::default()
-                };
-                let revived = DistributedNode::new(config);
-                nodes[8] = Some(revived);
-                node_ids[8] = nodes[8].as_ref().unwrap().node_id();
-                simulate_join(8, 0, &mut nodes, &node_ids);
-                tracing::info!("revived peer 8 (rejoined cluster)");
-            }
-
-            // Graceful leave for peer 7
-            if churn_pos == 200 {
-                let leave_actions = nodes[7]
-                    .as_mut()
-                    .map(|n| n.leave())
-                    .unwrap_or_default();
-                if !leave_actions.is_empty() {
-                    let tagged_responses = deliver_actions_tagged(
-                        &leave_actions,
-                        node_ids[7],
-                        &mut nodes,
-                        &node_ids,
-                    );
-                    for (responder_idx, response_actions) in tagged_responses {
-                        deliver_actions_tagged(
-                            &response_actions,
-                            node_ids[responder_idx],
-                            &mut nodes,
-                            &node_ids,
-                        );
-                    }
-                }
-                nodes[7] = None;
-                tracing::info!("peer 7 gracefully left the cluster");
-            }
-
-            // Rejoin peer 7
-            if churn_pos == 350 {
-                let config = DistributedNodeConfig {
-                    swim: swim_config.clone(),
-                    cache_capacity: 100,
-                    republish_interval: 500,
-                    ..Default::default()
-                };
-                let revived = DistributedNode::new(config);
-                nodes[7] = Some(revived);
-                node_ids[7] = nodes[7].as_ref().unwrap().node_id();
-                simulate_join(7, 0, &mut nodes, &node_ids);
-                tracing::info!("peer 7 rejoined the cluster");
-            }
-        }
-
-        // Update cached snapshot for the dashboard
-        *cached_snapshot.lock().unwrap() = nodes[0].as_ref().map(|n| n.snapshot());
-
-        round += 1;
-        thread::sleep(Duration::from_millis(200));
-    }
-
-    eprintln!("\nShutting down...");
-    handle.shutdown();
-    dash.shutdown();
-    handle.join();
-}
diff --git a/crates/dashboard/examples/record_and_replay_demo.rs b/crates/dashboard/examples/record_and_replay_demo.rs
deleted file mode 100644
index 13d5292..0000000
--- a/crates/dashboard/examples/record_and_replay_demo.rs
+++ /dev/null
@@ -1,162 +0,0 @@
-use std::sync::atomic::{AtomicBool, Ordering};
-use std::sync::Arc;
-use std::thread;
-use std::time::Duration;
-
-use swactor::actor::{ActorAddress, ActorInterface, Ctx};
-use swactor::config::RuntimeConfig;
-use swactor::runtime::Runtime;
-
-use dashboard::collector::StatsCollector;
-use dashboard::{serve_replay, start_dashboard, DashboardConfig, ReplayConfig};
-
-// ── Demo actors ─────────────────────────────────────────────────────────
-
-#[derive(Clone)]
-struct Ping(ActorAddress);
-
-struct PingActor {
-    count: u32,
-}
-
-impl PingActor {
-    fn new() -> Self {
-        Self { count: 0 }
-    }
-}
-
-impl ActorInterface for PingActor {
-    type Incoming = Ping;
-    type Response = ();
-
-    fn handle(&mut self, ctx: &Ctx, msg: Ping) {
-        self.count += 1;
-        if self.count < 100 {
-            let _ = ctx.send(msg.0, Ping(ctx.self_addr()));
-        }
-    }
-}
-
-#[derive(Clone)]
-struct Tick;
-
-struct CounterActor;
-
-impl ActorInterface for CounterActor {
-    type Incoming = Tick;
-    type Response = ();
-
-    fn handle(&mut self, _ctx: &Ctx, _msg: Tick) {}
-}
-
-// ── Main ────────────────────────────────────────────────────────────────
-
-fn main() {
-    // ── Phase 1: Record ─────────────────────────────────────────────────
-
-    let dash = start_dashboard(DashboardConfig {
-        port: 9090,
-        record: true,
-        ..Default::default()
-    });
-    dash.install_tracing();
-
-    let num_threads = 4;
-    let collector = StatsCollector::new(num_threads);
-
-    let mut rt = Runtime::new(RuntimeConfig {
-        num_threads,
-        max_actors: 512,
-        channel_buffer_size: 1000,
-        ..Default::default()
-    });
-    rt.set_stats_hook(collector.clone());
-
-    let mut ping_addrs = Vec::new();
-    for _ in 0..12 {
-        let addr = rt.spawn(PingActor::new()).unwrap();
-        ping_addrs.push(addr);
-    }
-
-    let mut counter_addrs = Vec::new();
-    for _ in 0..16 {
-        let addr = rt.spawn(CounterActor).unwrap();
-        counter_addrs.push(addr);
-    }
-
-    let handle = rt.run().expect("failed to start runtime");
-    dash.set_runtime(handle.runtime.clone(), collector);
-
-    eprintln!("Recording trace for ~10 seconds...");
-    eprintln!("Live dashboard at http://localhost:9090");
-
-    // Kick off ping-pong chains
-    for i in 0..ping_addrs.len() {
-        let target = ping_addrs[(i + 1) % ping_addrs.len()];
-        let _ = handle.runtime.send_to(ping_addrs[i], Ping(target));
-    }
-
-    for round in 0..50 {
-        for addr in &counter_addrs {
-            let _ = handle.runtime.send_to(*addr, Tick);
-        }
-
-        if round == 20 {
-            for _ in 0..8 {
-                let addr = handle.runtime.spawn(CounterActor).unwrap();
-                counter_addrs.push(addr);
-            }
-            eprintln!("  Spawned 8 more actors");
-        }
-
-        if round == 25 {
-            for i in 0..ping_addrs.len() {
-                let target = ping_addrs[(i + 1) % ping_addrs.len()];
-                let _ = handle.runtime.send_to(ping_addrs[i], Ping(target));
-            }
-        }
-
-        thread::sleep(Duration::from_millis(200));
-    }
-
-    handle.shutdown();
-    dash.shutdown();
-    handle.join();
-
-    // Save trace
-    let path = "runtime_trace.json";
-    match dash.save_trace(path) {
-        Ok(()) => eprintln!("Trace saved to {path}"),
-        Err(e) => {
-            eprintln!("Failed to save trace: {e}");
-            std::process::exit(1);
-        }
-    }
-
-    // ── Phase 2: Replay ─────────────────────────────────────────────────
-
-    let stop = Arc::new(AtomicBool::new(false));
-    {
-        let stop = Arc::clone(&stop);
-        ctrlc::set_handler(move || {
-            stop.store(true, Ordering::Relaxed);
-        })
-        .expect("failed to set Ctrl+C handler");
-    }
-
-    eprintln!("\nStarting replay at 2x speed — press Ctrl+C to stop");
-
-    // Spawn replay server in a background thread so we can check Ctrl+C
-    let replay_path = path.to_string();
-    thread::spawn(move || {
-        if let Err(e) = serve_replay(&replay_path, ReplayConfig { port: 9091, speed: 2.0 }) {
-            eprintln!("Replay error: {e}");
-        }
-    });
-
-    while !stop.load(Ordering::Relaxed) {
-        thread::sleep(Duration::from_millis(200));
-    }
-
-    eprintln!("Done.");
-}
diff --git a/crates/dashboard/src/actor_detail_html.rs b/crates/dashboard/src/actor_detail_html.rs
index 4b4c41e..3d98f33 100644
--- a/crates/dashboard/src/actor_detail_html.rs
+++ b/crates/dashboard/src/actor_detail_html.rs
@@ -123,8 +123,8 @@ pub const ACTOR_DETAIL_HTML: &str = r##"<!DOCTYPE html>
     <nav class="nav-links">
       <a href="/" class="nav-link">Overview</a>
       <a href="/actors" class="nav-link">Actors</a>
-      <a href="/distribution" class="nav-link">Distribution</a>
-      <a href="/datastore" class="nav-link">Datastore</a>
+      <a href="/plugin/distribution" class="nav-link">Distribution</a>
+      <a href="/plugin/datastore" class="nav-link">Datastore</a>
     </nav>
   </div>
 </div>
diff --git a/crates/dashboard/src/actors_html.rs b/crates/dashboard/src/actors_html.rs
index 9595175..8a07027 100644
--- a/crates/dashboard/src/actors_html.rs
+++ b/crates/dashboard/src/actors_html.rs
@@ -151,8 +151,8 @@ pub const ACTORS_HTML: &str = r##"<!DOCTYPE html>
     <nav class="nav-links">
       <a href="/" class="nav-link">Overview</a>
       <a href="/actors" class="nav-link active">Actors</a>
-      <a href="/distribution" class="nav-link">Distribution</a>
-      <a href="/datastore" class="nav-link">Datastore</a>
+      <a href="/plugin/distribution" class="nav-link">Distribution</a>
+      <a href="/plugin/datastore" class="nav-link">Datastore</a>
     </nav>
   </div>
   <div class="header-right">
diff --git a/crates/dashboard/src/bin/swactor-node.rs b/crates/dashboard/src/bin/swactor-node.rs
deleted file mode 100644
index e06df89..0000000
--- a/crates/dashboard/src/bin/swactor-node.rs
+++ /dev/null
@@ -1,307 +0,0 @@
-use std::sync::atomic::{AtomicBool, Ordering};
-use std::sync::{Arc, Mutex};
-use std::thread;
-use std::time::Duration;
-
-use clap::Parser;
-
-use swactor::actor::{ActorInterface, Ctx};
-use swactor::config::RuntimeConfig;
-use swactor::runtime::Runtime;
-
-use distribution::node::DistributedNodeConfig;
-use distribution::registry::RegistryConfig;
-use distribution::snapshot::DistributionNodeSnapshot;
-use distribution::swim::probe::SwimConfig;
-
-use dashboard::collector::StatsCollector;
-use dashboard::distribution_collector::DistributionStatsProvider;
-use dashboard::{start_dashboard, DashboardConfig};
-
-// ── CLI ──────────────────────────────────────────────────────────────────
-
-#[derive(Parser)]
-#[command(name = "swactor-node", about = "Swactor distributed node")]
-struct Args {
-    /// Transport to use: tcp or iroh
-    #[arg(long, default_value = "tcp")]
-    transport: String,
-
-    /// Address to listen on for TCP transport (e.g. 10.0.1.10:7000)
-    #[arg(long)]
-    listen: Option<std::net::SocketAddr>,
-
-    /// Seed node address to join (TCP mode: host:port)
-    #[arg(long)]
-    seed: Option<String>,
-
-    /// Seed node's iroh public key (iroh mode: hex-encoded 32-byte key)
-    #[arg(long)]
-    seed_node_id: Option<String>,
-
-    /// Dashboard HTTP port
-    #[arg(long, default_value = "9090")]
-    dashboard_port: u16,
-
-    /// Number of dummy actors to register in the directory
-    #[arg(long, default_value = "0")]
-    actors: usize,
-}
-
-// ── Dummy actor ──────────────────────────────────────────────────────────
-
-#[derive(Clone)]
-struct Heartbeat;
-
-struct HeartbeatActor;
-
-impl ActorInterface for HeartbeatActor {
-    type Incoming = Heartbeat;
-    type Response = ();
-
-    fn handle(&mut self, _ctx: &Ctx, _msg: Heartbeat) {}
-}
-
-// ── Snapshot provider ────────────────────────────────────────────────────
-
-struct SnapshotProvider {
-    snapshot: Arc<Mutex<Option<DistributionNodeSnapshot>>>,
-}
-
-impl DistributionStatsProvider for SnapshotProvider {
-    fn snapshot(&self) -> Option<DistributionNodeSnapshot> {
-        self.snapshot.lock().unwrap().clone()
-    }
-}
-
-// ── Main ─────────────────────────────────────────────────────────────────
-
-fn main() {
-    let args = Args::parse();
-    let stop = Arc::new(AtomicBool::new(false));
-
-    // Handle SIGTERM / Ctrl+C
-    {
-        let stop = Arc::clone(&stop);
-        ctrlc::set_handler(move || {
-            stop.store(true, Ordering::Relaxed);
-        })
-        .expect("failed to set signal handler");
-    }
-
-    // Start dashboard
-    let dash = start_dashboard(DashboardConfig {
-        port: args.dashboard_port,
-        ..Default::default()
-    });
-    dash.install_tracing();
-    dash.start_http_standalone();
-
-    // Create actor runtime
-    let num_threads = 2;
-    let collector = StatsCollector::new(num_threads);
-    let mut rt = Runtime::new(RuntimeConfig {
-        num_threads,
-        max_actors: 1024,
-        channel_buffer_size: 2000,
-        ..Default::default()
-    });
-    rt.set_stats_hook(collector.clone());
-
-    let handle = rt.run().expect("failed to start runtime");
-    dash.set_runtime(handle.runtime.clone(), collector);
-
-    // Distribution config (shared between transports)
-    let swim_config = SwimConfig {
-        probe_interval: 5,
-        probe_timeout: 3,
-        indirect_probes: 2,
-        suspicion_timeout: 20,
-        dead_reprobe_interval: 50,
-    };
-    let node_config = DistributedNodeConfig {
-        swim: swim_config,
-        cache_capacity: 1000,
-        republish_interval: 500,
-        ..Default::default()
-    };
-
-    match args.transport.as_str() {
-        #[cfg(feature = "tcp")]
-        "tcp" => run_tcp(args, node_config, &handle, &dash, &stop),
-        #[cfg(feature = "iroh")]
-        "iroh" => run_iroh(args, node_config, &handle, &dash, &stop),
-        other => {
-            eprintln!("Unknown or unavailable transport: {other}");
-            eprintln!("Available transports:");
-            #[cfg(feature = "tcp")]
-            eprintln!("  tcp");
-            #[cfg(feature = "iroh")]
-            eprintln!("  iroh");
-            std::process::exit(1);
-        }
-    }
-
-    eprintln!("\nShutting down...");
-    handle.shutdown();
-    dash.shutdown();
-    handle.join();
-}
-
-// ── TCP transport ────────────────────────────────────────────────────────
-
-#[cfg(feature = "tcp")]
-fn run_tcp(
-    args: Args,
-    node_config: DistributedNodeConfig,
-    handle: &swactor::runtime::RuntimeHandle,
-    dash: &dashboard::DashboardHandle,
-    stop: &Arc<AtomicBool>,
-) {
-    use distribution::driver::NodeDriver;
-
-    let listen_addr = args.listen.expect("--listen is required for TCP mode");
-    let mut driver = NodeDriver::new(listen_addr, node_config).expect("failed to create node driver");
-
-    eprintln!(
-        "Node {} listening on {} (TCP)",
-        hex(&driver.node_id().0[..4]),
-        driver.listen_addr(),
-    );
-
-    // Join seed if provided
-    if let Some(seed) = args.seed {
-        let seed_addr: std::net::SocketAddr = seed.parse().expect("invalid seed address");
-        eprintln!("Joining cluster via seed {seed_addr}");
-        driver.join(&[seed_addr]);
-    }
-
-    // Spawn and register actors
-    let actor_addrs = spawn_actors(args.actors, handle, driver.node_mut());
-
-    // Wire distribution snapshot to dashboard
-    let cached_snapshot: Arc<Mutex<Option<DistributionNodeSnapshot>>> =
-        Arc::new(Mutex::new(Some(driver.snapshot())));
-    let provider = SnapshotProvider {
-        snapshot: Arc::clone(&cached_snapshot),
-    };
-    dash.set_distribution(Arc::new(provider));
-
-    eprintln!("Dashboard at http://0.0.0.0:{}", args.dashboard_port);
-
-    // Main loop
-    while !stop.load(Ordering::Relaxed) {
-        driver.recv();
-        driver.tick();
-
-        for addr in &actor_addrs {
-            let _ = handle.runtime.send_to(*addr, Heartbeat);
-        }
-
-        *cached_snapshot.lock().unwrap() = Some(driver.snapshot());
-        thread::sleep(Duration::from_millis(100));
-    }
-}
-
-// ── iroh transport ───────────────────────────────────────────────────────
-
-#[cfg(feature = "iroh")]
-fn run_iroh(
-    args: Args,
-    node_config: DistributedNodeConfig,
-    handle: &swactor::runtime::RuntimeHandle,
-    dash: &dashboard::DashboardHandle,
-    stop: &Arc<AtomicBool>,
-) {
-    use distribution::iroh_driver::{IrohDriver, IrohDriverConfig};
-    use iroh::RelayMode;
-
-    let iroh_config = IrohDriverConfig {
-        secret_key: None,
-        relay_mode: RelayMode::Default,
-        node: node_config,
-        peer_auth: None,
-        additional_alpns: vec![],
-    };
-    let mut driver = IrohDriver::new(iroh_config).expect("failed to create iroh driver");
-
-    eprintln!(
-        "Node {} started (iroh)",
-        hex(&driver.node_id().0[..4]),
-    );
-
-    // Join seed if provided
-    if let Some(seed_hex) = args.seed_node_id {
-        let seed_bytes = hex_to_bytes(&seed_hex).expect("invalid seed node ID hex");
-        let seed_key = iroh::PublicKey::from_bytes(&seed_bytes).expect("invalid seed public key");
-        eprintln!("Joining cluster via seed {}", &seed_hex[..8]);
-        driver.join(&[seed_key]);
-    }
-
-    // Spawn and register actors
-    let actor_addrs = spawn_actors(args.actors, handle, driver.node_mut());
-
-    // Wire distribution snapshot to dashboard
-    let cached_snapshot: Arc<Mutex<Option<DistributionNodeSnapshot>>> =
-        Arc::new(Mutex::new(Some(driver.snapshot())));
-    let provider = SnapshotProvider {
-        snapshot: Arc::clone(&cached_snapshot),
-    };
-    dash.set_distribution(Arc::new(provider));
-
-    eprintln!("Dashboard at http://0.0.0.0:{}", args.dashboard_port);
-
-    // Main loop
-    while !stop.load(Ordering::Relaxed) {
-        driver.recv();
-        driver.tick();
-
-        for addr in &actor_addrs {
-            let _ = handle.runtime.send_to(*addr, Heartbeat);
-        }
-
-        *cached_snapshot.lock().unwrap() = Some(driver.snapshot());
-        thread::sleep(Duration::from_millis(100));
-    }
-
-    driver.shutdown();
-}
-
-// ── Helpers ──────────────────────────────────────────────────────────────
-
-fn spawn_actors(
-    count: usize,
-    handle: &swactor::runtime::RuntimeHandle,
-    node: &mut distribution::node::DistributedNode,
-) -> Vec<swactor::actor::ActorAddress> {
-    let mut addrs = Vec::new();
-    for _ in 0..count {
-        match handle.runtime.spawn(HeartbeatActor) {
-            Ok(addr) => {
-                node.register_actor(addr, 1);
-                addrs.push(addr);
-            }
-            Err(e) => eprintln!("failed to spawn actor: {e}"),
-        }
-    }
-    if !addrs.is_empty() {
-        eprintln!("Registered {} actors", addrs.len());
-    }
-    addrs
-}
-
-fn hex(bytes: &[u8]) -> String {
-    bytes.iter().map(|b| format!("{b:02x}")).collect()
-}
-
-#[cfg(feature = "iroh")]
-fn hex_to_bytes(hex: &str) -> Option<[u8; 32]> {
-    if hex.len() != 64 {
-        return None;
-    }
-    let mut bytes = [0u8; 32];
-    for i in 0..32 {
-        bytes[i] = u8::from_str_radix(&hex[i * 2..i * 2 + 2], 16).ok()?;
-    }
-    Some(bytes)
-}
diff --git a/crates/dashboard/src/ci_collector.rs b/crates/dashboard/src/ci_collector.rs
deleted file mode 100644
index 8629fa2..0000000
--- a/crates/dashboard/src/ci_collector.rs
+++ /dev/null
@@ -1,242 +0,0 @@
-//! CI Dashboard extension: provides HTTP API endpoints and stats for CI pipelines.
-
-use serde::{Deserialize, Serialize};
-
-// CI types defined locally to avoid a cyclic dependency with swactor-ci.
-
-/// Unique identifier for a pipeline execution.
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
-pub struct PipelineId(pub u64);
-
-/// Unique identifier for a job within a pipeline.
-#[derive(Debug, Clone, PartialEq, Eq, Hash, Serialize, Deserialize)]
-pub struct JobId {
-    pub pipeline_id: PipelineId,
-    pub job_name: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub enum JobStatus {
-    Pending,
-    WaitingForProvisioner,
-    Provisioning,
-    Running,
-    Passed,
-    Failed { reason: String },
-    Skipped,
-    Interrupted,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub enum PipelineStatus {
-    Pending,
-    Running,
-    Passed,
-    Failed,
-    Error { reason: String },
-}
-
-// ─── Stats Provider ─────────────────────────────────────────────────────────
-
-/// Trait for providing CI snapshot data to the dashboard.
-pub trait CiStatsProvider: Send + Sync {
-    fn snapshot(&self) -> CiSnapshot;
-}
-
-/// Point-in-time snapshot of CI system state.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct CiSnapshot {
-    pub active_pipelines: Vec<PipelineSnapshot>,
-    pub recent_pipelines: Vec<PipelineSnapshot>,
-    pub provisioner_status: ProvisionerStatus,
-    pub active_instances: usize,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub enum ProvisionerStatus {
-    Online,
-    Offline,
-    Unknown,
-}
-
-/// Snapshot of a single pipeline execution.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct PipelineSnapshot {
-    pub pipeline_id: PipelineId,
-    pub pipeline_name: String,
-    pub repo_owner: String,
-    pub repo_name: String,
-    pub commit_sha: String,
-    pub branch: String,
-    pub status: PipelineStatus,
-    pub jobs: Vec<JobSnapshot>,
-}
-
-/// Snapshot of a single job within a pipeline.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct JobSnapshot {
-    pub job_id: JobId,
-    pub job_name: String,
-    pub status: JobStatus,
-    pub output_line_count: usize,
-}
-
-// ─── HTTP API Responses ─────────────────────────────────────────────────────
-
-/// Response for GET /api/ci/pipelines
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct PipelineListResponse {
-    pub pipelines: Vec<PipelineSnapshot>,
-}
-
-/// Response for GET /api/ci/pipelines/{id}
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct PipelineDetailResponse {
-    pub pipeline: PipelineSnapshot,
-}
-
-/// Response for GET /api/ci/status
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct SystemStatusResponse {
-    pub provisioner_status: ProvisionerStatus,
-    pub active_pipelines: usize,
-    pub active_instances: usize,
-}
-
-/// Response for GET /api/ci/pipelines/{id}/jobs/{job_id}/log
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct JobLogResponse {
-    pub job_id: JobId,
-    pub lines: Vec<String>,
-}
-
-// ─── Route Matching ─────────────────────────────────────────────────────────
-
-/// Parsed API route for the CI dashboard.
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum CiRoute {
-    ListPipelines,
-    PipelineDetail { id: u64 },
-    JobLog { pipeline_id: u64, job_name: String },
-    Artifact { job_id: String, path: String },
-    SystemStatus,
-    NotFound,
-}
-
-/// Parse a request path into a CiRoute.
-pub fn parse_route(path: &str) -> CiRoute {
-    let parts: Vec<&str> = path.trim_start_matches('/').split('/').collect();
-    match parts.as_slice() {
-        ["api", "ci", "pipelines"] => CiRoute::ListPipelines,
-        ["api", "ci", "pipelines", id] => {
-            if let Ok(id) = id.parse() {
-                CiRoute::PipelineDetail { id }
-            } else {
-                CiRoute::NotFound
-            }
-        }
-        ["api", "ci", "pipelines", id, "jobs", job_name, "log"] => {
-            if let Ok(pipeline_id) = id.parse() {
-                CiRoute::JobLog {
-                    pipeline_id,
-                    job_name: job_name.to_string(),
-                }
-            } else {
-                CiRoute::NotFound
-            }
-        }
-        ["api", "ci", "artifacts", job_id, rest @ ..] if !rest.is_empty() => CiRoute::Artifact {
-            job_id: job_id.to_string(),
-            path: rest.join("/"),
-        },
-        ["api", "ci", "status"] => CiRoute::SystemStatus,
-        _ => CiRoute::NotFound,
-    }
-}
-
-/// Render a CiSnapshot into a JSON response for the given route.
-pub fn handle_route(route: &CiRoute, snapshot: &CiSnapshot) -> Option<String> {
-    match route {
-        CiRoute::ListPipelines => {
-            let resp = PipelineListResponse {
-                pipelines: snapshot
-                    .active_pipelines
-                    .iter()
-                    .chain(snapshot.recent_pipelines.iter())
-                    .cloned()
-                    .collect(),
-            };
-            serde_json::to_string(&resp).ok()
-        }
-        CiRoute::PipelineDetail { id } => {
-            let pipeline = snapshot
-                .active_pipelines
-                .iter()
-                .chain(snapshot.recent_pipelines.iter())
-                .find(|p| p.pipeline_id.0 == *id)?;
-            let resp = PipelineDetailResponse {
-                pipeline: pipeline.clone(),
-            };
-            serde_json::to_string(&resp).ok()
-        }
-        CiRoute::SystemStatus => {
-            let resp = SystemStatusResponse {
-                provisioner_status: snapshot.provisioner_status.clone(),
-                active_pipelines: snapshot.active_pipelines.len(),
-                active_instances: snapshot.active_instances,
-            };
-            serde_json::to_string(&resp).ok()
-        }
-        CiRoute::JobLog { .. } | CiRoute::Artifact { .. } => {
-            // These require access to stored data beyond the snapshot.
-            None
-        }
-        CiRoute::NotFound => None,
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn route_parsing() {
-        assert_eq!(parse_route("/api/ci/pipelines"), CiRoute::ListPipelines);
-        assert_eq!(
-            parse_route("/api/ci/pipelines/42"),
-            CiRoute::PipelineDetail { id: 42 }
-        );
-        assert_eq!(
-            parse_route("/api/ci/pipelines/1/jobs/test/log"),
-            CiRoute::JobLog {
-                pipeline_id: 1,
-                job_name: "test".into()
-            }
-        );
-        assert_eq!(
-            parse_route("/api/ci/artifacts/job-1/target/release/bin"),
-            CiRoute::Artifact {
-                job_id: "job-1".into(),
-                path: "target/release/bin".into()
-            }
-        );
-        assert_eq!(parse_route("/api/ci/status"), CiRoute::SystemStatus);
-        assert_eq!(parse_route("/api/ci/unknown"), CiRoute::NotFound);
-    }
-
-    #[test]
-    fn handle_system_status() {
-        let snapshot = CiSnapshot {
-            active_pipelines: vec![],
-            recent_pipelines: vec![],
-            provisioner_status: ProvisionerStatus::Online,
-            active_instances: 2,
-        };
-
-        let route = CiRoute::SystemStatus;
-        let json = handle_route(&route, &snapshot).unwrap();
-        let resp: SystemStatusResponse = serde_json::from_str(&json).unwrap();
-        assert_eq!(resp.provisioner_status, ProvisionerStatus::Online);
-        assert_eq!(resp.active_instances, 2);
-    }
-}
diff --git a/crates/dashboard/src/collector.rs b/crates/dashboard/src/collector.rs
index ecd45b7..d47750c 100644
--- a/crates/dashboard/src/collector.rs
+++ b/crates/dashboard/src/collector.rs
@@ -55,7 +55,7 @@ pub fn enrich_names(stats: &mut RuntimeStats, runtime: &Runtime) {
         Some(ext) => ext,
         None => return,
     };
-    let std_ext = match ext.as_any().downcast_ref::<swactor_std::StdExtension>() {
+    let std_ext = match ext.as_any().downcast_ref::<swactor::std::StdExtension>() {
         Some(ext) => ext,
         None => return,
     };
diff --git a/crates/dashboard/src/command/builtins.rs b/crates/dashboard/src/command/builtins.rs
index 30f09c5..c7ba5c5 100644
--- a/crates/dashboard/src/command/builtins.rs
+++ b/crates/dashboard/src/command/builtins.rs
@@ -1,6 +1,6 @@
 //! Built-in command handlers for runtime inspection and management.
 //!
-//! Extracted from `crates/runtime-dashboard/src/investigate.rs`.
+//! Extracted from `crates/dashboard/src/investigate.rs`.
 
 use std::collections::HashMap;
 use std::time::{Duration, Instant};
@@ -435,11 +435,10 @@ impl CommandHandler for PhasesCommand {
 
         let mut results = Vec::new();
         for (i, timings) in stats.tick_timings.iter().enumerate() {
-            if let Some(wid) = worker_filter {
-                if i != wid {
+            if let Some(wid) = worker_filter
+                && i != wid {
                     continue;
                 }
-            }
             let breakdown = compute_phase_breakdown(timings);
             results.push(serde_json::json!({
                 "worker_id": i,
diff --git a/crates/dashboard/src/command/mod.rs b/crates/dashboard/src/command/mod.rs
index 95fa287..ad1e2b3 100644
--- a/crates/dashboard/src/command/mod.rs
+++ b/crates/dashboard/src/command/mod.rs
@@ -153,6 +153,12 @@ pub struct CommandRouter {
     handlers: HashMap<String, Box<dyn CommandHandler>>,
 }
 
+impl Default for CommandRouter {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl CommandRouter {
     pub fn new() -> Self {
         Self {
diff --git a/crates/dashboard/src/dashboard_html.rs b/crates/dashboard/src/dashboard_html.rs
index 0aa4f7f..f777468 100644
--- a/crates/dashboard/src/dashboard_html.rs
+++ b/crates/dashboard/src/dashboard_html.rs
@@ -152,8 +152,8 @@ pub const DASHBOARD_HTML: &str = r##"<!DOCTYPE html>
     <nav class="nav-links">
       <a href="/" class="nav-link active">Overview</a>
       <a href="/actors" class="nav-link">Actors</a>
-      <a href="/distribution" class="nav-link">Distribution</a>
-      <a href="/datastore" class="nav-link">Datastore</a>
+      <a href="/plugin/distribution" class="nav-link">Distribution</a>
+      <a href="/plugin/datastore" class="nav-link">Datastore</a>
     </nav>
   </div>
   <div class="header-right">
diff --git a/crates/dashboard/src/datastore_collector.rs b/crates/dashboard/src/datastore_collector.rs
deleted file mode 100644
index b2e38b3..0000000
--- a/crates/dashboard/src/datastore_collector.rs
+++ /dev/null
@@ -1,75 +0,0 @@
-//! Datastore stats provider for the runtime dashboard.
-//!
-//! The trait returns a pre-serialized JSON string so that `runtime-dashboard`
-//! has no compile-time dependency on `swactor-datastore` (which would create a
-//! circular dependency since `swactor-datastore[node]` depends on us).
-//!
-//! The `swactor-datastore` crate implements this trait in its `node` feature.
-
-use std::sync::Arc;
-
-/// Scope filter for listing objects.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum ListScope {
-    Local,
-    Swarm,
-}
-
-/// Trait for providing datastore stats and CRUD operations to the dashboard.
-///
-/// Implementations capture a point-in-time snapshot as serialized JSON.
-/// The dashboard polls this every ~200ms via SSE.
-///
-/// All command methods have default implementations returning `Err` so that
-/// existing `DatastoreMetrics` impls continue to compile without changes.
-pub trait DatastoreStatsProvider: Send + Sync {
-    /// Return a JSON-serialized datastore snapshot, or `None` if unavailable.
-    fn snapshot_json(&self) -> Option<String>;
-
-    /// List objects as a JSON string. `scope` selects local-only or swarm-wide.
-    fn list_objects(&self, _name_filter: Option<&str>, _scope: ListScope) -> Result<String, String> {
-        Err("not supported".into())
-    }
-
-    /// Get a single object's metadata + manifest as JSON.
-    fn get_object(&self, _hash: &str) -> Result<String, String> {
-        Err("not supported".into())
-    }
-
-    /// Get the raw binary data for an object.
-    fn get_data(&self, _hash: &str) -> Result<Vec<u8>, String> {
-        Err("not supported".into())
-    }
-
-    /// Store data, optionally with a name. Returns JSON with `content_hash`.
-    fn put_data(&self, _data: Vec<u8>, _name: Option<String>) -> Result<String, String> {
-        Err("not supported".into())
-    }
-
-    /// Delete an object by hash. Returns JSON confirmation.
-    fn delete_object(&self, _hash: &str) -> Result<String, String> {
-        Err("not supported".into())
-    }
-
-    /// Get node status as JSON.
-    fn node_status(&self) -> Result<String, String> {
-        Err("not supported".into())
-    }
-
-    /// Whether the datastore is currently running.
-    fn is_running(&self) -> bool {
-        false
-    }
-
-    /// Shut down the datastore actors.
-    fn shutdown_datastore(&self) -> Result<(), String> {
-        Err("not supported".into())
-    }
-}
-
-/// Factory for creating a new datastore instance from the dashboard.
-pub trait DatastoreFactory: Send + Sync {
-    /// Start a datastore with optional persistent storage path.
-    /// Returns a provider that can be installed into the dashboard.
-    fn start_datastore(&self, storage_path: Option<String>) -> Result<Arc<dyn DatastoreStatsProvider>, String>;
-}
diff --git a/crates/dashboard/src/distribution_collector.rs b/crates/dashboard/src/distribution_collector.rs
deleted file mode 100644
index 0ae3c85..0000000
--- a/crates/dashboard/src/distribution_collector.rs
+++ /dev/null
@@ -1,35 +0,0 @@
-//! Distribution stats provider for the runtime dashboard.
-//!
-//! The application implements `DistributionStatsProvider` to let the dashboard
-//! read a single node's distribution state (SWIM membership, Kademlia routing,
-//! LRU cache, etc.) without reaching out to other nodes.
-
-use std::sync::{Arc, Mutex};
-
-use distribution::snapshot::DistributionNodeSnapshot;
-
-/// Trait for providing distribution stats to the dashboard.
-///
-/// Implementations capture a point-in-time snapshot of the local
-/// `DistributedNode`'s state. The dashboard polls this every ~200ms.
-pub trait DistributionStatsProvider: Send + Sync {
-    fn snapshot(&self) -> Option<DistributionNodeSnapshot>;
-}
-
-/// Simple implementation wrapping an `Arc<Mutex<T>>` where T implements
-/// a `snapshot()` method (e.g. `DistributedNode`).
-pub struct DistributionCollector<T> {
-    inner: Arc<Mutex<T>>,
-}
-
-impl<T> DistributionCollector<T> {
-    pub fn new(inner: Arc<Mutex<T>>) -> Self {
-        Self { inner }
-    }
-}
-
-impl DistributionStatsProvider for DistributionCollector<distribution::node::DistributedNode> {
-    fn snapshot(&self) -> Option<DistributionNodeSnapshot> {
-        self.inner.lock().ok().map(|node| node.snapshot())
-    }
-}
diff --git a/crates/dashboard/src/layer.rs b/crates/dashboard/src/layer.rs
index df4e179..aed021c 100644
--- a/crates/dashboard/src/layer.rs
+++ b/crates/dashboard/src/layer.rs
@@ -212,16 +212,14 @@ where
         if let Some(scope) = ctx.event_scope(event) {
             for span in scope {
                 let exts = span.extensions();
-                if worker_id.is_none() {
-                    if let Some(wid) = exts.get::<WorkerIdField>() {
+                if worker_id.is_none()
+                    && let Some(wid) = exts.get::<WorkerIdField>() {
                         worker_id = Some(wid.0);
                     }
-                }
-                if actor_addr.is_none() {
-                    if let Some(aa) = exts.get::<ActorAddrField>() {
+                if actor_addr.is_none()
+                    && let Some(aa) = exts.get::<ActorAddrField>() {
                         actor_addr = Some(aa.0.clone());
                     }
-                }
                 if worker_id.is_some() && actor_addr.is_some() {
                     break;
                 }
@@ -229,16 +227,14 @@ where
         }
 
         // Also check if worker_id or actor_addr was a field on the event itself
-        if worker_id.is_none() {
-            if let Some(serde_json::Value::Number(n)) = visitor.fields.get("worker_id") {
+        if worker_id.is_none()
+            && let Some(serde_json::Value::Number(n)) = visitor.fields.get("worker_id") {
                 worker_id = n.as_u64().map(|v| v as usize);
             }
-        }
-        if actor_addr.is_none() {
-            if let Some(serde_json::Value::String(s)) = visitor.fields.get("actor_addr") {
+        if actor_addr.is_none()
+            && let Some(serde_json::Value::String(s)) = visitor.fields.get("actor_addr") {
                 actor_addr = Some(s.clone());
             }
-        }
 
         let dashboard_event = DashboardEvent {
             seq: 0, // filled by push()
@@ -259,11 +255,10 @@ where
         attrs.record(&mut visitor);
 
         if let Some(span) = ctx.span(id) {
-            if let Some(serde_json::Value::Number(n)) = visitor.fields.get("worker_id") {
-                if let Some(wid) = n.as_u64() {
+            if let Some(serde_json::Value::Number(n)) = visitor.fields.get("worker_id")
+                && let Some(wid) = n.as_u64() {
                     span.extensions_mut().insert(WorkerIdField(wid as usize));
                 }
-            }
             if let Some(serde_json::Value::String(s)) = visitor.fields.get("actor_addr") {
                 span.extensions_mut().insert(ActorAddrField(s.clone()));
             }
diff --git a/crates/dashboard/src/lib.rs b/crates/dashboard/src/lib.rs
index 9c3ce92..4deb18e 100644
--- a/crates/dashboard/src/lib.rs
+++ b/crates/dashboard/src/lib.rs
@@ -3,6 +3,7 @@ pub mod command;
 pub mod history;
 pub mod investigate;
 pub mod layer;
+pub mod plugin;
 pub mod trace;
 pub mod warnings;
 mod actor_detail_html;
@@ -15,16 +16,6 @@ mod topology_html;
 #[cfg(feature = "tui")]
 pub mod tui;
 
-#[cfg(feature = "distribution")]
-mod distribution_html;
-#[cfg(feature = "distribution")]
-pub mod distribution_collector;
-
-mod datastore_html;
-pub mod datastore_collector;
-
-pub mod ci_collector;
-
 use std::io;
 use std::sync::atomic::{AtomicBool, Ordering};
 use std::sync::{Arc, Mutex};
@@ -40,6 +31,7 @@ use tracing_subscriber::util::SubscriberInitExt;
 use crate::collector::StatsCollector;
 use crate::history::{DashboardHistory, HistoryConfig};
 use crate::layer::{now_ms, DashboardLayer, EventStore};
+use crate::plugin::PluginRegistry;
 use crate::trace::{RuntimeTrace, TimestampedStats};
 
 /// Peer info sent through the join channel: (public_key, optional_relay_url).
@@ -99,13 +91,7 @@ pub struct DashboardHandle {
     history: Arc<DashboardHistory>,
     recording: bool,
     port: u16,
-    #[cfg(feature = "distribution")]
-    distribution: Arc<Mutex<Option<Arc<dyn distribution_collector::DistributionStatsProvider>>>>,
-    datastore: Arc<Mutex<Option<Arc<dyn datastore_collector::DatastoreStatsProvider>>>>,
-    datastore_factory: Arc<Mutex<Option<Arc<dyn datastore_collector::DatastoreFactory>>>>,
-    ci: Arc<Mutex<Option<Arc<dyn ci_collector::CiStatsProvider>>>>,
-    peer_auth: Arc<Mutex<Option<Arc<Mutex<distribution::peer_auth::PeerAllowList>>>>>,
-    join_sender: Arc<Mutex<Option<std::sync::mpsc::Sender<JoinPeerInfo>>>>,
+    plugin_registry: Arc<PluginRegistry>,
     standalone_rt: Mutex<Option<tokio::runtime::Runtime>>,
 }
 
@@ -133,40 +119,9 @@ impl DashboardHandle {
         self.recording
     }
 
-    /// Attach a distribution stats provider, enabling the `/distribution` page.
-    #[cfg(feature = "distribution")]
-    pub fn set_distribution(&self, provider: Arc<dyn distribution_collector::DistributionStatsProvider>) {
-        *self.distribution.lock().unwrap() = Some(provider);
-    }
-
-    /// Attach a datastore stats provider, enabling the `/datastore` page.
-    pub fn set_datastore(&self, provider: Arc<dyn datastore_collector::DatastoreStatsProvider>) {
-        *self.datastore.lock().unwrap() = Some(provider);
-    }
-
-    /// Attach a datastore factory, enabling start/stop from the dashboard.
-    pub fn set_datastore_factory(&self, factory: Arc<dyn datastore_collector::DatastoreFactory>) {
-        *self.datastore_factory.lock().unwrap() = Some(factory);
-    }
-
-    /// Get the shared datastore provider mutex (for external wiring).
-    pub fn datastore_provider(&self) -> &Arc<Mutex<Option<Arc<dyn datastore_collector::DatastoreStatsProvider>>>> {
-        &self.datastore
-    }
-
-    /// Attach a CI stats provider, enabling the `/api/ci/*` endpoints.
-    pub fn set_ci(&self, provider: Arc<dyn ci_collector::CiStatsProvider>) {
-        *self.ci.lock().unwrap() = Some(provider);
-    }
-
-    /// Attach a peer allow-list for the peer management API.
-    pub fn set_peer_auth(&self, auth: Arc<Mutex<distribution::peer_auth::PeerAllowList>>) {
-        *self.peer_auth.lock().unwrap() = Some(auth);
-    }
-
-    /// Set a sender that triggers `driver.join()` when a peer is added via the dashboard.
-    pub fn set_join_sender(&self, tx: std::sync::mpsc::Sender<JoinPeerInfo>) {
-        *self.join_sender.lock().unwrap() = Some(tx);
+    /// Register a plugin with the dashboard.
+    pub fn register_plugin(&self, plugin: Arc<dyn plugin::DashboardPlugin>) {
+        self.plugin_registry.register(plugin);
     }
 
     /// Access the time-series history store (for TUI sparklines, etc.).
@@ -212,13 +167,7 @@ impl DashboardHandle {
             shutdown_notify: Arc::clone(&self.shutdown_notify),
             history: Arc::clone(&self.history),
             cmd_router: Arc::new(crate::command::CommandRouter::with_builtins()),
-            #[cfg(feature = "distribution")]
-            distribution: Arc::clone(&self.distribution),
-            datastore: Arc::clone(&self.datastore),
-            datastore_factory: Arc::clone(&self.datastore_factory),
-                        ci: Arc::clone(&self.ci),
-            peer_auth: Arc::clone(&self.peer_auth),
-            join_sender: Arc::clone(&self.join_sender),
+            plugins: Arc::clone(&self.plugin_registry),
         }
     }
 
@@ -228,8 +177,7 @@ impl DashboardHandle {
     /// This drains the recording buffers — each call consumes the buffered data.
     pub fn save_trace(&self, path: &str) -> io::Result<()> {
         let events = self.store.all_events().ok_or_else(|| {
-            io::Error::new(
-                io::ErrorKind::Other,
+            io::Error::other(
                 "recording not enabled (set DashboardConfig::record = true)",
             )
         })?;
@@ -242,7 +190,7 @@ impl DashboardHandle {
             stats_timeline,
         };
         let json = serde_json::to_string(&trace)
-            .map_err(|e| io::Error::new(io::ErrorKind::Other, e))?;
+            .map_err(|e| io::Error::other(e))?;
         std::fs::write(path, json)
     }
 }
@@ -266,25 +214,6 @@ pub fn start_dashboard(config: DashboardConfig) -> DashboardHandle {
     let stats_timeline = Arc::new(ArrayQueue::new(config.record_stats_capacity.max(1)));
     let history = Arc::new(DashboardHistory::new(HistoryConfig::default()));
 
-    #[cfg(feature = "distribution")]
-    let distribution: Arc<Mutex<Option<Arc<dyn distribution_collector::DistributionStatsProvider>>>> =
-        Arc::new(Mutex::new(None));
-
-    let datastore: Arc<Mutex<Option<Arc<dyn datastore_collector::DatastoreStatsProvider>>>> =
-        Arc::new(Mutex::new(None));
-
-    let datastore_factory: Arc<Mutex<Option<Arc<dyn datastore_collector::DatastoreFactory>>>> =
-        Arc::new(Mutex::new(None));
-
-        let ci: Arc<Mutex<Option<Arc<dyn ci_collector::CiStatsProvider>>>> =
-        Arc::new(Mutex::new(None));
-
-    let peer_auth: Arc<Mutex<Option<Arc<Mutex<distribution::peer_auth::PeerAllowList>>>>> =
-        Arc::new(Mutex::new(None));
-
-    let join_sender: Arc<Mutex<Option<std::sync::mpsc::Sender<JoinPeerInfo>>>> =
-        Arc::new(Mutex::new(None));
-
     // Start stats recorder thread when recording is enabled
     if config.record {
         let rt_ref = Arc::clone(&runtime);
@@ -314,6 +243,7 @@ pub fn start_dashboard(config: DashboardConfig) -> DashboardHandle {
     }
 
     let port = config.port;
+    let plugin_registry = Arc::new(PluginRegistry::new());
 
     DashboardHandle {
         store,
@@ -325,13 +255,7 @@ pub fn start_dashboard(config: DashboardConfig) -> DashboardHandle {
         history,
         recording: config.record,
         port,
-        #[cfg(feature = "distribution")]
-        distribution,
-        datastore,
-        datastore_factory,
-                ci,
-        peer_auth,
-        join_sender,
+        plugin_registry,
         standalone_rt: Mutex::new(None),
     }
 }
@@ -368,7 +292,7 @@ pub fn serve_replay(path: &str, config: ReplayConfig) -> io::Result<()> {
         .worker_threads(1)
         .enable_all()
         .build()
-        .map_err(|e| io::Error::new(io::ErrorKind::Other, e))?;
+        .map_err(|e| io::Error::other(e))?;
 
     let state = server::ReplayState {
         trace: Arc::new(trace),
diff --git a/crates/dashboard/src/plugin.rs b/crates/dashboard/src/plugin.rs
new file mode 100644
index 0000000..3a2cb31
--- /dev/null
+++ b/crates/dashboard/src/plugin.rs
@@ -0,0 +1,87 @@
+//! Dashboard plugin system.
+//!
+//! Plugins provide subsystem-specific metrics, API endpoints, and UI pages
+//! to the dashboard without the dashboard knowing about the subsystem.
+
+use std::collections::HashMap;
+use std::sync::{Arc, Mutex};
+
+/// Response from a plugin's request handler.
+pub enum PluginResponse {
+    Json(String),
+    Binary { content_type: String, data: Vec<u8> },
+    Error { status: u16, message: String },
+    NotFound,
+}
+
+impl PluginResponse {
+    pub fn not_found() -> Self {
+        Self::NotFound
+    }
+
+    pub fn json(s: String) -> Self {
+        Self::Json(s)
+    }
+
+    pub fn error(status: u16, msg: impl Into<String>) -> Self {
+        Self::Error {
+            status,
+            message: msg.into(),
+        }
+    }
+}
+
+/// A composable dashboard plugin.
+///
+/// Plugins provide subsystem-specific metrics, API endpoints, and UI pages
+/// to the dashboard without the dashboard knowing about the subsystem.
+pub trait DashboardPlugin: Send + Sync {
+    /// Unique name — used as SSE event type and API route prefix `/api/plugin/{name}/...`
+    fn name(&self) -> &str;
+
+    /// JSON snapshot polled every ~200ms via SSE. Return None if no data available.
+    fn snapshot_json(&self) -> Option<String>;
+
+    /// Handle an API request to `/api/plugin/{name}/{path}`.
+    fn handle_request(
+        &self,
+        _method: &str,
+        _path: &str,
+        _query: &HashMap<String, String>,
+        _body: &[u8],
+    ) -> PluginResponse {
+        PluginResponse::not_found()
+    }
+
+    /// Optional HTML page content. Dashboard will serve at `/plugin/{name}`.
+    fn html_page(&self) -> Option<&str> {
+        None
+    }
+}
+
+/// Thread-safe registry of plugins.
+pub struct PluginRegistry {
+    plugins: Mutex<Vec<Arc<dyn DashboardPlugin>>>,
+}
+
+impl Default for PluginRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
+impl PluginRegistry {
+    pub fn new() -> Self {
+        Self {
+            plugins: Mutex::new(Vec::new()),
+        }
+    }
+
+    pub fn register(&self, plugin: Arc<dyn DashboardPlugin>) {
+        self.plugins.lock().unwrap().push(plugin);
+    }
+
+    pub fn snapshot(&self) -> Vec<Arc<dyn DashboardPlugin>> {
+        self.plugins.lock().unwrap().clone()
+    }
+}
diff --git a/crates/dashboard/src/pool_html.rs b/crates/dashboard/src/pool_html.rs
deleted file mode 100644
index 71c7a53..0000000
--- a/crates/dashboard/src/pool_html.rs
+++ /dev/null
@@ -1,392 +0,0 @@
-pub const POOL_HTML: &str = r##"<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>Swactor Runtime – Pool</title>
-<style>
-  * { margin: 0; padding: 0; box-sizing: border-box; }
-  body { font-family: 'Menlo', 'Consolas', 'Monaco', monospace; background: #0f1117; color: #e0e0e0; font-size: 13px; }
-
-  .header {
-    display: flex; align-items: center; justify-content: space-between;
-    padding: 12px 20px; background: #161822; border-bottom: 1px solid #2a2d3e;
-  }
-  .header-left { display: flex; align-items: center; }
-  .header h1 { font-size: 16px; font-weight: 600; color: #fff; }
-  .status-dot {
-    width: 10px; height: 10px; border-radius: 50%; background: #4caf50;
-    display: inline-block; margin-left: 8px; vertical-align: middle;
-  }
-  .status-dot.disconnected { background: #f44336; }
-  .status-dot.done { background: #ff9800; }
-
-  .nav-links { display: flex; gap: 4px; margin-left: 20px; }
-  .nav-link {
-    color: #888; text-decoration: none; font-size: 12px;
-    padding: 4px 10px; border-radius: 3px; transition: color 0.2s;
-  }
-  .nav-link:hover { color: #e0e0e0; }
-  .nav-link.active { color: #fff; background: #2a2d3e; }
-
-  .header-right { display: flex; align-items: center; gap: 12px; }
-
-  .grid {
-    display: grid;
-    grid-template-columns: 1fr 1fr;
-    gap: 12px; padding: 12px;
-  }
-
-  .panel {
-    background: #161822; border: 1px solid #2a2d3e; border-radius: 6px;
-    padding: 14px; overflow: hidden;
-  }
-  .panel h2 { font-size: 12px; color: #888; text-transform: uppercase; letter-spacing: 1px; margin-bottom: 10px; }
-
-  .full-width { grid-column: 1 / -1; }
-
-  .stats-cards {
-    display: grid; grid-template-columns: repeat(5, 1fr); gap: 10px;
-  }
-  .stat-card {
-    background: #1c1f2e; border-radius: 4px; padding: 10px; text-align: center;
-  }
-  .stat-card .value { font-size: 22px; font-weight: 700; color: #fff; }
-  .stat-card .label { font-size: 10px; color: #888; text-transform: uppercase; margin-top: 2px; }
-
-  .members-table { max-height: 400px; overflow-y: auto; }
-  .members-table table { width: 100%; border-collapse: collapse; }
-  .members-table th, .members-table td {
-    padding: 4px 8px; text-align: left; border-bottom: 1px solid #1c1f2e; font-size: 11px;
-    white-space: nowrap;
-  }
-  .members-table th { color: #888; font-weight: 500; position: sticky; top: 0; background: #161822; }
-
-  .content-table { max-height: 400px; overflow-y: auto; }
-  .content-table table { width: 100%; border-collapse: collapse; }
-  .content-table th, .content-table td {
-    padding: 4px 8px; text-align: left; border-bottom: 1px solid #1c1f2e; font-size: 11px;
-    white-space: nowrap;
-  }
-  .content-table th { color: #888; font-weight: 500; position: sticky; top: 0; background: #161822; }
-
-  /* Capacity bars */
-  .cap-bar-wrap { margin-bottom: 6px; }
-  .cap-bar-label {
-    display: flex; justify-content: space-between; font-size: 10px; color: #888; margin-bottom: 2px;
-  }
-  .cap-bar {
-    height: 14px; background: #1c1f2e; border-radius: 3px; overflow: hidden;
-  }
-  .cap-bar-fill {
-    height: 100%; background: #6366f1; border-radius: 3px;
-    transition: width 0.3s ease;
-  }
-  .cap-bar-fill.warn { background: #ff9800; }
-  .cap-bar-fill.crit { background: #f44336; }
-
-  /* Buttons */
-  button {
-    background: #1e2030; color: #e0e0e0; border: 1px solid #2a2d3e;
-    border-radius: 4px; padding: 6px 14px; font-family: inherit;
-    font-size: 13px; cursor: pointer; min-height: 38px;
-    transition: border-color 0.15s;
-  }
-  button:hover { border-color: #6366f1; color: #fff; }
-  button:disabled { opacity: 0.4; cursor: default; }
-  button.primary { background: #6366f1; border-color: #6366f1; color: #fff; font-weight: 600; }
-  button.primary:hover { background: #5558e6; }
-  button.danger:hover { border-color: #f44336; }
-
-  /* No-pool message */
-  .no-pool {
-    display: flex; align-items: center; justify-content: center;
-    height: calc(100vh - 49px); color: #555; font-size: 16px;
-    flex-direction: column; gap: 8px;
-  }
-
-  /* Toast */
-  .toast {
-    position: fixed; bottom: 20px; right: 20px; padding: 10px 16px;
-    border-radius: 4px; font-size: 12px; z-index: 100; opacity: 0;
-    transition: opacity 0.3s; pointer-events: none;
-  }
-  .toast.show { opacity: 1; }
-  .toast.success { background: #4caf50; color: #fff; }
-  .toast.error { background: #f44336; color: #fff; }
-
-  ::-webkit-scrollbar { width: 6px; }
-  ::-webkit-scrollbar-track { background: #0f1117; }
-  ::-webkit-scrollbar-thumb { background: #2a2d3e; border-radius: 3px; }
-</style>
-</head>
-<body>
-<div class="header">
-  <div class="header-left">
-    <h1>
-      Swactor Runtime Dashboard
-      <span id="statusDot" class="status-dot disconnected"></span>
-    </h1>
-    <nav class="nav-links">
-      <a href="/" class="nav-link">Overview</a>
-      <a href="/actors" class="nav-link">Actors</a>
-      <a href="/distribution" class="nav-link">Distribution</a>
-      <a href="/datastore" class="nav-link">Datastore</a>
-      <a href="/pool" class="nav-link active">Pool</a>
-    </nav>
-  </div>
-  <div class="header-right">
-    <button id="joinBtn" class="primary" onclick="joinPool()" style="display:none">Join Pool</button>
-    <button id="leaveBtn" class="danger" onclick="leavePool()" style="display:none">Leave Pool</button>
-  </div>
-</div>
-
-<div id="noPool" class="no-pool" style="display:none">
-  <div>No pool configured</div>
-  <div style="font-size:12px;color:#444;">Start the node with --pool-name to enable pooled storage</div>
-</div>
-
-<div id="poolContent" style="display:none">
-  <div class="grid">
-    <!-- Summary cards -->
-    <div class="panel full-width">
-      <h2>Pool Summary</h2>
-      <div class="stats-cards">
-        <div class="stat-card"><div class="value" id="statPoolName">-</div><div class="label">Pool Name</div></div>
-        <div class="stat-card"><div class="value" id="statMembers">0</div><div class="label">Members</div></div>
-        <div class="stat-card"><div class="value" id="statContent">0</div><div class="label">Content Items</div></div>
-        <div class="stat-card"><div class="value" id="statTotal">0</div><div class="label">Total Capacity</div></div>
-        <div class="stat-card"><div class="value" id="statUsed">0</div><div class="label">Used</div></div>
-      </div>
-    </div>
-
-    <!-- Capacity chart -->
-    <div class="panel">
-      <h2>Capacity by Node</h2>
-      <div id="capacityChart"></div>
-      <div id="capEmpty" style="color:#555;font-size:11px;">No members yet</div>
-    </div>
-
-    <!-- Members table -->
-    <div class="panel">
-      <h2>Members <span id="memberCount" style="color:#555;font-weight:400;"></span></h2>
-      <div class="members-table">
-        <table>
-          <thead><tr><th>Node ID</th><th>State</th><th>Total</th><th>Used</th><th>Free</th></tr></thead>
-          <tbody id="membersBody"></tbody>
-        </table>
-      </div>
-    </div>
-
-    <!-- Content locations -->
-    <div class="panel full-width">
-      <h2>Content Location Map <span id="contentCount" style="color:#555;font-weight:400;"></span></h2>
-      <div class="content-table">
-        <table>
-          <thead><tr><th>Content Hash</th><th>Replicas</th><th>Nodes</th></tr></thead>
-          <tbody id="contentBody"></tbody>
-        </table>
-      </div>
-    </div>
-
-    <!-- ACL panel -->
-    <div class="panel full-width">
-      <h2>Access Control <span id="aclMode" style="color:#555;font-weight:400;"></span></h2>
-      <div id="aclOpen" style="color:#555;font-size:11px;">Open mode &mdash; any node may join the pool</div>
-      <div id="aclTable" class="content-table" style="display:none">
-        <table>
-          <thead><tr><th>Node ID</th><th>Granted By</th><th>Status</th></tr></thead>
-          <tbody id="aclBody"></tbody>
-        </table>
-      </div>
-    </div>
-  </div>
-</div>
-
-<div class="toast" id="toast"></div>
-
-<script>
-(function() {
-  var dot = document.getElementById('statusDot');
-  var poolConfigured = false;
-
-  function $(id) { return document.getElementById(id); }
-
-  function formatBytes(b) {
-    if (b === 0) return '0 B';
-    var units = ['B', 'KB', 'MB', 'GB', 'TB'];
-    var i = Math.floor(Math.log(b) / Math.log(1024));
-    if (i >= units.length) i = units.length - 1;
-    return (b / Math.pow(1024, i)).toFixed(i > 0 ? 1 : 0) + ' ' + units[i];
-  }
-
-  function escapeHtml(s) {
-    if (!s) return '';
-    return s.replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');
-  }
-
-  window.toast = function(msg, type) {
-    var t = $('toast');
-    t.textContent = msg;
-    t.className = 'toast show ' + type;
-    setTimeout(function() { t.className = 'toast'; }, 2500);
-  };
-
-  function updatePool(snap) {
-    if (!snap) {
-      if (!poolConfigured) {
-        $('noPool').style.display = 'flex';
-        $('poolContent').style.display = 'none';
-        $('joinBtn').style.display = 'none';
-        $('leaveBtn').style.display = 'none';
-      }
-      return;
-    }
-
-    poolConfigured = true;
-    $('noPool').style.display = 'none';
-    $('poolContent').style.display = 'block';
-    $('joinBtn').style.display = 'inline-block';
-    $('leaveBtn').style.display = 'inline-block';
-
-    // Summary cards
-    $('statPoolName').textContent = snap.pool_name || '-';
-    $('statPoolName').style.fontSize = '14px';
-    $('statMembers').textContent = snap.member_count;
-    $('statContent').textContent = snap.content_count;
-    $('statTotal').textContent = formatBytes(snap.total_bytes);
-    $('statUsed').textContent = formatBytes(snap.used_bytes);
-
-    // Members table
-    var mbody = $('membersBody');
-    mbody.innerHTML = '';
-    $('memberCount').textContent = '(' + snap.members.length + ')';
-
-    for (var i = 0; i < snap.members.length; i++) {
-      var m = snap.members[i];
-      var free = m.total_bytes - m.used_bytes;
-      var tr = document.createElement('tr');
-      tr.innerHTML =
-        '<td style="color:#6366f1;font-size:11px;" title="' + escapeHtml(m.node_id) + '">' + m.node_id.substring(0, 16) + '\u2026</td>' +
-        '<td style="color:#4caf50;">' + escapeHtml(m.state) + '</td>' +
-        '<td style="color:#888;">' + formatBytes(m.total_bytes) + '</td>' +
-        '<td style="color:#888;">' + formatBytes(m.used_bytes) + '</td>' +
-        '<td style="color:#888;">' + formatBytes(free) + '</td>';
-      mbody.appendChild(tr);
-    }
-
-    // Capacity chart
-    var chart = $('capacityChart');
-    chart.innerHTML = '';
-    var capEmpty = $('capEmpty');
-
-    if (snap.members.length === 0) {
-      capEmpty.style.display = 'block';
-    } else {
-      capEmpty.style.display = 'none';
-      for (var i = 0; i < snap.members.length; i++) {
-        var m = snap.members[i];
-        var pct = m.total_bytes > 0 ? Math.round((m.used_bytes / m.total_bytes) * 100) : 0;
-        var fillClass = 'cap-bar-fill';
-        if (pct > 90) fillClass += ' crit';
-        else if (pct > 70) fillClass += ' warn';
-
-        var wrap = document.createElement('div');
-        wrap.className = 'cap-bar-wrap';
-        wrap.innerHTML =
-          '<div class="cap-bar-label"><span>' + m.node_id.substring(0, 12) + '\u2026</span><span>' + pct + '% (' + formatBytes(m.used_bytes) + ' / ' + formatBytes(m.total_bytes) + ')</span></div>' +
-          '<div class="cap-bar"><div class="' + fillClass + '" style="width:' + pct + '%"></div></div>';
-        chart.appendChild(wrap);
-      }
-    }
-
-    // Content locations
-    var cbody = $('contentBody');
-    cbody.innerHTML = '';
-    $('contentCount').textContent = '(' + snap.content_locations.length + ')';
-
-    for (var i = 0; i < snap.content_locations.length; i++) {
-      var cl = snap.content_locations[i];
-      var nodeList = cl.nodes.map(function(n) { return n.substring(0, 12) + '\u2026'; }).join(', ');
-      var tr = document.createElement('tr');
-      tr.innerHTML =
-        '<td style="color:#6366f1;font-size:11px;" title="' + escapeHtml(cl.content_hash) + '">' + cl.content_hash.substring(0, 16) + '\u2026</td>' +
-        '<td>' + cl.replica_count + '</td>' +
-        '<td style="color:#888;font-size:10px;">' + escapeHtml(nodeList) + '</td>';
-      cbody.appendChild(tr);
-    }
-
-    // ACL panel
-    var aclMode = snap.acl_mode || 'open';
-    var aclEntries = snap.acl || [];
-    $('aclMode').textContent = '(' + aclMode + ')';
-
-    if (aclMode === 'open' || aclEntries.length === 0) {
-      $('aclOpen').style.display = 'block';
-      $('aclTable').style.display = 'none';
-    } else {
-      $('aclOpen').style.display = 'none';
-      $('aclTable').style.display = 'block';
-      var abody = $('aclBody');
-      abody.innerHTML = '';
-      for (var i = 0; i < aclEntries.length; i++) {
-        var a = aclEntries[i];
-        var status = a.revoked ? 'revoked' : 'granted';
-        var statusColor = a.revoked ? '#f44336' : '#4caf50';
-        var tr = document.createElement('tr');
-        tr.innerHTML =
-          '<td style="color:#6366f1;font-size:11px;" title="' + escapeHtml(a.node_id) + '">' + a.node_id.substring(0, 16) + '\u2026</td>' +
-          '<td style="color:#888;font-size:10px;" title="' + escapeHtml(a.granted_by) + '">' + a.granted_by.substring(0, 16) + '\u2026</td>' +
-          '<td style="color:' + statusColor + ';font-size:10px;">' + status + '</td>';
-        abody.appendChild(tr);
-      }
-    }
-  }
-
-  // Join/Leave actions
-  window.joinPool = function() {
-    $('joinBtn').disabled = true;
-    fetch('/api/pool/join', { method: 'POST' })
-      .then(function(r) {
-        if (!r.ok) return r.json().then(function(j) { throw new Error(j.error || r.statusText); });
-        return r.json();
-      })
-      .then(function() { toast('Joined pool', 'success'); })
-      .catch(function(e) { toast('Join failed: ' + e.message, 'error'); })
-      .finally(function() { $('joinBtn').disabled = false; });
-  };
-
-  window.leavePool = function() {
-    $('leaveBtn').disabled = true;
-    fetch('/api/pool/leave', { method: 'POST' })
-      .then(function(r) {
-        if (!r.ok) return r.json().then(function(j) { throw new Error(j.error || r.statusText); });
-        return r.json();
-      })
-      .then(function() { toast('Left pool', 'success'); })
-      .catch(function(e) { toast('Leave failed: ' + e.message, 'error'); })
-      .finally(function() { $('leaveBtn').disabled = false; });
-  };
-
-  // SSE connection
-  var es = new EventSource('/events');
-
-  es.addEventListener('pool', function(e) {
-    try {
-      var snap = JSON.parse(e.data);
-      updatePool(snap);
-    } catch(err) { console.error('pool parse error', err); }
-  });
-
-  es.addEventListener('done', function() {
-    dot.className = 'status-dot done';
-    es.close();
-  });
-
-  es.onerror = function() { dot.className = 'status-dot disconnected'; };
-  es.onopen = function() { dot.className = 'status-dot'; };
-})();
-</script>
-</body>
-</html>
-"##;
diff --git a/crates/dashboard/src/server.rs b/crates/dashboard/src/server.rs
index b1a83c3..79588c5 100644
--- a/crates/dashboard/src/server.rs
+++ b/crates/dashboard/src/server.rs
@@ -9,7 +9,7 @@ use axum::extract::{Path, Query, State};
 use axum::http::{header, StatusCode};
 use axum::response::sse::{Event, KeepAlive, Sse};
 use axum::response::{IntoResponse, Response};
-use axum::routing::{get, post};
+use axum::routing::get;
 use axum::Router;
 use tokio_stream::wrappers::ReceiverStream;
 use tokio_stream::StreamExt;
@@ -21,20 +21,13 @@ use crate::actors_html::ACTORS_HTML;
 use crate::collector::StatsCollector;
 use crate::command::CommandRouter;
 use crate::dashboard_html::DASHBOARD_HTML;
-use crate::datastore_collector::{DatastoreFactory, DatastoreStatsProvider, ListScope};
-use crate::datastore_html::DATASTORE_HTML;
 use crate::history::DashboardHistory;
 use crate::layer::EventStore;
 use crate::topology;
 use crate::topology_html::TOPOLOGY_HTML;
 use crate::warnings::{WarningConfig, WarningDetector};
 
-#[cfg(feature = "distribution")]
-use crate::distribution_collector::DistributionStatsProvider;
-#[cfg(feature = "distribution")]
-use crate::distribution_html::DISTRIBUTION_HTML;
-
-use crate::ci_collector::CiStatsProvider;
+use crate::plugin::PluginRegistry;
 
 use crate::trace::RuntimeTrace;
 
@@ -54,13 +47,7 @@ pub(crate) struct AppState {
     pub shutdown_notify: Arc<tokio::sync::Notify>,
     pub history: Arc<DashboardHistory>,
     pub cmd_router: Arc<CommandRouter>,
-    #[cfg(feature = "distribution")]
-    pub distribution: Arc<Mutex<Option<Arc<dyn DistributionStatsProvider>>>>,
-    pub datastore: Arc<Mutex<Option<Arc<dyn DatastoreStatsProvider>>>>,
-    pub datastore_factory: Arc<Mutex<Option<Arc<dyn DatastoreFactory>>>>,
-    pub ci: Arc<Mutex<Option<Arc<dyn CiStatsProvider>>>>,
-    pub peer_auth: Arc<Mutex<Option<Arc<Mutex<distribution::peer_auth::PeerAllowList>>>>>,
-    pub join_sender: Arc<Mutex<Option<std::sync::mpsc::Sender<crate::JoinPeerInfo>>>>,
+    pub plugins: Arc<PluginRegistry>,
 }
 
 // ── Router builders ─────────────────────────────────────────────────────
@@ -70,34 +57,16 @@ pub(crate) fn build_live_router(state: AppState) -> Router {
         .route("/", get(page_dashboard))
         .route("/actors", get(page_actors))
         .route("/topology", get(page_topology))
-        .route("/datastore", get(page_datastore))
         .route("/events", get(handle_live_sse))
         .route("/api/stats", get(handle_stats_api))
         .route("/api/history", get(handle_history_api))
         .route("/api/topology", get(handle_topology_api))
         .route("/api/investigate", get(handle_investigate_api))
-        .route("/api/datastore", get(handle_datastore_api))
         .route("/api/logs", get(handle_logs_api))
-        .route("/api/datastore/list", get(handle_ds_list))
-        .route("/api/datastore/get", get(handle_ds_get))
-        .route("/api/datastore/data", get(handle_ds_data))
-        .route("/api/datastore/status", get(handle_ds_status))
-        .route("/api/datastore/put", post(handle_ds_put))
-        .route("/api/datastore/delete", post(handle_ds_delete))
-        .route("/api/datastore/start", post(handle_ds_start))
-        .route("/api/datastore/shutdown", post(handle_ds_shutdown))
-        .route("/api/peers", get(handle_peers_list))
-        .route("/api/peers/add", post(handle_peers_add))
-        .route("/api/peers/sync", post(handle_peers_sync))
-        .route("/api/peers/remove", post(handle_peers_remove))
-        .route("/actor/{hex}", get(handle_actor_detail));
-
-    #[cfg(feature = "distribution")]
-    let router = router
-        .route("/distribution", get(page_distribution))
-        .route("/api/distribution", get(handle_distribution_api));
-
-    let router = router.route("/api/ci/{*rest}", get(handle_ci_api));
+        .route("/actor/{hex}", get(handle_actor_detail))
+        // Plugin routes
+        .route("/api/plugin/{name}/{*rest}", get(handle_plugin_get).post(handle_plugin_post))
+        .route("/plugin/{name}", get(handle_plugin_page));
 
     router.with_state(state)
 }
@@ -151,15 +120,6 @@ async fn page_topology() -> Response {
     html_response(TOPOLOGY_HTML, "live")
 }
 
-async fn page_datastore() -> Response {
-    html_response(DATASTORE_HTML, "live")
-}
-
-#[cfg(feature = "distribution")]
-async fn page_distribution() -> Response {
-    html_response(DISTRIBUTION_HTML, "live")
-}
-
 async fn handle_actor_detail(Path(hex_addr): Path<String>) -> Response {
     let html = ACTOR_DETAIL_HTML
         .replace("__DASHBOARD_MODE__", "live")
@@ -201,13 +161,11 @@ async fn handle_live_sse(
 
                     // Run warning detection
                     let warnings = warning_detector.check(&stats);
-                    if !warnings.is_empty() {
-                        if let Ok(wjson) = serde_json::to_string(&warnings) {
-                            if tx.send(format_sse("warnings", &wjson)).await.is_err() {
+                    if !warnings.is_empty()
+                        && let Ok(wjson) = serde_json::to_string(&warnings)
+                            && tx.send(format_sse("warnings", &wjson)).await.is_err() {
                                 return;
                             }
-                        }
-                    }
 
                     let json = serde_json::to_string(&stats).unwrap();
                     if tx.send(format_sse("stats", &json)).await.is_err() {
@@ -216,67 +174,22 @@ async fn handle_live_sse(
 
                     // Send topology every 5th tick (~1/sec)
                     tick_count += 1;
-                    if tick_count % 5 == 0 {
+                    if tick_count.is_multiple_of(5) {
                         let topo = topology::worker_topology(&stats);
-                        if let Ok(tjson) = serde_json::to_string(&topo) {
-                            if tx.send(format_sse("topology", &tjson)).await.is_err() {
+                        if let Ok(tjson) = serde_json::to_string(&topo)
+                            && tx.send(format_sse("topology", &tjson)).await.is_err() {
                                 return;
                             }
-                        }
                     }
                 }
             }
 
-            // Send distribution snapshot if provider is attached
-            #[cfg(feature = "distribution")]
-            {
-                let maybe_dist = state.distribution.lock().unwrap().clone();
-                if let Some(provider) = maybe_dist {
-                    if let Some(snapshot) = provider.snapshot() {
-                        if let Ok(json) = serde_json::to_string(&snapshot) {
-                            if tx.send(format_sse("distribution", &json)).await.is_err() {
-                                return;
-                            }
-                        }
+            // Poll all registered plugins
+            for plugin in state.plugins.snapshot() {
+                if let Some(json) = plugin.snapshot_json()
+                    && tx.send(format_sse(plugin.name(), &json)).await.is_err() {
+                        return;
                     }
-                }
-            }
-
-            // Send datastore snapshot if provider is attached
-            {
-                let maybe_ds = state.datastore.lock().unwrap().clone();
-                match maybe_ds {
-                    Some(provider) => {
-                        let is_running = provider.is_running();
-                        let snap_json = provider.snapshot_json().unwrap_or_else(|| "null".into());
-                        let envelope = format!(
-                            r#"{{"is_running":{},"snapshot":{}}}"#,
-                            is_running, snap_json
-                        );
-                        if tx.send(format_sse("datastore", &envelope)).await.is_err() {
-                            return;
-                        }
-                    }
-                    None => {
-                        let envelope = r#"{"is_running":false,"snapshot":null}"#;
-                        if tx.send(format_sse("datastore", envelope)).await.is_err() {
-                            return;
-                        }
-                    }
-                }
-            }
-
-            // Send CI snapshot if provider is attached
-            {
-                let maybe_ci = state.ci.lock().unwrap().clone();
-                if let Some(provider) = maybe_ci {
-                    let snapshot = provider.snapshot();
-                    if let Ok(json) = serde_json::to_string(&snapshot) {
-                        if tx.send(format_sse("ci", &json)).await.is_err() {
-                            return;
-                        }
-                    }
-                }
             }
 
             // Send new activity events
@@ -361,54 +274,6 @@ async fn handle_investigate_api(
     json_response(json)
 }
 
-#[cfg(feature = "distribution")]
-async fn handle_distribution_api(State(state): State<AppState>) -> Response {
-    let json = match state.distribution.lock().unwrap().as_ref() {
-        Some(provider) => match provider.snapshot() {
-            Some(snapshot) => serde_json::to_string(&snapshot).unwrap_or_else(|_| "{}".into()),
-            None => "{}".to_string(),
-        },
-        None => serde_json::json!({
-            "error": "distribution provider not attached"
-        })
-        .to_string(),
-    };
-    json_response(json)
-}
-
-async fn handle_datastore_api(State(state): State<AppState>) -> Response {
-    let json = match state.datastore.lock().unwrap().as_ref() {
-        Some(provider) => provider.snapshot_json().unwrap_or_else(|| "{}".into()),
-        None => serde_json::json!({
-            "error": "datastore provider not attached"
-        })
-        .to_string(),
-    };
-    json_response(json)
-}
-
-async fn handle_ci_api(
-    State(state): State<AppState>,
-    axum::extract::OriginalUri(uri): axum::extract::OriginalUri,
-) -> Response {
-    use crate::ci_collector;
-
-    let path = uri.path();
-    let route = ci_collector::parse_route(path);
-    let json = match state.ci.lock().unwrap().as_ref() {
-        Some(provider) => {
-            let snapshot = provider.snapshot();
-            ci_collector::handle_route(&route, &snapshot)
-                .unwrap_or_else(|| r#"{"error":"not found"}"#.to_string())
-        }
-        None => serde_json::json!({
-            "error": "CI provider not attached"
-        })
-        .to_string(),
-    };
-    json_response(json)
-}
-
 async fn handle_topology_api(State(state): State<AppState>) -> Response {
     let maybe_rt = state.runtime.lock().unwrap().clone();
     let json = match maybe_rt {
@@ -453,397 +318,77 @@ async fn handle_history_api(State(state): State<AppState>) -> Response {
     json_response(json)
 }
 
-// ── Datastore CRUD API handlers ─────────────────────────────────────────
+// ── Plugin handlers ─────────────────────────────────────────────────────
 
-fn get_ds_provider(
-    datastore: &Arc<Mutex<Option<Arc<dyn DatastoreStatsProvider>>>>,
-) -> Option<Arc<dyn DatastoreStatsProvider>> {
-    datastore.lock().unwrap().clone()
-}
-
-async fn handle_ds_list(
+async fn handle_plugin_get(
     State(state): State<AppState>,
+    Path((name, rest)): Path<(String, String)>,
     Query(params): Query<HashMap<String, String>>,
 ) -> Response {
-    let provider = match get_ds_provider(&state.datastore) {
+    let plugins = state.plugins.snapshot();
+    let plugin = match plugins.iter().find(|p| p.name() == name) {
         Some(p) => p,
-        None => return json_error(StatusCode::SERVICE_UNAVAILABLE, "datastore not running"),
+        None => return json_error(StatusCode::NOT_FOUND, &format!("plugin '{name}' not found")),
     };
-    let scope = match params.get("scope").map(|s| s.as_str()) {
-        Some("local") => ListScope::Local,
-        _ => ListScope::Swarm,
-    };
-    let name_filter = params.get("name").map(|s| s.as_str());
-    match provider.list_objects(name_filter, scope) {
-        Ok(json) => json_response(json),
-        Err(e) => json_error(StatusCode::INTERNAL_SERVER_ERROR, &e),
-    }
-}
-
-async fn handle_ds_get(
-    State(state): State<AppState>,
-    Query(params): Query<HashMap<String, String>>,
-) -> Response {
-    let provider = match get_ds_provider(&state.datastore) {
-        Some(p) => p,
-        None => return json_error(StatusCode::SERVICE_UNAVAILABLE, "datastore not running"),
-    };
-    let hash = match params.get("hash") {
-        Some(h) => h.as_str(),
-        None => return json_error(StatusCode::BAD_REQUEST, "missing ?hash= parameter"),
-    };
-    match provider.get_object(hash) {
-        Ok(json) => json_response(json),
-        Err(e) if e.contains("not found") => json_error(StatusCode::NOT_FOUND, &e),
-        Err(e) => json_error(StatusCode::INTERNAL_SERVER_ERROR, &e),
-    }
-}
-
-async fn handle_ds_data(
-    State(state): State<AppState>,
-    Query(params): Query<HashMap<String, String>>,
-) -> Response {
-    let provider = match get_ds_provider(&state.datastore) {
-        Some(p) => p,
-        None => return json_error(StatusCode::SERVICE_UNAVAILABLE, "datastore not running"),
-    };
-    let hash = match params.get("hash") {
-        Some(h) => h.as_str(),
-        None => return json_error(StatusCode::BAD_REQUEST, "missing ?hash= parameter"),
-    };
-    match provider.get_data(hash) {
-        Ok(data) => {
-            ([(header::CONTENT_TYPE, "application/octet-stream")], data).into_response()
+    match plugin.handle_request("GET", &rest, &params, &[]) {
+        crate::plugin::PluginResponse::Json(json) => json_response(json),
+        crate::plugin::PluginResponse::Binary { content_type, data } => {
+            ([(header::CONTENT_TYPE, content_type)], data).into_response()
+        }
+        crate::plugin::PluginResponse::Error { status, message } => {
+            let code = StatusCode::from_u16(status).unwrap_or(StatusCode::INTERNAL_SERVER_ERROR);
+            json_error(code, &message)
+        }
+        crate::plugin::PluginResponse::NotFound => {
+            json_error(StatusCode::NOT_FOUND, "not found")
         }
-        Err(e) if e.contains("not found") => json_error(StatusCode::NOT_FOUND, &e),
-        Err(e) => json_error(StatusCode::INTERNAL_SERVER_ERROR, &e),
     }
 }
 
-async fn handle_ds_status(State(state): State<AppState>) -> Response {
-    let provider = match get_ds_provider(&state.datastore) {
-        Some(p) => p,
-        None => return json_error(StatusCode::SERVICE_UNAVAILABLE, "datastore not running"),
-    };
-    match provider.node_status() {
-        Ok(json) => json_response(json),
-        Err(e) => json_error(StatusCode::INTERNAL_SERVER_ERROR, &e),
-    }
-}
-
-async fn handle_ds_put(
+async fn handle_plugin_post(
     State(state): State<AppState>,
+    Path((name, rest)): Path<(String, String)>,
     Query(params): Query<HashMap<String, String>>,
     body: Bytes,
 ) -> Response {
-    let provider = match get_ds_provider(&state.datastore) {
+    let plugins = state.plugins.snapshot();
+    let plugin = match plugins.iter().find(|p| p.name() == name) {
         Some(p) => p,
-        None => return json_error(StatusCode::SERVICE_UNAVAILABLE, "datastore not running"),
+        None => return json_error(StatusCode::NOT_FOUND, &format!("plugin '{name}' not found")),
     };
-    let name = params.get("name").cloned();
-    match provider.put_data(body.to_vec(), name) {
-        Ok(json) => json_response(json),
-        Err(e) => json_error(StatusCode::INTERNAL_SERVER_ERROR, &e),
+    match plugin.handle_request("POST", &rest, &params, &body) {
+        crate::plugin::PluginResponse::Json(json) => json_response(json),
+        crate::plugin::PluginResponse::Binary { content_type, data } => {
+            ([(header::CONTENT_TYPE, content_type)], data).into_response()
+        }
+        crate::plugin::PluginResponse::Error { status, message } => {
+            let code = StatusCode::from_u16(status).unwrap_or(StatusCode::INTERNAL_SERVER_ERROR);
+            json_error(code, &message)
+        }
+        crate::plugin::PluginResponse::NotFound => {
+            json_error(StatusCode::NOT_FOUND, "not found")
+        }
     }
 }
 
-async fn handle_ds_delete(
+async fn handle_plugin_page(
     State(state): State<AppState>,
-    Query(params): Query<HashMap<String, String>>,
+    Path(name): Path<String>,
 ) -> Response {
-    let provider = match get_ds_provider(&state.datastore) {
+    let plugins = state.plugins.snapshot();
+    let plugin = match plugins.iter().find(|p| p.name() == name) {
         Some(p) => p,
-        None => return json_error(StatusCode::SERVICE_UNAVAILABLE, "datastore not running"),
-    };
-    let hash = match params.get("hash") {
-        Some(h) => h.as_str(),
-        None => return json_error(StatusCode::BAD_REQUEST, "missing ?hash= parameter"),
-    };
-    match provider.delete_object(hash) {
-        Ok(json) => json_response(json),
-        Err(e) if e.contains("not found") => json_error(StatusCode::NOT_FOUND, &e),
-        Err(e) => json_error(StatusCode::INTERNAL_SERVER_ERROR, &e),
-    }
-}
-
-async fn handle_ds_start(
-    State(state): State<AppState>,
-    Query(params): Query<HashMap<String, String>>,
-) -> Response {
-    // Check if already running
-    {
-        let ds = state.datastore.lock().unwrap();
-        if ds.is_some() {
-            return json_error(StatusCode::CONFLICT, "datastore already running");
-        }
-    }
-
-    let fac = match state.datastore_factory.lock().unwrap().clone() {
-        Some(f) => f,
-        None => return json_error(StatusCode::NOT_IMPLEMENTED, "no datastore factory configured"),
-    };
-
-    let storage_path = params.get("storage_path").cloned();
-
-    match fac.start_datastore(storage_path) {
-        Ok(provider) => {
-            *state.datastore.lock().unwrap() = Some(provider);
-            json_response(r#"{"ok":true}"#.to_string())
-        }
-        Err(e) => json_error(StatusCode::INTERNAL_SERVER_ERROR, &e),
-    }
-}
-
-async fn handle_ds_shutdown(State(state): State<AppState>) -> Response {
-    let provider = match get_ds_provider(&state.datastore) {
-        Some(p) => p,
-        None => return json_error(StatusCode::SERVICE_UNAVAILABLE, "datastore not running"),
-    };
-
-    match provider.shutdown_datastore() {
-        Ok(()) => {
-            *state.datastore.lock().unwrap() = None;
-            json_response(r#"{"ok":true}"#.to_string())
-        }
-        Err(e) => json_error(StatusCode::INTERNAL_SERVER_ERROR, &e),
-    }
-}
-
-// ── Peer Management API ─────────────────────────────────────────────────
-
-async fn handle_peers_list(State(state): State<AppState>) -> Response {
-    let maybe_auth = state.peer_auth.lock().unwrap().clone();
-    match maybe_auth {
-        Some(auth) => {
-            let list = auth.lock().unwrap();
-            let is_open = list.is_open();
-            let peers: Vec<serde_json::Value> = list
-                .list_peers()
-                .iter()
-                .map(|p| {
-                    serde_json::json!({
-                        "node_id": p.node_id,
-                        "label": p.label,
-                    })
-                })
-                .collect();
-            let json = serde_json::json!({
-                "mode": if is_open { "open" } else { "allow-list" },
-                "peers": peers,
-            })
-            .to_string();
-            json_response(json)
-        }
         None => {
-            let json = serde_json::json!({
-                "mode": "open",
-                "peers": [],
-            })
-            .to_string();
-            json_response(json)
-        }
-    }
-}
-
-async fn handle_peers_add(State(state): State<AppState>, body: String) -> Response {
-    let maybe_auth = state.peer_auth.lock().unwrap().clone();
-    let auth = match maybe_auth {
-        Some(a) => a,
-        None => return json_error(StatusCode::BAD_REQUEST, "peer auth not configured"),
-    };
-
-    let parsed: serde_json::Value = match serde_json::from_str(&body) {
-        Ok(v) => v,
-        Err(e) => return json_error(StatusCode::BAD_REQUEST, &format!("invalid JSON: {e}")),
-    };
-
-    let node_id_str = match parsed.get("node_id").and_then(|v| v.as_str()) {
-        Some(s) => s,
-        None => return json_error(StatusCode::BAD_REQUEST, "missing node_id field"),
-    };
-    let label = parsed
-        .get("label")
-        .and_then(|v| v.as_str())
-        .unwrap_or("")
-        .to_string();
-
-    // Accept hex (64 chars) or base58 (~44 chars)
-    let bytes: [u8; 32] = if let Some(b) = distribution::identity::hex_decode(node_id_str) {
-        match b.try_into() {
-            Ok(arr) => arr,
-            Err(_) => {
-                return json_error(
-                    StatusCode::BAD_REQUEST,
-                    "invalid node_id (hex decoded to wrong length)",
-                );
-            }
-        }
-    } else if let Some(arr) = distribution::identity::base58_decode(node_id_str) {
-        arr
-    } else {
-        return json_error(
-            StatusCode::BAD_REQUEST,
-            "invalid node_id (expected 64-char hex or base58)",
-        );
-    };
-
-    let relay_url = parsed
-        .get("relay_url")
-        .and_then(|v| v.as_str())
-        .map(|s| s.to_string());
-
-    let node_id = distribution::types::NodeId(bytes);
-    let mut list = auth.lock().unwrap();
-    list.add_peer(node_id, label);
-    if let Err(e) = list.save() {
-        eprintln!("warning: failed to persist peers.json: {e}");
-    }
-    drop(list);
-
-    // Trigger a SWIM join for the newly added peer
-    if let Some(tx) = state.join_sender.lock().unwrap().as_ref() {
-        let _ = tx.send((bytes, relay_url));
-    }
-
-    json_response(r#"{"ok":true}"#.to_string())
-}
-
-async fn handle_peers_sync(State(state): State<AppState>, body: String) -> Response {
-    let maybe_auth = state.peer_auth.lock().unwrap().clone();
-    let auth = match maybe_auth {
-        Some(a) => a,
-        None => return json_error(StatusCode::BAD_REQUEST, "peer auth not configured"),
-    };
-
-    let parsed: serde_json::Value = match serde_json::from_str(&body) {
-        Ok(v) => v,
-        Err(e) => return json_error(StatusCode::BAD_REQUEST, &format!("invalid JSON: {e}")),
-    };
-
-    let peers = match parsed.get("peers").and_then(|v| v.as_array()) {
-        Some(arr) => arr,
-        None => return json_error(StatusCode::BAD_REQUEST, "missing peers array"),
-    };
-
-    // Parse all peers first, bail on any error
-    let mut parsed_peers: Vec<(distribution::types::NodeId, String)> = Vec::new();
-    for peer in peers {
-        let node_id_str = match peer.get("node_id").and_then(|v| v.as_str()) {
-            Some(s) => s,
-            None => return json_error(StatusCode::BAD_REQUEST, "peer missing node_id"),
-        };
-        let label = peer
-            .get("label")
-            .and_then(|v| v.as_str())
-            .unwrap_or("")
-            .to_string();
-
-        let bytes: [u8; 32] = if let Some(b) = distribution::identity::hex_decode(node_id_str) {
-            match b.try_into() {
-                Ok(arr) => arr,
-                Err(_) => {
-                    return json_error(
-                        StatusCode::BAD_REQUEST,
-                        &format!("invalid node_id hex length for {node_id_str}"),
-                    );
-                }
-            }
-        } else if let Some(arr) = distribution::identity::base58_decode(node_id_str) {
-            arr
-        } else {
-            return json_error(
-                StatusCode::BAD_REQUEST,
-                &format!("invalid node_id: {node_id_str}"),
-            );
-        };
-
-        parsed_peers.push((distribution::types::NodeId(bytes), label));
-    }
-
-    // Add all peers in a single lock acquisition
-    {
-        let mut list = auth.lock().unwrap();
-        for (node_id, label) in &parsed_peers {
-            list.add_peer(*node_id, label.clone());
-        }
-        if let Err(e) = list.save() {
-            eprintln!("warning: failed to persist peers.json: {e}");
-        }
-    }
-
-    // Trigger a SWIM join to the seed peer if specified
-    let join_seed = parsed.get("join_seed").and_then(|v| v.as_str());
-    if let Some(seed_str) = join_seed {
-        let seed_bytes: Option<[u8; 32]> =
-            if let Some(b) = distribution::identity::hex_decode(seed_str) {
-                b.try_into().ok()
-            } else {
-                distribution::identity::base58_decode(seed_str)
-            };
-
-        if let Some(bytes) = seed_bytes {
-            // Find the relay_url for the seed from the peers array
-            let relay_url = peers.iter().find_map(|p| {
-                let nid = p.get("node_id").and_then(|v| v.as_str())?;
-                // Match by checking if this peer's node_id resolves to the same bytes
-                let peer_bytes: [u8; 32] =
-                    if let Some(b) = distribution::identity::hex_decode(nid) {
-                        b.try_into().ok()?
-                    } else {
-                        distribution::identity::base58_decode(nid)?
-                    };
-                if peer_bytes == bytes {
-                    p.get("relay_url").and_then(|v| v.as_str()).map(|s| s.to_string())
-                } else {
-                    None
-                }
-            });
-
-            if let Some(tx) = state.join_sender.lock().unwrap().as_ref() {
-                let _ = tx.send((bytes, relay_url));
-            }
-        }
-    }
-
-    let added = parsed_peers.len();
-    json_response(format!(r#"{{"ok":true,"added":{added}}}"#))
-}
-
-async fn handle_peers_remove(State(state): State<AppState>, body: String) -> Response {
-    let maybe_auth = state.peer_auth.lock().unwrap().clone();
-    let auth = match maybe_auth {
-        Some(a) => a,
-        None => return json_error(StatusCode::BAD_REQUEST, "peer auth not configured"),
-    };
-
-    let parsed: serde_json::Value = match serde_json::from_str(&body) {
-        Ok(v) => v,
-        Err(e) => return json_error(StatusCode::BAD_REQUEST, &format!("invalid JSON: {e}")),
-    };
-
-    let node_id_hex = match parsed.get("node_id").and_then(|v| v.as_str()) {
-        Some(s) => s,
-        None => return json_error(StatusCode::BAD_REQUEST, "missing node_id field"),
-    };
-
-    let bytes = match distribution::identity::hex_decode(node_id_hex) {
-        Some(b) if b.len() == 32 => b,
-        _ => {
-            return json_error(
-                StatusCode::BAD_REQUEST,
-                "invalid node_id hex (must be 64 hex chars)",
-            );
+            return (StatusCode::NOT_FOUND, "plugin not found").into_response();
         }
     };
-
-    let node_id = distribution::types::NodeId(bytes.try_into().unwrap());
-    let mut list = auth.lock().unwrap();
-    list.remove_peer(&node_id);
-    if let Err(e) = list.save() {
-        eprintln!("warning: failed to persist peers.json: {e}");
+    match plugin.html_page() {
+        Some(html) => {
+            let rendered = html.replace("__DASHBOARD_MODE__", "live");
+            ([(header::CONTENT_TYPE, "text/html; charset=utf-8")], rendered).into_response()
+        }
+        None => (StatusCode::NOT_FOUND, "no page for this plugin").into_response(),
     }
-
-    json_response(r#"{"ok":true}"#.to_string())
 }
 
 // ── Replay server ───────────────────────────────────────────────────────
diff --git a/crates/dashboard/src/topology_html.rs b/crates/dashboard/src/topology_html.rs
index 123937b..9f5b9da 100644
--- a/crates/dashboard/src/topology_html.rs
+++ b/crates/dashboard/src/topology_html.rs
@@ -46,8 +46,8 @@ pub const TOPOLOGY_HTML: &str = r##"<!DOCTYPE html>
       <a href="/" class="nav-link">Overview</a>
       <a href="/actors" class="nav-link">Actors</a>
       <a href="/topology" class="nav-link active">Topology</a>
-      <a href="/distribution" class="nav-link">Distribution</a>
-      <a href="/datastore" class="nav-link">Datastore</a>
+      <a href="/plugin/distribution" class="nav-link">Distribution</a>
+      <a href="/plugin/datastore" class="nav-link">Datastore</a>
     </nav>
   </div>
 </div>
diff --git a/crates/dashboard/src/tui/app.rs b/crates/dashboard/src/tui/app.rs
index 844345a..60ed44c 100644
--- a/crates/dashboard/src/tui/app.rs
+++ b/crates/dashboard/src/tui/app.rs
@@ -79,8 +79,6 @@ pub enum ViewMode {
     Overview,
     WorkerDetail,
     ActorDetail,
-    #[cfg(feature = "distribution")]
-    Distribution,
 }
 
 pub struct App {
@@ -104,11 +102,6 @@ pub struct App {
     pub search_locked: bool,
     pub warnings: Vec<Warning>,
 
-    #[cfg(feature = "distribution")]
-    pub distribution: Option<distribution::snapshot::DistributionNodeSnapshot>,
-    #[cfg(feature = "distribution")]
-    pub dist_member_selected: usize,
-
     prev_messages: Vec<u64>,
     prev_time: Instant,
     /// Rolling msg rates (smoothed)
@@ -152,10 +145,6 @@ impl App {
             search_query: String::new(),
             search_locked: false,
             warnings: Vec::new(),
-            #[cfg(feature = "distribution")]
-            distribution: None,
-            #[cfg(feature = "distribution")]
-            dist_member_selected: 0,
             prev_messages: Vec::new(),
             prev_time: Instant::now(),
             msg_rates: Vec::new(),
@@ -175,13 +164,6 @@ impl App {
         self.event_store = Some(store);
     }
 
-    #[cfg(feature = "distribution")]
-    pub fn update_distribution(&mut self, snapshot: distribution::snapshot::DistributionNodeSnapshot) {
-        let max = if snapshot.members.is_empty() { 0 } else { snapshot.members.len() - 1 };
-        self.dist_member_selected = self.dist_member_selected.min(max);
-        self.distribution = Some(snapshot);
-    }
-
     /// Get visible actor rows (filtered by search query if active).
     pub fn visible_actor_rows(&self) -> Vec<&ActorRow> {
         if self.search_query.is_empty() {
@@ -451,12 +433,7 @@ impl App {
                 self.view_mode = match self.view_mode {
                     ViewMode::Overview => ViewMode::WorkerDetail,
                     ViewMode::ActorDetail => ViewMode::Overview,
-                    #[cfg(feature = "distribution")]
-                    ViewMode::WorkerDetail => ViewMode::Distribution,
-                    #[cfg(not(feature = "distribution"))]
                     ViewMode::WorkerDetail => ViewMode::Overview,
-                    #[cfg(feature = "distribution")]
-                    ViewMode::Distribution => ViewMode::Overview,
                 };
                 return;
             }
@@ -467,8 +444,6 @@ impl App {
             ViewMode::Overview => self.handle_key_overview(key),
             ViewMode::WorkerDetail => self.handle_key_worker_detail(key),
             ViewMode::ActorDetail => self.handle_key_actor_detail(key),
-            #[cfg(feature = "distribution")]
-            ViewMode::Distribution => self.handle_key_distribution(key),
         }
     }
 
@@ -560,35 +535,6 @@ impl App {
         }
     }
 
-    #[cfg(feature = "distribution")]
-    fn handle_key_distribution(&mut self, key: KeyEvent) {
-        let max = self
-            .distribution
-            .as_ref()
-            .map(|d| if d.members.is_empty() { 0 } else { d.members.len() - 1 })
-            .unwrap_or(0);
-        match key.code {
-            KeyCode::Esc | KeyCode::Char('h') | KeyCode::Left => {
-                self.view_mode = ViewMode::Overview;
-            }
-            KeyCode::Up | KeyCode::Char('k') => {
-                self.dist_member_selected = self.dist_member_selected.saturating_sub(1);
-            }
-            KeyCode::Down | KeyCode::Char('j') => {
-                self.dist_member_selected = (self.dist_member_selected + 1).min(max);
-            }
-            KeyCode::PageUp => {
-                self.dist_member_selected = self.dist_member_selected.saturating_sub(20);
-            }
-            KeyCode::PageDown => {
-                self.dist_member_selected = (self.dist_member_selected + 20).min(max);
-            }
-            KeyCode::Home => { self.dist_member_selected = 0; }
-            KeyCode::End => { self.dist_member_selected = max; }
-            _ => {}
-        }
-    }
-
     pub fn visible_table_height(&self) -> usize {
         // Will be set by the UI based on actual chunk size
         20
diff --git a/crates/dashboard/src/tui/event.rs b/crates/dashboard/src/tui/event.rs
index 37129c4..62569f5 100644
--- a/crates/dashboard/src/tui/event.rs
+++ b/crates/dashboard/src/tui/event.rs
@@ -14,10 +14,6 @@ pub enum AppEvent {
         source: RuntimeEndpoint,
         stats: Box<RuntimeStats>,
     },
-    #[cfg(feature = "distribution")]
-    DistributionUpdate {
-        snapshot: Box<distribution::snapshot::DistributionNodeSnapshot>,
-    },
 }
 
 pub struct EventLoop {
diff --git a/crates/dashboard/src/tui/mod.rs b/crates/dashboard/src/tui/mod.rs
index b3297d3..f6671f8 100644
--- a/crates/dashboard/src/tui/mod.rs
+++ b/crates/dashboard/src/tui/mod.rs
@@ -16,8 +16,6 @@ use ratatui::widgets::TableState;
 use swactor::runtime::Runtime;
 
 use crate::collector::StatsCollector;
-#[cfg(feature = "distribution")]
-use crate::distribution_collector::DistributionStatsProvider;
 use crate::layer::EventStore;
 use self::app::App;
 use self::event::{AppEvent, EventLoop};
@@ -45,8 +43,6 @@ impl Default for TuiConfig {
 pub fn start_tui(
     runtime: Arc<Runtime>,
     collector: Arc<StatsCollector>,
-    #[cfg(feature = "distribution")]
-    distribution: Option<Arc<dyn DistributionStatsProvider>>,
     config: TuiConfig,
     event_store: Option<Arc<EventStore>>,
 ) -> io::Result<()> {
@@ -71,8 +67,6 @@ pub fn start_tui(
         &mut terminal,
         runtime,
         collector,
-        #[cfg(feature = "distribution")]
-        distribution,
         config,
         event_store,
     );
@@ -92,8 +86,6 @@ fn run_loop(
     terminal: &mut Terminal<CrosstermBackend<io::Stdout>>,
     runtime: Arc<Runtime>,
     collector: Arc<StatsCollector>,
-    #[cfg(feature = "distribution")]
-    distribution: Option<Arc<dyn DistributionStatsProvider>>,
     config: TuiConfig,
     event_store: Option<Arc<EventStore>>,
 ) -> io::Result<()> {
@@ -119,12 +111,6 @@ fn run_loop(
                 collector.enrich(&mut stats);
                 crate::collector::enrich_names(&mut stats, &runtime);
                 app.update(stats);
-                #[cfg(feature = "distribution")]
-                if let Some(ref provider) = distribution {
-                    if let Some(snapshot) = provider.snapshot() {
-                        app.update_distribution(snapshot);
-                    }
-                }
             }
             Ok(AppEvent::Key(key)) => {
                 app.handle_key(key);
@@ -132,10 +118,6 @@ fn run_loop(
             Ok(AppEvent::StatsUpdate { stats, .. }) => {
                 app.update(*stats);
             }
-            #[cfg(feature = "distribution")]
-            Ok(AppEvent::DistributionUpdate { snapshot }) => {
-                app.update_distribution(*snapshot);
-            }
             Err(_) => {
                 // Channel closed, exit
                 break;
@@ -209,10 +191,6 @@ fn run_loop_remote(
             Ok(AppEvent::Key(key)) => {
                 app.handle_key(key);
             }
-            #[cfg(feature = "distribution")]
-            Ok(AppEvent::DistributionUpdate { snapshot }) => {
-                app.update_distribution(*snapshot);
-            }
             Err(_) => {
                 break;
             }
diff --git a/crates/dashboard/src/tui/sse_client.rs b/crates/dashboard/src/tui/sse_client.rs
index 4a13a8d..003a80d 100644
--- a/crates/dashboard/src/tui/sse_client.rs
+++ b/crates/dashboard/src/tui/sse_client.rs
@@ -151,27 +151,6 @@ fn parse_sse_events<R: BufRead>(
                 debug_log("received done event");
                 return Ok(());
             }
-            #[cfg(feature = "distribution")]
-            if current_event == "distribution" && !data_buf.is_empty() {
-                match serde_json::from_str::<distribution::snapshot::DistributionNodeSnapshot>(&data_buf) {
-                    Ok(snapshot) => {
-                        let event = AppEvent::DistributionUpdate {
-                            snapshot: Box::new(snapshot),
-                        };
-                        if tx.send(event).is_err() {
-                            debug_log("channel closed, exiting");
-                            return Ok(());
-                        }
-                    }
-                    Err(e) => {
-                        debug_log(&format!(
-                            "distribution JSON parse error: {} data={}",
-                            e,
-                            &data_buf[..data_buf.len().min(200)]
-                        ));
-                    }
-                }
-            }
             current_event.clear();
             data_buf.clear();
         } else if let Some(event_type) = trimmed.strip_prefix("event: ") {
diff --git a/crates/dashboard/src/tui/ui.rs b/crates/dashboard/src/tui/ui.rs
index adfbc2a..8a5b151 100644
--- a/crates/dashboard/src/tui/ui.rs
+++ b/crates/dashboard/src/tui/ui.rs
@@ -12,8 +12,6 @@ pub fn draw(f: &mut Frame, app: &App, table_state: &mut TableState) {
         ViewMode::Overview => draw_overview(f, app, table_state),
         ViewMode::WorkerDetail => draw_worker_detail(f, app, table_state),
         ViewMode::ActorDetail => draw_actor_detail(f, app),
-        #[cfg(feature = "distribution")]
-        ViewMode::Distribution => draw_distribution(f, app, table_state),
     }
 }
 
@@ -776,248 +774,6 @@ fn draw_actor_logs(f: &mut Frame, app: &App, area: Rect) {
     f.render_widget(paragraph, area);
 }
 
-// ─── Distribution View ──────────────────────────────────────────────────────
-
-#[cfg(feature = "distribution")]
-fn draw_distribution(f: &mut Frame, app: &App, table_state: &mut TableState) {
-    let chunks = Layout::vertical([
-        Constraint::Length(3),  // Summary bar
-        Constraint::Fill(1),   // Members table
-        Constraint::Length(10), // Bottom panels: cache + routing
-        Constraint::Length(1),  // Help bar
-    ])
-    .split(f.area());
-
-    draw_dist_summary(f, app, chunks[0]);
-    draw_dist_members(f, app, table_state, chunks[1]);
-
-    let bottom = Layout::horizontal([
-        Constraint::Percentage(40),
-        Constraint::Percentage(60),
-    ])
-    .split(chunks[2]);
-
-    draw_dist_cache(f, app, bottom[0]);
-    draw_dist_routing(f, app, bottom[1]);
-    draw_dist_help(f, chunks[3]);
-}
-
-#[cfg(feature = "distribution")]
-fn draw_dist_summary(f: &mut Frame, app: &App, area: Rect) {
-    let (node_id, listen_addr, alive, suspect, dead, cache, dir, rt_size, rt_buckets, repair) =
-        match &app.distribution {
-            Some(d) => (
-                &d.node_id[..d.node_id.len().min(16)],
-                d.listen_addr.as_deref().unwrap_or("—"),
-                d.alive_count,
-                d.suspect_count,
-                d.dead_count,
-                d.cache_size,
-                d.directory_entry_count,
-                d.routing_table_size,
-                d.routing_buckets.len(),
-                d.repair_queue_size,
-            ),
-            None => ("—", "—", 0, 0, 0, 0, 0, 0, 0, 0),
-        };
-
-    let lines = vec![
-        Line::from(vec![
-            Span::styled("  Node: ", Style::default().fg(Color::DarkGray)),
-            Span::styled(
-                node_id.to_string(),
-                Style::default().fg(Color::White).add_modifier(Modifier::BOLD),
-            ),
-            Span::styled("  Addr: ", Style::default().fg(Color::DarkGray)),
-            Span::styled(listen_addr.to_string(), Style::default().fg(Color::Cyan)),
-        ]),
-        Line::from(vec![
-            Span::styled("  Members: ", Style::default().fg(Color::DarkGray)),
-            Span::styled(format!("{alive}"), Style::default().fg(Color::Green).add_modifier(Modifier::BOLD)),
-            Span::styled(" alive, ", Style::default().fg(Color::DarkGray)),
-            Span::styled(
-                format!("{suspect}"),
-                if suspect > 0 { Style::default().fg(Color::Yellow).add_modifier(Modifier::BOLD) } else { Style::default().fg(Color::DarkGray) },
-            ),
-            Span::styled(" suspect, ", Style::default().fg(Color::DarkGray)),
-            Span::styled(
-                format!("{dead}"),
-                if dead > 0 { Style::default().fg(Color::Red).add_modifier(Modifier::BOLD) } else { Style::default().fg(Color::DarkGray) },
-            ),
-            Span::styled(" dead", Style::default().fg(Color::DarkGray)),
-            Span::styled(format!("   Cache: {cache}"), Style::default().fg(Color::DarkGray)),
-            Span::styled(format!("  Directory: {dir}"), Style::default().fg(Color::DarkGray)),
-        ]),
-        Line::from(vec![
-            Span::styled(format!("  Routing: {rt_size} nodes, {rt_buckets} buckets"), Style::default().fg(Color::DarkGray)),
-            Span::styled(format!("   Repair queue: {repair}"), Style::default().fg(Color::DarkGray)),
-        ]),
-    ];
-
-    let block = Block::default().borders(Borders::ALL).title(" Distribution ");
-    let paragraph = Paragraph::new(lines).block(block);
-    f.render_widget(paragraph, area);
-}
-
-#[cfg(feature = "distribution")]
-fn draw_dist_members(f: &mut Frame, app: &App, table_state: &mut TableState, area: Rect) {
-    let header_cells = ["STATE", "NODE ID", "ADDRESS", "INCARNATION"].iter().map(|&h| {
-        Cell::from(h).style(
-            Style::default()
-                .fg(Color::Yellow)
-                .add_modifier(Modifier::BOLD),
-        )
-    });
-    let header = Row::new(header_cells).height(1);
-
-    let rows: Vec<Row> = match &app.distribution {
-        Some(d) => d
-            .members
-            .iter()
-            .map(|m| {
-                let state_style = match m.state.as_str() {
-                    "alive" => Style::default().fg(Color::Green),
-                    "suspect" => Style::default().fg(Color::Yellow),
-                    "dead" => Style::default().fg(Color::Red),
-                    _ => Style::default(),
-                };
-                let id_short = if m.node_id.len() > 16 {
-                    format!("{}...", &m.node_id[..14])
-                } else {
-                    m.node_id.clone()
-                };
-                Row::new(vec![
-                    Cell::from(m.state.clone()).style(state_style),
-                    Cell::from(id_short),
-                    Cell::from(m.addr.clone().unwrap_or_default()),
-                    Cell::from(format!("{}", m.incarnation)),
-                ])
-            })
-            .collect(),
-        None => vec![],
-    };
-
-    table_state.select(Some(app.dist_member_selected));
-
-    let table = Table::new(
-        rows,
-        [
-            Constraint::Length(10),
-            Constraint::Min(18),
-            Constraint::Length(22),
-            Constraint::Length(12),
-        ],
-    )
-    .header(header)
-    .block(
-        Block::default()
-            .borders(Borders::ALL)
-            .title(" Members "),
-    )
-    .row_highlight_style(
-        Style::default()
-            .bg(Color::DarkGray)
-            .add_modifier(Modifier::BOLD),
-    )
-    .highlight_symbol("> ");
-
-    f.render_stateful_widget(table, area, table_state);
-}
-
-#[cfg(feature = "distribution")]
-fn draw_dist_cache(f: &mut Frame, app: &App, area: Rect) {
-    let rows: Vec<Row> = match &app.distribution {
-        Some(d) => d
-            .cache_entries
-            .iter()
-            .take(area.height.saturating_sub(2) as usize)
-            .map(|e| {
-                let actor_short = if e.actor_addr.len() > 16 {
-                    format!("{}...", &e.actor_addr[..14])
-                } else {
-                    e.actor_addr.clone()
-                };
-                let node_short = if e.node_id.len() > 12 {
-                    format!("{}...", &e.node_id[..10])
-                } else {
-                    e.node_id.clone()
-                };
-                Row::new(vec![
-                    Cell::from(actor_short),
-                    Cell::from(node_short),
-                ])
-            })
-            .collect(),
-        None => vec![],
-    };
-
-    let header = Row::new(vec![
-        Cell::from("ACTOR").style(Style::default().fg(Color::Yellow).add_modifier(Modifier::BOLD)),
-        Cell::from("NODE").style(Style::default().fg(Color::Yellow).add_modifier(Modifier::BOLD)),
-    ])
-    .height(1);
-
-    let table = Table::new(
-        rows,
-        [Constraint::Percentage(55), Constraint::Percentage(45)],
-    )
-    .header(header)
-    .block(Block::default().borders(Borders::ALL).title(" Cache "));
-
-    f.render_widget(table, area);
-}
-
-#[cfg(feature = "distribution")]
-fn draw_dist_routing(f: &mut Frame, app: &App, area: Rect) {
-    let buckets: Vec<(usize, usize)> = match &app.distribution {
-        Some(d) => d.routing_buckets.clone(),
-        None => vec![],
-    };
-
-    let max_count = buckets.iter().map(|(_, c)| *c).max().unwrap_or(1).max(1);
-    let bar_max_width = area.width.saturating_sub(16) as usize; // space for "[NNN] " + " N"
-
-    let lines: Vec<Line> = buckets
-        .iter()
-        .take(area.height.saturating_sub(2) as usize)
-        .map(|(idx, count)| {
-            let bar_len = (*count as f64 / max_count as f64 * bar_max_width as f64).round() as usize;
-            let bar_len = bar_len.max(1);
-            Line::from(vec![
-                Span::styled(
-                    format!(" [{:>3}] ", idx),
-                    Style::default().fg(Color::DarkGray),
-                ),
-                Span::styled(
-                    "\u{2588}".repeat(bar_len),
-                    Style::default().fg(Color::Cyan),
-                ),
-                Span::styled(
-                    format!(" {}", count),
-                    Style::default().fg(Color::White),
-                ),
-            ])
-        })
-        .collect();
-
-    let block = Block::default()
-        .borders(Borders::ALL)
-        .title(" Routing Buckets ");
-    let paragraph = Paragraph::new(lines).block(block);
-    f.render_widget(paragraph, area);
-}
-
-#[cfg(feature = "distribution")]
-fn draw_dist_help(f: &mut Frame, area: Rect) {
-    let help = Line::from(vec![
-        Span::styled(
-            " Tab: views  \u{2191}\u{2193}: scroll  Esc: overview  q: quit",
-            Style::default().fg(Color::DarkGray),
-        ),
-    ]);
-    f.render_widget(Paragraph::new(help), area);
-}
-
 // ─── Helpers ─────────────────────────────────────────────────────────────────
 
 fn short_type_name(full: Option<&str>) -> String {
diff --git a/crates/datastore/Cargo.toml b/crates/datastore/Cargo.toml
index d4c2d38..cfa67e5 100644
--- a/crates/datastore/Cargo.toml
+++ b/crates/datastore/Cargo.toml
@@ -8,17 +8,19 @@ unexpected_cfgs = { level = "warn", check-cfg = ['cfg(kani)'] }
 
 [dependencies]
 swactor = { path = "../..", features = ["serde", "transport"] }
-distribution = { path = "../distribution" }
-shared-types = { path = "../shared-types" }
+ed25519-dalek = { version = "2", features = ["rand_core"] }
+rand_core = { version = "0.6", features = ["getrandom"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 blake3 = "1"
+crossbeam-queue = "0.3.12"
+tokio = { version = "1", features = ["rt", "sync", "io-util"] }
+iroh = "0.96"
+getrandom = "0.2"
 tiny_http = { version = "0.12", optional = true }
 clap = { version = "4", features = ["derive"], optional = true }
 ureq = { version = "2", features = ["json"], optional = true }
-getrandom = { version = "0.2", optional = true }
 ctrlc = { version = "3", optional = true }
-runtime-dashboard = { path = "../runtime-dashboard", optional = true }
 toml = { version = "0.8", optional = true }
 
 [dev-dependencies]
@@ -26,22 +28,13 @@ serde_json = "1"
 proptest = "1"
 proptest-state-machine = "0.3"
 tempfile = "3"
-distribution = { path = "../distribution" }
 swactor = { path = "../.." }
-swactor-std = { path = "../std" }
 ureq = { version = "2", features = ["json"] }
-tiny_http = "0.12"
-runtime-dashboard = { path = "../runtime-dashboard" }
 stateright = "0.31"
 
 [features]
-node = ["dep:tiny_http", "dep:clap", "dep:ctrlc", "dep:runtime-dashboard", "dep:toml"]
-cli = ["dep:clap", "dep:ureq", "dep:getrandom"]
-
-[[bin]]
-name = "swactor-store-node"
-path = "src/bin/store_node.rs"
-required-features = ["node"]
+node = ["dep:tiny_http", "dep:clap", "dep:ctrlc", "dep:toml"]
+cli = ["dep:clap", "dep:ureq"]
 
 [[bin]]
 name = "swactor-store"
diff --git a/crates/datastore/src/actors/datastore_node.rs b/crates/datastore/src/actors/datastore_node.rs
index a358884..01067f2 100644
--- a/crates/datastore/src/actors/datastore_node.rs
+++ b/crates/datastore/src/actors/datastore_node.rs
@@ -11,7 +11,7 @@ use std::sync::Arc;
 use swactor::actor::{ActorAddress, ActorInterface, Ctx};
 use swactor::runtime::Runtime;
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 use crate::actors::stream_downloader::StreamDownloader;
 use crate::actors::stream_server::StreamServer;
@@ -310,7 +310,7 @@ impl DatastoreNode {
     fn handle_stream_offer(
         &self,
         ctx: &Ctx,
-        stream_id: swactor_streams::types::StreamId,
+        stream_id: crate::streams::types::StreamId,
         content_hash: ContentHash,
         _from_node: [u8; 32],
         stream_manager: ActorAddress,
diff --git a/crates/datastore/src/actors/gateway.rs b/crates/datastore/src/actors/gateway.rs
index 2b19929..647617a 100644
--- a/crates/datastore/src/actors/gateway.rs
+++ b/crates/datastore/src/actors/gateway.rs
@@ -17,7 +17,7 @@ use swactor::actor::{ActorAddress, ActorInterface, Ctx};
 
 use crate::auth::{AccessRequestInfo, AuthzEngine, AuthzResult, DatastoreAction, DeniedReason};
 use crate::messages::{DatastoreNodeMsg, DatastoreResponse, GatewayMsg};
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 /// The auth gateway actor wrapping an `AuthzEngine`.
 pub struct GatewayActor {
diff --git a/crates/datastore/src/actors/metadata.rs b/crates/datastore/src/actors/metadata.rs
index f15e29e..df50824 100644
--- a/crates/datastore/src/actors/metadata.rs
+++ b/crates/datastore/src/actors/metadata.rs
@@ -11,7 +11,7 @@ use std::collections::{HashMap, HashSet};
 
 use swactor::actor::{ActorAddress, ActorInterface, Ctx};
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 use crate::messages::{BlobStoreMsg, DatastoreResponse, MetadataMsg};
 use crate::types::{ContentHash, DatastoreConfig, ObjectEntry, ObjectManifest};
@@ -120,7 +120,7 @@ impl MetadataActor {
     /// `GcUnreferenced` to BlobStoreActor to delete orphaned chunks.
     fn gc_tick(&mut self, ctx: &Ctx) {
         self.tick_count += 1;
-        if self.tick_count % self.gc_interval != 0 {
+        if !self.tick_count.is_multiple_of(self.gc_interval) {
             return;
         }
 
diff --git a/crates/datastore/src/actors/stream_downloader.rs b/crates/datastore/src/actors/stream_downloader.rs
index 2fc2459..772e6e2 100644
--- a/crates/datastore/src/actors/stream_downloader.rs
+++ b/crates/datastore/src/actors/stream_downloader.rs
@@ -10,8 +10,8 @@ use std::sync::Arc;
 use swactor::actor::{ActorAddress, ActorInterface, Ctx};
 use swactor::runtime::Runtime;
 
-use swactor_streams::messages::{StreamManagerMsg, StreamNotification};
-use swactor_streams::types::{StreamConfig, StreamMode};
+use crate::streams::messages::{StreamManagerMsg, StreamNotification};
+use crate::streams::types::{StreamConfig, StreamMode};
 
 use crate::blob_transfer::{encode_metadata, recv_blob, BlobTransferMetadata};
 use crate::messages::{BlobStoreMsg, DatastoreNodeMsg};
diff --git a/crates/datastore/src/actors/stream_listener.rs b/crates/datastore/src/actors/stream_listener.rs
index 326ade6..f04b808 100644
--- a/crates/datastore/src/actors/stream_listener.rs
+++ b/crates/datastore/src/actors/stream_listener.rs
@@ -3,8 +3,8 @@
 
 use swactor::actor::{ActorAddress, ActorInterface, Ctx};
 
-use swactor_streams::messages::{StreamManagerMsg, StreamNotification};
-use swactor_streams::types::StreamMode;
+use crate::streams::messages::{StreamManagerMsg, StreamNotification};
+use crate::streams::types::StreamMode;
 
 use crate::blob_transfer::parse_metadata;
 use crate::messages::DatastoreNodeMsg;
diff --git a/crates/datastore/src/actors/stream_server.rs b/crates/datastore/src/actors/stream_server.rs
index 5575413..00266f9 100644
--- a/crates/datastore/src/actors/stream_server.rs
+++ b/crates/datastore/src/actors/stream_server.rs
@@ -11,8 +11,8 @@ use std::time::Duration;
 use swactor::actor::{ActorAddress, ActorInterface, Ctx};
 use swactor::runtime::Runtime;
 
-use swactor_streams::messages::{StreamManagerMsg, StreamNotification};
-use swactor_streams::types::StreamId;
+use crate::streams::messages::{StreamManagerMsg, StreamNotification};
+use crate::streams::types::StreamId;
 
 use crate::blob_transfer::{poll_inbox, send_blob, BlobTransferError};
 use crate::messages::{BlobStoreMsg, DatastoreResponse};
diff --git a/crates/datastore/src/actors/transfer.rs b/crates/datastore/src/actors/transfer.rs
index 774f1b0..3e0f2a2 100644
--- a/crates/datastore/src/actors/transfer.rs
+++ b/crates/datastore/src/actors/transfer.rs
@@ -12,7 +12,7 @@ use std::collections::HashSet;
 
 use swactor::actor::{ActorAddress, ActorInterface, Ctx};
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 use crate::messages::{DatastoreResponse, TransferMsg};
 use crate::types::{ContentHash, ObjectManifest, TransferStatus};
diff --git a/crates/datastore/src/api.rs b/crates/datastore/src/api.rs
index ceb05e0..27b44e5 100644
--- a/crates/datastore/src/api.rs
+++ b/crates/datastore/src/api.rs
@@ -12,7 +12,7 @@ use std::time::{Duration, Instant};
 use swactor::actor::ActorAddress;
 use swactor::runtime::{Inbox, Runtime};
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 use crate::auth::SignedRequest;
 use crate::chunking::reassemble_blob;
@@ -753,7 +753,7 @@ fn try_remote_get(
         let _ = state.runtime.send_to(
             peer.metadata,
             MetadataMsg::HandleFindObject {
-                from: distribution::types::NodeId([0; 32]), // placeholder
+                from: swactor::transport::NodeId([0; 32]), // placeholder
                 content_hash,
                 reply_to: *find_inbox.addr(),
             },
diff --git a/crates/datastore/src/auth.rs b/crates/datastore/src/auth.rs
index 33cf6ed..8c31fe1 100644
--- a/crates/datastore/src/auth.rs
+++ b/crates/datastore/src/auth.rs
@@ -12,9 +12,10 @@ use std::path::Path;
 
 use serde::{Deserialize, Serialize};
 
-use distribution::crypto;
-use distribution::types::{NodeId, Signature};
-use shared_types::ContentHash;
+use crate::crypto;
+use swactor::transport::NodeId;
+use crate::crypto::Signature;
+use crate::content_hash::ContentHash;
 
 // ─── Access Request / Authorized Key Info ──────────────────────────────────
 
@@ -132,7 +133,7 @@ impl AccessControlList {
             std::fs::create_dir_all(parent)?;
         }
         let json = serde_json::to_string_pretty(self)
-            .map_err(|e| io::Error::new(io::ErrorKind::Other, e))?;
+            .map_err(|e| io::Error::other(e))?;
         std::fs::write(path, json)
     }
 }
@@ -228,7 +229,7 @@ impl AuthzEngine {
 
         // 2. Timestamp freshness
         let ts = request.payload.timestamp;
-        let diff = if now >= ts { now - ts } else { ts - now };
+        let diff = now.abs_diff(ts);
         if diff > self.timestamp_window {
             return AuthzResult::Denied(DeniedReason::RequestExpired);
         }
@@ -257,7 +258,7 @@ impl AuthzEngine {
 
         // 2. Timestamp freshness
         let ts = request.payload.timestamp;
-        let diff = if now >= ts { now - ts } else { ts - now };
+        let diff = now.abs_diff(ts);
         if diff > self.timestamp_window {
             return AuthzResult::Denied(DeniedReason::RequestExpired);
         }
@@ -320,7 +321,7 @@ impl AuthzEngine {
     /// Evict nonces whose timestamps fall outside the current window.
     pub fn gc_nonces(&mut self, now: u64) {
         self.seen_nonces.retain(|_nonce, ts| {
-            let diff = if now >= *ts { now - *ts } else { *ts - now };
+            let diff = now.abs_diff(*ts);
             diff <= self.timestamp_window
         });
     }
diff --git a/crates/datastore/src/bin/store_cli.rs b/crates/datastore/src/bin/store_cli.rs
index 37ded32..a1a2568 100644
--- a/crates/datastore/src/bin/store_cli.rs
+++ b/crates/datastore/src/bin/store_cli.rs
@@ -10,8 +10,8 @@ use std::time::{SystemTime, UNIX_EPOCH};
 
 use clap::{Parser, Subcommand};
 
-use distribution::crypto::Keypair;
-use shared_types::ContentHash;
+use swactor_datastore::crypto::Keypair;
+use swactor_datastore::content_hash::ContentHash;
 use swactor_datastore::auth::{sign_request, DatastoreAction, SignedRequestPayload};
 
 #[derive(Parser)]
diff --git a/crates/datastore/src/blob_transfer.rs b/crates/datastore/src/blob_transfer.rs
index 4cf8e59..7fdb1fd 100644
--- a/crates/datastore/src/blob_transfer.rs
+++ b/crates/datastore/src/blob_transfer.rs
@@ -18,7 +18,7 @@ use std::time::Duration;
 use serde::{Deserialize, Serialize};
 use swactor::runtime::Inbox;
 use swactor::actor::Message;
-use swactor_streams::handle::{RecvHalf, SendHalf};
+use crate::streams::handle::{RecvHalf, SendHalf};
 
 use crate::types::{ContentHash, ObjectManifest};
 
@@ -264,8 +264,8 @@ pub async fn poll_inbox<M: Message>(inbox: &Inbox<M>, timeout: Duration) -> Opti
 mod tests {
     use super::*;
     use crate::chunking::chunk_blob;
-    use swactor_streams::handle::create_stream_handle;
-    use swactor_streams::types::{StreamConfig, StreamId};
+    use crate::streams::handle::create_stream_handle;
+    use crate::streams::types::{StreamConfig, StreamId};
 
     /// Helper: create a pair of (SendHalf, RecvHalf) connected via tokio tasks
     /// that relay data through a DuplexStream.
@@ -299,39 +299,39 @@ mod tests {
     }
 
     fn spawn_send_task(
-        mut cmd_rx: tokio::sync::mpsc::Receiver<swactor_streams::channel::SendCommand>,
-        evt_tx: tokio::sync::mpsc::Sender<swactor_streams::channel::SendEvent>,
-        pool: swactor_streams::BufferPool,
+        mut cmd_rx: tokio::sync::mpsc::Receiver<crate::streams::channel::SendCommand>,
+        evt_tx: tokio::sync::mpsc::Sender<crate::streams::channel::SendEvent>,
+        pool: crate::streams::BufferPool,
         mut writer: tokio::io::WriteHalf<tokio::io::DuplexStream>,
     ) {
         use tokio::io::AsyncWriteExt;
         tokio::spawn(async move {
             while let Some(cmd) = cmd_rx.recv().await {
                 match cmd {
-                    swactor_streams::channel::SendCommand::Data(buf) => {
+                    crate::streams::channel::SendCommand::Data(buf) => {
                         let data = buf.written();
                         // Write length-prefixed frame
                         let len = (data.len() as u32).to_be_bytes();
                         if writer.write_all(&len).await.is_err() {
                             pool.checkin(buf);
-                            let _ = evt_tx.send(swactor_streams::channel::SendEvent::Error(
-                                swactor_streams::StreamError::Disconnected,
+                            let _ = evt_tx.send(crate::streams::channel::SendEvent::Error(
+                                crate::streams::StreamError::Disconnected,
                             )).await;
                             return;
                         }
                         if writer.write_all(data).await.is_err() {
                             pool.checkin(buf);
-                            let _ = evt_tx.send(swactor_streams::channel::SendEvent::Error(
-                                swactor_streams::StreamError::Disconnected,
+                            let _ = evt_tx.send(crate::streams::channel::SendEvent::Error(
+                                crate::streams::StreamError::Disconnected,
                             )).await;
                             return;
                         }
                         pool.checkin(buf);
                     }
-                    swactor_streams::channel::SendCommand::Flush => {
+                    crate::streams::channel::SendCommand::Flush => {
                         let _ = writer.flush().await;
                     }
-                    swactor_streams::channel::SendCommand::Close => {
+                    crate::streams::channel::SendCommand::Close => {
                         let _ = writer.shutdown().await;
                         break;
                     }
@@ -342,8 +342,8 @@ mod tests {
 
     fn spawn_recv_task(
         mut reader: tokio::io::ReadHalf<tokio::io::DuplexStream>,
-        evt_tx: tokio::sync::mpsc::Sender<swactor_streams::channel::RecvEvent>,
-        pool: swactor_streams::BufferPool,
+        evt_tx: tokio::sync::mpsc::Sender<crate::streams::channel::RecvEvent>,
+        pool: crate::streams::BufferPool,
     ) {
         use tokio::io::AsyncReadExt;
         tokio::spawn(async move {
@@ -353,7 +353,7 @@ mod tests {
                 match reader.read_exact(&mut len_buf).await {
                     Ok(_) => {}
                     Err(_) => {
-                        let _ = evt_tx.send(swactor_streams::channel::RecvEvent::Closed).await;
+                        let _ = evt_tx.send(crate::streams::channel::RecvEvent::Closed).await;
                         return;
                     }
                 }
@@ -362,7 +362,7 @@ mod tests {
                 match reader.read_exact(&mut data).await {
                     Ok(_) => {}
                     Err(_) => {
-                        let _ = evt_tx.send(swactor_streams::channel::RecvEvent::Closed).await;
+                        let _ = evt_tx.send(crate::streams::channel::RecvEvent::Closed).await;
                         return;
                     }
                 }
@@ -373,15 +373,15 @@ mod tests {
                     let mut buf = match pool.checkout() {
                         Some(b) => b,
                         None => {
-                            let _ = evt_tx.send(swactor_streams::channel::RecvEvent::Error(
-                                swactor_streams::StreamError::BufferExhausted,
+                            let _ = evt_tx.send(crate::streams::channel::RecvEvent::Error(
+                                crate::streams::StreamError::BufferExhausted,
                             )).await;
                             return;
                         }
                     };
                     let written = buf.write(&data[offset..]);
                     offset += written;
-                    let _ = evt_tx.send(swactor_streams::channel::RecvEvent::Data(buf)).await;
+                    let _ = evt_tx.send(crate::streams::channel::RecvEvent::Data(buf)).await;
                 }
             }
         });
diff --git a/crates/datastore/src/bridge.rs b/crates/datastore/src/bridge.rs
index 0b23127..92f8c33 100644
--- a/crates/datastore/src/bridge.rs
+++ b/crates/datastore/src/bridge.rs
@@ -1,364 +1,23 @@
-//! Bridge between the runtime dashboard's `DatastoreStatsProvider` trait and
-//! the datastore actor system. Allows the dashboard to perform CRUD operations
-//! and lifecycle management without depending on `swactor-datastore` types.
+//! Datastore actor group lifecycle management.
+//!
+//! `DatastoreGroup` owns the full lifecycle of a datastore actor group:
+//! BlobStore, Metadata, DatastoreNode, and optional GatewayActor.
 
-use std::collections::BTreeMap;
 use std::path::PathBuf;
 use std::sync::Arc;
-use std::thread;
-use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
 
 use swactor::actor::ActorAddress;
-use swactor::runtime::{Inbox, Runtime};
-use swactor_std::RuntimeNaming;
+use swactor::runtime::Runtime;
+use swactor::std::RuntimeNaming;
 
-use distribution::types::NodeId;
-use dashboard::datastore_collector::{
-    DatastoreFactory, DatastoreStatsProvider, ListScope,
-};
+use swactor::transport::NodeId;
 
 use crate::actors::{BlobStoreActor, DatastoreNode, GatewayActor, MetadataActor};
 use crate::auth::{AccessControlList, AuthzEngine};
-use crate::chunking::reassemble_blob;
-use crate::messages::{DatastoreNodeMsg, DatastoreResponse, GatewayMsg, MetadataMsg};
+use crate::messages::{DatastoreNodeMsg, GatewayMsg, MetadataMsg};
 use crate::metrics::DatastoreMetrics;
 use crate::storage::{FilesystemBackend, InMemoryBackend};
-use crate::types::{ContentHash, DatastoreConfig};
-
-const POLL_TIMEOUT: Duration = Duration::from_secs(5);
-const POLL_INTERVAL: Duration = Duration::from_millis(1);
-
-fn poll_response(inbox: &Inbox<DatastoreResponse>, timeout: Duration) -> Option<DatastoreResponse> {
-    let start = Instant::now();
-    loop {
-        if let Some(resp) = inbox.try_recv() {
-            return Some(resp);
-        }
-        if start.elapsed() > timeout {
-            return None;
-        }
-        thread::sleep(POLL_INTERVAL);
-    }
-}
-
-fn entry_to_json(entry: &crate::types::ObjectEntry) -> serde_json::Value {
-    let node_hex: String = entry.node_id.0.iter().map(|b| format!("{b:02x}")).collect();
-    serde_json::json!({
-        "content_hash": entry.content_hash.to_hex(),
-        "name": entry.name,
-        "node_id": node_hex,
-        "tags": entry.tags,
-        "size_bytes": entry.size_bytes,
-        "created_at": entry.created_at,
-    })
-}
-
-fn manifest_to_json(manifest: &crate::types::ObjectManifest) -> serde_json::Value {
-    let chunks: Vec<serde_json::Value> = manifest
-        .chunks
-        .iter()
-        .map(|c| {
-            serde_json::json!({
-                "hash": c.hash.to_hex(),
-                "offset": c.offset,
-                "size": c.size,
-            })
-        })
-        .collect();
-    serde_json::json!({
-        "content_hash": manifest.content_hash.to_hex(),
-        "chunks": chunks,
-        "total_size": manifest.total_size,
-        "chunk_size": manifest.chunk_size,
-        "content_type": manifest.content_type,
-    })
-}
-
-fn entries_to_json(entries: &[crate::types::ObjectEntry]) -> Vec<serde_json::Value> {
-    entries.iter().map(entry_to_json).collect()
-}
-
-/// Bridges the dashboard trait to the datastore actor system.
-pub struct DatastoreBridge {
-    metrics: Arc<DatastoreMetrics>,
-    runtime: Arc<Runtime>,
-    datastore_addr: ActorAddress,
-    metadata_addr: ActorAddress,
-    #[allow(dead_code)]
-    blob_store_addr: ActorAddress,
-}
-
-impl DatastoreBridge {
-    pub fn new(
-        metrics: Arc<DatastoreMetrics>,
-        runtime: Arc<Runtime>,
-        datastore_addr: ActorAddress,
-        metadata_addr: ActorAddress,
-        blob_store_addr: ActorAddress,
-    ) -> Self {
-        Self {
-            metrics,
-            runtime,
-            datastore_addr,
-            metadata_addr,
-            blob_store_addr,
-        }
-    }
-}
-
-impl DatastoreStatsProvider for DatastoreBridge {
-    fn snapshot_json(&self) -> Option<String> {
-        let snap = self.metrics.snapshot();
-        serde_json::to_string(&snap).ok()
-    }
-
-    fn is_running(&self) -> bool {
-        true
-    }
-
-    fn list_objects(&self, name_filter: Option<&str>, scope: ListScope) -> Result<String, String> {
-        let inbox = self.runtime.new_inbox::<DatastoreResponse>()
-            .map_err(|e| format!("failed to create inbox: {e}"))?;
-
-        match scope {
-            ListScope::Local => {
-                let _ = self.runtime.send_to(
-                    self.datastore_addr,
-                    DatastoreNodeMsg::List {
-                        name_filter: name_filter.map(|s| s.to_string()),
-                        all: false,
-                        reply_to: *inbox.addr(),
-                    },
-                );
-            }
-            ListScope::Swarm => {
-                let _ = self.runtime.send_to(
-                    self.metadata_addr,
-                    MetadataMsg::ListLocal {
-                        name_filter: name_filter.map(|s| s.to_string()),
-                        reply_to: *inbox.addr(),
-                    },
-                );
-            }
-        }
-
-        match poll_response(&inbox, POLL_TIMEOUT) {
-            Some(DatastoreResponse::ListOk { entries }) => {
-                let json = serde_json::json!({ "entries": entries_to_json(&entries) }).to_string();
-                Ok(json)
-            }
-            Some(DatastoreResponse::Error { reason }) => Err(reason),
-            _ => Err("timeout".into()),
-        }
-    }
-
-    fn get_object(&self, hash: &str) -> Result<String, String> {
-        let content_hash = ContentHash::from_hex(hash)
-            .ok_or_else(|| "invalid content hash hex".to_string())?;
-
-        let inbox = self.runtime.new_inbox::<DatastoreResponse>()
-            .map_err(|e| format!("failed to create inbox: {e}"))?;
-
-        let _ = self.runtime.send_to(
-            self.datastore_addr,
-            DatastoreNodeMsg::Get {
-                content_hash,
-                reply_to: *inbox.addr(),
-            },
-        );
-
-        match poll_response(&inbox, POLL_TIMEOUT) {
-            Some(DatastoreResponse::GetOk { entry, manifest }) => {
-                self.metrics.record_get(&content_hash.to_hex());
-                let json = serde_json::json!({
-                    "entry": entry_to_json(&entry),
-                    "manifest": manifest_to_json(&manifest),
-                })
-                .to_string();
-                Ok(json)
-            }
-            Some(DatastoreResponse::NotFound) => Err("not found".into()),
-            Some(DatastoreResponse::Error { reason }) => Err(reason),
-            _ => Err("timeout".into()),
-        }
-    }
-
-    fn get_data(&self, hash: &str) -> Result<Vec<u8>, String> {
-        let content_hash = ContentHash::from_hex(hash)
-            .ok_or_else(|| "invalid content hash hex".to_string())?;
-
-        // Get manifest
-        let inbox = self.runtime.new_inbox::<DatastoreResponse>()
-            .map_err(|e| format!("failed to create inbox: {e}"))?;
-
-        let _ = self.runtime.send_to(
-            self.datastore_addr,
-            DatastoreNodeMsg::Get {
-                content_hash,
-                reply_to: *inbox.addr(),
-            },
-        );
-
-        self.metrics.record_get(&content_hash.to_hex());
-
-        let manifest = match poll_response(&inbox, POLL_TIMEOUT) {
-            Some(DatastoreResponse::GetOk { manifest, .. }) => manifest,
-            Some(DatastoreResponse::NotFound) => return Err("not found".into()),
-            Some(DatastoreResponse::Error { reason }) => return Err(reason),
-            _ => return Err("timeout".into()),
-        };
-
-        // Read chunks
-        let mut chunk_data = Vec::new();
-        for chunk_ref in &manifest.chunks {
-            let chunk_inbox = self.runtime.new_inbox::<DatastoreResponse>()
-                .map_err(|e| format!("failed to create inbox: {e}"))?;
-
-            let _ = self.runtime.send_to(
-                self.datastore_addr,
-                DatastoreNodeMsg::ReadChunk {
-                    hash: chunk_ref.hash,
-                    reply_to: *chunk_inbox.addr(),
-                },
-            );
-
-            match poll_response(&chunk_inbox, POLL_TIMEOUT) {
-                Some(DatastoreResponse::ChunkOk { hash, data }) => {
-                    chunk_data.push((hash, data));
-                }
-                _ => return Err("failed to read chunk".into()),
-            }
-        }
-
-        reassemble_blob(&manifest, &chunk_data)
-            .map_err(|e| format!("reassembly failed: {e:?}"))
-    }
-
-    fn put_data(&self, data: Vec<u8>, name: Option<String>) -> Result<String, String> {
-        let body_len = data.len();
-
-        let inbox = self.runtime.new_inbox::<DatastoreResponse>()
-            .map_err(|e| format!("failed to create inbox: {e}"))?;
-
-        let _ = self.runtime.send_to(
-            self.datastore_addr,
-            DatastoreNodeMsg::Put {
-                data,
-                name: name.clone(),
-                tags: BTreeMap::new(),
-                reply_to: *inbox.addr(),
-            },
-        );
-
-        match poll_response(&inbox, POLL_TIMEOUT) {
-            Some(DatastoreResponse::PutOk { content_hash }) => {
-                let hex = content_hash.to_hex();
-                self.metrics.record_put(&hex, name.as_deref(), body_len as u64);
-                let json = serde_json::json!({ "content_hash": hex }).to_string();
-                Ok(json)
-            }
-            Some(DatastoreResponse::Error { reason }) => Err(reason),
-            _ => Err("timeout waiting for put response".into()),
-        }
-    }
-
-    fn delete_object(&self, hash: &str) -> Result<String, String> {
-        let content_hash = ContentHash::from_hex(hash)
-            .ok_or_else(|| "invalid content hash hex".to_string())?;
-
-        let inbox = self.runtime.new_inbox::<DatastoreResponse>()
-            .map_err(|e| format!("failed to create inbox: {e}"))?;
-
-        let _ = self.runtime.send_to(
-            self.datastore_addr,
-            DatastoreNodeMsg::Delete {
-                content_hash,
-                reply_to: *inbox.addr(),
-            },
-        );
-
-        match poll_response(&inbox, POLL_TIMEOUT) {
-            Some(DatastoreResponse::DeleteOk { content_hash }) => {
-                let hex = content_hash.to_hex();
-                self.metrics.record_delete(&hex, 0);
-                let json = serde_json::json!({ "content_hash": hex }).to_string();
-                Ok(json)
-            }
-            Some(DatastoreResponse::NotFound) => Err("not found".into()),
-            Some(DatastoreResponse::Error { reason }) => Err(reason),
-            _ => Err("timeout".into()),
-        }
-    }
-
-    fn node_status(&self) -> Result<String, String> {
-        let inbox = self.runtime.new_inbox::<DatastoreResponse>()
-            .map_err(|e| format!("failed to create inbox: {e}"))?;
-
-        let _ = self.runtime.send_to(
-            self.datastore_addr,
-            DatastoreNodeMsg::Status {
-                reply_to: *inbox.addr(),
-            },
-        );
-
-        match poll_response(&inbox, POLL_TIMEOUT) {
-            Some(DatastoreResponse::NodeStatus { node_id }) => {
-                let hex: String = node_id.0.iter().map(|b| format!("{b:02x}")).collect();
-                let json = serde_json::json!({ "node_id": hex }).to_string();
-                Ok(json)
-            }
-            _ => Err("timeout".into()),
-        }
-    }
-
-    fn shutdown_datastore(&self) -> Result<(), String> {
-        // We can't actually stop the actors from here without a runtime handle,
-        // but we can signal shutdown. The caller (server handler) clears the
-        // provider reference which effectively disables the datastore.
-        Ok(())
-    }
-}
-
-/// Factory that can spawn a new set of datastore actors on a shared runtime.
-pub struct DatastoreNodeFactory {
-    runtime: Arc<Runtime>,
-    default_chunk_size: u32,
-}
-
-impl DatastoreNodeFactory {
-    pub fn new(runtime: Arc<Runtime>, default_chunk_size: u32) -> Self {
-        Self {
-            runtime,
-            default_chunk_size,
-        }
-    }
-}
-
-impl DatastoreFactory for DatastoreNodeFactory {
-    fn start_datastore(
-        &self,
-        storage_path: Option<String>,
-    ) -> Result<Arc<dyn DatastoreStatsProvider>, String> {
-        // Generate a unique node ID
-        let node_id = generate_node_id();
-        let node_hex: String = node_id.0.iter().map(|b| format!("{b:02x}")).collect();
-
-        let group = DatastoreGroup::spawn(
-            Arc::clone(&self.runtime),
-            DatastoreGroupConfig {
-                node_id,
-                node_id_hex: node_hex,
-                chunk_size: self.default_chunk_size,
-                storage_path,
-                auth: None,
-                gc_interval: 1000,
-                disseminate_interval: 50,
-            },
-        )?;
-
-        Ok(group.bridge().clone())
-    }
-}
+use crate::types::DatastoreConfig;
 
 // ─── DatastoreGroup ─────────────────────────────────────────────────────────
 
@@ -384,7 +43,7 @@ pub struct DatastoreGroup {
     datastore_addr: ActorAddress,
     metadata_addr: ActorAddress,
     gateway_addr: Option<ActorAddress>,
-    bridge: Arc<dyn DatastoreStatsProvider>,
+    metrics: Arc<DatastoreMetrics>,
     gc_interval: u64,
     disseminate_interval: u64,
     runtime: Arc<Runtime>,
@@ -455,14 +114,6 @@ impl DatastoreGroup {
         let metrics = Arc::new(DatastoreMetrics::new());
         metrics.set_node_id(config.node_id_hex.clone());
 
-        let bridge: Arc<dyn DatastoreStatsProvider> = Arc::new(DatastoreBridge::new(
-            metrics,
-            Arc::clone(&runtime),
-            datastore_addr,
-            metadata_addr,
-            blob_store_addr,
-        ));
-
         if config.storage_path.is_some() {
             eprintln!(
                 "Datastore: persistent ({})",
@@ -476,7 +127,7 @@ impl DatastoreGroup {
             datastore_addr,
             metadata_addr,
             gateway_addr,
-            bridge,
+            metrics,
             gc_interval: config.gc_interval,
             disseminate_interval: config.disseminate_interval,
             runtime,
@@ -485,22 +136,32 @@ impl DatastoreGroup {
 
     /// Send periodic ticks to the datastore actors based on the current round.
     pub fn tick(&self, round: u64) {
-        if round % self.gc_interval == 0 {
+        if round.is_multiple_of(self.gc_interval) {
             let _ = self.runtime.send_to(self.metadata_addr, MetadataMsg::GcTick);
             if let Some(gw) = self.gateway_addr {
                 let _ = self.runtime.send_to(gw, GatewayMsg::NonceGcTick);
             }
         }
-        if round % self.disseminate_interval == 0 {
+        if round.is_multiple_of(self.disseminate_interval) {
             let _ = self
                 .runtime
                 .send_to(self.metadata_addr, MetadataMsg::DisseminateTick);
         }
     }
 
-    /// Access the bridge (as a trait object for the dashboard).
-    pub fn bridge(&self) -> &Arc<dyn DatastoreStatsProvider> {
-        &self.bridge
+    /// Access the metrics accumulator.
+    pub fn metrics(&self) -> &Arc<DatastoreMetrics> {
+        &self.metrics
+    }
+
+    /// Address of the DatastoreNode actor.
+    pub fn datastore_addr(&self) -> ActorAddress {
+        self.datastore_addr
+    }
+
+    /// Address of the MetadataActor.
+    pub fn metadata_addr(&self) -> ActorAddress {
+        self.metadata_addr
     }
 
     /// Configure stream support: sends ConfigureStreams to DatastoreNode and
@@ -521,25 +182,9 @@ impl DatastoreGroup {
 
         // Spawn StreamListener
         use crate::actors::stream_listener::StreamListener;
-        use swactor_std::RuntimeNaming;
+        use swactor::std::RuntimeNaming;
         if let Ok(addr) = self.runtime.spawn(StreamListener::new(self.datastore_addr, stream_manager)) {
             let _ = self.runtime.register_name("StreamListener", addr);
         }
     }
 }
-
-fn generate_node_id() -> NodeId {
-    let mut bytes = [0u8; 32];
-    let nanos = SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .unwrap()
-        .as_nanos();
-    for (i, b) in nanos.to_le_bytes().iter().enumerate() {
-        bytes[i % 32] ^= *b;
-    }
-    let pid = std::process::id();
-    for (i, b) in pid.to_le_bytes().iter().enumerate() {
-        bytes[i + 16] ^= *b;
-    }
-    NodeId(bytes)
-}
diff --git a/crates/datastore/src/cli.rs b/crates/datastore/src/cli.rs
index 1dbc058..8c126c7 100644
--- a/crates/datastore/src/cli.rs
+++ b/crates/datastore/src/cli.rs
@@ -6,7 +6,7 @@
 use std::collections::BTreeMap;
 use std::path::PathBuf;
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 /// Top-level CLI commands for `swactor-store`.
 #[derive(Debug, Clone)]
diff --git a/crates/shared-types/src/lib.rs b/crates/datastore/src/content_hash.rs
similarity index 87%
rename from crates/shared-types/src/lib.rs
rename to crates/datastore/src/content_hash.rs
index c56d2f8..91da127 100644
--- a/crates/shared-types/src/lib.rs
+++ b/crates/datastore/src/content_hash.rs
@@ -1,14 +1,9 @@
-//! Shared types used across the swactor crate ecosystem.
-//!
-//! Contains `ContentHash` — the blake3-based content address used by
-//! both the datastore and distribution layers.
+//! Blake3-based content hash for blob addressing.
 
 use std::fmt;
 
 use serde::{Deserialize, Serialize};
 
-// ─── ContentHash ────────────────────────────────────────────────────────────
-
 /// A blake3 content hash (32 bytes).
 ///
 /// The primary identifier for blobs and the DHT key. XOR distance for DHT
diff --git a/crates/datastore/src/crypto.rs b/crates/datastore/src/crypto.rs
new file mode 100644
index 0000000..2a49f0b
--- /dev/null
+++ b/crates/datastore/src/crypto.rs
@@ -0,0 +1,96 @@
+//! Ed25519 cryptographic primitives for the datastore.
+
+use std::fmt;
+
+use ed25519_dalek::{Signer, Verifier};
+use serde::{Deserialize, Serialize};
+
+use swactor::transport::NodeId;
+
+// ─── Signature ──────────────────────────────────────────────────────────────
+
+/// An ed25519 signature (64 bytes).
+#[derive(Clone, Copy, PartialEq, Eq)]
+pub struct Signature(pub [u8; 64]);
+
+impl Serialize for Signature {
+    fn serialize<S: serde::Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error> {
+        serializer.serialize_bytes(&self.0)
+    }
+}
+
+impl<'de> Deserialize<'de> for Signature {
+    fn deserialize<D: serde::Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error> {
+        let bytes: Vec<u8> = Deserialize::deserialize(deserializer)?;
+        if bytes.len() != 64 {
+            return Err(serde::de::Error::custom(format!(
+                "expected 64 bytes for Signature, got {}",
+                bytes.len()
+            )));
+        }
+        let mut arr = [0u8; 64];
+        arr.copy_from_slice(&bytes);
+        Ok(Signature(arr))
+    }
+}
+
+impl fmt::Debug for Signature {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(f, "Sig(")?;
+        for b in &self.0[..4] {
+            write!(f, "{:02x}", b)?;
+        }
+        write!(f, "\u{2026})")
+    }
+}
+
+// ─── Keypair ────────────────────────────────────────────────────────────────
+
+/// Node identity keypair — wraps ed25519-dalek.
+pub struct Keypair {
+    inner: ed25519_dalek::SigningKey,
+}
+
+impl Keypair {
+    /// Generate a new random keypair.
+    pub fn generate() -> Self {
+        let mut csprng = rand_core::OsRng;
+        Self {
+            inner: ed25519_dalek::SigningKey::generate(&mut csprng),
+        }
+    }
+
+    /// Reconstruct from raw secret key bytes (32 bytes).
+    pub fn from_bytes(secret: &[u8; 32]) -> Self {
+        Self {
+            inner: ed25519_dalek::SigningKey::from_bytes(secret),
+        }
+    }
+
+    /// The public key as a `NodeId`.
+    pub fn node_id(&self) -> NodeId {
+        NodeId(self.inner.verifying_key().to_bytes())
+    }
+
+    /// Raw secret key bytes.
+    pub fn secret_bytes(&self) -> [u8; 32] {
+        self.inner.to_bytes()
+    }
+
+    /// Sign arbitrary bytes.
+    pub fn sign(&self, msg: &[u8]) -> Signature {
+        let sig = self.inner.sign(msg);
+        Signature(sig.to_bytes())
+    }
+}
+
+// ─── Verification ───────────────────────────────────────────────────────────
+
+/// Verify a signature against a `NodeId` (public key) and message bytes.
+pub fn verify(node_id: &NodeId, msg: &[u8], sig: &Signature) -> bool {
+    let Ok(vk) = ed25519_dalek::VerifyingKey::from_bytes(&node_id.0) else {
+        return false;
+    };
+    let signature = ed25519_dalek::Signature::from_bytes(&sig.0);
+    vk.verify(msg, &signature).is_ok()
+}
diff --git a/crates/datastore/src/lib.rs b/crates/datastore/src/lib.rs
index dd140d6..31f6846 100644
--- a/crates/datastore/src/lib.rs
+++ b/crates/datastore/src/lib.rs
@@ -1,11 +1,16 @@
+pub mod content_hash;
+pub mod crypto;
 pub mod types;
 pub mod messages;
 pub mod chunking;
 pub mod storage;
 pub mod actors;
 pub mod auth;
+pub mod blob_transfer;
+pub mod bridge;
 pub mod cli;
 pub mod metrics;
+pub mod streams;
 #[cfg(feature = "node")]
 pub mod api;
 #[cfg(feature = "node")]
@@ -18,3 +23,4 @@ pub use messages::{BlobStoreMsg, DatastoreNodeMsg, DatastoreResponse, MetadataMs
 pub use chunking::{chunk_blob, reassemble_blob, verify_integrity, ChunkingError};
 pub use storage::{StorageBackend, FilesystemBackend, InMemoryBackend};
 pub use actors::{BlobStoreActor, DatastoreNode, MetadataActor, TransferActor};
+pub use bridge::{DatastoreAuthConfig, DatastoreGroup, DatastoreGroupConfig};
diff --git a/crates/datastore/src/messages.rs b/crates/datastore/src/messages.rs
index 10f7d9b..e6a8bbd 100644
--- a/crates/datastore/src/messages.rs
+++ b/crates/datastore/src/messages.rs
@@ -16,8 +16,8 @@ use swactor::actor::ActorAddress;
 use swactor::runtime::Runtime;
 use swactor::transport::NetworkMessage;
 
-use distribution::types::NodeId;
-use swactor_streams::types::StreamId;
+use swactor::transport::NodeId;
+use crate::streams::types::StreamId;
 
 use crate::auth::{AccessRequestInfo, AuthorizedKeyInfo, DeniedReason, SignedRequest};
 use crate::types::{ContentHash, ObjectEntry, ObjectManifest};
diff --git a/crates/datastore/src/metrics.rs b/crates/datastore/src/metrics.rs
index 9db347e..e013fdc 100644
--- a/crates/datastore/src/metrics.rs
+++ b/crates/datastore/src/metrics.rs
@@ -1,8 +1,8 @@
-//! Thread-safe metrics for the datastore, consumed by the runtime dashboard.
+//! Thread-safe metrics for the datastore.
 //!
 //! `DatastoreMetrics` accumulates counters and event history from any thread
 //! (API handlers run on `tiny_http` worker threads). The dashboard polls
-//! `snapshot()` every ~200ms via the `DatastoreStatsProvider` trait.
+//! `snapshot()` every ~200ms via the plugin system.
 
 use std::collections::VecDeque;
 use std::sync::atomic::{AtomicU64, Ordering};
@@ -71,6 +71,12 @@ pub struct DatastoreMetrics {
     transfers: Mutex<Vec<TransferProgress>>,
 }
 
+impl Default for DatastoreMetrics {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl DatastoreMetrics {
     pub fn new() -> Self {
         Self {
@@ -186,11 +192,3 @@ fn now_ms() -> u64 {
         .as_millis() as u64
 }
 
-// ── Dashboard integration ────────────────────────────────────────────────────
-
-impl dashboard::datastore_collector::DatastoreStatsProvider for DatastoreMetrics {
-    fn snapshot_json(&self) -> Option<String> {
-        let snap = self.snapshot();
-        serde_json::to_string(&snap).ok()
-    }
-}
diff --git a/crates/datastore/src/pool/coordinator.rs b/crates/datastore/src/pool/coordinator.rs
deleted file mode 100644
index e9f7dd5..0000000
--- a/crates/datastore/src/pool/coordinator.rs
+++ /dev/null
@@ -1,274 +0,0 @@
-//! Pool coordinator actor — placement-aware CRUD facade.
-//!
-//! Owns an `Arc<Mutex<PoolDisseminator>>` for query access and delegates
-//! storage operations to the co-located `DatastoreNode` actor.
-
-use std::collections::BTreeMap;
-use std::sync::{Arc, Mutex};
-
-use swactor::actor::{ActorAddress, ActorInterface, Ctx};
-
-use distribution::types::NodeId;
-use shared_types::ContentHash;
-use shared_types::pool::PoolConfig;
-
-use crate::messages::{DatastoreNodeMsg, DatastoreResponse};
-use super::disseminator::PoolDisseminator;
-use super::messages::PoolCoordinatorMsg;
-
-/// The pool coordinator actor.
-pub struct PoolCoordinator {
-    node_id: NodeId,
-    pool_config: PoolConfig,
-    disseminator: Arc<Mutex<PoolDisseminator>>,
-
-    // Co-located actor addresses
-    datastore_addr: ActorAddress,
-
-    tick_count: u64,
-}
-
-impl PoolCoordinator {
-    pub fn new(
-        node_id: NodeId,
-        pool_config: PoolConfig,
-        disseminator: Arc<Mutex<PoolDisseminator>>,
-        datastore_addr: ActorAddress,
-    ) -> Self {
-        Self {
-            node_id,
-            pool_config,
-            disseminator,
-            datastore_addr,
-            tick_count: 0,
-        }
-    }
-
-    /// Access the shared disseminator.
-    pub fn disseminator(&self) -> &Arc<Mutex<PoolDisseminator>> {
-        &self.disseminator
-    }
-
-    fn cluster_size(&self) -> usize {
-        let d = self.disseminator.lock().unwrap();
-        d.member_count().max(1)
-    }
-
-    // ─── Message handlers ──────────────────────────────────────────────
-
-    fn handle_pool_put(
-        &self,
-        ctx: &Ctx,
-        data: Vec<u8>,
-        name: Option<String>,
-        tags: BTreeMap<String, String>,
-        reply_to: ActorAddress,
-    ) {
-        // Delegate to local DatastoreNode for now.
-        // Future: check capacity and redirect to best node.
-        let _ = ctx.send(
-            self.datastore_addr,
-            DatastoreNodeMsg::Put {
-                data,
-                name,
-                tags,
-                reply_to,
-            },
-        );
-
-        // Note: content announcement happens after PutOk is received.
-        // For now, caller is responsible for announcing content via PoolTick
-        // or a future PutOk callback.
-    }
-
-    fn handle_pool_get(
-        &self,
-        ctx: &Ctx,
-        content_hash: ContentHash,
-        reply_to: ActorAddress,
-    ) {
-        // Try local first via DatastoreNode
-        let _ = ctx.send(
-            self.datastore_addr,
-            DatastoreNodeMsg::Get {
-                content_hash,
-                reply_to,
-            },
-        );
-
-        // Future: if local not found, use disseminator.locate_content()
-        // to fetch from a specific peer instead of fan-out.
-    }
-
-    fn handle_pool_delete(
-        &self,
-        ctx: &Ctx,
-        content_hash: ContentHash,
-        reply_to: ActorAddress,
-    ) {
-        // Delete locally
-        let _ = ctx.send(
-            self.datastore_addr,
-            DatastoreNodeMsg::Delete {
-                content_hash,
-                reply_to,
-            },
-        );
-
-        // Announce tombstone via gossip
-        let cluster_size = self.cluster_size();
-        self.disseminator
-            .lock()
-            .unwrap()
-            .remove_content(content_hash, cluster_size);
-    }
-
-    fn handle_pool_list(
-        &self,
-        ctx: &Ctx,
-        name_filter: Option<String>,
-        reply_to: ActorAddress,
-    ) {
-        let _ = ctx.send(
-            self.datastore_addr,
-            DatastoreNodeMsg::List {
-                name_filter,
-                all: false,
-                reply_to,
-            },
-        );
-    }
-
-    fn handle_pool_status(&self, ctx: &Ctx, reply_to: ActorAddress) {
-        let d = self.disseminator.lock().unwrap();
-        let (total_bytes, used_bytes) = d.pool_capacity_summary();
-        let members: Vec<String> = d
-            .active_members()
-            .iter()
-            .map(|id| id.0.iter().map(|b| format!("{b:02x}")).collect())
-            .collect();
-
-        let member_count = d.member_count();
-        let content_count = d.content_count();
-        drop(d);
-
-        let json = serde_json::json!({
-            "pool_name": self.pool_config.pool_name,
-            "pool_id": self.pool_config.pool_id.to_hex(),
-            "member_count": member_count,
-            "content_count": content_count,
-            "total_bytes": total_bytes,
-            "used_bytes": used_bytes,
-            "members": members,
-        });
-
-        let _ = ctx.send(
-            reply_to,
-            DatastoreResponse::PoolStatus {
-                json: json.to_string(),
-            },
-        );
-    }
-
-    fn handle_join_pool(&mut self, ctx: &Ctx, reply_to: ActorAddress) {
-        let cluster_size = self.cluster_size();
-        let mut d = self.disseminator.lock().unwrap();
-
-        if !d.is_node_authorized(&self.node_id) {
-            let _ = ctx.send(
-                reply_to,
-                DatastoreResponse::Error {
-                    reason: "not authorized to join pool".into(),
-                },
-            );
-            return;
-        }
-
-        d.join(cluster_size);
-        d.announce_capacity(self.pool_config.capacity_bytes, 0, cluster_size);
-        drop(d);
-
-        let _ = ctx.send(reply_to, DatastoreResponse::Bool(true));
-    }
-
-    fn handle_leave_pool(&mut self, ctx: &Ctx, reply_to: ActorAddress) {
-        let cluster_size = self.cluster_size();
-        self.disseminator.lock().unwrap().leave(cluster_size);
-        let _ = ctx.send(reply_to, DatastoreResponse::Bool(true));
-    }
-
-    fn handle_grant_access(&mut self, ctx: &Ctx, target: NodeId, reply_to: ActorAddress) {
-        let cluster_size = self.cluster_size();
-        self.disseminator
-            .lock()
-            .unwrap()
-            .grant_access(target, cluster_size);
-        let _ = ctx.send(reply_to, DatastoreResponse::Bool(true));
-    }
-
-    fn handle_revoke_access(&mut self, ctx: &Ctx, target: NodeId, reply_to: ActorAddress) {
-        let cluster_size = self.cluster_size();
-        self.disseminator
-            .lock()
-            .unwrap()
-            .revoke_access(target, cluster_size);
-        let _ = ctx.send(reply_to, DatastoreResponse::Bool(true));
-    }
-
-    fn handle_pool_tick(&mut self) {
-        self.tick_count += 1;
-        // Periodic capacity re-announcement (every 100 ticks)
-        if self.tick_count % 100 == 0 {
-            let cluster_size = self.cluster_size();
-            self.disseminator.lock().unwrap().announce_capacity(
-                self.pool_config.capacity_bytes,
-                0, // TODO: query actual usage from BlobStore
-                cluster_size,
-            );
-        }
-    }
-}
-
-impl ActorInterface for PoolCoordinator {
-    type Incoming = PoolCoordinatorMsg;
-    type Response = DatastoreResponse;
-
-    fn handle(&mut self, ctx: &Ctx, msg: PoolCoordinatorMsg) {
-        match msg {
-            PoolCoordinatorMsg::PoolPut {
-                data,
-                name,
-                tags,
-                reply_to,
-            } => self.handle_pool_put(ctx, data, name, tags, reply_to),
-            PoolCoordinatorMsg::PoolGet {
-                content_hash,
-                reply_to,
-            } => self.handle_pool_get(ctx, content_hash, reply_to),
-            PoolCoordinatorMsg::PoolDelete {
-                content_hash,
-                reply_to,
-            } => self.handle_pool_delete(ctx, content_hash, reply_to),
-            PoolCoordinatorMsg::PoolList {
-                name_filter,
-                reply_to,
-            } => self.handle_pool_list(ctx, name_filter, reply_to),
-            PoolCoordinatorMsg::PoolStatus { reply_to } => {
-                self.handle_pool_status(ctx, reply_to)
-            }
-            PoolCoordinatorMsg::JoinPool { reply_to } => {
-                self.handle_join_pool(ctx, reply_to)
-            }
-            PoolCoordinatorMsg::LeavePool { reply_to } => {
-                self.handle_leave_pool(ctx, reply_to)
-            }
-            PoolCoordinatorMsg::GrantPoolAccess { target, reply_to } => {
-                self.handle_grant_access(ctx, target, reply_to)
-            }
-            PoolCoordinatorMsg::RevokePoolAccess { target, reply_to } => {
-                self.handle_revoke_access(ctx, target, reply_to)
-            }
-            PoolCoordinatorMsg::PoolTick => self.handle_pool_tick(),
-        }
-    }
-}
diff --git a/crates/datastore/src/pool/disseminator.rs b/crates/datastore/src/pool/disseminator.rs
deleted file mode 100644
index 8af5040..0000000
--- a/crates/datastore/src/pool/disseminator.rs
+++ /dev/null
@@ -1,716 +0,0 @@
-//! Pool disseminator — gossip-converged state for pool membership,
-//! capacity, content locations, and ACL.
-//!
-//! Implements `GossipChannel` to plug into the generic gossip system
-//! via `DistributedNode::register_channel()`.
-
-use std::collections::HashMap;
-use std::sync::{Arc, Mutex};
-
-use distribution::gossip_channel::{DisseminationBuffer, GossipChannel, deserialize_each, serialize_each};
-use distribution::types::NodeId;
-use shared_types::ContentHash;
-use shared_types::pool::*;
-
-// ─── PoolDisseminator ──────────────────────────────────────────────────────
-
-/// Configuration for the pool disseminator.
-#[derive(Debug, Clone)]
-pub struct PoolDisseminatorConfig {
-    pub tombstone_ttl: u64,
-    pub gc_interval: u64,
-}
-
-impl Default for PoolDisseminatorConfig {
-    fn default() -> Self {
-        Self {
-            tombstone_ttl: 3600,
-            gc_interval: 1000,
-        }
-    }
-}
-
-/// Manages converged pool state via gossip dissemination.
-#[derive(Debug)]
-pub struct PoolDisseminator {
-    pool_id: PoolId,
-    pool_name: String,
-    local_node_id: NodeId,
-
-    // Converged state maps
-    members: HashMap<[u8; 32], PoolMemberEntry>,
-    capacity: HashMap<[u8; 32], PoolCapacityEntry>,
-    content_locations: HashMap<(ContentHash, [u8; 32]), ContentLocationEntry>,
-    acl: HashMap<[u8; 32], PoolACLEntry>,
-
-    // Dissemination buffer
-    buffer: DisseminationBuffer<PoolEntry>,
-
-    // Local generation counters
-    local_member_gen: u64,
-    local_capacity_gen: u64,
-
-    config: PoolDisseminatorConfig,
-    tick_count: u64,
-}
-
-impl PoolDisseminator {
-    pub fn new(pool_id: PoolId, pool_name: String, local_node_id: NodeId, lambda: usize) -> Self {
-        Self {
-            pool_id,
-            pool_name,
-            local_node_id,
-            members: HashMap::new(),
-            capacity: HashMap::new(),
-            content_locations: HashMap::new(),
-            acl: HashMap::new(),
-            buffer: DisseminationBuffer::new(lambda),
-            local_member_gen: 0,
-            local_capacity_gen: 0,
-            config: PoolDisseminatorConfig::default(),
-            tick_count: 0,
-        }
-    }
-
-    pub fn with_config(mut self, config: PoolDisseminatorConfig) -> Self {
-        self.config = config;
-        self
-    }
-
-    pub fn pool_id(&self) -> PoolId {
-        self.pool_id
-    }
-
-    // ─── Lifecycle methods ──────────────────────────────────────────────
-
-    /// Join the pool. Announces Active membership.
-    pub fn join(&mut self, cluster_size: usize) {
-        self.local_member_gen += 1;
-        let entry = PoolMemberEntry {
-            pool_id: self.pool_id,
-            node_id: self.local_node_id.0,
-            state: PoolMemberState::Active,
-            generation: self.local_member_gen,
-        };
-        self.merge_membership(entry.clone());
-        self.buffer.enqueue(PoolEntry::Membership(entry), cluster_size);
-    }
-
-    /// Leave the pool. Announces Left membership.
-    pub fn leave(&mut self, cluster_size: usize) {
-        self.local_member_gen += 1;
-        let entry = PoolMemberEntry {
-            pool_id: self.pool_id,
-            node_id: self.local_node_id.0,
-            state: PoolMemberState::Left,
-            generation: self.local_member_gen,
-        };
-        self.merge_membership(entry.clone());
-        self.buffer.enqueue(PoolEntry::Membership(entry), cluster_size);
-    }
-
-    /// Announce storage capacity.
-    pub fn announce_capacity(&mut self, total: u64, used: u64, cluster_size: usize) {
-        self.local_capacity_gen += 1;
-        let entry = PoolCapacityEntry {
-            pool_id: self.pool_id,
-            node_id: self.local_node_id.0,
-            total_bytes: total,
-            used_bytes: used,
-            generation: self.local_capacity_gen,
-        };
-        self.merge_capacity(entry.clone());
-        self.buffer.enqueue(PoolEntry::Capacity(entry), cluster_size);
-    }
-
-    /// Announce that this node has a piece of content.
-    pub fn announce_content(&mut self, hash: ContentHash, cluster_size: usize) {
-        let key = (hash, self.local_node_id.0);
-        let next_gen = self.content_locations.get(&key).map_or(1, |e| e.generation + 1);
-        let entry = ContentLocationEntry {
-            pool_id: self.pool_id,
-            content_hash: hash,
-            node_id: self.local_node_id.0,
-            generation: next_gen,
-            tombstone: false,
-        };
-        self.merge_content_location(entry.clone());
-        self.buffer.enqueue(PoolEntry::ContentLocation(entry), cluster_size);
-    }
-
-    /// Remove content announcement (tombstone).
-    pub fn remove_content(&mut self, hash: ContentHash, cluster_size: usize) {
-        let key = (hash, self.local_node_id.0);
-        let next_gen = self.content_locations.get(&key).map_or(1, |e| e.generation + 1);
-        let entry = ContentLocationEntry {
-            pool_id: self.pool_id,
-            content_hash: hash,
-            node_id: self.local_node_id.0,
-            generation: next_gen,
-            tombstone: true,
-        };
-        self.merge_content_location(entry.clone());
-        self.buffer.enqueue(PoolEntry::ContentLocation(entry), cluster_size);
-    }
-
-    /// Grant access to a node.
-    pub fn grant_access(&mut self, target: NodeId, cluster_size: usize) {
-        let next_gen = self.acl.get(&target.0).map_or(1, |e| e.generation + 1);
-        let entry = PoolACLEntry {
-            pool_id: self.pool_id,
-            node_id: target.0,
-            granted_by: self.local_node_id.0,
-            generation: next_gen,
-            revoked: false,
-        };
-        self.merge_acl(entry.clone());
-        self.buffer.enqueue(PoolEntry::ACL(entry), cluster_size);
-    }
-
-    /// Revoke access from a node.
-    pub fn revoke_access(&mut self, target: NodeId, cluster_size: usize) {
-        let next_gen = self.acl.get(&target.0).map_or(1, |e| e.generation + 1);
-        let entry = PoolACLEntry {
-            pool_id: self.pool_id,
-            node_id: target.0,
-            granted_by: self.local_node_id.0,
-            generation: next_gen,
-            revoked: true,
-        };
-        self.merge_acl(entry.clone());
-        self.buffer.enqueue(PoolEntry::ACL(entry), cluster_size);
-    }
-
-    // ─── Query API ──────────────────────────────────────────────────────
-
-    /// All active pool members.
-    pub fn active_members(&self) -> Vec<NodeId> {
-        self.members
-            .values()
-            .filter(|m| m.state == PoolMemberState::Active)
-            .map(|m| NodeId(m.node_id))
-            .collect()
-    }
-
-    /// Total and used capacity across the pool.
-    pub fn pool_capacity_summary(&self) -> (u64, u64) {
-        let mut total = 0u64;
-        let mut used = 0u64;
-        for cap in self.capacity.values() {
-            // Only count active members
-            if let Some(m) = self.members.get(&cap.node_id) {
-                if m.state == PoolMemberState::Active {
-                    total = total.saturating_add(cap.total_bytes);
-                    used = used.saturating_add(cap.used_bytes);
-                }
-            }
-        }
-        (total, used)
-    }
-
-    /// Find which nodes have a given content hash.
-    pub fn locate_content(&self, hash: &ContentHash) -> Vec<NodeId> {
-        self.content_locations
-            .iter()
-            .filter(|((h, _), entry)| h == hash && !entry.tombstone)
-            .map(|((_, node_id), _)| NodeId(*node_id))
-            .collect()
-    }
-
-    /// Find the node with the most free space.
-    pub fn node_with_most_free_space(&self) -> Option<NodeId> {
-        self.capacity
-            .values()
-            .filter(|cap| {
-                self.members
-                    .get(&cap.node_id)
-                    .is_some_and(|m| m.state == PoolMemberState::Active)
-            })
-            .max_by_key(|cap| cap.total_bytes.saturating_sub(cap.used_bytes))
-            .map(|cap| NodeId(cap.node_id))
-    }
-
-    /// Check if a node is authorized to join this pool.
-    pub fn is_node_authorized(&self, node_id: &NodeId) -> bool {
-        // If no ACL entries exist, the pool is open
-        if self.acl.is_empty() {
-            return true;
-        }
-        self.acl
-            .get(&node_id.0)
-            .is_some_and(|entry| !entry.revoked)
-    }
-
-    /// Number of active members.
-    pub fn member_count(&self) -> usize {
-        self.members
-            .values()
-            .filter(|m| m.state == PoolMemberState::Active)
-            .count()
-    }
-
-    /// Number of live content location entries (non-tombstone).
-    pub fn content_count(&self) -> usize {
-        self.content_locations
-            .values()
-            .filter(|e| !e.tombstone)
-            .count()
-    }
-
-    /// Serialize the current pool state to a JSON string for the dashboard.
-    pub fn snapshot_json(&self) -> String {
-        fn hex(bytes: &[u8; 32]) -> String {
-            bytes.iter().map(|b| format!("{b:02x}")).collect()
-        }
-
-        let (total_bytes, used_bytes) = self.pool_capacity_summary();
-
-        let members: Vec<serde_json::Value> = self
-            .members
-            .values()
-            .filter(|m| m.state == PoolMemberState::Active)
-            .map(|m| {
-                let cap = self.capacity.get(&m.node_id);
-                serde_json::json!({
-                    "node_id": hex(&m.node_id),
-                    "state": format!("{:?}", m.state),
-                    "generation": m.generation,
-                    "total_bytes": cap.map_or(0, |c| c.total_bytes),
-                    "used_bytes": cap.map_or(0, |c| c.used_bytes),
-                })
-            })
-            .collect();
-
-        // Group content locations by hash
-        let mut by_hash: HashMap<ContentHash, Vec<[u8; 32]>> = HashMap::new();
-        for ((hash, _), entry) in &self.content_locations {
-            if !entry.tombstone {
-                by_hash.entry(*hash).or_default().push(entry.node_id);
-            }
-        }
-        let content_locations: Vec<serde_json::Value> = by_hash
-            .iter()
-            .map(|(hash, nodes)| {
-                serde_json::json!({
-                    "content_hash": hash.to_hex(),
-                    "nodes": nodes.iter().map(hex).collect::<Vec<_>>(),
-                    "replica_count": nodes.len(),
-                })
-            })
-            .collect();
-
-        let acl: Vec<serde_json::Value> = self
-            .acl
-            .values()
-            .map(|a| {
-                serde_json::json!({
-                    "node_id": hex(&a.node_id),
-                    "granted_by": hex(&a.granted_by),
-                    "revoked": a.revoked,
-                })
-            })
-            .collect();
-
-        let acl_mode = if self.acl.is_empty() { "open" } else { "allow-list" };
-
-        serde_json::json!({
-            "pool_name": self.pool_name,
-            "pool_id": self.pool_id.to_hex(),
-            "member_count": self.member_count(),
-            "content_count": self.content_count(),
-            "total_bytes": total_bytes,
-            "used_bytes": used_bytes,
-            "members": members,
-            "content_locations": content_locations,
-            "acl": acl,
-            "acl_mode": acl_mode,
-        })
-        .to_string()
-    }
-
-    // ─── Internal merge logic ───────────────────────────────────────────
-
-    fn merge_membership(&mut self, entry: PoolMemberEntry) -> bool {
-        let key = entry.node_id;
-        if let Some(existing) = self.members.get(&key) {
-            if entry.generation <= existing.generation {
-                return false;
-            }
-        }
-        self.members.insert(key, entry);
-        true
-    }
-
-    fn merge_capacity(&mut self, entry: PoolCapacityEntry) -> bool {
-        let key = entry.node_id;
-        if let Some(existing) = self.capacity.get(&key) {
-            if entry.generation <= existing.generation {
-                return false;
-            }
-        }
-        self.capacity.insert(key, entry);
-        true
-    }
-
-    fn merge_content_location(&mut self, entry: ContentLocationEntry) -> bool {
-        let key = (entry.content_hash, entry.node_id);
-        if let Some(existing) = self.content_locations.get(&key) {
-            if entry.generation <= existing.generation {
-                return false;
-            }
-        }
-        self.content_locations.insert(key, entry);
-        true
-    }
-
-    fn merge_acl(&mut self, entry: PoolACLEntry) -> bool {
-        let key = entry.node_id;
-        if let Some(existing) = self.acl.get(&key) {
-            if entry.generation <= existing.generation {
-                return false;
-            }
-        }
-        self.acl.insert(key, entry);
-        true
-    }
-
-    /// Merge a single pool entry and return whether state changed.
-    fn merge_entry(&mut self, entry: PoolEntry) -> bool {
-        match entry {
-            PoolEntry::Membership(m) => self.merge_membership(m),
-            PoolEntry::Capacity(c) => self.merge_capacity(c),
-            PoolEntry::ContentLocation(cl) => self.merge_content_location(cl),
-            PoolEntry::ACL(a) => self.merge_acl(a),
-        }
-    }
-
-    /// Take pending entries (internal, typed).
-    fn take_pending_inner(&mut self, max_count: usize) -> Vec<PoolEntry> {
-        self.buffer.take(max_count)
-    }
-
-    /// Apply incoming entries (internal, typed).
-    fn apply_incoming_inner(&mut self, entries: Vec<PoolEntry>, cluster_size: usize) {
-        for entry in entries {
-            if self.merge_entry(entry.clone()) {
-                self.buffer.enqueue(entry, cluster_size);
-            }
-        }
-    }
-
-    /// Re-enqueue all state (internal).
-    fn re_disseminate_all_inner(&mut self, cluster_size: usize) {
-        let mut all_entries: Vec<PoolEntry> = Vec::new();
-
-        for m in self.members.values().cloned() {
-            all_entries.push(PoolEntry::Membership(m));
-        }
-        for c in self.capacity.values().cloned() {
-            all_entries.push(PoolEntry::Capacity(c));
-        }
-        for cl in self.content_locations.values().cloned() {
-            all_entries.push(PoolEntry::ContentLocation(cl));
-        }
-        for a in self.acl.values().cloned() {
-            all_entries.push(PoolEntry::ACL(a));
-        }
-
-        self.buffer.re_enqueue_all(all_entries, cluster_size);
-    }
-
-    /// GC: evict tombstones past TTL.
-    fn gc_tick_inner(&mut self) {
-        self.tick_count += 1;
-        if self.tick_count % self.config.gc_interval != 0 {
-            return;
-        }
-
-        let ttl = self.config.tombstone_ttl;
-        let tick = self.tick_count;
-
-        // GC left members
-        self.members.retain(|_, m| {
-            if m.state == PoolMemberState::Left {
-                m.generation + ttl > tick
-            } else {
-                true
-            }
-        });
-
-        // GC tombstoned content locations
-        self.content_locations.retain(|_, cl| {
-            if cl.tombstone {
-                cl.generation + ttl > tick
-            } else {
-                true
-            }
-        });
-
-        // GC revoked ACL entries
-        self.acl.retain(|_, a| {
-            if a.revoked {
-                a.generation + ttl > tick
-            } else {
-                true
-            }
-        });
-    }
-}
-
-// ─── SharedPoolChannel ─────────────────────────────────────────────────────
-
-/// Wrapper around `Arc<Mutex<PoolDisseminator>>` that implements `GossipChannel`.
-///
-/// This enables shared ownership between the `PoolCoordinator` actor
-/// (which needs query/lifecycle access) and `DistributedNode` (which
-/// drives gossip piggyback).
-pub struct SharedPoolChannel {
-    inner: Arc<Mutex<PoolDisseminator>>,
-}
-
-impl SharedPoolChannel {
-    pub fn new(disseminator: Arc<Mutex<PoolDisseminator>>) -> Self {
-        Self { inner: disseminator }
-    }
-
-    /// Consume the channel and return the underlying `Arc<Mutex<PoolDisseminator>>`.
-    pub fn into_inner(self) -> Arc<Mutex<PoolDisseminator>> {
-        self.inner
-    }
-}
-
-impl GossipChannel for SharedPoolChannel {
-    fn topic_tag(&self) -> &'static str {
-        "pool"
-    }
-
-    fn take_pending_bytes(&mut self, max_entries: usize) -> Vec<Vec<u8>> {
-        let entries = self.inner.lock().unwrap().take_pending_inner(max_entries);
-        serialize_each(&entries)
-    }
-
-    fn apply_incoming_bytes(&mut self, entries: &[Vec<u8>], cluster_size: usize) {
-        let parsed: Vec<PoolEntry> = deserialize_each(entries);
-        self.inner.lock().unwrap().apply_incoming_inner(parsed, cluster_size);
-    }
-
-    fn re_disseminate_all(&mut self, cluster_size: usize) {
-        self.inner.lock().unwrap().re_disseminate_all_inner(cluster_size);
-    }
-
-    fn on_node_death(&mut self, _node_id: &NodeId) {
-        // Pool membership is explicit (join/leave), not auto-removed on node death.
-        // Capacity becomes unreliable but we don't remove it.
-    }
-
-    fn gc_tick(&mut self) {
-        self.inner.lock().unwrap().gc_tick_inner();
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    fn node_id(b: u8) -> NodeId {
-        NodeId([b; 32])
-    }
-
-    fn make_disseminator(b: u8) -> PoolDisseminator {
-        PoolDisseminator::new(
-            PoolId::from_name("test-pool"),
-            "test-pool".into(),
-            node_id(b),
-            3,
-        )
-    }
-
-    #[test]
-    fn join_and_query_members() {
-        let mut d = make_disseminator(1);
-        d.join(2);
-
-        assert_eq!(d.member_count(), 1);
-        assert_eq!(d.active_members(), vec![node_id(1)]);
-    }
-
-    #[test]
-    fn leave_removes_from_active() {
-        let mut d = make_disseminator(1);
-        d.join(2);
-        d.leave(2);
-
-        assert_eq!(d.member_count(), 0);
-        assert!(d.active_members().is_empty());
-    }
-
-    #[test]
-    fn announce_and_locate_content() {
-        let mut d = make_disseminator(1);
-        d.join(2);
-        let hash = ContentHash::of(b"test-data");
-        d.announce_content(hash, 2);
-
-        let locations = d.locate_content(&hash);
-        assert_eq!(locations, vec![node_id(1)]);
-    }
-
-    #[test]
-    fn remove_content_tombstones() {
-        let mut d = make_disseminator(1);
-        d.join(2);
-        let hash = ContentHash::of(b"test-data");
-        d.announce_content(hash, 2);
-        d.remove_content(hash, 2);
-
-        assert!(d.locate_content(&hash).is_empty());
-    }
-
-    #[test]
-    fn capacity_summary() {
-        let mut d = make_disseminator(1);
-        d.join(2);
-        d.announce_capacity(1000, 300, 2);
-
-        let (total, used) = d.pool_capacity_summary();
-        assert_eq!(total, 1000);
-        assert_eq!(used, 300);
-    }
-
-    #[test]
-    fn acl_grant_and_check() {
-        let mut d = make_disseminator(1);
-        d.grant_access(node_id(2), 2);
-
-        assert!(d.is_node_authorized(&node_id(2)));
-        assert!(!d.is_node_authorized(&node_id(3)));
-    }
-
-    #[test]
-    fn acl_revoke() {
-        let mut d = make_disseminator(1);
-        d.grant_access(node_id(2), 2);
-        d.revoke_access(node_id(2), 2);
-
-        assert!(!d.is_node_authorized(&node_id(2)));
-    }
-
-    #[test]
-    fn empty_acl_means_open() {
-        let d = make_disseminator(1);
-        assert!(d.is_node_authorized(&node_id(99)));
-    }
-
-    #[test]
-    fn higher_generation_wins_merge() {
-        let mut d1 = make_disseminator(1);
-        let mut d2 = make_disseminator(2);
-
-        // d1 joins
-        d1.join(2);
-        // d1 leaves
-        d1.leave(2);
-
-        // Gossip d1's entries to d2 out of order:
-        // First send the Active (gen 1), then the Left (gen 2)
-        let active_entry = PoolEntry::Membership(PoolMemberEntry {
-            pool_id: PoolId::from_name("test-pool"),
-            node_id: [1u8; 32],
-            state: PoolMemberState::Active,
-            generation: 1,
-        });
-        let left_entry = PoolEntry::Membership(PoolMemberEntry {
-            pool_id: PoolId::from_name("test-pool"),
-            node_id: [1u8; 32],
-            state: PoolMemberState::Left,
-            generation: 2,
-        });
-
-        // Apply Left first (gen 2), then Active (gen 1) — Active should be rejected
-        d2.merge_entry(left_entry);
-        let changed = d2.merge_entry(active_entry);
-        assert!(!changed, "lower generation should not win");
-
-        // d2 should see node_id(1) as Left
-        assert_eq!(d2.member_count(), 0); // Active count is 0
-    }
-
-    #[test]
-    fn two_disseminators_converge_via_gossip_exchange() {
-        let mut d1 = make_disseminator(1);
-        let mut d2 = make_disseminator(2);
-
-        // d1 joins and announces content
-        d1.join(2);
-        let hash = ContentHash::of(b"shared-file");
-        d1.announce_content(hash, 2);
-
-        // d2 joins
-        d2.join(2);
-
-        // Simulate gossip: d1 → d2
-        let pending = d1.take_pending_inner(100);
-        let bytes = serialize_each(&pending);
-        let parsed: Vec<PoolEntry> = deserialize_each(&bytes);
-        d2.apply_incoming_inner(parsed, 2);
-
-        // d2 should now see d1 as a member and know about the content
-        assert_eq!(d2.member_count(), 2);
-        assert_eq!(d2.locate_content(&hash), vec![node_id(1)]);
-
-        // Simulate gossip: d2 → d1
-        let pending = d2.take_pending_inner(100);
-        let bytes = serialize_each(&pending);
-        let parsed: Vec<PoolEntry> = deserialize_each(&bytes);
-        d1.apply_incoming_inner(parsed, 2);
-
-        // d1 should now see d2 as a member
-        assert_eq!(d1.member_count(), 2);
-    }
-
-    #[test]
-    fn three_node_convergence_loop() {
-        let pool = PoolId::from_name("test-pool");
-        let mut nodes: Vec<PoolDisseminator> = (0..3)
-            .map(|i| PoolDisseminator::new(pool, "test-pool".into(), node_id(i as u8), 3))
-            .collect();
-
-        // Each node joins
-        for n in &mut nodes {
-            n.join(3);
-        }
-
-        // Node 0 announces content
-        let hash = ContentHash::of(b"convergence-test");
-        nodes[0].announce_content(hash, 3);
-
-        // Run 5 gossip rounds where each node exchanges with all others
-        for _ in 0..5 {
-            // Collect pending from each node
-            let pending_bytes: Vec<Vec<Vec<u8>>> = nodes
-                .iter_mut()
-                .map(|n| serialize_each(&n.take_pending_inner(100)))
-                .collect();
-
-            // Apply each node's pending to all other nodes
-            for (sender_idx, bytes) in pending_bytes.iter().enumerate() {
-                for (receiver_idx, node) in nodes.iter_mut().enumerate() {
-                    if sender_idx != receiver_idx {
-                        let parsed: Vec<PoolEntry> = deserialize_each(bytes);
-                        node.apply_incoming_inner(parsed, 3);
-                    }
-                }
-            }
-        }
-
-        // All nodes should agree on membership and content locations
-        for (i, node) in nodes.iter().enumerate() {
-            assert_eq!(node.member_count(), 3, "node {i} should see 3 members");
-            assert_eq!(
-                node.locate_content(&hash),
-                vec![node_id(0)],
-                "node {i} should know content is on node 0"
-            );
-        }
-    }
-}
diff --git a/crates/datastore/src/pool/messages.rs b/crates/datastore/src/pool/messages.rs
deleted file mode 100644
index de3fd7e..0000000
--- a/crates/datastore/src/pool/messages.rs
+++ /dev/null
@@ -1,79 +0,0 @@
-//! Messages for the `PoolCoordinator` actor.
-
-use std::collections::BTreeMap;
-
-use distribution::types::NodeId;
-use shared_types::ContentHash;
-
-/// Messages handled by the `PoolCoordinator` actor.
-#[derive(Debug, Clone)]
-pub enum PoolCoordinatorMsg {
-    // ── User-facing operations ──────────────────────────────────────────
-    /// Store data in the pool (placement-aware).
-    PoolPut {
-        data: Vec<u8>,
-        name: Option<String>,
-        tags: BTreeMap<String, String>,
-        reply_to: swactor::actor::ActorAddress,
-    },
-    /// Retrieve data from the pool (location-aware).
-    PoolGet {
-        content_hash: ContentHash,
-        reply_to: swactor::actor::ActorAddress,
-    },
-    /// Delete data from the pool.
-    PoolDelete {
-        content_hash: ContentHash,
-        reply_to: swactor::actor::ActorAddress,
-    },
-    /// List objects in the pool.
-    PoolList {
-        name_filter: Option<String>,
-        reply_to: swactor::actor::ActorAddress,
-    },
-    /// Pool status (members, capacity, content count).
-    PoolStatus {
-        reply_to: swactor::actor::ActorAddress,
-    },
-
-    // ── Pool lifecycle ──────────────────────────────────────────────────
-    /// Join the pool.
-    JoinPool {
-        reply_to: swactor::actor::ActorAddress,
-    },
-    /// Leave the pool.
-    LeavePool {
-        reply_to: swactor::actor::ActorAddress,
-    },
-
-    // ── Auth management ─────────────────────────────────────────────────
-    /// Grant a node access to the pool.
-    GrantPoolAccess {
-        target: NodeId,
-        reply_to: swactor::actor::ActorAddress,
-    },
-    /// Revoke a node's access to the pool.
-    RevokePoolAccess {
-        target: NodeId,
-        reply_to: swactor::actor::ActorAddress,
-    },
-
-    // ── Periodic ────────────────────────────────────────────────────────
-    /// Periodic tick: announce capacity, drive dissemination.
-    PoolTick,
-}
-
-/// Pool-specific response variants.
-#[derive(Debug, Clone)]
-pub enum PoolResponse {
-    /// Pool status snapshot.
-    PoolStatus {
-        pool_name: String,
-        pool_id_hex: String,
-        member_count: usize,
-        content_count: usize,
-        total_bytes: u64,
-        used_bytes: u64,
-        members: Vec<String>,
-    },
-}
diff --git a/crates/datastore/src/pool/mod.rs b/crates/datastore/src/pool/mod.rs
deleted file mode 100644
index e9d8ae3..0000000
--- a/crates/datastore/src/pool/mod.rs
+++ /dev/null
@@ -1,8 +0,0 @@
-//! Pooled datastore protocol.
-//!
-//! A shared storage pool where multiple nodes contribute storage capacity
-//! and converge on a shared view of what content lives where.
-
-pub mod disseminator;
-pub mod messages;
-pub mod coordinator;
diff --git a/crates/datastore/src/storage/mod.rs b/crates/datastore/src/storage/mod.rs
index ca27b63..3a55359 100644
--- a/crates/datastore/src/storage/mod.rs
+++ b/crates/datastore/src/storage/mod.rs
@@ -98,11 +98,10 @@ impl FilesystemBackend {
                     continue;
                 };
                 for file in files.flatten() {
-                    if let Some(name) = file.file_name().to_str() {
-                        if let Some(hash) = ContentHash::from_hex(name) {
+                    if let Some(name) = file.file_name().to_str()
+                        && let Some(hash) = ContentHash::from_hex(name) {
                             self.chunk_index.insert(hash);
                         }
-                    }
                 }
             }
         }
diff --git a/crates/streams/src/accept.rs b/crates/datastore/src/streams/accept.rs
similarity index 96%
rename from crates/streams/src/accept.rs
rename to crates/datastore/src/streams/accept.rs
index 93ab644..35b62f3 100644
--- a/crates/streams/src/accept.rs
+++ b/crates/datastore/src/streams/accept.rs
@@ -5,8 +5,8 @@ use iroh::endpoint::Connection;
 use swactor::actor::ActorAddress;
 use swactor::runtime::Runtime;
 
-use crate::messages::{OneShot, StreamManagerMsg};
-use crate::wire;
+use crate::streams::messages::{OneShot, StreamManagerMsg};
+use crate::streams::wire;
 
 /// Spawn a bridge task that processes incoming stream connections and
 /// forwards them to the StreamManager actor.
diff --git a/crates/streams/src/buffer.rs b/crates/datastore/src/streams/buffer.rs
similarity index 100%
rename from crates/streams/src/buffer.rs
rename to crates/datastore/src/streams/buffer.rs
diff --git a/crates/streams/src/channel.rs b/crates/datastore/src/streams/channel.rs
similarity index 93%
rename from crates/streams/src/channel.rs
rename to crates/datastore/src/streams/channel.rs
index fcdee38..744515b 100644
--- a/crates/streams/src/channel.rs
+++ b/crates/datastore/src/streams/channel.rs
@@ -1,5 +1,5 @@
-use crate::buffer::FrameBuf;
-use crate::types::StreamError;
+use crate::streams::buffer::FrameBuf;
+use crate::streams::types::StreamError;
 
 /// Commands sent from the actor to the send-side data-plane task.
 pub enum SendCommand {
diff --git a/crates/streams/src/connection.rs b/crates/datastore/src/streams/connection.rs
similarity index 91%
rename from crates/streams/src/connection.rs
rename to crates/datastore/src/streams/connection.rs
index 36ec1f6..b5cd974 100644
--- a/crates/streams/src/connection.rs
+++ b/crates/datastore/src/streams/connection.rs
@@ -3,8 +3,8 @@ use std::collections::HashMap;
 use iroh::endpoint::Connection;
 use iroh::{Endpoint, PublicKey};
 
-use crate::types::StreamError;
-use crate::wire::ALPN;
+use crate::streams::types::StreamError;
+use crate::streams::wire::ALPN;
 
 /// Cache of QUIC connections used for stream data transfer.
 ///
@@ -14,6 +14,12 @@ pub struct StreamConnectionCache {
     connections: HashMap<[u8; 32], Connection>,
 }
 
+impl Default for StreamConnectionCache {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl StreamConnectionCache {
     pub fn new() -> Self {
         StreamConnectionCache {
diff --git a/crates/streams/src/ctx_ext.rs b/crates/datastore/src/streams/ctx_ext.rs
similarity index 87%
rename from crates/streams/src/ctx_ext.rs
rename to crates/datastore/src/streams/ctx_ext.rs
index f68f072..06e870e 100644
--- a/crates/streams/src/ctx_ext.rs
+++ b/crates/datastore/src/streams/ctx_ext.rs
@@ -8,11 +8,11 @@
 
 use swactor::actor::{ActorAddress, Ctx};
 use swactor::runtime::Runtime;
-use swactor_std::CtxNaming;
-use swactor_std::RuntimeNaming;
+use swactor::std::CtxNaming;
+use swactor::std::RuntimeNaming;
 
-use crate::messages::StreamManagerMsg;
-use crate::types::{StreamConfig, StreamError, StreamId, StreamMode};
+use crate::streams::messages::StreamManagerMsg;
+use crate::streams::types::{StreamConfig, StreamError, StreamId, StreamMode};
 
 fn mgr_not_found() -> StreamError {
     StreamError::BrokenPipe("StreamManager not found in name registry".into())
@@ -51,7 +51,7 @@ impl CtxStreams for Ctx<'_> {
         config: StreamConfig,
     ) -> Result<(), StreamError> {
         let mgr = self
-            .where_is(crate::manager::STREAM_MANAGER_NAME)
+            .where_is(crate::streams::manager::STREAM_MANAGER_NAME)
             .ok_or_else(mgr_not_found)?;
         self.send(
             mgr,
@@ -67,7 +67,7 @@ impl CtxStreams for Ctx<'_> {
 
     fn stream_listen(&self, mode: StreamMode) -> Result<(), StreamError> {
         let mgr = self
-            .where_is(crate::manager::STREAM_MANAGER_NAME)
+            .where_is(crate::streams::manager::STREAM_MANAGER_NAME)
             .ok_or_else(mgr_not_found)?;
         self.send(
             mgr,
@@ -81,7 +81,7 @@ impl CtxStreams for Ctx<'_> {
 
     fn stream_accept(&self, stream_id: StreamId) -> Result<(), StreamError> {
         let mgr = self
-            .where_is(crate::manager::STREAM_MANAGER_NAME)
+            .where_is(crate::streams::manager::STREAM_MANAGER_NAME)
             .ok_or_else(mgr_not_found)?;
         self.send(
             mgr,
@@ -95,7 +95,7 @@ impl CtxStreams for Ctx<'_> {
 
     fn stream_reject(&self, stream_id: StreamId) -> Result<(), StreamError> {
         let mgr = self
-            .where_is(crate::manager::STREAM_MANAGER_NAME)
+            .where_is(crate::streams::manager::STREAM_MANAGER_NAME)
             .ok_or_else(mgr_not_found)?;
         self.send(mgr, StreamManagerMsg::Reject { stream_id })
             .map_err(|e| StreamError::BrokenPipe(e.to_string()))
@@ -103,7 +103,7 @@ impl CtxStreams for Ctx<'_> {
 
     fn stream_close(&self, stream_id: StreamId) -> Result<(), StreamError> {
         let mgr = self
-            .where_is(crate::manager::STREAM_MANAGER_NAME)
+            .where_is(crate::streams::manager::STREAM_MANAGER_NAME)
             .ok_or_else(mgr_not_found)?;
         self.send(mgr, StreamManagerMsg::Close { stream_id })
             .map_err(|e| StreamError::BrokenPipe(e.to_string()))
@@ -149,7 +149,7 @@ impl RuntimeStreams for Runtime {
         reply_to: ActorAddress,
     ) -> Result<(), StreamError> {
         let mgr = self
-            .where_is(crate::manager::STREAM_MANAGER_NAME)
+            .where_is(crate::streams::manager::STREAM_MANAGER_NAME)
             .ok_or_else(mgr_not_found)?;
         self.send_to(
             mgr,
@@ -165,7 +165,7 @@ impl RuntimeStreams for Runtime {
 
     fn stream_listen(&self, mode: StreamMode, listener: ActorAddress) -> Result<(), StreamError> {
         let mgr = self
-            .where_is(crate::manager::STREAM_MANAGER_NAME)
+            .where_is(crate::streams::manager::STREAM_MANAGER_NAME)
             .ok_or_else(mgr_not_found)?;
         self.send_to(mgr, StreamManagerMsg::Listen { mode, listener })
             .map_err(|e| StreamError::BrokenPipe(e.to_string()))
@@ -177,7 +177,7 @@ impl RuntimeStreams for Runtime {
         reply_to: ActorAddress,
     ) -> Result<(), StreamError> {
         let mgr = self
-            .where_is(crate::manager::STREAM_MANAGER_NAME)
+            .where_is(crate::streams::manager::STREAM_MANAGER_NAME)
             .ok_or_else(mgr_not_found)?;
         self.send_to(mgr, StreamManagerMsg::Accept { stream_id, reply_to })
             .map_err(|e| StreamError::BrokenPipe(e.to_string()))
@@ -185,7 +185,7 @@ impl RuntimeStreams for Runtime {
 
     fn stream_reject(&self, stream_id: StreamId) -> Result<(), StreamError> {
         let mgr = self
-            .where_is(crate::manager::STREAM_MANAGER_NAME)
+            .where_is(crate::streams::manager::STREAM_MANAGER_NAME)
             .ok_or_else(mgr_not_found)?;
         self.send_to(mgr, StreamManagerMsg::Reject { stream_id })
             .map_err(|e| StreamError::BrokenPipe(e.to_string()))
@@ -193,7 +193,7 @@ impl RuntimeStreams for Runtime {
 
     fn stream_close(&self, stream_id: StreamId) -> Result<(), StreamError> {
         let mgr = self
-            .where_is(crate::manager::STREAM_MANAGER_NAME)
+            .where_is(crate::streams::manager::STREAM_MANAGER_NAME)
             .ok_or_else(mgr_not_found)?;
         self.send_to(mgr, StreamManagerMsg::Close { stream_id })
             .map_err(|e| StreamError::BrokenPipe(e.to_string()))
diff --git a/crates/streams/src/data_plane.rs b/crates/datastore/src/streams/data_plane.rs
similarity index 97%
rename from crates/streams/src/data_plane.rs
rename to crates/datastore/src/streams/data_plane.rs
index 437669f..8c954c9 100644
--- a/crates/streams/src/data_plane.rs
+++ b/crates/datastore/src/streams/data_plane.rs
@@ -1,11 +1,11 @@
 use tokio::io::{AsyncReadExt, AsyncWriteExt};
 use tokio::sync::mpsc;
 
-use crate::buffer::BufferPool;
-use crate::channel::{RecvEvent, SendCommand};
-use crate::notify::NotifySink;
-use crate::types::StreamError;
-use crate::wire;
+use crate::streams::buffer::BufferPool;
+use crate::streams::channel::{RecvEvent, SendCommand};
+use crate::streams::notify::NotifySink;
+use crate::streams::types::StreamError;
+use crate::streams::wire;
 
 /// A send-side data-plane task for a single stripe.
 ///
@@ -215,8 +215,8 @@ where
 #[cfg(test)]
 mod tests {
     use super::*;
-    use crate::buffer::BufferPool;
-    use crate::types::StreamId;
+    use crate::streams::buffer::BufferPool;
+    use crate::streams::types::StreamId;
 
     fn make_test_pool(count: usize, capacity: usize) -> BufferPool {
         BufferPool::new(count, capacity)
@@ -425,7 +425,7 @@ mod tests {
     /// Notification coalescing through NotifySink.
     #[tokio::test]
     async fn notification_coalescing() {
-        use crate::notify::*;
+        use crate::streams::notify::*;
         use std::sync::atomic::{AtomicUsize, Ordering};
         use std::sync::Arc;
 
@@ -459,8 +459,8 @@ mod tests {
     /// Backpressure: when channel and active buffer are saturated, try_write returns 0.
     #[tokio::test]
     async fn send_backpressure() {
-        use crate::handle::create_stream_handle;
-        use crate::types::StreamConfig;
+        use crate::streams::handle::create_stream_handle;
+        use crate::streams::types::StreamConfig;
 
         let config = StreamConfig {
             stripe_count: 1,
diff --git a/crates/streams/src/handle.rs b/crates/datastore/src/streams/handle.rs
similarity index 95%
rename from crates/streams/src/handle.rs
rename to crates/datastore/src/streams/handle.rs
index 17caef3..db5b4aa 100644
--- a/crates/streams/src/handle.rs
+++ b/crates/datastore/src/streams/handle.rs
@@ -1,8 +1,8 @@
 use tokio::sync::mpsc;
 
-use crate::buffer::{BufferPool, FrameBuf};
-use crate::channel::{RecvCommand, RecvEvent, SendCommand, SendEvent};
-use crate::types::{StreamConfig, StreamError, StreamId};
+use crate::streams::buffer::{BufferPool, FrameBuf};
+use crate::streams::channel::{RecvCommand, RecvEvent, SendCommand, SendEvent};
+use crate::streams::types::{StreamConfig, StreamError, StreamId};
 
 /// Sending half of a stream. Owned by the actor that sends data.
 ///
@@ -67,7 +67,7 @@ impl SendHalf {
     /// Flush any partially-filled buffer to the data-plane task.
     pub fn flush(&mut self) -> Result<(), StreamError> {
         if let Some(buf) = self.active_buf.take() {
-            if buf.remaining() > 0 || buf.written().len() > 0 {
+            if buf.remaining() > 0 || !buf.written().is_empty() {
                 self.cmd_tx
                     .try_send(SendCommand::Data(buf))
                     .map_err(|_| StreamError::Disconnected)?;
@@ -84,7 +84,7 @@ impl SendHalf {
     /// Close the send side of the stream.
     pub fn close(&mut self) -> Result<(), StreamError> {
         if let Some(buf) = self.active_buf.take() {
-            if buf.written().len() > 0 {
+            if !buf.written().is_empty() {
                 let _ = self.cmd_tx.try_send(SendCommand::Data(buf));
             } else {
                 self.pool.checkin(buf);
@@ -160,11 +160,10 @@ impl RecvHalf {
 
     /// Check if data is available without consuming it.
     pub fn has_data(&self) -> bool {
-        if let Some(buf) = &self.active_buf {
-            if buf.remaining() > 0 {
+        if let Some(buf) = &self.active_buf
+            && buf.remaining() > 0 {
                 return true;
             }
-        }
         !self.evt_rx.is_empty()
     }
 
diff --git a/crates/streams/src/manager.rs b/crates/datastore/src/streams/manager.rs
similarity index 94%
rename from crates/streams/src/manager.rs
rename to crates/datastore/src/streams/manager.rs
index 04b834d..18d8d3b 100644
--- a/crates/streams/src/manager.rs
+++ b/crates/datastore/src/streams/manager.rs
@@ -7,12 +7,12 @@ use tokio::io::AsyncWriteExt;
 use swactor::actor::{ActorAddress, ActorInterface, Ctx, Down};
 use swactor::runtime::Runtime;
 
-use crate::connection::StreamConnectionCache;
-use crate::data_plane;
-use crate::handle::{create_stream_handle, StreamHandle};
-use crate::messages::{OneShot, StreamManagerMsg, StreamNotification};
-use crate::types::{StreamConfig, StreamError, StreamId, StreamMode};
-use crate::wire;
+use crate::streams::connection::StreamConnectionCache;
+use crate::streams::data_plane;
+use crate::streams::handle::{create_stream_handle, StreamHandle};
+use crate::streams::messages::{OneShot, StreamManagerMsg, StreamNotification};
+use crate::streams::types::{StreamConfig, StreamError, StreamId, StreamMode};
+use crate::streams::wire;
 
 /// Well-known name for the StreamManager actor in the name registry.
 pub const STREAM_MANAGER_NAME: &str = "StreamManager";
@@ -250,7 +250,7 @@ impl StreamManager {
     fn handle_listen(&mut self, mode: StreamMode, listener: ActorAddress) {
         self.listeners
             .entry(mode)
-            .or_insert_with(Vec::new)
+            .or_default()
             .push(listener);
     }
 
@@ -398,7 +398,7 @@ async fn open_stream_async(
                     Ok(send_stream) => writers.push(send_stream),
                     Err(e) => {
                         let _ = evt_tx
-                            .send(crate::channel::SendEvent::Error(StreamError::BrokenPipe(
+                            .send(crate::streams::channel::SendEvent::Error(StreamError::BrokenPipe(
                                 format!("open_uni failed: {e}"),
                             )))
                             .await;
@@ -411,13 +411,13 @@ async fn open_stream_async(
             let mut stripe_idx = 0;
             while let Some(cmd) = cmd_rx.recv().await {
                 match cmd {
-                    crate::channel::SendCommand::Data(buf) => {
+                    crate::streams::channel::SendCommand::Data(buf) => {
                         let frame = wire::encode_data_frame(buf.written());
                         let writer = &mut writers[stripe_idx];
                         if let Err(e) = writer.write_all(&frame).await {
                             pool.checkin(buf);
                             let _ = evt_tx
-                                .send(crate::channel::SendEvent::Error(
+                                .send(crate::streams::channel::SendEvent::Error(
                                     StreamError::BrokenPipe(e.to_string()),
                                 ))
                                 .await;
@@ -426,12 +426,12 @@ async fn open_stream_async(
                         pool.checkin(buf);
                         stripe_idx = (stripe_idx + 1) % sc;
                     }
-                    crate::channel::SendCommand::Flush => {
+                    crate::streams::channel::SendCommand::Flush => {
                         for writer in &mut writers {
                             let _ = writer.flush().await;
                         }
                     }
-                    crate::channel::SendCommand::Close => {
+                    crate::streams::channel::SendCommand::Close => {
                         let sentinel = wire::encode_end_of_stripe();
                         for writer in &mut writers {
                             let _ = writer.write_all(&sentinel).await;
@@ -532,7 +532,7 @@ async fn accept_stream_async(
                     Ok(send_stream) => writers.push(send_stream),
                     Err(e) => {
                         let _ = evt_tx
-                            .send(crate::channel::SendEvent::Error(StreamError::BrokenPipe(
+                            .send(crate::streams::channel::SendEvent::Error(StreamError::BrokenPipe(
                                 format!("open_uni failed: {e}"),
                             )))
                             .await;
@@ -544,13 +544,13 @@ async fn accept_stream_async(
             let mut stripe_idx = 0;
             while let Some(cmd) = cmd_rx.recv().await {
                 match cmd {
-                    crate::channel::SendCommand::Data(buf) => {
+                    crate::streams::channel::SendCommand::Data(buf) => {
                         let frame = wire::encode_data_frame(buf.written());
                         let writer = &mut writers[stripe_idx];
                         if let Err(e) = writer.write_all(&frame).await {
                             pool.checkin(buf);
                             let _ = evt_tx
-                                .send(crate::channel::SendEvent::Error(
+                                .send(crate::streams::channel::SendEvent::Error(
                                     StreamError::BrokenPipe(e.to_string()),
                                 ))
                                 .await;
@@ -559,12 +559,12 @@ async fn accept_stream_async(
                         pool.checkin(buf);
                         stripe_idx = (stripe_idx + 1) % sc;
                     }
-                    crate::channel::SendCommand::Flush => {
+                    crate::streams::channel::SendCommand::Flush => {
                         for writer in &mut writers {
                             let _ = writer.flush().await;
                         }
                     }
-                    crate::channel::SendCommand::Close => {
+                    crate::streams::channel::SendCommand::Close => {
                         let sentinel = wire::encode_end_of_stripe();
                         for writer in &mut writers {
                             let _ = writer.write_all(&sentinel).await;
diff --git a/crates/streams/src/messages.rs b/crates/datastore/src/streams/messages.rs
similarity index 97%
rename from crates/streams/src/messages.rs
rename to crates/datastore/src/streams/messages.rs
index 907ae21..09f8a13 100644
--- a/crates/streams/src/messages.rs
+++ b/crates/datastore/src/streams/messages.rs
@@ -4,8 +4,8 @@ use std::sync::{Arc, Mutex};
 use iroh::endpoint::Connection;
 use swactor::actor::ActorAddress;
 
-use crate::handle::StreamHandle;
-use crate::types::{StreamConfig, StreamError, StreamId, StreamMode};
+use crate::streams::handle::StreamHandle;
+use crate::streams::types::{StreamConfig, StreamError, StreamId, StreamMode};
 
 // ─── OneShot ────────────────────────────────────────────────────────────
 
diff --git a/crates/streams/src/lib.rs b/crates/datastore/src/streams/mod.rs
similarity index 100%
rename from crates/streams/src/lib.rs
rename to crates/datastore/src/streams/mod.rs
diff --git a/crates/streams/src/notify.rs b/crates/datastore/src/streams/notify.rs
similarity index 96%
rename from crates/streams/src/notify.rs
rename to crates/datastore/src/streams/notify.rs
index bd20a07..de47484 100644
--- a/crates/streams/src/notify.rs
+++ b/crates/datastore/src/streams/notify.rs
@@ -65,7 +65,7 @@ pub enum StreamEventKind {
 /// A lightweight notification message injected into an actor's mailbox.
 #[derive(Debug, Clone)]
 pub struct StreamEvent {
-    pub stream_id: crate::types::StreamId,
+    pub stream_id: crate::streams::types::StreamId,
     pub kind: StreamEventKind,
 }
 
@@ -77,13 +77,13 @@ pub struct StreamEvent {
 pub struct NotifySink {
     flag: Arc<NotifyFlag>,
     inject: Box<dyn Fn(StreamEvent) + Send + Sync>,
-    stream_id: crate::types::StreamId,
+    stream_id: crate::streams::types::StreamId,
 }
 
 impl NotifySink {
     pub fn new(
         flag: Arc<NotifyFlag>,
-        stream_id: crate::types::StreamId,
+        stream_id: crate::streams::types::StreamId,
         inject: impl Fn(StreamEvent) + Send + Sync + 'static,
     ) -> Self {
         NotifySink {
diff --git a/crates/streams/src/types.rs b/crates/datastore/src/streams/types.rs
similarity index 100%
rename from crates/streams/src/types.rs
rename to crates/datastore/src/streams/types.rs
diff --git a/crates/streams/src/wire.rs b/crates/datastore/src/streams/wire.rs
similarity index 99%
rename from crates/streams/src/wire.rs
rename to crates/datastore/src/streams/wire.rs
index ff84c7b..6f33ea0 100644
--- a/crates/streams/src/wire.rs
+++ b/crates/datastore/src/streams/wire.rs
@@ -1,4 +1,4 @@
-use crate::types::{StreamConfig, StreamError, StreamId, StreamMode};
+use crate::streams::types::{StreamConfig, StreamError, StreamId, StreamMode};
 
 /// Magic bytes identifying the swactor stream protocol.
 pub const MAGIC: [u8; 2] = [0x53, 0x57];
diff --git a/crates/datastore/src/types.rs b/crates/datastore/src/types.rs
index 6a3f66f..d41c12b 100644
--- a/crates/datastore/src/types.rs
+++ b/crates/datastore/src/types.rs
@@ -8,10 +8,9 @@ use std::path::PathBuf;
 
 use serde::{Deserialize, Serialize};
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
-// Re-export the shared ContentHash — single canonical type across the crate ecosystem.
-pub use shared_types::ContentHash;
+pub use crate::content_hash::ContentHash;
 
 // ─── ObjectEntry ────────────────────────────────────────────────────────────
 
diff --git a/crates/datastore/tests/acl_persistence_tests.rs b/crates/datastore/tests/acl_persistence_tests.rs
index 574cab6..21f48f2 100644
--- a/crates/datastore/tests/acl_persistence_tests.rs
+++ b/crates/datastore/tests/acl_persistence_tests.rs
@@ -2,7 +2,7 @@
 
 use std::collections::{HashMap, HashSet};
 
-use distribution::crypto::Keypair;
+use swactor_datastore::crypto::Keypair;
 use swactor_datastore::auth::AccessControlList;
 
 // ═══════════════════════════════════════════════════════════════════════════
diff --git a/crates/datastore/tests/auth_scenario_tests.rs b/crates/datastore/tests/auth_scenario_tests.rs
index d3250cd..d63a16a 100644
--- a/crates/datastore/tests/auth_scenario_tests.rs
+++ b/crates/datastore/tests/auth_scenario_tests.rs
@@ -2,8 +2,8 @@
 
 use std::collections::{HashMap, HashSet};
 
-use distribution::crypto::Keypair;
-use shared_types::ContentHash;
+use swactor_datastore::crypto::Keypair;
+use swactor_datastore::content_hash::ContentHash;
 use swactor_datastore::auth::{
     sign_request, AccessControlList, AuthzEngine, AuthzResult, DatastoreAction, DeniedReason,
     SignedRequestPayload,
diff --git a/crates/datastore/tests/auth_state_machine.rs b/crates/datastore/tests/auth_state_machine.rs
index e090e94..1d0eba9 100644
--- a/crates/datastore/tests/auth_state_machine.rs
+++ b/crates/datastore/tests/auth_state_machine.rs
@@ -18,7 +18,7 @@ use std::collections::{HashMap, HashSet};
 use proptest::prelude::*;
 use proptest_state_machine::{prop_state_machine, ReferenceStateMachine, StateMachineTest};
 
-use distribution::crypto::Keypair;
+use swactor_datastore::crypto::Keypair;
 use swactor_datastore::auth::{
     sign_request, AccessControlList, AuthzEngine, AuthzResult, DatastoreAction, DeniedReason,
     SignedRequestPayload,
diff --git a/crates/datastore/tests/common/mod.rs b/crates/datastore/tests/common/mod.rs
index 0c7331a..4a6ea4d 100644
--- a/crates/datastore/tests/common/mod.rs
+++ b/crates/datastore/tests/common/mod.rs
@@ -7,7 +7,7 @@ use std::sync::Arc;
 
 use swactor::actor::{ActorAddress, Message};
 use swactor::runtime::{Inbox, Runtime, RuntimeConfig};
-use swactor_std::StdExtension;
+use swactor::std::StdExtension;
 
 use swactor_datastore::chunking::chunk_blob;
 use swactor_datastore::messages::{BlobStoreMsg, DatastoreResponse, MetadataMsg};
@@ -15,7 +15,7 @@ use swactor_datastore::storage::InMemoryBackend;
 use swactor_datastore::types::{ChunkRef, ContentHash, DatastoreConfig, ObjectEntry, ObjectManifest};
 use swactor_datastore::{BlobStoreActor, DatastoreNode, MetadataActor, TransferActor};
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 /// Create a single-threaded runtime with StdExtension.
 pub fn test_runtime() -> Runtime {
diff --git a/crates/datastore/tests/dashboard_integration_test.rs b/crates/datastore/tests/dashboard_integration_test.rs
deleted file mode 100644
index 8d89d8e..0000000
--- a/crates/datastore/tests/dashboard_integration_test.rs
+++ /dev/null
@@ -1,205 +0,0 @@
-//! End-to-end integration test: spins up a datastore node with an HTTP API
-//! **and** a runtime dashboard, performs CRUD over HTTP, then verifies:
-//!
-//! - `DatastoreMetrics::snapshot()` reflects the operations
-//! - Dashboard `/datastore` serves HTML
-//! - Dashboard `/api/datastore` returns a JSON snapshot matching the metrics
-
-use std::sync::Arc;
-use std::thread;
-use std::time::Duration;
-
-use swactor::config::RuntimeConfig;
-use swactor::runtime::Runtime;
-
-use swactor_datastore::actors::{BlobStoreActor, DatastoreNode, MetadataActor};
-use swactor_datastore::api::start_api_server;
-use swactor_datastore::metrics::DatastoreMetrics;
-use swactor_datastore::storage::InMemoryBackend;
-use swactor_datastore::DatastoreConfig;
-
-use distribution::types::NodeId;
-
-fn find_free_port() -> u16 {
-    std::net::TcpListener::bind("127.0.0.1:0")
-        .unwrap()
-        .local_addr()
-        .unwrap()
-        .port()
-}
-
-/// Scenario: datastore CRUD → dashboard reflects live operation metrics.
-///
-/// Story:
-///   Two files are uploaded. One is fetched (metadata + data). The other
-///   is deleted. Afterwards we check that the metrics snapshot, the
-///   dashboard HTML page, and the dashboard JSON API all agree on what
-///   happened.
-#[test]
-fn dashboard_reflects_datastore_operations() {
-    let api_port = find_free_port();
-    let dash_port = find_free_port();
-    let api_base = format!("http://127.0.0.1:{api_port}");
-    let dash_base = format!("http://127.0.0.1:{dash_port}");
-
-    // ── Infrastructure: runtime + actors + dashboard + API ──────────────
-
-    let dash = dashboard::start_dashboard(dashboard::DashboardConfig {
-        port: dash_port,
-        ..Default::default()
-    });
-    dash.start_http_standalone();
-
-    let collector = dashboard::collector::StatsCollector::new(2);
-    let mut rt = Runtime::new(RuntimeConfig {
-        num_threads: 2,
-        max_actors: 1024,
-        channel_buffer_size: 2000,
-        ..Default::default()
-    });
-    rt.set_stats_hook(collector.clone());
-
-    let node_id = NodeId([0xBB; 32]);
-    let config = DatastoreConfig {
-        chunk_size: 1_048_576,
-        gc_interval: 1000,
-        ..Default::default()
-    };
-
-    let backend: Box<dyn swactor_datastore::StorageBackend> = Box::new(InMemoryBackend::new());
-    let blob_store_addr = rt.spawn(BlobStoreActor::new(backend)).unwrap();
-
-    let mut metadata = MetadataActor::new(node_id, &config);
-    metadata.set_blob_store(blob_store_addr);
-    let metadata_addr = rt.spawn(metadata).unwrap();
-
-    let datastore_node = DatastoreNode::new(node_id, blob_store_addr, metadata_addr, config);
-    let datastore_addr = rt.spawn(datastore_node).unwrap();
-
-    let handle = rt.run().expect("failed to start runtime");
-
-    let metrics = Arc::new(DatastoreMetrics::new());
-    let node_hex: String = node_id.0.iter().map(|b| format!("{b:02x}")).collect();
-    metrics.set_node_id(node_hex);
-
-    dash.set_runtime(handle.runtime.clone(), collector);
-    dash.set_datastore(
-        Arc::clone(&metrics)
-            as Arc<dyn dashboard::datastore_collector::DatastoreStatsProvider>,
-    );
-
-    let (api_shutdown, _peers) = start_api_server(
-        handle.runtime.clone(),
-        datastore_addr,
-        metadata_addr,
-        blob_store_addr,
-        None,
-        api_port,
-        Arc::clone(&metrics),
-    );
-
-    thread::sleep(Duration::from_millis(300));
-
-    let result = std::panic::catch_unwind(std::panic::AssertUnwindSafe(|| {
-        run_dashboard_scenario(&api_base, &dash_base, &metrics);
-    }));
-
-    // Cleanup
-    api_shutdown.store(true, std::sync::atomic::Ordering::Relaxed);
-    dash.shutdown();
-    handle.shutdown();
-    handle.join();
-
-    if let Err(e) = result {
-        std::panic::resume_unwind(e);
-    }
-}
-
-fn run_dashboard_scenario(api: &str, dash: &str, metrics: &Arc<DatastoreMetrics>) {
-    // ── 1. Upload two objects ───────────────────────────────────────────
-
-    let put_a: serde_json::Value = ureq::post(&format!("{api}/api/put?name=alpha"))
-        .send_bytes(b"payload-alpha")
-        .expect("put A failed")
-        .into_json()
-        .unwrap();
-    let hash_a = put_a["content_hash"].as_str().unwrap().to_string();
-
-    let _put_b: serde_json::Value = ureq::post(&format!("{api}/api/put?name=bravo"))
-        .send_bytes(b"payload-bravo")
-        .expect("put B failed")
-        .into_json()
-        .unwrap();
-    let hash_b = _put_b["content_hash"].as_str().unwrap().to_string();
-
-    // ── 2. GET object A (metadata + raw data → 2 get ops) ──────────────
-
-    let _: serde_json::Value = ureq::get(&format!("{api}/api/get?hash={hash_a}"))
-        .call()
-        .unwrap()
-        .into_json()
-        .unwrap();
-
-    let data_resp = ureq::get(&format!("{api}/api/data?hash={hash_a}"))
-        .call()
-        .unwrap();
-    let mut body = Vec::new();
-    data_resp.into_reader().read_to_end(&mut body).unwrap();
-    assert_eq!(body, b"payload-alpha", "downloaded data should match");
-
-    // ── 3. DELETE object B ──────────────────────────────────────────────
-
-    let _: serde_json::Value = ureq::post(&format!("{api}/api/delete?hash={hash_b}"))
-        .call()
-        .unwrap()
-        .into_json()
-        .unwrap();
-
-    // ── 4. Assert: in-process metrics snapshot ──────────────────────────
-
-    let snap = metrics.snapshot();
-
-    assert_eq!(snap.put_ops, 2, "two puts recorded");
-    assert_eq!(snap.get_ops, 2, "metadata-get + data-get recorded");
-    assert_eq!(snap.delete_ops, 1, "one delete recorded");
-    assert_eq!(snap.objects.len(), 1, "only alpha remains after deleting bravo");
-    assert_eq!(snap.objects[0].hash, hash_a);
-    assert!(
-        snap.recent_events.len() >= 5,
-        "at least 5 events (2 put + 2 get + 1 delete), got {}",
-        snap.recent_events.len()
-    );
-
-    // ── 5. Assert: dashboard /datastore serves HTML ─────────────────────
-
-    let page = ureq::get(&format!("{dash}/datastore")).call().unwrap();
-    assert_eq!(page.status(), 200);
-    assert!(
-        page.header("Content-Type")
-            .unwrap_or("")
-            .contains("text/html"),
-    );
-    let html = page.into_string().unwrap();
-    assert!(html.contains("Datastore"), "page should mention Datastore");
-
-    // ── 6. Assert: /api/datastore JSON matches metrics ──────────────────
-
-    let ds: serde_json::Value = ureq::get(&format!("{dash}/api/datastore"))
-        .call()
-        .unwrap()
-        .into_json()
-        .unwrap();
-
-    assert_eq!(ds["put_ops"].as_u64().unwrap(), 2);
-    assert_eq!(ds["get_ops"].as_u64().unwrap(), 2);
-    assert_eq!(ds["delete_ops"].as_u64().unwrap(), 1);
-
-    let objects = ds["objects"].as_array().expect("objects should be array");
-    assert_eq!(objects.len(), 1);
-    assert_eq!(objects[0]["hash"].as_str().unwrap(), hash_a);
-
-    let events = ds["recent_events"]
-        .as_array()
-        .expect("recent_events should be array");
-    assert!(events.len() >= 5);
-}
diff --git a/crates/datastore/tests/datastore_node_tests.rs b/crates/datastore/tests/datastore_node_tests.rs
index 01d75ae..0b7c73a 100644
--- a/crates/datastore/tests/datastore_node_tests.rs
+++ b/crates/datastore/tests/datastore_node_tests.rs
@@ -14,7 +14,7 @@ use swactor_datastore::types::ContentHash;
 use swactor_datastore::messages::{DatastoreResponse, GetChunkRequest};
 use swactor_datastore::{reassemble_blob, verify_integrity};
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 // ═══════════════════════════════════════════════════════════════════════════
 // Put & Retrieve
diff --git a/crates/datastore/tests/datastore_tests.rs b/crates/datastore/tests/datastore_tests.rs
index cb87f66..02d4160 100644
--- a/crates/datastore/tests/datastore_tests.rs
+++ b/crates/datastore/tests/datastore_tests.rs
@@ -9,7 +9,7 @@ use swactor_datastore::types::{
     ChunkRef, ContentHash, DatastoreConfig, ObjectEntry, ObjectManifest,
 };
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 // ═══════════════════════════════════════════════════════════════════════════
 // Scenario: Content-addressing round-trip
diff --git a/crates/datastore/tests/gateway_tests.rs b/crates/datastore/tests/gateway_tests.rs
index 881f87b..b246a6a 100644
--- a/crates/datastore/tests/gateway_tests.rs
+++ b/crates/datastore/tests/gateway_tests.rs
@@ -10,8 +10,8 @@ use std::time::{SystemTime, UNIX_EPOCH};
 
 use common::{spawn_blob_store, spawn_metadata, test_runtime, tick_until_recv};
 
-use distribution::crypto::Keypair;
-use shared_types::ContentHash;
+use swactor_datastore::crypto::Keypair;
+use swactor_datastore::content_hash::ContentHash;
 use swactor_datastore::actors::{DatastoreNode, GatewayActor};
 use swactor_datastore::auth::{
     sign_request, AccessControlList, AuthzEngine, DatastoreAction, DeniedReason,
diff --git a/crates/datastore/tests/http_auth_integration.rs b/crates/datastore/tests/http_auth_integration.rs
index aa0aba6..49d567f 100644
--- a/crates/datastore/tests/http_auth_integration.rs
+++ b/crates/datastore/tests/http_auth_integration.rs
@@ -3,13 +3,14 @@
 //! Spins up a full actor runtime with GatewayActor, starts the HTTP API server,
 //! and uses ureq to prove that authorized requests succeed while unauthorized
 //! ones get 403 and missing-auth requests get 401.
+#![cfg(feature = "node")]
 
 use std::collections::{BTreeMap, HashMap, HashSet};
 use std::sync::atomic::Ordering;
 use std::time::{Duration, SystemTime, UNIX_EPOCH};
 
-use distribution::crypto::Keypair;
-use shared_types::ContentHash;
+use swactor_datastore::crypto::Keypair;
+use swactor_datastore::content_hash::ContentHash;
 use swactor::config::RuntimeConfig;
 use swactor::runtime::Runtime;
 use swactor_datastore::actors::{BlobStoreActor, DatastoreNode, GatewayActor, MetadataActor};
diff --git a/crates/datastore/tests/metadata_tests.rs b/crates/datastore/tests/metadata_tests.rs
index b1d2477..3281da5 100644
--- a/crates/datastore/tests/metadata_tests.rs
+++ b/crates/datastore/tests/metadata_tests.rs
@@ -7,7 +7,7 @@ use std::collections::{BTreeMap, HashSet};
 use swactor_datastore::messages::{DatastoreResponse, MetadataMsg};
 use swactor_datastore::types::{ContentHash, ObjectEntry};
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 use common::{
     make_entry, make_manifest, spawn_metadata, test_node_id, test_runtime, tick_n, tick_until_recv,
diff --git a/crates/datastore/tests/multi_node_tests.rs b/crates/datastore/tests/multi_node_tests.rs
index 09141bb..7d126d9 100644
--- a/crates/datastore/tests/multi_node_tests.rs
+++ b/crates/datastore/tests/multi_node_tests.rs
@@ -11,7 +11,7 @@ use swactor_datastore::messages::{MetadataMsg, TransferMsg};
 use swactor_datastore::types::ContentHash;
 use swactor_datastore::TransferActor;
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 // ═══════════════════════════════════════════════════════════════════════════
 // Phase 3: Metadata dissemination tests
diff --git a/crates/datastore/tests/pool_tests.rs b/crates/datastore/tests/pool_tests.rs
deleted file mode 100644
index 9607c65..0000000
--- a/crates/datastore/tests/pool_tests.rs
+++ /dev/null
@@ -1,341 +0,0 @@
-//! Pool protocol integration tests.
-//!
-//! Tests the pool disseminator's convergence behavior, the gossip channel
-//! integration, and the coordinator actor's lifecycle.
-
-use std::sync::{Arc, Mutex};
-
-use distribution::gossip_channel::{GossipChannel, serialize_each};
-use distribution::types::NodeId;
-use shared_types::ContentHash;
-use shared_types::pool::*;
-use swactor_datastore::pool::disseminator::{PoolDisseminator, SharedPoolChannel};
-
-fn node_id(b: u8) -> NodeId {
-    NodeId([b; 32])
-}
-
-fn make_pool_disseminator(node_byte: u8) -> PoolDisseminator {
-    PoolDisseminator::new(
-        PoolId::from_name("test-pool"),
-        "test-pool".into(),
-        node_id(node_byte),
-        3,
-    )
-}
-
-// ─── Disseminator convergence scenarios ────────────────────────────────────
-
-/// Two nodes join a pool and exchange gossip until they converge
-/// on identical state.
-#[test]
-fn two_nodes_converge_on_membership() {
-    let mut d1 = make_pool_disseminator(1);
-    let mut d2 = make_pool_disseminator(2);
-
-    d1.join(2);
-    d2.join(2);
-
-    // Simulate 3 gossip rounds
-    for _ in 0..3 {
-        let mut ch1 = SharedPoolChannel::new(Arc::new(Mutex::new(d1)));
-        let mut ch2 = SharedPoolChannel::new(Arc::new(Mutex::new(d2)));
-
-        let bytes1 = ch1.take_pending_bytes(100);
-        let bytes2 = ch2.take_pending_bytes(100);
-
-        ch1.apply_incoming_bytes(&bytes2, 2);
-        ch2.apply_incoming_bytes(&bytes1, 2);
-
-        d1 = Arc::try_unwrap(ch1.into_inner()).unwrap().into_inner().unwrap();
-        d2 = Arc::try_unwrap(ch2.into_inner()).unwrap().into_inner().unwrap();
-    }
-
-    assert_eq!(d1.member_count(), 2);
-    assert_eq!(d2.member_count(), 2);
-}
-
-/// Content announced on one node is visible on another after gossip.
-#[test]
-fn content_location_propagates_via_gossip() {
-    let mut d1 = make_pool_disseminator(1);
-    let mut d2 = make_pool_disseminator(2);
-    let hash = ContentHash::of(b"test-content");
-
-    d1.join(2);
-    d2.join(2);
-    d1.announce_content(hash, 2);
-
-    // Gossip d1 → d2
-    let mut ch1 = SharedPoolChannel::new(Arc::new(Mutex::new(d1)));
-    let bytes = ch1.take_pending_bytes(100);
-    let _d1 = Arc::try_unwrap(ch1.into_inner()).unwrap().into_inner().unwrap();
-
-    let mut ch2 = SharedPoolChannel::new(Arc::new(Mutex::new(d2)));
-    ch2.apply_incoming_bytes(&bytes, 2);
-    let d2 = Arc::try_unwrap(ch2.into_inner()).unwrap().into_inner().unwrap();
-
-    assert_eq!(d2.locate_content(&hash), vec![node_id(1)]);
-}
-
-/// A node's leave is propagated and removes it from the active member list
-/// on the receiving node.
-#[test]
-fn leave_propagates_via_gossip() {
-    let mut d1 = make_pool_disseminator(1);
-    let mut d2 = make_pool_disseminator(2);
-
-    d1.join(2);
-    d2.join(2);
-
-    // Exchange so both see each other
-    let mut ch1 = SharedPoolChannel::new(Arc::new(Mutex::new(d1)));
-    let mut ch2 = SharedPoolChannel::new(Arc::new(Mutex::new(d2)));
-    let bytes1 = ch1.take_pending_bytes(100);
-    let bytes2 = ch2.take_pending_bytes(100);
-    ch1.apply_incoming_bytes(&bytes2, 2);
-    ch2.apply_incoming_bytes(&bytes1, 2);
-    d1 = Arc::try_unwrap(ch1.into_inner()).unwrap().into_inner().unwrap();
-    d2 = Arc::try_unwrap(ch2.into_inner()).unwrap().into_inner().unwrap();
-
-    assert_eq!(d1.member_count(), 2);
-    assert_eq!(d2.member_count(), 2);
-
-    // d1 leaves
-    d1.leave(2);
-
-    // Gossip leave to d2
-    let mut ch1 = SharedPoolChannel::new(Arc::new(Mutex::new(d1)));
-    let bytes = ch1.take_pending_bytes(100);
-    let _d1 = Arc::try_unwrap(ch1.into_inner()).unwrap().into_inner().unwrap();
-
-    let mut ch2 = SharedPoolChannel::new(Arc::new(Mutex::new(d2)));
-    ch2.apply_incoming_bytes(&bytes, 2);
-    let d2 = Arc::try_unwrap(ch2.into_inner()).unwrap().into_inner().unwrap();
-
-    assert_eq!(d2.member_count(), 1); // only d2 remains active
-}
-
-/// Content tombstone propagates and removes the location.
-#[test]
-fn content_deletion_propagates() {
-    let mut d1 = make_pool_disseminator(1);
-    let mut d2 = make_pool_disseminator(2);
-    let hash = ContentHash::of(b"ephemeral");
-
-    d1.join(2);
-    d2.join(2);
-    d1.announce_content(hash, 2);
-
-    // Propagate content announcement
-    let mut ch1 = SharedPoolChannel::new(Arc::new(Mutex::new(d1)));
-    let bytes = ch1.take_pending_bytes(100);
-    d1 = Arc::try_unwrap(ch1.into_inner()).unwrap().into_inner().unwrap();
-    let mut ch2 = SharedPoolChannel::new(Arc::new(Mutex::new(d2)));
-    ch2.apply_incoming_bytes(&bytes, 2);
-    d2 = Arc::try_unwrap(ch2.into_inner()).unwrap().into_inner().unwrap();
-
-    assert_eq!(d2.locate_content(&hash).len(), 1);
-
-    // d1 removes content
-    d1.remove_content(hash, 2);
-
-    // Propagate tombstone
-    let mut ch1 = SharedPoolChannel::new(Arc::new(Mutex::new(d1)));
-    let bytes = ch1.take_pending_bytes(100);
-    let _ = Arc::try_unwrap(ch1.into_inner()).unwrap().into_inner().unwrap();
-    let mut ch2 = SharedPoolChannel::new(Arc::new(Mutex::new(d2)));
-    ch2.apply_incoming_bytes(&bytes, 2);
-    d2 = Arc::try_unwrap(ch2.into_inner()).unwrap().into_inner().unwrap();
-
-    assert!(d2.locate_content(&hash).is_empty());
-}
-
-/// ACL grant propagates to other nodes.
-#[test]
-fn acl_grant_propagates() {
-    let mut d1 = make_pool_disseminator(1);
-    let mut d2 = make_pool_disseminator(2);
-
-    d1.grant_access(node_id(3), 2);
-
-    let mut ch1 = SharedPoolChannel::new(Arc::new(Mutex::new(d1)));
-    let bytes = ch1.take_pending_bytes(100);
-    let _ = Arc::try_unwrap(ch1.into_inner()).unwrap().into_inner().unwrap();
-
-    let mut ch2 = SharedPoolChannel::new(Arc::new(Mutex::new(d2)));
-    ch2.apply_incoming_bytes(&bytes, 2);
-    d2 = Arc::try_unwrap(ch2.into_inner()).unwrap().into_inner().unwrap();
-
-    assert!(d2.is_node_authorized(&node_id(3)));
-    assert!(!d2.is_node_authorized(&node_id(4)));
-}
-
-/// Capacity announcement propagates and is reflected in summary.
-#[test]
-fn capacity_propagates_and_summarizes() {
-    let mut d1 = make_pool_disseminator(1);
-    let mut d2 = make_pool_disseminator(2);
-
-    d1.join(2);
-    d2.join(2);
-    d1.announce_capacity(1_000_000, 100_000, 2);
-    d2.announce_capacity(2_000_000, 200_000, 2);
-
-    // Exchange
-    let mut ch1 = SharedPoolChannel::new(Arc::new(Mutex::new(d1)));
-    let mut ch2 = SharedPoolChannel::new(Arc::new(Mutex::new(d2)));
-    let bytes1 = ch1.take_pending_bytes(100);
-    let bytes2 = ch2.take_pending_bytes(100);
-    ch1.apply_incoming_bytes(&bytes2, 2);
-    ch2.apply_incoming_bytes(&bytes1, 2);
-    d1 = Arc::try_unwrap(ch1.into_inner()).unwrap().into_inner().unwrap();
-    d2 = Arc::try_unwrap(ch2.into_inner()).unwrap().into_inner().unwrap();
-
-    let (total1, used1) = d1.pool_capacity_summary();
-    let (total2, used2) = d2.pool_capacity_summary();
-
-    assert_eq!(total1, 3_000_000);
-    assert_eq!(used1, 300_000);
-    assert_eq!(total2, 3_000_000);
-    assert_eq!(used2, 300_000);
-}
-
-/// The node_with_most_free_space query returns the correct node.
-#[test]
-fn placement_query_picks_node_with_most_space() {
-    let mut d = make_pool_disseminator(1);
-    d.join(3);
-
-    // Simulate node 2 joining and having lots of space
-    let member2 = PoolEntry::Membership(PoolMemberEntry {
-        pool_id: PoolId::from_name("test-pool"),
-        node_id: [2u8; 32],
-        state: PoolMemberState::Active,
-        generation: 1,
-    });
-    let cap2 = PoolEntry::Capacity(PoolCapacityEntry {
-        pool_id: PoolId::from_name("test-pool"),
-        node_id: [2u8; 32],
-        total_bytes: 10_000_000,
-        used_bytes: 1_000_000,
-        generation: 1,
-    });
-
-    // Simulate node 3 with less free space
-    let member3 = PoolEntry::Membership(PoolMemberEntry {
-        pool_id: PoolId::from_name("test-pool"),
-        node_id: [3u8; 32],
-        state: PoolMemberState::Active,
-        generation: 1,
-    });
-    let cap3 = PoolEntry::Capacity(PoolCapacityEntry {
-        pool_id: PoolId::from_name("test-pool"),
-        node_id: [3u8; 32],
-        total_bytes: 5_000_000,
-        used_bytes: 4_000_000,
-        generation: 1,
-    });
-
-    let entries = vec![member2, cap2, member3, cap3];
-    let bytes = serialize_each(&entries);
-    let mut ch = SharedPoolChannel::new(Arc::new(Mutex::new(d)));
-    ch.apply_incoming_bytes(&bytes, 3);
-    d = Arc::try_unwrap(ch.into_inner()).unwrap().into_inner().unwrap();
-
-    // d1 has no capacity announced, node 2 has 9M free, node 3 has 1M free
-    let best = d.node_with_most_free_space().unwrap();
-    assert_eq!(best, node_id(2));
-}
-
-/// Five-node convergence: all nodes join, one announces content, everyone converges.
-#[test]
-fn five_node_pool_converges() {
-    let pool = PoolId::from_name("five-pool");
-    let mut nodes: Vec<PoolDisseminator> = (0..5)
-        .map(|i| PoolDisseminator::new(pool, "five-pool".into(), node_id(i as u8), 3))
-        .collect();
-
-    // All join
-    for n in &mut nodes {
-        n.join(5);
-    }
-
-    // Node 0 and 2 announce content
-    let hash_a = ContentHash::of(b"file-a");
-    let hash_b = ContentHash::of(b"file-b");
-    nodes[0].announce_content(hash_a, 5);
-    nodes[2].announce_content(hash_b, 5);
-
-    // Run 10 gossip rounds
-    for _ in 0..10 {
-        let mut channels: Vec<SharedPoolChannel> = nodes
-            .into_iter()
-            .map(|d| SharedPoolChannel::new(Arc::new(Mutex::new(d))))
-            .collect();
-
-        let pending: Vec<Vec<Vec<u8>>> = channels
-            .iter_mut()
-            .map(|ch| ch.take_pending_bytes(100))
-            .collect();
-
-        for (recv_idx, ch) in channels.iter_mut().enumerate() {
-            for (send_idx, bytes) in pending.iter().enumerate() {
-                if recv_idx != send_idx {
-                    ch.apply_incoming_bytes(bytes, 5);
-                }
-            }
-        }
-
-        nodes = channels
-            .into_iter()
-            .map(|ch| Arc::try_unwrap(ch.into_inner()).unwrap().into_inner().unwrap())
-            .collect();
-    }
-
-    for (i, node) in nodes.iter().enumerate() {
-        assert_eq!(node.member_count(), 5, "node {i} should see 5 members");
-        assert_eq!(
-            node.locate_content(&hash_a),
-            vec![node_id(0)],
-            "node {i} should locate file-a on node 0"
-        );
-        assert_eq!(
-            node.locate_content(&hash_b),
-            vec![node_id(2)],
-            "node {i} should locate file-b on node 2"
-        );
-    }
-}
-
-// ─── GossipChannel wire format tests ───────────────────────────────────────
-
-/// Verify the GossipChannel topic tag is correct.
-#[test]
-fn shared_pool_channel_topic_tag() {
-    let d = make_pool_disseminator(1);
-    let ch = SharedPoolChannel::new(Arc::new(Mutex::new(d)));
-    assert_eq!(GossipChannel::topic_tag(&ch), "pool");
-}
-
-/// Verify serialization round-trip through GossipChannel bytes interface.
-#[test]
-fn gossip_channel_bytes_roundtrip() {
-    let mut d = make_pool_disseminator(1);
-    d.join(2);
-    let hash = ContentHash::of(b"roundtrip");
-    d.announce_content(hash, 2);
-
-    let mut ch = SharedPoolChannel::new(Arc::new(Mutex::new(d)));
-    let bytes = ch.take_pending_bytes(100);
-    assert!(!bytes.is_empty());
-
-    // Apply to a fresh disseminator
-    let d2 = make_pool_disseminator(2);
-    let mut ch2 = SharedPoolChannel::new(Arc::new(Mutex::new(d2)));
-    ch2.apply_incoming_bytes(&bytes, 2);
-    let d2 = Arc::try_unwrap(ch2.into_inner()).unwrap().into_inner().unwrap();
-
-    assert_eq!(d2.member_count(), 1);
-    assert_eq!(d2.locate_content(&hash), vec![node_id(1)]);
-}
diff --git a/crates/datastore/tests/transfer_tests.rs b/crates/datastore/tests/transfer_tests.rs
index f803337..6f4b470 100644
--- a/crates/datastore/tests/transfer_tests.rs
+++ b/crates/datastore/tests/transfer_tests.rs
@@ -6,7 +6,7 @@ use swactor_datastore::chunking::{chunk_blob, reassemble_blob, verify_integrity}
 use swactor_datastore::messages::{BlobStoreMsg, DatastoreResponse, TransferMsg};
 use swactor_datastore::types::{ChunkRef, ContentHash, ObjectManifest};
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 use common::{
     spawn_blob_store, spawn_transfer, test_runtime, tick_and_drain, tick_n, tick_until_recv,
diff --git a/crates/distribution/Cargo.toml b/crates/distribution/Cargo.toml
index 16fc876..c2567a3 100644
--- a/crates/distribution/Cargo.toml
+++ b/crates/distribution/Cargo.toml
@@ -5,18 +5,17 @@ edition = "2024"
 
 [features]
 default = ["tcp"]
-tcp = []
+tcp = ["dep:swactor-transport", "swactor-transport/tcp"]
 iroh = ["dep:iroh", "dep:tokio"]
 relay = ["iroh", "dep:iroh-relay"]
 
 [dependencies]
 swactor = { path = "../..", features = ["serde", "transport"] }
-shared-types = { path = "../shared-types" }
+swactor-transport = { path = "../transport", optional = true }
 ed25519-dalek = { version = "2", features = ["rand_core"] }
 rand_core = { version = "0.6", features = ["getrandom"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-bs58 = "0.5"
 iroh = { version = "0.96", optional = true }
 iroh-relay = { version = "0.96", features = ["server"], optional = true }
 tokio = { version = "1", features = ["rt-multi-thread"], optional = true }
diff --git a/crates/distribution/src/crypto.rs b/crates/distribution/src/crypto.rs
index 43a1a42..a59d25d 100644
--- a/crates/distribution/src/crypto.rs
+++ b/crates/distribution/src/crypto.rs
@@ -1,6 +1,48 @@
-use ed25519_dalek::{Signer, Verifier};
+//! Ed25519 cryptographic primitives for distribution.
 
-use crate::types::{DirectoryEntry, DirectoryEntryPayload, NodeId, Signature};
+use std::fmt;
+
+use ed25519_dalek::{Signer, Verifier};
+use serde::{Deserialize, Serialize};
+
+use crate::types::{DirectoryEntry, DirectoryEntryPayload, NodeId};
+
+// ─── Signature ──────────────────────────────────────────────────────────────
+
+/// An ed25519 signature (64 bytes).
+#[derive(Clone, Copy, PartialEq, Eq)]
+pub struct Signature(pub [u8; 64]);
+
+impl Serialize for Signature {
+    fn serialize<S: serde::Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error> {
+        serializer.serialize_bytes(&self.0)
+    }
+}
+
+impl<'de> Deserialize<'de> for Signature {
+    fn deserialize<D: serde::Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error> {
+        let bytes: Vec<u8> = Deserialize::deserialize(deserializer)?;
+        if bytes.len() != 64 {
+            return Err(serde::de::Error::custom(format!(
+                "expected 64 bytes for Signature, got {}",
+                bytes.len()
+            )));
+        }
+        let mut arr = [0u8; 64];
+        arr.copy_from_slice(&bytes);
+        Ok(Signature(arr))
+    }
+}
+
+impl fmt::Debug for Signature {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(f, "Sig(")?;
+        for b in &self.0[..4] {
+            write!(f, "{:02x}", b)?;
+        }
+        write!(f, "\u{2026})")
+    }
+}
 
 // ─── Keypair ────────────────────────────────────────────────────────────────
 
@@ -40,9 +82,33 @@ impl Keypair {
         let sig = self.inner.sign(msg);
         Signature(sig.to_bytes())
     }
+}
 
+// ─── Verification ───────────────────────────────────────────────────────────
+
+/// Verify a signature against a `NodeId` (public key) and message bytes.
+pub fn verify(node_id: &NodeId, msg: &[u8], sig: &Signature) -> bool {
+    let Ok(vk) = ed25519_dalek::VerifyingKey::from_bytes(&node_id.0) else {
+        return false;
+    };
+    let signature = ed25519_dalek::Signature::from_bytes(&sig.0);
+    vk.verify(msg, &signature).is_ok()
+}
+
+// ─── Directory Entry Helpers ────────────────────────────────────────────────
+
+/// Extension methods for Keypair specific to distribution directory entries.
+pub trait KeypairExt {
     /// Sign a directory entry payload, returning a complete `DirectoryEntry`.
-    pub fn sign_directory_entry(
+    fn sign_directory_entry(
+        &self,
+        actor_addr: swactor::actor::ActorAddress,
+        generation: u64,
+    ) -> DirectoryEntry;
+}
+
+impl KeypairExt for Keypair {
+    fn sign_directory_entry(
         &self,
         actor_addr: swactor::actor::ActorAddress,
         generation: u64,
@@ -63,17 +129,6 @@ impl Keypair {
     }
 }
 
-// ─── Verification ───────────────────────────────────────────────────────────
-
-/// Verify a signature against a `NodeId` (public key) and message bytes.
-pub fn verify(node_id: &NodeId, msg: &[u8], sig: &Signature) -> bool {
-    let Ok(vk) = ed25519_dalek::VerifyingKey::from_bytes(&node_id.0) else {
-        return false;
-    };
-    let signature = ed25519_dalek::Signature::from_bytes(&sig.0);
-    vk.verify(msg, &signature).is_ok()
-}
-
 /// Verify a `DirectoryEntry`'s signature against its embedded `node_id`.
 pub fn verify_directory_entry(entry: &DirectoryEntry) -> bool {
     let payload = entry.payload();
diff --git a/crates/distribution/src/driver.rs b/crates/distribution/src/driver.rs
index 5500b2d..26c280f 100644
--- a/crates/distribution/src/driver.rs
+++ b/crates/distribution/src/driver.rs
@@ -19,7 +19,7 @@ use crate::messages::*;
 use crate::node::{DistributedNode, DistributedNodeConfig};
 use crate::snapshot::DistributionNodeSnapshot;
 use crate::swim::node::NodeAction;
-use crate::transport::{TcpAcceptor, TcpTransport};
+use swactor_transport::tcp::{TcpAcceptor, TcpTransport, encode_wire_envelope_with_hints};
 use crate::types::NodeId;
 
 /// Dummy destination address used in wire envelopes for SWIM protocol messages.
@@ -44,6 +44,12 @@ pub struct AddressHint {
 /// Maps NodeId → SocketAddr. Maintained by the TCP driver layer.
 pub struct PeerAddressBook(HashMap<NodeId, SocketAddr>);
 
+impl Default for PeerAddressBook {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl PeerAddressBook {
     pub fn new() -> Self {
         Self(HashMap::new())
@@ -142,20 +148,18 @@ impl NodeDriver {
 
         // Enrich member addresses from address book
         for member in &mut snap.members {
-            if let Some(node_id) = parse_node_id_hex(&member.node_id) {
-                if let Some(addr) = self.address_book.resolve(&node_id) {
+            if let Some(node_id) = parse_node_id_hex(&member.node_id)
+                && let Some(addr) = self.address_book.resolve(&node_id) {
                     member.addr = Some(addr.to_string());
                 }
-            }
         }
 
         // Enrich routing neighbor addresses from address book
         for neighbor in &mut snap.routing_neighbors {
-            if let Some(node_id) = parse_node_id_hex(&neighbor.node_id) {
-                if let Some(addr) = self.address_book.resolve(&node_id) {
+            if let Some(node_id) = parse_node_id_hex(&neighbor.node_id)
+                && let Some(addr) = self.address_book.resolve(&node_id) {
                     neighbor.addr = Some(addr.to_string());
                 }
-            }
         }
 
         snap
@@ -201,11 +205,10 @@ impl NodeDriver {
     pub fn recv(&mut self) {
         let envelopes = self.acceptor.try_recv(&mut self.streams);
         for (envelope, _peer_addr, hints_bytes) in envelopes {
-            if !hints_bytes.is_empty() {
-                if let Ok(hints) = serde_json::from_slice::<Vec<AddressHint>>(&hints_bytes) {
+            if !hints_bytes.is_empty()
+                && let Ok(hints) = serde_json::from_slice::<Vec<AddressHint>>(&hints_bytes) {
                     self.learn_hints(&hints);
                 }
-            }
             let response_actions = self.dispatch_incoming(envelope);
             self.send_actions(&response_actions);
         }
@@ -223,14 +226,13 @@ impl NodeDriver {
         for (envelope, _peer_addr, hints_bytes) in envelopes {
             // Extract sender NodeId from hints
             let mut sender_node_id = None;
-            if !hints_bytes.is_empty() {
-                if let Ok(hints) = serde_json::from_slice::<Vec<AddressHint>>(&hints_bytes) {
+            if !hints_bytes.is_empty()
+                && let Ok(hints) = serde_json::from_slice::<Vec<AddressHint>>(&hints_bytes) {
                     if let Some(first) = hints.first() {
                         sender_node_id = Some(first.node_id);
                     }
                     self.learn_hints(&hints);
                 }
-            }
 
             // Check peer auth if we know the sender
             if let Some(node_id) = sender_node_id {
@@ -492,21 +494,3 @@ fn parse_node_id_hex(hex: &str) -> Option<NodeId> {
     Some(NodeId(bytes))
 }
 
-/// Encode a wire envelope with address hints appended after the payload.
-///
-/// Extended frame format:
-///   [4B frame_len][32B dest][4B tag_len][tag][4B hints_len][hints][payload]
-fn encode_wire_envelope_with_hints(envelope: &WireEnvelope, hints_bytes: &[u8]) -> Vec<u8> {
-    let tag_bytes = envelope.type_tag.as_bytes();
-    let frame_len: u32 = (32 + 4 + tag_bytes.len() + 4 + hints_bytes.len() + envelope.payload.len()) as u32;
-
-    let mut buf = Vec::with_capacity(4 + frame_len as usize);
-    buf.extend_from_slice(&frame_len.to_be_bytes());
-    buf.extend_from_slice(&envelope.dest.0);
-    buf.extend_from_slice(&(tag_bytes.len() as u32).to_be_bytes());
-    buf.extend_from_slice(tag_bytes);
-    buf.extend_from_slice(&(hints_bytes.len() as u32).to_be_bytes());
-    buf.extend_from_slice(hints_bytes);
-    buf.extend_from_slice(&envelope.payload);
-    buf
-}
diff --git a/crates/distribution/src/gossip_channel.rs b/crates/distribution/src/gossip_channel.rs
deleted file mode 100644
index a49dce6..0000000
--- a/crates/distribution/src/gossip_channel.rs
+++ /dev/null
@@ -1,268 +0,0 @@
-//! Generic gossip channel abstraction.
-//!
-//! Provides `GossipChannel` — a trait for any topic that wants to piggyback
-//! on SWIM protocol messages — and `DisseminationBuffer<T>` — a reusable
-//! budget-limited dissemination queue that replaces the 4 independent copies
-//! of the `Λ * ceil(log₂(n))` pattern.
-
-use serde::{Serialize, de::DeserializeOwned};
-
-// ─── GossipChannel trait ────────────────────────────────────────────────────
-
-/// A gossip channel that can piggyback serialized entries on SWIM messages.
-///
-/// Each channel has a unique topic tag and handles its own serialization.
-/// The wire transport uses type-erased `Vec<u8>` entries.
-pub trait GossipChannel: Send {
-    /// Unique string tag identifying this channel in the piggyback payload.
-    fn topic_tag(&self) -> &'static str;
-
-    /// Take up to `max_entries` pending entries, serialized as bytes.
-    fn take_pending_bytes(&mut self, max_entries: usize) -> Vec<Vec<u8>>;
-
-    /// Apply incoming entries (deserialized from bytes) received from gossip.
-    fn apply_incoming_bytes(&mut self, entries: &[Vec<u8>], cluster_size: usize);
-
-    /// Re-enqueue all state for dissemination (anti-entropy on membership recovery).
-    fn re_disseminate_all(&mut self, cluster_size: usize);
-
-    /// Handle a node being declared dead.
-    fn on_node_death(&mut self, node_id: &crate::types::NodeId);
-
-    /// Periodic garbage collection tick.
-    fn gc_tick(&mut self);
-}
-
-// ─── DisseminationBuffer<T> ────────────────────────────────────────────────
-
-/// A queued entry with a remaining transmit budget.
-#[derive(Debug, Clone)]
-struct BufferEntry<T> {
-    item: T,
-    remaining: usize,
-}
-
-/// Reusable generic dissemination buffer.
-///
-/// Manages budget-limited gossip dissemination for any entry type.
-/// Each entry is transmitted `Λ * ceil(log₂(n))` times before eviction.
-#[derive(Debug)]
-pub struct DisseminationBuffer<T> {
-    entries: Vec<BufferEntry<T>>,
-    lambda: usize,
-}
-
-impl<T: Clone> DisseminationBuffer<T> {
-    /// Create a new buffer with the given dissemination multiplier (Λ).
-    pub fn new(lambda: usize) -> Self {
-        Self {
-            entries: Vec::new(),
-            lambda,
-        }
-    }
-
-    /// Compute the transmit budget: `Λ * ceil(log₂(max(n, 2)))`.
-    pub fn transmit_budget(&self, cluster_size: usize) -> usize {
-        let n = cluster_size.max(2) as f64;
-        let log_n = n.log2().ceil() as usize;
-        self.lambda * log_n.max(1)
-    }
-
-    /// Enqueue an entry for dissemination. Does not check for duplicates.
-    pub fn enqueue(&mut self, item: T, cluster_size: usize) {
-        let budget = self.transmit_budget(cluster_size);
-        self.entries.push(BufferEntry {
-            item,
-            remaining: budget,
-        });
-    }
-
-    /// Enqueue an entry, replacing an existing one if `matcher` returns true.
-    /// If no match is found, pushes a new entry.
-    pub fn enqueue_or_replace<F>(&mut self, item: T, cluster_size: usize, matcher: F)
-    where
-        F: Fn(&T) -> bool,
-    {
-        let budget = self.transmit_budget(cluster_size);
-
-        if let Some(existing) = self.entries.iter_mut().find(|e| matcher(&e.item)) {
-            existing.item = item;
-            existing.remaining = budget;
-            return;
-        }
-
-        self.entries.push(BufferEntry {
-            item,
-            remaining: budget,
-        });
-    }
-
-    /// Take up to `max_count` entries for piggyback.
-    /// Decrements remaining budget and evicts exhausted entries.
-    pub fn take(&mut self, max_count: usize) -> Vec<T> {
-        let count = max_count.min(self.entries.len());
-        let mut result = Vec::with_capacity(count);
-
-        for entry in self.entries.iter_mut().take(count) {
-            result.push(entry.item.clone());
-            entry.remaining = entry.remaining.saturating_sub(1);
-        }
-
-        self.entries.retain(|e| e.remaining > 0);
-        result
-    }
-
-    /// Re-enqueue all given items with fresh budgets.
-    pub fn re_enqueue_all(&mut self, items: impl IntoIterator<Item = T>, cluster_size: usize) {
-        for item in items {
-            self.enqueue(item, cluster_size);
-        }
-    }
-
-    /// Retain only entries matching the predicate.
-    pub fn retain<F>(&mut self, mut predicate: F)
-    where
-        F: FnMut(&T) -> bool,
-    {
-        self.entries.retain(|e| predicate(&e.item));
-    }
-
-    /// Number of queued entries.
-    pub fn len(&self) -> usize {
-        self.entries.len()
-    }
-
-    /// Whether the buffer is empty.
-    pub fn is_empty(&self) -> bool {
-        self.entries.is_empty()
-    }
-}
-
-// ─── Serialization helpers ─────────────────────────────────────────────────
-
-/// Serialize a slice of items to a Vec of byte vectors.
-pub fn serialize_each<T: Serialize>(items: &[T]) -> Vec<Vec<u8>> {
-    items
-        .iter()
-        .filter_map(|item| serde_json::to_vec(item).ok())
-        .collect()
-}
-
-/// Deserialize a slice of byte vectors into items, skipping failures.
-pub fn deserialize_each<T: DeserializeOwned>(entries: &[Vec<u8>]) -> Vec<T> {
-    entries
-        .iter()
-        .filter_map(|bytes| serde_json::from_slice(bytes).ok())
-        .collect()
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn budget_math_two_nodes() {
-        let buf: DisseminationBuffer<u32> = DisseminationBuffer::new(3);
-        // log2(2) = 1, ceil = 1, 3 * 1 = 3
-        assert_eq!(buf.transmit_budget(2), 3);
-    }
-
-    #[test]
-    fn budget_math_single_node_floors_to_two() {
-        let buf: DisseminationBuffer<u32> = DisseminationBuffer::new(3);
-        // cluster_size=1 → max(1,2)=2, log2(2)=1, 3*1=3
-        assert_eq!(buf.transmit_budget(1), 3);
-    }
-
-    #[test]
-    fn budget_math_32_nodes() {
-        let buf: DisseminationBuffer<u32> = DisseminationBuffer::new(3);
-        // log2(32) = 5, 3 * 5 = 15
-        assert_eq!(buf.transmit_budget(32), 15);
-    }
-
-    #[test]
-    fn budget_math_33_nodes() {
-        let buf: DisseminationBuffer<u32> = DisseminationBuffer::new(3);
-        // log2(33) ≈ 5.04, ceil = 6, 3 * 6 = 18
-        assert_eq!(buf.transmit_budget(33), 18);
-    }
-
-    #[test]
-    fn enqueue_take_evicts_after_budget() {
-        let mut buf = DisseminationBuffer::new(3);
-        buf.enqueue(42u32, 2); // budget = 3
-
-        // Take 3 times — each take decrements once
-        let r1 = buf.take(1);
-        assert_eq!(r1, vec![42]);
-        assert_eq!(buf.len(), 1);
-
-        let r2 = buf.take(1);
-        assert_eq!(r2, vec![42]);
-        assert_eq!(buf.len(), 1);
-
-        let r3 = buf.take(1);
-        assert_eq!(r3, vec![42]);
-        // After 3 takes, budget exhausted → evicted
-        assert_eq!(buf.len(), 0);
-    }
-
-    #[test]
-    fn enqueue_or_replace_replaces_matching_entry() {
-        let mut buf = DisseminationBuffer::new(3);
-        buf.enqueue_or_replace(("key", 1), 2, |e| e.0 == "key");
-        buf.enqueue_or_replace(("key", 2), 2, |e| e.0 == "key");
-
-        assert_eq!(buf.len(), 1);
-        let taken = buf.take(1);
-        assert_eq!(taken, vec![("key", 2)]);
-    }
-
-    #[test]
-    fn enqueue_or_replace_adds_when_no_match() {
-        let mut buf = DisseminationBuffer::new(3);
-        buf.enqueue_or_replace(("a", 1), 2, |e| e.0 == "a");
-        buf.enqueue_or_replace(("b", 2), 2, |e| e.0 == "b");
-
-        assert_eq!(buf.len(), 2);
-    }
-
-    #[test]
-    fn re_enqueue_all_refreshes_budgets() {
-        let mut buf = DisseminationBuffer::new(3);
-        buf.enqueue(1u32, 2);
-        buf.enqueue(2u32, 2);
-
-        // Drain them
-        for _ in 0..3 {
-            buf.take(2);
-        }
-        assert!(buf.is_empty());
-
-        // Re-enqueue
-        buf.re_enqueue_all(vec![1, 2, 3], 2);
-        assert_eq!(buf.len(), 3);
-    }
-
-    #[test]
-    fn retain_removes_non_matching() {
-        let mut buf = DisseminationBuffer::new(3);
-        buf.enqueue(1u32, 2);
-        buf.enqueue(2u32, 2);
-        buf.enqueue(3u32, 2);
-
-        buf.retain(|item| *item != 2);
-        assert_eq!(buf.len(), 2);
-        let taken = buf.take(3);
-        assert_eq!(taken, vec![1, 3]);
-    }
-
-    #[test]
-    fn serialize_deserialize_roundtrip() {
-        let items = vec![1u32, 2, 3];
-        let bytes = serialize_each(&items);
-        let recovered: Vec<u32> = deserialize_each(&bytes);
-        assert_eq!(recovered, items);
-    }
-}
diff --git a/crates/distribution/src/iroh_driver.rs b/crates/distribution/src/iroh_driver.rs
index 8bd749b..14b7c7a 100644
--- a/crates/distribution/src/iroh_driver.rs
+++ b/crates/distribution/src/iroh_driver.rs
@@ -169,7 +169,7 @@ impl IrohDriver {
                                 if !allowed {
                                     eprintln!(
                                         "iroh driver: rejected connection from unauthorized peer {}",
-                                        crate::identity::hex_encode(&node_id.0[..4])
+                                        swactor::transport::hex_encode(&node_id.0[..4])
                                     );
                                     conn.close(0u32.into(), b"unauthorized");
                                     continue;
@@ -179,14 +179,14 @@ impl IrohDriver {
                                 if negotiated_alpn == ALPN {
                                     eprintln!(
                                         "iroh driver: accepted SWIM connection from {}",
-                                        crate::identity::hex_encode(&node_id.0[..4])
+                                        swactor::transport::hex_encode(&node_id.0[..4])
                                     );
                                     swim_buf.lock().unwrap().push((node_id, conn));
                                 } else {
                                     eprintln!(
                                         "iroh driver: accepted non-SWIM connection from {} (ALPN: {})",
-                                        crate::identity::hex_encode(&node_id.0[..4]),
-                                        String::from_utf8_lossy(&negotiated_alpn),
+                                        swactor::transport::hex_encode(&node_id.0[..4]),
+                                        String::from_utf8_lossy(negotiated_alpn),
                                     );
                                     other_buf.lock().unwrap().push((node_id, conn));
                                 }
@@ -524,7 +524,7 @@ impl IrohDriver {
         if !self.is_peer_allowed(&node_id) {
             return Err(format!(
                 "peer {} not in allow-list",
-                crate::identity::hex_encode(&node_id.0[..4])
+                swactor::transport::hex_encode(&node_id.0[..4])
             )
             .into());
         }
diff --git a/crates/distribution/src/kademlia/directory.rs b/crates/distribution/src/kademlia/directory.rs
index e5cedac..fadb8ff 100644
--- a/crates/distribution/src/kademlia/directory.rs
+++ b/crates/distribution/src/kademlia/directory.rs
@@ -16,6 +16,12 @@ pub struct DirectoryShard {
     entries: HashMap<ActorAddress, Vec<DirectoryEntry>>,
 }
 
+impl Default for DirectoryShard {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl DirectoryShard {
     pub fn new() -> Self {
         Self {
@@ -56,7 +62,7 @@ impl DirectoryShard {
         let mut removed = Vec::new();
         for entries in self.entries.values_mut() {
             let _before = entries.len();
-            let drained: Vec<_> = entries.drain(..).collect();
+            let drained: Vec<_> = std::mem::take(entries);
             for entry in drained {
                 if entry.node_id == *node_id {
                     removed.push(entry);
@@ -74,7 +80,7 @@ impl DirectoryShard {
     pub fn remove_where<F: Fn(&DirectoryEntry) -> bool>(&mut self, predicate: F) -> Vec<DirectoryEntry> {
         let mut removed = Vec::new();
         for entries in self.entries.values_mut() {
-            let drained: Vec<_> = entries.drain(..).collect();
+            let drained: Vec<_> = std::mem::take(entries);
             for entry in drained {
                 if predicate(&entry) {
                     removed.push(entry);
diff --git a/crates/distribution/src/kademlia/lookup.rs b/crates/distribution/src/kademlia/lookup.rs
index ac93965..f00c940 100644
--- a/crates/distribution/src/kademlia/lookup.rs
+++ b/crates/distribution/src/kademlia/lookup.rs
@@ -11,7 +11,7 @@
 
 use std::collections::{HashMap, HashSet};
 
-use crate::types::NodeId;
+use crate::types::{NodeId, NodeIdDistance};
 use super::routing_table::{RoutingTable, K};
 
 /// Concurrency parameter — how many queries to issue in parallel per round.
diff --git a/crates/distribution/src/kademlia/repair.rs b/crates/distribution/src/kademlia/repair.rs
index 88c7d83..573ad2b 100644
--- a/crates/distribution/src/kademlia/repair.rs
+++ b/crates/distribution/src/kademlia/repair.rs
@@ -17,6 +17,12 @@ pub struct RepairQueue {
     pending: HashMap<ActorAddress, DirectoryEntry>,
 }
 
+impl Default for RepairQueue {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl RepairQueue {
     pub fn new() -> Self {
         Self {
diff --git a/crates/distribution/src/kademlia/routing_table.rs b/crates/distribution/src/kademlia/routing_table.rs
index 101f0c8..ed21b24 100644
--- a/crates/distribution/src/kademlia/routing_table.rs
+++ b/crates/distribution/src/kademlia/routing_table.rs
@@ -7,7 +7,7 @@
 
 use std::collections::VecDeque;
 
-use crate::types::NodeId;
+use crate::types::{NodeId, NodeIdDistance};
 
 /// Default replication parameter.
 pub const K: usize = 20;
diff --git a/crates/distribution/src/lib.rs b/crates/distribution/src/lib.rs
index eb62498..5469829 100644
--- a/crates/distribution/src/lib.rs
+++ b/crates/distribution/src/lib.rs
@@ -1,11 +1,8 @@
 pub mod types;
 pub mod crypto;
-pub mod identity;
 pub mod peer_auth;
 pub mod messages;
 pub mod codec;
-#[cfg(feature = "tcp")]
-pub mod transport;
 pub mod swim;
 pub mod kademlia;
 pub mod cache;
diff --git a/crates/distribution/src/node.rs b/crates/distribution/src/node.rs
index 566447c..aa1b1d5 100644
--- a/crates/distribution/src/node.rs
+++ b/crates/distribution/src/node.rs
@@ -6,7 +6,7 @@
 use swactor::actor::ActorAddress;
 
 use crate::cache::LocationCache;
-use crate::crypto::Keypair;
+use crate::crypto::{Keypair, KeypairExt};
 use crate::kademlia::directory::{actor_addr_as_node_id, DirectoryShard};
 use crate::kademlia::repair::{RepairQueue, RepublishTracker};
 use crate::kademlia::routing_table::RoutingTable;
@@ -232,12 +232,11 @@ impl DistributedNode {
         }
 
         // 2. Check local directory shard
-        if let Some(entries) = self.directory.get(actor_addr) {
-            if let Some(entry) = entries.first() {
+        if let Some(entries) = self.directory.get(actor_addr)
+            && let Some(entry) = entries.first() {
                 self.cache.insert(*actor_addr, entry.node_id);
                 return ResolveResult::Cached(entry.node_id);
             }
-        }
 
         // 3. Need to do a Kademlia lookup
         let target = actor_addr_as_node_id(actor_addr);
diff --git a/crates/distribution/src/peer_auth.rs b/crates/distribution/src/peer_auth.rs
index 2bcfb2a..d0016ae 100644
--- a/crates/distribution/src/peer_auth.rs
+++ b/crates/distribution/src/peer_auth.rs
@@ -9,7 +9,7 @@ use std::path::{Path, PathBuf};
 
 use serde::{Deserialize, Serialize};
 
-use crate::identity::{hex_decode, hex_encode};
+use swactor::transport::{hex_decode, hex_encode};
 use crate::types::NodeId;
 
 /// A single trusted peer entry.
@@ -55,11 +55,10 @@ impl PeerAllowList {
                 .map_err(|e| io::Error::new(io::ErrorKind::InvalidData, e))?;
             let mut map = HashMap::new();
             for entry in file.peers {
-                if let Some(bytes) = hex_decode(&entry.node_id) {
-                    if let Ok(arr) = <[u8; 32]>::try_from(bytes.as_slice()) {
+                if let Some(bytes) = hex_decode(&entry.node_id)
+                    && let Ok(arr) = <[u8; 32]>::try_from(bytes.as_slice()) {
                         map.insert(NodeId(arr), entry);
                     }
-                }
             }
             map
         } else {
@@ -134,7 +133,7 @@ impl PeerAllowList {
         }
 
         let json = serde_json::to_string_pretty(&file)
-            .map_err(|e| io::Error::new(io::ErrorKind::Other, e))?;
+            .map_err(|e| io::Error::other(e))?;
         std::fs::write(path, json)
     }
 }
diff --git a/crates/distribution/src/registry.rs b/crates/distribution/src/registry.rs
index 711321d..ac6acf6 100644
--- a/crates/distribution/src/registry.rs
+++ b/crates/distribution/src/registry.rs
@@ -167,11 +167,10 @@ impl ClusterRegistry {
 
     /// Merge a single remote entry. Returns true if state changed.
     pub fn merge(&mut self, remote: RegistryEntry) -> bool {
-        if let Some(existing) = self.entries.get(&remote.name) {
-            if !lww_wins(&remote, existing) {
+        if let Some(existing) = self.entries.get(&remote.name)
+            && !lww_wins(&remote, existing) {
                 return false;
             }
-        }
 
         let changed = match self.entries.get(&remote.name) {
             Some(existing) => existing != &remote,
@@ -254,7 +253,7 @@ impl ClusterRegistry {
     /// Periodic GC: remove tombstones past TTL with exhausted dissemination budgets.
     pub fn gc_tick(&mut self) {
         self.tick_count += 1;
-        if self.tick_count % self.config.gc_interval != 0 {
+        if !self.tick_count.is_multiple_of(self.config.gc_interval) {
             return;
         }
 
diff --git a/crates/distribution/src/snapshot.rs b/crates/distribution/src/snapshot.rs
index 257a90d..d4b3d01 100644
--- a/crates/distribution/src/snapshot.rs
+++ b/crates/distribution/src/snapshot.rs
@@ -1,6 +1,6 @@
 //! Serializable snapshot of a `DistributedNode`'s state.
 //!
-//! Used by the runtime-dashboard to display distribution monitoring data
+//! Used by the dashboard to display distribution monitoring data
 //! for a single node without reaching out to other nodes.
 
 use serde::{Deserialize, Serialize};
@@ -176,7 +176,7 @@ impl DistributedNode {
         let recent_targets: Vec<String> = self
             .recent_probe_targets()
             .iter()
-            .map(|id| node_id_hex(id))
+            .map(node_id_hex)
             .collect();
 
         let registry = self.registry();
diff --git a/crates/distribution/src/swim/lifeguard.rs b/crates/distribution/src/swim/lifeguard.rs
index ba9fc42..a94f308 100644
--- a/crates/distribution/src/swim/lifeguard.rs
+++ b/crates/distribution/src/swim/lifeguard.rs
@@ -107,8 +107,8 @@ fn log2_ceil(n: u64) -> u64 {
         return 0;
     }
     // Number of bits needed = position of highest set bit
-    let bits = 64 - (n - 1).leading_zeros() as u64;
-    bits
+    
+    64 - (n - 1).leading_zeros() as u64
 }
 
 #[cfg(test)]
diff --git a/crates/distribution/src/swim/member_list.rs b/crates/distribution/src/swim/member_list.rs
index dfaef15..b7248a1 100644
--- a/crates/distribution/src/swim/member_list.rs
+++ b/crates/distribution/src/swim/member_list.rs
@@ -137,24 +137,22 @@ impl MemberList {
 
     /// Mark a node as suspect (if currently alive and same/higher incarnation).
     pub fn suspect(&mut self, node_id: NodeId) -> bool {
-        if let Some(entry) = self.members.get_mut(&node_id) {
-            if entry.state == MemberState::Alive {
+        if let Some(entry) = self.members.get_mut(&node_id)
+            && entry.state == MemberState::Alive {
                 entry.state = MemberState::Suspect;
                 return true;
             }
-        }
         false
     }
 
     /// Mark a node as dead. Only transitions from Suspect → Dead,
     /// enforcing the SWIM lifecycle invariant (Alive → Suspect → Dead).
     pub fn declare_dead(&mut self, node_id: NodeId) -> bool {
-        if let Some(entry) = self.members.get_mut(&node_id) {
-            if entry.state == MemberState::Suspect {
+        if let Some(entry) = self.members.get_mut(&node_id)
+            && entry.state == MemberState::Suspect {
                 entry.state = MemberState::Dead;
                 return true;
             }
-        }
         false
     }
 
diff --git a/crates/distribution/src/swim/node.rs b/crates/distribution/src/swim/node.rs
index 577dff2..f8baade 100644
--- a/crates/distribution/src/swim/node.rs
+++ b/crates/distribution/src/swim/node.rs
@@ -3,7 +3,7 @@
 //! This is the top-level SWIM state machine that a `DistributedNode` will drive.
 //! It produces `SwimAction`s that the caller translates into real network I/O.
 
-use crate::identity::hex_encode;
+use swactor::transport::hex_encode;
 use crate::messages::MembershipUpdate;
 use crate::types::{MemberState, NodeId, NodeRecord};
 
@@ -284,14 +284,13 @@ impl SwimNode {
                     // so it piggybacks on this message. This is the key mechanism
                     // for partition-heal recovery: the target learns it was
                     // suspected/declared dead and refutes by bumping its incarnation.
-                    if let Some(entry) = self.members.get(&to) {
-                        if entry.state == MemberState::Dead || entry.state == MemberState::Suspect {
+                    if let Some(entry) = self.members.get(&to)
+                        && (entry.state == MemberState::Dead || entry.state == MemberState::Suspect) {
                             self.dissemination.enqueue(
                                 membership_update(to, entry.state, entry.incarnation),
                                 self.cluster_size(),
                             );
                         }
-                    }
                     let pb = self.dissemination.pack_piggyback(self.max_piggyback);
                     actions.push(NodeAction::SendPing {
                         to,
diff --git a/crates/distribution/src/swim/probe.rs b/crates/distribution/src/swim/probe.rs
index a85deea..954ce22 100644
--- a/crates/distribution/src/swim/probe.rs
+++ b/crates/distribution/src/swim/probe.rs
@@ -233,7 +233,7 @@ impl SwimProbe {
 
         self.next_probe_tick = self.tick + self.config.probe_interval;
 
-        if let Some(target) = self.pick_probe_target(&mut MemberList::clone_shallow(members)) {
+        if let Some(target) = self.pick_probe_target(&MemberList::clone_shallow(members)) {
             // Record this probe target in history
             if self.recent_targets.len() >= PROBE_HISTORY_SIZE {
                 self.recent_targets.pop_front();
@@ -305,14 +305,11 @@ impl SwimProbe {
     }
 
     fn handle_indirect_ack(&mut self, target: NodeId, sequence: u64, _members: &mut MemberList, _actions: &mut Vec<SwimAction>) {
-        match &self.phase {
-            ProbePhase::WaitingIndirectAck { target: expected, sequence: expected_seq, .. } => {
-                if target == *expected && sequence == *expected_seq {
-                    self.cancel_suspicion_timer(target);
-                    self.phase = ProbePhase::Idle;
-                }
+        if let ProbePhase::WaitingIndirectAck { target: expected, sequence: expected_seq, .. } = &self.phase {
+            if target == *expected && sequence == *expected_seq {
+                self.cancel_suspicion_timer(target);
+                self.phase = ProbePhase::Idle;
             }
-            _ => {}
         }
     }
 
diff --git a/crates/distribution/src/types.rs b/crates/distribution/src/types.rs
index c8a691a..e62e593 100644
--- a/crates/distribution/src/types.rs
+++ b/crates/distribution/src/types.rs
@@ -1,19 +1,22 @@
-use std::fmt;
-
 use serde::{Deserialize, Serialize};
 use swactor::actor::ActorAddress;
 
-// ─── NodeId ─────────────────────────────────────────────────────────────────
+pub use swactor::transport::NodeId;
+pub use crate::crypto::Signature;
 
-/// A node's identity — the raw bytes of an ed25519 public key.
-///
-/// Also serves as the Kademlia key for XOR distance calculations.
-#[derive(Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
-pub struct NodeId(pub [u8; 32]);
+// ─── NodeId extensions (Kademlia-specific) ─────────────────────────────────
 
-impl NodeId {
+/// Kademlia XOR distance operations on NodeId.
+pub trait NodeIdDistance {
     /// XOR distance between two node IDs (Kademlia metric).
-    pub fn xor_distance(&self, other: &NodeId) -> [u8; 32] {
+    fn xor_distance(&self, other: &NodeId) -> [u8; 32];
+    /// Number of leading zero bits in the XOR distance to `other`.
+    /// Returns 0..=256. Used to select the k-bucket index.
+    fn xor_leading_zeros(&self, other: &NodeId) -> u32;
+}
+
+impl NodeIdDistance for NodeId {
+    fn xor_distance(&self, other: &NodeId) -> [u8; 32] {
         let mut out = [0u8; 32];
         for i in 0..32 {
             out[i] = self.0[i] ^ other.0[i];
@@ -21,9 +24,7 @@ impl NodeId {
         out
     }
 
-    /// Number of leading zero bits in the XOR distance to `other`.
-    /// Returns 0..=256. Used to select the k-bucket index.
-    pub fn xor_leading_zeros(&self, other: &NodeId) -> u32 {
+    fn xor_leading_zeros(&self, other: &NodeId) -> u32 {
         let dist = self.xor_distance(other);
         let mut zeros = 0u32;
         for byte in dist {
@@ -38,62 +39,6 @@ impl NodeId {
     }
 }
 
-impl fmt::Debug for NodeId {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "NodeId(")?;
-        for b in &self.0[..4] {
-            write!(f, "{:02x}", b)?;
-        }
-        write!(f, "\u{2026})")
-    }
-}
-
-impl fmt::Display for NodeId {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        for b in &self.0[..8] {
-            write!(f, "{:02x}", b)?;
-        }
-        write!(f, "\u{2026}")
-    }
-}
-
-// ─── Signature ──────────────────────────────────────────────────────────────
-
-/// An ed25519 signature (64 bytes).
-#[derive(Clone, Copy, PartialEq, Eq)]
-pub struct Signature(pub [u8; 64]);
-
-impl Serialize for Signature {
-    fn serialize<S: serde::Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error> {
-        serializer.serialize_bytes(&self.0)
-    }
-}
-
-impl<'de> Deserialize<'de> for Signature {
-    fn deserialize<D: serde::Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error> {
-        let bytes: Vec<u8> = Deserialize::deserialize(deserializer)?;
-        if bytes.len() != 64 {
-            return Err(serde::de::Error::custom(format!(
-                "expected 64 bytes for Signature, got {}",
-                bytes.len()
-            )));
-        }
-        let mut arr = [0u8; 64];
-        arr.copy_from_slice(&bytes);
-        Ok(Signature(arr))
-    }
-}
-
-impl fmt::Debug for Signature {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "Sig(")?;
-        for b in &self.0[..4] {
-            write!(f, "{:02x}", b)?;
-        }
-        write!(f, "\u{2026})")
-    }
-}
-
 // ─── MemberState ────────────────────────────────────────────────────────────
 
 /// SWIM membership state for a node.
diff --git a/crates/distribution/tests/kademlia_directory.rs b/crates/distribution/tests/kademlia_directory.rs
index 3c00a0f..6f3e979 100644
--- a/crates/distribution/tests/kademlia_directory.rs
+++ b/crates/distribution/tests/kademlia_directory.rs
@@ -1,5 +1,5 @@
 use swactor::actor::ActorAddress;
-use distribution::crypto::Keypair;
+use distribution::crypto::{Keypair, KeypairExt};
 use distribution::kademlia::directory::{
     actor_addr_as_node_id, resolve_quorum, DirectoryShard, QuorumResult,
 };
diff --git a/crates/distribution/tests/kademlia_routing.rs b/crates/distribution/tests/kademlia_routing.rs
index 8392728..03d209b 100644
--- a/crates/distribution/tests/kademlia_routing.rs
+++ b/crates/distribution/tests/kademlia_routing.rs
@@ -1,5 +1,5 @@
 use distribution::kademlia::routing_table::RoutingTable;
-use distribution::types::NodeId;
+use distribution::types::{NodeId, NodeIdDistance};
 
 fn node(byte: u8) -> NodeId {
     NodeId([byte; 32])
diff --git a/crates/distribution/tests/node_integration.rs b/crates/distribution/tests/node_integration.rs
index 361a574..5a61581 100644
--- a/crates/distribution/tests/node_integration.rs
+++ b/crates/distribution/tests/node_integration.rs
@@ -7,7 +7,7 @@ mod common;
 
 use swactor::actor::ActorAddress;
 use common::{test_config, TestCluster};
-use distribution::crypto::Keypair;
+use distribution::crypto::{Keypair, KeypairExt};
 use distribution::node::{DistributedNode, DistributedNodeConfig, ResolveResult};
 use distribution::swim::node::NodeAction;
 
diff --git a/crates/distribution/tests/repair.rs b/crates/distribution/tests/repair.rs
index 8afddc5..a85dd59 100644
--- a/crates/distribution/tests/repair.rs
+++ b/crates/distribution/tests/repair.rs
@@ -6,7 +6,7 @@
 //! - Repair queue can be drained by the caller
 
 use swactor::actor::ActorAddress;
-use distribution::crypto::Keypair;
+use distribution::crypto::{Keypair, KeypairExt};
 use distribution::kademlia::directory::DirectoryShard;
 use distribution::kademlia::repair::{RepairQueue, RepublishTracker};
 
diff --git a/crates/distribution/tests/transport_and_codec.rs b/crates/distribution/tests/transport_and_codec.rs
index a5bb710..48f9a39 100644
--- a/crates/distribution/tests/transport_and_codec.rs
+++ b/crates/distribution/tests/transport_and_codec.rs
@@ -83,7 +83,7 @@ mod tcp_transport {
 
     use distribution::codec::distribution_codec_registry;
     use distribution::messages::*;
-    use distribution::transport::{TcpAcceptor, TcpTransport};
+    use swactor_transport::tcp::{TcpAcceptor, TcpTransport};
     use distribution::types::NodeId;
 
     #[test]
diff --git a/crates/distribution/tests/types_and_crypto.rs b/crates/distribution/tests/types_and_crypto.rs
index 4c1e804..4309e29 100644
--- a/crates/distribution/tests/types_and_crypto.rs
+++ b/crates/distribution/tests/types_and_crypto.rs
@@ -1,6 +1,6 @@
 use swactor::actor::ActorAddress;
-use distribution::crypto::{self, Keypair};
-use distribution::types::{DirectoryEntry, MemberState, NodeId, NodeRecord, Signature};
+use distribution::crypto::{self, Keypair, KeypairExt};
+use distribution::types::{DirectoryEntry, MemberState, NodeId, NodeIdDistance, NodeRecord, Signature};
 
 // ─── Keypair generation and identity ────────────────────────────────────────
 
diff --git a/crates/swactor-node/Cargo.toml b/crates/node/Cargo.toml
similarity index 78%
rename from crates/swactor-node/Cargo.toml
rename to crates/node/Cargo.toml
index 7499647..1fc6a68 100644
--- a/crates/swactor-node/Cargo.toml
+++ b/crates/node/Cargo.toml
@@ -1,22 +1,26 @@
 [package]
-name = "swactor-node"
+name = "node"
 version = "0.1.0"
 edition = "2024"
 
 [dependencies]
 swactor = { path = "../..", features = ["serde", "tracing", "transport"] }
-swactor-std = { path = "../std" }
-dashboard = { path = "../dashboard", features = ["distribution"] }
+dashboard = { path = "../dashboard" }
 swactor-datastore = { path = "../datastore" }
+swactor-transport = { path = "../transport" }
 distribution = { path = "../distribution" }
-swactor-streams = { path = "../streams" }
 clap = { version = "4", features = ["derive"] }
 ctrlc = "3"
 iroh = { version = "0.96", optional = true }
 toml = "0.8"
 serde = { version = "1", features = ["derive"] }
+serde_json = "1"
 libc = "0.2"
 
+[lib]
+name = "swactor_node"
+path = "src/lib.rs"
+
 [features]
 default = ["iroh", "relay"]
 tcp = ["distribution/tcp"]
diff --git a/crates/node/README.md b/crates/node/README.md
new file mode 100644
index 0000000..bbeede9
--- /dev/null
+++ b/crates/node/README.md
@@ -0,0 +1,99 @@
+# node
+
+The `node` crate produces the `swactor` binary — the batteries-included entry point for running a swactor node. It composes the actor runtime, SWIM-based cluster membership, content-addressed datastore, data streams, an HTTP dashboard, and an optional embedded relay server into a single process.
+
+Run `swactor --help` for full CLI usage.
+
+## What a Default Node Does
+
+### Identity
+
+Every node has a persistent Ed25519 keypair stored at `~/.swactor/identity/node.key.json`. This is the node's identity across restarts — deleting it makes the node appear as a new peer to the cluster. The keypair's public key doubles as the node ID (used in SWIM, peer auth, and invite codes). A deterministic human-readable name (e.g. `swift-falcon`) is derived from the key so you can tell nodes apart in logs and the dashboard.
+
+### Networking
+
+The default transport is **iroh** (QUIC over UDP). Nodes find each other via invite codes — base58-encoded public keys exchanged out-of-band. `swactor join <code>` adds a peer to the allow-list and sets it as the seed node for the next startup.
+
+Once connected, **SWIM protocol** handles cluster membership: protocol probes every 500ms, 600ms probe timeout (tuned for relay round-trips), 2 indirect probes, 4s suspicion window. All intervals are in ticks where **1 tick = 100ms** (the main loop period).
+
+**Peer auth** operates in two modes: open (no `peers_file`) or allow-list (`peers.json`). In allow-list mode, SWIM messages from unknown nodes are dropped at the transport layer. New peers can be added via `swactor join` or the dashboard UI, both of which hot-update the allow-list.
+
+### Relay
+
+Nodes with a public IP auto-promote to embedded relay servers (port 3340). Candidacy is evaluated at startup: the node checks its outbound IP is non-RFC1918 and the relay port is bindable. Relay URLs are announced via SWIM gossip so other nodes discover them automatically. Nodes behind NAT use relays for indirect connectivity — this is why the probe timeout is 600ms instead of the typical 300ms.
+
+### Storage
+
+The **datastore** is a content-addressed, chunked store. Default config persists to `~/.swactor/datastore/`. Auth is enabled by default (ACL files in `~/.swactor/auth/`). The datastore runs as a group of actors inside the runtime and is driven by the main tick loop — GC runs every 1000 ticks (~100s) and dissemination every 50 ticks (~5s). A `StreamManager` actor bridges iroh QUIC streams into the datastore for bulk data transfer between nodes.
+
+Disable with `--no-datastore`. Use `--storage-path` to change location, or omit it from config for in-memory only.
+
+### Observability
+
+An HTTP dashboard serves on **port 9090**. It exposes runtime stats, cluster membership state, tracing output, and a peer management UI (add/remove peers). The dashboard receives a snapshot of the distribution layer every tick.
+
+### State & Lifecycle
+
+All persistent state lives under `~/.swactor/`. Deleting this directory fully resets the node (new identity, empty cluster, empty datastore). The node shuts down cleanly on SIGINT (Ctrl+C). `swactor install` copies the binary to `~/.swactor/bin/swactor` and registers it as a system service (systemd user unit, OpenRC/sysvinit init script, or `@reboot` crontab depending on the host).
+
+## Exposed Ports
+
+| Port | Service | Configurable via |
+|------|---------|-----------------|
+| 9090 | HTTP dashboard | `--dashboard-port` |
+| 3340 | Embedded relay (if eligible) | `--relay-port` |
+
+## Data Directory (`~/.swactor/`)
+
+```
+~/.swactor/
+├── node.toml          # Node configuration
+├── peers.json         # Peer allow-list
+├── identity/
+│   └── node.key.json  # Persistent Ed25519 keypair
+├── datastore/         # Content-addressed chunk storage
+├── auth/              # ACL and owner key files
+└── bin/
+    └── swactor        # Installed binary (after `swactor install`)
+```
+
+## Architecture
+
+```
+CLI Args + TOML Config
+        │
+        ▼
+  Config Resolution (CLI > config > defaults)
+        │
+        ▼
+  Identity (Ed25519 Keypair) ──► Node Name
+        │
+        ▼
+  ┌─────────────────────────────────────────────┐
+  │              Actor Runtime                   │
+  │  (2 threads, StdExtension, stats hook)       │
+  │                                              │
+  │  ┌──────────────┐  ┌──────────────────────┐  │
+  │  │ StreamManager │  │   Datastore Group    │  │
+  │  │   (actor)     │◄─┤ (store, gateway,     │  │
+  │  │               │  │  bridge actors)      │  │
+  │  └──────────────┘  └──────────────────────┘  │
+  └──────────────┬──────────────────────────────┘
+                 │
+                 ▼
+  ┌──────────────────────────────────┐
+  │   Distribution Driver (iroh)     │
+  │  SWIM probes, gossip, relay      │
+  └──────────────┬───────────────────┘
+                 │
+                 ▼
+  ┌──────────────────────────────────┐
+  │         HTTP Dashboard           │
+  │  :9090 — stats, tracing, peers   │
+  └──────────────────────────────────┘
+                 │
+                 ▼
+         Main Tick Loop (100ms)
+    recv → tick → streams → joins →
+    heartbeats → snapshot → datastore
+```
diff --git a/crates/swactor-node/build.rs b/crates/node/build.rs
similarity index 100%
rename from crates/swactor-node/build.rs
rename to crates/node/build.rs
diff --git a/crates/swactor-node/src/config.rs b/crates/node/src/config.rs
similarity index 95%
rename from crates/swactor-node/src/config.rs
rename to crates/node/src/config.rs
index 3fa02e8..74c4c68 100644
--- a/crates/swactor-node/src/config.rs
+++ b/crates/node/src/config.rs
@@ -1,4 +1,4 @@
-//! TOML configuration file support for swactor-node.
+//! TOML configuration file support for the swactor node binary.
 //!
 //! CLI flags take precedence over config file values, which take
 //! precedence over compiled defaults.
diff --git a/crates/swactor-node/src/install.rs b/crates/node/src/install.rs
similarity index 100%
rename from crates/swactor-node/src/install.rs
rename to crates/node/src/install.rs
diff --git a/crates/node/src/lib.rs b/crates/node/src/lib.rs
new file mode 100644
index 0000000..66695e9
--- /dev/null
+++ b/crates/node/src/lib.rs
@@ -0,0 +1,6 @@
+pub mod config;
+pub mod names;
+pub mod plugins;
+#[cfg(feature = "relay")]
+pub mod relay;
+pub mod install;
diff --git a/crates/swactor-node/src/main.rs b/crates/node/src/main.rs
similarity index 92%
rename from crates/swactor-node/src/main.rs
rename to crates/node/src/main.rs
index e43520c..e816508 100644
--- a/crates/swactor-node/src/main.rs
+++ b/crates/node/src/main.rs
@@ -1,4 +1,4 @@
-//! swactor-node — unified distributed node with dashboard and datastore.
+//! Swactor node — unified distributed node with dashboard and datastore.
 //!
 //! Combines distribution, runtime dashboard, and content-addressed datastore
 //! into a single batteries-included binary. Datastore is on by default
@@ -14,26 +14,22 @@ use clap::{Parser, Subcommand};
 use swactor::actor::{ActorInterface, Ctx};
 use swactor::config::RuntimeConfig;
 use swactor::runtime::Runtime;
-use distribution::crypto::Keypair;
-use distribution::identity::{base58_encode, base58_decode, hex_encode, load_or_generate_keypair};
+use swactor::transport::NodeId;
+use swactor_transport::crypto::Keypair;
+use swactor_transport::identity::{base58_encode, base58_decode, hex_encode, load_or_generate_keypair};
 use distribution::node::DistributedNodeConfig;
 use distribution::peer_auth::PeerAllowList;
 use distribution::snapshot::DistributionNodeSnapshot;
 use distribution::swim::probe::SwimConfig;
-use distribution::types::NodeId;
 
 use dashboard::collector::StatsCollector;
-use dashboard::distribution_collector::DistributionStatsProvider;
 use dashboard::{start_dashboard, DashboardConfig};
 
-use swactor_datastore::bridge::DatastoreNodeFactory;
 use swactor_datastore::{DatastoreAuthConfig, DatastoreGroup, DatastoreGroupConfig};
 
-mod config;
-mod install;
-mod names;
+use swactor_node::{config, install, names, plugins};
 #[cfg(feature = "relay")]
-mod relay;
+use swactor_node::relay;
 
 // ── CLI ──────────────────────────────────────────────────────────────────
 
@@ -168,18 +164,6 @@ impl ActorInterface for HeartbeatActor {
     fn handle(&mut self, _ctx: &Ctx, _msg: Heartbeat) {}
 }
 
-// ── Snapshot provider ────────────────────────────────────────────────────
-
-struct SnapshotProvider {
-    snapshot: Arc<Mutex<Option<DistributionNodeSnapshot>>>,
-}
-
-impl DistributionStatsProvider for SnapshotProvider {
-    fn snapshot(&self) -> Option<DistributionNodeSnapshot> {
-        self.snapshot.lock().unwrap().clone()
-    }
-}
-
 // ── Main ─────────────────────────────────────────────────────────────────
 
 fn default_config_dir() -> std::path::PathBuf {
@@ -352,10 +336,15 @@ fn main() {
         cfg.listen.as_ref().and_then(|s| s.parse().ok())
     });
 
-    // Signal handler
+    // Signal handler — second Ctrl+C forces immediate exit
     {
         let stop = Arc::clone(&stop);
         ctrlc::set_handler(move || {
+            if stop.load(Ordering::Relaxed) {
+                eprintln!("\nForce exit.");
+                std::process::exit(1);
+            }
+            eprintln!("\nShutting down (press Ctrl+C again to force)...");
             stop.store(true, Ordering::Relaxed);
         })
         .expect("failed to set signal handler");
@@ -444,11 +433,10 @@ fn main() {
         .unwrap_or_else(|| names::generate_name(&keypair));
 
     // Persist to config if not already set
-    if cfg.node_name.is_none() {
-        if let Some(config_path) = &resolved_config_path {
+    if cfg.node_name.is_none()
+        && let Some(config_path) = &resolved_config_path {
             persist_node_name(config_path, &node_name);
         }
-    }
 
     eprintln!("Node name: {node_name}");
 
@@ -484,7 +472,6 @@ fn main() {
         ..Default::default()
     });
     dash.install_tracing();
-    dash.set_peer_auth(Arc::clone(&peer_auth));
 
     // Create actor runtime
     let num_threads = 2;
@@ -495,7 +482,7 @@ fn main() {
         channel_buffer_size: 2000,
         ..Default::default()
     })
-    .with_extension(Arc::new(swactor_std::StdExtension::new()));
+    .with_extension(Arc::new(swactor::std::StdExtension::new()));
     rt.set_stats_hook(collector.clone());
 
     let handle = rt.run().expect("failed to start runtime");
@@ -522,18 +509,27 @@ fn main() {
             },
         )
         .expect("failed to start datastore");
-        dash.set_datastore(group.bridge().clone());
+        // Register datastore plugin
+        let ds_plugin = plugins::datastore::DatastorePlugin::from_group(
+            &group,
+            Arc::clone(&handle.runtime),
+            chunk_size,
+        );
+        dash.register_plugin(Arc::new(ds_plugin));
         Some(group)
     } else {
         eprintln!("Datastore: disabled");
+        // Register stopped datastore plugin (allows starting from dashboard)
+        let ds_plugin = plugins::datastore::DatastorePlugin::stopped(
+            Arc::clone(&handle.runtime),
+            chunk_size,
+        );
+        dash.register_plugin(Arc::new(ds_plugin));
         None
     };
 
-    // Always wire up the factory so the UI can start/stop datastore
-    let factory = DatastoreNodeFactory::new(Arc::clone(&handle.runtime), chunk_size);
-    dash.set_datastore_factory(Arc::new(factory));
-
     // Distribution config
+    eprintln!("Distribution: SWIM (transport: {transport})");
     let swim_config = SwimConfig {
         probe_interval: 5,
         probe_timeout: 6,       // 600ms — allows relay round-trip
@@ -548,9 +544,15 @@ fn main() {
         ..Default::default()
     };
 
-    // Channel for triggering SWIM joins (fed by dashboard "Add Peer")
+    // Channel for triggering SWIM joins (fed by peers plugin "Add Peer")
     let (join_tx, join_rx) = std::sync::mpsc::channel::<dashboard::JoinPeerInfo>();
-    dash.set_join_sender(join_tx);
+
+    // Register peers plugin
+    let peers_plugin = plugins::peers::PeersPlugin::new(
+        Arc::clone(&peer_auth),
+        Some(join_tx),
+    );
+    dash.register_plugin(Arc::new(peers_plugin));
 
     match transport.as_str() {
         #[cfg(feature = "iroh")]
@@ -601,7 +603,6 @@ fn main() {
         }
     }
 
-    eprintln!("\nShutting down...");
     handle.shutdown();
     dash.shutdown();
     handle.join();
@@ -629,7 +630,8 @@ fn run_tcp(
     use distribution::driver::NodeDriver;
 
     let listen_addr = listen.expect("--listen is required for TCP mode");
-    let mut driver = NodeDriver::with_keypair(listen_addr, keypair, node_config)
+    let dist_keypair = distribution::crypto::Keypair::from_bytes(&keypair.secret_bytes());
+    let mut driver = NodeDriver::with_keypair(listen_addr, dist_keypair, node_config)
         .expect("failed to create node driver");
 
     eprintln!(
@@ -648,16 +650,16 @@ fn run_tcp(
     // Spawn and register actors
     let actor_addrs = spawn_actors(actors, handle, driver.node_mut());
 
-    // Wire distribution snapshot to dashboard
+    // Wire distribution snapshot to dashboard via plugin
     let mut snap = driver.snapshot();
     snap.node_name = Some(node_name.clone());
     snap.invite_code = Some(invite_code.clone());
     let cached_snapshot: Arc<Mutex<Option<DistributionNodeSnapshot>>> =
         Arc::new(Mutex::new(Some(snap)));
-    let provider = SnapshotProvider {
-        snapshot: Arc::clone(&cached_snapshot),
-    };
-    dash.set_distribution(Arc::new(provider));
+    let dist_plugin = plugins::distribution::DistributionPlugin::new(
+        Arc::clone(&cached_snapshot),
+    );
+    dash.register_plugin(Arc::new(dist_plugin));
 
     // Start dashboard HTTP on a standalone tokio runtime (no iroh runtime in TCP mode)
     dash.start_http_standalone();
@@ -713,7 +715,7 @@ fn run_iroh(
 ) {
     use distribution::iroh_driver::{IrohDriver, IrohDriverConfig};
     use iroh::{RelayMode, SecretKey};
-    use swactor_std::RuntimeNaming;
+    use swactor::std::RuntimeNaming;
 
     // Evaluate relay candidacy and determine embedded relay bind address
     #[cfg(feature = "relay")]
@@ -776,7 +778,7 @@ fn run_iroh(
         relay_mode,
         node: node_config,
         peer_auth: Some(peer_auth.clone()),
-        additional_alpns: vec![swactor_streams::ALPN.to_vec()],
+        additional_alpns: vec![swactor_datastore::streams::ALPN.to_vec()],
         #[cfg(feature = "relay")]
         embedded_relay_bind,
         #[cfg(feature = "relay")]
@@ -785,7 +787,7 @@ fn run_iroh(
     let mut driver = IrohDriver::new(iroh_config).expect("failed to create iroh driver");
 
     // Spawn StreamManager actor
-    let stream_mgr = swactor_streams::StreamManager::new(
+    let stream_mgr = swactor_datastore::streams::StreamManager::new(
         driver.endpoint().clone(),
         driver.tokio_handle(),
         Arc::clone(&handle.runtime),
@@ -796,7 +798,7 @@ fn run_iroh(
         .expect("spawn StreamManager");
     handle
         .runtime
-        .register_name(swactor_streams::STREAM_MANAGER_NAME, stream_mgr_addr)
+        .register_name(swactor_datastore::streams::STREAM_MANAGER_NAME, stream_mgr_addr)
         .expect("register StreamManager");
 
     // Wire streams into the datastore
@@ -834,16 +836,16 @@ fn run_iroh(
         false
     };
 
-    // Wire distribution snapshot to dashboard
+    // Wire distribution snapshot to dashboard via plugin
     let mut snap = driver.snapshot();
     snap.node_name = Some(node_name.clone());
     snap.invite_code = Some(invite_code.clone());
     let cached_snapshot: Arc<Mutex<Option<DistributionNodeSnapshot>>> =
         Arc::new(Mutex::new(Some(snap)));
-    let provider = SnapshotProvider {
-        snapshot: Arc::clone(&cached_snapshot),
-    };
-    dash.set_distribution(Arc::new(provider));
+    let dist_plugin = plugins::distribution::DistributionPlugin::new(
+        Arc::clone(&cached_snapshot),
+    );
+    dash.register_plugin(Arc::new(dist_plugin));
 
     // Start dashboard HTTP on IrohDriver's tokio runtime
     dash.start_http(driver.tokio_handle());
@@ -863,7 +865,7 @@ fn run_iroh(
             let mgr_addr = stream_mgr_addr;
             let node_bytes = node_id.0;
             driver.tokio_handle().spawn(async move {
-                match swactor_streams::accept::handle_incoming(
+                match swactor_datastore::streams::accept::handle_incoming(
                     node_bytes, conn, &rt_clone, mgr_addr,
                 )
                 .await
@@ -914,13 +916,12 @@ fn run_iroh(
         }
 
         // Lazily pick up home relay URL once the endpoint connects
-        if !home_relay_set {
-            if let Some(url) = driver.home_relay_url() {
+        if !home_relay_set
+            && let Some(url) = driver.home_relay_url() {
                 eprintln!("Relay URL (home): {url}");
                 driver.node_mut().set_relay_url(Some(url.to_string()));
                 home_relay_set = true;
             }
-        }
 
         for addr in &actor_addrs {
             let _ = handle.runtime.send_to(*addr, Heartbeat);
diff --git a/crates/swactor-node/src/names.rs b/crates/node/src/names.rs
similarity index 97%
rename from crates/swactor-node/src/names.rs
rename to crates/node/src/names.rs
index 59feaf8..d20d52f 100644
--- a/crates/swactor-node/src/names.rs
+++ b/crates/node/src/names.rs
@@ -3,7 +3,7 @@
 //! Produces deterministic `adjective-animal` names from a keypair's
 //! public key bytes, so the same identity always gets the same default name.
 
-use distribution::crypto::Keypair;
+use swactor_transport::crypto::Keypair;
 
 const ADJECTIVES: &[&str] = &[
     "bold", "brave", "bright", "calm", "clever",
diff --git a/crates/node/src/plugins/datastore.rs b/crates/node/src/plugins/datastore.rs
new file mode 100644
index 0000000..2e232c9
--- /dev/null
+++ b/crates/node/src/plugins/datastore.rs
@@ -0,0 +1,592 @@
+//! Datastore plugin adapter for the dashboard plugin system.
+//!
+//! Wraps `DatastoreBridge` and `DatastoreNodeFactory` into a `DashboardPlugin`
+//! that the dashboard can poll for snapshots and dispatch HTTP requests to.
+
+use std::collections::HashMap;
+use std::sync::{Arc, Mutex};
+
+use dashboard::plugin::{DashboardPlugin, PluginResponse};
+
+use swactor_datastore::bridge::{DatastoreGroup, DatastoreGroupConfig};
+use swactor::runtime::Runtime;
+
+use crate::plugins::datastore::bridge_ops::BridgeOps;
+
+/// HTML page for the datastore plugin.
+const DATASTORE_HTML: &str = include_str!("datastore_page.html");
+
+/// Dashboard plugin that exposes datastore metrics, CRUD operations, and
+/// lifecycle management through the generic plugin interface.
+pub struct DatastorePlugin {
+    /// The bridge operations handle — either a live bridge or a factory-only state.
+    state: Mutex<DatastoreState>,
+}
+
+enum DatastoreState {
+    Running(BridgeOps),
+    Stopped {
+        runtime: Arc<Runtime>,
+        default_chunk_size: u32,
+    },
+}
+
+impl DatastorePlugin {
+    /// Create a plugin wrapping an already-running datastore group.
+    pub fn from_group(group: &DatastoreGroup, runtime: Arc<Runtime>, default_chunk_size: u32) -> Self {
+        Self {
+            state: Mutex::new(DatastoreState::Running(BridgeOps::from_group(
+                group,
+                runtime,
+                default_chunk_size,
+            ))),
+        }
+    }
+
+    /// Create a plugin with no running datastore (factory-only mode).
+    pub fn stopped(runtime: Arc<Runtime>, default_chunk_size: u32) -> Self {
+        Self {
+            state: Mutex::new(DatastoreState::Stopped {
+                runtime,
+                default_chunk_size,
+            }),
+        }
+    }
+}
+
+impl DashboardPlugin for DatastorePlugin {
+    fn name(&self) -> &str {
+        "datastore"
+    }
+
+    fn snapshot_json(&self) -> Option<String> {
+        let state = self.state.lock().unwrap();
+        match &*state {
+            DatastoreState::Running(ops) => {
+                let snap_json = ops.snapshot_json().unwrap_or_else(|| "null".into());
+                Some(format!(
+                    r#"{{"is_running":true,"snapshot":{}}}"#,
+                    snap_json
+                ))
+            }
+            DatastoreState::Stopped { .. } => {
+                Some(r#"{"is_running":false,"snapshot":null}"#.to_string())
+            }
+        }
+    }
+
+    fn handle_request(
+        &self,
+        method: &str,
+        path: &str,
+        query: &HashMap<String, String>,
+        body: &[u8],
+    ) -> PluginResponse {
+        match (method, path) {
+            ("GET", "list") => {
+                let state = self.state.lock().unwrap();
+                let ops = match &*state {
+                    DatastoreState::Running(ops) => ops,
+                    _ => return PluginResponse::error(503, "datastore not running"),
+                };
+                let scope = match query.get("scope").map(|s| s.as_str()) {
+                    Some("local") => ListScope::Local,
+                    _ => ListScope::Swarm,
+                };
+                let name_filter = query.get("name").map(|s| s.as_str());
+                match ops.list_objects(name_filter, scope) {
+                    Ok(json) => PluginResponse::json(json),
+                    Err(e) => PluginResponse::error(500, e),
+                }
+            }
+            ("GET", "get") => {
+                let state = self.state.lock().unwrap();
+                let ops = match &*state {
+                    DatastoreState::Running(ops) => ops,
+                    _ => return PluginResponse::error(503, "datastore not running"),
+                };
+                let hash = match query.get("hash") {
+                    Some(h) => h.as_str(),
+                    None => return PluginResponse::error(400, "missing ?hash= parameter"),
+                };
+                match ops.get_object(hash) {
+                    Ok(json) => PluginResponse::json(json),
+                    Err(e) if e.contains("not found") => PluginResponse::error(404, e),
+                    Err(e) => PluginResponse::error(500, e),
+                }
+            }
+            ("GET", "data") => {
+                let state = self.state.lock().unwrap();
+                let ops = match &*state {
+                    DatastoreState::Running(ops) => ops,
+                    _ => return PluginResponse::error(503, "datastore not running"),
+                };
+                let hash = match query.get("hash") {
+                    Some(h) => h.as_str(),
+                    None => return PluginResponse::error(400, "missing ?hash= parameter"),
+                };
+                match ops.get_data(hash) {
+                    Ok(data) => PluginResponse::Binary {
+                        content_type: "application/octet-stream".into(),
+                        data,
+                    },
+                    Err(e) if e.contains("not found") => PluginResponse::error(404, e),
+                    Err(e) => PluginResponse::error(500, e),
+                }
+            }
+            ("GET", "status") => {
+                let state = self.state.lock().unwrap();
+                let ops = match &*state {
+                    DatastoreState::Running(ops) => ops,
+                    _ => return PluginResponse::error(503, "datastore not running"),
+                };
+                match ops.node_status() {
+                    Ok(json) => PluginResponse::json(json),
+                    Err(e) => PluginResponse::error(500, e),
+                }
+            }
+            ("POST", "put") => {
+                let state = self.state.lock().unwrap();
+                let ops = match &*state {
+                    DatastoreState::Running(ops) => ops,
+                    _ => return PluginResponse::error(503, "datastore not running"),
+                };
+                let name = query.get("name").cloned();
+                match ops.put_data(body.to_vec(), name) {
+                    Ok(json) => PluginResponse::json(json),
+                    Err(e) => PluginResponse::error(500, e),
+                }
+            }
+            ("POST", "delete") => {
+                let state = self.state.lock().unwrap();
+                let ops = match &*state {
+                    DatastoreState::Running(ops) => ops,
+                    _ => return PluginResponse::error(503, "datastore not running"),
+                };
+                let hash = match query.get("hash") {
+                    Some(h) => h.as_str(),
+                    None => return PluginResponse::error(400, "missing ?hash= parameter"),
+                };
+                match ops.delete_object(hash) {
+                    Ok(json) => PluginResponse::json(json),
+                    Err(e) if e.contains("not found") => PluginResponse::error(404, e),
+                    Err(e) => PluginResponse::error(500, e),
+                }
+            }
+            ("POST", "start") => {
+                let mut state = self.state.lock().unwrap();
+                if matches!(&*state, DatastoreState::Running(_)) {
+                    return PluginResponse::error(409, "datastore already running");
+                }
+                let (runtime, chunk_size) = match &*state {
+                    DatastoreState::Stopped {
+                        runtime,
+                        default_chunk_size,
+                    } => (Arc::clone(runtime), *default_chunk_size),
+                    _ => unreachable!(),
+                };
+                let storage_path = query.get("storage_path").cloned();
+                match start_datastore_group(&runtime, chunk_size, storage_path) {
+                    Ok(ops) => {
+                        *state = DatastoreState::Running(ops);
+                        PluginResponse::json(r#"{"ok":true}"#.to_string())
+                    }
+                    Err(e) => PluginResponse::error(500, e),
+                }
+            }
+            ("POST", "shutdown") => {
+                let mut state = self.state.lock().unwrap();
+                let (runtime, chunk_size) = match &*state {
+                    DatastoreState::Running(ops) => {
+                        let _ = ops.shutdown_datastore();
+                        (Arc::clone(&ops.runtime), ops.default_chunk_size)
+                    }
+                    _ => return PluginResponse::error(503, "datastore not running"),
+                };
+                *state = DatastoreState::Stopped {
+                    runtime,
+                    default_chunk_size: chunk_size,
+                };
+                PluginResponse::json(r#"{"ok":true}"#.to_string())
+            }
+            _ => PluginResponse::not_found(),
+        }
+    }
+
+    fn html_page(&self) -> Option<&str> {
+        Some(DATASTORE_HTML)
+    }
+}
+
+/// Scope filter for listing objects — mirrors the old `ListScope` from dashboard.
+#[derive(Debug, Clone, Copy)]
+enum ListScope {
+    Local,
+    Swarm,
+}
+
+/// Start a new datastore group and return bridge operations.
+fn start_datastore_group(
+    runtime: &Arc<Runtime>,
+    chunk_size: u32,
+    storage_path: Option<String>,
+) -> Result<BridgeOps, String> {
+    use swactor::transport::NodeId;
+    use std::time::{SystemTime, UNIX_EPOCH};
+
+    // Generate a unique node ID
+    let mut bytes = [0u8; 32];
+    let nanos = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap()
+        .as_nanos();
+    for (i, b) in nanos.to_le_bytes().iter().enumerate() {
+        bytes[i % 32] ^= *b;
+    }
+    let pid = std::process::id();
+    for (i, b) in pid.to_le_bytes().iter().enumerate() {
+        bytes[i + 16] ^= *b;
+    }
+    let node_id = NodeId(bytes);
+    let node_hex: String = bytes.iter().map(|b| format!("{b:02x}")).collect();
+
+    let group = DatastoreGroup::spawn(
+        Arc::clone(runtime),
+        DatastoreGroupConfig {
+            node_id,
+            node_id_hex: node_hex,
+            chunk_size,
+            storage_path,
+            auth: None,
+            gc_interval: 1000,
+            disseminate_interval: 50,
+        },
+    )?;
+
+    Ok(BridgeOps::from_group(&group, Arc::clone(runtime), chunk_size))
+}
+
+/// Internal module that extracts the bridge operations from `DatastoreBridge`.
+///
+/// Instead of depending on the `DatastoreStatsProvider` trait (which we're
+/// removing from the dashboard), we replicate the operations directly using
+/// the datastore actor addresses and runtime.
+mod bridge_ops {
+    use super::*;
+    use std::collections::BTreeMap;
+    use std::thread;
+    use std::time::{Duration, Instant};
+
+    use swactor::actor::ActorAddress;
+    use swactor::runtime::Inbox;
+    use swactor_datastore::chunking::reassemble_blob;
+    use swactor_datastore::messages::{DatastoreNodeMsg, DatastoreResponse, MetadataMsg};
+    use swactor_datastore::metrics::DatastoreMetrics;
+    use swactor_datastore::types::ContentHash;
+
+    const POLL_TIMEOUT: Duration = Duration::from_secs(5);
+    const POLL_INTERVAL: Duration = Duration::from_millis(1);
+
+    fn poll_response(
+        inbox: &Inbox<DatastoreResponse>,
+        timeout: Duration,
+    ) -> Option<DatastoreResponse> {
+        let start = Instant::now();
+        loop {
+            if let Some(resp) = inbox.try_recv() {
+                return Some(resp);
+            }
+            if start.elapsed() > timeout {
+                return None;
+            }
+            thread::sleep(POLL_INTERVAL);
+        }
+    }
+
+    fn entry_to_json(entry: &swactor_datastore::types::ObjectEntry) -> serde_json::Value {
+        let node_hex: String = entry.node_id.0.iter().map(|b| format!("{b:02x}")).collect();
+        serde_json::json!({
+            "content_hash": entry.content_hash.to_hex(),
+            "name": entry.name,
+            "node_id": node_hex,
+            "tags": entry.tags,
+            "size_bytes": entry.size_bytes,
+            "created_at": entry.created_at,
+        })
+    }
+
+    fn manifest_to_json(manifest: &swactor_datastore::types::ObjectManifest) -> serde_json::Value {
+        let chunks: Vec<serde_json::Value> = manifest
+            .chunks
+            .iter()
+            .map(|c| {
+                serde_json::json!({
+                    "hash": c.hash.to_hex(),
+                    "offset": c.offset,
+                    "size": c.size,
+                })
+            })
+            .collect();
+        serde_json::json!({
+            "content_hash": manifest.content_hash.to_hex(),
+            "chunks": chunks,
+            "total_size": manifest.total_size,
+            "chunk_size": manifest.chunk_size,
+            "content_type": manifest.content_type,
+        })
+    }
+
+    fn entries_to_json(entries: &[swactor_datastore::types::ObjectEntry]) -> Vec<serde_json::Value> {
+        entries.iter().map(entry_to_json).collect()
+    }
+
+    pub struct BridgeOps {
+        metrics: Arc<DatastoreMetrics>,
+        pub runtime: Arc<Runtime>,
+        datastore_addr: ActorAddress,
+        metadata_addr: ActorAddress,
+        pub default_chunk_size: u32,
+    }
+
+    impl BridgeOps {
+        pub fn from_group(
+            group: &DatastoreGroup,
+            runtime: Arc<Runtime>,
+            default_chunk_size: u32,
+        ) -> Self {
+            let datastore_addr = group.datastore_addr();
+            let metadata_addr = group.metadata_addr();
+            let metrics = Arc::new(DatastoreMetrics::new());
+
+            Self {
+                metrics,
+                runtime,
+                datastore_addr,
+                metadata_addr,
+                default_chunk_size,
+            }
+        }
+
+        pub fn snapshot_json(&self) -> Option<String> {
+            let snap = self.metrics.snapshot();
+            serde_json::to_string(&snap).ok()
+        }
+
+        pub fn list_objects(
+            &self,
+            name_filter: Option<&str>,
+            scope: super::ListScope,
+        ) -> Result<String, String> {
+            let inbox = self
+                .runtime
+                .new_inbox::<DatastoreResponse>()
+                .map_err(|e| format!("failed to create inbox: {e}"))?;
+
+            match scope {
+                super::ListScope::Local => {
+                    let _ = self.runtime.send_to(
+                        self.datastore_addr,
+                        DatastoreNodeMsg::List {
+                            name_filter: name_filter.map(|s| s.to_string()),
+                            all: false,
+                            reply_to: *inbox.addr(),
+                        },
+                    );
+                }
+                super::ListScope::Swarm => {
+                    let _ = self.runtime.send_to(
+                        self.metadata_addr,
+                        MetadataMsg::ListLocal {
+                            name_filter: name_filter.map(|s| s.to_string()),
+                            reply_to: *inbox.addr(),
+                        },
+                    );
+                }
+            }
+
+            match poll_response(&inbox, POLL_TIMEOUT) {
+                Some(DatastoreResponse::ListOk { entries }) => {
+                    let json =
+                        serde_json::json!({ "entries": entries_to_json(&entries) }).to_string();
+                    Ok(json)
+                }
+                Some(DatastoreResponse::Error { reason }) => Err(reason),
+                _ => Err("timeout".into()),
+            }
+        }
+
+        pub fn get_object(&self, hash: &str) -> Result<String, String> {
+            let content_hash = ContentHash::from_hex(hash)
+                .ok_or_else(|| "invalid content hash hex".to_string())?;
+
+            let inbox = self
+                .runtime
+                .new_inbox::<DatastoreResponse>()
+                .map_err(|e| format!("failed to create inbox: {e}"))?;
+
+            let _ = self.runtime.send_to(
+                self.datastore_addr,
+                DatastoreNodeMsg::Get {
+                    content_hash,
+                    reply_to: *inbox.addr(),
+                },
+            );
+
+            match poll_response(&inbox, POLL_TIMEOUT) {
+                Some(DatastoreResponse::GetOk { entry, manifest }) => {
+                    self.metrics.record_get(&content_hash.to_hex());
+                    let json = serde_json::json!({
+                        "entry": entry_to_json(&entry),
+                        "manifest": manifest_to_json(&manifest),
+                    })
+                    .to_string();
+                    Ok(json)
+                }
+                Some(DatastoreResponse::NotFound) => Err("not found".into()),
+                Some(DatastoreResponse::Error { reason }) => Err(reason),
+                _ => Err("timeout".into()),
+            }
+        }
+
+        pub fn get_data(&self, hash: &str) -> Result<Vec<u8>, String> {
+            let content_hash = ContentHash::from_hex(hash)
+                .ok_or_else(|| "invalid content hash hex".to_string())?;
+
+            let inbox = self
+                .runtime
+                .new_inbox::<DatastoreResponse>()
+                .map_err(|e| format!("failed to create inbox: {e}"))?;
+
+            let _ = self.runtime.send_to(
+                self.datastore_addr,
+                DatastoreNodeMsg::Get {
+                    content_hash,
+                    reply_to: *inbox.addr(),
+                },
+            );
+
+            self.metrics.record_get(&content_hash.to_hex());
+
+            let manifest = match poll_response(&inbox, POLL_TIMEOUT) {
+                Some(DatastoreResponse::GetOk { manifest, .. }) => manifest,
+                Some(DatastoreResponse::NotFound) => return Err("not found".into()),
+                Some(DatastoreResponse::Error { reason }) => return Err(reason),
+                _ => return Err("timeout".into()),
+            };
+
+            let mut chunk_data = Vec::new();
+            for chunk_ref in &manifest.chunks {
+                let chunk_inbox = self
+                    .runtime
+                    .new_inbox::<DatastoreResponse>()
+                    .map_err(|e| format!("failed to create inbox: {e}"))?;
+
+                let _ = self.runtime.send_to(
+                    self.datastore_addr,
+                    DatastoreNodeMsg::ReadChunk {
+                        hash: chunk_ref.hash,
+                        reply_to: *chunk_inbox.addr(),
+                    },
+                );
+
+                match poll_response(&chunk_inbox, POLL_TIMEOUT) {
+                    Some(DatastoreResponse::ChunkOk { hash, data }) => {
+                        chunk_data.push((hash, data));
+                    }
+                    _ => return Err("failed to read chunk".into()),
+                }
+            }
+
+            reassemble_blob(&manifest, &chunk_data)
+                .map_err(|e| format!("reassembly failed: {e:?}"))
+        }
+
+        pub fn put_data(&self, data: Vec<u8>, name: Option<String>) -> Result<String, String> {
+            let body_len = data.len();
+
+            let inbox = self
+                .runtime
+                .new_inbox::<DatastoreResponse>()
+                .map_err(|e| format!("failed to create inbox: {e}"))?;
+
+            let _ = self.runtime.send_to(
+                self.datastore_addr,
+                DatastoreNodeMsg::Put {
+                    data,
+                    name: name.clone(),
+                    tags: BTreeMap::new(),
+                    reply_to: *inbox.addr(),
+                },
+            );
+
+            match poll_response(&inbox, POLL_TIMEOUT) {
+                Some(DatastoreResponse::PutOk { content_hash }) => {
+                    let hex = content_hash.to_hex();
+                    self.metrics
+                        .record_put(&hex, name.as_deref(), body_len as u64);
+                    let json = serde_json::json!({ "content_hash": hex }).to_string();
+                    Ok(json)
+                }
+                Some(DatastoreResponse::Error { reason }) => Err(reason),
+                _ => Err("timeout waiting for put response".into()),
+            }
+        }
+
+        pub fn delete_object(&self, hash: &str) -> Result<String, String> {
+            let content_hash = ContentHash::from_hex(hash)
+                .ok_or_else(|| "invalid content hash hex".to_string())?;
+
+            let inbox = self
+                .runtime
+                .new_inbox::<DatastoreResponse>()
+                .map_err(|e| format!("failed to create inbox: {e}"))?;
+
+            let _ = self.runtime.send_to(
+                self.datastore_addr,
+                DatastoreNodeMsg::Delete {
+                    content_hash,
+                    reply_to: *inbox.addr(),
+                },
+            );
+
+            match poll_response(&inbox, POLL_TIMEOUT) {
+                Some(DatastoreResponse::DeleteOk { content_hash }) => {
+                    let hex = content_hash.to_hex();
+                    self.metrics.record_delete(&hex, 0);
+                    let json = serde_json::json!({ "content_hash": hex }).to_string();
+                    Ok(json)
+                }
+                Some(DatastoreResponse::NotFound) => Err("not found".into()),
+                Some(DatastoreResponse::Error { reason }) => Err(reason),
+                _ => Err("timeout".into()),
+            }
+        }
+
+        pub fn node_status(&self) -> Result<String, String> {
+            let inbox = self
+                .runtime
+                .new_inbox::<DatastoreResponse>()
+                .map_err(|e| format!("failed to create inbox: {e}"))?;
+
+            let _ = self.runtime.send_to(
+                self.datastore_addr,
+                DatastoreNodeMsg::Status {
+                    reply_to: *inbox.addr(),
+                },
+            );
+
+            match poll_response(&inbox, POLL_TIMEOUT) {
+                Some(DatastoreResponse::NodeStatus { node_id }) => {
+                    let hex: String = node_id.0.iter().map(|b| format!("{b:02x}")).collect();
+                    let json = serde_json::json!({ "node_id": hex }).to_string();
+                    Ok(json)
+                }
+                _ => Err("timeout".into()),
+            }
+        }
+
+        pub fn shutdown_datastore(&self) -> Result<(), String> {
+            Ok(())
+        }
+    }
+}
diff --git a/crates/dashboard/src/datastore_html.rs b/crates/node/src/plugins/datastore_page.html
similarity index 97%
rename from crates/dashboard/src/datastore_html.rs
rename to crates/node/src/plugins/datastore_page.html
index 4522338..4671a62 100644
--- a/crates/dashboard/src/datastore_html.rs
+++ b/crates/node/src/plugins/datastore_page.html
@@ -1,4 +1,3 @@
-pub const DATASTORE_HTML: &str = r##"<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="UTF-8">
@@ -194,8 +193,8 @@ pub const DATASTORE_HTML: &str = r##"<!DOCTYPE html>
     <nav class="nav-links">
       <a href="/" class="nav-link">Overview</a>
       <a href="/actors" class="nav-link">Actors</a>
-      <a href="/distribution" class="nav-link">Distribution</a>
-      <a href="/datastore" class="nav-link active">Datastore</a>
+      <a href="/plugin/distribution" class="nav-link">Distribution</a>
+      <a href="/plugin/datastore" class="nav-link active">Datastore</a>
     </nav>
   </div>
   <div class="header-right">
@@ -424,7 +423,7 @@ pub const DATASTORE_HTML: &str = r##"<!DOCTYPE html>
     var btn = $('uploadBtn');
     btn.disabled = true;
     btn.textContent = 'uploading...';
-    var url = '/api/datastore/put';
+    var url = '/api/plugin/datastore/put';
     if (name) url += '?name=' + encodeURIComponent(name);
     fetch(url, { method: 'POST', body: file })
       .then(function(r) {
@@ -441,7 +440,7 @@ pub const DATASTORE_HTML: &str = r##"<!DOCTYPE html>
   };
 
   window.download = function(hash, filename) {
-    fetch('/api/datastore/data?hash=' + hash)
+    fetch('/api/plugin/datastore/data?hash=' + hash)
       .then(function(r) {
         if (!r.ok) throw new Error('not found');
         return r.blob();
@@ -458,7 +457,7 @@ pub const DATASTORE_HTML: &str = r##"<!DOCTYPE html>
 
   window.del = function(hash) {
     if (!confirm('Delete ' + hash.substring(0, 16) + '?')) return;
-    fetch('/api/datastore/delete?hash=' + hash, { method: 'POST' })
+    fetch('/api/plugin/datastore/delete?hash=' + hash, { method: 'POST' })
       .then(function(r) {
         if (!r.ok) return r.json().then(function(j) { throw new Error(j.error || r.statusText); });
         toast('deleted', 'success');
@@ -467,7 +466,7 @@ pub const DATASTORE_HTML: &str = r##"<!DOCTYPE html>
   };
 
   window.showDetail = function(hash) {
-    fetch('/api/datastore/get?hash=' + hash)
+    fetch('/api/plugin/datastore/get?hash=' + hash)
       .then(function(r) {
         if (!r.ok) throw new Error('not found');
         return r.json();
@@ -505,7 +504,7 @@ pub const DATASTORE_HTML: &str = r##"<!DOCTYPE html>
 
   window.startDatastore = function() {
     $('startBtn').disabled = true;
-    fetch('/api/datastore/start', { method: 'POST' })
+    fetch('/api/plugin/datastore/start', { method: 'POST' })
       .then(function(r) {
         if (!r.ok) return r.json().then(function(j) { throw new Error(j.error || r.statusText); });
         return r.json();
@@ -521,7 +520,7 @@ pub const DATASTORE_HTML: &str = r##"<!DOCTYPE html>
   window.stopDatastore = function() {
     if (!confirm('Stop the datastore? In-memory data will be lost.')) return;
     $('stopBtn').disabled = true;
-    fetch('/api/datastore/shutdown', { method: 'POST' })
+    fetch('/api/plugin/datastore/shutdown', { method: 'POST' })
       .then(function(r) {
         if (!r.ok) return r.json().then(function(j) { throw new Error(j.error || r.statusText); });
         return r.json();
@@ -568,4 +567,3 @@ pub const DATASTORE_HTML: &str = r##"<!DOCTYPE html>
 </script>
 </body>
 </html>
-"##;
diff --git a/crates/node/src/plugins/distribution.rs b/crates/node/src/plugins/distribution.rs
new file mode 100644
index 0000000..c21ef67
--- /dev/null
+++ b/crates/node/src/plugins/distribution.rs
@@ -0,0 +1,62 @@
+//! Distribution plugin adapter for the dashboard plugin system.
+//!
+//! Wraps a cached `DistributionNodeSnapshot` into a `DashboardPlugin` that the
+//! dashboard can poll for snapshots and serve the distribution page.
+
+use std::collections::HashMap;
+use std::sync::{Arc, Mutex};
+
+use dashboard::plugin::{DashboardPlugin, PluginResponse};
+use distribution::snapshot::DistributionNodeSnapshot;
+
+/// HTML page for the distribution plugin.
+const DISTRIBUTION_HTML: &str = include_str!("distribution_page.html");
+
+/// Dashboard plugin that exposes distribution node snapshots.
+pub struct DistributionPlugin {
+    cached: Arc<Mutex<Option<DistributionNodeSnapshot>>>,
+}
+
+impl DistributionPlugin {
+    pub fn new(cached: Arc<Mutex<Option<DistributionNodeSnapshot>>>) -> Self {
+        Self { cached }
+    }
+}
+
+impl DashboardPlugin for DistributionPlugin {
+    fn name(&self) -> &str {
+        "distribution"
+    }
+
+    fn snapshot_json(&self) -> Option<String> {
+        let guard = self.cached.lock().unwrap();
+        let snapshot = guard.as_ref()?;
+        serde_json::to_string(snapshot).ok()
+    }
+
+    fn handle_request(
+        &self,
+        method: &str,
+        path: &str,
+        _query: &HashMap<String, String>,
+        _body: &[u8],
+    ) -> PluginResponse {
+        match (method, path) {
+            ("GET", "") => {
+                let guard = self.cached.lock().unwrap();
+                match guard.as_ref() {
+                    Some(snapshot) => match serde_json::to_string(snapshot) {
+                        Ok(json) => PluginResponse::json(json),
+                        Err(_) => PluginResponse::json("{}".into()),
+                    },
+                    None => PluginResponse::json("{}".into()),
+                }
+            }
+            _ => PluginResponse::not_found(),
+        }
+    }
+
+    fn html_page(&self) -> Option<&str> {
+        Some(DISTRIBUTION_HTML)
+    }
+}
diff --git a/crates/dashboard/src/distribution_html.rs b/crates/node/src/plugins/distribution_page.html
similarity index 99%
rename from crates/dashboard/src/distribution_html.rs
rename to crates/node/src/plugins/distribution_page.html
index 00ff106..81032f5 100644
--- a/crates/dashboard/src/distribution_html.rs
+++ b/crates/node/src/plugins/distribution_page.html
@@ -1,4 +1,3 @@
-pub const DISTRIBUTION_HTML: &str = r##"<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="UTF-8">
@@ -167,8 +166,8 @@ pub const DISTRIBUTION_HTML: &str = r##"<!DOCTYPE html>
     <nav class="nav-links">
       <a href="/" class="nav-link">Overview</a>
       <a href="/actors" class="nav-link">Actors</a>
-      <a href="/distribution" class="nav-link active">Distribution</a>
-      <a href="/datastore" class="nav-link">Datastore</a>
+      <a href="/plugin/distribution" class="nav-link active">Distribution</a>
+      <a href="/plugin/datastore" class="nav-link">Datastore</a>
     </nav>
   </div>
   <div class="header-right">
@@ -852,7 +851,7 @@ pub const DISTRIBUTION_HTML: &str = r##"<!DOCTYPE html>
   function setToken(t) { dashToken = t; }
 
   function fetchPeers() {
-    fetch('/api/peers')
+    fetch('/api/plugin/peers')
       .then(function(r) { return r.json(); })
       .then(function(d) { renderPeers(d); })
       .catch(function() {});
@@ -894,7 +893,7 @@ pub const DISTRIBUTION_HTML: &str = r##"<!DOCTYPE html>
     var nid = document.getElementById('peerNodeId').value.trim();
     var label = document.getElementById('peerLabel').value.trim();
     if (!nid) return;
-    fetch('/api/peers/add', {
+    fetch('/api/plugin/peers/add', {
       method: 'POST',
       headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + dashToken },
       body: JSON.stringify({ node_id: nid, label: label })
@@ -906,7 +905,7 @@ pub const DISTRIBUTION_HTML: &str = r##"<!DOCTYPE html>
   };
 
   window.removePeer = function(nid) {
-    fetch('/api/peers/remove', {
+    fetch('/api/plugin/peers/remove', {
       method: 'POST',
       headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + dashToken },
       body: JSON.stringify({ node_id: nid })
@@ -1153,4 +1152,3 @@ pub const DISTRIBUTION_HTML: &str = r##"<!DOCTYPE html>
 </script>
 </body>
 </html>
-"##;
diff --git a/crates/node/src/plugins/mod.rs b/crates/node/src/plugins/mod.rs
new file mode 100644
index 0000000..8c8c36f
--- /dev/null
+++ b/crates/node/src/plugins/mod.rs
@@ -0,0 +1,3 @@
+pub mod datastore;
+pub mod distribution;
+pub mod peers;
diff --git a/crates/node/src/plugins/peers.rs b/crates/node/src/plugins/peers.rs
new file mode 100644
index 0000000..b363529
--- /dev/null
+++ b/crates/node/src/plugins/peers.rs
@@ -0,0 +1,280 @@
+//! Peers plugin adapter for the dashboard plugin system.
+//!
+//! Moves peer management from the dashboard's server.rs into a plugin that
+//! handles add/remove/sync/list operations via `PeerAllowList`.
+
+use std::collections::HashMap;
+use std::sync::{Arc, Mutex};
+
+use dashboard::plugin::{DashboardPlugin, PluginResponse};
+use dashboard::JoinPeerInfo;
+use swactor::transport::NodeId;
+use swactor_transport::identity::{base58_decode, hex_decode};
+use distribution::peer_auth::PeerAllowList;
+
+/// Dashboard plugin that exposes peer management operations.
+pub struct PeersPlugin {
+    peer_auth: Arc<Mutex<PeerAllowList>>,
+    join_sender: Option<std::sync::mpsc::Sender<JoinPeerInfo>>,
+}
+
+impl PeersPlugin {
+    pub fn new(
+        peer_auth: Arc<Mutex<PeerAllowList>>,
+        join_sender: Option<std::sync::mpsc::Sender<JoinPeerInfo>>,
+    ) -> Self {
+        Self {
+            peer_auth,
+            join_sender,
+        }
+    }
+}
+
+impl DashboardPlugin for PeersPlugin {
+    fn name(&self) -> &str {
+        "peers"
+    }
+
+    fn snapshot_json(&self) -> Option<String> {
+        let list = self.peer_auth.lock().unwrap();
+        let is_open = list.is_open();
+        let peers: Vec<serde_json::Value> = list
+            .list_peers()
+            .iter()
+            .map(|p| {
+                serde_json::json!({
+                    "node_id": p.node_id,
+                    "label": p.label,
+                })
+            })
+            .collect();
+        let json = serde_json::json!({
+            "mode": if is_open { "open" } else { "allow-list" },
+            "peers": peers,
+        });
+        Some(json.to_string())
+    }
+
+    fn handle_request(
+        &self,
+        method: &str,
+        path: &str,
+        _query: &HashMap<String, String>,
+        body: &[u8],
+    ) -> PluginResponse {
+        match (method, path) {
+            ("GET", "list") => self.handle_list(),
+            ("POST", "add") => self.handle_add(body),
+            ("POST", "sync") => self.handle_sync(body),
+            ("POST", "remove") => self.handle_remove(body),
+            _ => PluginResponse::not_found(),
+        }
+    }
+
+    fn html_page(&self) -> Option<&str> {
+        None
+    }
+}
+
+impl PeersPlugin {
+    fn handle_list(&self) -> PluginResponse {
+        let list = self.peer_auth.lock().unwrap();
+        let is_open = list.is_open();
+        let peers: Vec<serde_json::Value> = list
+            .list_peers()
+            .iter()
+            .map(|p| {
+                serde_json::json!({
+                    "node_id": p.node_id,
+                    "label": p.label,
+                })
+            })
+            .collect();
+        let json = serde_json::json!({
+            "mode": if is_open { "open" } else { "allow-list" },
+            "peers": peers,
+        });
+        PluginResponse::json(json.to_string())
+    }
+
+    fn handle_add(&self, body: &[u8]) -> PluginResponse {
+        let body_str = match std::str::from_utf8(body) {
+            Ok(s) => s,
+            Err(_) => return PluginResponse::error(400, "invalid UTF-8"),
+        };
+
+        let parsed: serde_json::Value = match serde_json::from_str(body_str) {
+            Ok(v) => v,
+            Err(e) => return PluginResponse::error(400, format!("invalid JSON: {e}")),
+        };
+
+        let node_id_str = match parsed.get("node_id").and_then(|v| v.as_str()) {
+            Some(s) => s,
+            None => return PluginResponse::error(400, "missing node_id field"),
+        };
+        let label = parsed
+            .get("label")
+            .and_then(|v| v.as_str())
+            .unwrap_or("")
+            .to_string();
+
+        let bytes: [u8; 32] = if let Some(b) = hex_decode(node_id_str) {
+            match b.try_into() {
+                Ok(arr) => arr,
+                Err(_) => {
+                    return PluginResponse::error(400, "invalid node_id (hex decoded to wrong length)");
+                }
+            }
+        } else if let Some(arr) = base58_decode(node_id_str) {
+            arr
+        } else {
+            return PluginResponse::error(400, "invalid node_id (expected 64-char hex or base58)");
+        };
+
+        let relay_url = parsed
+            .get("relay_url")
+            .and_then(|v| v.as_str())
+            .map(|s| s.to_string());
+
+        let node_id = NodeId(bytes);
+        let mut list = self.peer_auth.lock().unwrap();
+        list.add_peer(node_id, label);
+        if let Err(e) = list.save() {
+            eprintln!("warning: failed to persist peers.json: {e}");
+        }
+        drop(list);
+
+        // Trigger a SWIM join for the newly added peer
+        if let Some(tx) = &self.join_sender {
+            let _ = tx.send((bytes, relay_url));
+        }
+
+        PluginResponse::json(r#"{"ok":true}"#.to_string())
+    }
+
+    fn handle_sync(&self, body: &[u8]) -> PluginResponse {
+        let body_str = match std::str::from_utf8(body) {
+            Ok(s) => s,
+            Err(_) => return PluginResponse::error(400, "invalid UTF-8"),
+        };
+
+        let parsed: serde_json::Value = match serde_json::from_str(body_str) {
+            Ok(v) => v,
+            Err(e) => return PluginResponse::error(400, format!("invalid JSON: {e}")),
+        };
+
+        let peers = match parsed.get("peers").and_then(|v| v.as_array()) {
+            Some(arr) => arr,
+            None => return PluginResponse::error(400, "missing peers array"),
+        };
+
+        let mut parsed_peers: Vec<(NodeId, String)> = Vec::new();
+        for peer in peers {
+            let node_id_str = match peer.get("node_id").and_then(|v| v.as_str()) {
+                Some(s) => s,
+                None => return PluginResponse::error(400, "peer missing node_id"),
+            };
+            let label = peer
+                .get("label")
+                .and_then(|v| v.as_str())
+                .unwrap_or("")
+                .to_string();
+
+            let bytes: [u8; 32] = if let Some(b) = hex_decode(node_id_str) {
+                match b.try_into() {
+                    Ok(arr) => arr,
+                    Err(_) => {
+                        return PluginResponse::error(
+                            400,
+                            format!("invalid node_id hex length for {node_id_str}"),
+                        );
+                    }
+                }
+            } else if let Some(arr) = base58_decode(node_id_str) {
+                arr
+            } else {
+                return PluginResponse::error(400, format!("invalid node_id: {node_id_str}"));
+            };
+
+            parsed_peers.push((NodeId(bytes), label));
+        }
+
+        {
+            let mut list = self.peer_auth.lock().unwrap();
+            for (node_id, label) in &parsed_peers {
+                list.add_peer(*node_id, label.clone());
+            }
+            if let Err(e) = list.save() {
+                eprintln!("warning: failed to persist peers.json: {e}");
+            }
+        }
+
+        // Trigger a SWIM join to the seed peer if specified
+        let join_seed = parsed.get("join_seed").and_then(|v| v.as_str());
+        if let Some(seed_str) = join_seed {
+            let seed_bytes: Option<[u8; 32]> = if let Some(b) = hex_decode(seed_str) {
+                b.try_into().ok()
+            } else {
+                base58_decode(seed_str)
+            };
+
+            if let Some(bytes) = seed_bytes {
+                let relay_url = peers.iter().find_map(|p| {
+                    let nid = p.get("node_id").and_then(|v| v.as_str())?;
+                    let peer_bytes: [u8; 32] = if let Some(b) = hex_decode(nid) {
+                        b.try_into().ok()?
+                    } else {
+                        base58_decode(nid)?
+                    };
+                    if peer_bytes == bytes {
+                        p.get("relay_url")
+                            .and_then(|v| v.as_str())
+                            .map(|s| s.to_string())
+                    } else {
+                        None
+                    }
+                });
+
+                if let Some(tx) = &self.join_sender {
+                    let _ = tx.send((bytes, relay_url));
+                }
+            }
+        }
+
+        let added = parsed_peers.len();
+        PluginResponse::json(format!(r#"{{"ok":true,"added":{added}}}"#))
+    }
+
+    fn handle_remove(&self, body: &[u8]) -> PluginResponse {
+        let body_str = match std::str::from_utf8(body) {
+            Ok(s) => s,
+            Err(_) => return PluginResponse::error(400, "invalid UTF-8"),
+        };
+
+        let parsed: serde_json::Value = match serde_json::from_str(body_str) {
+            Ok(v) => v,
+            Err(e) => return PluginResponse::error(400, format!("invalid JSON: {e}")),
+        };
+
+        let node_id_hex = match parsed.get("node_id").and_then(|v| v.as_str()) {
+            Some(s) => s,
+            None => return PluginResponse::error(400, "missing node_id field"),
+        };
+
+        let bytes = match hex_decode(node_id_hex) {
+            Some(b) if b.len() == 32 => b,
+            _ => {
+                return PluginResponse::error(400, "invalid node_id hex (must be 64 hex chars)");
+            }
+        };
+
+        let node_id = NodeId(bytes.try_into().unwrap());
+        let mut list = self.peer_auth.lock().unwrap();
+        list.remove_peer(&node_id);
+        if let Err(e) = list.save() {
+            eprintln!("warning: failed to persist peers.json: {e}");
+        }
+
+        PluginResponse::json(r#"{"ok":true}"#.to_string())
+    }
+}
diff --git a/crates/swactor-node/src/relay.rs b/crates/node/src/relay.rs
similarity index 100%
rename from crates/swactor-node/src/relay.rs
rename to crates/node/src/relay.rs
diff --git a/crates/process/Cargo.toml b/crates/process/Cargo.toml
index 7ff3c55..4290131 100644
--- a/crates/process/Cargo.toml
+++ b/crates/process/Cargo.toml
@@ -11,6 +11,9 @@ ssh = ["dep:russh", "dep:russh-keys", "dep:tokio", "dep:async-trait"]
 swactor = { path = "../..", default-features = false, features = ["no_random"] }
 crossbeam-queue = "0.3.12"
 libc = "0.2"
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+serde_yaml = "0.9"
 russh = { version = "0.46", optional = true }
 russh-keys = { version = "0.46", optional = true }
 tokio = { version = "1", features = ["rt", "time", "sync"], optional = true }
diff --git a/crates/process/src/lib.rs b/crates/process/src/lib.rs
index 4ccd085..fe10e15 100644
--- a/crates/process/src/lib.rs
+++ b/crates/process/src/lib.rs
@@ -5,12 +5,15 @@ pub mod event;
 pub mod local;
 pub mod message;
 pub mod mock;
+pub mod pipeline;
+pub mod pipeline_types;
 pub mod queue;
 pub mod session;
 pub mod spawn;
 pub mod subscriber;
 pub mod types;
 pub mod waker;
+pub mod yaml;
 
 #[cfg(feature = "ssh")]
 pub mod ssh;
diff --git a/crates/ci/src/pipeline.rs b/crates/process/src/pipeline.rs
similarity index 98%
rename from crates/ci/src/pipeline.rs
rename to crates/process/src/pipeline.rs
index 20f241e..c11646c 100644
--- a/crates/ci/src/pipeline.rs
+++ b/crates/process/src/pipeline.rs
@@ -2,7 +2,7 @@
 
 use std::collections::{HashMap, HashSet, VecDeque};
 
-use crate::{JobDefinition, JobId, JobStatus, PipelineId, PipelineStatus};
+use crate::pipeline_types::{JobDefinition, JobId, JobStatus, PipelineId, PipelineStatus};
 
 /// A pipeline execution: tracks the DAG of jobs and their statuses.
 #[derive(Debug, Clone)]
@@ -97,11 +97,10 @@ impl PipelineExecution {
         ) {
             let to_skip = self.transitive_dependents(job_name);
             for dep_name in to_skip {
-                if let Some(dep_job) = self.jobs.get_mut(&dep_name) {
-                    if dep_job.status == JobStatus::Pending {
+                if let Some(dep_job) = self.jobs.get_mut(&dep_name)
+                    && dep_job.status == JobStatus::Pending {
                         dep_job.status = JobStatus::Skipped;
                     }
-                }
             }
         }
 
@@ -241,7 +240,7 @@ mod tests {
     use std::collections::HashMap;
 
     use super::*;
-    use crate::JobDefinition;
+    use crate::pipeline_types::JobDefinition;
 
     fn make_job(name: &str, needs: &[&str]) -> JobDefinition {
         JobDefinition {
diff --git a/crates/process/src/pipeline_types.rs b/crates/process/src/pipeline_types.rs
new file mode 100644
index 0000000..a23bca4
--- /dev/null
+++ b/crates/process/src/pipeline_types.rs
@@ -0,0 +1,153 @@
+//! Core pipeline types extracted from the CI crate.
+//!
+//! General-purpose pipeline execution primitives: identifiers, statuses,
+//! job definitions, and result types. No Forgejo-specific concerns.
+
+use std::collections::HashMap;
+use std::fmt;
+
+use serde::{Deserialize, Serialize};
+
+// ─── Core Identifiers ───────────────────────────────────────────────────────
+
+/// Unique identifier for a pipeline execution.
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
+pub struct PipelineId(pub u64);
+
+impl fmt::Display for PipelineId {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(f, "pipeline-{}", self.0)
+    }
+}
+
+/// Unique identifier for a job within a pipeline.
+#[derive(Debug, Clone, PartialEq, Eq, Hash, Serialize, Deserialize)]
+pub struct JobId {
+    pub pipeline_id: PipelineId,
+    pub job_name: String,
+}
+
+impl fmt::Display for JobId {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(f, "{}/{}", self.pipeline_id, self.job_name)
+    }
+}
+
+// ─── Job Status ─────────────────────────────────────────────────────────────
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub enum JobStatus {
+    Pending,
+    WaitingForProvisioner,
+    Provisioning,
+    Running,
+    Passed,
+    Failed { reason: String },
+    Skipped,
+    Interrupted,
+}
+
+impl JobStatus {
+    pub fn is_terminal(&self) -> bool {
+        matches!(
+            self,
+            JobStatus::Passed | JobStatus::Failed { .. } | JobStatus::Skipped | JobStatus::Interrupted
+        )
+    }
+}
+
+// ─── Pipeline Status ────────────────────────────────────────────────────────
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub enum PipelineStatus {
+    Pending,
+    Running,
+    Passed,
+    Failed,
+    Error { reason: String },
+}
+
+impl PipelineStatus {
+    pub fn is_terminal(&self) -> bool {
+        matches!(
+            self,
+            PipelineStatus::Passed | PipelineStatus::Failed | PipelineStatus::Error { .. }
+        )
+    }
+}
+
+// ─── Job Definition ─────────────────────────────────────────────────────────
+
+/// A parsed job from a pipeline YAML file.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct JobDefinition {
+    pub name: String,
+    pub run: Vec<String>,
+    pub needs: Vec<String>,
+    pub timeout_secs: u64,
+    pub docker: bool,
+    pub artifacts: Vec<String>,
+    pub env: HashMap<String, String>,
+}
+
+// ─── Job Execution Results ──────────────────────────────────────────────────
+
+/// Streamed output from a running job.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct JobProgress {
+    pub job_id: JobId,
+    pub output_line: String,
+}
+
+/// Final result of a job execution.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct JobComplete {
+    pub job_id: JobId,
+    pub result: Result<JobSuccess, JobFailure>,
+    pub artifacts: Vec<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct JobSuccess;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub enum JobFailure {
+    CommandFailed { exit_code: i32, last_lines: Vec<String> },
+    SshError(String),
+    ExecError(String),
+    Timeout,
+    Interrupted,
+}
+
+impl fmt::Display for JobFailure {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            JobFailure::CommandFailed { exit_code, .. } => {
+                write!(f, "command exited with code {exit_code}")
+            }
+            JobFailure::SshError(msg) => write!(f, "SSH error: {msg}"),
+            JobFailure::ExecError(msg) => write!(f, "exec error: {msg}"),
+            JobFailure::Timeout => write!(f, "job timed out"),
+            JobFailure::Interrupted => write!(f, "spot instance interrupted"),
+        }
+    }
+}
+
+// ─── Local Pipeline Types ───────────────────────────────────────────────────
+
+/// Job execution request for a local pipeline runner.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct LocalStartJob {
+    pub job_id: JobId,
+    pub work_dir: String,
+    pub job_def: JobDefinition,
+    pub env_overrides: HashMap<String, String>,
+}
+
+/// Configuration for a local pipeline runner.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct LocalPipelineConfig {
+    pub repo_url: String,
+    pub work_dir: String,
+    pub pipeline_yaml_path: String,
+}
diff --git a/crates/process/src/session.rs b/crates/process/src/session.rs
index 64100b1..29d1869 100644
--- a/crates/process/src/session.rs
+++ b/crates/process/src/session.rs
@@ -182,13 +182,12 @@ impl ProcessSession {
                     });
                 }
                 // Backpressure: buffer if over limit
-                if let Some(limit) = self.spec.stdin_buffer_limit {
-                    if self.flow.pending_stdin_bytes >= limit {
+                if let Some(limit) = self.spec.stdin_buffer_limit
+                    && self.flow.pending_stdin_bytes >= limit {
                         self.stdin_buffer_bytes += data.len();
                         self.stdin_buffer.push_back(data);
                         return vec![];
                     }
-                }
                 self.flow.pending_stdin_bytes += data.len();
                 vec![ProcessAction::WriteStdin { data }]
             }
diff --git a/crates/process/src/types.rs b/crates/process/src/types.rs
index 358d7a0..0705c6d 100644
--- a/crates/process/src/types.rs
+++ b/crates/process/src/types.rs
@@ -60,12 +60,8 @@ pub enum ProcessError {
 
 /// Passive tracking of stdin backpressure.
 #[derive(Debug, Clone, PartialEq, Eq)]
+#[derive(Default)]
 pub struct FlowControl {
     pub pending_stdin_bytes: usize,
 }
 
-impl Default for FlowControl {
-    fn default() -> Self {
-        Self { pending_stdin_bytes: 0 }
-    }
-}
diff --git a/crates/ci/src/yaml.rs b/crates/process/src/yaml.rs
similarity index 94%
rename from crates/ci/src/yaml.rs
rename to crates/process/src/yaml.rs
index 2bf5df4..dc50f6c 100644
--- a/crates/ci/src/yaml.rs
+++ b/crates/process/src/yaml.rs
@@ -4,7 +4,7 @@ use std::collections::HashMap;
 
 use serde::{Deserialize, Serialize};
 
-use crate::{EventType, JobDefinition, WebhookEvent};
+use crate::pipeline_types::JobDefinition;
 
 /// Root of a `.ci.yml` file.
 #[derive(Debug, Clone, Serialize, Deserialize)]
@@ -72,6 +72,26 @@ impl RunCommand {
     }
 }
 
+// ─── Webhook / trigger event ─────────────────────────────────────────────────
+
+/// Parsed event from a webhook or other trigger source.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct WebhookEvent {
+    pub event_type: EventType,
+    pub repo_owner: String,
+    pub repo_name: String,
+    pub branch: String,
+    pub commit_sha: String,
+    pub tag: Option<String>,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub enum EventType {
+    Push,
+    Tag,
+    Merge,
+}
+
 // ─── Parsing ────────────────────────────────────────────────────────────────
 
 /// Parse a `.ci.yml` string into a `CiYaml`.
@@ -270,7 +290,7 @@ pipelines:
     jobs:
       build:
         run: cargo build --release
-        artifacts: ["target/release/swactor-node"]
+        artifacts: ["target/release/swactor"]
 "#;
         let ci = parse_ci_yaml(yaml).unwrap();
         assert_eq!(ci.pipelines.len(), 3);
@@ -429,5 +449,4 @@ pipelines:
         let multi = to_job_definition("multi", &check.jobs["multi"]);
         assert_eq!(multi.run, vec!["cargo fmt -- --check", "cargo test"]);
     }
-
 }
diff --git a/crates/shared-types/Cargo.toml b/crates/shared-types/Cargo.toml
deleted file mode 100644
index 5255abf..0000000
--- a/crates/shared-types/Cargo.toml
+++ /dev/null
@@ -1,8 +0,0 @@
-[package]
-name = "shared-types"
-version = "0.1.0"
-edition = "2024"
-
-[dependencies]
-serde = { version = "1", features = ["derive"] }
-blake3 = "1"
diff --git a/crates/shared-types/src/pool.rs b/crates/shared-types/src/pool.rs
deleted file mode 100644
index d19cc4f..0000000
--- a/crates/shared-types/src/pool.rs
+++ /dev/null
@@ -1,252 +0,0 @@
-//! Shared types for the pooled datastore protocol.
-//!
-//! Types live in `shared-types` because both `distribution` and `datastore`
-//! depend on them.
-
-use std::fmt;
-
-use serde::{Deserialize, Serialize};
-
-use crate::ContentHash;
-
-// Re-export NodeId-shaped bytes — pool uses the same 32-byte node identifier.
-// The actual NodeId type lives in `distribution::types`, but we use raw [u8; 32]
-// here to avoid a circular dependency. Callers convert as needed.
-
-// ─── PoolId ────────────────────────────────────────────────────────────────
-
-/// Unique pool identifier: blake3(name_bytes).
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
-pub struct PoolId(pub [u8; 32]);
-
-impl PoolId {
-    /// Create a pool ID from a human-readable name.
-    pub fn from_name(name: &str) -> Self {
-        PoolId(*blake3::hash(name.as_bytes()).as_bytes())
-    }
-
-    /// Encode as lowercase hex string.
-    pub fn to_hex(&self) -> String {
-        let mut s = String::with_capacity(64);
-        for b in &self.0 {
-            use fmt::Write;
-            write!(s, "{:02x}", b).unwrap();
-        }
-        s
-    }
-
-    /// Parse a 64-character hex string into a PoolId.
-    pub fn from_hex(hex: &str) -> Option<Self> {
-        if hex.len() != 64 {
-            return None;
-        }
-        let mut bytes = [0u8; 32];
-        for (i, chunk) in hex.as_bytes().chunks(2).enumerate() {
-            let hi = hex_digit(chunk[0])?;
-            let lo = hex_digit(chunk[1])?;
-            bytes[i] = (hi << 4) | lo;
-        }
-        Some(PoolId(bytes))
-    }
-}
-
-impl fmt::Display for PoolId {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        for b in &self.0[..8] {
-            write!(f, "{:02x}", b)?;
-        }
-        write!(f, "\u{2026}")
-    }
-}
-
-// ─── Pool Membership ───────────────────────────────────────────────────────
-
-/// Whether a node is actively participating in a pool.
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
-pub enum PoolMemberState {
-    Active,
-    Left,
-}
-
-/// A node's membership in a pool. Higher generation always wins.
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
-pub struct PoolMemberEntry {
-    pub pool_id: PoolId,
-    pub node_id: [u8; 32],
-    pub state: PoolMemberState,
-    pub generation: u64,
-}
-
-// ─── Pool Capacity ─────────────────────────────────────────────────────────
-
-/// A node's storage capacity announcement. Higher generation always wins.
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
-pub struct PoolCapacityEntry {
-    pub pool_id: PoolId,
-    pub node_id: [u8; 32],
-    pub total_bytes: u64,
-    pub used_bytes: u64,
-    pub generation: u64,
-}
-
-// ─── Content Location ──────────────────────────────────────────────────────
-
-/// Where a content hash is stored. Key: (pool_id, content_hash, node_id).
-/// Higher generation wins. Tombstones indicate deletion.
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
-pub struct ContentLocationEntry {
-    pub pool_id: PoolId,
-    pub content_hash: ContentHash,
-    pub node_id: [u8; 32],
-    pub generation: u64,
-    pub tombstone: bool,
-}
-
-// ─── Pool ACL ──────────────────────────────────────────────────────────────
-
-/// Authorization for a node to join a pool. Higher generation wins.
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
-pub struct PoolACLEntry {
-    pub pool_id: PoolId,
-    pub node_id: [u8; 32],
-    pub granted_by: [u8; 32],
-    pub generation: u64,
-    pub revoked: bool,
-}
-
-// ─── Tagged Union ──────────────────────────────────────────────────────────
-
-/// All pool entry variants, used for gossip serialization.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub enum PoolEntry {
-    Membership(PoolMemberEntry),
-    Capacity(PoolCapacityEntry),
-    ContentLocation(ContentLocationEntry),
-    ACL(PoolACLEntry),
-}
-
-// ─── Pool Config ───────────────────────────────────────────────────────────
-
-/// Configuration for a pool.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct PoolConfig {
-    pub pool_name: String,
-    pub pool_id: PoolId,
-    /// Total bytes this node pledges to the pool.
-    pub capacity_bytes: u64,
-    /// Tombstone TTL in ticks before GC.
-    pub tombstone_ttl: u64,
-    /// GC interval in ticks.
-    pub gc_interval: u64,
-    /// Dissemination multiplier (Λ).
-    pub dissemination_lambda: usize,
-}
-
-impl PoolConfig {
-    pub fn new(pool_name: &str, capacity_bytes: u64) -> Self {
-        Self {
-            pool_name: pool_name.to_string(),
-            pool_id: PoolId::from_name(pool_name),
-            capacity_bytes,
-            tombstone_ttl: 3600,
-            gc_interval: 1000,
-            dissemination_lambda: 3,
-        }
-    }
-}
-
-// ─── Helpers ───────────────────────────────────────────────────────────────
-
-fn hex_digit(b: u8) -> Option<u8> {
-    match b {
-        b'0'..=b'9' => Some(b - b'0'),
-        b'a'..=b'f' => Some(b - b'a' + 10),
-        b'A'..=b'F' => Some(b - b'A' + 10),
-        _ => None,
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn pool_id_from_name_is_deterministic() {
-        let a = PoolId::from_name("test-pool");
-        let b = PoolId::from_name("test-pool");
-        assert_eq!(a, b);
-    }
-
-    #[test]
-    fn pool_id_different_names_differ() {
-        let a = PoolId::from_name("pool-a");
-        let b = PoolId::from_name("pool-b");
-        assert_ne!(a, b);
-    }
-
-    #[test]
-    fn pool_id_hex_roundtrip() {
-        let id = PoolId::from_name("roundtrip-test");
-        let hex = id.to_hex();
-        let recovered = PoolId::from_hex(&hex).unwrap();
-        assert_eq!(id, recovered);
-    }
-
-    #[test]
-    fn pool_entry_serde_roundtrip() {
-        let entry = PoolEntry::Membership(PoolMemberEntry {
-            pool_id: PoolId::from_name("test"),
-            node_id: [1u8; 32],
-            state: PoolMemberState::Active,
-            generation: 1,
-        });
-        let bytes = serde_json::to_vec(&entry).unwrap();
-        let recovered: PoolEntry = serde_json::from_slice(&bytes).unwrap();
-        match recovered {
-            PoolEntry::Membership(m) => {
-                assert_eq!(m.node_id, [1u8; 32]);
-                assert_eq!(m.state, PoolMemberState::Active);
-                assert_eq!(m.generation, 1);
-            }
-            _ => panic!("wrong variant"),
-        }
-    }
-
-    #[test]
-    fn higher_generation_wins_for_membership() {
-        let old = PoolMemberEntry {
-            pool_id: PoolId::from_name("test"),
-            node_id: [1u8; 32],
-            state: PoolMemberState::Active,
-            generation: 1,
-        };
-        let new = PoolMemberEntry {
-            pool_id: PoolId::from_name("test"),
-            node_id: [1u8; 32],
-            state: PoolMemberState::Left,
-            generation: 2,
-        };
-        assert!(new.generation > old.generation);
-    }
-
-    #[test]
-    fn content_location_tombstone_semantics() {
-        let live = ContentLocationEntry {
-            pool_id: PoolId::from_name("test"),
-            content_hash: ContentHash::of(b"hello"),
-            node_id: [1u8; 32],
-            generation: 1,
-            tombstone: false,
-        };
-        let dead = ContentLocationEntry {
-            pool_id: PoolId::from_name("test"),
-            content_hash: ContentHash::of(b"hello"),
-            node_id: [1u8; 32],
-            generation: 2,
-            tombstone: true,
-        };
-        assert!(!live.tombstone);
-        assert!(dead.tombstone);
-        assert!(dead.generation > live.generation);
-    }
-}
diff --git a/crates/simulation/Cargo.toml b/crates/simulation/Cargo.toml
index 6f77f91..a6ce71b 100644
--- a/crates/simulation/Cargo.toml
+++ b/crates/simulation/Cargo.toml
@@ -5,12 +5,12 @@ edition = "2024"
 
 [features]
 default = []
+distribution = ["dep:distribution"]
 gossip = ["dep:log"]
 dashboard = ["gossip", "dep:tiny_http", "dep:toml"]
-ci = ["dep:swactor-ci"]
 
 [dependencies]
-distribution = { path = "../distribution" }
+distribution = { path = "../distribution", optional = true }
 swactor = { path = "../..", features = ["serde"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
@@ -18,11 +18,9 @@ getrandom = "0.2"
 log = { version = "0.4", optional = true }
 tiny_http = { version = "0.12", optional = true }
 toml = { version = "0.8", optional = true }
-swactor-ci = { path = "../ci", optional = true }
 
 [dev-dependencies]
-simulation = { path = ".", features = ["gossip", "ci"] }
-swactor-ci = { path = "../ci" }
+simulation = { path = ".", features = ["gossip", "distribution"] }
 
 [[example]]
 name = "gossip_sim"
diff --git a/crates/simulation/src/distribution/properties.rs b/crates/simulation/src/distribution/properties.rs
index 697451e..d309dfc 100644
--- a/crates/simulation/src/distribution/properties.rs
+++ b/crates/simulation/src/distribution/properties.rs
@@ -733,7 +733,7 @@ pub fn check_staggered_join(
         .snapshots_per_round
         .iter()
         .take(by_round)
-        .last()
+        .next_back()
         .map(|round_snaps| {
             expected_joined
                 .iter()
diff --git a/crates/simulation/src/distribution/sim.rs b/crates/simulation/src/distribution/sim.rs
index 85472ce..7184aab 100644
--- a/crates/simulation/src/distribution/sim.rs
+++ b/crates/simulation/src/distribution/sim.rs
@@ -1,45 +1,15 @@
-use std::collections::{HashMap, HashSet};
-
 use distribution::node::{DistributedNode, DistributedNodeConfig, ResolveResult};
 use distribution::swim::node::NodeAction;
 use distribution::swim::probe::SwimConfig;
 use distribution::types::NodeId;
 use swactor::actor::ActorAddress;
 
+use crate::runner::NetworkState;
+pub use crate::runner::{NetworkFault, NetworkTopology, NodeLocation, Partition};
 use crate::trace::{Event, SimulationTrace};
 
 use super::trace::{DistributionEventKind, DistributionSnapshot};
 
-/// Network location of a simulated node.
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum NodeLocation {
-    /// Publicly reachable (e.g. cloud VPS). Can receive inbound from anyone.
-    Public,
-    /// Behind NAT. Can only receive inbound from same LAN group or via relay.
-    Nat { group: String },
-    /// Completely firewalled — no inbound or outbound.
-    Firewalled,
-}
-
-/// Network topology describing NAT/firewall/relay placement.
-#[derive(Debug, Clone)]
-pub struct NetworkTopology {
-    /// Per-node location (indexed by node_idx). Length must equal num_nodes.
-    pub locations: Vec<NodeLocation>,
-    /// Node indices that act as relay forwarders for cross-NAT traffic.
-    pub relay_nodes: Vec<usize>,
-}
-
-/// A network partition between two sets of nodes.
-/// Nodes in `side_a` cannot communicate with nodes in `side_b`.
-#[derive(Debug, Clone)]
-pub struct Partition {
-    pub side_a: Vec<usize>,
-    pub side_b: Vec<usize>,
-    /// If true, A→B is blocked but B→A works (asymmetric).
-    pub asymmetric: bool,
-}
-
 /// An action to execute at a specific round during the simulation.
 #[derive(Debug, Clone)]
 pub enum SimAction {
@@ -57,21 +27,6 @@ pub enum SimAction {
     Introduce { node_a: usize, node_b: usize },
 }
 
-/// Schedule entry for network faults.
-#[derive(Debug, Clone)]
-pub enum NetworkFault {
-    /// Introduce a partition at the given round.
-    Partition { round: usize, partition: Partition },
-    /// Heal a partition at the given round (restores full connectivity).
-    Heal { round: usize },
-    /// Set message drop rate (0.0 = no drops, 1.0 = drop all).
-    SetDropRate { round: usize, rate: f64 },
-    /// Per-link drop rate. rate=0.0 clears the fault.
-    LinkFault { round: usize, from: usize, to: usize, rate: f64, bidirectional: bool },
-    /// Relay penalty — extra drop probability for relay-routed messages.
-    SetRelayPenalty { round: usize, rate: f64 },
-}
-
 /// Configuration for a distribution simulation run.
 #[derive(Debug, Clone)]
 pub struct DistributionSimConfig {
@@ -130,185 +85,6 @@ impl Default for DistributionSimConfig {
     }
 }
 
-/// Tracks active network state during simulation.
-struct NetworkState {
-    /// Set of (from_idx, to_idx) pairs where messages are blocked.
-    blocked: HashSet<(usize, usize)>,
-    /// Probability of dropping a message [0.0, 1.0].
-    drop_rate: f64,
-    /// Simple counter-based deterministic "random" for drop decisions.
-    drop_counter: u64,
-    /// Optional NAT/firewall topology.
-    topology: Option<NetworkTopology>,
-    /// Per-node alive status (indexed by node_idx).
-    alive: Vec<bool>,
-    /// Per-link drop rates (from, to) -> rate.
-    link_drop_rates: HashMap<(usize, usize), f64>,
-    /// Extra drop probability for relay-routed messages.
-    relay_penalty: f64,
-}
-
-impl NetworkState {
-    fn new() -> Self {
-        Self {
-            blocked: HashSet::new(),
-            drop_rate: 0.0,
-            drop_counter: 0x853c49e6748fea9b,
-            topology: None,
-            alive: Vec::new(),
-            link_drop_rates: HashMap::new(),
-            relay_penalty: 0.0,
-        }
-    }
-
-    fn new_with_topology(topology: Option<NetworkTopology>, num_nodes: usize) -> Self {
-        Self {
-            blocked: HashSet::new(),
-            drop_rate: 0.0,
-            drop_counter: 0x853c49e6748fea9b,
-            topology,
-            alive: vec![true; num_nodes],
-            link_drop_rates: HashMap::new(),
-            relay_penalty: 0.0,
-        }
-    }
-
-    fn set_alive(&mut self, idx: usize, alive: bool) {
-        if idx < self.alive.len() {
-            self.alive[idx] = alive;
-        }
-    }
-
-    fn apply_fault(&mut self, fault: &NetworkFault, num_nodes: usize) {
-        match fault {
-            NetworkFault::Partition { partition, .. } => {
-                for &a in &partition.side_a {
-                    for &b in &partition.side_b {
-                        if a < num_nodes && b < num_nodes {
-                            self.blocked.insert((a, b));
-                            if !partition.asymmetric {
-                                self.blocked.insert((b, a));
-                            }
-                        }
-                    }
-                }
-            }
-            NetworkFault::Heal { .. } => {
-                self.blocked.clear();
-            }
-            NetworkFault::SetDropRate { rate, .. } => {
-                self.drop_rate = rate.clamp(0.0, 1.0);
-            }
-            NetworkFault::LinkFault { from, to, rate, bidirectional, .. } => {
-                let rate = rate.clamp(0.0, 1.0);
-                if rate == 0.0 {
-                    self.link_drop_rates.remove(&(*from, *to));
-                    if *bidirectional {
-                        self.link_drop_rates.remove(&(*to, *from));
-                    }
-                } else {
-                    self.link_drop_rates.insert((*from, *to), rate);
-                    if *bidirectional {
-                        self.link_drop_rates.insert((*to, *from), rate);
-                    }
-                }
-            }
-            NetworkFault::SetRelayPenalty { rate, .. } => {
-                self.relay_penalty = rate.clamp(0.0, 1.0);
-            }
-        }
-    }
-
-    /// Check if `from` can directly initiate a connection to `to`.
-    fn directly_reachable(&self, from: usize, to: usize) -> bool {
-        let topo = match &self.topology {
-            Some(t) => t,
-            None => return true, // No topology = full connectivity
-        };
-        if from >= topo.locations.len() || to >= topo.locations.len() {
-            return true;
-        }
-        match (&topo.locations[from], &topo.locations[to]) {
-            (_, NodeLocation::Firewalled) => false,
-            (NodeLocation::Firewalled, _) => false,
-            (_, NodeLocation::Public) => true,    // Anyone can reach public
-            (NodeLocation::Public, NodeLocation::Nat { .. }) => false, // Can't initiate inbound to NAT
-            (NodeLocation::Nat { group: g1 }, NodeLocation::Nat { group: g2 }) => g1 == g2, // Same LAN
-        }
-    }
-
-    /// Check if two nodes can communicate (bidirectional once established).
-    /// Either direct reachability in either direction, or via a relay.
-    fn can_reach(&self, from: usize, to: usize) -> bool {
-        let topo = match &self.topology {
-            Some(t) => t,
-            None => return true,
-        };
-        // Direct: if either side can initiate, the connection is bidirectional
-        if self.directly_reachable(from, to) || self.directly_reachable(to, from) {
-            return true;
-        }
-        // Relay path: any alive relay R where both endpoints can bidirectionally reach R
-        for &r in &topo.relay_nodes {
-            if r == from || r == to {
-                continue;
-            }
-            if !self.alive.get(r).copied().unwrap_or(false) {
-                continue;
-            }
-            let from_reaches_r = self.directly_reachable(from, r) || self.directly_reachable(r, from);
-            let to_reaches_r = self.directly_reachable(to, r) || self.directly_reachable(r, to);
-            if from_reaches_r && to_reaches_r {
-                return true;
-            }
-        }
-        false
-    }
-
-    /// Returns true when neither direction is directly reachable but a relay path exists.
-    fn requires_relay(&self, from: usize, to: usize) -> bool {
-        if self.topology.is_none() {
-            return false;
-        }
-        if self.directly_reachable(from, to) || self.directly_reachable(to, from) {
-            return false;
-        }
-        self.can_reach(from, to)
-    }
-
-    /// Returns true if this message should be delivered.
-    fn should_deliver(&mut self, from_idx: usize, to_idx: usize) -> bool {
-        // 1. Check partition blocks
-        if self.blocked.contains(&(from_idx, to_idx)) {
-            return false;
-        }
-        // 2. Check NAT reachability (only if topology is set)
-        if self.topology.is_some() && !self.can_reach(from_idx, to_idx) {
-            return false;
-        }
-        // 3. Determine effective drop rate: per-link if set, else global
-        let base_rate = self.link_drop_rates
-            .get(&(from_idx, to_idx))
-            .copied()
-            .unwrap_or(self.drop_rate);
-        // 4. Compose relay penalty if applicable
-        let effective_rate = if self.relay_penalty > 0.0 && self.requires_relay(from_idx, to_idx) {
-            1.0 - (1.0 - base_rate) * (1.0 - self.relay_penalty)
-        } else {
-            base_rate
-        };
-        // 5. Apply effective rate via LCG PRNG
-        if effective_rate > 0.0 {
-            self.drop_counter = self.drop_counter.wrapping_mul(6364136223846793005).wrapping_add(1);
-            let r = (self.drop_counter >> 33) as f64 / (u32::MAX as f64);
-            if r < effective_rate {
-                return false;
-            }
-        }
-        true
-    }
-}
-
 pub type DistTrace = SimulationTrace<DistributionEventKind, DistributionSnapshot>;
 
 /// Run a distribution simulation, returning both the trace and the final node states.
@@ -424,8 +200,8 @@ fn run_simulation_inner(config: DistributionSimConfig) -> (DistTrace, Vec<Option
     for (entry, actor, owner_idx) in &pending_entries {
         let actor_id = format!("{:?}", &actor.0[..4]);
         for other_idx in 0..n {
-            if other_idx != *owner_idx {
-                if let Some(ref mut other_node) = nodes[other_idx] {
+            if other_idx != *owner_idx
+                && let Some(ref mut other_node) = nodes[other_idx] {
                     other_node.store_directory_entry(entry.clone());
                     events.push(Event {
                         tick: 0,
@@ -436,7 +212,6 @@ fn run_simulation_inner(config: DistributionSimConfig) -> (DistTrace, Vec<Option
                         },
                     });
                 }
-            }
         }
     }
 
@@ -447,14 +222,7 @@ fn run_simulation_inner(config: DistributionSimConfig) -> (DistTrace, Vec<Option
     for round in 1..=config.num_rounds {
         // Apply network faults for this round.
         for fault in &config.network_faults {
-            let fault_round = match fault {
-                NetworkFault::Partition { round, .. } => *round,
-                NetworkFault::Heal { round } => *round,
-                NetworkFault::SetDropRate { round, .. } => *round,
-                NetworkFault::LinkFault { round, .. } => *round,
-                NetworkFault::SetRelayPenalty { round, .. } => *round,
-            };
-            if fault_round == round {
+            if fault.round() == round {
                 net.apply_fault(fault, n);
             }
         }
@@ -522,8 +290,8 @@ fn run_simulation_inner(config: DistributionSimConfig) -> (DistTrace, Vec<Option
             if *action_round == round {
                 match action {
                     SimAction::RegisterName { node_idx, name } => {
-                        if *node_idx < n {
-                            if let Some(ref mut node) = nodes[*node_idx] {
+                        if *node_idx < n
+                            && let Some(ref mut node) = nodes[*node_idx] {
                                 let actor = ActorAddress::new_random();
                                 node.register_name(name.clone(), actor);
                                 events.push(Event {
@@ -535,11 +303,10 @@ fn run_simulation_inner(config: DistributionSimConfig) -> (DistTrace, Vec<Option
                                     },
                                 });
                             }
-                        }
                     }
                     SimAction::RegisterNameWithActor { node_idx, name, actor } => {
-                        if *node_idx < n {
-                            if let Some(ref mut node) = nodes[*node_idx] {
+                        if *node_idx < n
+                            && let Some(ref mut node) = nodes[*node_idx] {
                                 node.register_name(name.clone(), *actor);
                                 events.push(Event {
                                     tick: round as u64,
@@ -550,11 +317,10 @@ fn run_simulation_inner(config: DistributionSimConfig) -> (DistTrace, Vec<Option
                                     },
                                 });
                             }
-                        }
                     }
                     SimAction::UnregisterName { node_idx, name } => {
-                        if *node_idx < n {
-                            if let Some(ref mut node) = nodes[*node_idx] {
+                        if *node_idx < n
+                            && let Some(ref mut node) = nodes[*node_idx] {
                                 node.unregister_name(name);
                                 events.push(Event {
                                     tick: round as u64,
@@ -565,7 +331,6 @@ fn run_simulation_inner(config: DistributionSimConfig) -> (DistTrace, Vec<Option
                                     },
                                 });
                             }
-                        }
                     }
                     SimAction::GracefulLeave { node_idx } => {
                         if *node_idx < n {
@@ -886,17 +651,15 @@ fn deliver_actions_tagged_with_net(
                 piggyback,
                 ..
             } => {
-                if let Some(idx) = node_ids.iter().position(|id| id == to) {
-                    if net.should_deliver(sender_idx, idx) {
-                        if let Some(ref mut node) = nodes[idx] {
+                if let Some(idx) = node_ids.iter().position(|id| id == to)
+                    && net.should_deliver(sender_idx, idx)
+                        && let Some(ref mut node) = nodes[idx] {
                             let resp =
                                 node.handle_ping(sender_id, *sequence, piggyback);
                             if !resp.is_empty() {
                                 tagged_responses.push((idx, resp));
                             }
                         }
-                    }
-                }
             }
             NodeAction::SendAck {
                 to,
@@ -904,28 +667,24 @@ fn deliver_actions_tagged_with_net(
                 piggyback,
                 ..
             } => {
-                if let Some(idx) = node_ids.iter().position(|id| id == to) {
-                    if net.should_deliver(sender_idx, idx) {
-                        if let Some(ref mut node) = nodes[idx] {
+                if let Some(idx) = node_ids.iter().position(|id| id == to)
+                    && net.should_deliver(sender_idx, idx)
+                        && let Some(ref mut node) = nodes[idx] {
                             let resp = node.handle_ack(sender_id, *sequence, piggyback);
                             if !resp.is_empty() {
                                 tagged_responses.push((idx, resp));
                             }
                         }
-                    }
-                }
             }
             NodeAction::SendJoinResponse { to, members, .. } => {
-                if let Some(idx) = node_ids.iter().position(|id| id == to) {
-                    if net.should_deliver(sender_idx, idx) {
-                        if let Some(ref mut node) = nodes[idx] {
+                if let Some(idx) = node_ids.iter().position(|id| id == to)
+                    && net.should_deliver(sender_idx, idx)
+                        && let Some(ref mut node) = nodes[idx] {
                             let resp = node.handle_join_response(members.clone());
                             if !resp.is_empty() {
                                 tagged_responses.push((idx, resp));
                             }
                         }
-                    }
-                }
             }
             NodeAction::SendPingReq {
                 relay,
@@ -934,9 +693,9 @@ fn deliver_actions_tagged_with_net(
                 piggyback,
                 ..
             } => {
-                if let Some(idx) = node_ids.iter().position(|id| id == relay) {
-                    if net.should_deliver(sender_idx, idx) {
-                        if let Some(ref mut node) = nodes[idx] {
+                if let Some(idx) = node_ids.iter().position(|id| id == relay)
+                    && net.should_deliver(sender_idx, idx)
+                        && let Some(ref mut node) = nodes[idx] {
                             let resp = node.handle_ping_req(
                                 sender_id,
                                 *target,
@@ -947,20 +706,16 @@ fn deliver_actions_tagged_with_net(
                                 tagged_responses.push((idx, resp));
                             }
                         }
-                    }
-                }
             }
             NodeAction::ForwardAck { to, target, sequence, piggyback } => {
-                if let Some(idx) = node_ids.iter().position(|id| id == to) {
-                    if net.should_deliver(sender_idx, idx) {
-                        if let Some(ref mut node) = nodes[idx] {
+                if let Some(idx) = node_ids.iter().position(|id| id == to)
+                    && net.should_deliver(sender_idx, idx)
+                        && let Some(ref mut node) = nodes[idx] {
                             let resp = node.handle_indirect_ack(*target, *sequence, piggyback);
                             if !resp.is_empty() {
                                 tagged_responses.push((idx, resp));
                             }
                         }
-                    }
-                }
             }
             NodeAction::MembershipChanged { .. } => {
                 // Notifications — no delivery needed
diff --git a/crates/simulation/src/lib.rs b/crates/simulation/src/lib.rs
index c7712b4..99c0b2c 100644
--- a/crates/simulation/src/lib.rs
+++ b/crates/simulation/src/lib.rs
@@ -1,7 +1,11 @@
+pub mod node;
+pub mod runner;
 pub mod topology;
 pub mod config;
 pub mod trace;
 pub mod properties;
+
+#[cfg(feature = "distribution")]
 pub mod distribution;
 
 #[cfg(feature = "gossip")]
@@ -9,6 +13,3 @@ pub mod gossip;
 
 #[cfg(feature = "dashboard")]
 pub mod dashboard;
-
-#[cfg(feature = "ci")]
-pub mod ci;
diff --git a/crates/simulation/src/node.rs b/crates/simulation/src/node.rs
new file mode 100644
index 0000000..9566879
--- /dev/null
+++ b/crates/simulation/src/node.rs
@@ -0,0 +1,28 @@
+//! Generic simulation node trait.
+//!
+//! Defines the interface that any protocol node must implement to be
+//! driven by the simulation runner. This allows the simulation
+//! framework to work with different protocol implementations.
+
+/// A message produced by a simulated node.
+pub trait SimMessage {
+    type NodeId;
+    /// The target node for this message, if any.
+    /// `None` means the message is a local notification (no delivery needed).
+    fn target(&self) -> Option<&Self::NodeId>;
+}
+
+/// A simulated protocol node.
+pub trait SimNode: Sized {
+    type Config: Clone;
+    type NodeId: Clone + Eq + std::hash::Hash + std::fmt::Debug;
+    type Message: SimMessage<NodeId = Self::NodeId>;
+    type Snapshot: serde::Serialize;
+    type EventKind: serde::Serialize;
+
+    fn new(config: Self::Config) -> Self;
+    fn node_id(&self) -> Self::NodeId;
+    fn tick(&mut self) -> Vec<Self::Message>;
+    fn receive(&mut self, from: Self::NodeId, msg: Self::Message) -> Vec<Self::Message>;
+    fn snapshot(&self) -> Self::Snapshot;
+}
diff --git a/crates/simulation/src/runner.rs b/crates/simulation/src/runner.rs
new file mode 100644
index 0000000..e39e99b
--- /dev/null
+++ b/crates/simulation/src/runner.rs
@@ -0,0 +1,235 @@
+//! Generic simulation runner — network state and message delivery.
+//!
+//! Provides `NetworkState` for simulating partitions, drops, NAT/firewall
+//! topology, and relay penalties. Can be used with any protocol that
+//! implements `SimNode`.
+
+use std::collections::{HashMap, HashSet};
+
+/// Network location of a simulated node.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum NodeLocation {
+    /// Publicly reachable (e.g. cloud VPS). Can receive inbound from anyone.
+    Public,
+    /// Behind NAT. Can only receive inbound from same LAN group or via relay.
+    Nat { group: String },
+    /// Completely firewalled — no inbound or outbound.
+    Firewalled,
+}
+
+/// Network topology describing NAT/firewall/relay placement.
+#[derive(Debug, Clone)]
+pub struct NetworkTopology {
+    /// Per-node location (indexed by node_idx). Length must equal num_nodes.
+    pub locations: Vec<NodeLocation>,
+    /// Node indices that act as relay forwarders for cross-NAT traffic.
+    pub relay_nodes: Vec<usize>,
+}
+
+/// A network partition between two sets of nodes.
+#[derive(Debug, Clone)]
+pub struct Partition {
+    pub side_a: Vec<usize>,
+    pub side_b: Vec<usize>,
+    /// If true, A→B is blocked but B→A works (asymmetric).
+    pub asymmetric: bool,
+}
+
+/// Schedule entry for network faults.
+#[derive(Debug, Clone)]
+pub enum NetworkFault {
+    /// Introduce a partition at the given round.
+    Partition { round: usize, partition: Partition },
+    /// Heal a partition at the given round (restores full connectivity).
+    Heal { round: usize },
+    /// Set message drop rate (0.0 = no drops, 1.0 = drop all).
+    SetDropRate { round: usize, rate: f64 },
+    /// Per-link drop rate. rate=0.0 clears the fault.
+    LinkFault { round: usize, from: usize, to: usize, rate: f64, bidirectional: bool },
+    /// Relay penalty — extra drop probability for relay-routed messages.
+    SetRelayPenalty { round: usize, rate: f64 },
+}
+
+impl NetworkFault {
+    /// The round at which this fault is scheduled.
+    pub fn round(&self) -> usize {
+        match self {
+            NetworkFault::Partition { round, .. } => *round,
+            NetworkFault::Heal { round } => *round,
+            NetworkFault::SetDropRate { round, .. } => *round,
+            NetworkFault::LinkFault { round, .. } => *round,
+            NetworkFault::SetRelayPenalty { round, .. } => *round,
+        }
+    }
+}
+
+/// Tracks active network state during simulation.
+pub struct NetworkState {
+    /// Set of (from_idx, to_idx) pairs where messages are blocked.
+    blocked: HashSet<(usize, usize)>,
+    /// Probability of dropping a message [0.0, 1.0].
+    drop_rate: f64,
+    /// Simple counter-based deterministic "random" for drop decisions.
+    drop_counter: u64,
+    /// Optional NAT/firewall topology.
+    topology: Option<NetworkTopology>,
+    /// Per-node alive status (indexed by node_idx).
+    alive: Vec<bool>,
+    /// Per-link drop rates (from, to) -> rate.
+    link_drop_rates: HashMap<(usize, usize), f64>,
+    /// Extra drop probability for relay-routed messages.
+    relay_penalty: f64,
+}
+
+impl NetworkState {
+    pub fn new() -> Self {
+        Self {
+            blocked: HashSet::new(),
+            drop_rate: 0.0,
+            drop_counter: 0x853c49e6748fea9b,
+            topology: None,
+            alive: Vec::new(),
+            link_drop_rates: HashMap::new(),
+            relay_penalty: 0.0,
+        }
+    }
+
+    pub fn new_with_topology(topology: Option<NetworkTopology>, num_nodes: usize) -> Self {
+        Self {
+            blocked: HashSet::new(),
+            drop_rate: 0.0,
+            drop_counter: 0x853c49e6748fea9b,
+            topology,
+            alive: vec![true; num_nodes],
+            link_drop_rates: HashMap::new(),
+            relay_penalty: 0.0,
+        }
+    }
+
+    pub fn set_alive(&mut self, idx: usize, alive: bool) {
+        if idx < self.alive.len() {
+            self.alive[idx] = alive;
+        }
+    }
+
+    pub fn apply_fault(&mut self, fault: &NetworkFault, num_nodes: usize) {
+        match fault {
+            NetworkFault::Partition { partition, .. } => {
+                for &a in &partition.side_a {
+                    for &b in &partition.side_b {
+                        if a < num_nodes && b < num_nodes {
+                            self.blocked.insert((a, b));
+                            if !partition.asymmetric {
+                                self.blocked.insert((b, a));
+                            }
+                        }
+                    }
+                }
+            }
+            NetworkFault::Heal { .. } => {
+                self.blocked.clear();
+            }
+            NetworkFault::SetDropRate { rate, .. } => {
+                self.drop_rate = rate.clamp(0.0, 1.0);
+            }
+            NetworkFault::LinkFault { from, to, rate, bidirectional, .. } => {
+                let rate = rate.clamp(0.0, 1.0);
+                if rate == 0.0 {
+                    self.link_drop_rates.remove(&(*from, *to));
+                    if *bidirectional {
+                        self.link_drop_rates.remove(&(*to, *from));
+                    }
+                } else {
+                    self.link_drop_rates.insert((*from, *to), rate);
+                    if *bidirectional {
+                        self.link_drop_rates.insert((*to, *from), rate);
+                    }
+                }
+            }
+            NetworkFault::SetRelayPenalty { rate, .. } => {
+                self.relay_penalty = rate.clamp(0.0, 1.0);
+            }
+        }
+    }
+
+    /// Check if `from` can directly initiate a connection to `to`.
+    fn directly_reachable(&self, from: usize, to: usize) -> bool {
+        let topo = match &self.topology {
+            Some(t) => t,
+            None => return true,
+        };
+        if from >= topo.locations.len() || to >= topo.locations.len() {
+            return true;
+        }
+        match (&topo.locations[from], &topo.locations[to]) {
+            (_, NodeLocation::Firewalled) => false,
+            (NodeLocation::Firewalled, _) => false,
+            (_, NodeLocation::Public) => true,
+            (NodeLocation::Public, NodeLocation::Nat { .. }) => false,
+            (NodeLocation::Nat { group: g1 }, NodeLocation::Nat { group: g2 }) => g1 == g2,
+        }
+    }
+
+    /// Check if two nodes can communicate (bidirectional once established).
+    fn can_reach(&self, from: usize, to: usize) -> bool {
+        let topo = match &self.topology {
+            Some(t) => t,
+            None => return true,
+        };
+        if self.directly_reachable(from, to) || self.directly_reachable(to, from) {
+            return true;
+        }
+        for &r in &topo.relay_nodes {
+            if r == from || r == to {
+                continue;
+            }
+            if !self.alive.get(r).copied().unwrap_or(false) {
+                continue;
+            }
+            let from_reaches_r = self.directly_reachable(from, r) || self.directly_reachable(r, from);
+            let to_reaches_r = self.directly_reachable(to, r) || self.directly_reachable(r, to);
+            if from_reaches_r && to_reaches_r {
+                return true;
+            }
+        }
+        false
+    }
+
+    /// Returns true when neither direction is directly reachable but a relay path exists.
+    fn requires_relay(&self, from: usize, to: usize) -> bool {
+        if self.topology.is_none() {
+            return false;
+        }
+        if self.directly_reachable(from, to) || self.directly_reachable(to, from) {
+            return false;
+        }
+        self.can_reach(from, to)
+    }
+
+    /// Returns true if this message should be delivered.
+    pub fn should_deliver(&mut self, from_idx: usize, to_idx: usize) -> bool {
+        if self.blocked.contains(&(from_idx, to_idx)) {
+            return false;
+        }
+        if self.topology.is_some() && !self.can_reach(from_idx, to_idx) {
+            return false;
+        }
+        let base_rate = self.link_drop_rates
+            .get(&(from_idx, to_idx))
+            .copied()
+            .unwrap_or(self.drop_rate);
+        let effective_rate = if self.relay_penalty > 0.0 && self.requires_relay(from_idx, to_idx) {
+            1.0 - (1.0 - base_rate) * (1.0 - self.relay_penalty)
+        } else {
+            base_rate
+        };
+        if effective_rate > 0.0 {
+            self.drop_counter = self.drop_counter.wrapping_mul(6364136223846793005).wrapping_add(1);
+            let r = (self.drop_counter >> 33) as f64 / (u32::MAX as f64);
+            if r < effective_rate {
+                return false;
+            }
+        }
+        true
+    }
+}
diff --git a/crates/simulation/tests/ci_properties.rs b/crates/simulation/tests/ci_properties.rs
deleted file mode 100644
index 31d162c..0000000
--- a/crates/simulation/tests/ci_properties.rs
+++ /dev/null
@@ -1,275 +0,0 @@
-//! Property-based tests for the CI simulation.
-//!
-//! These verify invariants that should hold across all possible simulation configurations.
-
-use swactor_ci::{EventType, WebhookEvent};
-use simulation::ci::sim::{self, CiSimConfig};
-
-fn simple_yaml() -> String {
-    r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      fmt:
-        run: cargo fmt -- --check
-      test:
-        needs: [fmt]
-        run: cargo test
-"#
-    .into()
-}
-
-fn push(branch: &str, sha: &str) -> WebhookEvent {
-    WebhookEvent {
-        event_type: EventType::Push,
-        repo_owner: "user".into(),
-        repo_name: "repo".into(),
-        branch: branch.into(),
-        commit_sha: sha.into(),
-        tag: None,
-    }
-}
-
-// ─── Property: Every webhook produces a terminal status ─────────────────────
-
-#[test]
-fn property_all_webhooks_terminate_single() {
-    let config = CiSimConfig {
-        name: "prop-single".into(),
-        num_rounds: 40,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: vec![(1, push("main", "sha-1"))],
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-    let trace = sim::run_simulation(config);
-    assert!(
-        sim::check_all_webhooks_terminate(&trace),
-        "single webhook must terminate"
-    );
-}
-
-#[test]
-fn property_all_webhooks_terminate_burst() {
-    // Burst of webhooks all at once.
-    let config = CiSimConfig {
-        name: "prop-burst".into(),
-        num_rounds: 60,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: (1..=5)
-            .map(|i| (1, push("main", &format!("sha-burst-{i}"))))
-            .collect(),
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-    let trace = sim::run_simulation(config);
-    assert!(
-        sim::check_all_webhooks_terminate(&trace),
-        "burst of 5 webhooks must all terminate"
-    );
-}
-
-#[test]
-fn property_all_webhooks_terminate_staggered() {
-    // Webhooks spread across rounds.
-    let config = CiSimConfig {
-        name: "prop-staggered".into(),
-        num_rounds: 60,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: vec![
-            (1, push("main", "sha-s1")),
-            (5, push("main", "sha-s2")),
-            (10, push("main", "sha-s3")),
-            (15, push("main", "sha-s4")),
-        ],
-        provision_latency: 2,
-        job_duration: 3,
-        ..Default::default()
-    };
-    let trace = sim::run_simulation(config);
-    assert!(
-        sim::check_all_webhooks_terminate(&trace),
-        "staggered webhooks must all terminate"
-    );
-}
-
-// ─── Property: DAG ordering is always respected ─────────────────────────────
-
-#[test]
-fn property_dag_ordering_always_respected() {
-    // Deep chain: a → b → c → d
-    let yaml = r#"
-pipelines:
-  deep:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      a:
-        run: echo a
-      b:
-        needs: [a]
-        run: echo b
-      c:
-        needs: [b]
-        run: echo c
-      d:
-        needs: [c]
-        run: echo d
-"#;
-    let config = CiSimConfig {
-        name: "prop-dag-deep".into(),
-        num_rounds: 40,
-        ci_yaml: yaml.into(),
-        webhook_schedule: vec![(1, push("main", "sha-dag"))],
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-    let trace = sim::run_simulation(config);
-    assert!(
-        sim::check_dag_ordering(&trace),
-        "deep DAG ordering must be respected"
-    );
-}
-
-#[test]
-fn property_dag_ordering_diamond() {
-    let yaml = r#"
-pipelines:
-  diamond:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      root:
-        run: echo root
-      left:
-        needs: [root]
-        run: echo left
-      right:
-        needs: [root]
-        run: echo right
-      merge:
-        needs: [left, right]
-        run: echo merge
-"#;
-    let config = CiSimConfig {
-        name: "prop-dag-diamond".into(),
-        num_rounds: 40,
-        ci_yaml: yaml.into(),
-        webhook_schedule: vec![(1, push("main", "sha-diamond"))],
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-    let trace = sim::run_simulation(config);
-    assert!(
-        sim::check_dag_ordering(&trace),
-        "diamond DAG ordering must be respected"
-    );
-}
-
-// ─── Property: No instance leaks ────────────────────────────────────────────
-
-#[test]
-fn property_no_instance_leaks_under_failures() {
-    let config = CiSimConfig {
-        name: "prop-no-leaks-fail".into(),
-        num_rounds: 40,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: vec![
-            (1, push("main", "sha-leak1")),
-            (3, push("main", "sha-leak2")),
-        ],
-        provision_latency: 1,
-        job_duration: 2,
-        job_failure_schedule: vec![(0, "fmt".into())],
-        ..Default::default()
-    };
-    let trace = sim::run_simulation(config);
-    assert!(
-        sim::check_no_instance_leaks(&trace),
-        "no instance leaks even when jobs fail"
-    );
-}
-
-#[test]
-fn property_no_instance_leaks_under_interruption() {
-    let yaml = r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      test:
-        run: cargo test
-"#;
-    let config = CiSimConfig {
-        name: "prop-no-leaks-interrupt".into(),
-        num_rounds: 40,
-        ci_yaml: yaml.into(),
-        webhook_schedule: vec![(1, push("main", "sha-int"))],
-        provision_latency: 1,
-        job_duration: 5,
-        instance_interrupt_schedule: vec![(4, "test".into())],
-        ..Default::default()
-    };
-    let trace = sim::run_simulation(config);
-    assert!(
-        sim::check_no_instance_leaks(&trace),
-        "interrupted instances must be terminated"
-    );
-}
-
-// ─── Property: Bounded state ────────────────────────────────────────────────
-
-#[test]
-fn property_bounded_state_under_rapid_pushes() {
-    let config = CiSimConfig {
-        name: "prop-bounded".into(),
-        num_rounds: 100,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: (1..=20)
-            .map(|i| (i, push("main", &format!("sha-rapid-{i}"))))
-            .collect(),
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-    let trace = sim::run_simulation(config);
-
-    // With 20 pushes, each triggering 1 pipeline with 2 jobs, we should never
-    // have more than 20 active pipelines at once (and in practice much fewer).
-    assert!(
-        sim::check_bounded_state(&trace, 20),
-        "active pipelines should be bounded"
-    );
-}
-
-// ─── Property: Provisioner offline doesn't lose work ────────────────────────
-
-#[test]
-fn property_provisioner_offline_eventually_resolves() {
-    let config = CiSimConfig {
-        name: "prop-offline-resolve".into(),
-        num_rounds: 60,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: vec![(3, push("main", "sha-offline"))],
-        provision_latency: 1,
-        job_duration: 2,
-        provisioner_offline_schedule: vec![(1, 15)],
-        ..Default::default()
-    };
-    let trace = sim::run_simulation(config);
-    assert!(
-        sim::check_all_webhooks_terminate(&trace),
-        "webhooks during provisioner outage must still terminate"
-    );
-}
diff --git a/crates/simulation/tests/ci_scenarios.rs b/crates/simulation/tests/ci_scenarios.rs
deleted file mode 100644
index 33317eb..0000000
--- a/crates/simulation/tests/ci_scenarios.rs
+++ /dev/null
@@ -1,368 +0,0 @@
-//! Scenario tests for the CI simulation.
-//!
-//! Each test tells a story: set up a scenario, run the simulation, verify outcomes.
-
-use swactor_ci::{EventType, WebhookEvent};
-use simulation::ci::sim::{self, CiSimConfig, CiSimEvent};
-
-fn basic_ci_yaml() -> String {
-    r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-        exclude: ["master"]
-    jobs:
-      fmt:
-        run: cargo fmt -- --check
-      clippy:
-        run: cargo clippy
-      test:
-        needs: [fmt, clippy]
-        run: cargo test
-  full:
-    triggers:
-      - event: push
-        branches: ["master"]
-    jobs:
-      test:
-        run: cargo test --all-features
-        timeout: 600
-      bench:
-        needs: [test]
-        run: cargo bench
-"#
-    .into()
-}
-
-fn push_event(branch: &str, sha: &str) -> WebhookEvent {
-    WebhookEvent {
-        event_type: EventType::Push,
-        repo_owner: "user".into(),
-        repo_name: "repo".into(),
-        branch: branch.into(),
-        commit_sha: sha.into(),
-        tag: None,
-    }
-}
-
-// ─── Scenario: Single push triggers correct pipeline ────────────────────────
-
-#[test]
-fn single_push_to_feature_branch_triggers_check_pipeline() {
-    let config = CiSimConfig {
-        name: "single-push-feature".into(),
-        num_rounds: 30,
-        ci_yaml: basic_ci_yaml(),
-        webhook_schedule: vec![(1, push_event("feature-x", "abc123"))],
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-
-    let trace = sim::run_simulation(config);
-
-    // A pipeline was created.
-    let pipeline_created = trace
-        .events
-        .iter()
-        .filter(|(_, e)| matches!(e, CiSimEvent::PipelineCreated { .. }))
-        .count();
-    assert_eq!(pipeline_created, 1, "exactly one pipeline should be created");
-
-    // The pipeline name should be "check" (not "full", since branch is not master).
-    let check_created = trace.events.iter().any(|(_, e)| {
-        matches!(e, CiSimEvent::PipelineCreated { name, .. } if name == "check")
-    });
-    assert!(check_created, "pipeline 'check' should be created");
-
-    // All jobs eventually complete (fmt, clippy, test).
-    let completed_jobs: Vec<_> = trace
-        .events
-        .iter()
-        .filter_map(|(_, e)| match e {
-            CiSimEvent::JobCompleted { job_id, passed } => Some((job_id.job_name.clone(), *passed)),
-            _ => None,
-        })
-        .collect();
-
-    assert_eq!(completed_jobs.len(), 3, "all 3 jobs should complete");
-    assert!(
-        completed_jobs.iter().all(|(_, passed)| *passed),
-        "all jobs should pass"
-    );
-
-    // A terminal Forgejo status is emitted.
-    assert!(
-        sim::check_all_webhooks_terminate(&trace),
-        "webhook should produce terminal status"
-    );
-}
-
-// ─── Scenario: Push to master triggers full pipeline ────────────────────────
-
-#[test]
-fn push_to_master_triggers_full_pipeline() {
-    let config = CiSimConfig {
-        name: "push-master".into(),
-        num_rounds: 30,
-        ci_yaml: basic_ci_yaml(),
-        webhook_schedule: vec![(1, push_event("master", "def456"))],
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-
-    let trace = sim::run_simulation(config);
-
-    let full_created = trace.events.iter().any(|(_, e)| {
-        matches!(e, CiSimEvent::PipelineCreated { name, .. } if name == "full")
-    });
-    assert!(full_created, "pipeline 'full' should be created");
-
-    // Both test and bench should eventually complete.
-    let completed: Vec<String> = trace
-        .events
-        .iter()
-        .filter_map(|(_, e)| match e {
-            CiSimEvent::JobCompleted { job_id, .. } => Some(job_id.job_name.clone()),
-            _ => None,
-        })
-        .collect();
-
-    assert!(completed.contains(&"test".to_string()), "test should complete");
-    assert!(completed.contains(&"bench".to_string()), "bench should complete");
-}
-
-// ─── Scenario: Jobs execute in DAG order ────────────────────────────────────
-
-#[test]
-fn jobs_execute_in_dag_order() {
-    let config = CiSimConfig {
-        name: "dag-order".into(),
-        num_rounds: 30,
-        ci_yaml: basic_ci_yaml(),
-        webhook_schedule: vec![(1, push_event("feature-y", "aaa111"))],
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-
-    let trace = sim::run_simulation(config);
-
-    // test should start after fmt and clippy complete.
-    assert!(
-        sim::check_dag_ordering(&trace),
-        "DAG ordering must be respected"
-    );
-}
-
-// ─── Scenario: Job failure skips dependents ─────────────────────────────────
-
-#[test]
-fn job_failure_skips_downstream_dependents() {
-    let config = CiSimConfig {
-        name: "failure-skip".into(),
-        num_rounds: 30,
-        ci_yaml: basic_ci_yaml(),
-        webhook_schedule: vec![(1, push_event("feature-z", "bbb222"))],
-        provision_latency: 1,
-        job_duration: 2,
-        // fmt will fail, so test (which needs fmt) should be skipped.
-        job_failure_schedule: vec![(0, "fmt".into())],
-        ..Default::default()
-    };
-
-    let trace = sim::run_simulation(config);
-
-    // test should be skipped.
-    let test_skipped = trace.events.iter().any(|(_, e)| {
-        matches!(e, CiSimEvent::JobSkipped { job_id } if job_id.job_name == "test")
-    });
-    assert!(test_skipped, "test job should be skipped when fmt fails");
-
-    // Pipeline should be marked as failed.
-    let pipeline_failed = trace.status_updates.iter().any(|u| {
-        u.context == "ci/check" && u.state == "failure"
-    });
-    assert!(pipeline_failed, "pipeline should report failure status");
-}
-
-// ─── Scenario: Parallel pushes execute independently ────────────────────────
-
-#[test]
-fn parallel_pushes_execute_independently() {
-    let config = CiSimConfig {
-        name: "parallel-pushes".into(),
-        num_rounds: 40,
-        ci_yaml: basic_ci_yaml(),
-        webhook_schedule: vec![
-            (1, push_event("feature-a", "ccc333")),
-            (1, push_event("feature-b", "ddd444")),
-        ],
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-
-    let trace = sim::run_simulation(config);
-
-    // Two pipelines should be created.
-    let pipeline_count = trace
-        .events
-        .iter()
-        .filter(|(_, e)| matches!(e, CiSimEvent::PipelineCreated { .. }))
-        .count();
-    assert_eq!(pipeline_count, 2, "two pipelines should be created");
-
-    // Both should have terminal status.
-    assert!(
-        sim::check_all_webhooks_terminate(&trace),
-        "both webhooks should produce terminal statuses"
-    );
-}
-
-// ─── Scenario: Provisioner goes offline, jobs queue and resume ──────────────
-
-#[test]
-fn provisioner_offline_queues_then_resumes() {
-    let config = CiSimConfig {
-        name: "provisioner-offline".into(),
-        num_rounds: 50,
-        ci_yaml: basic_ci_yaml(),
-        // Push at round 3, provisioner offline rounds 1-10.
-        webhook_schedule: vec![(3, push_event("feature-q", "eee555"))],
-        provision_latency: 1,
-        job_duration: 2,
-        provisioner_offline_schedule: vec![(1, 10)],
-        ..Default::default()
-    };
-
-    let trace = sim::run_simulation(config);
-
-    // Provisioner went offline and came back.
-    let went_offline = trace
-        .events
-        .iter()
-        .any(|(_, e)| matches!(e, CiSimEvent::ProvisionerWentOffline));
-    let came_online = trace
-        .events
-        .iter()
-        .any(|(_, e)| matches!(e, CiSimEvent::ProvisionerCameOnline));
-    assert!(went_offline, "provisioner should go offline");
-    assert!(came_online, "provisioner should come back online");
-
-    // Despite the outage, all jobs should eventually complete.
-    assert!(
-        sim::check_all_webhooks_terminate(&trace),
-        "pipeline should complete after provisioner returns"
-    );
-}
-
-// ─── Scenario: Spot instance interrupted mid-job ────────────────────────────
-
-#[test]
-fn spot_instance_interruption_reports_failure() {
-    // Use a simpler pipeline so we have a clear target to interrupt.
-    let yaml = r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      test:
-        run: cargo test
-"#;
-    let config = CiSimConfig {
-        name: "spot-interrupt".into(),
-        num_rounds: 30,
-        ci_yaml: yaml.into(),
-        webhook_schedule: vec![(1, push_event("main", "fff666"))],
-        provision_latency: 1,
-        job_duration: 5,
-        // Interrupt the test job at round 4 (while it's still running).
-        instance_interrupt_schedule: vec![(4, "test".into())],
-        ..Default::default()
-    };
-
-    let trace = sim::run_simulation(config);
-
-    // The pipeline should be terminal (failed due to interruption).
-    let has_failure_status = trace
-        .status_updates
-        .iter()
-        .any(|u| u.state == "failure" || u.state == "error");
-    assert!(
-        has_failure_status,
-        "interrupted job should produce a failure status"
-    );
-
-    // The instance should be terminated.
-    assert!(
-        sim::check_no_instance_leaks(&trace),
-        "interrupted instance should be terminated"
-    );
-}
-
-// ─── Scenario: All jobs pass → pipeline success ─────────────────────────────
-
-#[test]
-fn all_jobs_pass_marks_pipeline_success() {
-    let yaml = r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      lint:
-        run: cargo clippy
-      test:
-        needs: [lint]
-        run: cargo test
-"#;
-    let config = CiSimConfig {
-        name: "all-pass".into(),
-        num_rounds: 30,
-        ci_yaml: yaml.into(),
-        webhook_schedule: vec![(1, push_event("main", "ggg777"))],
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-
-    let trace = sim::run_simulation(config);
-
-    let has_success = trace
-        .status_updates
-        .iter()
-        .any(|u| u.state == "success" && u.context == "ci/check");
-    assert!(has_success, "pipeline should be marked as success");
-}
-
-// ─── Scenario: Every provisioned instance is terminated ─────────────────────
-
-#[test]
-fn no_instance_resource_leaks() {
-    let config = CiSimConfig {
-        name: "no-leaks".into(),
-        num_rounds: 40,
-        ci_yaml: basic_ci_yaml(),
-        webhook_schedule: vec![
-            (1, push_event("feature-1", "h1")),
-            (5, push_event("feature-2", "h2")),
-        ],
-        provision_latency: 1,
-        job_duration: 2,
-        ..Default::default()
-    };
-
-    let trace = sim::run_simulation(config);
-
-    assert!(
-        sim::check_no_instance_leaks(&trace),
-        "all provisioned instances must be terminated"
-    );
-}
diff --git a/crates/simulation/tests/cluster_scenarios.rs b/crates/simulation/tests/cluster_scenarios.rs
index e63ab71..5671fd8 100644
--- a/crates/simulation/tests/cluster_scenarios.rs
+++ b/crates/simulation/tests/cluster_scenarios.rs
@@ -1,3 +1,4 @@
+#![cfg(feature = "distribution")]
 //! Cluster simulation scenarios — breadth-first coverage of failure modes.
 //!
 //! Inspired by Hashicorp memberlist test suite, FoundationDB simulation testing,
diff --git a/crates/simulation/tests/deploy_scenarios.rs b/crates/simulation/tests/deploy_scenarios.rs
index 1460e7a..43fdb1a 100644
--- a/crates/simulation/tests/deploy_scenarios.rs
+++ b/crates/simulation/tests/deploy_scenarios.rs
@@ -1,3 +1,4 @@
+#![cfg(feature = "distribution")]
 //! Deployment topology simulation scenarios — NAT, relay, firewall, staggered join.
 //!
 //! These tests model real deployment topologies (home NAT + cloud VPS) to catch
diff --git a/crates/simulation/tests/distribution_lifecycle.rs b/crates/simulation/tests/distribution_lifecycle.rs
index b1ef5e5..992c597 100644
--- a/crates/simulation/tests/distribution_lifecycle.rs
+++ b/crates/simulation/tests/distribution_lifecycle.rs
@@ -1,3 +1,4 @@
+#![cfg(feature = "distribution")]
 //! Lifecycle simulation tests — death/repair/cache/routing behavior.
 //!
 //! Tests that node death correctly triggers:
diff --git a/crates/simulation/tests/distribution_properties.rs b/crates/simulation/tests/distribution_properties.rs
index 35ae3e8..950d9f5 100644
--- a/crates/simulation/tests/distribution_properties.rs
+++ b/crates/simulation/tests/distribution_properties.rs
@@ -1,3 +1,4 @@
+#![cfg(feature = "distribution")]
 //! Property-based distribution tests — invariants that must hold across configs.
 //!
 //! Each test verifies a structural property across multiple simulation
diff --git a/crates/simulation/tests/distribution_registry.rs b/crates/simulation/tests/distribution_registry.rs
index 8084e65..3cea93f 100644
--- a/crates/simulation/tests/distribution_registry.rs
+++ b/crates/simulation/tests/distribution_registry.rs
@@ -1,3 +1,4 @@
+#![cfg(feature = "distribution")]
 //! Registry simulation tests — cluster registry CRDT behavior under gossip.
 //!
 //! Tests that registry names propagate, converge, and resolve correctly
diff --git a/crates/simulation/tests/distribution_sim.rs b/crates/simulation/tests/distribution_sim.rs
index c1b3556..47bc4ea 100644
--- a/crates/simulation/tests/distribution_sim.rs
+++ b/crates/simulation/tests/distribution_sim.rs
@@ -1,3 +1,5 @@
+#![cfg(feature = "distribution")]
+
 use simulation::distribution::properties::{
     analyze, check_actor_resolution, check_failure_detection, check_join_convergence,
     check_membership_accuracy,
diff --git a/crates/simulation/tests/gossip_convergence.rs b/crates/simulation/tests/gossip_convergence.rs
index d02a3e3..a29979f 100644
--- a/crates/simulation/tests/gossip_convergence.rs
+++ b/crates/simulation/tests/gossip_convergence.rs
@@ -1,3 +1,5 @@
+#![cfg(feature = "gossip")]
+
 use swactor::config::RuntimeConfig;
 use swactor::runtime::Runtime;
 use simulation::gossip::{GossipActor, GossipMessage, GossipQueryResponse};
diff --git a/crates/simulation/tests/gossip_properties.rs b/crates/simulation/tests/gossip_properties.rs
index 5afd1d6..0f6b381 100644
--- a/crates/simulation/tests/gossip_properties.rs
+++ b/crates/simulation/tests/gossip_properties.rs
@@ -1,3 +1,5 @@
+#![cfg(feature = "gossip")]
+
 use simulation::gossip::properties::*;
 use simulation::gossip::sim::{run_simulation, GossipSimConfig};
 use simulation::gossip::trace::SimulationTrace;
diff --git a/crates/simulation/tests/local_ci_properties.rs b/crates/simulation/tests/local_ci_properties.rs
deleted file mode 100644
index c5dea8f..0000000
--- a/crates/simulation/tests/local_ci_properties.rs
+++ /dev/null
@@ -1,256 +0,0 @@
-//! Property-based tests for the local CI simulation.
-//!
-//! These verify invariants that should hold across all possible simulation configurations.
-
-use simulation::ci::local_sim::{self, LocalSimConfig};
-use swactor_ci::{EventType, WebhookEvent};
-
-fn simple_yaml() -> String {
-    r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      fmt:
-        run: cargo fmt -- --check
-      test:
-        needs: [fmt]
-        run: cargo test
-"#
-    .into()
-}
-
-fn push(branch: &str, sha: &str) -> WebhookEvent {
-    WebhookEvent {
-        event_type: EventType::Push,
-        repo_owner: "user".into(),
-        repo_name: "repo".into(),
-        branch: branch.into(),
-        commit_sha: sha.into(),
-        tag: None,
-    }
-}
-
-// ─── Property: One-at-a-time ────────────────────────────────────────────────
-
-#[test]
-fn property_one_at_a_time_single_push() {
-    let config = LocalSimConfig {
-        name: "prop-1at1-single".into(),
-        num_rounds: 30,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: vec![(1, push("main", "sha-1"))],
-        job_duration: 2,
-        ..Default::default()
-    };
-    let trace = local_sim::run_simulation(config);
-    assert!(
-        local_sim::check_one_at_a_time(&trace),
-        "at most one job running at a time"
-    );
-}
-
-#[test]
-fn property_one_at_a_time_burst() {
-    let config = LocalSimConfig {
-        name: "prop-1at1-burst".into(),
-        num_rounds: 100,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: (1..=10)
-            .map(|i| (1, push(&format!("branch-{i}"), &format!("sha-{i}"))))
-            .collect(),
-        job_duration: 2,
-        ..Default::default()
-    };
-    let trace = local_sim::run_simulation(config);
-    assert!(
-        local_sim::check_one_at_a_time(&trace),
-        "at most one job running at a time under burst"
-    );
-}
-
-#[test]
-fn property_one_at_a_time_staggered() {
-    let config = LocalSimConfig {
-        name: "prop-1at1-stagger".into(),
-        num_rounds: 80,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: vec![
-            (1, push("a", "sha-a")),
-            (3, push("b", "sha-b")),
-            (5, push("c", "sha-c")),
-            (7, push("d", "sha-d")),
-        ],
-        job_duration: 3,
-        ..Default::default()
-    };
-    let trace = local_sim::run_simulation(config);
-    assert!(
-        local_sim::check_one_at_a_time(&trace),
-        "at most one job running at a time under stagger"
-    );
-}
-
-// ─── Property: Supersede correctness ────────────────────────────────────────
-
-#[test]
-fn property_superseded_pipelines_never_run() {
-    let config = LocalSimConfig {
-        name: "prop-supersede".into(),
-        num_rounds: 60,
-        ci_yaml: simple_yaml(),
-        // Same branch, rapid pushes while jobs are long.
-        webhook_schedule: (1..=8)
-            .map(|i| (i, push("feature", &format!("sha-ss-{i}"))))
-            .collect(),
-        job_duration: 4,
-        ..Default::default()
-    };
-    let trace = local_sim::run_simulation(config);
-    assert!(
-        local_sim::check_superseded_no_running(&trace),
-        "superseded pipelines should never have a running job"
-    );
-}
-
-// ─── Property: Termination ──────────────────────────────────────────────────
-
-#[test]
-fn property_all_non_superseded_terminate() {
-    let config = LocalSimConfig {
-        name: "prop-terminate".into(),
-        num_rounds: 100,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: vec![
-            (1, push("a", "sha-t1")),
-            (2, push("b", "sha-t2")),
-            (3, push("a", "sha-t3")),
-            (10, push("c", "sha-t4")),
-        ],
-        job_duration: 3,
-        ..Default::default()
-    };
-    let trace = local_sim::run_simulation(config);
-    assert!(
-        local_sim::check_termination(&trace),
-        "all non-superseded pipelines must reach terminal status"
-    );
-}
-
-#[test]
-fn property_all_webhooks_terminate() {
-    let config = LocalSimConfig {
-        name: "prop-wh-terminate".into(),
-        num_rounds: 100,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: (1..=5)
-            .map(|i| (i * 3, push("main", &format!("sha-wh-{i}"))))
-            .collect(),
-        job_duration: 2,
-        ..Default::default()
-    };
-    let trace = local_sim::run_simulation(config);
-    assert!(
-        local_sim::check_all_webhooks_terminate(&trace),
-        "every webhook must produce a terminal status"
-    );
-}
-
-// ─── Property: DAG ordering ─────────────────────────────────────────────────
-
-#[test]
-fn property_dag_ordering_deep_chain() {
-    let yaml = r#"
-pipelines:
-  deep:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      a:
-        run: echo a
-      b:
-        needs: [a]
-        run: echo b
-      c:
-        needs: [b]
-        run: echo c
-      d:
-        needs: [c]
-        run: echo d
-"#;
-    let config = LocalSimConfig {
-        name: "prop-dag-deep".into(),
-        num_rounds: 50,
-        ci_yaml: yaml.into(),
-        webhook_schedule: vec![(1, push("main", "sha-dag"))],
-        job_duration: 2,
-        ..Default::default()
-    };
-    let trace = local_sim::run_simulation(config);
-    assert!(
-        local_sim::check_dag_ordering(&trace),
-        "deep DAG ordering must be respected"
-    );
-}
-
-#[test]
-fn property_dag_ordering_diamond() {
-    let yaml = r#"
-pipelines:
-  diamond:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      root:
-        run: echo root
-      left:
-        needs: [root]
-        run: echo left
-      right:
-        needs: [root]
-        run: echo right
-      merge:
-        needs: [left, right]
-        run: echo merge
-"#;
-    let config = LocalSimConfig {
-        name: "prop-dag-diamond".into(),
-        num_rounds: 50,
-        ci_yaml: yaml.into(),
-        webhook_schedule: vec![(1, push("main", "sha-dia"))],
-        job_duration: 2,
-        ..Default::default()
-    };
-    let trace = local_sim::run_simulation(config);
-    assert!(
-        local_sim::check_dag_ordering(&trace),
-        "diamond DAG ordering must be respected"
-    );
-}
-
-// ─── Property: FIFO across branches ─────────────────────────────────────────
-
-#[test]
-fn property_fifo_across_branches() {
-    let config = LocalSimConfig {
-        name: "prop-fifo".into(),
-        num_rounds: 80,
-        ci_yaml: simple_yaml(),
-        webhook_schedule: vec![
-            (1, push("a", "sha-f1")),
-            (2, push("b", "sha-f2")),
-            (3, push("c", "sha-f3")),
-        ],
-        job_duration: 3,
-        ..Default::default()
-    };
-    let trace = local_sim::run_simulation(config);
-    assert!(
-        local_sim::check_fifo_order(&trace),
-        "branches must execute in FIFO queue order"
-    );
-}
diff --git a/crates/simulation/tests/local_ci_scenarios.rs b/crates/simulation/tests/local_ci_scenarios.rs
deleted file mode 100644
index cdc93d0..0000000
--- a/crates/simulation/tests/local_ci_scenarios.rs
+++ /dev/null
@@ -1,324 +0,0 @@
-//! Scenario tests for the local CI simulation.
-//!
-//! Each test tells a story: set up a scenario, run the simulation, verify outcomes.
-
-use simulation::ci::local_sim::{self, LocalSimConfig, LocalSimEvent};
-use swactor_ci::{EventType, WebhookEvent};
-
-fn basic_ci_yaml() -> String {
-    r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-        exclude: ["master"]
-    jobs:
-      fmt:
-        run: cargo fmt -- --check
-      clippy:
-        run: cargo clippy
-      test:
-        needs: [fmt, clippy]
-        run: cargo test
-  full:
-    triggers:
-      - event: push
-        branches: ["master"]
-    jobs:
-      test:
-        run: cargo test --all-features
-        timeout: 600
-      bench:
-        needs: [test]
-        run: cargo bench
-"#
-    .into()
-}
-
-fn push_event(branch: &str, sha: &str) -> WebhookEvent {
-    WebhookEvent {
-        event_type: EventType::Push,
-        repo_owner: "user".into(),
-        repo_name: "repo".into(),
-        branch: branch.into(),
-        commit_sha: sha.into(),
-        tag: None,
-    }
-}
-
-// ─── Scenario: Single push → single job → passes ────────────────────────────
-
-#[test]
-fn single_push_runs_and_completes() {
-    let yaml = r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      test:
-        run: cargo test
-"#;
-    let config = LocalSimConfig {
-        name: "single-push".into(),
-        num_rounds: 20,
-        ci_yaml: yaml.into(),
-        webhook_schedule: vec![(1, push_event("main", "sha1"))],
-        job_duration: 2,
-        ..Default::default()
-    };
-
-    let trace = local_sim::run_simulation(config);
-
-    let created = trace
-        .events
-        .iter()
-        .filter(|(_, e)| matches!(e, LocalSimEvent::PipelineCreated { .. }))
-        .count();
-    assert_eq!(created, 1);
-
-    let completed = trace
-        .events
-        .iter()
-        .filter(|(_, e)| matches!(e, LocalSimEvent::JobCompleted { passed: true, .. }))
-        .count();
-    assert_eq!(completed, 1);
-
-    assert!(local_sim::check_all_webhooks_terminate(&trace));
-}
-
-// ─── Scenario: Push A, push A again while queued → only latest runs ─────────
-
-#[test]
-fn supersede_queued_same_branch() {
-    let yaml = r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      test:
-        run: cargo test
-"#;
-    let config = LocalSimConfig {
-        name: "supersede-queued".into(),
-        num_rounds: 30,
-        ci_yaml: yaml.into(),
-        // Push A at round 1 occupies the runner. Push A' at round 2 queues.
-        // Push A'' at round 3 should supersede A'.
-        webhook_schedule: vec![
-            (1, push_event("feature", "sha-a1")),
-            (2, push_event("feature", "sha-a2")),
-            (3, push_event("feature", "sha-a3")),
-        ],
-        job_duration: 5,
-        ..Default::default()
-    };
-
-    let trace = local_sim::run_simulation(config);
-
-    // sha-a2 should be superseded.
-    let superseded = trace
-        .events
-        .iter()
-        .filter(|(_, e)| matches!(e, LocalSimEvent::PipelineSuperseded { .. }))
-        .count();
-    assert!(superseded >= 1, "at least one pipeline should be superseded");
-
-    // sha-a2 should have an "error" status (superseded).
-    let a2_error = trace
-        .status_updates
-        .iter()
-        .any(|u| u.commit_sha == "sha-a2" && u.state == "error");
-    assert!(a2_error, "superseded pipeline should report error status");
-
-    // sha-a1 and sha-a3 should both reach terminal status.
-    let a1_terminal = trace
-        .status_updates
-        .iter()
-        .any(|u| u.commit_sha == "sha-a1" && (u.state == "success" || u.state == "failure"));
-    let a3_terminal = trace
-        .status_updates
-        .iter()
-        .any(|u| u.commit_sha == "sha-a3" && (u.state == "success" || u.state == "failure"));
-    assert!(a1_terminal, "first push should complete");
-    assert!(a3_terminal, "latest push should complete");
-
-    assert!(local_sim::check_superseded_no_running(&trace));
-}
-
-// ─── Scenario: Push A, push A while running → running completes, new queues ─
-
-#[test]
-fn push_while_running_does_not_supersede_active() {
-    let yaml = r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      test:
-        run: cargo test
-"#;
-    let config = LocalSimConfig {
-        name: "no-supersede-active".into(),
-        num_rounds: 30,
-        ci_yaml: yaml.into(),
-        // Push A at round 1 starts running immediately.
-        // Push A' at round 2 should queue (not cancel the running job).
-        webhook_schedule: vec![
-            (1, push_event("feature", "sha-run1")),
-            (2, push_event("feature", "sha-run2")),
-        ],
-        job_duration: 4,
-        ..Default::default()
-    };
-
-    let trace = local_sim::run_simulation(config);
-
-    // Both should reach terminal status.
-    let run1_terminal = trace
-        .status_updates
-        .iter()
-        .any(|u| u.commit_sha == "sha-run1" && u.state == "success");
-    let run2_terminal = trace
-        .status_updates
-        .iter()
-        .any(|u| u.commit_sha == "sha-run2" && u.state == "success");
-
-    assert!(run1_terminal, "running pipeline should complete normally");
-    assert!(run2_terminal, "queued pipeline should run after");
-
-    assert!(local_sim::check_one_at_a_time(&trace));
-}
-
-// ─── Scenario: Push A, push B → both run in FIFO order ─────────────────────
-
-#[test]
-fn different_branches_run_fifo() {
-    let yaml = r#"
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      test:
-        run: cargo test
-"#;
-    let config = LocalSimConfig {
-        name: "fifo-branches".into(),
-        num_rounds: 30,
-        ci_yaml: yaml.into(),
-        webhook_schedule: vec![
-            (1, push_event("feature-a", "sha-fa")),
-            (1, push_event("feature-b", "sha-fb")),
-        ],
-        job_duration: 3,
-        ..Default::default()
-    };
-
-    let trace = local_sim::run_simulation(config);
-
-    // Both should complete.
-    assert!(local_sim::check_all_webhooks_terminate(&trace));
-
-    // FIFO order respected.
-    assert!(local_sim::check_fifo_order(&trace));
-
-    // One at a time.
-    assert!(local_sim::check_one_at_a_time(&trace));
-}
-
-// ─── Scenario: Job failure → dependents skipped → next pipeline starts ──────
-
-#[test]
-fn job_failure_skips_dependents_and_advances() {
-    let config = LocalSimConfig {
-        name: "failure-skip-advance".into(),
-        num_rounds: 40,
-        ci_yaml: basic_ci_yaml(),
-        webhook_schedule: vec![
-            (1, push_event("feature-x", "sha-fail")),
-            (2, push_event("feature-y", "sha-next")),
-        ],
-        job_duration: 2,
-        // fmt fails.
-        job_failure_schedule: vec![(0, "fmt".into())],
-        ..Default::default()
-    };
-
-    let trace = local_sim::run_simulation(config);
-
-    // test should be skipped in feature-x pipeline (needs fmt which fails).
-    let test_skipped = trace.events.iter().any(|(_, e)| {
-        matches!(e, LocalSimEvent::JobSkipped { job_id } if job_id.job_name == "test")
-    });
-    assert!(test_skipped, "test should be skipped when fmt fails");
-
-    // Both pipelines should reach terminal.
-    assert!(local_sim::check_all_webhooks_terminate(&trace));
-
-    // One at a time.
-    assert!(local_sim::check_one_at_a_time(&trace));
-}
-
-// ─── Scenario: Diamond DAG → jobs serialize respecting deps ─────────────────
-
-#[test]
-fn diamond_dag_serialized_with_deps() {
-    let yaml = r#"
-pipelines:
-  diamond:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      root:
-        run: echo root
-      left:
-        needs: [root]
-        run: echo left
-      right:
-        needs: [root]
-        run: echo right
-      merge:
-        needs: [left, right]
-        run: echo merge
-"#;
-    let config = LocalSimConfig {
-        name: "diamond-dag".into(),
-        num_rounds: 50,
-        ci_yaml: yaml.into(),
-        webhook_schedule: vec![(1, push_event("main", "sha-diamond"))],
-        job_duration: 2,
-        ..Default::default()
-    };
-
-    let trace = local_sim::run_simulation(config);
-
-    // All 4 jobs should complete.
-    let completed = trace
-        .events
-        .iter()
-        .filter(|(_, e)| matches!(e, LocalSimEvent::JobCompleted { .. }))
-        .count();
-    assert_eq!(completed, 4, "all 4 diamond jobs should complete");
-
-    // DAG ordering respected.
-    assert!(local_sim::check_dag_ordering(&trace));
-
-    // One at a time (serial).
-    assert!(local_sim::check_one_at_a_time(&trace));
-
-    // Pipeline should succeed.
-    let success = trace
-        .status_updates
-        .iter()
-        .any(|u| u.state == "success" && u.context == "ci/diamond");
-    assert!(success, "diamond pipeline should succeed");
-}
diff --git a/crates/simulation/tests/topology_adversarial.rs b/crates/simulation/tests/topology_adversarial.rs
index ceeaf2a..d39239a 100644
--- a/crates/simulation/tests/topology_adversarial.rs
+++ b/crates/simulation/tests/topology_adversarial.rs
@@ -1,3 +1,4 @@
+#![cfg(feature = "distribution")]
 //! Adversarial network topology simulation scenarios.
 //!
 //! These tests model per-link heterogeneity, relay penalties, and topology-aware
diff --git a/crates/std/Cargo.toml b/crates/std/Cargo.toml
deleted file mode 100644
index 5b063c8..0000000
--- a/crates/std/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "swactor-std"
-version = "0.1.0"
-edition = "2024"
-
-[features]
-default = ["getrandom"]
-getrandom = ["dep:getrandom", "swactor/getrandom"]
-wasm = ["swactor/wasm"]
-
-[dependencies]
-swactor = { path = "../..", default-features = false }
-getrandom = { version = "0.2", optional = true }
diff --git a/crates/streams/Cargo.toml b/crates/streams/Cargo.toml
deleted file mode 100644
index 3f81fc0..0000000
--- a/crates/streams/Cargo.toml
+++ /dev/null
@@ -1,20 +0,0 @@
-[package]
-name = "swactor-streams"
-version = "0.1.0"
-edition = "2024"
-
-[dependencies]
-swactor = { path = "../..", features = ["serde"] }
-swactor-std = { path = "../std" }
-shared-types = { path = "../shared-types" }
-distribution = { path = "../distribution" }
-crossbeam-queue = "0.3.12"
-tokio = { version = "1", features = ["sync", "io-util"] }
-iroh = { version = "0.96" }
-blake3 = "1"
-serde = { version = "1", features = ["derive"] }
-getrandom = "0.2"
-
-[dev-dependencies]
-proptest = "1"
-tokio = { version = "1", features = ["rt-multi-thread", "macros", "test-util", "io-util"] }
diff --git a/crates/transport/Cargo.toml b/crates/transport/Cargo.toml
new file mode 100644
index 0000000..bf122c5
--- /dev/null
+++ b/crates/transport/Cargo.toml
@@ -0,0 +1,21 @@
+[package]
+name = "swactor-transport"
+version = "0.1.0"
+edition = "2024"
+
+[features]
+default = ["tcp"]
+tcp = []
+iroh = ["dep:iroh", "dep:tokio"]
+relay = ["iroh", "dep:iroh-relay"]
+
+[dependencies]
+swactor = { path = "../..", features = ["serde", "transport"] }
+ed25519-dalek = { version = "2", features = ["rand_core"] }
+rand_core = { version = "0.6", features = ["getrandom"] }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+bs58 = "0.5"
+iroh = { version = "0.96", optional = true }
+iroh-relay = { version = "0.96", features = ["server"], optional = true }
+tokio = { version = "1", features = ["rt-multi-thread"], optional = true }
diff --git a/crates/transport/src/crypto.rs b/crates/transport/src/crypto.rs
new file mode 100644
index 0000000..1f1c9b3
--- /dev/null
+++ b/crates/transport/src/crypto.rs
@@ -0,0 +1,96 @@
+//! Ed25519 cryptographic primitives for node identity.
+
+use std::fmt;
+
+use ed25519_dalek::{Signer, Verifier};
+use serde::{Deserialize, Serialize};
+
+use crate::NodeId;
+
+// ─── Signature ──────────────────────────────────────────────────────────────
+
+/// An ed25519 signature (64 bytes).
+#[derive(Clone, Copy, PartialEq, Eq)]
+pub struct Signature(pub [u8; 64]);
+
+impl Serialize for Signature {
+    fn serialize<S: serde::Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error> {
+        serializer.serialize_bytes(&self.0)
+    }
+}
+
+impl<'de> Deserialize<'de> for Signature {
+    fn deserialize<D: serde::Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error> {
+        let bytes: Vec<u8> = Deserialize::deserialize(deserializer)?;
+        if bytes.len() != 64 {
+            return Err(serde::de::Error::custom(format!(
+                "expected 64 bytes for Signature, got {}",
+                bytes.len()
+            )));
+        }
+        let mut arr = [0u8; 64];
+        arr.copy_from_slice(&bytes);
+        Ok(Signature(arr))
+    }
+}
+
+impl fmt::Debug for Signature {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(f, "Sig(")?;
+        for b in &self.0[..4] {
+            write!(f, "{:02x}", b)?;
+        }
+        write!(f, "\u{2026})")
+    }
+}
+
+// ─── Keypair ────────────────────────────────────────────────────────────────
+
+/// Node identity keypair — wraps ed25519-dalek.
+pub struct Keypair {
+    inner: ed25519_dalek::SigningKey,
+}
+
+impl Keypair {
+    /// Generate a new random keypair.
+    pub fn generate() -> Self {
+        let mut csprng = rand_core::OsRng;
+        Self {
+            inner: ed25519_dalek::SigningKey::generate(&mut csprng),
+        }
+    }
+
+    /// Reconstruct from raw secret key bytes (32 bytes).
+    pub fn from_bytes(secret: &[u8; 32]) -> Self {
+        Self {
+            inner: ed25519_dalek::SigningKey::from_bytes(secret),
+        }
+    }
+
+    /// The public key as a `NodeId`.
+    pub fn node_id(&self) -> NodeId {
+        NodeId(self.inner.verifying_key().to_bytes())
+    }
+
+    /// Raw secret key bytes.
+    pub fn secret_bytes(&self) -> [u8; 32] {
+        self.inner.to_bytes()
+    }
+
+    /// Sign arbitrary bytes.
+    pub fn sign(&self, msg: &[u8]) -> Signature {
+        let sig = self.inner.sign(msg);
+        Signature(sig.to_bytes())
+    }
+}
+
+// ─── Verification ───────────────────────────────────────────────────────────
+
+/// Verify a signature against a `NodeId` (public key) and message bytes.
+pub fn verify(node_id: &NodeId, msg: &[u8], sig: &Signature) -> bool {
+    let Ok(vk) = ed25519_dalek::VerifyingKey::from_bytes(&node_id.0) else {
+        return false;
+    };
+    let signature = ed25519_dalek::Signature::from_bytes(&sig.0);
+    vk.verify(msg, &signature).is_ok()
+}
diff --git a/crates/distribution/src/identity.rs b/crates/transport/src/identity.rs
similarity index 77%
rename from crates/distribution/src/identity.rs
rename to crates/transport/src/identity.rs
index 5867dc0..d7901cd 100644
--- a/crates/distribution/src/identity.rs
+++ b/crates/transport/src/identity.rs
@@ -1,38 +1,12 @@
-//! Shared keypair persistence — load or generate an ed25519 keypair on disk.
+//! Keypair persistence and encoding utilities.
 //!
-//! Reused by `swactor-node`, `store_node`, and xtask tooling.
+//! Reused by the `node` crate, `store_node`, and xtask tooling.
 
 use std::path::Path;
 
 use crate::crypto::Keypair;
 
-/// Hex-encode a byte slice.
-pub fn hex_encode(bytes: &[u8]) -> String {
-    bytes.iter().map(|b| format!("{b:02x}")).collect()
-}
-
-/// Hex-decode a string into bytes. Returns `None` on invalid input.
-pub fn hex_decode(hex: &str) -> Option<Vec<u8>> {
-    if hex.len() % 2 != 0 {
-        return None;
-    }
-    let mut bytes = Vec::with_capacity(hex.len() / 2);
-    for chunk in hex.as_bytes().chunks(2) {
-        let hi = hex_digit(chunk[0])?;
-        let lo = hex_digit(chunk[1])?;
-        bytes.push((hi << 4) | lo);
-    }
-    Some(bytes)
-}
-
-fn hex_digit(b: u8) -> Option<u8> {
-    match b {
-        b'0'..=b'9' => Some(b - b'0'),
-        b'a'..=b'f' => Some(b - b'a' + 10),
-        b'A'..=b'F' => Some(b - b'A' + 10),
-        _ => None,
-    }
-}
+pub use swactor::transport::{hex_encode, hex_decode};
 
 /// Base58-encode a byte slice (Bitcoin alphabet).
 pub fn base58_encode(bytes: &[u8]) -> String {
diff --git a/crates/transport/src/lib.rs b/crates/transport/src/lib.rs
new file mode 100644
index 0000000..1cd8332
--- /dev/null
+++ b/crates/transport/src/lib.rs
@@ -0,0 +1,12 @@
+//! Transport infrastructure for the swactor ecosystem.
+//!
+//! Provides cryptographic identity (ed25519 keypairs), encoding utilities,
+//! and TCP transport primitives.
+
+pub mod crypto;
+pub mod identity;
+
+pub use swactor::transport::NodeId;
+
+#[cfg(feature = "tcp")]
+pub mod tcp;
diff --git a/crates/distribution/src/transport.rs b/crates/transport/src/tcp.rs
similarity index 92%
rename from crates/distribution/src/transport.rs
rename to crates/transport/src/tcp.rs
index 677cd4e..c26ae83 100644
--- a/crates/distribution/src/transport.rs
+++ b/crates/transport/src/tcp.rs
@@ -192,6 +192,25 @@ pub fn encode_wire_envelope(envelope: &WireEnvelope) -> Vec<u8> {
     buf
 }
 
+/// Encode a wire envelope with address hints appended after the payload.
+///
+/// Extended frame format:
+///   [4B frame_len][32B dest][4B tag_len][tag][4B hints_len][hints][payload]
+pub fn encode_wire_envelope_with_hints(envelope: &WireEnvelope, hints_bytes: &[u8]) -> Vec<u8> {
+    let tag_bytes = envelope.type_tag.as_bytes();
+    let frame_len: u32 = (32 + 4 + tag_bytes.len() + 4 + hints_bytes.len() + envelope.payload.len()) as u32;
+
+    let mut buf = Vec::with_capacity(4 + frame_len as usize);
+    buf.extend_from_slice(&frame_len.to_be_bytes());
+    buf.extend_from_slice(&envelope.dest.0);
+    buf.extend_from_slice(&(tag_bytes.len() as u32).to_be_bytes());
+    buf.extend_from_slice(tag_bytes);
+    buf.extend_from_slice(&(hints_bytes.len() as u32).to_be_bytes());
+    buf.extend_from_slice(hints_bytes);
+    buf.extend_from_slice(&envelope.payload);
+    buf
+}
+
 enum ReadError {
     WouldBlock,
     Disconnected,
diff --git a/docs/connectome/connectome.md b/docs/connectome/connectome.md
deleted file mode 100644
index db223c0..0000000
--- a/docs/connectome/connectome.md
+++ /dev/null
@@ -1,76 +0,0 @@
-# Connectome Analysis
-
-The connectome analysis applies spectral graph theory to the codebase's internal dependency DAG, producing quantitative coupling metrics and visual dashboards.
-
-## What it measures
-
-The tool parses `deps.dot` (a GraphViz DOT file describing struct/trait dependencies between modules) and computes:
-
-- **Laplacian eigenvalue spectrum** -- encodes the graph's overall connectivity structure
-- **Fiedler vector** -- the optimal spectral bisection of the dependency graph, revealing natural module clusters
-- **Module coupling matrix** -- directed edge counts between every pair of modules
-- **Connectome Complexity Index (CCI)** -- a single 0-1 score combining five sub-metrics:
-
-| Sub-metric | Weight | What it captures |
-|---|---|---|
-| Algebraic connectivity (lambda_2/n) | 25% | How tightly connected the graph is |
-| Spectral entropy (H/log2(k)) | 25% | How uniformly distributed coupling is across eigenvalues |
-| Edge density (\|E\|/n(n-1)) | 15% | Raw ratio of edges to possible edges |
-| Cross-module coupling ratio | 20% | Fraction of edges that cross module boundaries |
-| Spectral radius (rho/(n-1)) | 15% | Maximum hub concentration |
-
-### Interpreting CCI
-
-| CCI range | Label | Meaning |
-|---|---|---|
-| < 0.30 | LOW | Well-decomposed architecture |
-| 0.30 - 0.60 | MODERATE | Typical well-structured codebase |
-| > 0.60 | HIGH | Consider reviewing module boundaries |
-
-## Running
-
-From the project root:
-
-```sh
-# Default: outputs to docs/connectome/
-python tools/spectral/spectral_analysis.py deps.dot
-
-# Custom output directory
-python tools/spectral/spectral_analysis.py deps.dot -o path/to/output
-
-# Also emit JSON metrics
-python tools/spectral/spectral_analysis.py deps.dot --json
-
-# Text report only (skip matplotlib PNG)
-python tools/spectral/spectral_analysis.py deps.dot --no-plots
-```
-
-### Prerequisites
-
-The script requires numpy, scipy, and matplotlib (for the PNG dashboard). These are available in the project's `.venv`:
-
-```sh
-source .venv/bin/activate
-python tools/spectral/spectral_analysis.py deps.dot
-```
-
-## Output files
-
-All output goes to `docs/connectome/` by default:
-
-| File | Description |
-|---|---|
-| `connectome_report.txt` | Full text report with eigenvalues, Fiedler bisection, coupling matrix, and CCI breakdown |
-| `connectome_dashboard.html` | Interactive HTML dashboard with zoomable DAG, eigenvalue plot, Fiedler bar chart, and coupling heatmap |
-| `connectome_dashboard.png` | Static PNG snapshot of the spectral dashboard (dark theme, 16x12 @ 150 DPI) |
-| `connectome_metrics.json` | Machine-readable metrics (only with `--json` flag) |
-
-## Regenerating deps.dot
-
-The DOT file is the input to the spectral analysis. To regenerate it from source:
-
-```sh
-cargo run --manifest-path tools/depgraph/Cargo.toml -- --src-dir src/ --output deps
-```
-
-Then re-run the spectral analysis to update the connectome report.
diff --git a/docs/connectome/connectome_dashboard.html b/docs/connectome/connectome_dashboard.html
deleted file mode 100644
index b8b68ab..0000000
--- a/docs/connectome/connectome_dashboard.html
+++ /dev/null
@@ -1,743 +0,0 @@
-<!DOCTYPE html>
-<html><head>
-<meta charset="utf-8">
-<title>swactor — dependency analysis</title>
-<style>
-* { margin:0; padding:0; box-sizing:border-box; }
-body { background:#1a1a2e; color:#e0e0e0; font-family:system-ui,-apple-system,sans-serif; overflow:hidden; }
-
-/* ─── Tab bar ───────────────────────────────────────────────────────────── */
-.tab-bar { display:flex; align-items:center; height:42px; background:#12122a;
-           border-bottom:1px solid #2a2a5a; padding:0 16px; gap:8px; }
-.tab-bar .title { font-size:14px; font-weight:700; letter-spacing:0.5px; margin-right:18px;
-                  color:#8ab4f8; white-space:nowrap; }
-.tab { background:none; border:none; color:#888; font-size:13px; padding:8px 16px;
-       cursor:pointer; border-bottom:2px solid transparent; transition:color 0.15s; }
-.tab:hover { color:#ccc; }
-.tab.active { color:#e0e0e0; border-bottom-color:#4fc3f7; }
-
-/* ─── Tab content ───────────────────────────────────────────────────────── */
-.tab-content { display:none; }
-.tab-content.active { display:block; }
-
-/* ─── DAG tab ───────────────────────────────────────────────────────────── */
-#tab-dag { height:calc(100vh - 42px); overflow:hidden; position:relative; }
-#dag-viewport { width:100%; height:100%; cursor:grab; }
-#dag-viewport:active { cursor:grabbing; }
-#dag-viewport svg { display:block; }
-#dag-controls { position:absolute; top:12px; left:12px; z-index:10;
-                background:rgba(30,30,60,0.9); border-radius:8px; padding:10px 14px;
-                color:#ccc; font-size:13px; backdrop-filter:blur(8px); }
-#dag-controls button { background:#333; color:#fff; border:1px solid #555;
-                       border-radius:4px; padding:4px 10px; cursor:pointer; margin:0 3px; }
-#dag-controls button:hover { background:#555; }
-#dag-loading { position:absolute; top:50%; left:50%; transform:translate(-50%,-50%);
-               color:#ccc; font-size:18px; }
-
-/* ─── Spectral tab ──────────────────────────────────────────────────────── */
-#tab-spectral { overflow-y:auto; max-height:calc(100vh - 42px); }
-
-.grid { display:grid; grid-template-columns:1fr 1fr; grid-template-rows:auto auto;
-        gap:16px; padding:16px 20px 20px; max-width:1600px; margin:0 auto; }
-
-.panel { background:#16213e; border-radius:10px; border:1px solid #2a2a5a;
-         padding:16px; position:relative; min-height:100px; }
-.panel h2 { font-size:14px; font-weight:600; margin-bottom:10px; color:#8ab4f8;
-            display:flex; align-items:center; gap:8px; }
-.panel h2 .icon { font-size:16px; }
-.panel svg { width:100%; display:block; }
-
-.tooltip { position:fixed; background:rgba(22,33,62,0.96); border:1px solid #4fc3f7;
-           border-radius:6px; padding:8px 12px; font-size:12px; pointer-events:none;
-           z-index:100; backdrop-filter:blur(8px); max-width:300px;
-           box-shadow:0 4px 20px rgba(0,0,0,0.4); display:none; }
-.tooltip .tt-label { font-weight:600; color:#4fc3f7; }
-.tooltip .tt-val { color:#e0e0e0; }
-
-svg text { user-select:none; }
-
-/* Metrics panel */
-.metrics-grid { display:grid; grid-template-columns:1fr 1fr; gap:8px 20px; }
-.metric-item { display:flex; justify-content:space-between; font-size:12px;
-               padding:4px 8px; border-radius:4px; }
-.metric-item:hover { background:rgba(79,195,247,0.08); }
-.metric-label { opacity:0.7; }
-.metric-value { font-weight:600; font-family:'SF Mono',monospace; }
-.cci-box { grid-column:1/-1; text-align:center; margin-top:10px; padding:14px;
-           border-radius:8px; background:rgba(0,0,0,0.25); border:1px solid #333; }
-.cci-score { font-size:32px; font-weight:700; }
-.cci-label { font-size:14px; margin-top:2px; }
-.cci-desc { font-size:11px; opacity:0.6; margin-top:4px; }
-
-.sub-header { font-size:11px; font-weight:600; text-transform:uppercase;
-              letter-spacing:1px; opacity:0.4; margin:8px 0 4px; grid-column:1/-1; }
-
-/* Heatmap */
-.hm-cell { cursor:pointer; transition:opacity 0.15s; }
-.hm-cell:hover { opacity:0.8; stroke:#4fc3f7; stroke-width:2; }
-
-/* Cohesion / heatmap bars */
-.fi-bar { cursor:pointer; transition:opacity 0.15s; }
-.fi-bar:hover { opacity:0.85; }
-</style>
-</head>
-<body>
-
-<div class="tab-bar">
-  <div class="title">swactor &mdash; dependency analysis</div>
-  <button class="tab active" data-tab="spectral">Spectral Analysis</button>
-  <button class="tab" data-tab="dag">Dependency DAG</button>
-</div>
-
-<div class="tab-content" id="tab-dag">
-  <div id="dag-controls">
-    <button onclick="zoomIn()">+</button>
-    <button onclick="zoomOut()">&minus;</button>
-    <button onclick="resetView()">fit</button>
-    <span style="margin-left:8px;opacity:0.6">scroll to zoom &middot; drag to pan &middot; click node to focus</span>
-  </div>
-  <div id="dag-viewport"></div>
-  <div id="dag-loading">Loading Graphviz&hellip;</div>
-</div>
-
-<div class="tab-content active" id="tab-spectral">
-  <div class="grid">
-    <div class="panel" id="panel-structural">
-      <h2><span class="icon">&#x25C9;</span> Structural Properties</h2>
-      <div id="structural-content"></div>
-    </div>
-
-    <div class="panel" id="panel-cohesion">
-      <h2><span class="icon">&#x25A8;</span> Module Cohesion</h2>
-      <svg id="svg-cohesion"></svg>
-    </div>
-
-    <div class="panel" id="panel-heatmap">
-      <h2><span class="icon">&#x25A6;</span> Module Coupling (directed edge counts)</h2>
-      <svg id="svg-heatmap"></svg>
-    </div>
-
-    <div class="panel" id="panel-metrics">
-      <h2><span class="icon">&#x2211;</span> Complexity Metrics</h2>
-      <div id="metrics-content"></div>
-    </div>
-  </div>
-</div>
-
-<div class="tooltip" id="tooltip"></div>
-
-<!-- ─── Script 1: synchronous — data + tab switching + spectral panels ─── -->
-<script>
-// ─── Data ──────────────────────────────────────────────────────────────────
-const DATA = {"structural": {"avg_degree": 2.49, "max_fan_in": 16, "max_fan_in_node": "ActorAddress", "max_fan_out": 18, "max_fan_out_node": "Runtime", "dag_depth": 7, "clustering_coeff": 0.2668, "avg_module_cohesion": 0.302, "avg_module_size": 4.3}, "cohesion": [{"module": "actor", "cohesion": 0.214, "size": 7}, {"module": "worker", "cohesion": 0.167, "size": 4}, {"module": "channel", "cohesion": 0.5, "size": 3}, {"module": "config", "cohesion": 0.5, "size": 2}, {"module": "delivery", "cohesion": 0.167, "size": 7}, {"module": "stats", "cohesion": 0.25, "size": 5}, {"module": "runtime", "cohesion": 0.5, "size": 3}, {"module": "transport", "cohesion": 0.119, "size": 7}], "coupling": {"modules": ["actor", "worker", "channel", "error", "config", "delivery", "stats", "runtime", "transport"], "matrix": [[9.0, 0.0, 0.0, 2.0, 0.0, 0.0, 0.0, 0.0, 0.0], [9.0, 2.0, 1.0, 1.0, 0.0, 5.0, 3.0, 0.0, 0.0], [0.0, 0.0, 3.0, 0.0, 0.0, 1.0, 0.0, 0.0, 0.0], [0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0], [0.0, 0.0, 0.0, 0.0, 1.0, 0.0, 0.0, 0.0, 0.0], [5.0, 0.0, 1.0, 2.0, 1.0, 7.0, 0.0, 0.0, 2.0], [2.0, 0.0, 0.0, 0.0, 0.0, 0.0, 5.0, 0.0, 0.0], [4.0, 1.0, 2.0, 1.0, 1.0, 5.0, 2.0, 3.0, 2.0], [3.0, 0.0, 2.0, 4.0, 0.0, 0.0, 0.0, 0.0, 5.0]]}, "metrics": {"n_nodes": 39, "n_edges": 97, "n_modules": 9, "connected_components": 2, "algebraic_connectivity": 0.0, "normalized_algebraic_connectivity": 0.0, "spectral_entropy": 4.7287, "normalized_spectral_entropy": 0.9077, "edge_density": 0.0655, "cross_module_ratio": 0.6392, "spectral_radius": 7.9636, "normalized_spectral_radius": 0.2096, "cci": 0.396, "cci_label": "MODERATE", "cci_color": "#ff9800", "cci_desc": "typical well-structured codebase"}, "module_colors": {"actor": "#1565c0", "worker": "#c62828", "channel": "#e65100", "error": "#7b1fa2", "config": "#2e7d32", "delivery": "#f9a825", "stats": "#00838f", "runtime": "#d84315", "transport": "#1565c0"}};
-const { structural, cohesion, coupling, metrics, module_colors } = DATA;
-
-// ─── Tab switching ─────────────────────────────────────────────────────────
-document.querySelectorAll('.tab').forEach(btn => {
-  btn.addEventListener('click', () => {
-    document.querySelectorAll('.tab').forEach(b => b.classList.remove('active'));
-    document.querySelectorAll('.tab-content').forEach(c => c.classList.remove('active'));
-    btn.classList.add('active');
-    document.getElementById('tab-' + btn.dataset.tab).classList.add('active');
-    if (btn.dataset.tab === 'dag') {
-      window.dispatchEvent(new Event('dag-visible'));
-    }
-  });
-});
-
-// ─── Tooltip ───────────────────────────────────────────────────────────────
-const TT = document.getElementById('tooltip');
-function showTip(evt, html) {
-  TT.innerHTML = html;
-  TT.style.display = 'block';
-  const x = evt.clientX + 14, y = evt.clientY - 10;
-  TT.style.left = Math.min(x, window.innerWidth - TT.offsetWidth - 20) + 'px';
-  TT.style.top = Math.min(y, window.innerHeight - TT.offsetHeight - 20) + 'px';
-}
-function hideTip() { TT.style.display = 'none'; }
-
-function modColor(mod) { return module_colors[mod] || '#9e9e9e'; }
-
-// ─── Structural Properties ────────────────────────────────────────────────
-(function() {
-  const c = document.getElementById('structural-content');
-  const s = structural;
-  c.innerHTML = `
-    <div class="metrics-grid">
-      <div class="sub-header">Density &amp; Depth</div>
-      <div class="metric-item"><span class="metric-label">Edges/node (avg degree)</span><span class="metric-value">${s.avg_degree}</span></div>
-      <div class="metric-item"><span class="metric-label">DAG depth</span><span class="metric-value">${s.dag_depth}</span></div>
-      <div class="metric-item"><span class="metric-label">Clustering coefficient</span><span class="metric-value">${s.clustering_coeff}</span></div>
-      <div class="metric-item"><span class="metric-label">Avg module size</span><span class="metric-value">${s.avg_module_size}</span></div>
-
-      <div class="sub-header">Dependency Hotspots</div>
-      <div class="metric-item"><span class="metric-label">Max fan-in</span><span class="metric-value">${s.max_fan_in} &larr; ${s.max_fan_in_node}</span></div>
-      <div class="metric-item"><span class="metric-label">Max fan-out</span><span class="metric-value">${s.max_fan_out} &rarr; ${s.max_fan_out_node}</span></div>
-
-      <div class="sub-header">Cohesion</div>
-      <div class="metric-item"><span class="metric-label">Avg module cohesion</span><span class="metric-value">${s.avg_module_cohesion}</span></div>
-      <div class="metric-item"><span class="metric-label">Cross-module ratio</span><span class="metric-value">${(metrics.cross_module_ratio*100).toFixed(1)}%</span></div>
-    </div>
-  `;
-})();
-
-// ─── Module Cohesion ──────────────────────────────────────────────────────
-(function() {
-  const svg = document.getElementById('svg-cohesion');
-  const n = cohesion.length;
-  if (n === 0) return;
-  const barH = Math.max(20, Math.min(36, 300/n));
-  const W = 560, H = Math.max(200, n*barH + 60), M = {t:10,r:30,b:30,l:120};
-  const w = W-M.l-M.r, h = H-M.t-M.b;
-  svg.setAttribute('viewBox', `0 0 ${W} ${H}`);
-
-  const xScale = v => M.l + v * w;
-  const yScale = i => M.t + (i/n) * h + barH/2;
-
-  // Background grid
-  for (const tick of [0.25, 0.5, 0.75, 1.0]) {
-    const x = xScale(tick);
-    const line = document.createElementNS('http://www.w3.org/2000/svg','line');
-    Object.entries({x1:x,x2:x,y1:M.t,y2:M.t+h,stroke:'#2a2a5a','stroke-width':0.5}).forEach(([k,v])=>line.setAttribute(k,v));
-    svg.appendChild(line);
-    const txt = document.createElementNS('http://www.w3.org/2000/svg','text');
-    txt.setAttribute('x', x); txt.setAttribute('y', H-8);
-    txt.setAttribute('text-anchor','middle'); txt.setAttribute('fill','#666'); txt.setAttribute('font-size','10');
-    txt.textContent = (tick*100).toFixed(0) + '%';
-    svg.appendChild(txt);
-  }
-
-  // Average line
-  const avgX = xScale(structural.avg_module_cohesion);
-  const avgLine = document.createElementNS('http://www.w3.org/2000/svg','line');
-  Object.entries({x1:avgX,x2:avgX,y1:M.t,y2:M.t+h,stroke:'#ff4444','stroke-width':1.5,'stroke-dasharray':'5,3','stroke-opacity':0.7}).forEach(([k,v])=>avgLine.setAttribute(k,v));
-  svg.appendChild(avgLine);
-  const avgLbl = document.createElementNS('http://www.w3.org/2000/svg','text');
-  avgLbl.setAttribute('x', avgX+4); avgLbl.setAttribute('y', M.t+10);
-  avgLbl.setAttribute('fill','#ff4444'); avgLbl.setAttribute('font-size','9'); avgLbl.setAttribute('opacity','0.8');
-  avgLbl.textContent = 'avg';
-  svg.appendChild(avgLbl);
-
-  cohesion.forEach((d, i) => {
-    const barW = Math.max(d.cohesion * w, 2);
-    const y = yScale(i) - barH*0.35;
-    const rect = document.createElementNS('http://www.w3.org/2000/svg','rect');
-    rect.setAttribute('x', M.l); rect.setAttribute('y', y);
-    rect.setAttribute('width', barW); rect.setAttribute('height', barH*0.7);
-    rect.setAttribute('rx', 3);
-    rect.setAttribute('fill', modColor(d.module));
-    rect.setAttribute('opacity', 0.85);
-    rect.classList.add('fi-bar');
-    rect.addEventListener('mousemove', e => showTip(e,
-      `<span class="tt-label">${d.module}</span><br>` +
-      `Types: <span class="tt-val">${d.size}</span><br>` +
-      `Cohesion: <span class="tt-val">${(d.cohesion*100).toFixed(1)}%</span>`
-    ));
-    rect.addEventListener('mouseleave', hideTip);
-    svg.appendChild(rect);
-
-    // Value label on bar
-    const valTxt = document.createElementNS('http://www.w3.org/2000/svg','text');
-    valTxt.setAttribute('x', M.l + barW + 6); valTxt.setAttribute('y', yScale(i)+4);
-    valTxt.setAttribute('fill','#ccc'); valTxt.setAttribute('font-size','10'); valTxt.setAttribute('font-weight','600');
-    valTxt.textContent = (d.cohesion*100).toFixed(0) + '%';
-    svg.appendChild(valTxt);
-
-    // Module label
-    const txt = document.createElementNS('http://www.w3.org/2000/svg','text');
-    txt.setAttribute('x', M.l-8); txt.setAttribute('y', yScale(i)+4);
-    txt.setAttribute('text-anchor','end'); txt.setAttribute('fill', modColor(d.module));
-    txt.setAttribute('font-size','11'); txt.setAttribute('font-weight','600');
-    txt.textContent = `${d.module} (${d.size})`;
-    svg.appendChild(txt);
-  });
-})();
-
-// ─── Module Coupling Heatmap ───────────────────────────────────────────────
-(function() {
-  const mods = coupling.modules;
-  const mat = coupling.matrix;
-  const n = mods.length;
-  const svg = document.getElementById('svg-heatmap');
-  const cellSz = Math.min(55, 400/n);
-  const M = {t:10,r:60,b:80,l:100};
-  const W = M.l + n*cellSz + M.r, H = M.t + n*cellSz + M.b;
-  svg.setAttribute('viewBox', `0 0 ${W} ${H}`);
-
-  const maxVal = Math.max(...mat.flat(), 1);
-
-  // Color scale: 0=transparent dark, max=deep red
-  function heatColor(v) {
-    if (v === 0) return '#1a1a2e';
-    const t = v / maxVal;
-    const r = Math.round(40 + 215*t);
-    const g = Math.round(30 + 40*(1-t));
-    const b = Math.round(50*(1-t));
-    return `rgb(${r},${g},${b})`;
-  }
-
-  for (let i = 0; i < n; i++) {
-    // Row labels
-    const rl = document.createElementNS('http://www.w3.org/2000/svg','text');
-    rl.setAttribute('x', M.l-8); rl.setAttribute('y', M.t + i*cellSz + cellSz/2 + 4);
-    rl.setAttribute('text-anchor','end'); rl.setAttribute('fill', modColor(mods[i]));
-    rl.setAttribute('font-size','11'); rl.setAttribute('font-weight','600');
-    rl.textContent = mods[i];
-    svg.appendChild(rl);
-
-    // Column labels
-    const cl = document.createElementNS('http://www.w3.org/2000/svg','text');
-    cl.setAttribute('x', M.l + i*cellSz + cellSz/2);
-    cl.setAttribute('y', M.t + n*cellSz + 16);
-    cl.setAttribute('text-anchor','end'); cl.setAttribute('fill', modColor(mods[i]));
-    cl.setAttribute('font-size','11'); cl.setAttribute('font-weight','600');
-    cl.setAttribute('transform', `rotate(-45, ${M.l + i*cellSz + cellSz/2}, ${M.t + n*cellSz + 16})`);
-    cl.textContent = mods[i];
-    svg.appendChild(cl);
-
-    for (let j = 0; j < n; j++) {
-      const v = mat[i][j];
-      const rect = document.createElementNS('http://www.w3.org/2000/svg','rect');
-      rect.setAttribute('x', M.l + j*cellSz + 1);
-      rect.setAttribute('y', M.t + i*cellSz + 1);
-      rect.setAttribute('width', cellSz-2); rect.setAttribute('height', cellSz-2);
-      rect.setAttribute('rx', 3);
-      rect.setAttribute('fill', heatColor(v));
-      rect.classList.add('hm-cell');
-      rect.addEventListener('mousemove', e => showTip(e,
-        `<span class="tt-label">${mods[i]} &rarr; ${mods[j]}</span><br>` +
-        `Edges: <span class="tt-val">${v}</span>` +
-        (i !== j ? '<br><span style="opacity:0.6">cross-module</span>' : '<br><span style="opacity:0.6">intra-module</span>')
-      ));
-      rect.addEventListener('mouseleave', hideTip);
-      svg.appendChild(rect);
-
-      // Cell text
-      if (v > 0) {
-        const txt = document.createElementNS('http://www.w3.org/2000/svg','text');
-        txt.setAttribute('x', M.l + j*cellSz + cellSz/2);
-        txt.setAttribute('y', M.t + i*cellSz + cellSz/2 + 4);
-        txt.setAttribute('text-anchor','middle'); txt.setAttribute('font-size','11');
-        txt.setAttribute('font-weight','700'); txt.setAttribute('pointer-events','none');
-        txt.setAttribute('fill', v > maxVal*0.5 ? '#fff' : '#ccc');
-        txt.textContent = v;
-        svg.appendChild(txt);
-      }
-    }
-  }
-
-  // Axis labels
-  const srcL = document.createElementNS('http://www.w3.org/2000/svg','text');
-  srcL.setAttribute('x', 10); srcL.setAttribute('y', M.t + n*cellSz/2);
-  srcL.setAttribute('text-anchor','middle'); srcL.setAttribute('fill','#666');
-  srcL.setAttribute('font-size','10');
-  srcL.setAttribute('transform', `rotate(-90,10,${M.t + n*cellSz/2})`);
-  srcL.textContent = 'source module';
-  svg.appendChild(srcL);
-})();
-
-// ─── Metrics Panel ─────────────────────────────────────────────────────────
-(function() {
-  const c = document.getElementById('metrics-content');
-  const mm = metrics;
-  c.innerHTML = `
-    <div class="metrics-grid">
-      <div class="sub-header">Graph</div>
-      <div class="metric-item"><span class="metric-label">Nodes</span><span class="metric-value">${mm.n_nodes}</span></div>
-      <div class="metric-item"><span class="metric-label">Directed edges</span><span class="metric-value">${mm.n_edges}</span></div>
-      <div class="metric-item"><span class="metric-label">Modules</span><span class="metric-value">${mm.n_modules}</span></div>
-      <div class="metric-item"><span class="metric-label">Components</span><span class="metric-value">${mm.connected_components}</span></div>
-
-      <div class="sub-header">Spectral</div>
-      <div class="metric-item"><span class="metric-label">&lambda;<sub>2</sub> (alg. connectivity)</span><span class="metric-value">${mm.algebraic_connectivity}</span></div>
-      <div class="metric-item"><span class="metric-label">&lambda;<sub>2</sub>/n (normalized)</span><span class="metric-value">${mm.normalized_algebraic_connectivity}</span></div>
-      <div class="metric-item"><span class="metric-label">Spectral entropy</span><span class="metric-value">${mm.spectral_entropy}</span></div>
-      <div class="metric-item"><span class="metric-label">Norm. entropy</span><span class="metric-value">${mm.normalized_spectral_entropy}</span></div>
-      <div class="metric-item"><span class="metric-label">Spectral radius</span><span class="metric-value">${mm.spectral_radius}</span></div>
-      <div class="metric-item"><span class="metric-label">Norm. radius</span><span class="metric-value">${mm.normalized_spectral_radius}</span></div>
-
-      <div class="sub-header">Coupling</div>
-      <div class="metric-item"><span class="metric-label">Edge density</span><span class="metric-value">${mm.edge_density}</span></div>
-      <div class="metric-item"><span class="metric-label">Cross-module ratio</span><span class="metric-value">${(mm.cross_module_ratio*100).toFixed(1)}%</span></div>
-
-      <div class="cci-box">
-        <div class="cci-score" style="color:${mm.cci_color}">CCI = ${mm.cci}</div>
-        <div class="cci-label" style="color:${mm.cci_color}">${mm.cci_label}</div>
-        <div class="cci-desc">${mm.cci_desc}</div>
-      </div>
-    </div>
-  `;
-})();
-</script>
-
-<!-- ─── Script 2: module — viz-js DAG rendering (async) ─────────────────── -->
-<script type="module">
-import { instance } from 'https://cdn.jsdelivr.net/npm/@viz-js/viz@3.11.0/lib/viz-standalone.mjs';
-
-const DOT_SOURCE = `digraph swactor {
-    rankdir=LR;
-    fontname="Helvetica";
-    fontsize=14;
-    node [fontname="Helvetica", fontsize=11, style=filled, shape=record];
-    edge [fontname="Helvetica", fontsize=9];
-    label="swactor — internal dependency DAG";
-    labelloc=t;
-    compound=true;
-    newrank=true;
-    splines=ortho;
-
-    subgraph cluster_actor {
-        label="actor";
-        style="rounded,filled"; fillcolor="#e3f2fd"; color="#1565c0";
-        Message [label="{«trait» Message}", fillcolor="#bbdefb"];
-        ActorInterface [label="{«trait» ActorInterface|Incoming(Message)\\nResponse(Message)\\nhandle((&self, &Ctx, Self::Incoming))}", fillcolor="#bbdefb"];
-        ActorAddress [label="{ActorAddress|0: [u8; ..]}", fillcolor="#bbdefb"];
-        Actor [label="{Actor|0: A}", fillcolor="#bbdefb"];
-        AnyActor [label="{«trait» AnyActor|handle_any((&self, &Ctx, Box\\<dyn Any + Send\\>))}", fillcolor="#bbdefb"];
-        ContextInner [label="{«trait» ContextInner|send_any((&self, ActorAddress, Box\\<dyn Any + Send\\>) → Result\\<(), Error\\>)\\nspawn_any((&self, ActorAddress, Box\\<dyn AnyActor\\>) → Result\\<(), Error\\>)}", fillcolor="#bbdefb"];
-        Ctx [label="{Ctx|inner: &'a dyn ContextInner\\nself_addr: ActorAddress}", fillcolor="#bbdefb"];
-    }
-    subgraph cluster_worker {
-        label="worker";
-        style="rounded,filled"; fillcolor="#fce4ec"; color="#c62828";
-        Worker [label="{Worker|id: WorkerId\\npool: ActorPool\\ntransfer_rx: Receiver\\<Envelope\\>\\nspawn_rx: Receiver\\<(ActorAddress, Box\\<dyn AnyActor\\>)\\>\\nstats: Arc\\<WorkerStats\\>\\nmailbox_snapshot: Arc\\<std::sync::Mutex\\<Vec\\<(ActorAddress, usize)\\>\\>\\>}", fillcolor="#ffcdd2"];
-        WorkerContext [label="{WorkerContext|worker_id: WorkerId\\ntc: &'a TickContext\\<'a\\>\\npending_local: &'a RefCell\\<Vec\\<(ActorAddress, Box\\<dyn Any + Send\\>)\\>\\>\\nstats: &'a WorkerStats}", fillcolor="#ffcdd2"];
-        ActorSlot [label="{ActorSlot|mailbox: VecDeque\\<Box\\<dyn Any + Send\\>\\>\\nactor: Box\\<dyn AnyActor\\>}", fillcolor="#ffcdd2"];
-        ActorPool [label="{ActorPool|actors: HashMap\\<ActorAddress, ActorSlot\\>}", fillcolor="#ffcdd2"];
-    }
-    subgraph cluster_channel {
-        label="channel";
-        style="rounded,filled"; fillcolor="#fff3e0"; color="#e65100";
-        HybridChannel [label="{HybridChannel|ring: ArrayQueue\\<T\\>\\noverflow: SegQueue\\<T\\>}", fillcolor="#ffe0b2"];
-        Receiver [label="{Receiver|queue: Arc\\<HybridChannel\\<T\\>\\>}", fillcolor="#ffe0b2"];
-        Sender [label="{Sender|queue: Arc\\<HybridChannel\\<T\\>\\>}", fillcolor="#ffe0b2"];
-    }
-    subgraph cluster_error {
-        label="error";
-        style="rounded,filled"; fillcolor="#f3e5f5"; color="#7b1fa2";
-        Error [label="{Error|0: Box\\<dyn std :: error :: Error + Send + Sync + 'static\\>}", fillcolor="#e1bee7"];
-    }
-    subgraph cluster_config {
-        label="config";
-        style="rounded,filled"; fillcolor="#e8f5e9"; color="#2e7d32";
-        BackoffPolicy [label="{BackoffPolicy|spin_threshold: u32\\nyield_threshold: u32\\nsleep_increment_us: u64\\nsleep_max_us: u64}", fillcolor="#c8e6c9"];
-        RuntimeConfig [label="{RuntimeConfig|max_actors: usize\\nactor_max_messages: usize\\nnum_threads: usize\\nbackoff_policy: BackoffPolicy}", fillcolor="#c8e6c9"];
-    }
-    subgraph cluster_delivery {
-        label="delivery";
-        style="rounded,filled"; fillcolor="#fff9c4"; color="#f9a825";
-        WorkerId [label="{WorkerId|0: usize}", fillcolor="#fff59d"];
-        AddressMap [label="{AddressMap|inner: RwLock\\<HashMap\\<ActorAddress, WorkerId\\>\\>}", fillcolor="#fff59d"];
-        Placement [label="{Placement|next: AtomicUsize\\nnum_workers: usize}", fillcolor="#fff59d"];
-        Envelope [label="{Envelope|dest: ActorAddress\\npayload: Box\\<dyn Any + Send\\>}", fillcolor="#fff59d"];
-        SenderT [label="{«trait» SenderT|try_send_any((&self, Box\\<dyn Any + Send\\>))}", fillcolor="#fff59d"];
-        InboxRegistry [label="{InboxRegistry|senders: RwLock\\<HashMap\\<ActorAddress, Arc\\<dyn SenderT\\>\\>\\>}", fillcolor="#fff59d"];
-        TickContext [label="{TickContext|address_map: &'a AddressMap\\ntransfer_txs: &'a [Sender\\<Envelope\\>]\\nspawn_txs: &'a [Sender\\<(ActorAddress, Box\\<dyn AnyActor\\>)\\>]\\nplacement: &'a Placement\\ninbox_registry: &'a InboxRegistry\\nconfig: &'a RuntimeConfig\\ncodec_registry: Option\\<&'a crate::transport::CodecRegistry\\>\\ntransport_router: Option\\<&'a crate::transport::TransportRouter\\>}", fillcolor="#fff59d"];
-    }
-    subgraph cluster_stats {
-        label="stats";
-        style="rounded,filled"; fillcolor="#e0f7fa"; color="#00838f";
-        TickTiming [label="{TickTiming|phase_us: [u64; ..]\\nmessages_processed: usize\\ndid_work: bool}", fillcolor="#b2ebf2"];
-        WorkerStats [label="{WorkerStats|num_actors: AtomicUsize\\ntotal_mailbox_depth: AtomicUsize\\nmessages_processed: AtomicU64\\nlocal_sends: AtomicU64\\ncross_sends: AtomicU64\\ninbox_sends: AtomicU64\\ntype_mismatches: AtomicU64\\npanics: AtomicU64\\ntick_timings: std::sync::Mutex\\<VecDeque\\<TickTiming\\>\\>}", fillcolor="#b2ebf2"];
-        WorkerInfo [label="{WorkerInfo|id: usize\\nnum_actors: usize\\nmailbox_depth: usize\\nmessages_processed: u64\\nlocal_sends: u64\\ncross_sends: u64\\ninbox_sends: u64\\ntype_mismatches: u64\\npanics: u64}", fillcolor="#b2ebf2"];
-        ActorInfo [label="{ActorInfo|address: ActorAddress\\nworker_id: usize\\nmailbox_depth: usize}", fillcolor="#b2ebf2"];
-        RuntimeStats [label="{RuntimeStats|num_workers: usize\\nactors: Vec\\<(ActorAddress, usize)\\>\\nworkers: Vec\\<WorkerInfo\\>\\nactor_details: Vec\\<ActorInfo\\>\\ntick_timings: Vec\\<Vec\\<TickTiming\\>\\>}", fillcolor="#b2ebf2"];
-    }
-    subgraph cluster_runtime {
-        label="runtime";
-        style="rounded,filled"; fillcolor="#fbe9e7"; color="#d84315";
-        Inbox [label="{Inbox|addr: ActorAddress\\ninner: Receiver\\<M\\>}", fillcolor="#ffccbc"];
-        RuntimeHandle [label="{RuntimeHandle|runtime: Arc\\<Runtime\\>\\nthreads: Vec\\<JoinHandle\\<()\\>\\>}", fillcolor="#ffccbc"];
-        Runtime [label="{Runtime|config: RuntimeConfig\\naddress_map: Arc\\<AddressMap\\>\\ninbox_registry: Arc\\<InboxRegistry\\>\\ntransfer_txs: Vec\\<Sender\\<Envelope\\>\\>\\nspawn_txs: Vec\\<Sender\\<(ActorAddress, Box\\<dyn AnyActor\\>)\\>\\>\\nplacement: Placement\\nis_running: AtomicBool\\nworker_stats: Vec\\<Arc\\<WorkerStats\\>\\>\\nmailbox_snapshots: Vec\\<Arc\\<std::sync::Mutex\\<Vec\\<(ActorAddress, usize)\\>\\>\\>\\>\\ntick_workers: RefCell\\<Vec\\<Worker\\>\\>\\ncodec_registry: Option\\<Arc\\<crate::transport::CodecRegistry\\>\\>\\ntransport_router: Option\\<Arc\\<crate::transport::TransportRouter\\>\\>}", fillcolor="#ffccbc"];
-    }
-    subgraph cluster_transport {
-        label="transport  (feature-gated)";
-        style="rounded,dashed,filled"; fillcolor="#e3f2fd"; color="#1565c0";
-        Codec [label="{«trait» Codec|encode((&self, &M) → Result\\<Vec\\<u8\\>, Error\\>)\\ndecode((&self, &[u8]) → Result\\<M, Error\\>)}", fillcolor="#bbdefb"];
-        NetworkMessage [label="{«trait» NetworkMessage|type_tag(() → &'static str)}", fillcolor="#bbdefb"];
-        WireEnvelope [label="{WireEnvelope|dest: ActorAddress\\ntype_tag: String\\npayload: Vec\\<u8\\>}", fillcolor="#bbdefb"];
-        Transport [label="{«trait» Transport|send((&self, WireEnvelope) → Result\\<(), Error\\>)}", fillcolor="#bbdefb"];
-        CodecRegistry [label="{CodecRegistry|encoders: HashMap\\<TypeId, EncodeFn\\>\\ndecoders: HashMap\\<String, DecodeFn\\>}", fillcolor="#bbdefb"];
-        TransportRouter [label="{TransportRouter|routes: RwLock\\<HashMap\\<ActorAddress, Arc\\<dyn Transport\\>\\>\\>}", fillcolor="#bbdefb"];
-        InMemoryTransport [label="{InMemoryTransport|tx: std::sync::Mutex\\<std::sync::mpsc::Sender\\<WireEnvelope\\>\\>}", fillcolor="#bbdefb"];
-    }
-
-    // ═══════════════════════════════════════════════════════════════════
-    //  INTRA-MODULE EDGES (within same cluster)
-    // ═══════════════════════════════════════════════════════════════════
-
-    ActorInterface -> Message [label="Incoming", style=dashed, color="#1565c0", penwidth=1];
-    ActorInterface -> Ctx [label="handle", style=dashed, color="#1565c0", penwidth=1];
-    AnyActor -> Ctx [label="handle_any", style=dashed, color="#1565c0", penwidth=1];
-    ContextInner -> ActorAddress [label="send_any", style=dashed, color="#1565c0", penwidth=1];
-    ContextInner -> AnyActor [label="spawn_any", style=dashed, color="#1565c0", penwidth=1];
-    Ctx -> ContextInner [label="inner", style=dashed, color="#1565c0", penwidth=1];
-    Ctx -> ActorAddress [label="self_addr", style=dashed, color="#1565c0", penwidth=1];
-    Actor -> AnyActor [label="impl", style=dotted, color="#1565c0", penwidth=1];
-    Actor -> Ctx [label="handle_any() param", style=dashed, color="#1565c0", penwidth=1];
-    Worker -> ActorPool [label="pool", style=dashed, color="#c62828", penwidth=1];
-    ActorPool -> ActorSlot [label="actors", style=dashed, color="#c62828", penwidth=1];
-    Receiver -> HybridChannel [label="queue", style=dashed, color="#e65100", penwidth=1];
-    Sender -> HybridChannel [label="queue", style=dashed, color="#e65100", penwidth=1];
-    Receiver -> Sender [label="new_sender() param", style=dashed, color="#e65100", penwidth=1];
-    RuntimeConfig -> BackoffPolicy [label="backoff_policy", style=dashed, color="#2e7d32", penwidth=1];
-    AddressMap -> WorkerId [label="inner", style=dashed, color="#f9a825", penwidth=1];
-    InboxRegistry -> SenderT [label="senders", style=dashed, color="#f9a825", penwidth=1];
-    TickContext -> AddressMap [label="address_map", style=dashed, color="#f9a825", penwidth=1];
-    TickContext -> Envelope [label="transfer_txs", style=dashed, color="#f9a825", penwidth=1];
-    TickContext -> Placement [label="placement", style=dashed, color="#f9a825", penwidth=1];
-    TickContext -> InboxRegistry [label="inbox_registry", style=dashed, color="#f9a825", penwidth=1];
-    Placement -> WorkerId [label="next_worker() param", style=dashed, color="#f9a825", penwidth=1];
-    WorkerStats -> TickTiming [label="tick_timings", style=dashed, color="#00838f", penwidth=1];
-    RuntimeStats -> WorkerInfo [label="workers", style=dashed, color="#00838f", penwidth=1];
-    RuntimeStats -> ActorInfo [label="actor_details", style=dashed, color="#00838f", penwidth=1];
-    RuntimeStats -> TickTiming [label="tick_timings", style=dashed, color="#00838f", penwidth=1];
-    WorkerStats -> WorkerInfo [label="snapshot() param", style=dashed, color="#00838f", penwidth=1];
-    RuntimeHandle -> Runtime [label="runtime", style=dashed, color="#d84315", penwidth=1];
-    Runtime -> Inbox [label="new_inbox() param", style=dashed, color="#d84315", penwidth=1];
-    Runtime -> RuntimeHandle [label="run() param", style=dashed, color="#d84315", penwidth=1];
-    Transport -> WireEnvelope [label="send", style=dashed, color="#1565c0", penwidth=1];
-    TransportRouter -> Transport [label="routes", style=dashed, color="#1565c0", penwidth=1];
-    InMemoryTransport -> WireEnvelope [label="tx", style=dashed, color="#1565c0", penwidth=1];
-    CodecRegistry -> WireEnvelope [label="receive() param", style=dashed, color="#1565c0", penwidth=1];
-    InMemoryTransport -> Transport [label="impl", style=dotted, color="#1565c0", penwidth=1];
-
-    // ═══════════════════════════════════════════════════════════════════
-    //  CROSS-MODULE EDGES  (the real dependency DAG)
-    // ═══════════════════════════════════════════════════════════════════
-
-    // --- actor depends on error ---
-    ContextInner -> Error [label="send_any", style=solid, color="#1565c0", penwidth=1.5];
-    Ctx -> Error [label="send() param", style=solid, color="#1565c0", penwidth=1.5];
-
-    // --- worker depends on actor ---
-    Worker -> ActorAddress [label="spawn_rx", style=solid, color="#c62828", penwidth=1.5];
-    Worker -> AnyActor [label="spawn_rx", style=solid, color="#c62828", penwidth=1.5];
-    WorkerContext -> ActorAddress [label="pending_local", style=solid, color="#c62828", penwidth=1.5];
-    ActorSlot -> AnyActor [label="actor", style=solid, color="#c62828", penwidth=1.5];
-    ActorPool -> ActorAddress [label="actors", style=solid, color="#c62828", penwidth=1.5];
-    WorkerContext -> ContextInner [label="impl", style=dotted, color="#c62828", penwidth=1.5];
-    WorkerContext -> AnyActor [label="spawn_any() param", style=solid, color="#c62828", penwidth=1.5];
-    ActorPool -> AnyActor [label="insert() param", style=solid, color="#c62828", penwidth=1.5];
-    ActorPool -> ContextInner [label="tick_all() param", style=solid, color="#c62828", penwidth=1.5];
-
-    // --- worker depends on channel ---
-    Worker -> Receiver [label="transfer_rx", style=solid, color="#c62828", penwidth=1.5];
-
-    // --- worker depends on error ---
-    WorkerContext -> Error [label="send_any() param", style=solid, color="#c62828", penwidth=1.5];
-
-    // --- worker depends on delivery ---
-    Worker -> WorkerId [label="id", style=solid, color="#c62828", penwidth=1.5];
-    Worker -> Envelope [label="transfer_rx", style=solid, color="#c62828", penwidth=1.5];
-    WorkerContext -> WorkerId [label="worker_id", style=solid, color="#c62828", penwidth=1.5];
-    WorkerContext -> TickContext [label="tc", style=solid, color="#c62828", penwidth=1.5];
-    Worker -> TickContext [label="tick_once() param", style=solid, color="#c62828", penwidth=1.5];
-
-    // --- worker depends on stats ---
-    Worker -> WorkerStats [label="stats", style=solid, color="#c62828", penwidth=1.5];
-    WorkerContext -> WorkerStats [label="stats", style=solid, color="#c62828", penwidth=1.5];
-    ActorPool -> WorkerStats [label="tick_all() param", style=solid, color="#c62828", penwidth=1.5];
-
-    // --- channel depends on delivery ---
-    Sender -> SenderT [label="impl", style=dotted, color="#e65100", penwidth=1.5];
-
-    // --- delivery depends on actor ---
-    AddressMap -> ActorAddress [label="inner", style=solid, color="#f9a825", penwidth=1.5];
-    Envelope -> ActorAddress [label="dest", style=solid, color="#f9a825", penwidth=1.5];
-    InboxRegistry -> ActorAddress [label="senders", style=solid, color="#f9a825", penwidth=1.5];
-    TickContext -> ActorAddress [label="spawn_txs", style=solid, color="#f9a825", penwidth=1.5];
-    TickContext -> AnyActor [label="spawn_txs", style=solid, color="#f9a825", penwidth=1.5];
-
-    // --- delivery depends on channel ---
-    TickContext -> Sender [label="transfer_txs", style=solid, color="#f9a825", penwidth=1.5];
-
-    // --- delivery depends on error ---
-    InboxRegistry -> Error [label="try_deliver() param", style=solid, color="#f9a825", penwidth=1.5];
-    TickContext -> Error [label="route_nonlocal() param", style=solid, color="#f9a825", penwidth=1.5];
-
-    // --- delivery depends on config ---
-    TickContext -> RuntimeConfig [label="config", style=solid, color="#f9a825", penwidth=1.5];
-
-    // --- delivery depends on transport ---
-    TickContext -> CodecRegistry [label="codec_registry", style=solid, color="#f9a825", penwidth=1.5];
-    TickContext -> TransportRouter [label="transport_router", style=solid, color="#f9a825", penwidth=1.5];
-
-    // --- stats depends on actor ---
-    ActorInfo -> ActorAddress [label="address", style=solid, color="#00838f", penwidth=1.5];
-    RuntimeStats -> ActorAddress [label="actors", style=solid, color="#00838f", penwidth=1.5];
-
-    // --- runtime depends on actor ---
-    Inbox -> ActorAddress [label="addr", style=solid, color="#d84315", penwidth=1.5];
-    Runtime -> ActorAddress [label="spawn_txs", style=solid, color="#d84315", penwidth=1.5];
-    Runtime -> AnyActor [label="spawn_txs", style=solid, color="#d84315", penwidth=1.5];
-    Runtime -> ContextInner [label="impl", style=dotted, color="#d84315", penwidth=1.5];
-
-    // --- runtime depends on worker ---
-    Runtime -> Worker [label="tick_workers", style=solid, color="#d84315", penwidth=1.5];
-
-    // --- runtime depends on channel ---
-    Inbox -> Receiver [label="inner", style=solid, color="#d84315", penwidth=1.5];
-    Runtime -> Sender [label="transfer_txs", style=solid, color="#d84315", penwidth=1.5];
-
-    // --- runtime depends on error ---
-    Runtime -> Error [label="spawn() param", style=solid, color="#d84315", penwidth=1.5];
-
-    // --- runtime depends on config ---
-    Runtime -> RuntimeConfig [label="config", style=solid, color="#d84315", penwidth=1.5];
-
-    // --- runtime depends on delivery ---
-    Runtime -> AddressMap [label="address_map", style=solid, color="#d84315", penwidth=1.5];
-    Runtime -> InboxRegistry [label="inbox_registry", style=solid, color="#d84315", penwidth=1.5];
-    Runtime -> Envelope [label="transfer_txs", style=solid, color="#d84315", penwidth=1.5];
-    Runtime -> Placement [label="placement", style=solid, color="#d84315", penwidth=1.5];
-    Runtime -> TickContext [label="make_tick_context() param", style=solid, color="#d84315", penwidth=1.5];
-
-    // --- runtime depends on stats ---
-    Runtime -> WorkerStats [label="worker_stats", style=solid, color="#d84315", penwidth=1.5];
-    Runtime -> RuntimeStats [label="stats() param", style=solid, color="#d84315", penwidth=1.5];
-
-    // --- runtime depends on transport ---
-    Runtime -> CodecRegistry [label="codec_registry", style=solid, color="#d84315", penwidth=1.5];
-    Runtime -> TransportRouter [label="transport_router", style=solid, color="#d84315", penwidth=1.5];
-
-    // --- transport depends on actor ---
-    WireEnvelope -> ActorAddress [label="dest", style=solid, color="#1565c0", penwidth=1.5];
-    TransportRouter -> ActorAddress [label="routes", style=solid, color="#1565c0", penwidth=1.5];
-    CodecRegistry -> ActorAddress [label="receive() param", style=solid, color="#1565c0", penwidth=1.5];
-
-    // --- transport depends on channel ---
-    InMemoryTransport -> Sender [label="tx", style=solid, color="#1565c0", penwidth=1.5];
-    InMemoryTransport -> Receiver [label="pair() param", style=solid, color="#1565c0", penwidth=1.5];
-
-    // --- transport depends on error ---
-    Codec -> Error [label="encode", style=solid, color="#1565c0", penwidth=1.5];
-    Transport -> Error [label="send", style=solid, color="#1565c0", penwidth=1.5];
-    CodecRegistry -> Error [label="encode() param", style=solid, color="#1565c0", penwidth=1.5];
-    InMemoryTransport -> Error [label="send() param", style=solid, color="#1565c0", penwidth=1.5];
-}
-`;
-
-const viz = await instance();
-const svg = viz.renderSVGElement(DOT_SOURCE);
-document.getElementById('dag-loading').remove();
-
-const vp = document.getElementById('dag-viewport');
-vp.appendChild(svg);
-
-// ─── Dark-mode SVG recoloring ──────────────────────────────────────────────
-svg.querySelectorAll('polygon[fill="white"]').forEach(el => el.setAttribute('fill','#1a1a2e'));
-svg.querySelectorAll('.graph > text').forEach(el => el.setAttribute('fill','#e0e0e0'));
-svg.querySelectorAll('.cluster > text').forEach(el => el.setAttribute('fill','#1a1a1a'));
-svg.querySelectorAll('.edge text').forEach(el => el.setAttribute('fill','#ffb74d'));
-svg.querySelectorAll('.node text').forEach(el => el.setAttribute('fill','#1a1a1a'));
-
-// ─── Click-to-focus ────────────────────────────────────────────────────────
-const edges = svg.querySelectorAll('.edge');
-const nodes = svg.querySelectorAll('.node');
-const clusterChrome = [];
-svg.querySelectorAll('.cluster').forEach(c => {
-  c.querySelectorAll(':scope > path, :scope > polygon, :scope > text').forEach(el => clusterChrome.push(el));
-});
-
-const nodeByTitle = new Map();
-nodes.forEach(n => {
-  const t = n.querySelector('title');
-  if (t) nodeByTitle.set(t.textContent.trim(), n);
-});
-
-const nodeToClusterEls = new Map();
-svg.querySelectorAll('.cluster').forEach(cluster => {
-  const chrome = [...cluster.querySelectorAll(':scope > path, :scope > polygon, :scope > text')];
-  cluster.querySelectorAll('.node title').forEach(t => {
-    nodeToClusterEls.set(t.textContent.trim(), chrome);
-  });
-});
-
-const adj = new Map();
-edges.forEach(edge => {
-  const t = edge.querySelector('title');
-  if (!t) return;
-  const parts = t.textContent.trim().split('->').map(s => s.trim());
-  if (parts.length !== 2) return;
-  const [src, dst] = parts;
-  if (!adj.has(src)) adj.set(src, { edges: [], neighbors: new Set() });
-  if (!adj.has(dst)) adj.set(dst, { edges: [], neighbors: new Set() });
-  adj.get(src).edges.push(edge);
-  adj.get(src).neighbors.add(dst);
-  adj.get(dst).edges.push(edge);
-  adj.get(dst).neighbors.add(src);
-});
-
-const DIM = 0.08;
-let focused = null;
-
-function clearFocus() {
-  focused = null;
-  nodes.forEach(n => n.style.opacity = '');
-  edges.forEach(e => e.style.opacity = '');
-  clusterChrome.forEach(el => el.style.opacity = '');
-}
-
-function focusNode(title) {
-  if (focused === title) { clearFocus(); return; }
-  focused = title;
-  const info = adj.get(title) || { edges: [], neighbors: new Set() };
-  const connected = new Set([title, ...info.neighbors]);
-
-  nodes.forEach(n => n.style.opacity = DIM);
-  edges.forEach(e => e.style.opacity = DIM);
-  clusterChrome.forEach(el => el.style.opacity = DIM);
-
-  connected.forEach(name => {
-    const el = nodeByTitle.get(name);
-    if (el) el.style.opacity = 1;
-  });
-
-  info.edges.forEach(e => e.style.opacity = 1);
-
-  const seen = new Set();
-  connected.forEach(name => {
-    const chrome = nodeToClusterEls.get(name);
-    if (chrome) chrome.forEach(el => {
-      if (!seen.has(el)) { seen.add(el); el.style.opacity = 1; }
-    });
-  });
-}
-
-nodes.forEach(node => {
-  node.style.cursor = 'pointer';
-  node.addEventListener('click', e => {
-    e.stopPropagation();
-    const t = node.querySelector('title');
-    if (t) focusNode(t.textContent.trim());
-  });
-});
-
-// ─── Pan & zoom ────────────────────────────────────────────────────────────
-let scale = 1, tx = 0, ty = 0, dragging = false, didDrag = false, sx = 0, sy = 0;
-function applyTransform() { svg.style.transform = `translate(${tx}px,${ty}px) scale(${scale})`; svg.style.transformOrigin = '0 0'; }
-
-window.resetView = function() {
-  const vw = vp.clientWidth, vh = vp.clientHeight;
-  const bb = svg.getBBox();
-  scale = Math.min(vw / bb.width, vh / bb.height) * 0.92;
-  tx = (vw - bb.width * scale) / 2;
-  ty = (vh - bb.height * scale) / 2;
-  applyTransform();
-};
-let dagFitted = false;
-window.addEventListener('dag-visible', () => {
-  if (!dagFitted) { dagFitted = true; requestAnimationFrame(resetView); }
-});
-
-window.zoomIn = function() { scale *= 1.3; applyTransform(); };
-window.zoomOut = function() { scale *= 0.7; applyTransform(); };
-
-vp.addEventListener('wheel', e => { e.preventDefault(); const f = e.deltaY < 0 ? 1.12 : 0.89; const rect = vp.getBoundingClientRect(); const mx = e.clientX - rect.left; const my = e.clientY - rect.top; tx = mx - f * (mx - tx); ty = my - f * (my - ty); scale *= f; applyTransform(); }, { passive:false });
-vp.addEventListener('pointerdown', e => { dragging=true; didDrag=false; sx=e.clientX-tx; sy=e.clientY-ty; vp.setPointerCapture(e.pointerId); });
-vp.addEventListener('pointermove', e => { if(!dragging) return; didDrag=true; tx=e.clientX-sx; ty=e.clientY-sy; applyTransform(); });
-vp.addEventListener('pointerup', () => dragging=false);
-vp.addEventListener('click', e => { if (!didDrag && !e.target.closest('.node')) clearFocus(); });
-</script>
-</body></html>
diff --git a/docs/connectome/connectome_metrics.json b/docs/connectome/connectome_metrics.json
deleted file mode 100644
index f72835e..0000000
--- a/docs/connectome/connectome_metrics.json
+++ /dev/null
@@ -1,169 +0,0 @@
-{
-  "graph": {
-    "n_nodes": 39,
-    "n_edges": 97,
-    "n_modules": 9,
-    "connected_components": 2,
-    "modules": [
-      "actor",
-      "worker",
-      "channel",
-      "error",
-      "config",
-      "delivery",
-      "stats",
-      "runtime",
-      "transport"
-    ]
-  },
-  "structural": {
-    "avg_degree": 2.4871794871794872,
-    "max_fan_in": {
-      "count": 16,
-      "node": "ActorAddress"
-    },
-    "max_fan_out": {
-      "count": 18,
-      "node": "Runtime"
-    },
-    "dag_depth": 7,
-    "clustering_coefficient": 0.26676384839650147,
-    "avg_module_size": 4.333333333333333
-  },
-  "module_coupling": {
-    "module_names": [
-      "actor",
-      "worker",
-      "channel",
-      "error",
-      "config",
-      "delivery",
-      "stats",
-      "runtime",
-      "transport"
-    ],
-    "coupling_matrix": [
-      [
-        9.0,
-        0.0,
-        0.0,
-        2.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0
-      ],
-      [
-        9.0,
-        2.0,
-        1.0,
-        1.0,
-        0.0,
-        5.0,
-        3.0,
-        0.0,
-        0.0
-      ],
-      [
-        0.0,
-        0.0,
-        3.0,
-        0.0,
-        0.0,
-        1.0,
-        0.0,
-        0.0,
-        0.0
-      ],
-      [
-        0.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0
-      ],
-      [
-        0.0,
-        0.0,
-        0.0,
-        0.0,
-        1.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0
-      ],
-      [
-        5.0,
-        0.0,
-        1.0,
-        2.0,
-        1.0,
-        7.0,
-        0.0,
-        0.0,
-        2.0
-      ],
-      [
-        2.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0,
-        5.0,
-        0.0,
-        0.0
-      ],
-      [
-        4.0,
-        1.0,
-        2.0,
-        1.0,
-        1.0,
-        5.0,
-        2.0,
-        3.0,
-        2.0
-      ],
-      [
-        3.0,
-        0.0,
-        2.0,
-        4.0,
-        0.0,
-        0.0,
-        0.0,
-        0.0,
-        5.0
-      ]
-    ],
-    "cross_module_edges": 62,
-    "total_edges": 97
-  },
-  "module_cohesion": {
-    "actor": 0.21428571428571427,
-    "worker": 0.16666666666666666,
-    "channel": 0.5,
-    "error": null,
-    "config": 0.5,
-    "delivery": 0.16666666666666666,
-    "stats": 0.25,
-    "runtime": 0.5,
-    "transport": 0.11904761904761904
-  },
-  "metrics": {
-    "algebraic_connectivity": 0.0,
-    "spectral_entropy": 4.728701071955628,
-    "edge_density": 0.06545209176788123,
-    "cross_module_ratio": 0.6391752577319587,
-    "spectral_radius": 7.96362061601628,
-    "avg_module_cohesion": 0.3020833333333333,
-    "cci": 0.39601706111504315
-  }
-}
\ No newline at end of file
diff --git a/docs/connectome/connectome_report.txt b/docs/connectome/connectome_report.txt
deleted file mode 100644
index a685bd1..0000000
--- a/docs/connectome/connectome_report.txt
+++ /dev/null
@@ -1,66 +0,0 @@
-========================================================================
-  SPECTRAL ANALYSIS REPORT — Dependency DAG
-========================================================================
-
-GRAPH SUMMARY
-----------------------------------------
-  Nodes:                39
-  Directed edges:       97
-  Modules:              9
-  Connected components: 2
-  Modules:              actor, worker, channel, error, config, delivery, stats, runtime, transport
-
-STRUCTURAL PROPERTIES
-----------------------------------------
-  Edges/node (avg degree):   2.49
-  Max fan-in:                16   (ActorAddress)
-  Max fan-out:               18   (Runtime)
-  DAG depth:                 7
-  Clustering coefficient:    0.2668
-
-MODULE COHESION
-----------------------------------------
-  Module            Size  Cohesion
-  actor                7     0.214
-  worker               4     0.167
-  channel              3     0.500
-  error                1         —
-  config               2     0.500
-  delivery             7     0.167
-  stats                5     0.250
-  runtime              3     0.500
-  transport            7     0.119
-  ────────────────────────────────
-  Average cohesion:          0.302
-  Avg module size:             4.3
-
-MODULE COUPLING MATRIX (directed edge counts)
-----------------------------------------
-                     actor    worker   channel     error    config  delivery     stats   runtime transport
-  actor                  9         0         0         2         0         0         0         0         0
-  worker                 9         2         1         1         0         5         3         0         0
-  channel                0         0         3         0         0         1         0         0         0
-  error                  0         0         0         0         0         0         0         0         0
-  config                 0         0         0         0         1         0         0         0         0
-  delivery               5         0         1         2         1         7         0         0         2
-  stats                  2         0         0         0         0         0         5         0         0
-  runtime                4         1         2         1         1         5         2         3         2
-  transport              3         0         2         4         0         0         0         0         5
-
-  Cross-module edges: 62 / 97 (63.9%)
-
-CONNECTOME COMPLEXITY INDEX (CCI)
-----------------------------------------
-  Sub-metric                                      Raw Normalized   Weight  Contrib
-  ──────────────────────────────────────── ────────── ────────── ──────── ────────
-  Algebraic connectivity (lambda_2/n)          0.0000     0.0000     0.25   0.0000
-  Spectral entropy (H/log2(k))                 4.7287     0.9077     0.25   0.2269
-  Edge density (|E|/n(n-1))                    0.0655     0.0655     0.15   0.0098
-  Cross-module coupling ratio                  0.6392     0.6392     0.20   0.1278
-  Spectral radius (rho/(n-1))                  7.9636     0.2096     0.15   0.0314
-  ──────────────────────────────────────── ────────── ────────── ──────── ────────
-  CCI (weighted sum)                                                 1.00   0.3960
-
-  Interpretation: MODERATE complexity — typical well-structured codebase
-
-========================================================================
\ No newline at end of file
diff --git a/docs/datastore/DATASTORE_AUTH.md b/docs/datastore/DATASTORE_AUTH.md
deleted file mode 100644
index e6647d5..0000000
--- a/docs/datastore/DATASTORE_AUTH.md
+++ /dev/null
@@ -1,503 +0,0 @@
-# Swactor Datastore Auth Specification
-
-**Version:** 0.2.0
-**Status:** Implemented (MVP)
-
-## 1. Overview
-
-This document specifies the authorization layer for the Swactor Datastore as implemented. It defines how access is controlled for external clients connecting to a datastore node.
-
-### Principles
-
-- **Cryptographic identity** — keys, not passwords. Every participant is identified by an ed25519 public key (`NodeId`).
-- **Binary access** — a client is either authorized or not. No permission tiers for MVP.
-- **Owner-only administration** — only the datastore owner can grant or revoke access.
-- **Two auth paths** — direct iroh connections (connection-level) and signed HTTP requests (browser/CLI). This spec covers the signed request path (Auth Path 2), which is fully implemented.
-
-### Non-Goals (MVP)
-
-- Per-path permission scoping.
-- Permission tiers (read-only, read-write, admin).
-- Capability tokens or time-limited delegated access.
-- Multi-level delegation chains.
-
-## 2. Trust Boundaries
-
-```
-┌─────────────────────────────────────────────┐
-│             Cluster (SWIM mesh)              │
-│                                              │
-│  Node A ◄──────────────► Node B             │
-│           implicitly trusted                 │
-│           (no auth checks)                   │
-└──────────────────┬──────────────────────────┘
-                   │
-                   │  auth boundary
-                   │
-        ┌──────────▼──────────┐
-        │   External Clients  │
-        │                     │
-        │  CLI tool           │
-        │  Browser user       │
-        └─────────────────────┘
-```
-
-- **Cluster-internal** (node-to-node via SWIM): implicitly trusted. Nodes that are members of the SWIM cluster communicate freely — no per-request auth checks.
-- **External clients** (CLI, browser): must be authorized. Every external request is checked against the Access Control List before being dispatched to the actor system.
-
-## 3. Identity Model
-
-The auth layer reuses the existing ed25519 identity model from the distribution layer:
-
-- Every client (CLI tool, browser user, node) has an ed25519 keypair.
-- Identity is the 32-byte public key, represented as `NodeId`.
-- The same `NodeId` type from `distribution::types` is used throughout.
-
-There is no separate "user" concept — a keypair *is* an identity.
-
-## 4. Access Control List
-
-### 4.1 Structure
-
-```rust
-AccessControlList {
-    owner:           NodeId,                      // The datastore owner's public key
-    authorized_keys: HashSet<NodeId>,             // Explicitly authorized client keys
-    key_labels:      HashMap<String, String>,     // hex(public_key) → human-readable name
-}
-```
-
-- The **owner** always has full access (implicit; never needs to be in `authorized_keys`).
-- An empty `authorized_keys` set means only the owner can access the datastore.
-- `key_labels` maps the hex-encoded public key to a human-readable name. Labels are set on grant (from the access request's `name` field or an explicit `--name`/`?name=` parameter) and removed on revoke. The `#[serde(default)]` annotation ensures backward compatibility with ACL files written before labels existed.
-
-### 4.2 Persistence
-
-The ACL is persisted as JSON in the **auth directory**, separate from the storage path:
-
-```
-<auth-dir>/
-├── owner.key.json    # Owner keypair
-└── acl.json          # AccessControlList
-```
-
-Default `auth-dir` is `./auth` (configurable via `--auth-dir`).
-
-### 4.3 Mutations
-
-| Operation | Signature | Who |
-|-----------|-----------|-----|
-| Grant access | `grant(requester, key, label)` | Owner only |
-| Revoke access | `revoke(requester, key)` | Owner only |
-
-- `grant` adds a `NodeId` to `authorized_keys` and optionally sets a label in `key_labels`. If the key has a pending access request, the request's `name` is used as the label (unless an explicit label is provided). Idempotent.
-- `revoke` removes a `NodeId` from `authorized_keys` and removes its label from `key_labels`. Idempotent.
-- Revoking the owner is a no-op (the owner's implicit access cannot be removed).
-- Both operations persist the updated ACL to disk immediately via `persist_acl()`.
-
-## 5. Auth Path 1 — Direct iroh Connection
-
-For clients that connect directly to the datastore node over iroh (QUIC):
-
-```
-Client (ed25519 keypair)              Datastore Node
-        │                                    │
-        │──── iroh QUIC handshake ──────────>│
-        │     (proves client's NodeId)       │
-        │                                    │
-        │                              check NodeId
-        │                              against ACL
-        │                                    │
-        │<─── accept / reject ──────────────│
-        │                                    │
-        │     (if accepted, all ops on       │
-        │      this connection are allowed)  │
-```
-
-1. The iroh QUIC handshake cryptographically proves the peer's `NodeId` (ed25519 public key).
-2. On connection establishment, the node checks the peer's `NodeId` against the ACL via `check_node()`.
-3. If authorized, connection accepted. All operations on that connection are allowed with no per-message overhead.
-4. If not authorized, connection rejected immediately.
-
-## 6. Auth Path 2 — Signed Requests (HTTP API)
-
-For browser users and CLI clients communicating over HTTP.
-
-### 6.1 Threat Model
-
-The HTTP transport is treated as an **untrusted relay**. Each request is self-authenticating via a signed envelope. The relay cannot forge, modify, or replay requests.
-
-### 6.2 Signed Envelope
-
-Each request carries a signed envelope in the `X-Signed-Request` HTTP header:
-
-```rust
-SignedRequest {
-    payload:    SignedRequestPayload,    // The request details
-    public_key: NodeId,                 // Client's public key (as [u8; 32])
-    signature:  Signature,              // ed25519 signature over serialized payload
-}
-
-SignedRequestPayload {
-    action:    DatastoreAction,         // What the client wants to do
-    timestamp: u64,                     // Unix timestamp (seconds)
-    nonce:     [u8; 16],                // 16 random bytes
-}
-
-DatastoreAction = enum {
-    Put { name, content_hash, size_bytes, tags },
-    Get { content_hash },
-    Delete { content_hash },
-    List { name_filter },
-    Access,                             // Identity proof (no content binding)
-}
-```
-
-The header value is the JSON serialization of `SignedRequest`. The `public_key` and `signature` fields are serialized as arrays of integers (e.g., `[163, 45, ...]`), matching serde's default serialization for `[u8; 32]` and `[u8; 64]`.
-
-### 6.3 DatastoreAction::Access
-
-The `Access` variant is a lightweight identity proof that does not bind to a specific content operation. It is used by:
-
-- **Browser** — all API calls use `Access` (the browser proves identity, and the HTTP layer gates the actual operation).
-- **CLI auth management** — `grant`, `revoke`, `requests`, `keys`, `deny` subcommands use `Access` since these admin operations don't correspond to content actions.
-
-The CLI's data operations (`put`, `get`, `delete`, `list`) sign the corresponding specific action variants.
-
-### 6.4 Verification Steps
-
-The `AuthzEngine` verifies a signed request in strict order:
-
-1. **Signature validity** — verify the ed25519 signature over the canonical JSON serialization of `SignedRequestPayload` using the provided `public_key`.
-2. **Timestamp freshness** — reject if `|now - payload.timestamp| > 300` seconds.
-3. **Nonce uniqueness** — reject if `payload.nonce` has been seen before within the time window.
-4. **ACL check** — reject if `public_key` is not in the ACL (not owner and not in `authorized_keys`).
-
-If any step fails, the request is denied with the corresponding `DeniedReason`:
-- `InvalidSignature`
-- `RequestExpired`
-- `ReplayDetected`
-- `NotAuthorized`
-
-### 6.5 Signature-Only Verification
-
-A separate `check_signature_only()` path performs steps 1-3 (signature, timestamp, nonce) but **skips** step 4 (ACL check). This is used for the access request endpoint (`POST /api/auth/request`), where an unauthorized user needs to prove they own the key they're requesting access for.
-
-### 6.6 Put Payload Note
-
-`DatastoreAction::Put` references a `content_hash` rather than embedding raw file data. The bulk data is uploaded separately, and its integrity is guaranteed by blake3 content addressing. The signed envelope authorizes the *operation*, not the data transfer.
-
-## 7. Replay Protection
-
-### 7.1 Timestamp Window
-
-- Requests must have a `timestamp` within ±300 seconds of the node's wall clock.
-- Requests outside this window are rejected with `DeniedReason::RequestExpired`.
-
-### 7.2 Nonce
-
-- Each request includes a 16-byte random nonce.
-- The node maintains a set of recently seen nonces in `seen_nonces: HashMap<[u8; 16], u64>`.
-- Duplicate nonces within the time window are rejected with `DeniedReason::ReplayDetected`.
-
-### 7.3 Nonce Garbage Collection
-
-- Nonces are stored alongside their timestamps.
-- When a nonce's timestamp falls outside the ±300 second window, it is eligible for GC.
-- `gc_nonces(now)` is called periodically via `GatewayMsg::NonceGcTick`, which piggybacks on the main loop's GC tick cadence.
-
-## 8. Enforcement Point
-
-Auth is enforced at the **edge** of the actor system via the `GatewayActor`:
-
-```
-External Client
-      │
-      ▼
-┌─────────────┐
-│ GatewayActor│◄── ACL check happens here
-└──────┬──────┘
-       │
-       ▼
-┌──────────────┐    ┌─────────────────┐    ┌────────────────┐
-│ MetadataActor│◄──►│ BlobStoreActor  │    │ TransferActor  │
-│              │    │                 │    │                │
-│  (auth-      │    │  (auth-         │    │  (auth-        │
-│   unaware)   │    │   unaware)      │    │   unaware)     │
-└──────────────┘    └─────────────────┘    └────────────────┘
-```
-
-### 8.1 HTTP API Route Table
-
-| Method | Path | Auth Level | Description |
-|--------|------|------------|-------------|
-| `GET` | `/` | None | Browser UI page |
-| `GET` | `/admin` | None | Admin page |
-| `GET` | `/crypto.wasm` | None | WASM Ed25519 module |
-| `GET` | `/api/status` | None | Node identity |
-| `POST` | `/api/put` | Full (`check_auth`) | Store an object |
-| `GET` | `/api/get` | Full (`check_auth`) | Get object metadata |
-| `GET` | `/api/data` | Full (`check_auth`) | Download object data |
-| `POST` | `/api/delete` | Full (`check_auth`) | Delete an object |
-| `GET` | `/api/list` | Full (`check_auth`) | List objects |
-| `POST` | `/api/auth/grant` | Full (`check_auth_identity`) | Grant access to a key (owner-only) |
-| `POST` | `/api/auth/revoke` | Full (`check_auth_identity`) | Revoke access from a key (owner-only) |
-| `GET` | `/api/auth/requests` | Full (`check_auth_identity`) | List pending access requests (owner-only) |
-| `GET` | `/api/auth/keys` | Full (`check_auth_identity`) | List authorized keys (owner-only) |
-| `POST` | `/api/auth/deny` | Full (`check_auth_identity`) | Deny a pending request (owner-only) |
-| `POST` | `/api/auth/request` | Signature-only (`check_auth_signature_only`) | Submit an access request |
-
-**Auth levels:**
-- **None** — no `X-Signed-Request` header required.
-- **Full** — `X-Signed-Request` header required; full 4-step verification (signature + timestamp + nonce + ACL).
-- **Signature-only** — `X-Signed-Request` header required; 3-step verification (signature + timestamp + nonce, no ACL check).
-
-`check_auth_identity` is like `check_auth` but also returns the caller's `NodeId`, needed for grant/revoke/deny operations to identify the requester.
-
-### 8.2 Internal Actors
-
-`MetadataActor`, `BlobStoreActor`, and `TransferActor` remain **auth-unaware**. They process messages from any source within the actor system. The auth boundary is strictly external.
-
-## 9. Browser Auth Flow
-
-### 9.1 WASM Ed25519 Crypto
-
-Browser clients use a WASM module (`/crypto.wasm`) compiled from `crates/crypto-wasm/` — a `no_std` Rust crate using `ed25519-dalek`. This replaces the earlier Web Crypto API approach, which has inconsistent Ed25519 support across browsers.
-
-The WASM module exports three functions through a shared 8192-byte buffer:
-
-| Function | Input | Output |
-|----------|-------|--------|
-| `buffer_ptr()` | — | Pointer to shared buffer |
-| `get_public_key()` | `BUF[0..32]` = seed | `BUF[32..64]` = public key |
-| `ed25519_sign(msg_len)` | `BUF[0..32]` = seed, `BUF[128..128+msg_len]` = message | `BUF[64..128]` = signature |
-
-JavaScript wrapper functions:
-
-```javascript
-async function initCrypto() {
-    const { instance } = await WebAssembly.instantiate(
-        await (await fetch('/crypto.wasm')).arrayBuffer()
-    );
-    wasmExports = instance.exports;
-    bufPtr = wasmExports.buffer_ptr();
-}
-
-function derivePublicKey(seed) { /* write seed → read pubkey */ }
-function signBytes(message, seed) { /* write seed+message → read signature */ }
-```
-
-### 9.2 Device Key Management
-
-On first visit (when auth is detected), the browser:
-
-1. Generates a 32-byte random seed: `crypto.getRandomValues(new Uint8Array(32))`
-2. Stores it as hex in `localStorage.deviceKeySeed`
-3. Derives the public key via `derivePublicKey(seed)`
-
-On subsequent visits, the seed is loaded from localStorage. A migration path handles legacy JWK keys (from an earlier Web Crypto implementation) by extracting the `d` parameter as the seed.
-
-### 9.3 Auth Detection
-
-On page load, the browser fetches `GET /api/list` without auth:
-- If the response is 401, auth is enabled → initialize WASM crypto, generate/load keys, show device key in header
-- If the response is 200, auth is disabled → proceed normally
-
-### 9.4 Request Signing
-
-All authenticated browser requests go through `authFetch()`:
-
-```javascript
-async function authFetch(url, opts) {
-    const nonce = Array.from(crypto.getRandomValues(new Uint8Array(16)));
-    const payload = {
-        action: "Access",
-        timestamp: Math.floor(Date.now() / 1000),
-        nonce: nonce
-    };
-    const payloadBytes = new TextEncoder().encode(JSON.stringify(payload));
-    const sigBytes = signBytes(payloadBytes, deviceSeed);
-    const header = JSON.stringify({
-        payload: payload,
-        public_key: Array.from(pubKeyBytes),
-        signature: Array.from(sigBytes)
-    });
-    opts.headers['X-Signed-Request'] = header;
-    return fetch(url, opts);
-}
-```
-
-The browser always uses `DatastoreAction::Access` — it proves identity without binding to a specific content operation. The HTTP API layer handles the actual data operation gating.
-
-### 9.5 Access Request Flow
-
-When a browser user is not yet authorized:
-
-1. **Auth banner appears** — shows a form with name (required, max 64 chars) and message (optional, max 256 chars) fields.
-2. **User submits** — `POST /api/auth/request` with JSON body `{ name, message }` and `X-Signed-Request` header (signature-only check).
-3. **Pending state** — banner switches to "waiting for operator approval" with localStorage persistence (`accessRequestPending`, `accessRequestName`).
-4. **Polling** — every 5 seconds, `authFetch('/api/list')` checks if the user has been granted access.
-5. **Granted** — when `/api/list` returns 200, polling stops, banner disappears, object list loads.
-6. **Re-submission on reload** — if the page is reloaded while pending, the request is re-submitted to handle node restarts.
-
-## 10. Admin Page
-
-The admin page (`/admin`) provides a browser interface for the datastore owner to manage access.
-
-### 10.1 Authentication
-
-The owner authenticates by uploading their `key.json` file:
-1. File is parsed for `secret_key` (hex) and `public_key` (hex).
-2. Public key is derived from the secret key via WASM and compared to the stored `public_key` for integrity.
-3. A test call to `GET /api/auth/requests` verifies this is actually the owner key (non-owners get 403).
-
-### 10.2 Capabilities
-
-- **Pending access requests** — table showing name, message, key (truncated), with grant/deny buttons per request.
-- **Authorized keys** — table showing label, key (truncated), with revoke button per key.
-- **Manual grant** — input fields for a 64-char hex public key + optional name, bypassing the access request flow.
-- **Name disambiguation** — when multiple entries share the same name, a key prefix `(abcd1234)` is appended for disambiguation.
-
-### 10.3 Admin Request Signing
-
-All admin API calls use `ownerAuthFetch()`, which signs with `DatastoreAction::Access` using the owner's seed.
-
-## 11. CLI
-
-### 11.1 Auth Signing
-
-The CLI uses `--key <path>` to load a key.json file. Each command signs an `X-Signed-Request` header:
-
-- **Data operations** (`put`, `get`, `delete`, `list`) sign with the corresponding `DatastoreAction` variant (e.g., `DatastoreAction::Put { name, content_hash, size_bytes, tags }`).
-- **Auth management** (`grant`, `revoke`, `requests`, `keys`, `deny`) sign with `DatastoreAction::Access`.
-- **`status`** — never signed (endpoint is always open).
-- Without `--key`, no header is sent (backward compatible with non-auth nodes).
-
-### 11.2 Subcommands
-
-```
-swactor-store --key <path> put <file> [--name <label>]
-    Upload a file. Signs DatastoreAction::Put.
-
-swactor-store --key <path> get <hash> [--output <path>]
-    Retrieve metadata (or download with --output). Signs DatastoreAction::Get.
-
-swactor-store --key <path> delete <hash>
-    Delete an object. Signs DatastoreAction::Delete.
-
-swactor-store --key <path> list [--name <filter>] [--all]
-    List objects. Signs DatastoreAction::List.
-
-swactor-store status
-    Show node identity. No signing.
-
-swactor-store --key <path> grant <key_or_name> [--name <label>]
-    Authorize a public key. Owner-only. Accepts 64 hex chars or a name.
-
-swactor-store --key <path> revoke <key_or_name>
-    Revoke a public key. Owner-only. Accepts 64 hex chars or a name.
-
-swactor-store --key <path> requests
-    List pending access requests. Owner-only.
-
-swactor-store --key <path> keys
-    List authorized keys with labels. Owner-only.
-
-swactor-store --key <path> deny <key_or_name>
-    Deny a pending access request. Owner-only. Accepts 64 hex chars or a name.
-```
-
-### 11.3 Name Resolution
-
-`grant`, `revoke`, and `deny` accept either:
-- A **64-character hex public key** — used directly.
-- A **human-readable name** — resolved by fetching the pending requests (`/api/auth/requests`) or authorized keys (`/api/auth/keys`) list and matching by name.
-
-If multiple entries match the same name, the CLI prints disambiguated names (e.g., `alice (c9d0e1f2)`) and asks the user to re-run with the disambiguated form. The `(prefix)` suffix uses the first 8 hex characters of the key.
-
-## 12. Key Management
-
-### 12.1 Key File Format
-
-All keys use the same JSON format:
-
-```json
-{
-  "version": 1,
-  "secret_key": "...64 hex chars (32 bytes ed25519 seed)...",
-  "public_key": "...64 hex chars (32 bytes ed25519 public key)...",
-  "created_at": "2026-02-15T12:00:00Z"
-}
-```
-
-- Generated by the node on first `--auth` run at `<auth-dir>/owner.key.json`.
-- The CLI reads it via `--key`.
-- The admin page accepts it via file upload for authentication.
-
-### 12.2 Node Key Generation
-
-When `--auth` is enabled:
-1. If `<auth-dir>/owner.key.json` exists, load the keypair from it.
-2. Otherwise, generate a new `Keypair`, write the key file with ISO-8601 `created_at`.
-3. The keypair's `node_id()` becomes the node's `NodeId` (deterministic identity across restarts).
-4. Create/load `<auth-dir>/acl.json` with this `NodeId` as owner.
-
-### 12.3 Browser Key Generation
-
-Browser keys are simpler — 32 random bytes stored as hex in `localStorage.deviceKeySeed`. No key file is produced. The public key is derived on each page load via the WASM `get_public_key()` function.
-
-### 12.4 Grant Flow
-
-Two paths to granting access:
-
-**Via access request (browser-initiated):**
-1. Browser user visits the page, generates device key, submits access request with name.
-2. Owner views pending requests on `/admin` or via `swactor-store requests`.
-3. Owner grants via admin page button or `swactor-store grant <name_or_key>`.
-4. Pending request is removed, name becomes key label, ACL is persisted.
-5. Browser's polling detects the grant and loads the object list.
-
-**Via manual grant (out-of-band):**
-1. Client generates a keypair (or uses an existing one).
-2. Client shares their public key with the owner out-of-band.
-3. Owner runs: `swactor-store --key owner.key.json grant <pubkey> --name <label>`
-4. Or: uses the admin page's "Grant Key Manually" form.
-
-### 12.5 Revocation
-
-1. Owner runs: `swactor-store --key owner.key.json revoke <pubkey_or_name>`
-2. Or: clicks "revoke" on the admin page's authorized keys table.
-3. Client's access is immediately revoked for HTTP requests.
-4. Existing direct iroh connections from that client remain open until disconnected.
-
-## 13. Protocol Integration
-
-Each datastore operation has a clear auth integration point:
-
-| Operation | CLI Signing | Browser Signing |
-|-----------|-------------|-----------------|
-| PUT | `DatastoreAction::Put { name, content_hash, size_bytes, tags }` | `DatastoreAction::Access` |
-| GET | `DatastoreAction::Get { content_hash }` | `DatastoreAction::Access` |
-| DELETE | `DatastoreAction::Delete { content_hash }` | `DatastoreAction::Access` |
-| LIST | `DatastoreAction::List { name_filter }` | `DatastoreAction::Access` |
-| Grant/Revoke/etc. | `DatastoreAction::Access` | `DatastoreAction::Access` |
-
-The browser uses `Access` for all operations because:
-- Computing content hashes client-side would add complexity to the browser JS.
-- The HTTP API already gates the actual data operation — the signed request only needs to prove identity.
-- The `Access` action maps to `DatastoreNodeMsg::Status` in the gateway (a lightweight no-op that returns a valid response).
-
-The CLI uses per-action signing for data operations because it has access to the `ContentHash` and can construct precise action payloads.
-
-In all cases, auth is enforced *before* the request reaches the actor system. Internal inter-node communication (DHT replication, chunk transfers between cluster members) is not subject to auth checks.
-
-## 14. Future Extensions
-
-These are explicitly **out of scope** for MVP but inform the design:
-
-- **Per-path permission scoping** — restrict a key to specific path prefixes.
-- **Permission tiers** — read-only, read-write, admin roles.
-- **Capability tokens** — time-limited, scope-limited bearer tokens for delegated access.
-- **Multi-level delegation** — allow authorized users to grant limited access to others.
-- **Connection tracking** — forcibly disconnect revoked keys from active iroh sessions.
-- **Persistent access requests** — currently in-memory only; lost on node restart (browser re-submits on reload as mitigation).
diff --git a/docs/datastore/actors.md b/docs/datastore/actors.md
deleted file mode 100644
index f9b9ebe..0000000
--- a/docs/datastore/actors.md
+++ /dev/null
@@ -1,278 +0,0 @@
-# Datastore Actor Reference
-
-## Overview
-
-The datastore is built from four actors within the swactor runtime. `DatastoreNode` is the public facade — all external requests (HTTP API, network protocol) enter through it and are routed to two long-lived worker actors: `BlobStoreActor` (content-addressed chunk/manifest I/O) and `MetadataActor` (object index, DHT replication, GC). A fourth actor, `TransferActor`, is spawned ephemerally for each remote download and self-terminates on completion or failure.
-
-```
-                        ┌─────────────────────────┐
-                        │     store_node (main)    │
-                        │  spawns all 3 long-lived │
-                        │  actors, drives ticks    │
-                        └────┬──────┬──────┬───────┘
-                             │      │      │
-                    spawn    │      │      │   spawn
-              ┌──────────────┘      │      └──────────────┐
-              ▼                     │ spawn                ▼
-  ┌───────────────────┐             │          ┌───────────────────┐
-  │  BlobStoreActor   │             │          │  MetadataActor    │
-  │  (chunks, manifests)│           │          │  (index, DHT, GC) │
-  └─────────▲─────────┘            │          └──▲────────┬───────┘
-            │                       ▼             │        │
-            │            ┌───────────────────┐    │        │
-            │            │  DatastoreNode    │────┘        │
-            │            │  (facade/router)  │─────────────┘
-            └────────────│                   │
-                         └────────┬──────────┘
-                                  │ spawns (per download)
-                                  ▼
-                         ┌───────────────────┐
-                         │  TransferActor    │
-                         │  (ephemeral)      │
-                         └───────────────────┘
-
-  Arrows: ──▶ sends messages to
-```
-
-## Actors
-
-### DatastoreNode
-
-| | |
-|---|---|
-| **Role** | Top-level coordinator/facade. Accepts user-facing commands and incoming network protocol messages, delegates all work to `BlobStoreActor` and `MetadataActor`. |
-| **Source** | `crates/datastore/src/actors/datastore_node.rs` |
-| **Spawned by** | `store_node` binary (`crates/datastore/src/bin/store_node.rs:188`) |
-| **Lifecycle** | Long-lived — runs for the lifetime of the process |
-
-**Inbound messages** (`DatastoreNodeMsg` — 11 variants):
-
-User-facing commands:
-- `Put { data, name, tags, reply_to }` — chunk a blob, write chunks + manifest to `BlobStoreActor`, register in `MetadataActor`
-- `Get { content_hash, reply_to }` — retrieve object metadata + manifest via `MetadataActor`
-- `Delete { content_hash, reply_to }` — remove object via `MetadataActor`
-- `List { name_filter, all, reply_to }` — list objects (local or swarm-wide) via `MetadataActor`
-- `Status { reply_to }` — return this node's `NodeId`
-- `ReadChunk { hash, reply_to }` — read a single chunk via `BlobStoreActor`
-
-Protocol routing (incoming network messages):
-- `IncomingGetChunk` — forwards to `BlobStoreActor::ReadChunk`
-- `IncomingGetManifest` — forwards to `BlobStoreActor::ReadManifest`
-- `IncomingStoreObject` — forwards to `MetadataActor::HandleStoreObject`
-- `IncomingFindObject` — forwards to `MetadataActor::HandleFindObject`
-- `IncomingListObjects` — forwards to `MetadataActor::ListLocal`
-
-**Key outbound messages:**
-- `BlobStoreMsg::WriteChunk`, `WriteManifest`, `ReadChunk`, `ReadManifest` — to `BlobStoreActor`
-- `MetadataMsg::PutObject`, `GetObject`, `DeleteObject`, `ListLocal`, `ListSwarm`, `HandleStoreObject`, `HandleFindObject` — to `MetadataActor`
-- `DatastoreResponse::NodeStatus` — directly to caller for `Status`
-
----
-
-### BlobStoreActor
-
-| | |
-|---|---|
-| **Role** | Content-addressed storage for chunks and manifests. All I/O goes through a pluggable `StorageBackend` (filesystem or in-memory). |
-| **Source** | `crates/datastore/src/actors/blob_store.rs` |
-| **Spawned by** | `store_node` binary (`store_node.rs:178`) |
-| **Lifecycle** | Long-lived — runs for the lifetime of the process |
-
-**Inbound messages** (`BlobStoreMsg` — 8 variants):
-
-Chunk operations:
-- `WriteChunk { hash, data, reply_to }` — persist a chunk, reply `ChunkStored`
-- `ReadChunk { hash, reply_to }` — read a chunk, reply `ChunkOk` or `NotFound`
-- `DeleteChunk { hash }` — remove a chunk (fire-and-forget)
-- `HasChunk { hash, reply_to }` — existence check, reply `Bool`
-- `ListChunks { reply_to }` — list all chunk hashes, reply `ChunkList`
-- `GcUnreferenced { referenced }` — delete chunks not in the referenced set (fire-and-forget)
-
-Manifest operations:
-- `WriteManifest { manifest, reply_to }` — persist a manifest, reply `ManifestStored`
-- `ReadManifest { hash, reply_to }` — read a manifest, reply `ManifestOk` or `NotFound`
-
-**Key outbound messages:**
-- `DatastoreResponse` variants (`ChunkStored`, `ChunkOk`, `ManifestStored`, `ManifestOk`, `NotFound`, `Error`, `Bool`, `ChunkList`) — always back to the `reply_to` address
-
----
-
-### MetadataActor
-
-| | |
-|---|---|
-| **Role** | Object metadata index. Maintains a `HashMap<ContentHash, ObjectEntry>` and a manifest cache. Handles DHT-style find/store operations, epidemic dissemination of entries to peers, and periodic garbage collection. |
-| **Source** | `crates/datastore/src/actors/metadata.rs` |
-| **Spawned by** | `store_node` binary (`store_node.rs:185`) |
-| **Lifecycle** | Long-lived — runs for the lifetime of the process |
-
-**Inbound messages** (`MetadataMsg` — 11 variants):
-
-Object operations:
-- `PutObject { entry, manifest, reply_to }` — store metadata + manifest locally, enqueue for dissemination, reply `PutOk`
-- `GetObject { content_hash, reply_to }` — local lookup, reply `GetOk` or `NotFound`
-- `DeleteObject { content_hash, reply_to }` — remove from local index, reply `DeleteOk` or `NotFound`
-- `ListLocal { name_filter, reply_to }` — list local entries with optional name filter, reply `ListOk`
-- `ListSwarm { name_filter, reply_to }` — swarm-wide list (currently delegates to `ListLocal`)
-
-DHT protocol:
-- `HandleFindObject { from, content_hash, reply_to }` — answer an incoming FIND_VALUE from a peer
-- `HandleStoreObject { entry, manifest }` — accept an incoming STORE from a peer (fire-and-forget)
-
-Peer management:
-- `SetPeers { peers }` — update the list of peer `MetadataActor` addresses for dissemination
-
-Periodic ticks (driven by the `store_node` main loop):
-- `DisseminateTick` — send pending entries to all known peers
-- `GcTick` — collect referenced chunks from all manifests, send `BlobStoreMsg::GcUnreferenced` to `BlobStoreActor`
-
-**Key outbound messages:**
-- `DatastoreResponse` variants (`PutOk`, `GetOk`, `DeleteOk`, `ListOk`, `NotFound`, `Error`) — to caller
-- `MetadataMsg::HandleStoreObject` — to peer `MetadataActor` addresses during dissemination
-- `BlobStoreMsg::GcUnreferenced` — to local `BlobStoreActor` during GC
-
----
-
-### TransferActor
-
-| | |
-|---|---|
-| **Role** | Manages a single object download from a remote node. Tracks pending/received chunks, forwards received data to the local `BlobStoreActor`, and reports completion or failure to the original requester. |
-| **Source** | `crates/datastore/src/actors/transfer.rs` |
-| **Spawned by** | `DatastoreNode` (one per remote download) |
-| **Lifecycle** | Ephemeral — self-terminates via `ctx.stop_self()` on completion, failure, or cancel |
-
-**Inbound messages** (`TransferMsg` — 4 variants):
-
-- `StartDownload { manifest, source_node, reply_to }` — initialize the download with a manifest and source
-- `ChunkReceived { hash, data }` — a chunk arrived from the remote node
-- `ChunkFailed { hash, reason }` — a chunk fetch failed (retries up to `max_retries`, then fails the whole transfer)
-- `Cancel` — abort the transfer immediately
-
-**Key outbound messages:**
-- `BlobStoreMsg::WriteChunk` — to local `BlobStoreActor` for each received chunk
-- `DatastoreResponse::TransferComplete` — to `reply_to` when all chunks received
-- `DatastoreResponse::TransferFailed` — to `reply_to` when retries are exhausted
-
----
-
-## Message Reference
-
-All message types are defined in `crates/datastore/src/messages.rs`.
-
-### Intra-node actor messages
-
-| Enum | Variants | Handled by |
-|------|----------|------------|
-| `DatastoreNodeMsg` | 11 (6 user-facing + 5 protocol routing) | `DatastoreNode` |
-| `BlobStoreMsg` | 8 (5 chunk ops + 1 GC + 2 manifest ops) | `BlobStoreActor` |
-| `MetadataMsg` | 11 (5 object ops + 2 DHT + 1 peer mgmt + 2 ticks) | `MetadataActor` |
-| `TransferMsg` | 4 (start + chunk received + chunk failed + cancel) | `TransferActor` |
-
-### Shared response enum
-
-`DatastoreResponse` — 15 variants used as the return type for all four actors:
-
-| Variant | Meaning |
-|---------|---------|
-| `PutOk { content_hash }` | Object stored successfully |
-| `GetOk { entry, manifest }` | Object found |
-| `DeleteOk { content_hash }` | Object deleted |
-| `ListOk { entries }` | List result |
-| `ChunkOk { hash, data }` | Chunk data retrieved |
-| `ChunkStored { hash }` | Chunk written to storage |
-| `ManifestStored { hash }` | Manifest written to storage |
-| `ManifestOk { manifest }` | Manifest retrieved |
-| `TransferComplete { content_hash }` | All chunks downloaded |
-| `TransferFailed { reason }` | Transfer failed |
-| `NodeStatus { node_id }` | Node identity |
-| `NotFound` | Resource not found |
-| `Error { reason }` | Generic error |
-| `Bool(bool)` | Boolean result (e.g. `HasChunk`) |
-| `ChunkList { hashes }` | List of chunk hashes |
-
-### Inter-node wire messages (NetworkMessage)
-
-| Struct | Direction | Purpose |
-|--------|-----------|---------|
-| `GetChunkRequest` | requester → holder | Fetch a chunk by hash |
-| `GetChunkResponse` | holder → requester | Return chunk data (or `None`) |
-| `StoreObjectRequest` | origin → DHT peer | Kademlia STORE for object metadata |
-| `FindObjectRequest` | requester → DHT peer | Kademlia FIND_VALUE for object metadata |
-| `FindObjectResponse` | DHT peer → requester | Return `Found(entry)` or `Closer(nodes)` |
-| `GetManifestRequest` | requester → holder | Fetch a manifest by content hash |
-| `GetManifestResponse` | holder → requester | Return manifest (or `None`) |
-| `ListObjectsRequest` | requester → peer | List objects with optional name filter |
-| `ListObjectsResponse` | peer → requester | Return matching entries |
-
-Wire messages are distinguished from intra-node messages by implementing the `NetworkMessage` trait with a stable `type_tag()` string. They are serialized with serde for transport over iroh/QUIC.
-
----
-
-## Key Flows
-
-### Put (store a blob)
-
-```
-Client → DatastoreNode::Put
-  → chunk_blob() splits data into chunks
-  → BlobStoreActor::WriteChunk  (for each chunk, fire-and-forget)
-  → BlobStoreActor::WriteManifest
-  → MetadataActor::PutObject
-    → stores entry + manifest locally
-    → enqueues for dissemination
-    → replies DatastoreResponse::PutOk
-```
-
-### Get (retrieve metadata)
-
-```
-Client → DatastoreNode::Get
-  → MetadataActor::GetObject
-    → local index lookup
-    → replies DatastoreResponse::GetOk  (or NotFound)
-```
-
-### Data (reassemble from chunks)
-
-See [streaming.md](streaming.md) for the full transfer protocol. In summary:
-
-```
-API server → DatastoreNode::Get → MetadataActor (local miss)
-  → iterate peers:
-    → FindObjectRequest  (wire) → peer MetadataActor
-    → GetManifestRequest (wire) → peer BlobStoreActor
-    → GetChunkRequest    (wire) → peer BlobStoreActor  (per chunk)
-    → BlobStoreActor::WriteChunk (store locally)
-  → BlobStoreActor::WriteManifest
-  → MetadataActor::PutObject
-  → reassemble_blob() → verify blake3 → respond
-```
-
-### Dissemination (epidemic replication)
-
-```
-store_node main loop (every disseminate_interval ticks)
-  → MetadataActor::DisseminateTick
-    → take_pending() selects entries with remaining budget
-    → for each peer: MetadataActor::HandleStoreObject
-      → peer inserts if absent, re-enqueues for further dissemination
-```
-
-Budget per entry = `Λ * ceil(log2(cluster_size))` (SWIM-style, Λ=3).
-
-### GC (garbage collection)
-
-```
-store_node main loop (every gc_interval ticks)
-  → MetadataActor::GcTick
-    → scans all manifests → builds referenced chunk set
-    → BlobStoreActor::GcUnreferenced { referenced }
-      → deletes any chunk not in the referenced set
-```
-
----
-
-## Related
-
-- [streaming.md](streaming.md) — chunking, transfer protocol, reassembly, and progress tracking
diff --git a/docs/datastore/streaming.md b/docs/datastore/streaming.md
deleted file mode 100644
index 153876a..0000000
--- a/docs/datastore/streaming.md
+++ /dev/null
@@ -1,103 +0,0 @@
-# Datastore Streaming Architecture
-
-## Overview
-
-"Streaming" in the swactor datastore refers to **progressive chunk-based transfer**, not byte-level streaming. When an object is stored, it is split into fixed-size chunks, each content-addressed with blake3. When retrieved from a remote peer, chunks are fetched individually and reassembled — enabling progress tracking and partial recovery.
-
-This design trades a small amount of per-chunk overhead for:
-- **Progress visibility**: the dashboard shows `chunks_received / chunks_total` in real time
-- **Resumability**: a failed transfer can (in principle) restart from the last chunk
-- **Deduplication**: identical chunks across objects are stored once
-
-## Content-Addressed Chunking
-
-The `chunk_blob()` function (`chunking.rs`) splits raw bytes into fixed-size pieces:
-
-1. Compute `ContentHash = blake3(entire_blob)` — this is the object's identity
-2. Split the blob into `ceil(total_size / chunk_size)` pieces (default chunk size: 1 MB)
-3. For each piece, compute `chunk_hash = blake3(piece_bytes)`
-4. Build a `ChunkRef { hash, offset, size }` for each piece
-5. Return an `ObjectManifest` containing the full list of `ChunkRef`s
-
-```
-Blob (5.2 MB, chunk_size=1MB)
-├── Chunk 0: hash=abc1…, offset=0,       size=1048576
-├── Chunk 1: hash=def2…, offset=1048576,  size=1048576
-├── Chunk 2: hash=789a…, offset=2097152,  size=1048576
-├── Chunk 3: hash=bcd3…, offset=3145728,  size=1048576
-└── Chunk 4: hash=ef45…, offset=4194304,  size=1048576  (last: 209920 bytes)
-```
-
-The object's identity (`ContentHash`) is the hash of the *entire* blob, not of the manifest. This means the same data always produces the same hash regardless of chunk size.
-
-## Transfer Protocol
-
-When a client requests an object via `GET /api/data?hash=...`, the API server:
-
-1. Sends a `DatastoreNodeMsg::Get` to the local `DatastoreNode` actor
-2. If found locally, reads all chunks from the local `BlobStore` and reassembles
-3. If **not found locally**, enters `try_remote_get()`:
-
-![Transfer Flow](../diagrams/datastore_transfer.svg)
-
-### Remote GET step-by-step
-
-1. **Iterate peers**: for each known peer node:
-2. **FindObject**: send `MetadataMsg::HandleFindObject` to the peer's `MetadataActor`
-3. **Read manifest**: send `BlobStoreMsg::ReadManifest` to the peer's `BlobStore`
-4. **Fetch chunks**: for each `ChunkRef` in the manifest:
-   - Send `BlobStoreMsg::ReadChunk` to the peer
-   - Receive `DatastoreResponse::ChunkOk { hash, data }`
-   - Store locally via `BlobStoreMsg::WriteChunk`
-   - Update `DatastoreMetrics::advance_transfer()` for dashboard progress
-5. **Store manifest locally**: `BlobStoreMsg::WriteManifest`
-6. **Store metadata locally**: `MetadataMsg::PutObject`
-7. **Reassemble and respond**: `reassemble_blob()` concatenates chunks and verifies integrity
-
-If a peer doesn't have the object (or any step fails), the loop continues to the next peer.
-
-## Reassembly
-
-`reassemble_blob()` (`chunking.rs`) takes a manifest and a set of `(hash, data)` pairs:
-
-1. For each `ChunkRef` in manifest order, find the matching `(hash, data)` pair
-2. Concatenate all chunk data into a single buffer
-3. Compute `blake3(result)` and verify it matches `manifest.content_hash`
-4. Return the reassembled blob (or a `ChunkingError` on mismatch)
-
-This integrity check ensures that even if individual chunks are corrupted or swapped, the final result is always verified against the original content hash.
-
-## Progress Tracking
-
-The `DatastoreMetrics` struct provides thread-safe transfer tracking:
-
-```
-begin_transfer(hash, chunks_total)    // called when remote GET starts
-advance_transfer(hash)                // called after each chunk is stored locally
-end_transfer(hash)                    // called on completion or failure
-```
-
-The dashboard SSE stream includes a `datastore` event every ~200ms with a `DatastoreSnapshot` containing `active_transfers: Vec<TransferProgress>`. The web UI renders these as animated progress bars.
-
-```
-TransferProgress {
-    hash: "abc123...",
-    chunks_received: 3,
-    chunks_total: 5,
-}
-```
-
-## GC Integration
-
-When an object is deleted, its `ObjectEntry` and `ObjectManifest` are removed from the `MetadataActor`. However, the underlying chunks are **not immediately deleted** — they may be referenced by other manifests (deduplication).
-
-Instead, garbage collection runs periodically:
-
-1. `MetadataMsg::GcTick` triggers a scan
-2. The `MetadataActor` collects all chunk hashes referenced by any live manifest
-3. Sends `BlobStoreMsg::GcUnreferenced` with the referenced set
-4. The `BlobStore` deletes any chunks **not** in the referenced set
-
-This two-phase approach prevents data loss when chunks are shared between objects.
-
-![Chunk Lifecycle](../diagrams/datastore_chunk_lifecycle.svg)
diff --git a/docs/development_history/PROCESS_PRIMITIVES.md b/docs/development_history/PROCESS_PRIMITIVES.md
deleted file mode 100644
index 6b5edfa..0000000
--- a/docs/development_history/PROCESS_PRIMITIVES.md
+++ /dev/null
@@ -1,542 +0,0 @@
-# Process Abstraction for Swactor — Development History
-
-> Design and implementation record for the "process" abstraction layer built
-> on top of swactor's actor primitives. This work ran across items 1–9 and
-> added 9 extension traits, 3 registries, and ~70 scenario tests.
-
-## Context
-
-Swactor is a distributed actor runtime with local primitives (spawn, send, stop, monitor,
-supervise) and distributed primitives (SWIM membership, Kademlia directory, cluster-wide naming,
-content-addressed datastore). The goal was to design a "process" abstraction that sits on top of
-these primitives, making the experience of running code on a swactor network feel closer to what
-an OS process feels like -- with access to an API for requesting resources and querying system
-state.
-
----
-## Part 1: OS Process Mapping
-
-### Already strong (direct OS equivalents exist)
-
-OS Concept: PID
-Swactor Equivalent: ActorAddress (32-byte random)
-Where: src/actor.rs
-────────────────────────────────────────
-OS Concept: fork+exec
-Swactor Equivalent: ctx.spawn(), Runtime::spawn()
-Where: src/actor.rs, src/runtime.rs
-────────────────────────────────────────
-OS Concept: exit(0)
-Swactor Equivalent: ctx.stop_self()
-Where: src/actor.rs
-────────────────────────────────────────
-OS Concept: kill(pid, SIGTERM)
-Swactor Equivalent: ctx.stop_actor(addr)
-Where: src/actor.rs
-────────────────────────────────────────
-OS Concept: SIGCHLD / waitpid
-Swactor Equivalent: ctx.monitor() -> Down, ctx.watch() -> ActorExited
-Where: crates/std/src/ctx_ext.rs
-────────────────────────────────────────
-OS Concept: IPC (message queues)
-Swactor Equivalent: Typed message passing (local + cross-worker + cross-runtime)
-Where: src/actor.rs, src/transport.rs
-────────────────────────────────────────
-OS Concept: Service names
-Swactor Equivalent: NameRegistry (local), ClusterRegistry (cluster CRDT)
-Where: crates/std/src/name_registry.rs, crates/distribution/src/registry.rs
-────────────────────────────────────────
-OS Concept: Process groups
-Swactor Equivalent: GroupRegistry (join/leave/publish/members)
-Where: crates/std/src/ctx_ext.rs
-────────────────────────────────────────
-OS Concept: init/systemd
-Swactor Equivalent: Supervisor with restart strategies
-Where: crates/std/src/supervisor.rs
-────────────────────────────────────────
-OS Concept: Scheduler
-Swactor Equivalent: Worker pool with load-aware placement + per-actor message budgets
-Where: src/worker.rs, src/delivery.rs
-────────────────────────────────────────
-OS Concept: Machine identity
-Swactor Equivalent: NodeId (ed25519 public key)
-Where: crates/distribution/src/types.rs
-────────────────────────────────────────
-OS Concept: Cluster membership
-Swactor Equivalent: SWIM protocol
-Where: crates/distribution/src/swim/
-────────────────────────────────────────
-OS Concept: /proc, top, ps
-Swactor Equivalent: RuntimeStats, StatsHook, Dashboard, Investigate protocol
-Where: src/stats.rs, crates/dashboard/
-
-### Implemented during this work
-
-OS Concept: System introspection from inside
-Swactor Equivalent: CtxSystem (worker_id, num_workers, total_actors, uptime_ms) + SystemInfo
-Where: src/actor.rs, crates/std/src/ctx_ext.rs
-────────────────────────────────────────
-OS Concept: Per-actor introspection
-Swactor Equivalent: CtxSelfStats (messages_processed, mailbox_depth, message_type_counts)
-Where: src/actor.rs, src/worker.rs, crates/std/src/ctx_ext.rs
-────────────────────────────────────────
-OS Concept: Process lineage (getppid)
-Swactor Equivalent: CtxLineage (ctx.parent(), ctx.supervisor())
-Where: src/actor.rs, src/worker.rs, crates/std/src/ctx_ext.rs, crates/std/src/supervisor_registry.rs
-────────────────────────────────────────
-OS Concept: Process environment (environ/getenv)
-Swactor Equivalent: CtxEnvironment (ctx.env::<T>(), ctx.environment(), SpawnBuilder for overrides)
-Where: src/actor.rs, src/worker.rs, crates/std/src/ctx_ext.rs
-────────────────────────────────────────
-OS Concept: Well-known environment keys (spawn metadata)
-Swactor Equivalent: SpawnTimestamp(u64) injected by StdExtension on_spawn hook;
-  LogicalName(String) injected by spawn_named (ctx and runtime level)
-Where: src/actor.rs, src/extension.rs, src/worker.rs, crates/std/src/extension.rs,
-  crates/std/src/ctx_ext.rs, crates/std/src/runtime_ext.rs, src/runtime.rs
-────────────────────────────────────────
-OS Concept: Service discovery
-Swactor Equivalent: ServiceRegistry + CtxResources (ctx.resource::<S>() -> Option<ActorAddress>)
-Where: src/actor.rs, crates/std/src/service_registry.rs, crates/std/src/ctx_ext.rs,
-  crates/std/src/runtime_ext.rs, crates/std/src/extension.rs
-────────────────────────────────────────
-OS Concept: Resource request API (typed handles)
-Swactor Equivalent: ResourceHandle trait + CtxHandles (ctx.handle::<H>() -> Option<H>)
-Where: crates/std/src/resource_handle.rs, crates/std/src/ctx_ext.rs
-────────────────────────────────────────
-OS Concept: Exit codes / rich exit values
-Swactor Equivalent: ExitValue(Arc<dyn Any + Send + Sync>), ctx.stop_with(value),
-  StopReason::Completed, ExitReason::Completed. Exit values propagated via Down/ActorExited.
-Where: src/actor.rs, src/worker.rs, crates/std/src/extension.rs, crates/std/src/watch_registry.rs
-────────────────────────────────────────
-OS Concept: Parent-child hierarchy + orphan handling
-Swactor Equivalent: ChildrenRegistry tracks parent->children. On parent death, unsupervised
-  children are killed (StopSignal). Supervised children are left to their supervisor. Cascades
-  naturally across generations via tick-based cleanup.
-Where: crates/std/src/children_registry.rs, crates/std/src/extension.rs
-────────────────────────────────────────
-OS Concept: Suspend/resume (SIGSTOP/SIGCONT)
-Swactor Equivalent: ctx.suspend_self(), ctx.resume(target) with auth (self or supervisor only).
-  Suspended actors queue messages but don't process them. ResumeSignal via transfer queue for
-  cross-worker resume.
-Where: src/actor.rs, src/worker.rs, src/runtime.rs, crates/std/src/ctx_ext.rs
-────────────────────────────────────────
-OS Concept: Capability model / sandboxing
-Swactor Equivalent: CapabilitySet stored in actor's Environment. Enforced at Ctx level (send,
-  spawn, stop_actor, monitor, resource). Opt-in: actors without a CapabilitySet are unrestricted.
-Where: src/actor.rs, crates/std/src/ctx_ext.rs
-
-### Still partially there
-
-OS Concept: Resource limits
-What Exists: Mailbox capacity + message budget
-What's Missing: No per-actor memory/CPU/fd limits
-────────────────────────────────────────
-OS Concept: Auth/permissions
-What Exists: Datastore ACL + node-level peer auth + actor-level CapabilitySet
-What's Missing: Cluster-level capability propagation (local-only today)
-
----
-## Part 2: Design Primitives
-
-The design followed the existing extension pattern: new capabilities were added as extension traits
-on Ctx<'_>, backed by registries in the extension system. This preserved backwards compatibility
-and kept the core minimal.
-
-### 2.1 System Queries (CtxSystem)
-
-What it enables: An actor can ask about the system it's running in.
-
-Implemented queries (available via ctx.system_info() or the CtxSystem extension trait):
-- ctx.worker_id() -> usize            -- which worker thread am I on?
-- ctx.num_workers() -> usize           -- how many worker threads exist?
-- ctx.total_actors() -> usize          -- live actors across all workers
-- ctx.uptime_ms() -> u64              -- milliseconds since runtime creation
-
-Implementation: SystemInfo struct in src/actor.rs. ContextInner::system_info() implemented on
-both Runtime (for spawn-time context) and WorkerContext (for handler context). Data flows through
-TickContext (worker_stats + created_at fields in src/delivery.rs). The CtxSystem extension trait
-in crates/std/src/ctx_ext.rs provides ergonomic per-field accessors.
-
-Future cluster-level queries (not yet implemented):
-- What is my node's identity (NodeId)?
-- How many cluster nodes are alive?
-- Who are the cluster members?
-
-These require the distribution crate's DistributedNode state to be exposed through the extension
-system. The CtxSystem trait can be extended with these when the distribution integration is ready.
-
-### 2.2 Process Environment (CtxEnvironment)
-
-What it enables: Typed configuration that flows from parent to child at spawn time.
-
-Properties:
-- Inherited: When actor A spawns actor B via ctx.spawn(), B gets A's environment (Arc clone)
-- Overridable: ctx.spawn_builder(actor).env(Key(val)).finish() lazily clones the parent's map
-  on first override (copy-on-write), leaving the common case (no overrides) allocation-free
-- Immutable after spawn: Set at creation, read-only thereafter. Mutable config goes through
-  messages.
-- Typed values: TypeId-keyed (like http::Extensions), not string-to-string
-- Runtime-spawned actors start with an empty environment
-
-Implementation: Environment is Arc<HashMap<TypeId, Arc<dyn Any + Send + Sync>>> -- clone is an
-Arc bump (zero allocation). EnvironmentBuilder provides from_env() for copy-on-write overrides
-(cloning individual entries is cheap since values are also Arc-wrapped). The spawn channel was
-replaced with a SpawnRequest struct (addr, actor, parent, env) to avoid further tuple growth.
-ActorSlot stores env, and Ctx receives it at both construction sites (tick_all and cleanup_dead).
-SpawnBuilder provides the ergonomic override API. The CtxEnvironment extension trait in
-crates/std/src/ctx_ext.rs provides the import path, following the same pattern as CtxLineage
-(no StdExtension dependency required). Python crate spawns with Environment::new(). 6 scenario
-tests in tests/std_extension.rs cover: inheritance, empty for runtime-spawned, grandchild chain,
-override-one-inherit-others, readable in on_stop, and sibling independence.
-
-Well-known keys:
-- SpawnTimestamp(u64): Injected by StdExtension's on_spawn hook. Milliseconds since runtime
-  creation, same time base as SystemInfo::uptime_ms. Opt-in at runtime level (present when
-  StdExtension is installed). Read via ctx.env::<SpawnTimestamp>().
-- LogicalName(String): Injected by spawn_named() at both ctx and Runtime levels. Inherited by
-  children via normal environment inheritance. Read via ctx.env::<LogicalName>().
-- ServiceBinding<S>(ActorAddress): Injected by ServiceRegistry's inject_into() hook during
-  on_spawn. Registered at runtime level via rt.register_service::<S>(addr). Read via
-  ctx.resource::<S>() (CtxResources trait). Overridable per-subtree via spawn_builder.
-- CapabilitySet: Granted at spawn time (via environment or spawn_builder). Inherited by children.
-  Enforced at Ctx level. See section 2.7.
-
-Analogy: Unix environ -- inherited by default, augmented at fork/exec time, readable via getenv().
-
-### 2.3 Service Discovery (CtxResources)
-
-What it enables: Actors can discover system services by type, not by knowing raw addresses.
-
-How it differs from NameRegistry: NameRegistry maps strings to addresses. CtxResources maps
-service marker types to addresses. Looking up "datastore" by name gives you a raw ActorAddress and
-you must know what messages it accepts. ctx.resource::<Datastore>() gives you the address of the
-service registered under that marker type.
-
-Implementation: Three layers compose the feature:
-
-1. Core type: ServiceBinding<S>(ActorAddress) in src/actor.rs -- a generic environment key
-   parameterized by a zero-sized marker type. Any struct satisfying 'static + Send + Sync works
-   as a marker (no special Service trait required, consistent with Environment's existing API).
-
-2. Registry + injection: ServiceRegistry in crates/std/src/service_registry.rs stores registered
-   bindings as RwLock<HashMap<TypeId, Arc<dyn Any + Send + Sync>>> (same thread-safety pattern
-   as SupervisorRegistry). StdExtension's on_spawn hook calls inject_into() before adding
-   SpawnTimestamp -- this merges all registered bindings into the actor's environment, skipping
-   keys already present (preserves per-subtree overrides set via spawn_builder). Helper methods
-   on Environment (contains_type_id) and EnvironmentBuilder (set_raw) support type-erased
-   injection without knowing concrete types at compile time.
-
-3. Read API: CtxResources trait in crates/std/src/ctx_ext.rs provides ctx.resource::<S>() ->
-   Option<ActorAddress>, a thin wrapper around ctx.env::<ServiceBinding<S>>().map(|b| b.addr).
-   Does NOT require StdExtension -- reads from core environment (same pattern as CtxEnvironment).
-   When a CapabilitySet is present, resource() checks check_service::<S>() and returns None if
-   denied. RuntimeResources trait in crates/std/src/runtime_ext.rs provides
-   rt.register_service::<S>(addr) for startup-time registration.
-
-Key design decisions:
-- No Service marker trait: S: 'static + Send + Sync is sufficient. Any zero-size struct works.
-- "Skip if present" injection: The registry doesn't overwrite env keys set by spawn_builder,
-  enabling per-subtree service overrides (e.g., test doubles, staging vs production services).
-- No cleanup on service actor death: A dead service's binding stays in the registry (stale
-  address). Sends to it will fail. Service lifecycle management is a higher-level concern.
-
-6 scenario tests in tests/std_extension.rs cover: discovery by marker type, child inherits
-binding from parent, multiple services each accessible by marker, unregistered returns None,
-overridable via spawn_builder, accessible in on_start and on_stop lifecycle hooks.
-
-Well-known services that could be registered (when swactor-node is updated):
-- Storage -- content-addressed datastore (currently wired manually in swactor-node)
-- Directory -- actor location resolution (currently locked inside DistributedNode)
-- Cluster -- membership/topology info (currently snapshot-only for dashboard)
-- Metrics -- runtime stats (currently StatsHook push-only)
-
-### 2.4 Resource Handles (CtxHandles)
-
-What it enables: Domain-specific typed proxies that wrap service addresses and provide ergonomic
-APIs.
-
-The pattern: A handle wraps (service_address, self_address) and provides methods that construct
-and send the right messages, embedding self_addr as reply_to. Responses arrive as normal messages
-in the actor's handle().
-
-Implementation: The ResourceHandle trait in crates/std/src/resource_handle.rs defines the contract:
-- type Service: 'static + Send + Sync -- the marker type used for service discovery
-- from_parts(service_addr, self_addr) -> Self -- construct from addresses
-- service_addr() -> ActorAddress -- the underlying service address
-- self_addr() -> ActorAddress -- the actor's own address (for reply_to)
-
-The CtxHandles extension trait in crates/std/src/ctx_ext.rs provides ctx.handle::<H>() -> Option<H>,
-which looks up ServiceBinding<H::Service> from the actor's environment and constructs the handle.
-Returns None if the service is not registered (consistent with ctx.resource(), ctx.where_is()).
-
-Handle methods take &self + &Ctx (not stored &Ctx -- avoids lifetime issues with &mut self in
-handlers). Example:
-  impl MyHandle {
-      pub fn do_work(&self, ctx: &Ctx, data: Vec<u8>) -> Result<(), Error> {
-          ctx.send(self.service_addr(), MyMsg::DoWork { data, reply_to: self.self_addr() })
-      }
-  }
-
-Key design tension: Handles can't block (no await in swactor). The response arrives asynchronously
-as a message. This is inherent to the actor model and not something to "fix" -- the handle just
-makes the send side ergonomic.
-
-5 scenario tests: handle wraps service and sends ergonomically, returns None when service not
-registered, inherits service binding from parent, constructible in on_start, two actors with same
-handle type each get responses at their own address.
-
-### 2.5 Process Lineage (CtxLineage)
-
-What it enables: Actors know their ancestry.
-
-Implemented queries:
-- ctx.parent() -> Option<ActorAddress> (who spawned me?)
-  Returns Some(spawner_addr) for actor-spawned children, None for Runtime::spawn().
-  Available in handle(), on_start(), and on_stop().
-- ctx.supervisor() -> Option<ActorAddress> (who supervises me, if anyone?)
-  Returns Some(supervisor_addr) for supervised children, None for unsupervised actors.
-  Gracefully returns None when StdExtension is absent (no panic).
-
-Implementation (parent): The spawn channel uses a SpawnRequest struct (addr, actor, parent, env) --
-the original 3-tuple was replaced when CtxEnvironment was added. When Ctx::spawn is called, the
-spawning actor's self_addr is passed as Some(parent). Runtime::spawn passes None. The parent is
-stored in ActorSlot::parent_addr and threaded into Ctx::self_parent_addr at both construction sites
-(tick_all and cleanup_dead). 4 scenario tests cover: child knows parent, runtime-spawned has no
-parent, grandchild sees immediate parent (not grandparent), and parent is visible in on_stop.
-
-Implementation (supervisor): SupervisorRegistry in crates/std/src/supervisor_registry.rs stores a
-child_addr -> supervisor_addr map (RwLock<AddrMap<ActorAddress>>). Supervisor::start_child calls
-register(self_addr, child_addr) after spawning and monitoring. cleanup() removes entries where the
-dead address is either child or supervisor (O(n) scan for supervisor death, acceptable since
-supervisor death is rare and the map is small). CtxLineage::supervisor() downcasts the extension
-gracefully (returns None if StdExtension is absent). 5 scenario tests cover: supervised child knows
-supervisor, unsupervised actor returns None, supervisor survives child restart, grandchild not
-supervised but parent is, OneForAll restart re-registers all children.
-
-The CtxLineage extension trait in crates/std/src/ctx_ext.rs provides the ergonomic import path.
-
-Orphan handling was implemented as part of item 8 (Lifecycle Enrichment) -- see section 2.8.
-
-### 2.6 Self-Introspection (CtxSelfStats)
-
-What it enables: Actors can see their own operational metrics.
-
-Implemented queries (available directly on Ctx or via the CtxSelfStats extension trait):
-- ctx.messages_processed() -> u64     -- total successfully processed before current tick
-- ctx.mailbox_depth() -> usize        -- messages queued at start of current tick (pre-dequeue)
-- ctx.message_type_counts() -> &[(&str, u64)] -- per-type counts, sorted descending
-
-Implementation: Stats are snapshotted from ActorSlot fields into Ctx before each tick_all
-iteration (src/worker.rs). The snapshot captures the state before any messages are dequeued
-in the current tick, giving actors a consistent view. The same snapshot is provided during
-on_stop callbacks in cleanup_dead. The CtxSelfStats extension trait in crates/std/src/ctx_ext.rs
-provides the ergonomic import path.
-
-The Vec allocation for type counts is bounded (max 32 entries from ActorSlot's msg_type_counts
-cap) and negligible relative to handle_any cost.
-
-### 2.7 Capability Model (CapabilitySet + CtxCapabilities)
-
-What it enables: Controlled access to system resources and other actors. Primarily important for
-sandboxing untrusted code (wasm actors in crates/bin-runner/).
-
-Approach: A single CapabilitySet stored in the actor's Environment. When present, enforcement is
-active -- the actor can only perform operations granted by the set. When absent, the actor is
-unrestricted (backward compatible). Capabilities inherit from parent to child via normal
-environment inheritance.
-
-Capability grants (all in CapabilitySet):
-- with_send(addr) -- send any message type to a specific address
-- with_send_typed::<M>(addr) -- send only messages of type M to a specific address
-- with_spawn() -- permission to spawn new actors
-- with_service::<S>() -- permission to access system service S via ctx.resource::<S>()
-- with_monitor(addr) -- permission to monitor a specific actor
-
-Enforcement points (all in src/actor.rs Ctx methods or crates/std/src/ctx_ext.rs):
-- ctx.send::<M>(addr, msg) -- checks check_send::<M>(addr); self-send always allowed
-- ctx.spawn() / SpawnBuilder::finish() -- checks check_spawn()
-- ctx.stop_actor(addr) -- checks check_send_addr(addr) (stop is a send of StopSignal)
-- ctx.monitor(addr) -- checks check_monitor(addr); returns Result<MonitorRef, Error>
-- ctx.resource::<S>() -- checks check_service::<S>(); returns None if denied
-
-Key design decisions:
-- Opt-in: No CapabilitySet in environment means unrestricted. Zero behavioral change for existing
-  actors. The only cost is an Option check (env.get::<CapabilitySet>()) at each enforcement point.
-- Enforcement at Ctx level only: The core ContextInner::send_any is not gated. This means
-  extension code (supervisors, timers, etc.) that calls send_any directly bypasses capability
-  checks, which is intentional -- system infrastructure is trusted.
-- Dual send granularity: with_send(addr) grants all message types to an address.
-  with_send_typed::<M>(addr) grants only type M. The check tries address-only first, then typed.
-  This allows coarse grants for trusted peers and fine-grained grants for untrusted actors.
-- Self-send always allowed: A restricted actor can always send to its own address. This prevents
-  capabilities from breaking actors that use self-messaging patterns (timers, state machines).
-- monitor() returns Result: Changed from -> MonitorRef to -> Result<MonitorRef, Error>. This was
-  a breaking change to all callers (supervisor.rs, router.rs, test files), fixed mechanically by
-  adding ? or .unwrap().
-
-Builder API: Fluent (CapabilitySet::new().with_send(addr).with_spawn()) and mutable
-(caps.grant_send(addr)) variants. Mutable methods return &mut Self for chaining.
-
-Introspection: CtxCapabilities extension trait in crates/std/src/ctx_ext.rs provides:
-- ctx.capabilities() -> Option<&CapabilitySet> -- access the raw set
-- ctx.is_restricted() -> bool -- quick check
-
-Implementation locations:
-- src/actor.rs: CapabilitySet struct, builder methods, check methods, Ctx::capabilities() helper,
-  enforcement in send/spawn/stop_actor/SpawnBuilder::finish
-- src/lib.rs: CapabilitySet re-export
-- crates/std/src/ctx_ext.rs: CtxCapabilities trait, monitor() enforcement, resource() enforcement
-- crates/std/src/lib.rs: CtxCapabilities re-export
-
-11 scenario tests in tests/std_extension.rs cover: unrestricted actor sends freely (backward
-compat), restricted actor denied send, restricted actor allowed send, typed send grant (Ping
-allowed / Pong denied), spawn denied, spawn allowed, capability inheritance (child inherits
-parent's CapabilitySet), monitor denied, service access denied, self-send always allowed, stop
-requires send permission.
-
-### 2.8 Lifecycle Enrichment
-
-Rich exit values: ExitValue(Arc<dyn Any + Send + Sync>) is an opaque typed wrapper. Actors stop
-with ctx.stop_with(value) which stores the value and triggers StopReason::Completed. The value
-is propagated through Down (monitors) and ActorExited (watchers) via the exit_value: Option<ExitValue>
-field. Manual PartialEq/Eq on ExitValue (always false -- opaque blob), so Down/ActorExited compare
-by addr+reason only.
-
-Implementation: StopWithSignal(ExitValue) is a sentinel message intercepted in tick_all (like
-StopSignal). ActorSlot gains exit_value: Option<ExitValue>. cleanup_dead returns
-Vec<(ActorAddress, StopReason, Option<ExitValue>)> with StopReason::Completed when exit_value is
-present. The on_actor_death extension hook receives and propagates exit values to monitors/watchers.
-
-7 scenario tests: stop_with value received in Down, received in ActorExited, normal stop has None,
-panic has None, multiple monitors receive cloned value, stop_with from on_start, supervisor receives
-rich exit in handle_down (graceful handoff pattern).
-
-Orphan handling: ChildrenRegistry tracks parent -> set of children. Populated in on_spawn when a
-parent is present. On parent death (on_actor_death), unsupervised children receive StopSignal.
-Supervised children are left to their supervisor. Cascades naturally: parent dies -> children killed
-next tick -> grandchildren killed the tick after that. StopSignal made pub (was pub(crate)) to
-enable this -- it's not Message (not Clone) so can't be sent via ctx.send().
-
-4 scenario tests: unsupervised children killed on parent death, supervised children not killed,
-cascading cleanup across generations, runtime-spawned actors unaffected.
-
-Suspend/resume: ActorSlot gains a suspended: bool flag. Suspended actors queue messages but don't
-process them (tick_all skips them). ctx.suspend_self() sets the flag via a suspend_requests buffer.
-ResumeSignal is intercepted in deliver() to clear the flag. StopSignal/StopWithSignal are also
-intercepted for suspended actors (so stop_actor works on them). Cross-worker resume sends
-ResumeSignal via the transfer queue.
-
-Authorization: CtxLifecycle extension trait provides ctx.suspend_self() (always allowed) and
-ctx.resume(target) which checks: target == self (self-resume) OR caller is the target's supervisor
-via SupervisorRegistry. Returns Err if unauthorized.
-
-5 scenario tests: suspended actor queues then resume processes, supervisor can resume, non-supervisor
-cannot resume, suspended actor can be stopped, cross-worker resume via runtime.
-
-Graceful handoff: Built on rich exit values. An outgoing actor stops with its state via
-ctx.stop_with(state); the supervisor receives it in handle_down's Down message and can pass it
-to the replacement's constructor. Enables zero-downtime upgrades. No additional mechanism needed --
-the pattern composes from existing primitives.
-
----
-## Part 3: How These Compose
-
-The primitives form a layered system:
-
-Layer 3: Integration (swactor-node wires services at startup)
-Layer 2: Process (CapabilitySet, ProcessBuilder)
-Layer 1: Std (CtxSystem, CtxEnvironment, CtxLineage, CtxSelfStats, Well-known env keys,
-         SupervisorRegistry, CtxResources, CtxHandles, CtxLifecycle, ChildrenRegistry,
-         CtxCapabilities)
-Layer 0: Core (SystemInfo, Ctx self-stats, parent tracking, Environment + SpawnRequest,
-         on_spawn hook, spawn_with_env, ServiceBinding, suspend flag, rich exit, orphan
-         handling, CapabilitySet)
-
-A "process" in swactor is an actor that has:
-1. An identity (ActorAddress) and a name (NameRegistry)
-2. A parent and supervisor it can query (CtxLineage)
-3. An environment inherited from its spawner, with well-known keys (CtxEnvironment)
-4. Access to system services through discovery (CtxResources)
-5. The ability to query the system it lives in (CtxSystem)
-6. Awareness of its own operational state (CtxSelfStats)
-7. Typed resource handles for ergonomic service interaction (CtxHandles)
-8. Rich lifecycle support including typed exit values, orphan handling, and suspend/resume
-9. Controlled permissions for what it can access (CapabilitySet)
-
-What stayed the same: The core actor model (message passing, mailboxes, workers, tick-based
-execution) was unchanged. ActorInterface, Ctx, Runtime remained the foundation. The process
-abstraction was additive -- existing actors continued to work exactly as before.
-
----
-## Part 4: Implementation Sequence
-
-Each item was implemented and merged in dependency order. Earlier items established the
-infrastructure (Environment, extension hooks) that later items built on.
-
-1. **CtxSystem + CtxSelfStats** -- Exposed existing internal data to actors. SystemInfo struct,
-   ContextInner::system_info(), Ctx self-stats snapshot fields. Extension traits CtxSystem and
-   CtxSelfStats in swactor-std. Covered by 3 scenario tests.
-
-2. **CtxLineage (parent tracking)** -- Option<ActorAddress> threaded through the spawn path.
-   ContextInner::spawn_any gained a parent parameter. ActorSlot stores parent_addr. Ctx exposes
-   parent(). CtxLineage extension trait in swactor-std. 4 scenario tests.
-   Python crate updated to pass parent on spawn.
-
-3. **CtxEnvironment (process environment)** -- Typed key-value map inherited from parent to
-   child at spawn time. Environment is Arc<HashMap<TypeId, Arc<dyn Any + Send + Sync>>> -- clone
-   is an Arc bump. EnvironmentBuilder supports copy-on-write overrides via from_env(). The spawn
-   channel 3-tuple was replaced with a SpawnRequest struct (addr, actor, parent, env) to stop
-   tuple growth. ActorSlot stores env. Ctx gains env::<T>(), environment(), and spawn_builder().
-   SpawnBuilder lazily clones the parent's map on first .env() call. CtxEnvironment extension trait
-   in swactor-std (no StdExtension dependency). Python crate spawns with Environment::new().
-   6 scenario tests: inheritance, empty for runtime-spawned, grandchild chain,
-   override-one-inherit-others, readable in on_stop, sibling independence.
-
-4. **Well-known environment keys** -- SpawnTimestamp(u64) and LogicalName(String) types in
-   src/actor.rs, exported from src/lib.rs. SpawnTimestamp is opt-in at runtime level: injected by
-   StdExtension's on_spawn hook (new RuntimeExtension::on_spawn hook with default no-op in
-   src/extension.rs). Worker::drain_spawns now takes &TickContext and calls on_spawn for each
-   spawn request, passing uptime_ms to avoid exposing the pub(crate) Instant type. LogicalName is
-   injected by spawn_named at both ctx level (via spawn_builder + env override) and runtime level
-   (via new Runtime::spawn_with_env method). LogicalName inherits to children automatically via
-   normal environment inheritance. 7 scenario tests.
-
-5. **Supervisor lineage (ctx.supervisor())** -- SupervisorRegistry in
-   crates/std/src/supervisor_registry.rs stores child_addr -> supervisor_addr as
-   RwLock<AddrMap<ActorAddress>>. Supervisor::start_child calls register() after spawning and
-   monitoring. cleanup() removes entries for dead actors (both as child and as supervisor).
-   CtxLineage::supervisor() gracefully returns None when StdExtension is absent (downcasts via
-   as_any, no panic). Distinct from parent() because not every parent is a supervisor. get_ext
-   made pub(crate) so supervisor.rs can access it. 5 scenario tests.
-
-6. **Service Registry + CtxResources** -- Actors discover system services by type
-   (ctx.resource::<Datastore>()) rather than by raw address. ServiceBinding<S>(ActorAddress)
-   is a generic environment key parameterized by a marker type. ServiceRegistry in StdExtension
-   stores bindings and injects them into every actor's environment via on_spawn (skipping keys
-   already present to preserve spawn_builder overrides). CtxResources trait provides
-   ctx.resource::<S>() sugar. RuntimeResources trait provides rt.register_service::<S>(addr).
-   6 scenario tests.
-
-7. **Resource Handles (CtxHandles)** -- ResourceHandle trait + CtxHandles extension trait.
-   ctx.handle::<H>() -> Option<H> constructs typed proxies from ServiceBinding<H::Service> in the
-   actor's environment. Handle methods take &self + &Ctx for ergonomic domain-specific APIs.
-   5 scenario tests.
-
-8. **Lifecycle enrichment** -- Three sub-features:
-   a) Rich exit values: ExitValue(Arc<dyn Any + Send + Sync>), ctx.stop_with(value),
-      StopReason::Completed, ExitReason::Completed. Propagated through Down/ActorExited.
-      7 scenario tests.
-   b) Orphan handling: ChildrenRegistry tracks parent->children. Unsupervised children killed
-      on parent death. Supervised children left to their supervisor. Natural cascade.
-      4 scenario tests.
-   c) Suspend/resume: ActorSlot::suspended flag, ctx.suspend_self(), ctx.resume(target) with
-      auth (self or supervisor only). ResumeSignal for cross-worker resume.
-      5 scenario tests.
-
-9. **Capability model (CapabilitySet)** -- Per-actor permission set stored in the Environment.
-   Grants: with_send(addr), with_send_typed::<M>(addr), with_spawn(), with_service::<S>(),
-   with_monitor(addr). Enforced at Ctx level in send, spawn, stop_actor, monitor, and resource.
-   Opt-in: actors without a CapabilitySet are unrestricted (zero behavioral change). Self-send
-   always allowed. monitor() changed from -> MonitorRef to -> Result<MonitorRef, Error> (breaking
-   change, fixed mechanically in supervisor.rs, router.rs, and all test files). CtxCapabilities
-   extension trait for introspection. 11 scenario tests.
diff --git a/docs/development_history/PROCESS_RUNNER.md b/docs/development_history/PROCESS_RUNNER.md
deleted file mode 100644
index 2fbfa3b..0000000
--- a/docs/development_history/PROCESS_RUNNER.md
+++ /dev/null
@@ -1,434 +0,0 @@
-# Process Runner Design: Async Process Management in Swactor
-
-## Context
-
-Swactor is a synchronous, tick-based actor framework (Erlang-inspired). Actors must return quickly from `handle()` — blocking stalls the entire worker thread. There is no built-in async I/O.
-
-The goal: let actors manage long-lived async "processes" — OS subprocesses and SSH shells — with full lifecycle control. Must support both interactive use (live shell, bidirectional real-time I/O) and automated execution (run commands, stream output, report exit).
-
-Constraints from discussion:
-- Backends: SSH + local processes (two backends, not more)
-- Scale: Architecture should support thousands; first implementation handles tens
-- This is a standalone new feature — not related to or derived from the CI runner system
-
----
-
-## Architecture: State Machine + Driver + Process-as-Actor
-
-### Data Flow (full picture)
-
-```
-OS process stdout/stderr
-       │ (background thread reads pipe)
-       ▼
-  EventQueue (Arc<SegQueue>) — shared lock-free buffer
-       │ (background thread calls ProcessWaker → ExternalSender → PollTick)
-       ▼
-  Actor handle(PollTick)
-       │ calls driver.poll() which drains EventQueue
-       ▼
-  Vec<ProcessEvent>
-       │
-       ▼
-  session.apply(event) → Vec<ProcessAction>
-       │
-       ├─ Driver commands → driver.execute(action) → OS I/O
-       ├─ Notifications → ctx.send(subscriber, ProcessNotification)
-       └─ SelfTerminate → ctx.stop_self()
-```
-
-### The Layers
-
-| Layer | Purpose | Status |
-|-------|---------|--------|
-| 1 — ProcessSession | Pure-logic state machine | **Implemented** |
-| 2 — ProcessDriver trait + MockDriver | Driver abstraction + test double | **Implemented** |
-| 3 — Process Actor + ExternalSender | Swactor integration, waker, event queue | **Implemented** |
-| 4 — LocalDriver | `std::process::Command` + pipe I/O + signal | **Implemented** |
-| 5 — SshDriver | SSH library + channel I/O | Not started |
-
----
-
-## Implemented: Layers 1 + 2 (Pure Logic)
-
-Crate: `crates/process/` (`swactor-process`)
-
-### Layer 1 — ProcessSession (State Machine)
-
-The core state machine. Pure logic, no I/O, fully deterministic.
-
-**States:** `Starting` → `Running` → `Stopping` → `Exited`
-
-State transitions are monotonic — the state never goes backward. `Exited` is terminal.
-
-**Construction:**
-
-```rust
-let (session, initial_actions) = ProcessSession::new(spec);
-// initial_actions == [SpawnProcess { spec }]
-// session.state() == Starting
-```
-
-**Event loop:**
-
-```rust
-let actions = session.apply(event);
-for action in actions {
-    match action {
-        ProcessAction::SpawnProcess { .. } |
-        ProcessAction::WriteStdin { .. } |
-        ProcessAction::SendSignal { .. } |
-        ProcessAction::ResizePty { .. } |
-        ProcessAction::CloseStdin |
-        ProcessAction::ScheduleKillTimeout { .. } => driver.execute(action),
-
-        ProcessAction::NotifyStarted { subscribers } |
-        ProcessAction::NotifyOutput { subscribers, .. } |
-        ProcessAction::NotifyExited { subscribers, .. } |
-        ProcessAction::NotifyError { subscribers, .. } => { /* send to subscribers */ }
-
-        ProcessAction::SelfTerminate => { /* actor stops itself */ }
-    }
-}
-```
-
-**Key invariants (all verified by property-based tests):**
-- Invalid events produce `NotifyError` actions — never panic
-- `SelfTerminate` is always the last action when entering `Exited`
-- State monotonicity: Starting ≤ Running ≤ Stopping ≤ Exited
-- Subscriber count always matches add/remove operations
-- No panics for arbitrary event sequences
-
-**Event handling by state:**
-
-| Event | Starting | Running | Stopping | Exited |
-|-------|----------|---------|----------|--------|
-| Started | → Running (+ NotifyStarted) | error | error | error |
-| SpawnFailed | → Exited (+ NotifyError + SelfTerminate) | error | error | error |
-| OutputReceived | error | NotifyOutput | NotifyOutput | error |
-| Exited | error | → Exited (+ NotifyExited + SelfTerminate) | → Exited (+ NotifyExited + SelfTerminate) | error |
-| ConnectionLost | error | → Exited (+ NotifyError + SelfTerminate) | → Exited (+ NotifyError + SelfTerminate) | error |
-| WriteStdin | error | WriteStdin (or buffer/error) | error | error |
-| SendSignal | error | SendSignal | SendSignal (escalation) | error |
-| ResizePty | error | ResizePty | error | error |
-| CloseStdin | error | CloseStdin (+ clear buffer) | CloseStdin (+ set flag) | error |
-| CloseRequested | set deferred flag | → Stopping (+ SendSignal Terminate [+ ScheduleKillTimeout]) | no-op | error |
-| KillTimeout | silent | silent | SendSignal Kill | silent |
-| Subscribe | add subscriber | add subscriber | add subscriber | add subscriber |
-| Unsubscribe | remove subscriber | remove subscriber | remove subscriber | remove subscriber |
-| StdinWritten | update flow | update flow + drain buffer | update flow | update flow |
-| SignalSent | silent | silent | silent | silent |
-| PtyResized | silent | silent | silent | silent |
-
-**Special behaviors:**
-- **Close-before-start:** If `CloseRequested` arrives in `Starting`, a flag is set. When `Started` arrives, the session transitions through Running straight to Stopping and emits `SendSignal(Terminate)` (plus `ScheduleKillTimeout` if configured).
-- **Kill timeout:** When `spec.kill_timeout` is `Some(duration)`, entering `Stopping` emits `ScheduleKillTimeout { duration }` alongside `SendSignal(Terminate)`. If the process hasn't exited when the timeout fires, the `KillTimeout` event triggers `SendSignal(Kill)`. `KillTimeout` in non-Stopping states is silently consumed (harmless late arrival after the process already exited).
-- **Backpressure:** When `spec.stdin_buffer_limit` is `Some(limit)` and `pending_stdin_bytes >= limit`, `WriteStdin` events are buffered in a `VecDeque` instead of emitting actions. When `StdinWritten` acks reduce `pending_stdin_bytes` below the limit, buffered writes drain in FIFO order. The buffer is cleared on `CloseRequested`, `CloseStdin`, `ConnectionLost`, and `Exited`. When `stdin_buffer_limit` is `None`, all writes pass through immediately (original behavior).
-- **FlowControl:** `pending_stdin_bytes` is incremented on `WriteStdin` emission, decremented on `StdinWritten` receipt (saturating).
-- **Stdin closed:** Once `CloseStdin` is applied, further `WriteStdin` events produce `InvalidState` errors. Duplicate `CloseStdin` is a no-op. Closing stdin also clears any buffered writes.
-- **Late acks in Exited:** `StdinWritten`, `SignalSent`, `PtyResized`, and `KillTimeout` are silently consumed in all states (including Exited) — they never produce errors.
-
-### Types
-
-**ProcessSpec** — describes how to spawn a process:
-- `command: String`, `args: Vec<String>`, `env: HashMap<String, String>`
-- `working_dir: Option<String>`, `mode: ProcessMode`, `initial_pty_size: Option<PtySize>`
-- `kill_timeout: Option<Duration>` — escalate SIGTERM → SIGKILL after this duration (None = no escalation)
-- `stdin_buffer_limit: Option<usize>` — buffer stdin writes when pending bytes exceed limit (None = unlimited)
-
-**ProcessMode** — `Interactive` | `Automated` (Copy)
-
-**ExitStatus** — `Code(i32)` | `Signal(i32)` | `Unknown` (Copy)
-
-**Signal** — `Terminate` | `Kill` | `Hangup` | `Interrupt` | `Other(i32)` (Copy)
-
-**ProcessError** — `SpawnFailed { reason }` | `ConnectionLost { reason }` | `InvalidState { attempted, current_state }`
-
-**OutputStream** — `Stdout` | `Stderr` (Copy)
-
-**SubscriberSet** — deduplicated `Vec<ActorAddress>` with linear-scan dedup. Methods: `add()`, `remove()`, `snapshot()`, `count()`.
-
-### Layer 2 — ProcessDriver Trait + MockDriver
-
-```rust
-pub trait ProcessDriver: Send {
-    fn execute(&mut self, action: ProcessAction);
-    fn poll(&mut self) -> Vec<ProcessEvent>;
-}
-```
-
-**MockDriver** — test-oriented implementation:
-- `inject(event)` / `inject_many(events)` — queue events for `poll()`
-- `executed_actions()` — view recorded actions
-- `take_executed_actions()` — take + clear recorded actions
-- `pending_event_count()` — number of queued events
-- `poll()` drains all pending events, `execute()` records actions
-
----
-
-## Implemented: Layers 3 + 4 (Actor Integration + Local OS Processes)
-
-### ExternalSender (swactor core primitive)
-
-A `Clone + Send + Sync` handle for injecting messages into actor mailboxes from any thread. Lives in the `swactor` crate (because `Envelope` and `AddressMap` are `pub(crate)`).
-
-```rust
-// Create from a runtime
-let sender = runtime.create_sender();
-
-// Use from any thread (including I/O background threads)
-sender.send_to(actor_addr, MyMessage { ... })?;
-```
-
-**Implementation:** Clones of the runtime's `Arc<AddressMap>`, per-worker `Sender<Envelope>` channels, and `Arc<Vec<OnceLock<Thread>>>` for worker thread unparking. The `send_to` method looks up the actor's worker, pushes an envelope, and unparks the worker thread.
-
-**Changes to swactor core:**
-- `src/channel.rs` — Added `Clone` for `Sender<T>` (clones the inner `Arc`)
-- `src/runtime.rs` — Changed `worker_threads` from `Vec<OnceLock<Thread>>` to `Arc<Vec<OnceLock<Thread>>>`, added `ExternalSender` struct and `Runtime::create_sender()` factory
-
-### Layer 3 — Process Actor
-
-**`ProcessActor<D: ProcessDriver>`** — generic actor implementing `ActorInterface` with `Incoming = ProcessCommand`.
-
-**Message types:**
-
-```rust
-pub enum ProcessCommand {
-    WriteStdin { data: Vec<u8> },
-    SendSignal { signal: Signal },
-    ResizePty { size: PtySize },
-    CloseStdin,
-    Close,
-    Subscribe { address: ActorAddress },
-    Unsubscribe { address: ActorAddress },
-    PollTick,  // internal: sent by waker from I/O threads
-}
-
-pub enum ProcessNotification {
-    Started { process: ActorAddress },
-    Output { process: ActorAddress, data: Vec<u8>, stream: OutputStream },
-    Exited { process: ActorAddress, status: ExitStatus },
-    Error { process: ActorAddress, error: ProcessError },
-}
-```
-
-**Handle ordering:** Commands are processed first, then I/O events are drained. This ensures `Subscribe` registers the subscriber before `Started` (or other buffered events) get dispatched. `PollTick` has no command effect — it just triggers the drain.
-
-**Event queue (`EventQueue`):** Thin wrapper around `Arc<SegQueue<ProcessEvent>>`. I/O threads push events; `driver.poll()` drains them.
-
-**Waker (`ProcessWaker`):** `Arc<dyn Fn() + Send + Sync>` — constructed with a closure that sends `PollTick` via `ExternalSender`. I/O threads call `waker.wake()` after pushing events.
-
-**Factory functions:**
-
-```rust
-// Spawn with real OS subprocess
-let addr = spawn_local_process(ctx, &sender, spec)?;
-
-// Spawn with custom driver (for testing)
-let addr = spawn_process(ctx, &sender, spec, driver, waker_slot)?;
-```
-
-The factory creates the driver, session, and actor, spawns it, then fills the waker slot with a closure that sends `PollTick` to the actor's address.
-
-### Layer 4 — LocalDriver
-
-Real OS process management via `std::process::Command` with piped I/O.
-
-**Components:**
-
-| File | Purpose |
-|------|---------|
-| `local/mod.rs` | `LocalDriver` struct, `ProcessDriver` impl, process spawning |
-| `local/pipes.rs` | Background thread reading stdout/stderr pipes (8KB buffer) |
-| `local/signal.rs` | `Signal` → libc constant mapping, `kill()` wrapper |
-| `local/wait.rs` | Background `waitpid()` thread with WIFEXITED/WIFSIGNALED decoding |
-
-**Thread structure per process:**
-- 1 stdout reader thread
-- 1 stderr reader thread
-- 1 waitpid thread
-
-Each thread pushes events to the shared `EventQueue` and calls `waker.wake()`.
-
-**Drop behavior:** Closes stdin, kills the process, waits for exit.
-
-**PTY support:** Not yet implemented — `ResizePty` is a no-op that returns a `PtyResized` ack. Pipe-based I/O only in this phase.
-
----
-
-## File Structure
-
-```
-swactor (root crate):
-  src/
-    channel.rs       — + Clone for Sender<T>
-    runtime.rs       — + ExternalSender, create_sender(), Arc<worker_threads>
-
-crates/process/ (swactor-process):
-  Cargo.toml         — + crossbeam-queue, libc deps
-  src/
-    lib.rs           — module declarations + re-exports
-    types.rs         — ProcessSpec, ProcessMode, ExitStatus, Signal, PtySize, etc.
-    event.rs         — ProcessEvent enum
-    action.rs        — ProcessAction enum + OutputStream
-    subscriber.rs    — SubscriberSet
-    session.rs       — ProcessSession state machine
-    driver.rs        — ProcessDriver trait
-    mock.rs          — MockDriver
-    queue.rs         — EventQueue (Arc<SegQueue>)
-    waker.rs         — ProcessWaker (Arc<dyn Fn>)
-    message.rs       — ProcessCommand, ProcessNotification
-    actor.rs         — ProcessActor<D> impl ActorInterface
-    spawn.rs         — spawn_local_process(), spawn_process() factory functions
-    local/
-      mod.rs         — LocalDriver struct + ProcessDriver impl
-      pipes.rs       — Pipe reader background threads
-      signal.rs      — OS signal delivery
-      wait.rs        — waitpid background thread
-  tests/
-    session_scenarios.rs  — 26 session state machine scenario tests
-    proptest_session.rs   — 5 property-based session tests (KillTimeout included in arb_event)
-    actor_scenarios.rs    — 6 actor integration tests (TestDriver)
-    local_driver.rs       — 6 LocalDriver integration tests (real processes)
-    e2e_process.rs        — 2 end-to-end tests (Runtime + LocalDriver + real processes)
-```
-
----
-
-## Test Coverage
-
-### Layers 1 + 2 — Session + MockDriver (31 tests)
-
-**Scenario tests** (26 tests in `tests/session_scenarios.rs`):
-1. Happy path automated: new → Started → OutputReceived×N → Exited(0)
-2. Interactive session with subscriber lifecycle (add/remove, verify notification membership)
-3. Spawn failure → error notification + SelfTerminate
-4. Connection loss mid-run → Exited with Unknown status
-5. Close before start → deferred SIGTERM on belated start
-6. Invalid event in Starting → NotifyError (no panic)
-7. Invalid event in Exited → NotifyError (no panic)
-8. Stdin closed then write → NotifyError
-9. MockDriver round-trip (driver + session in simulated tick loop)
-10. Signal escalation in Stopping (Kill after Terminate)
-11. Late acks in Exited silently consumed
-12. Flow control tracks pending stdin bytes (including saturating subtract)
-13. CloseStdin allowed in Stopping
-14. Connection loss in Stopping → Exited
-15. Duplicate CloseRequested in Stopping → no-op
-16. CloseRequested with kill_timeout emits both SendSignal{Terminate} and ScheduleKillTimeout
-17. Close-before-start with kill_timeout schedules timer on belated start
-18. KillTimeout in Stopping → SendSignal{Kill}, state stays Stopping
-19. KillTimeout silently consumed in Starting, Running, Exited
-20. CloseRequested without kill_timeout emits no ScheduleKillTimeout
-21. Full escalation flow: CloseRequested → KillTimeout → Exited{Signal(9)}
-22. Backpressure buffers writes when pending bytes exceed limit
-23. StdinWritten ack drains buffered chunks in FIFO order
-24. CloseRequested clears stdin buffer
-25. No backpressure when limit is None (all writes pass through)
-26. Exited clears stdin buffer
-
-**Property-based tests** (5 tests in `tests/proptest_session.rs`):
-1. No panics for arbitrary event sequences (up to 50 events, including KillTimeout)
-2. Exited is terminal (state never leaves Exited)
-3. SelfTerminate always last action when entering Exited
-4. Subscriber count matches add/remove operations
-5. State monotonicity (state ordinal never decreases)
-
-### Layer 3 — Actor Integration (6 tests)
-
-Tests in `tests/actor_scenarios.rs` using a `TestDriver` (shared `EventQueue` + recorded actions):
-
-1. **Happy path** — spawn → Started → Output → Exited → subscriber gets all notifications → actor stops
-2. **PollTick drains queued events** — three events buffered, single PollTick delivers all three notifications
-3. **Close triggers graceful shutdown** — Close command produces SIGTERM via driver
-4. **WriteStdin/SendSignal forwarded** — commands reach the driver as actions
-5. **Spawn failure** — error notification sent to subscriber, actor self-terminates
-6. **Subscribe/Unsubscribe routing** — two subscribers, unsubscribe one, only remaining gets subsequent notifications
-
-### Layer 4 — LocalDriver Integration (6 tests)
-
-Tests in `tests/local_driver.rs` using real OS processes, no actor layer:
-
-1. **`echo hello`** — Started + OutputReceived("hello\n") + Exited(0)
-2. **`cat` stdin echo** — write "ping\n" → read "ping\n" back → close stdin → Exited(0)
-3. **`sleep 60` + SIGTERM** — Started → send Terminate → Exited(Signal)
-4. **Bad command** → SpawnFailed
-5. **`seq 1 10000`** — large output integrity (no data loss, correct start/end)
-6. **Kill timeout escalation** — spawn SIGTERM-ignoring process, ScheduleKillTimeout fires KillTimeout, SIGKILL terminates it
-
-### End-to-End (2 tests)
-
-Tests in `tests/e2e_process.rs` — full stack (Runtime + ExternalSender + ProcessActor + LocalDriver + real process):
-
-1. **`echo hello` lifecycle** — spawn, subscribe, verify Started → Output("hello") → Exited(0) in order
-2. **Bad command** — spawn nonexistent binary, verify Error notification arrives
-
----
-
-## Design Decisions Made
-
-1. **ExternalSender over WorkerExtension:** The I/O → actor bridge is a general-purpose swactor core primitive, not process-specific. Any crate can use `ExternalSender` to inject messages from background threads.
-
-2. **Handle ordering (command first, then drain):** Processing the incoming command before draining I/O events ensures that `Subscribe` registers the subscriber before buffered events (like `Started`) are dispatched. This avoids a race where early lifecycle events are sent to an empty subscriber list.
-
-3. **ProcessActor is generic over `D: ProcessDriver`:** Enables testing with `TestDriver` while production uses `LocalDriver`. No trait object overhead.
-
-4. **Thread-per-pipe model:** Each LocalDriver spawns 3 threads (stdout reader, stderr reader, waitpid). Simple, debuggable, correct for Phase 1 (tens of processes).
-
-5. **EventQueue is lock-free:** Uses `crossbeam_queue::SegQueue` — no contention between I/O writer threads and the actor's poll draining.
-
-6. **Waker uses OnceLock:** The waker slot (`Arc<OnceLock<ProcessWaker>>`) is filled after the actor address is known. I/O threads that call `waker.get()` before it's set simply skip the wake — events accumulate in the EventQueue and are drained on the next message.
-
----
-
-## Next Steps
-
-### Near-term
-
-1. **PTY support for Interactive mode** — The `LocalDriver` currently uses pipes only. Interactive mode needs PTY allocation (via raw libc: `openpty()` → `fork()` → `setsid()` + `ioctl(TIOCSCTTY)` + `dup2` + `execvp`), `SIGWINCH` for resize, and merged stdout/stderr on a single PTY master FD. The `ResizePty` action is already wired through as a no-op.
-
-2. **Output buffering policies** — Subscribers currently receive every raw byte chunk. Add optional line-buffering or size-buffering in the session layer for consumers that want complete lines.
-
-### Layer 5 — SshDriver
-
-SSH-based process management. Same `ProcessDriver` trait, different backend.
-
-**Open decisions:**
-- **SSH library:** `russh` (pure Rust, async — needs tokio bridge) vs. `ssh2` (libssh2 bindings, synchronous — fits the thread model naturally)
-- **Authentication:** Password, key file, agent forwarding, or pluggable credential provider
-- **Connection multiplexing:** One SSH connection per process actor, or connection pool with multiple channels
-- **Health monitoring:** Heartbeat/keepalive to detect connection drops → `ConnectionLost` events
-
-### Scaling Path
-
-The architecture isolates scaling concerns in the driver layer:
-
-- **Phase 1 (tens):** Each driver spawns OS threads for I/O. Simple, debuggable. ← **current**
-- **Phase 2 (hundreds):** Shared thread pool for driver I/O. Replace per-process threads with a pool that multiplexes reads across processes.
-- **Phase 3 (thousands):** Async internals (tokio tasks for I/O). State machine and actor layers unchanged — only `ProcessDriver` implementations change.
-
----
-
-## Alternative Approaches Considered
-
-### WorkerExtension Approach
-
-Managing processes as a per-worker extension (like TimerWheel). Rejected because:
-- Ties processes to specific workers, complicating supervision
-- Processes can't benefit from the actor model's naming, grouping, and monitoring
-- The API would be less intuitive than "send a message to the process"
-- Tick-bound latency is problematic for interactive use
-
-### Pure Bridge Actor Approach
-
-A single centralized bridge actor owning all processes (like IrohDriver). Rejected as the primary design because:
-- Doesn't give individual processes actor identity — can't supervise, name, or monitor them independently
-- Centralizes failure — the bridge dying kills all processes
-- However, this pattern does appear inside the recommended approach: the driver layer within each process actor is essentially a tiny bridge
-
-### Pure Process-as-Actor (without state machine)
-
-Just actors with embedded I/O logic, no state machine separation. Rejected because:
-- Untestable without real processes or SSH connections
-- Can't simulate
-- Backend-specific logic (SSH vs. local) interleaved with lifecycle logic
diff --git a/docs/development_history/STREAMS.md b/docs/development_history/STREAMS.md
deleted file mode 100644
index 1876c0a..0000000
--- a/docs/development_history/STREAMS.md
+++ /dev/null
@@ -1,475 +0,0 @@
- Swactor Stream Primitive -- Architectural Design
-
- Context
-
- Swactor has a distributed actor runtime with SWIM membership, Kademlia routing, and a content-addressed datastore. The current datastore
- transfers blobs one chunk at a time via actor message round-trips -- extremely slow for large objects. Beyond the datastore, the system
- needs a general-purpose bulk data transfer primitive for ML workloads (training data, weight checkpoints, gradient exchange), real-time
- media (video/voice), and future game state replication.
-
- The stream primitive is a high-performance data channel between nodes that actors negotiate and manage but do not sit on the data path of.
-  It should achieve top-class throughput by leveraging QUIC's multiplexed streams directly, bypassing the actor mailbox system for data
- transfer.
-
- Decisions made:
- - Data path: StreamHandle with try_read/try_write; actors receive lightweight notification messages but data bypasses mailboxes
- - Reliability: Reliable-only MVP; abstraction designed so unreliable (QUIC datagrams) can be added later
- - Locality: Cross-node only; same-node actors use regular messages
- - Crate: New crates/streams/ crate
-
- ---
- 1. Core Concept: Control Plane vs Data Plane
-
- The fundamental architecture separates stream management (control plane) from data transfer (data plane).
-
- Control plane -- actor messages through normal mailboxes:
- - Stream negotiation (open, accept, reject)
- - Parameter configuration (buffer sizes, chunk sizes, parallelism)
- - Lifecycle events (established, closed, error)
- - Progress/health notifications
-
- Data plane -- bypasses actors entirely:
- - Raw bytes flow through QUIC streams on the iroh transport
- - Managed by async tasks on the IrohDriver's tokio runtime
- - Actors interact via StreamHandle objects (try_read/try_write), not mailbox messages
- - QUIC's built-in flow control handles backpressure
-
- CONTROL PLANE (actor messages, mailboxes, worker ticks)
- +--------+  StreamOpen  +-----------+  StreamAccept  +--------+
- | Actor  | -----------> |  Stream   | <------------- | Actor  |
- | (nodeA)|              |  Manager  |                |(nodeB) |
- +--------+              +-----------+                +--------+
-      |                       |                           |
-      | StreamReady(handle)   |                           | StreamReady(handle)
-      v                       v                           v
- DATA PLANE (tokio tasks, QUIC streams, pre-allocated buffers)
- +----------+   bytes    +----------+    bytes    +----------+
- | SendHalf | =========> |   QUIC   | =========>  | RecvHalf |
- | (writer) |  N parallel| streams  |  N parallel | (reader) |
- +----------+   stripes  +----------+   stripes   +----------+
-
- ---
- 2. Stream Identity and Addressing
-
- StreamId: A 16-byte random identifier, generated by the initiator during negotiation. Deliberately not an ActorAddress -- streams are not
- actors, are not placed on workers, and are not discoverable via Kademlia. Keeping them out of the AddressMap avoids polluting the actor
- routing hot path.
-
- Full stream address: The tuple (NodeId, StreamId) is globally unique. A node can host many concurrent streams to many peers.
-
- ALPN separation: Streams use a new protocol identifier swactor/stream/1, separate from the existing swactor/swim/1 used for membership.
- This means:
- - The iroh accept loop can distinguish stream connections from protocol messages immediately
- - Stream data never blocks or interferes with cluster heartbeats
- - Stream connections can have different tuning in the future
-
- ---
- 3. QUIC Stream Utilization
-
- Parallel Stripes for Blob Transfers
-
- For a single large transfer, multiple QUIC streams are opened in parallel on the same QUIC connection. Each stream carries a disjoint
- range of the data. This is the stripe count, negotiated during handshake (default: 4).
-
- Why multiple streams? A single QUIC stream can be limited by per-stream receive-window backpressure. Multiple streams allow the sender to
- push data into QUIC's send buffer more aggressively, keeping the congestion window filled. Measurements from quinn/s2n-quic show 2-8
- parallel streams can improve throughput 2-4x on high-bandwidth-delay-product links.
-
- Stream layout per transfer:
- - Stream 0 (control stream): Bidirectional QUIC stream. Carries the handshake header and out-of-band signals (completion, cancel, errors,
- health). Stays open for the transfer's lifetime.
- - Streams 1..N (data stripes): Unidirectional QUIC streams, each carrying sequential chunks. Stripe assignment is round-robin by chunk
- index.
-
- Connection Reuse
-
- Multiple concurrent streams between the same two nodes share one QUIC connection (on the stream ALPN). QUIC multiplexing handles this
- natively. The streams crate maintains a connection cache separate from the SWIM connection cache.
-
- ---
- 4. Wire Format
-
- Two layers of wire format: the stream-level protocol (negotiation + data framing) and the blob transfer application protocol that rides on
- top of it.
-
- Control Stream Header (stream-level)
-
- [2B magic: 0x53 0x57]       -- "SW"
- [1B version: 0x01]
- [16B StreamId]
- [1B mode]                    -- 0x01=BlobTransfer, 0x02=ContinuousStream (future)
- [1B stripe_count]            -- parallel data stripes (1-255)
- [4B frame_size (BE u32)]     -- maximum frame payload size in bytes
- [4B metadata_len (BE u32)]
- [N bytes metadata]           -- negotiation payload (e.g., ContentHash for blob transfer)
-
- Data Stripe Frame Format (stream-level)
-
- [4B frame_len (BE u32)]      -- 0 = end-of-stripe
- [N bytes payload]            -- raw data bytes
-
- Deliberately minimal. No per-frame type tags (QUIC provides ordered reliable delivery), no per-frame checksums on the wire (QUIC provides
- TLS integrity for transport), no per-frame metadata. Every byte of overhead on the hot path costs throughput.
-
- BlobTransfer Application Protocol
-
- For blob transfers, the `StreamConfig.metadata` carries the 32-byte `ContentHash` of the requested blob (so the serve side knows what to
- send). The actual blob data flows over the StreamHandle with this application-level framing:
-
- [4B manifest_json_length (u32 BE)]
- [N bytes manifest JSON]         -- serialized ObjectManifest
- [chunk_0 raw bytes]             -- size from manifest.chunks[0].size
- [chunk_1 raw bytes]             -- size from manifest.chunks[1].size
- ...
-
- The receiver knows each chunk's expected size and blake3 hash from the manifest. Each chunk is verified individually on arrival:
- blake3(chunk_data) == chunk_ref.hash. Corrupted chunks cause immediate transfer failure. This is implemented by the `send_blob` and
- `recv_blob` async functions in `crates/datastore/src/blob_transfer.rs`.
-
- Note: the blob transfer protocol sends chunks sequentially through the StreamHandle, which distributes data frames across stripes via the
- data-plane layer's round-robin. Individual chunks are not split across stripes -- the stripe layer is transparent to the application
- protocol.
-
- ---
- 5. Buffering Strategy
-
- Pre-allocated Sliding Window (Zero Allocation on Hot Path)
-
- The buffer pool is a sliding window, not a store. It never holds the entire blob in memory -- data flows through it like water through a
- pipe. A 1TB transfer uses the same ~4MB of buffer memory as a 1MB transfer; only the duration changes.
-
- All buffers are allocated during stream setup, not per-frame.
-
- Sender pipeline (per stripe, double-buffered):
- Source (disk/memory/computation)
-   → [Buffer A: being filled from source]
-   → [Buffer B: being written to QUIC]
-   → Buffer B recycled → becomes the next Buffer A
-   → repeat until source exhausted
- One buffer is being filled while the other is being sent. When QUIC accepts Buffer B's bytes, it's recycled and refilled from the source.
- The source can be disk I/O, a computation producing data, or anything that yields bytes.
-
- Receiver pipeline (per stripe, double-buffered):
- QUIC recv stream
-   → [Buffer A: being filled from QUIC]
-   → [Buffer B: being written to disk/consumed]
-   → Buffer B recycled → becomes the next Buffer A
-   → repeat until stream ends
- The receiver reads from QUIC into one buffer while the previous buffer is being written to disk (for blob transfer) or consumed by the
- application. Buffers are recycled, never allocated mid-transfer.
-
- Backpressure chain (end-to-end):
- Source read speed
-   → fills sender buffer pool (2 per stripe)
-   → QUIC congestion window
-   → network bandwidth
-   → QUIC receive window
-   → fills receiver buffer pool (2 per stripe)
-   → sink write speed (disk I/O, consumer processing)
-
- If ANY link is slow, pressure propagates backward automatically.
- No custom flow control needed -- QUIC handles it.
-
- Sizing:
- - Pool: stripe_count * 2 buffers per side = 8 buffers (at 4 stripes)
- - Frame size: 256KB per frame (separate from the datastore's 1MB storage chunk size)
- - Total memory per stream direction: 8 x 256KB = 2MB
- - Total for a bidirectional transfer: ~4MB, regardless of blob size
- - At ~1200 bytes per QUIC packet, 256KB = ~213 packets. Smaller blast radius on packet loss than 1MB, better interleaving across stripes,
- aligns with OS page sizes.
-
- TB-Scale Considerations
-
- For very large transfers (100GB+ ML weights, TB-scale training data), additional design considerations apply:
-
- Manifest streaming: At 1MB datastore chunks, a 1TB blob has ~1M chunks. Each ChunkRef is ~40 bytes, so the manifest is ~40MB. This is too
- large for a single negotiation payload. The current implementation sends the manifest as a JSON preamble on the data stream itself (not in
- the negotiation metadata). For TB-scale, the manifest could be streamed progressively instead of loaded all at once.
-
- Per-chunk verification on arrival: The receiver verifies each chunk individually as it arrives: blake3(chunk_data) == chunk_ref.hash.
- This is implemented in `recv_blob`. A corrupted chunk causes immediate transfer failure. This catches problems early rather than waiting
- for full reassembly.
-
- Progressive resume tokens: Resume tokens are emitted periodically (e.g., every 1000 chunks or every 256MB, whichever comes first), not
- just on failure. The sender acknowledges receipt of resume tokens. On connection loss, the receiver persists the latest resume token, and
- a new stream can resume from that point. For a 1TB transfer, a resume token with a 1M-bit BitVec is ~125KB -- cheap to exchange.
- (Not yet implemented -- the ResumeToken type exists but nothing emits or consumes it.)
-
- Disk I/O as the bottleneck: For TB-scale over fast networks (10Gbps+), disk I/O often becomes the bottleneck rather than the network. The
- buffering strategy handles this naturally: when disk writes slow down, the receiver's buffer pool fills, QUIC backpressure kicks in, and
- the sender slows to match. No special handling needed -- the pipeline self-regulates. For maximum disk throughput, the receiver can use
- O_DIRECT or memory-mapped writes, but this is an implementation optimization, not an architectural decision.
-
- Stripe count scaling: For very high bandwidth links, the default 4 stripes may not be enough to saturate the connection. The stripe count
- should be configurable up to 16, negotiated during handshake based on the expected transfer size and link characteristics. A heuristic:
- min(16, max(4, total_chunks / 1000)) -- more stripes for larger transfers.
-
- ---
- 6. StreamHandle -- The Actor-Facing API
-
- The StreamHandle is a lightweight, Send (but not Clone) object that actors store in their state. It communicates with the data-plane tokio
-  tasks via channels internally.
-
- Writer interface:
- - try_write(data: &[u8]) -> Result<usize, StreamError> -- Non-blocking. Returns bytes accepted.
- - flush() -- Signal that buffered data should be sent.
- - close() -- Graceful close.
-
- Reader interface:
- - try_read(buf: &mut [u8]) -> Result<usize, StreamError> -- Non-blocking. Returns bytes read, 0 if none available.
- - has_data() -> bool -- Check if data is available without consuming it.
-
- BlobTransfer Async Functions
-
- Rather than a wrapper object, blob transfer uses standalone async functions that run inside tokio tasks (spawned after StreamReady). These
- functions loop over try_write/try_read with tokio::task::yield_now() for cooperative scheduling:
-
- - send_blob(send, manifest, read_chunk) -- Writes the manifest preamble, then calls read_chunk(hash) for each chunk on-demand and writes
- it. At most one chunk is in memory at a time on the sender side. The read_chunk callback allows any data source (BlobStore via Inbox,
- in-memory, etc).
- - recv_blob(recv) -- Reads the manifest, then reads and blake3-verifies each chunk. Returns ReceivedBlob { manifest, chunks }.
- - poll_inbox(inbox, timeout) -- Async version of the bridge.rs poll_response pattern. Yields instead of thread::sleep.
-
- These live in crates/datastore/src/blob_transfer.rs. The key insight: since actors can't await futures, the pattern is for the actor to
- receive StreamReady, extract the StreamHandle via OneShot::take(), spawn a tokio task for the I/O loop, then stop itself. The tokio task
- sends results back to other actors via runtime.send_to().
-
- Why non-blocking? Actor handlers are synchronous (fn handle(&mut self, ctx: &Ctx, msg)). They cannot await futures. The try_read/try_write
-  pattern fits naturally. The tokio task bridge is the mechanism for async I/O.
-
- ---
- 7. Actor Integration: Negotiation Protocol
-
- Opening a Stream (Initiator)
-
- 1. Actor sends a StreamOpen control message (through normal actor mailbox routing) to a StreamManager system actor. Contains: target_node:
-  NodeId, mode, metadata (e.g., ContentHash + manifest for blob transfer), reply_to: ActorAddress.
- 2. StreamManager validates the request, allocates a StreamId, and posts an async task to the tokio runtime that:
-   - Opens a QUIC connection to the target (stream ALPN)
-   - Opens the control bidirectional stream
-   - Sends the stream header
-   - Waits for accept/reject
- 3. On accept: StreamManager sends StreamReady { stream_id, handle: StreamHandle } back to the requesting actor.
-
- Accepting a Stream (Receiver)
-
- 1. IrohDriver's accept loop receives connection on stream ALPN.
- 2. Reads control stream header, extracts StreamId + mode + metadata.
- 3. Sends StreamIncoming actor message to local StreamManager.
- 4. StreamManager routes to registered stream acceptors (actors that called StreamListen).
- 5. Matching actor receives StreamOffer { stream_id, mode, metadata } in its mailbox.
- 6. Actor sends StreamAccept or StreamReject back to StreamManager.
- 7. On accept: StreamManager allocates buffers, spawns data-plane tasks, sends StreamReady { handle } to the accepting actor.
-
- Notification Model (Hybrid)
-
- Stream data bypasses mailboxes, but actors need to know when data is available:
-
- - The data-plane tasks inject lightweight StreamEvent sentinel messages into the owning actor's mailbox when state changes: DataReady,
- WriteReady, Closed, Error.
- - Coalescing: An atomic flag prevents duplicate notifications. Set when notification posted, cleared when actor handles it. A
- high-throughput stream generates at most one DataReady per actor tick, not one per frame.
- - The actor's handle_any dispatches StreamEvent via downcast (same mechanism as Down and ActorExited today -- no core trait changes
- needed).
- - Actors can also proactively call handle.try_read() from any handler, not just in response to DataReady.
-
- ---
- 8. The StreamManager Actor
-
- A system actor spawned alongside the IrohDriver, registered under a well-known name. It is the bridge between the actor world and the
- stream data plane.
-
- Responsibilities:
- - Registry of active streams: StreamId -> StreamState
- - Handle StreamOpen / StreamAccept / StreamReject / StreamListen / StreamClose messages
- - Spawn and supervise data-plane tokio tasks
- - Monitor stream-holding actors; clean up streams when actors die
- - Expose stream metrics (active streams, throughput, errors) for the dashboard
-
- Communication with tokio runtime: Uses tokio::sync::mpsc and tokio::sync::oneshot channels. Posts commands to async tasks, receives
- results as actor messages (via the Inbox pattern already used by DatastoreBridge).
-
- ---
- 9. Flow Control and Backpressure
-
- Three layers, all leveraging what QUIC already provides:
-
- 1. QUIC-level: Per-stream and per-connection flow control (receive window, congestion window). This is the primary mechanism. Not
- duplicated.
- 2. Buffer pool saturation: When receiver's pre-allocated buffer pool is full, the recv-side tokio task stops reading from QUIC. QUIC's
- receive window closes, sender stops transmitting. Natural backpressure without custom protocol.
- 3. StreamHandle backpressure: try_write() returns 0 bytes accepted when the send buffer is full. The actor knows to back off or buffer
- internally.
-
- No custom flow control protocol. QUIC's congestion control (Cubic/BBR) is battle-tested. Adding application-level flow control would add
- complexity and latency without benefit.
-
- Cancellation
-
- - Cooperative: StreamCancel signal on the control stream
- - Abrupt: reset() on the QUIC streams
- - Nuclear: close the QUIC connection (node shutdown only)
-
- ---
- 10. Error Handling and Recovery
-
- Failure Modes
-
- ┌──────────────────┬──────────────────────┬────────────────────────────────────────────────┐
- │     Failure      │      Detection       │                    Behavior                    │
- ├──────────────────┼──────────────────────┼────────────────────────────────────────────────┤
- │ Frame corruption │ QUIC TLS + checksums │ Automatic retransmit                           │
- ├──────────────────┼──────────────────────┼────────────────────────────────────────────────┤
- │ Stream reset     │ QUIC RST_STREAM      │ StreamEvent::Error to owning actor             │
- ├──────────────────┼──────────────────────┼────────────────────────────────────────────────┤
- │ Connection loss  │ QUIC timeout         │ StreamEvent::Error on all streams to that node │
- ├──────────────────┼──────────────────────┼────────────────────────────────────────────────┤
- │ Node death       │ SWIM declares Dead   │ StreamEvent::Error on all streams to that node │
- ├──────────────────┼──────────────────────┼────────────────────────────────────────────────┤
- │ Owner actor dies │ Worker cleanup phase │ Stream closed, remote side notified            │
- └──────────────────┴──────────────────────┴────────────────────────────────────────────────┘
-
- Resume Tokens for Blob Transfers (Not Yet Implemented)
-
- For large transfers, the receiver periodically emits a ResumeToken on the control channel:
-
- ResumeToken {
-     stream_id: StreamId,
-     manifest_hash: ContentHash,
-     chunks_received: BitVec,     -- which chunks confirmed stored
- }
-
- On failure, the initiator can open a new stream with the ResumeToken. The sender skips confirmed chunks. This avoids retransmitting
- terabytes when a checkpoint transfer fails near completion. Leverages the existing ObjectManifest/ChunkRef model.
-
- The ResumeToken type is defined in crates/streams/src/types.rs but emission/consumption logic is deferred to a future stage.
-
- ---
- 11. Integration with Existing Datastore
-
- The stream primitive adds a parallel transfer path to the datastore. The existing chunk-at-a-time TransferActor is preserved for
- compatibility; the new stream path is used when stream support is configured.
-
- Architecture:
-
- DOWNLOAD SIDE:                              SERVE SIDE:
-
- DatastoreNode                               StreamListener
-   │ DownloadViaStream                       (Incoming = StreamNotification)
-   │ ctx.spawn(StreamDownloader)              │ on StreamOffer → HandleStreamOffer
-   ▼                                          ▼
- StreamDownloader                           DatastoreNode
- (Incoming = StreamNotification)              │ HandleStreamOffer
-   │ on_start: Open → StreamManager           │ ctx.spawn(StreamServer)
-   │ StreamReady → tokio task:               ▼
-   │   recv_blob → verify → write chunks   StreamServer
-   │   send completion to DatastoreNode    (Incoming = StreamNotification)
-   ▼                                          │ on_start: Accept → StreamManager
- DatastoreNode                                │ StreamReady → tokio task:
-   │ StreamDownloadComplete                   │   read manifest from BlobStore (Inbox)
-   │ persist metadata, reply to caller        │   for each chunk: read from BlobStore,
-                                              │     write to stream (one at a time)
-                                              │   close stream
-
- Design principles:
- - No bridge/shim actors. Stream-facing actors use Incoming = StreamNotification directly.
- - No preloading all chunks into memory. Chunks flow on-demand: storage → network.
- - DatastoreNode stays simple (fire-and-forget coordination). The stream actors own the full I/O lifecycle.
- - After receiving StreamReady, actors spawn tokio tasks for I/O. Tokio tasks communicate results back via runtime.send_to().
- - StreamServer reads chunks on-demand — at most one chunk in memory at a time.
-
- Flow:
- 1. DatastoreNode receives DownloadViaStream { content_hash, source_node, reply_to }.
- 2. Spawns a StreamDownloader actor, which sends Open to StreamManager with metadata = content_hash.0 (32 bytes).
- 3. Remote StreamListener receives StreamOffer, extracts ContentHash from metadata, sends HandleStreamOffer to DatastoreNode.
- 4. Remote DatastoreNode spawns a StreamServer actor, which sends Accept to StreamManager.
- 5. StreamServer receives StreamReady, spawns tokio task: reads manifest from BlobStore, then streams each chunk on-demand via send_blob.
- 6. StreamDownloader receives StreamReady, spawns tokio task: calls recv_blob, writes chunks to BlobStore (fire-and-forget), notifies
-    DatastoreNode of completion.
- 7. DatastoreNode creates ObjectEntry and persists via MetadataActor, which sends PutOk to the original caller.
-
- This eliminates the round-trip-per-chunk bottleneck. A 1GB object with 1MB chunks currently requires 1,024 sequential round-trips. With
- streams and 4 parallel stripes, the entire blob flows in a single burst limited only by network bandwidth.
-
- ---
- 12. Growth Path
-
- Phase 1 (MVP): Reliable Ordered Blob Transfer — IMPLEMENTED
-
- - StreamConfig with BlobTransfer mode only
- - New ALPN swactor/stream/1 handler
- - StreamOpen/StreamAccept handshake
- - Parallel striped data transfer
- - StreamHandle with try_read/try_write
- - StreamManager actor
- - Datastore integration (StreamListener, StreamDownloader, StreamServer actors)
- - BlobTransfer application protocol (send_blob/recv_blob with per-chunk blake3 verification)
-
- Remaining MVP work:
- - Two-node integration test (real QUIC, full download flow)
- - Resume tokens (ResumeToken type exists, emission/consumption not yet wired)
-
- Phase 2: Continuous Streams
-
- - ContinuousStream mode (no total size known)
- - Single bidirectional QUIC stream (no striping)
- - Variable-sized message frames
- - Bounded ring buffer backpressure
- - Enables: federated learning gradient streams, data pipelines
-
- Phase 3: Unreliable Datagrams
-
- - UnreliableSequenced reliability mode using QUIC datagrams
- - Sequence-based frame dropping (latest-wins)
- - Receiver-side jitter buffer
- - Advisory StreamThrottle on control channel
- - Enables: voice/video, game entity state replication
-
- Phase 4: Priority and QoS
-
- - priority: u8 in StreamConfig
- - Priority-aware write scheduler across concurrent streams
- - QUIC stream priority hints
- - Per-stream health reporting and dashboard integration
- - Enables: simultaneous video + checkpoint without starvation
-
- Phase 5: Parallel Unordered Transfer
-
- - ReliableUnordered mode: parallel QUIC streams per chunk, independent delivery
- - Configurable parallelism
- - Enables: gradient exchange for distributed ML (any chunk consumable independently)
-
- ---
- 13. Key Design Decisions Summary
-
- ┌───────────────────┬───────────────────────────────────────────────┬────────────────────────────────────────────────────────────┐
- │     Decision      │                    Choice                     │                       Rationale                            │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Data path         │ StreamHandle bypass, tokio task bridge        │ Max throughput; actors manage, don't bottleneck            │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Stream identity   │ 16-byte StreamId, not ActorAddress            │ Streams are not actors; avoid polluting address space      │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ ALPN              │ Separate swactor/stream/1                     │ Isolate from SWIM; no interference with heartbeats         │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Parallel stripes  │ 4 QUIC streams per blob transfer              │ Saturate congestion window on high-BDP links               │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Flow control      │ QUIC built-in only                            │ Don't duplicate what the transport does well               │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Wire format       │ 4-byte length prefix, no type tags            │ Minimal per-frame overhead                                 │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Stream chunk size │ 256KB                                         │ Better packet-loss resilience, page-aligned                │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Buffering         │ Pre-allocated slab per stream                 │ Zero allocation on hot path                                │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Blob protocol     │ Async functions, not wrapper object           │ Simpler; tokio tasks own the I/O loop after StreamReady    │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Actor pattern     │ Spawn actor → StreamReady → tokio task → stop │ Clean separation; actor negotiates, task does I/O          │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Chunk I/O         │ On-demand via Inbox polling (poll_inbox)      │ At most 1 chunk in memory; no preloading                   │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Crate             │ New crates/streams/                           │ Optional, clean dependency graph                           │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ MVP scope         │ Reliable ordered only                         │ Covers ML + datastore; unreliable added later              │
- ├───────────────────┼───────────────────────────────────────────────┼────────────────────────────────────────────────────────────┤
- │ Locality          │ Cross-node only                               │ Focused scope; same-node uses regular messages             │
- └───────────────────┴───────────────────────────────────────────────┴────────────────────────────────────────────────────────────┘
diff --git a/docs/development_history/STREAMS_IMPLEMENTATION.md b/docs/development_history/STREAMS_IMPLEMENTATION.md
deleted file mode 100644
index 14406b3..0000000
--- a/docs/development_history/STREAMS_IMPLEMENTATION.md
+++ /dev/null
@@ -1,338 +0,0 @@
-# Swactor Streams -- Implementation Status
-
-## What Was Built
-
-Stages 1-4 are implemented. Stages 1-3 built the stream primitive in `crates/streams/` (the `swactor-streams` crate). Stage 4 connected streams to the datastore so blob transfers use QUIC streams instead of sequential actor-message round-trips. All 42 tests pass (37 streams + 5 blob_transfer).
-
-### Stage 1: Types, Wire Format, and Buffer Pool
-
-Pure Rust -- no tokio, no iroh, no network. Compiles and tests in isolation.
-
-#### `src/types.rs`
-
-Core domain types for the stream system.
-
-- **`StreamId([u8; 16])`** -- 16-byte random identifier. `Copy`, `Hash`, `Eq`, `Serialize`/`Deserialize`. Custom `Debug` (4-byte hex prefix) and `Display` (8-byte hex prefix) following the codebase's ID conventions. Not an `ActorAddress` -- streams are not actors and don't pollute the address space.
-- **`StreamMode`** -- enum with `BlobTransfer` variant. Extensible for future modes (continuous streams, datagrams).
-- **`StreamConfig`** -- negotiation parameters: `stripe_count` (default 4), `frame_size` (default 256KB), `metadata` (opaque bytes for application-level negotiation payloads like ContentHash).
-- **`StreamError`** -- error enum covering `Closed`, `BrokenPipe`, `Disconnected`, `BufferExhausted`, `InvalidHeader`, and `ChunkVerificationFailed` (with expected/actual hashes for diagnostics).
-- **`ResumeToken`** -- checkpoint for resuming interrupted transfers, carrying stream identity and progress counters.
-
-#### `src/wire.rs`
-
-Binary wire format for stream headers and data frames. Pure functions, no I/O.
-
-- **Constants**: `MAGIC: [0x53, 0x57]` ("SW"), `VERSION: 0x01`, `ALPN: b"swactor/stream/1"`.
-- **`StreamHeader`** -- the negotiation header sent at connection establishment. Wire layout: `[2B magic][1B version][16B stream_id][1B mode][1B stripe_count][4B frame_size][4B metadata_len][N metadata]`.
-- **`encode_header` / `decode_header`** -- round-trippable serialization with validation (magic, version, mode, truncation checks).
-- **Data frame format**: `[4B payload_len (big-endian)][payload]`. Deliberately minimal -- no per-frame type tags or checksums (QUIC provides TLS integrity). A zero-length payload signals end-of-stripe.
-- **`encode_data_frame` / `decode_data_frame` / `encode_end_of_stripe`** -- frame-level codec.
-
-#### `src/buffer.rs`
-
-Pre-allocated buffer pool for zero-allocation data transfer.
-
-- **`FrameBuf`** -- a `Box<[u8]>` with read/write cursors. `write(&[u8]) -> usize` fills from the write cursor, `read(&mut [u8]) -> usize` drains from the read cursor. `reset()` zeroes only the cursors (not the data) for fast recycling. `load(&[u8])` replaces content directly.
-- **`BufferPool`** -- a fixed-size pool backed by `crossbeam::ArrayQueue<FrameBuf>` (lock-free MPMC). `checkout() -> Option<FrameBuf>` and `checkin(buf)` enable concurrent use between actor threads and tokio tasks without locks. `Clone` shares the underlying `Arc` so send/recv sides reference the same pool.
-
-### Stage 2: StreamHandle, Channels, and Data Plane
-
-Introduces tokio channels and async tasks but NOT iroh. Data-plane tasks are generic over `AsyncRead`/`AsyncWrite`, fully testable with `tokio::io::DuplexStream`.
-
-#### `src/channel.rs`
-
-Typed channel messages that move `FrameBuf`s by ownership (zero-copy handoff).
-
-- **`SendCommand`** -- `Data(FrameBuf)`, `Flush`, `Close`. Actor -> send task.
-- **`SendEvent`** -- `WriteReady`, `Error(StreamError)`, `Closed`. Send task -> actor.
-- **`RecvCommand`** -- `Consumed(FrameBuf)`, `Close`. Actor -> recv task.
-- **`RecvEvent`** -- `Data(FrameBuf)`, `Error(StreamError)`, `Closed`. Recv task -> actor.
-
-#### `src/notify.rs`
-
-Notification coalescing to prevent flooding actor mailboxes.
-
-- **`NotifyFlag`** -- `AtomicU8` bitflags (`DATA_READY`, `WRITE_READY`, `CLOSED`, `ERROR`). `set(kind) -> bool` returns true only if the bit was previously clear, signaling a new notification should be injected. `clear(kind)` is called by the actor after handling.
-- **`StreamEvent`** / **`StreamEventKind`** -- the lightweight sentinel message injected into actor mailboxes. Carries `stream_id` and `kind` (DataReady, WriteReady, Closed, Error).
-- **`NotifySink`** -- held by data-plane tasks. Combines the shared `NotifyFlag` with an inject closure. Convenience methods: `data_ready()`, `write_ready()`, `closed()`, `error()`.
-
-#### `src/handle.rs`
-
-The actor-facing API for reading and writing stream data.
-
-- **`SendHalf`** -- owns `mpsc::Sender<SendCommand>`, `mpsc::Receiver<SendEvent>`, a `BufferPool` clone, and an active `FrameBuf`. `try_write(&[u8]) -> Result<usize>` fills the active buffer and sends full buffers via `try_send` (non-blocking). Returns 0 on backpressure. `flush()` sends partial buffers. `close()` flushes remaining data and sends the Close command.
-- **`RecvHalf`** -- owns `mpsc::Receiver<RecvEvent>`, `mpsc::Sender<RecvCommand>`, a `BufferPool` clone, and an active `FrameBuf`. `try_read(&mut [u8]) -> Result<usize>` drains the active buffer then pulls new buffers from the channel. Returns 0 when no data is available. `has_data()` peeks without consuming.
-- **`StreamHandle`** -- combines `SendHalf` and `RecvHalf`. `Send` but not `Clone` (the mpsc receivers are not cloneable).
-- **`create_stream_handle(stream_id, config, pool_size, channel_capacity)`** -- factory that returns `(StreamHandle, DataPlaneEndpoints)`. The handle goes to the actor; the endpoints go to the data-plane tasks.
-
-#### `src/data_plane.rs`
-
-Async tasks that bridge `StreamHandle` channels to actual byte streams.
-
-- **`send_stripe_task<W: AsyncWrite>`** -- reads `SendCommand`s from the channel, wire-encodes them as data frames, writes to the transport, returns consumed buffers to the pool, and optionally notifies the actor via `NotifySink`.
-- **`recv_stripe_task<R: AsyncRead>`** -- reads wire-encoded frames from the transport, loads payloads into `FrameBuf`s from the pool, sends `RecvEvent::Data` to the actor channel. Handles end-of-stripe sentinel and connection closure.
-- **`spawn_send_stripes` / `spawn_recv_stripes`** -- spawn a set of stripe tasks from a writer/reader factory. The recv spawner merges all stripe outputs into a single `mpsc::Receiver<RecvEvent>`.
-
-Generic over `AsyncRead + AsyncWrite + Send + Unpin + 'static`, so tests use `tokio::io::DuplexStream` with no network stack.
-
-### Stage 3: QUIC Integration and StreamManager Actor
-
-Connects the data-plane tasks to real QUIC streams via iroh. Introduces the `StreamManager` system actor with full open/accept/reject lifecycle. Modifies `IrohDriver` for generic ALPN routing and bootstraps the StreamManager in `swactor-node`.
-
-#### `src/messages.rs`
-
-Protocol types for the stream control plane.
-
-- **`OneShot<T>`** -- Clone-friendly wrapper for non-Clone data (`StreamHandle`, `Connection`). Uses `Arc<Mutex<Option<T>>>` internally. First `.take()` extracts the value; subsequent calls (including from clones) return `None`. This allows non-Clone payloads inside Clone message enums required by the actor system's `Message` trait.
-- **`StreamManagerMsg`** -- 8-variant enum for messages sent TO the StreamManager actor:
-  - `Open { target_node, mode, config, reply_to }` -- Request a new stream to a remote node.
-  - `Accept { stream_id, reply_to }` -- Accept an offered incoming stream.
-  - `Reject { stream_id }` -- Reject an offered incoming stream.
-  - `Listen { mode, listener }` -- Register as a stream listener for a given mode.
-  - `Close { stream_id }` -- Close a stream.
-  - `IncomingConnection { node_id, stream_id, mode, config, conn }` -- Internal: from accept bridge to StreamManager.
-  - `OpenCompleted { stream_id, reply_to, result }` -- Internal: async open task completed.
-  - `AcceptCompleted { stream_id, reply_to, result }` -- Internal: async accept task completed.
-- **`StreamNotification`** -- 4-variant enum for notifications sent FROM StreamManager TO user actors:
-  - `StreamReady { stream_id, handle }` -- Stream is ready for use (open or accept completed).
-  - `StreamOffer { stream_id, mode, metadata, from_node }` -- A remote node is offering a stream.
-  - `StreamClosed { stream_id, reason }` -- A stream was closed.
-  - `StreamFailed { stream_id, error }` -- A stream open/accept failed.
-
-#### `src/connection.rs`
-
-Async connection cache for stream QUIC connections, separate from SWIM connections.
-
-- **`StreamConnectionCache`** -- `HashMap<[u8; 32], Connection>` with health-check-on-access. `get_or_connect()` checks `conn.close_reason().is_none()` before reuse and falls back to connecting via `endpoint.connect(key, ALPN)`. `prune_closed()` for bulk cleanup. Uses the stream ALPN (`swactor/stream/1`).
-
-#### `src/manager.rs`
-
-The core StreamManager system actor.
-
-- **`StreamManager`** -- implements `ActorInterface<Incoming = StreamManagerMsg>`. Manages active streams, pending incoming offers, listener registrations, and a connection cache. Holds an `Endpoint`, `tokio::runtime::Handle`, and `Arc<Runtime>` for spawning async tasks and sending messages back to itself.
-- **`STREAM_MANAGER_NAME`** -- well-known name `"StreamManager"` for the name registry.
-- **Open flow**: Generates `StreamId`, spawns a tokio task that connects, sends header on a control bi-stream, waits for a 1-byte accept/reject response, then creates `StreamHandle` + data-plane tasks, and sends `OpenCompleted` back to the StreamManager. StreamManager then delivers `StreamNotification::StreamReady` to the requesting actor.
-- **Incoming flow**: Accept bridge reads header, sends `IncomingConnection` to StreamManager. StreamManager stores as pending, notifies matching listeners with `StreamOffer`.
-- **Accept flow**: Takes pending connection, spawns tokio task that sends accept byte, creates `StreamHandle` + data-plane tasks, sends `AcceptCompleted` back. StreamManager delivers `StreamReady` to accepting actor.
-- **Reject flow**: Sends reject byte on a uni-stream, drops the connection.
-- **Close flow**: Removes stream state; data-plane tasks terminate when channels drop.
-- **`handle_down`**: Cleans up streams owned by dead actors and removes dead listeners.
-- **Data-plane spawning**: For each stream direction, a single tokio task opens N uni-streams and round-robins data frames across them. Recv tasks accept incoming uni-streams and dispatch each to a `recv_stripe_task`.
-
-#### `src/accept.rs`
-
-Bridge between incoming QUIC connections and the StreamManager actor.
-
-- **`spawn_accept_bridge`** -- spawns a tokio task that reads from a channel of `(node_id, Connection)` pairs, accepting the control bi-stream, reading the stream header via `read_to_end` + `decode_header`, and forwarding `StreamManagerMsg::IncomingConnection` to the StreamManager via `runtime.send_to()`.
-- **`handle_incoming`** -- public async function for per-connection header processing. Can also be called directly from the main loop (used by `swactor-node`).
-
-#### Modified: `crates/distribution/src/iroh_driver.rs`
-
-Generic ALPN support to route stream connections separately from SWIM.
-
-- **`IrohDriverConfig`**: Added `additional_alpns: Vec<Vec<u8>>` field. All existing call sites updated with `additional_alpns: vec![]`.
-- **Endpoint creation**: ALPNs now include both SWIM and any additional ALPNs (`vec![ALPN.to_vec()] + additional_alpns`).
-- **Accept loop**: After accepting a connection, checks `conn.alpn()`. SWIM ALPN routes to `accepted_conns` (existing behavior). All other ALPNs route to `other_accepted_conns` (new buffer).
-- **New field**: `other_accepted_conns: Arc<Mutex<Vec<(NodeId, Connection)>>>`.
-- **New methods**: `endpoint() -> &Endpoint` (for outbound stream connections), `drain_other_connections() -> Vec<(NodeId, Connection)>` (polled from main loop).
-
-#### Modified: `crates/streams/src/types.rs`
-
-- Added `Hash` derive to `StreamMode` (needed as `HashMap` key in listeners registry).
-
-#### Modified: `crates/streams/src/lib.rs`
-
-- Added module declarations and re-exports for `accept`, `connection`, `manager`, `messages`.
-- Re-exports: `StreamConnectionCache`, `StreamManager`, `STREAM_MANAGER_NAME`, `OneShot`, `StreamManagerMsg`, `StreamNotification`.
-
-#### Modified: `crates/streams/Cargo.toml`
-
-- Added `swactor-std` dependency (for `CtxMonitoring`, `RuntimeNaming`).
-- Added `io-util` feature to `tokio` (for `AsyncWriteExt::flush`).
-
-#### Modified: `crates/swactor-node/src/main.rs`
-
-Bootstrap integration in `run_iroh()`.
-
-- Passes `swactor_streams::ALPN.to_vec()` in `IrohDriverConfig::additional_alpns`.
-- After driver creation, spawns `StreamManager::new(endpoint, tokio_handle, runtime)` as a named actor under `"StreamManager"`.
-- In the main loop, drains `driver.drain_other_connections()` and spawns `handle_incoming` tasks for each, forwarding to the StreamManager.
-
-#### Modified: `crates/swactor-node/Cargo.toml`
-
-- Added `swactor-streams` dependency.
-
-#### Modified: `crates/distribution/tests/common/iroh.rs`, `crates/dashboard/src/bin/swactor-node.rs`
-
-- Updated all `IrohDriverConfig` construction sites with `additional_alpns: vec![]`.
-
-### Stage 4: Datastore Stream Integration
-
-Connects the stream system to the datastore so blob transfers flow over QUIC streams instead of sequential per-chunk actor-message round-trips. A 1GB blob with 1MB chunks that previously required 1,024 round-trips now flows in a single burst.
-
-#### `crates/datastore/src/blob_transfer.rs` (NEW)
-
-Async functions for sending/receiving blobs over StreamHandle. Runs inside tokio tasks, NOT actor handlers.
-
-- **`BlobTransferError`** -- enum: `IncompleteTransfer(String)`, `ChunkVerificationFailed { expected, actual }`, `InvalidManifest(String)`, `Storage(String)`.
-- **`ReceivedBlob`** -- `{ manifest: ObjectManifest, chunks: Vec<(ContentHash, Vec<u8>)> }`.
-- **`send_blob(send, manifest, read_chunk)`** -- generic over an async callback `F: Fn(ContentHash) -> Future<Output = Result<Vec<u8>>>`. Writes `[4B manifest_json_len][manifest JSON]` preamble, then for each chunk in the manifest calls `read_chunk(hash)` and writes the raw bytes. Chunks are NOT preloaded -- the callback reads one at a time.
-- **`recv_blob(recv)`** -- reads manifest preamble, deserializes JSON, then reads + blake3-verifies each chunk against the manifest's `ChunkRef` entries. Returns `ReceivedBlob`.
-- **`poll_inbox(inbox, timeout)`** -- async version of `bridge.rs:poll_response`. Yields (`tokio::task::yield_now`) instead of `thread::sleep`, polling the swactor `Inbox` until a message arrives or timeout.
-- **Internal helpers**: `write_all` (loops `try_write` + `yield_now`), `read_exact` (loops `try_read` + `yield_now`).
-
-Wire format:
-```
-[4B manifest_json_length (u32 BE)]
-[N bytes manifest JSON]
-[chunk_0 raw bytes]  <- size from manifest.chunks[0].size
-[chunk_1 raw bytes]
-...
-```
-
-#### `crates/datastore/src/actors/stream_listener.rs` (NEW)
-
-Listens for incoming BlobTransfer stream offers and routes them to DatastoreNode.
-
-- **`StreamListener`** -- `Incoming = StreamNotification`. State: `datastore_node: ActorAddress`, `stream_manager: Option<ActorAddress>`.
-- `on_start`: looks up `"StreamManager"` via `ctx.where_is()`, sends `StreamManagerMsg::Listen { mode: BlobTransfer }`.
-- `handle(StreamOffer)`: extracts 32-byte ContentHash from `metadata`, sends `DatastoreNodeMsg::HandleStreamOffer` to DatastoreNode. Rejects if metadata != 32 bytes.
-
-#### `crates/datastore/src/actors/stream_downloader.rs` (NEW)
-
-Opens a stream to a remote node and downloads a blob.
-
-- **`StreamDownloader`** -- `Incoming = StreamNotification`. Constructor takes: `content_hash`, `source_node`, `datastore_node`, `blob_store`, `reply_to`, `stream_manager`, `tokio_handle`, `runtime`.
-- `on_start`: sends `StreamManagerMsg::Open { target_node, mode: BlobTransfer, config.metadata: content_hash.0.to_vec() }`.
-- `handle(StreamReady)`: takes handle via `OneShot::take()`, spawns tokio task:
-  - Calls `recv_blob(&mut recv_half)`.
-  - Writes each chunk to BlobStore via `runtime.send_to(blob_store, WriteChunk)` (fire-and-forget).
-  - Writes manifest via `runtime.send_to(blob_store, WriteManifest)` (fire-and-forget).
-  - Sends `DatastoreNodeMsg::StreamDownloadComplete` to DatastoreNode.
-  - On error: sends `DatastoreNodeMsg::StreamDownloadFailed`.
-  - Actor calls `ctx.stop_self()` after spawning the task.
-- `handle(StreamFailed)`: sends `StreamDownloadFailed`, stops self.
-
-#### `crates/datastore/src/actors/stream_server.rs` (NEW)
-
-Serves a blob to a requesting node over a stream, reading chunks on-demand.
-
-- **`StreamServer`** -- `Incoming = StreamNotification`. Constructor takes: `stream_id`, `content_hash`, `blob_store`, `stream_manager`, `tokio_handle`, `runtime`.
-- `on_start`: sends `StreamManagerMsg::Accept { stream_id }`.
-- `handle(StreamReady)`: takes handle, spawns tokio task:
-  - Reads manifest from BlobStore via `runtime.new_inbox()` + `poll_inbox` (async Inbox polling).
-  - Calls `send_blob(&mut send_half, &manifest, |chunk_hash| { ... })` with a callback that reads each chunk on-demand from BlobStore via a fresh Inbox.
-  - At most one chunk is in memory at a time. Chunks flow directly from BlobStore to stream.
-  - Actor calls `ctx.stop_self()`.
-- `handle(StreamFailed)`: stops self.
-
-#### Modified: `crates/datastore/src/messages.rs`
-
-Added 5 new variants to `DatastoreNodeMsg`:
-
-- `DownloadViaStream { content_hash, source_node, reply_to }` -- triggers a stream download.
-- `HandleStreamOffer { stream_id, content_hash, from_node, stream_manager }` -- routes incoming stream offers.
-- `StreamDownloadComplete { content_hash, manifest, reply_to }` -- download succeeded; persist metadata.
-- `StreamDownloadFailed { content_hash, reason, reply_to }` -- download failed; notify caller.
-- `ConfigureStreams { stream_manager, tokio_handle, runtime }` -- late-binding stream support.
-
-Changed from `#[derive(Debug, Clone)]` to `#[derive(Clone)]` with manual `Debug` impl (because `Arc<Runtime>` doesn't implement `Debug`).
-
-#### Modified: `crates/datastore/src/actors/datastore_node.rs`
-
-Added stream support fields and handlers to the coordinator actor.
-
-- **New fields**: `runtime: Option<Arc<Runtime>>`, `tokio_handle: Option<tokio::runtime::Handle>`, `stream_manager: Option<ActorAddress>` -- all initialized to `None`.
-- **`handle_configure_streams`**: stores runtime/tokio_handle/stream_manager.
-- **`handle_download_via_stream`**: spawns `StreamDownloader`. Returns `TransferFailed` if streams not configured.
-- **`handle_stream_offer`**: spawns `StreamServer`.
-- **`handle_stream_download_complete`**: creates `ObjectEntry`, sends `MetadataMsg::PutObject` to metadata actor with the original `reply_to` for direct response routing.
-- **`handle_stream_download_failed`**: sends `DatastoreResponse::TransferFailed` to `reply_to`.
-
-#### Modified: `crates/datastore/src/actors/mod.rs`
-
-Added module declarations for `stream_downloader`, `stream_listener`, `stream_server`.
-
-#### Modified: `crates/datastore/src/lib.rs`
-
-Added `pub mod blob_transfer`.
-
-#### Modified: `crates/datastore/src/bridge.rs`
-
-- Added `datastore_addr: ActorAddress` field to `DatastoreGroup` (stored during `spawn()`).
-- Added `configure_streams(&self, stream_manager, tokio_handle)` method: sends `ConfigureStreams` to DatastoreNode, spawns and registers `StreamListener` under `"StreamListener"`.
-
-#### Modified: `crates/datastore/Cargo.toml`
-
-- Added `swactor-streams = { path = "../streams" }` and `tokio = { version = "1", features = ["sync", "rt", "time"] }` dependencies.
-- Added dev-dependencies for testing: `swactor-streams`, `tokio` with `rt-multi-thread`, `macros`, `io-util`.
-
-#### Modified: `crates/swactor-node/src/main.rs`
-
-After StreamManager registration, wires stream support into the datastore:
-```rust
-if let Some(group) = ds_group {
-    group.configure_streams(stream_mgr_addr, driver.tokio_handle());
-}
-```
-
-## Test Coverage
-
-42 tests across all modules:
-
-| Category | Tests | What they verify |
-|----------|-------|------------------|
-| `types` | 4 | StreamId uniqueness, Debug/Display formatting, StreamConfig defaults |
-| `wire` | 8 | Header round-trip (basic + property-based), bad magic/version/truncation rejection, data frame round-trip (basic + property-based), end-of-stripe sentinel |
-| `buffer` | 7 | FrameBuf write/read/reset/load, BufferPool checkout/checkin/exhaustion/recycling/sharing |
-| `notify` | 4 | Set returns true first time / false on duplicate, clear re-enables, independent flags, read shows all bits |
-| `data_plane` | 9 | Single-stripe end-to-end transfer, multi-chunk ordered delivery (20 chunks), 4-stripe round-robin (100 chunks), graceful close, notification coalescing, backpressure detection |
-| `messages` | 5 | OneShot take-once semantics, clone sharing, debug format, StreamManagerMsg is Message, StreamNotification is Message |
-| `blob_transfer` | 5 | Small blob round-trip (single chunk), multi-chunk round-trip (4MB / 256KB chunks / 16 chunks), corrupted chunk detection (blake3 verification), truncated stream detection, property-based arbitrary blob round-trips |
-
-Property-based tests (via `proptest`) cover:
-- Arbitrary stream headers (random IDs, stripe counts 1-16, frame sizes 1KB-1MB, metadata 0-256 bytes)
-- Arbitrary data frame payloads (0-256KB)
-- Arbitrary blob transfers (random data 1-64KB, chunk sizes 256B-8KB)
-
-## Dependency Footprint
-
-### `swactor-streams` crate
-
-- `swactor` (core actor types, with `serde` feature)
-- `swactor-std` (for `CtxMonitoring`, `RuntimeNaming`)
-- `shared-types` (ContentHash)
-- `distribution` (NodeId, iroh re-exports)
-- `crossbeam-queue` (lock-free buffer pool -- already a workspace dep)
-- `tokio` (mpsc channels, async I/O traits, io-util)
-- `iroh` (QUIC transport, connections, endpoints)
-- `blake3`, `serde`, `getrandom`
-
-Dev dependencies: `proptest`, `tokio` (with rt-multi-thread, macros, test-util, io-util).
-
-### `swactor-datastore` crate (Stage 4 additions)
-
-- `swactor-streams` (stream primitives, messages, types)
-- `tokio` (sync, rt, time -- for spawning async blob transfer tasks and `poll_inbox`)
-
-Dev dependencies: `swactor-streams`, `tokio` (with rt-multi-thread, macros, io-util).
-
-## Next Steps
-
-### Remaining MVP Work
-
-These items complete the minimum viable stream-based blob transfer:
-
-1. **Two-node integration test** -- full open/accept/data-transfer/close cycle with real iroh endpoints and two `DatastoreGroup` instances. Verifies StreamListener receives offers, StreamServer serves blobs, StreamDownloader receives and persists them. This is the critical end-to-end validation that all the pieces work together over real QUIC.
-
-2. **CtxStreams extension trait** (`crates/streams/src/ctx_ext.rs`) -- convenience methods on `Ctx`: `stream_open()`, `stream_listen()`, `stream_accept()`, `stream_reject()`, `stream_close()`. Looks up `"StreamManager"` via `where_is()` and wraps the message construction. Reduces boilerplate for any actor wanting to use streams.
-
-3. **Resume tokens** -- checkpoint emission every N chunks or N bytes during `send_blob`/`recv_blob`. Stored in `ResumeToken` (already defined in `types.rs`). On reconnect, receiver sends its token in `StreamConfig.metadata` and sender seeks to the right chunk offset.
-
-### Post-MVP Phases
-
-- **Dashboard stream metrics** -- expose active streams, bytes transferred, and transfer rates through the existing dashboard infrastructure.
-- **Continuous Streams** -- `ContinuousStream` mode for unbounded data (ML gradient streams, data pipelines). Single bidirectional QUIC stream, variable-sized frames, ring buffer backpressure.
-- **Unreliable Datagrams** -- QUIC datagram-based mode for latency-sensitive data (voice/video, game state). Sequence-based dropping, jitter buffer.
-- **Priority and QoS** -- per-stream priority, write scheduling across concurrent streams, QUIC stream priority hints.
-- **Parallel Unordered Transfer** -- independent per-chunk QUIC streams for workloads where any chunk is consumable independently (distributed ML gradient exchange).
diff --git a/docs/development_history/bin-runner/WASM_ACTOR.md b/docs/development_history/bin-runner/WASM_ACTOR.md
deleted file mode 100644
index 9294b97..0000000
--- a/docs/development_history/bin-runner/WASM_ACTOR.md
+++ /dev/null
@@ -1,191 +0,0 @@
-# Wasm Actor Crate — Development History
-
-> Adds a new crate (`crates/bin-runner/`) that runs WebAssembly guest code
-> **inside** a swactor actor. The Wasm instance lives in the actor — not as a
-> separate OS process. Messages arrive as bytes, get written into Wasm linear
-> memory, and the guest's `handle` export is called.
->
-> ~350 lines of Rust (host) · 3 guest modules · 7 tests
-
----
-
-## Table of Contents
-
-1. [Overview & Motivation](#1-overview--motivation)
-2. [What Was Built](#2-what-was-built)
-3. [Guest ↔ Host Contract](#3-guest--host-contract)
-4. [Handle Cycle (Hot Path)](#4-handle-cycle-hot-path)
-5. [Guest Modules](#5-guest-modules)
-6. [Design Decisions & Tradeoffs](#6-design-decisions--tradeoffs)
-7. [Known Gaps & Future Improvements](#7-known-gaps--future-improvements)
-8. [Test Coverage Summary](#8-test-coverage-summary)
-
----
-
-## 1. Overview & Motivation
-
-Swactor already supported running *inside* a browser via `crates/wasm/`
-(wasm-bindgen). This crate flips the direction: run untrusted Wasm code
-*inside* an actor, sandboxed by wasmtime. Use cases include user-defined
-plugins, multi-language actors, and capability-restricted compute.
-
-The main swactor crate has no wasmtime dependency — all Wasm machinery is
-isolated in `crates/bin-runner/`.
-
----
-
-## 2. What Was Built
-
-| Component | Location | Purpose |
-|-----------|----------|---------|
-| `swactor-bin-runner` crate | `crates/bin-runner/` | Host-side: engine, builder, actor impl |
-| 3 guest crates | `crates/bin-runner/tests/guests/{echo,double,silent}/` | `#![no_std]` Wasm modules for testing |
-| Integration tests | `crates/bin-runner/tests/wasm_actor.rs` | 7 behavioral tests |
-
-### Crate modules
-
-```
-crates/bin-runner/src/
-  lib.rs        — ByteMessage, re-exports
-  engine.rs     — SharedEngine (Arc<wasmtime::Engine>)
-  builder.rs    — WasmActorBuilder (compile + link + instantiate)
-  actor.rs      — WasmActor implementing ActorInterface
-  error.rs      — WasmActorError enum
-```
-
-### Public types
-
-- **`ByteMessage(pub Vec<u8>)`** — message type for Wasm actors. Satisfies
-  `Message` bounds trivially.
-- **`SharedEngine`** — wraps `Arc<wasmtime::Engine>`. Created once, cloned
-  cheaply across actors. Sandboxed config: no threads, no SIMD, no reference
-  types.
-- **`WasmActorBuilder`** — takes an engine + raw `.wasm` bytes, compiles the
-  module, links the `swactor.send` host import, extracts typed function handles,
-  returns a `WasmActor`.
-- **`WasmActor`** — implements `ActorInterface<Incoming = ByteMessage, Response = ()>`.
-- **`WasmActorError`** — `MissingExport(&'static str)` or `Wasmtime(wasmtime::Error)`.
-
----
-
-## 3. Guest ↔ Host Contract
-
-**Guest must export:**
-
-| Export | Signature | Purpose |
-|--------|-----------|---------|
-| `memory` | WebAssembly linear memory | Host reads/writes message bytes here |
-| `alloc` | `(size: i32) -> i32` | Allocate `size` bytes, return pointer |
-| `handle` | `(ptr: i32, len: i32)` | Process message at `(ptr, len)` |
-
-**Guest may import:**
-
-| Import | Module | Signature | Purpose |
-|--------|--------|-----------|---------|
-| `send` | `swactor` | `(dest_ptr: i32, payload_ptr: i32, payload_len: i32)` | Send a message to another actor |
-
-`dest_ptr` points to 32 bytes of `ActorAddress` in guest linear memory.
-`payload_ptr` + `payload_len` describe the message bytes.
-
----
-
-## 4. Handle Cycle (Hot Path)
-
-```
-  ByteMessage arrives
-       │
-       v
-  1. host calls guest alloc(msg.len) → ptr
-       │
-       v
-  2. host writes msg bytes into guest memory at ptr
-       │
-       v
-  3. host calls guest handle(ptr, len)
-       │
-       ├── guest may call swactor.send() N times
-       │   └── each appends (ActorAddress, Vec<u8>) to HostState.outbox
-       │
-       v
-  4. host drains outbox → ctx.send(dest, ByteMessage(payload)) for each
-```
-
-Traps during `alloc` or `handle` will panic. Swactor's existing
-`catch_unwind` in `tick_all` poisons the actor — consistent with the
-panic-safety model.
-
----
-
-## 5. Guest Modules
-
-Three `#![no_std]` Rust crates compiled to `wasm32-unknown-unknown`:
-
-| Guest | Behavior | Tests it supports |
-|-------|----------|-------------------|
-| `echo` | Reads 32-byte dest + payload from message; sends payload back to dest | Echo roundtrip, binary preservation |
-| `double` | Same framing; sends payload back **twice** | Multi-send verification |
-| `silent` | Receives bytes; does nothing | No-output / no-error baseline |
-
-Each guest uses a simple inline bump allocator (64 KiB heap, 8-byte aligned)
-and a `#[panic_handler]` that loops. No external dependencies.
-
-Message framing convention: the first 32 bytes of the `ByteMessage` payload
-are the destination `ActorAddress`, followed by the actual message bytes.
-This allows guests to send replies without hardcoding addresses.
-
-### Building guests
-
-```bash
-rustup target add wasm32-unknown-unknown   # one-time
-
-cd crates/bin-runner/tests/guests/echo   && cargo build --target wasm32-unknown-unknown --release
-cd crates/bin-runner/tests/guests/double && cargo build --target wasm32-unknown-unknown --release
-cd crates/bin-runner/tests/guests/silent && cargo build --target wasm32-unknown-unknown --release
-```
-
-Each guest crate has its own `[workspace]` marker to stay independent of the
-root workspace.
-
----
-
-## 6. Design Decisions & Tradeoffs
-
-| # | Decision | Rationale |
-|---|----------|-----------|
-| 1 | **wasmtime, not wasmer/wasm3** | Best-maintained, fuel metering support, cranelift JIT |
-| 2 | **Raw bytes, not structured messages** | Keeps the boundary simple; framing/serialization is the guest's concern |
-| 3 | **Separate crate, not a feature flag** | wasmtime is ~30 crates; most users don't need it in their dependency tree |
-| 4 | **Bump allocator in guests** | Zero-dependency, predictable, sufficient for request/response patterns |
-| 5 | **Dest address in message payload** | Avoids hardcoded addresses; guests can send to any actor the host tells them about |
-| 6 | **Traps = panics (no Result)** | Matches swactor's existing panic-safety model; `catch_unwind` in `tick_all` poisons the actor |
-| 7 | **Engine sharing via Arc** | Module compilation is expensive; `SharedEngine` amortizes it across actors |
-| 8 | **Maximum sandboxing defaults** | Disabled: threads, SIMD, relaxed SIMD, reference types, multi-value. Enabled: bulk memory (required by most compilers) |
-
----
-
-## 7. Known Gaps & Future Improvements
-
-| # | Gap | Notes |
-|---|-----|-------|
-| 1 | **No fuel metering** | wasmtime supports fuel; maps naturally to per-tick actor budgets. Deferred to follow-up. |
-| 2 | **No WASI** | No filesystem, network, random, or clock access. Intentional for sandboxing, but limits guest capabilities. |
-| 3 | **No guest SDK crate** | The test guests serve as examples. A published `swactor-guest` crate with the alloc/handle/send glue would reduce boilerplate. |
-| 4 | **Bump allocator never frees** | Fine for short-lived handle calls, but long-running actors would need a real allocator. |
-| 5 | **No pre-compilation cache** | `Module::new()` recompiles every time. wasmtime supports serialized modules for faster cold starts. |
-| 6 | **`cargo test -p` doesn't resolve** | Must use `--manifest-path`. Workspace resolution quirk. |
-
----
-
-## 8. Test Coverage Summary
-
-7 behavioral tests in `crates/bin-runner/tests/wasm_actor.rs`:
-
-| Test | Scenario |
-|------|----------|
-| `echo_returns_same_payload` | Send bytes → wasm echoes them back to inbox |
-| `echo_preserves_binary_payload` | All 256 byte values survive the roundtrip |
-| `silent_produces_no_output` | Guest does nothing; no error, no messages |
-| `double_sends_two_copies` | One message in → two messages out |
-| `missing_alloc_export_returns_error` | WAT module with no exports → `WasmActorError::MissingExport` |
-| `shared_engine_serves_multiple_actors` | Two actors from the same `SharedEngine` work independently |
-| `native_actor_communicates_with_wasm_actor` | Native Rust actor → WasmActor → inbox (two-tick delivery) |
diff --git a/docs/development_history/cfuzz/CFUZZ_OVERVIEW.md b/docs/development_history/cfuzz/CFUZZ_OVERVIEW.md
deleted file mode 100644
index 5139a2e..0000000
--- a/docs/development_history/cfuzz/CFUZZ_OVERVIEW.md
+++ /dev/null
@@ -1,95 +0,0 @@
-# cfuzz Branch — Development History Overview
-
-> 19 improvement cycles on the `cfuzz` branch.
-> Research-driven methodology: study competitors → identify gap → implement → test → benchmark.
-> Grew test suite from 42 → 148 passing tests.
-
----
-
-## Methodology
-
-Each cycle followed a consistent pattern:
-
-1. **Research** — Study how competitors (Erlang/OTP, Tokio, Akka, Ractor, Actix, Kameo) handle the problem
-2. **Identify gap** — Find a specific deficiency in swactor
-3. **Implement** — Fix the gap with minimal, targeted changes
-4. **Test** — Write behavioral tests (Given/When/Then) from the consumer's perspective
-5. **Benchmark** — Measure impact where applicable
-
-### Constraints
-
-- `src/` structure is frozen — no new files or modules, only modify existing files in-place
-- No new dependencies on the root crate
-- Behavioral tests only — no white-box/structural tests
-- All `cargo test` must pass before each commit
-- Never delete tests for active code
-
----
-
-## Baseline Benchmarks (Pre-Improvement)
-
-| Benchmark | Time | Throughput |
-|-----------|------|-----------|
-| spawn | 1.28 µs | — |
-| message_roundtrip | 2.24 µs | — |
-| send_fire_and_forget | 1.50 µs | — |
-| single_actor/1000 | 57.5 µs | 17.4 Melem/s |
-| multi_actor/100x100 | 610.6 µs | 16.4 Melem/s |
-| ring/100 | 99.9 µs | 1.01 Melem/s |
-
----
-
-## Cycle Summary
-
-| Cycle | Commit | Topic | Tests Added | Cumulative Tests |
-|-------|--------|-------|-------------|-----------------|
-| 1 | `ef87f7e` | [Fairness (message budget)](CYCLE_01_FAIRNESS.md) | 3 | 45 |
-| 2 | `10cb078` | [Stress tests + benchmarks](CYCLE_02_STRESS_TESTS.md) | 6 | 51 |
-| 3 | `acacc1b` | [Thread parking](CYCLE_03_THREAD_PARKING.md) | 1 | 52 |
-| 4 | `cf61619` | [Shutdown fix + bug-inspired tests](CYCLE_04_SHUTDOWN_FIX.md) | 5 | 57 |
-| 5 | `7d00e65` | [Load-aware placement](CYCLE_05_LOAD_AWARE_PLACEMENT.md) | 3 | 60 |
-| 6 | `265992c` | [Mailbox backpressure](CYCLE_06_BACKPRESSURE.md) | 4 | 64 |
-| 7 | `1779ad6` | [Actor recovery](CYCLE_07_ACTOR_RECOVERY.md) | 4 | 68 |
-| 8 | `0213938` | [Dead actor cleanup](CYCLE_08_DEAD_ACTOR_CLEANUP.md) | 2 (+2 updated) | 70 |
-| 9 | `e28aca0` | [Lifecycle hooks + graceful stop](CYCLE_09_LIFECYCLE_HOOKS.md) | 12 | 82 |
-| 10 | `d58a999` | [Actor timers](CYCLE_10_TIMERS.md) | 6 | 88 |
-| 11 | `9b1518b` | [Property-based testing](CYCLE_11_PROPERTY_TESTING.md) | 7 | 95 |
-| 12 | `66a8523` | [Named actor registry](CYCLE_12_NAMED_REGISTRY.md) | 11 | 106 |
-| 13 | `8782638` | [Actor monitoring](CYCLE_13_MONITORING.md) | 7 | 113 |
-| 14 | `4d18874` | [Actor groups](CYCLE_14_GROUPS.md) | 9 | 122 |
-| 15 | `902471b` | [Ask pattern](CYCLE_15_ASK_PATTERN.md) | 5 | 127 |
-| 16 | `0ef6df9` | [Registry benchmarks](CYCLE_16_REGISTRY_BENCHMARKS.md) | 0 | 127 |
-| 17 | `a70bd86` | [Supervision trees](CYCLE_17_SUPERVISION.md) | 10 | 138 |
-| 18 | `771c38c` | [OneForAll + RestForOne](CYCLE_18_SUPERVISOR_STRATEGIES.md) | 3 | 141 |
-| 19 | `c688f0a` | [Router](CYCLE_19_ROUTER.md) | 7 | 148 |
-
----
-
-## Thematic Groupings
-
-### Scheduling & Performance (Cycles 1–5)
-Foundation work: fairness guarantees, stress testing, thread parking, shutdown reliability, and load-aware actor placement. Research thread: BEAM reductions → tokio coop budget → Kameo/Actix mailboxes → tokio parker → work stealing survey.
-
-### Resilience & Lifecycle (Cycles 6–10)
-Production hardening: backpressure, crash recovery, memory leak fix, lifecycle hooks, and deterministic timers. Narrative arc: from "actors crash permanently" to "actors have a fully managed lifecycle."
-
-### Testing & Service Discovery (Cycles 11–16)
-Property-based testing for invariant verification, plus four registry features (names, monitoring, groups, ask pattern) and benchmarks to validate them. Research shifted from scheduling to service discovery patterns.
-
-### Supervision (Cycles 17–19)
-Capstone features built on everything preceding: supervision trees with configurable restart strategies, and routers for actor pool management. Directly modeled on Erlang/OTP supervision trees.
-
----
-
-## Frameworks Studied
-
-| Framework | Language | Key Lessons |
-|-----------|----------|-------------|
-| Erlang/OTP BEAM | Erlang | 4000-reduction budget, supervision trees, pg groups, gen_server:call |
-| Tokio | Rust | 128-op coop budget, work-stealing, parker state machine |
-| Akka | Scala/Java | SupervisorStrategy, Router actors, PoisonPill |
-| Ractor | Rust | String-based registry, SupervisionEvent, bug history |
-| Actix | Rust | Vyukov MPSC queue, 256-message guard, ctx.stop() |
-| Kameo | Rust | Dual mailbox (bounded/unbounded), on_panic hook, ActorPool |
-| Linux CFS/EEVDF | C | vruntime fairness, NO_HZ adaptive ticks |
-| libuv/Node.js | C | Phase-based event loop, round-robin handlers |
diff --git a/docs/development_history/cfuzz/CYCLE_01_FAIRNESS.md b/docs/development_history/cfuzz/CYCLE_01_FAIRNESS.md
deleted file mode 100644
index e71e88b..0000000
--- a/docs/development_history/cfuzz/CYCLE_01_FAIRNESS.md
+++ /dev/null
@@ -1,61 +0,0 @@
-# Cycle 1: Per-Actor Message Budget for Tick Fairness — Development History
-
-> Commit: `ef87f7e` · 8 files · Priority: P0 (critical bug fix)
-
----
-
-## Motivation
-
-The `tick_all` function in `worker.rs` drained the **entire mailbox** for each actor before moving to the next:
-
-```rust
-while let Some(msg) = slot.mailbox.pop_front() {
-    // processes ALL messages for actor A before moving to actor B
-}
-```
-
-If actor A had 10,000 queued messages, all other actors on the same worker were completely starved until A finished. This is a critical fairness bug — every other runtime studied prevents this.
-
-## Competitor Analysis
-
-| Runtime | Fairness Mechanism | Budget |
-|---------|-------------------|--------|
-| Erlang/OTP BEAM | Reduction counting, preemptive | 4,000 reductions |
-| Tokio | Cooperative budgeting | 128–256 operations |
-| libuv/Node.js | Round-robin across handlers | No single handler drains completely |
-| Linux CFS | vruntime-based fairness | Time slices enforced |
-| Ractor | N/A (1 task = 1 actor via tokio) | Inherited from tokio |
-| **Swactor (before)** | **None** | **Unlimited drain** |
-
-The BEAM's reduction budget (4,000 per process before preemption) is the gold standard for actor fairness. Tokio's cooperative budget (128 ops) serves a similar purpose for async tasks. Actix has a 256-message assertion guard that validates the approach.
-
-## Implementation
-
-- Added `actor_message_budget: usize` to `RuntimeConfig` (default: 64)
-- Modified `tick_all` in `worker.rs` to break after `budget` messages per actor per tick
-- `budget=0` means unlimited (100% backward compatible)
-- Updated `RuntimeConfig` struct literals across all crates (python, runtime-dashboard, mt_benchmarks)
-
-**Key files modified:** `src/worker.rs`, `src/config.rs`, `benches/runtime_benchmarks.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **Budget of 64 chosen** as default — between BEAM's 4,000 (too generous for swactor's coarser granularity) and tokio's 128 (per-op vs per-message). Benchmarks showed budget=32 was slightly faster for throughput, but 64 provides more fairness headroom.
-- **Per-runtime, not per-actor** — simpler configuration, matching the BEAM model where the reduction budget is global. Per-actor budgets could be added later as an extension.
-- **budget=0 means unlimited** — backward compatibility for users who want the old behavior.
-
-## Tests Added
-
-3 new behavioral tests (42 → 45 total):
-
-- `hot_actor_does_not_starve_cold_actor` — hot actor with many messages doesn't prevent cold actor from processing
-- `unlimited_budget_drains_all` — budget=0 preserves old behavior
-- `budget_messages_drain_across_multiple_ticks` — excess messages carry over to next tick
-
-**Benchmarks added:** `fairness/cold_latency_under_pressure`, `fairness/throughput_by_budget`
-
-## Result
-
-- 45 tests pass (42 original + 3 new)
-- All workspace crates compile
-- Baseline benchmarks established for future comparison
diff --git a/docs/development_history/cfuzz/CYCLE_02_STRESS_TESTS.md b/docs/development_history/cfuzz/CYCLE_02_STRESS_TESTS.md
deleted file mode 100644
index b9444ad..0000000
--- a/docs/development_history/cfuzz/CYCLE_02_STRESS_TESTS.md
+++ /dev/null
@@ -1,74 +0,0 @@
-# Cycle 2: Stress Tests, Expanded Benchmarks, and Research Extension — Development History
-
-> Commit: `10cb078` · 4 files · 517 insertions
-
----
-
-## Motivation
-
-After fixing the fairness bug in Cycle 1, the runtime needed stress testing under adversarial conditions to find edge cases. Additionally, the competitor survey was extended to cover Kameo and Actix — two frameworks with distinct approaches to mailbox management and message dispatch.
-
-## Competitor Analysis
-
-### Kameo (v0.19)
-- Fully async on tokio, one task per actor
-- Dual mailbox: bounded (default 64) or unbounded tokio mpsc channels
-- Typed signals via vtable dispatch (no `Box<dyn Any>` downcast)
-- Erlang-style links for supervision (`on_link_died`)
-- `on_panic` hook can restart actor (vs swactor's then-permanent poisoning)
-- Known bugs: deadlocks in link establishment, leaked ActorRef preventing stop
-
-### Actix (v0.13)
-- Context-as-Future model — each actor is a single pollable Future on an Arbiter
-- **Custom Vyukov lock-free MPSC queue** (not tokio channels) — push is single atomic_swap
-- Default mailbox capacity: 16 (tiny)
-- `do_send()` bypasses capacity for internal notifications
-- **256-message assertion guard** — validates swactor's budget approach
-- vtable dispatch via `Box<dyn EnvelopeProxy<A>>` — no Any downcast
-- WHY FAST: custom MPSC queue, no async overhead, same-thread actors avoid cross-thread coordination
-
-### Key Insight
-Both frameworks use vtable dispatch instead of `Box<dyn Any>` downcast. Actix's 256-message assertion guard independently validates the per-actor budget concept from Cycle 1.
-
-## Implementation
-
-### Stress Tests (6 new)
-- `message_ordering_preserved_under_budget` — FIFO order with budget=8
-- `mt_stress_many_senders_one_receiver` — 50 senders × 100 msgs on 4 threads
-- `mt_stress_concurrent_spawn_and_send` — 200 concurrent spawn+send on 4 threads
-- `mt_chain_spawning_under_load` — 50-level chain across 2 workers
-- `mt_panic_isolation_under_load` — 10 panicking + 10 healthy actors on 4 threads
-- `sustained_throughput_does_not_drop_messages` — 10 batches × 100 msgs
-
-### Benchmarks (2 new groups)
-- `msg_size` group: throughput and send_latency by message size (8B, 64B, 256B, 1KB, 4KB)
-- `contention` group: fanin (1–100 senders to 1 sink), cross_worker (1–4 threads)
-
-**Key files modified:** `tests/runtime_api.rs`, `benches/runtime_benchmarks.rs`, `CLAUDE/notes/research_synthesis.md`
-
-## Design Decisions
-
-- **Multi-threaded stress tests** included because single-threaded testing can't catch cross-worker races
-- **Panic isolation test** inspired by Actix's SyncArbiter model — ensures one panicking actor doesn't take down healthy actors on other workers
-- **Message ordering test** validates that the budget mechanism (Cycle 1) doesn't break FIFO guarantees
-- **Chain spawning** tests the spawn+send-in-same-handler pattern across worker boundaries
-
-## Tests Added
-
-6 new stress tests (45 → 51 total):
-
-| Test | Pattern | Purpose |
-|------|---------|---------|
-| `message_ordering_preserved_under_budget` | FIFO verification | Budget doesn't break ordering |
-| `mt_stress_many_senders_one_receiver` | Fan-in | 50:1 contention on 4 threads |
-| `mt_stress_concurrent_spawn_and_send` | Concurrent spawn | Race condition hunting |
-| `mt_chain_spawning_under_load` | Cascading spawn | Cross-worker chain delivery |
-| `mt_panic_isolation_under_load` | Fault isolation | Panics don't spread |
-| `sustained_throughput_does_not_drop_messages` | Sustained load | No message loss over time |
-
-## Result
-
-- 51 tests pass (42 original + 3 fairness + 6 stress)
-- All workspace crates compile
-- No bugs found — the runtime handles adversarial conditions correctly
-- Benchmark data provides baselines for message size sensitivity and contention scaling
diff --git a/docs/development_history/cfuzz/CYCLE_03_THREAD_PARKING.md b/docs/development_history/cfuzz/CYCLE_03_THREAD_PARKING.md
deleted file mode 100644
index e8d96f4..0000000
--- a/docs/development_history/cfuzz/CYCLE_03_THREAD_PARKING.md
+++ /dev/null
@@ -1,51 +0,0 @@
-# Cycle 3: Thread Parking for Instant Worker Wakeup — Development History
-
-> Commit: `acacc1b` · 4 files · 59 insertions, 10 deletions
-
----
-
-## Motivation
-
-Before this change, idle workers used `thread::sleep` with a fixed timeout to wait for new work. This meant an idle worker wouldn't notice new messages until its sleep timer expired — up to 1ms of unnecessary latency on the idle-to-active transition. Under bursty workloads, this sleep-based backoff wastes both time and power.
-
-## Competitor Analysis
-
-| Runtime | Idle Strategy | Wakeup Mechanism |
-|---------|--------------|-----------------|
-| Tokio | Parker state machine (notified/sleeping/empty) | `unpark()` via atomic CAS |
-| Linux | NO_HZ adaptive ticks (stop tick when idle) | Interrupt on new work |
-| Go | `notewakeup` / futex | OS-level wake |
-| BEAM | Scheduler sleep + signal | Thread signal |
-| **Swactor (before)** | **`thread::sleep(1ms)`** | **Timer expiry only** |
-
-Tokio's parker uses a 3-state machine (notified → sleeping → empty) with atomic transitions. The key insight: `unpark()` is a **no-op** if the thread isn't parked, so callers pay zero cost on the hot path.
-
-## Implementation
-
-- Replaced `thread::sleep` with `thread::park_timeout` in worker run loop
-- Workers register `thread::current()` via `OnceLock<Thread>` on startup
-- `send_to` and `spawn` call `Thread::unpark()` on target worker after enqueuing work
-- Cross-worker sends from `WorkerContext` also unpark the target
-- Zero new dependencies — uses only `std::sync::OnceLock` + `std::thread::park_timeout`
-
-**Key files modified:** `src/worker.rs`, `src/runtime.rs`, `src/delivery.rs`
-
-## Design Decisions
-
-- **`OnceLock<Thread>` for thread handle storage** — set-once semantics match the worker lifecycle (one thread per worker, never changes). Simpler than `Mutex<Option<Thread>>`.
-- **`park_timeout` instead of `park`** — timeout ensures workers periodically wake even without explicit unpark, preventing permanent sleep if an unpark is missed.
-- **Unpark on `send_to` and `spawn`** — these are the two operations that create work for a worker. The cost is a single atomic store (no-op if thread is already running).
-- **No condvar** — `thread::park/unpark` is simpler and avoids the spurious wakeup complexity of condition variables. Tokio's parker validates this approach.
-
-## Tests Added
-
-1 new test (51 → 52 total):
-
-- `mt_parked_worker_wakes_on_send` — verifies that a parked worker processes a message immediately after send (not after timeout)
-
-## Result
-
-- 52 tests pass
-- All workspace crates compile
-- Idle-to-active latency reduced from up to 1ms to near-zero
-- No overhead on hot path — `unpark()` is a no-op when thread isn't parked
diff --git a/docs/development_history/cfuzz/CYCLE_04_SHUTDOWN_FIX.md b/docs/development_history/cfuzz/CYCLE_04_SHUTDOWN_FIX.md
deleted file mode 100644
index fc25d5c..0000000
--- a/docs/development_history/cfuzz/CYCLE_04_SHUTDOWN_FIX.md
+++ /dev/null
@@ -1,54 +0,0 @@
-# Cycle 4: Shutdown Fix + Bug-Inspired Tests — Development History
-
-> Commit: `cf61619` · 3 files · 161 insertions, 12 deletions
-
----
-
-## Motivation
-
-Cycle 3 introduced thread parking, but created a new problem: `shutdown()` didn't unpark workers. Parked workers wouldn't notice the shutdown signal until their `park_timeout` expired, causing delayed shutdown. Additionally, studying bug reports from competitor projects (Ractor, Kameo, Actix) revealed specific failure modes worth testing in swactor.
-
-## Competitor Bug Analysis
-
-The 5 new tests were directly inspired by real bug reports from other actor frameworks:
-
-| Test | Inspired By | Bug |
-|------|-------------|-----|
-| `stats_snapshot_is_read_only` | Ractor #310 | `get_children()` was destructive — moved children out of supervisor |
-| `stats_under_load_do_not_interfere_with_processing` | General | Stats collection shouldn't slow down message processing |
-| `shutdown_wakes_parked_workers_immediately` | Cycle 3 regression | Parked workers must notice shutdown promptly |
-| `mt_send_after_run_delivers_to_running_actors` | Kameo #185 | Messages sent after `run()` weren't delivered during startup race |
-| `budget_respected_even_with_self_sends` | Actix #515 | Self-sends bypassed mailbox capacity, defeating backpressure |
-
-## Implementation
-
-### Shutdown Fix
-- `shutdown()` now iterates all workers and calls `unpark()` on each thread handle
-- Parked workers wake immediately and check the shutdown flag
-- Workers that aren't parked are unaffected (unpark is a no-op)
-
-### Bug-Inspired Tests
-Each test encodes a real bug class discovered in competitor frameworks, ensuring swactor doesn't have the same vulnerability.
-
-**Key files modified:** `src/runtime.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **Unpark-all on shutdown** rather than a dedicated shutdown condvar — simpler, reuses existing parking infrastructure from Cycle 3
-- **Bug-inspired testing methodology** — studying competitor bug trackers yields high-value test cases that target real failure modes, not theoretical ones
-
-## Tests Added
-
-5 new tests (52 → 57 total):
-
-- `stats_snapshot_is_read_only` — reading stats doesn't mutate runtime state (from Ractor #310)
-- `stats_under_load_do_not_interfere_with_processing` — stats don't affect message processing throughput
-- `shutdown_wakes_parked_workers_immediately` — validates fast shutdown with thread parking
-- `mt_send_after_run_delivers_to_running_actors` — messages sent after run() are delivered (from Kameo #185)
-- `budget_respected_even_with_self_sends` — self-sends don't bypass budget (from Actix #515)
-
-## Result
-
-- 57 tests pass
-- All workspace crates compile
-- Shutdown latency with parked workers reduced from up to 1ms to near-zero
diff --git a/docs/development_history/cfuzz/CYCLE_05_LOAD_AWARE_PLACEMENT.md b/docs/development_history/cfuzz/CYCLE_05_LOAD_AWARE_PLACEMENT.md
deleted file mode 100644
index c3eef1b..0000000
--- a/docs/development_history/cfuzz/CYCLE_05_LOAD_AWARE_PLACEMENT.md
+++ /dev/null
@@ -1,66 +0,0 @@
-# Cycle 5: Load-Aware Actor Placement + Work Stealing Research — Development History
-
-> Commit: `7d00e65` · 6 files · 184 insertions, 13 deletions
-
----
-
-## Motivation
-
-With fairness (Cycle 1), thread parking (Cycle 3), and shutdown (Cycle 4) resolved, the next bottleneck was actor placement. Swactor used blind round-robin to assign actors to workers — ignoring current load. If actors have unequal workloads, round-robin produces persistent imbalance. This cycle also included deep research into work stealing to decide whether full actor migration was worthwhile.
-
-## Competitor Analysis: Work Stealing Deep Dive
-
-| Aspect | Tokio | Go | BEAM | ForkJoinPool |
-|--------|-------|-----|------|-------------|
-| Queue | Fixed 256-slot ring | 256-slot ring + runnext | Per-priority linked | Growable array deque |
-| Steal granularity | Half victim's queue | Half victim's runq | Individual processes | One task at a time |
-| LIFO fast-path | Dedicated slot (3-use cap) | runnext (stealable 4th try) | None | Owner pops from top |
-| Global queue | Mutex intrusive list | Checked 1/61 ticks | Per-priority migration | Even-indexed queues |
-| Searcher limit | N/2 workers | GOMAXPROCS/2 | N/A (proactive migration) | Idle stack in ctl |
-| Balance strategy | Reactive steal | Reactive steal | **Proactive migration** + reactive | Reactive scan |
-
-### Key Patterns Discovered
-
-1. **LIFO slot** — every runtime has one; improves cache locality by running the recipient immediately after the sender. Tokio caps at 3 consecutive uses to prevent starvation.
-2. **Steal-half** — Tokio and Go both steal half the victim's queue, amortizing cross-thread coordination overhead.
-3. **N/2 searcher limit** — both Tokio and Go cap concurrent searchers to prevent thundering herd (O(N²) cache-line bouncing).
-4. **BEAM's migration** — unique dual approach: reactive stealing when idle + proactive migration via periodic `check_balance()`.
-
-### Feasibility for Swactor
-
-- **Full actor migration**: Mechanically possible (ActorSlot is `Send`), but has a 1-tick message loss window during migration and requires push-based donation (`ActorPool` is not `Sync` → no pull stealing)
-- **Message stealing without actors**: Impossible — the actor IS the state; messages without the actor are meaningless
-- **Decision: Load-aware placement over work stealing** — zero correctness risk, handles the primary imbalance source (uneven spawn distribution), full work stealing deferred
-
-## Implementation
-
-- `Placement::next_worker()` now reads per-worker stats (`num_actors` + `mailbox_depth`)
-- Selects the worker with lowest combined load
-- Scan starts from a rotating position → round-robin fallback when all stats are equal (initial burst, before first tick publishes stats)
-- O(N) relaxed atomic loads per spawn — trivial for N ≤ 8 workers
-
-**Key files modified:** `src/delivery.rs`, `tests/runtime_api.rs`, `benches/runtime_benchmarks.rs`
-
-## Design Decisions
-
-- **Load-aware placement instead of work stealing** — zero message loss risk, no ordering changes, trivial implementation cost. Handles the #1 source of imbalance: uneven spawn distribution.
-- **Combined metric (actors + depth)** — neither actor count alone nor mailbox depth alone captures load accurately. Combined metric approximates total pending work per worker.
-- **Relaxed atomics for stat reads** — stats are advisory (best-effort), so relaxed ordering is sufficient. No need for acquire/release which would add synchronization cost.
-- **Round-robin fallback** — before the first tick, all workers report zero stats. Falling back to round-robin ensures even initial distribution rather than always picking worker 0.
-- **Full work stealing deferred** — would require migration channels, address map coordination, forwarding tombstones, and a message loss window. Benefit uncertain for N ≤ 8 workers.
-
-## Tests Added
-
-3 new tests (57 → 60 total):
-
-- `load_aware_placement_prefers_lighter_worker` — imbalanced load biases spawn toward the lighter worker
-- `load_aware_placement_single_worker_degrades_gracefully` — single-thread mode works correctly
-- `load_aware_placement_falls_back_to_round_robin_on_fresh_runtime` — even distribution before ticks produce stats
-
-**Benchmark added:** `placement/spawn_under_load` (2-thread and 4-thread variants)
-
-## Result
-
-- 60 tests pass
-- All workspace crates compile
-- Comprehensive work-stealing research documented for future reference
diff --git a/docs/development_history/cfuzz/CYCLE_06_BACKPRESSURE.md b/docs/development_history/cfuzz/CYCLE_06_BACKPRESSURE.md
deleted file mode 100644
index 67f6444..0000000
--- a/docs/development_history/cfuzz/CYCLE_06_BACKPRESSURE.md
+++ /dev/null
@@ -1,56 +0,0 @@
-# Cycle 6: Per-Actor Mailbox Backpressure — Development History
-
-> Commit: `265992c` · 6 files · 163 insertions, 8 deletions
-
----
-
-## Motivation
-
-Before this change, swactor mailboxes were unbounded — a fast producer could flood a slow consumer's mailbox without limit, eventually exhausting memory. Every production actor framework provides some form of backpressure. This was identified as a key weakness in the competitor analysis.
-
-## Competitor Analysis
-
-| Framework | Default Capacity | Overflow Policy | Backpressure Model |
-|-----------|-----------------|----------------|-------------------|
-| Erlang/OTP | Unbounded | N/A (pobox for opt-in bounding) | Process isolation limits blast radius |
-| Actix | 16 | `do_send()` bypasses for internal msgs | Tiny default, force callers to handle |
-| Kameo | 64 | Bounded tokio mpsc (sender blocks) | Blocking backpressure |
-| Tokio mpsc | User-specified | Bounded (sender blocks or permit pattern) | Blocking or try_send |
-| Go channels | User-specified | Blocking send / non-blocking select | Blocking backpressure |
-| **Swactor (before)** | **Unbounded** | **None** | **None** |
-
-Key observation: Actix's default capacity of 16 is aggressive — it forces callers to think about message flow. Kameo's 64 matches swactor's message budget. The consensus across frameworks: bounded by default, with configurable overflow policy.
-
-## Implementation
-
-- Added `MailboxOverflow` enum: `DropNewest` (discard incoming when full) and `DropOldest` (evict oldest to make room)
-- Added `default_mailbox_capacity` and `mailbox_overflow` to `RuntimeConfig`
-- Default: `capacity=0` (unbounded) — 100% backward compatible
-- `ActorSlot` stores per-actor capacity and policy (initialized from runtime defaults at spawn time)
-- `deliver()` in worker enforces bounds; dropped messages tracked via `drops_this_tick` counter
-- `messages_dropped: AtomicU64` added to `WorkerStats` and `WorkerInfo`
-
-**Key files modified:** `src/config.rs`, `src/worker.rs`, `src/runtime.rs`, `src/stats.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **DropNewest vs DropOldest (not blocking)** — swactor's synchronous tick model can't block the sender (it would deadlock the entire worker). Drop policies are the only viable option for a sync runtime.
-- **Default unbounded** — backward compatibility. Users opt into backpressure by setting capacity > 0.
-- **Per-runtime defaults, not per-actor** — simpler configuration. Per-actor overrides could be added later via a builder pattern on spawn.
-- **Drop counting** — critical for observability. Without it, users can't tell if their system is losing messages.
-- **No DropRandom** — the two policies cover the common cases. DropNewest protects against producer floods (newest messages are redundant). DropOldest keeps the freshest state (useful for sensor/status actors).
-
-## Tests Added
-
-4 new tests (60 → 64 total):
-
-- `bounded_mailbox_drop_newest_caps_at_capacity` — 50 msgs sent, capacity 10 → only 10 delivered (oldest 10)
-- `bounded_mailbox_drop_oldest_keeps_newest` — 10 msgs sent, capacity 5 → newest 5 kept
-- `unbounded_mailbox_delivers_all_messages` — backward compatibility: capacity=0 delivers everything
-- `bounded_mailbox_refills_after_processing` — capacity 5, process batch, refill works correctly
-
-## Result
-
-- 64 tests pass
-- All workspace crates compile
-- Swactor weakness "no backpressure" resolved
diff --git a/docs/development_history/cfuzz/CYCLE_07_ACTOR_RECOVERY.md b/docs/development_history/cfuzz/CYCLE_07_ACTOR_RECOVERY.md
deleted file mode 100644
index 1dd04d9..0000000
--- a/docs/development_history/cfuzz/CYCLE_07_ACTOR_RECOVERY.md
+++ /dev/null
@@ -1,59 +0,0 @@
-# Cycle 7: Actor Recovery via Factory-Based Restart — Development History
-
-> Commit: `1779ad6` · 6 files · 167 insertions, 10 deletions
-
----
-
-## Motivation
-
-Before this change, a panicking actor was permanently poisoned — it could never process messages again. Its address remained in the address map but silently discarded all messages. In production, this means a single panic permanently degrades the system. Every mature actor framework provides some form of crash recovery.
-
-## Competitor Analysis
-
-| Framework | Recovery Model | State After Restart | Mailbox After Restart |
-|-----------|---------------|--------------------|-----------------------|
-| Erlang/OTP | Factory (MFA tuple), fresh process | Fresh (new init/1) | Lost (new PID) |
-| Akka | Replace internals, keep ActorRef | Fresh (preRestart hook) | Preserved (docs say "usually wrong") |
-| Kameo | `on_panic(&mut self)` hook | Potentially corrupt | Preserved |
-| Actix | `Supervised` trait, re-create context | Fresh | Lost |
-| Ractor | `SupervisionEvent` callback | Up to supervisor | Up to supervisor |
-| **Swactor (before)** | **None — permanent poison** | **N/A** | **Silently discarded** |
-
-### Key Insight
-Akka's approach of preserving state by replacing internals is documented as "usually wrong" — the state that caused the panic is likely corrupt. Kameo's `on_panic(&mut self)` is risky for the same reason. Erlang's factory-based restart (fresh process from MFA tuple) is the safest approach: guaranteed clean state.
-
-## Implementation
-
-- `Actor<A>` expanded from tuple struct to named fields: `inner`, `restart_factory`, `max_restarts`, `restart_count`
-- `AnyActor::try_restart(&self) -> Option<Box<dyn AnyActor>>` trait method (default `None`, backward compatible)
-- Factory stored as `Arc<dyn Fn() -> A + Send + Sync>` — called to produce fresh actor instance on restart
-- `spawn_restartable(actor, factory, max_restarts)` added to both `Runtime` and `Ctx`
-- `tick_all` panic handler: `try_restart()` before poisoning; on success, replace actor, clear mailbox, reset state
-- `restarts` counter added to `WorkerStats` and `WorkerInfo`
-
-**Key files modified:** `src/actor.rs`, `src/runtime.rs`, `src/worker.rs`, `src/stats.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **Factory-based restart (Erlang model)** — safest approach, guaranteed clean state. Factory closure is `Arc<dyn Fn() -> A>`, cloned into fresh `Actor<A>` on each restart.
-- **max_restarts limit** — prevents infinite restart loops. When exceeded, actor is permanently poisoned. Mirrors Erlang's restart intensity.
-- **Mailbox cleared on restart** — messages that triggered the panic are discarded. Fresh actor starts with empty mailbox. (Erlang does this too — new PID means new mailbox.)
-- **Same address preserved** — unlike Erlang (new PID), the restarted actor keeps its `ActorAddress`. This is simpler for callers and matches Akka's model.
-- **Factory fields are "cold"** — `restart_factory` and `max_restarts` are never touched by `handle_any` (the hot path). After `catch_unwind`, these fields are guaranteed safe to read.
-- **Non-restartable actors unchanged** — `try_restart()` returns `None` by default, preserving the existing poison-on-panic behavior.
-
-## Tests Added
-
-4 new tests (64 → 68 total):
-
-- `restartable_actor_recovers_after_panic` — basic restart works: panic, recover, process new messages
-- `restartable_actor_resets_state_on_restart` — fresh state confirmed post-restart (counter resets to zero)
-- `restartable_actor_respects_max_restarts` — 2 restarts allowed, 3rd panic → permanent poison
-- `non_restartable_actor_still_poisons_on_panic` — backward compatibility: default actors still poison
-
-## Result
-
-- 68 tests pass
-- All workspace crates compile
-- Swactor weakness "panicked actors permanently poisoned" resolved
-- Foundation laid for supervision trees (Cycle 17)
diff --git a/docs/development_history/cfuzz/CYCLE_08_DEAD_ACTOR_CLEANUP.md b/docs/development_history/cfuzz/CYCLE_08_DEAD_ACTOR_CLEANUP.md
deleted file mode 100644
index e697429..0000000
--- a/docs/development_history/cfuzz/CYCLE_08_DEAD_ACTOR_CLEANUP.md
+++ /dev/null
@@ -1,54 +0,0 @@
-# Cycle 8: Dead Actor Cleanup (Memory Leak Fix) — Development History
-
-> Commit: `0213938` · 4 files · 120 insertions, 14 deletions
-
----
-
-## Motivation
-
-After Cycles 7 (recovery) and the pre-existing poison-on-panic behavior, dead actors accumulated in both `ActorPool` and `AddressMap` forever. Their slots were never reclaimed, their addresses remained registered, and the system gradually leaked memory. This is a known bug class in actor frameworks.
-
-## Competitor Analysis
-
-| Framework | Dead Actor Handling | Known Bugs |
-|-----------|-------------------|------------|
-| Akka | Automatic cleanup via DeathWatch | #22990 — ActorRef leak in certain paths |
-| CAF | Manual cleanup expected | #420 — actor leak in specific failure modes |
-| Erlang/OTP | Automatic — process exits free all resources | N/A (VM handles cleanup) |
-| Ractor | Supervisor-driven cleanup | Memory bloat per actor at scale |
-| **Swactor (before)** | **None — permanent leak** | **Both ActorPool and AddressMap leak** |
-
-## Implementation
-
-- Added `AddressMap::remove(addr)` to `delivery.rs` — O(1) removal from address map
-- Added `ActorPool::cleanup_dead()` to `worker.rs` — collects and removes poisoned actors, returns their addresses
-- Added Phase 7 to `tick_once`: `cleanup_dead` → remove from address_map → re-publish `num_actors` stat
-- Stats immediately reflect removal (no stale counts)
-
-**Key files modified:** `src/delivery.rs`, `src/worker.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **Automatic cleanup in tick_once** — no manual API needed. Dead actors are cleaned up every tick, preventing accumulation.
-- **Phase 7 (after all message processing)** — cleanup happens after `tick_all` and `pending_local`, so any final messages to dead actors correctly fail. No risk of cleaning up an actor that's about to receive a message.
-- **Re-publish `num_actors` after cleanup** — ensures stats are immediately consistent. Without this, stats would show stale actor counts until the next tick.
-
-### Behavior Change
-- **Before**: Sending to a poisoned actor silently discarded the message (address still in map, delivery succeeded, but processing was skipped)
-- **After**: Sending to a cleaned-up actor returns `Err` (address removed from map, send fails)
-- This is **better** — callers learn the actor is gone instead of silently losing messages.
-
-## Tests Added
-
-2 new tests + 2 existing tests updated (68 → 70 total):
-
-- `dead_actor_cleaned_up_from_stats_and_address_map` — good actor persists, bad actor's address is removed
-- `bulk_dead_actor_cleanup` — 20 panicked actors all cleaned up in one tick
-- Updated `send_to_poisoned_actor_is_a_silent_black_hole` → now asserts send returns `Err` (behavior change)
-- Updated `poisoned_actor_messages_not_counted_as_processed` → sends fail to cleaned-up actor
-
-## Result
-
-- 70 tests pass
-- All workspace crates compile
-- Memory leak closed: dead actors no longer accumulate in ActorPool or AddressMap
diff --git a/docs/development_history/cfuzz/CYCLE_09_LIFECYCLE_HOOKS.md b/docs/development_history/cfuzz/CYCLE_09_LIFECYCLE_HOOKS.md
deleted file mode 100644
index ab06da4..0000000
--- a/docs/development_history/cfuzz/CYCLE_09_LIFECYCLE_HOOKS.md
+++ /dev/null
@@ -1,79 +0,0 @@
-# Cycle 9: Lifecycle Hooks and Graceful Actor Stop — Development History
-
-> Commit: `e28aca0` · 8 files · 427 insertions, 27 deletions
-
----
-
-## Motivation
-
-Before this change, actors had no initialization or teardown callbacks and no way to stop gracefully. An actor started processing messages immediately (no setup phase) and could only die by panicking. Every mature actor framework provides lifecycle hooks for resource management and graceful shutdown.
-
-## Competitor Analysis
-
-| Framework | on_start | on_stop | on_panic | Self-stop | External stop |
-|-----------|----------|---------|----------|-----------|---------------|
-| Erlang | `init/1` | `terminate/2` (NOT on crash) | N/A | `{stop,Reason,State}` | `gen_server:stop` |
-| Akka | `preStart` | `postStop` (always) | `preRestart` | `context.stop(self)` | PoisonPill / stop |
-| Actix | `started` | `stopped` | N/A | `ctx.stop()` | `addr.do_send(Stop)` |
-| Kameo | `on_start` | `on_stop` | `on_panic` | `Context::stop()` | `stop_gracefully/kill` |
-| Ractor | `pre_start` | `post_stop` (NOT on kill/panic) | N/A | `stop()` | `Signal::Kill` |
-| **Swactor** | **`on_start`** | **`on_stop` (NOT on panic)** | N/A | **`ctx.stop_self()`** | **`runtime.stop_actor()`** |
-
-### Key Findings
-- Most frameworks do NOT call `on_stop` on panic — state may be corrupt, running teardown on corrupt state is unsafe. Erlang and Ractor agree. Akka is the outlier (always calls `postStop`).
-- Self-stop should be immediate (after current message). External stop should be queued (PoisonPill semantics — process pending messages first).
-- Restarted actors should get `on_start` called again on the fresh instance.
-
-## Implementation
-
-### Lifecycle Hooks
-- `ActorInterface::on_start(&mut self, ctx: &Ctx)` — default no-op, called on first tick before any messages
-- `ActorInterface::on_stop(&mut self, ctx: &Ctx)` — default no-op, called during cleanup for gracefully-stopped actors
-- `AnyActor::on_start()`/`on_stop()` — forwarded from `Actor<A>` implementation
-- `ActorSlot` gains `started: bool` flag — tracks whether `on_start` has been called
-- `on_start` called in `tick_all` before first message; panic in `on_start` → immediate poison
-- `on_stop` called in `cleanup_dead` for stopping (not poisoned) actors, wrapped in `catch_unwind`
-- Restarted actors get `started=false` so `on_start` fires again on fresh instance
-
-### Graceful Stop (Dual Mode)
-- `ctx.stop_self()` — **immediate** stop after current message via `request_stop` buffer
-- `runtime.stop_actor(addr)` — **external** stop via `StopSignal` message (PoisonPill semantics: queued after existing messages)
-- `ActorSlot` gains `stopping: bool` flag
-- Phase 7 `cleanup_dead` now handles both poisoned AND stopping actors
-
-### Stats
-- `stops: AtomicU64` added to `WorkerStats` and `WorkerInfo` — tracks graceful stops separately from panics
-
-**Key files modified:** `src/actor.rs`, `src/worker.rs`, `src/runtime.rs`, `src/delivery.rs`, `src/stats.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **`on_stop` NOT called on panic** — matches Erlang and Ractor. Corrupt state after panic makes teardown unsafe. If you need cleanup, use `spawn_restartable` (Cycle 7) to get a fresh instance.
-- **Dual stop modes** — `ctx.stop_self()` is immediate (actor decides "I'm done after this message"). `runtime.stop_actor()` is queued (external signal processed after pending messages). This matches Erlang's `{stop, Reason, State}` vs `gen_server:stop`.
-- **StopSignal as a message** — external stop uses the same delivery pipeline as regular messages. No special-case routing needed. The PoisonPill pattern (Akka) is well-proven.
-- **`on_start` panic → immediate poison** — initialization failure is fatal. No restart attempted because the factory might produce the same broken actor. Matches Erlang's `{stop, Reason}` from `init/1`.
-- **Default no-ops** — both hooks are optional. Existing actors don't need to change. 100% backward compatible.
-
-## Tests Added
-
-12 new tests (70 → 82 total):
-
-- `on_start_called_before_first_message` — on_start fires on first tick, before messages
-- `on_start_called_per_actor` — 5 actors each get exactly one on_start call
-- `on_start_panic_poisons_actor` — panic in on_start → poisoned, no messages processed
-- `actor_can_stop_self` — 5 msgs sent, stops after 3, only 3 processed, on_stop called
-- `runtime_can_stop_actor` — external stop via runtime, on_stop called, actor removed
-- `send_to_stopped_actor_returns_error` — stopped actor gone from address map
-- `stop_vs_panic_tracked_separately_in_stats` — stops and panics counted independently
-- `on_stop_can_send_messages` — farewell message sent during on_stop is delivered
-- `on_start_called_again_after_restart` — restartable actor gets on_start on fresh instance
-- `external_stop_is_queued_after_pending_messages` — PoisonPill semantics verified
-- `external_stop_before_new_messages_prevents_processing` — stop before send blocks new msgs
-- `stop_nonexistent_actor_returns_error` — stop on bad address returns Err
-
-## Result
-
-- 82 tests pass
-- All workspace crates compile
-- Swactor weaknesses "no lifecycle hooks" and "no graceful stop" both resolved
-- Foundation for supervision (Cycle 17) — `on_stop` enables resource cleanup, `stop_actor` enables supervisor-controlled shutdown
diff --git a/docs/development_history/cfuzz/CYCLE_10_TIMERS.md b/docs/development_history/cfuzz/CYCLE_10_TIMERS.md
deleted file mode 100644
index 98e1d2d..0000000
--- a/docs/development_history/cfuzz/CYCLE_10_TIMERS.md
+++ /dev/null
@@ -1,76 +0,0 @@
-# Cycle 10: Per-Worker Tick-Counting Timers — Development History
-
-> Commit: `d58a999` · 5 files · 247 insertions, 5 deletions
-
----
-
-## Motivation
-
-Actors often need to schedule delayed or periodic work (timeouts, heartbeats, polling intervals). Before this change, swactor had no timer mechanism — actors had to manually count ticks or rely on external scheduling. The synchronous tick model makes wall-clock timers inappropriate, but tick-counting timers are a natural fit and provide deterministic behavior.
-
-## Competitor Analysis
-
-| Framework | Timer Model | Deterministic? |
-|-----------|------------|---------------|
-| Erlang | `timer:send_after`, `erlang:start_timer` (wall-clock ms) | No |
-| Akka | `scheduleOnce`, `scheduler` (wall-clock duration) | No |
-| Actix | `ctx.run_later`, `ctx.run_interval` (wall-clock) | No |
-| Kameo | `tokio::time::sleep` (wall-clock) | No |
-| Tokio | `tokio::time` (wall-clock, pausable for testing) | With `time::pause()` |
-| Go | `time.After`, `time.NewTicker` (wall-clock) | No |
-| **Swactor** | **Tick-counting** | **Yes — fully deterministic** |
-
-### Key Insight
-Swactor's synchronous tick model makes tick-counting timers uniquely valuable: a timer scheduled for "5 ticks from now" fires at exactly tick N+5, regardless of wall-clock speed. This makes timer behavior reproducible in tests and simulations — something no other framework provides natively.
-
-Also researched but **rejected**: priority messages (lifecycle hooks from Cycle 9 cover 95% of use cases) and SmallBox optimization (deferred: measure allocation cost first before adding unsafe code).
-
-## Implementation
-
-### Timer Types
-- `OnceTimer` — fire once at `fire_at` tick, consumed after firing
-- `IntervalTimer` — fire every `period` ticks, message cloned via `CloneMsg` trait
-
-### Timer Infrastructure
-- `CloneMsg` trait — type-erased clone for interval timer messages (blanket impl for `Message + Clone`)
-- `TimerRequest` enum: `Once { dest, msg, ticks }` | `Interval { dest, msg, period }`
-- Per-worker `TimerWheel` — stores pending timers, checked each tick
-
-### Integration into tick_once
-- **Phase 2.5**: Fire due timers, route through full delivery system (pool.deliver for local actors, transfer_txs for cross-worker, inbox_registry for inboxes)
-- **Phase 5.5**: Drain timer requests from handler buffer into TimerWheel
-- **After cleanup_dead**: GC interval timers for dead actors
-
-### API
-- `ctx.send_after_ticks(addr, msg, ticks)` — one-shot timer
-- `ctx.send_interval_ticks(addr, msg, period)` — interval timer
-- `Runtime::schedule_timer()` — no-op with warning (timers are per-worker only, must be scheduled from within a handler)
-
-**Key files modified:** `src/actor.rs`, `src/worker.rs`, `src/runtime.rs`, `src/delivery.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **Tick-counting, not wall-clock** — deterministic behavior is a core swactor advantage. Wall-clock timers would break test reproducibility and simulation fidelity.
-- **Per-worker timer wheel** — timers are local to the worker that owns the actor. No cross-worker synchronization needed. Timer routing uses the same delivery system as regular messages.
-- **CloneMsg trait** — interval timers need to clone the message for each firing. A blanket impl covers all `Message + Clone` types, so users don't need to implement anything extra.
-- **Timer GC for dead actors** — interval timers must be cleaned up when their target actor dies, otherwise they fire forever into the void.
-
-### Bug Fixed
-`gc_dead_intervals` was initially over-aggressive — it removed timers for ANY address not in the local pool, including inboxes and cross-worker actors. Fixed to only GC timers for addresses in the `dead` set from `cleanup_dead`.
-
-## Tests Added
-
-6 new tests (82 → 88 total):
-
-- `one_shot_timer_fires_after_n_ticks` — timer with delay=3 fires on tick 4
-- `handler_can_schedule_one_shot_timer` — timer scheduled from within a handler fires correctly
-- `one_shot_timer_fires_only_once` — consumed after firing, doesn't repeat
-- `interval_timer_fires_repeatedly` — period=2, fires every 2 ticks (3 firings verified)
-- `interval_timer_cleaned_up_when_actor_dies` — GC removes orphaned interval timers
-- `timer_with_zero_delay_fires_next_tick` — delay=0 fires on next tick (not same tick)
-
-## Result
-
-- 88 tests pass
-- All workspace crates compile
-- Bug found and fixed: over-aggressive timer GC for cross-worker addresses
diff --git a/docs/development_history/cfuzz/CYCLE_11_PROPERTY_TESTING.md b/docs/development_history/cfuzz/CYCLE_11_PROPERTY_TESTING.md
deleted file mode 100644
index 544628f..0000000
--- a/docs/development_history/cfuzz/CYCLE_11_PROPERTY_TESTING.md
+++ /dev/null
@@ -1,84 +0,0 @@
-# Cycle 11: Property-Based Testing and Extended Fuzz Targets — Development History
-
-> Commit: `9b1518b` · 5 files · 534 insertions, 3 deletions
-
----
-
-## Motivation
-
-After 10 cycles of behavioral tests, the test suite relied entirely on manually-written scenarios. Property-based testing can explore state spaces that humans wouldn't think to test, automatically finding minimal failing cases. With swactor's deterministic tick model, property-based testing is an especially good fit — no concurrency noise to mask bugs.
-
-## Competitor Analysis
-
-| Framework/Tool | Testing Approach | Fit for Swactor |
-|----------------|-----------------|-----------------|
-| Tokio + Loom | Model-checking for lock-free code | Poor fit — swactor isn't lock-free |
-| Erlang + PropEr/QuickCheck | Property-based with shrinking | Good model for swactor |
-| Shuttle | Concurrency permutation testing | Moderate — useful for MT tests |
-| proptest-state-machine | Stateful property testing for Rust | **Perfect fit** — deterministic ticks |
-| cargo-fuzz | Coverage-guided fuzzing | Already in use, extended here |
-
-### Ranked Approaches
-1. **proptest-state-machine** — perfect fit for deterministic ticks, generates random operation sequences, automatic shrinking
-2. Extend cargo-fuzz with new action types
-3. Simple proptest (stateless properties)
-4. Shuttle (concurrency permutations)
-5. Loom (lock-free verification)
-
-### Key Finding: Feature Gap Analysis
-While researching testing approaches, also surveyed remaining feature gaps: named actors/registry, actor monitoring/death watch, actor groups/pub-sub, and ask pattern. These became Cycles 12–15.
-
-## Implementation
-
-### Property-Based Tests (proptest)
-Added `proptest` and `proptest-state-machine` to dev-dependencies. New test file: `tests/proptest_runtime.rs` with 7 tests:
-
-| Test | Property Verified |
-|------|-------------------|
-| `fifo_ordering_for_any_message_sequence` | FIFO preserved for 1–100 random messages |
-| `budget_limits_per_actor_processing` | Budget caps per-tick processing for 2–10 actors |
-| `one_shot_timer_fires_at_correct_tick` | Timer with delay 1–20 fires at exact right tick |
-| `interval_timer_fires_at_correct_period` | Period 1–10, verifies 3 consecutive firings |
-| `bounded_mailbox_never_exceeds_capacity` | Capacity 1–20, 1–200 messages, never exceeds |
-| `spawn_n_actors_all_tracked` | 1–50 actors, all unique, all in stats |
-| `swactor_state_machine` | Random Spawn/Send/Tick/Stop/CheckStats sequences |
-
-### State Machine Test
-The `swactor_state_machine` test is the most sophisticated:
-- **Reference model**: `HashMap<id, alive>` tracking expected actor lifecycle
-- **Operations**: random Spawn, Send, Tick, Stop, CheckStats transitions (up to 40 per test, 128 cases)
-- **Invariants checked after every transition**: worker count, actor placement, mailbox safety
-- **Automatic shrinking**: finds minimal failing sequences when invariants break
-
-### Extended Fuzz Targets
-Added 4 new `RawAction` variants to `fuzz/fuzz_targets/fuzz_runtime.rs`:
-- `StopActor` — graceful stop via `runtime.stop_actor`
-- `SpawnRestartable` — `spawn_restartable` with configurable `max_restarts`
-- `ScheduleTimer` — one-shot timer via TimerSchedulerActor
-- `ScheduleInterval` — interval timer via IntervalSchedulerActor
-
-3 new actor types added to fuzz: `TimerSchedulerActor`, `IntervalSchedulerActor`, `RestartableEchoActor`
-
-**Key files modified:** `Cargo.toml`, `tests/proptest_runtime.rs` (new), `fuzz/fuzz_targets/fuzz_runtime.rs`
-
-## Design Decisions
-
-- **proptest-state-machine over Loom** — Loom is designed for lock-free concurrent data structures. Swactor's primary correctness properties are sequential (within a tick). The state machine approach tests the actor lifecycle model, which is where bugs are most likely.
-- **Reference model pattern** — the state machine test maintains a separate `HashMap` as the "expected" state and compares it against the runtime's actual state after each operation. This catches any divergence between the mental model and reality.
-- **Extending existing fuzz targets** — rather than creating new fuzz targets, extended the existing `fuzz_runtime.rs` with new action variants. This means the fuzzer explores interactions between the new features (timers, restart, stop) and existing operations (spawn, send, tick).
-
-### Bug Found
-The state machine test immediately caught an invariant mismatch: `address_map` tracks spawned actors immediately (on spawn), but per-worker `num_actors` lags until the first tick (when the spawn is drained). Fixed the invariant to use `<=` check instead of exact equality.
-
-## Tests Added
-
-7 new property tests (88 → 95 total):
-
-- 6 stateless property tests covering FIFO, budget, timers, mailbox bounds, and spawn tracking
-- 1 stateful state machine test covering random operation sequences
-
-## Result
-
-- 95 tests pass (88 behavioral + 7 proptest)
-- Fuzz targets compile with new action variants
-- Bug found: stats lag vs address_map on spawn (invariant relaxed)
diff --git a/docs/development_history/cfuzz/CYCLE_12_NAMED_REGISTRY.md b/docs/development_history/cfuzz/CYCLE_12_NAMED_REGISTRY.md
deleted file mode 100644
index 2127187..0000000
--- a/docs/development_history/cfuzz/CYCLE_12_NAMED_REGISTRY.md
+++ /dev/null
@@ -1,83 +0,0 @@
-# Cycle 12: Named Actor Registry with Auto-Cleanup — Development History
-
-> Commit: `66a8523` · 6 files · 267 insertions, 7 deletions
-
----
-
-## Motivation
-
-Actors in swactor were only addressable by opaque `ActorAddress` values returned from spawn. There was no way to look up an actor by name — callers needed to pass addresses around manually. Named registration is one of the most fundamental actor runtime features, enabling service discovery within a runtime.
-
-## Competitor Analysis
-
-| Framework | Key Type | Storage | Scope | Auto-Cleanup |
-|-----------|----------|---------|-------|-------------|
-| Erlang | Atom | ETS table | Per-node or global | Yes (on process exit) |
-| Actix | TypeId | SystemRegistry | Per-Arbiter | Yes (on actor stop) |
-| Bastion | Path | Hierarchy | Global | Yes (structural) |
-| Ractor | String | DashMap (global static) | Global | Yes (on actor death) |
-| xactor | TypeId | Singleton registry | Global | N/A (singletons) |
-| Akka | ServiceKey[T] | Receptionist | Cluster-wide | Yes (via DeathWatch) |
-| **Swactor** | **String** | **RwLock\<HashMap\>** | **Per-runtime** | **Yes (on death)** |
-
-### Key Findings
-- **TypeId keys** (Actix, xactor) don't fit swactor's type-erased model — multiple actors of the same type can't share a TypeId key
-- **Global static** (Ractor) breaks multi-runtime scenarios (tests, embedding)
-- **Erlang's `register/whereis`** is the gold standard: atom keys, per-node scope, automatic cleanup on process exit
-
-## Implementation
-
-### NameRegistry
-- `NameRegistry` in `delivery.rs` with forward + reverse maps:
-  - `names: RwLock<HashMap<String, ActorAddress>>` — name → address lookup
-  - `addrs: RwLock<HashMap<ActorAddress, String>>` — address → name (for O(1) cleanup)
-- Added to `Runtime` as `Arc<NameRegistry>`, threaded through `TickContext`
-
-### Runtime API
-- `spawn_named(name, actor)` — spawn and register atomically
-- `where_is(name)` — look up address by name
-- `unregister(name)` — manual unregistration (actor keeps running)
-- `registered_names()` — list all registered names
-
-### Context API
-- `ctx.spawn_named(name, actor)` — register from within a handler
-- `ctx.where_is(name)` — look up from within a handler
-
-### Auto-Cleanup
-- `cleanup_dead` phase calls `name_registry.unregister_by_addr()` for each dead actor
-- Name is freed immediately — can be reused for a replacement actor
-
-### TOCTOU Prevention
-- Name reservation is immediate (before spawn queue push) — prevents race between checking name availability and registering it
-
-**Key files modified:** `src/delivery.rs`, `src/runtime.rs`, `src/actor.rs`, `src/worker.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **String keys** — most flexible. Atoms (Erlang) aren't idiomatic in Rust. TypeId (Actix) is too restrictive. Strings allow any naming convention.
-- **Per-runtime scope** — matches swactor's architecture (one runtime per application). Global registries (Ractor) cause problems in tests and embedded scenarios.
-- **RwLock\<HashMap\>** — matches the existing `AddressMap` and `InboxRegistry` pattern. RwLock allows concurrent reads (lookups) with exclusive writes (registration).
-- **Collision returns error** — `spawn_named` returns `Err` if the name is already taken. The original binding is preserved. This is explicit and predictable, matching Erlang's behavior.
-- **Reverse map for O(1) cleanup** — without the reverse map, cleanup would require scanning all entries. The reverse map adds memory proportional to registered actors but makes cleanup constant-time.
-- **Immediate reservation** — name is reserved before the spawn is queued, preventing TOCTOU races where two `spawn_named` calls for the same name could both succeed.
-
-## Tests Added
-
-11 new tests (95 → 106 total):
-
-- `named_actor_lookup_returns_spawn_address` — spawn_named → where_is roundtrip
-- `named_actor_receives_messages_via_lookup` — send to looked-up address works
-- `duplicate_name_returns_error` — collision error, original binding preserved
-- `where_is_returns_none_for_unknown_name` — nonexistent name → None
-- `name_auto_unregistered_on_actor_death` — stop_actor → name freed
-- `name_can_be_reused_after_actor_death` — death → respawn with same name succeeds
-- `name_auto_unregistered_on_panic` — panic → name freed
-- `registered_names_lists_all` — all registered names returned
-- `manual_unregister_frees_name_but_actor_lives` — unregister doesn't kill the actor
-- `ctx_where_is_resolves_inside_handler` — where_is works from handler context
-- `ctx_spawn_named_registers_from_handler` — spawn_named works from handler context
-
-## Result
-
-- 106 tests pass (99 behavioral + 7 proptest)
-- All workspace crates compile, zero warnings
diff --git a/docs/development_history/cfuzz/CYCLE_13_MONITORING.md b/docs/development_history/cfuzz/CYCLE_13_MONITORING.md
deleted file mode 100644
index 59cc323..0000000
--- a/docs/development_history/cfuzz/CYCLE_13_MONITORING.md
+++ /dev/null
@@ -1,74 +0,0 @@
-# Cycle 13: Actor Monitoring with Down Message Notifications — Development History
-
-> Commit: `8782638` · 6 files · 268 insertions, 10 deletions
-
----
-
-## Motivation
-
-Actors had no way to know when other actors died. If actor A depended on actor B, and B panicked or was stopped, A would continue sending messages into the void with no notification. Monitoring (also called "death watch") is essential for building fault-tolerant systems — it's the foundation that supervision trees are built on.
-
-## Competitor Analysis
-
-| Framework | Mechanism | Direction | Notification |
-|-----------|-----------|-----------|-------------|
-| Erlang | `monitor/2` | Unidirectional | `DOWN` message |
-| Akka | `watch` | Unidirectional | `Terminated` message |
-| Ractor | `link` | Bidirectional | `SupervisionEvent` |
-| Actix | None built-in | N/A | N/A |
-| Kameo | `link` | Bidirectional | `on_link_died` callback |
-| **Swactor** | **`ctx.monitor()`** | **Unidirectional** | **`Down` message** |
-
-### Key Findings
-- **Erlang's unidirectional monitor + message delivery** is the best fit for swactor — it reuses the existing type-erased message handler, requires zero trait changes, and is composable
-- **Callbacks** (Ractor/Kameo style) rejected — would require adding a new method to `AnyActor`/`ActorInterface` traits, forcing all actors to implement it
-- **Bidirectional links** deferred — can be layered on top of monitors later
-- **Stacking** (Erlang) — multiple monitors of the same target produce independent notifications
-
-## Implementation
-
-### Types (in `actor.rs`)
-- `MonitorRef(u64)` — unique token from `AtomicU64` counter, used for demonitor
-- `Down { addr: ActorAddress, reason: StopReason }` — delivered as normal mailbox message
-- `StopReason` enum: `Normal` (graceful stop) | `Panicked` (panic, not restartable)
-
-### MonitorRegistry (in `delivery.rs`)
-- `watchers: RwLock<HashMap<ActorAddress, Vec<(MonitorRef, ActorAddress)>>>` — watched → list of (ref, watcher)
-- `refs: RwLock<HashMap<MonitorRef, ActorAddress>>` — ref → watched (for O(1) demonitor)
-
-### API
-- `ctx.monitor(target) → MonitorRef` — subscribe to death notifications
-- `ctx.demonitor(mref)` — cancel a subscription
-
-### Integration with cleanup_dead
-- `cleanup_dead` now returns `Vec<(ActorAddress, StopReason)>` instead of `Vec<ActorAddress>`
-- After cleanup: iterate dead actors, take monitors from registry, route `Down` through normal delivery (pool.deliver for same-worker, transfer_txs for cross-worker, inbox_registry for inboxes)
-- Dead watcher cleanup: `remove_watcher()` strips monitor subscriptions for dead watchers (prevents ghost subscriptions)
-
-**Key files modified:** `src/actor.rs`, `src/delivery.rs`, `src/runtime.rs`, `src/worker.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **Unidirectional monitors (Erlang model)** — simpler than bidirectional links, no cascading death. The watcher is notified but doesn't automatically die. This gives the watcher full control over how to react.
-- **Down as a regular message** — delivered through the same mailbox as other messages. Actors with `Incoming = Down` receive it via `handle()`. This reuses the entire existing delivery pipeline with zero special-case code.
-- **MonitorRef for demonitor** — each monitor subscription gets a unique ref. This supports stacking (multiple monitors of the same target) and precise cancellation.
-- **StopReason distinguishes Normal vs Panicked** — watchers can decide how to react based on whether the death was graceful or a crash. Matches Erlang's `DOWN` message which includes the exit reason.
-- **Dead watcher cleanup** — if the watcher dies before the watched actor, its monitor subscriptions are cleaned up. Without this, dead watchers would accumulate as ghost entries in the registry.
-
-## Tests Added
-
-7 new tests (106 → 113 total):
-
-- `monitor_notifies_on_graceful_stop` — Down{reason: Normal} on graceful stop
-- `monitor_notifies_on_panic` — Down{reason: Panicked} on panic
-- `multiple_watchers_all_notified` — two watchers both receive Down
-- `demonitor_cancels_notification` — demonitor → no Down delivered
-- `dead_watcher_does_not_receive_down` — dead watcher's monitors cleaned up
-- `down_delivered_to_external_inbox` — Down forwarded through inbox
-- `stacked_monitors_produce_multiple_notifications` — two monitors on same target → two Downs
-
-## Result
-
-- 113 tests pass (106 behavioral + 7 proptest)
-- All workspace crates compile, zero warnings
-- Foundation for supervision trees (Cycle 17) — monitors provide the death detection mechanism
diff --git a/docs/development_history/cfuzz/CYCLE_14_GROUPS.md b/docs/development_history/cfuzz/CYCLE_14_GROUPS.md
deleted file mode 100644
index d8be6d4..0000000
--- a/docs/development_history/cfuzz/CYCLE_14_GROUPS.md
+++ /dev/null
@@ -1,83 +0,0 @@
-# Cycle 14: Actor Groups with Pub-Sub Broadcast — Development History
-
-> Commit: `4d18874` · 5 files · 307 insertions, 8 deletions
-
----
-
-## Motivation
-
-Named registry (Cycle 12) provides one-to-one name→actor mapping. Many patterns require one-to-many: broadcasting events to subscribers, load distribution across a pool, or topic-based message routing. Actor groups provide this — a named collection of actors that can receive messages as a group.
-
-## Competitor Analysis
-
-| Framework | Mechanism | Key Design | Auto-Cleanup |
-|-----------|-----------|------------|-------------|
-| Erlang `pg` | Scopes, join/leave/get_members | Flat groups, atom keys | Yes (on process exit) |
-| Akka | DistributedPubSub (mediator, topics) | Cluster-wide pub-sub | Yes (via DeathWatch) |
-| Ractor | `pg` module (join/leave/broadcast) | Erlang-style, global | Yes |
-| Bastion | Dispatcher | Hierarchy-based routing | Structural |
-| Redis pub/sub | Channels, patterns | External service | N/A |
-| **Swactor** | **GroupRegistry** | **Erlang pg-style, per-runtime** | **Yes (on death)** |
-
-### Common Patterns Across Frameworks
-- Auto-cleanup on death (universal)
-- At-most-once delivery (no re-delivery guarantees)
-- String-based naming (flat, not hierarchical)
-- Lazy group creation/deletion (groups created on first join, deleted when empty)
-
-## Implementation
-
-### GroupRegistry (in `delivery.rs`)
-- Forward map: `groups: RwLock<HashMap<String, HashSet<ActorAddress>>>` — group → members
-- Reverse map: `memberships: RwLock<HashMap<ActorAddress, HashSet<String>>>` — actor → groups (for cleanup)
-- Groups auto-create on first join, auto-delete when empty
-
-### Runtime API
-- `join_group(addr, name)` — add actor to group
-- `leave_group(addr, name)` — remove actor from group
-- `publish_to(group, msg)` — broadcast to all group members
-- `group_members(group)` — list members
-- `groups()` — list all groups
-
-### Context API (from handler)
-- `ctx.join_group(name)` — join from inside handler
-- `ctx.leave_group(name)` — leave from inside handler
-- `ctx.publish(group, msg)` — broadcast from inside handler
-- `ctx.group_members(group)` — query from inside handler
-
-### Message Delivery
-- `publish` clones message at the typed level (`Message: Clone`), sends to each member via normal routing
-- Uses the same delivery pipeline as regular messages (pool.deliver, transfer_txs, inbox_registry)
-
-### Auto-Cleanup
-- `group_registry.cleanup(&addr)` called in `cleanup_dead` phase
-- Uses reverse map to find all groups the dead actor belonged to, removes from each
-
-**Key files modified:** `src/delivery.rs`, `src/runtime.rs`, `src/actor.rs`, `src/worker.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **Erlang `pg` model** — flat groups with string keys. Simpler than Akka's mediator/topic model, and sufficient for the common use cases (event broadcasting, worker pools).
-- **Clone-based broadcast** — message is cloned for each recipient. This is O(N) but straightforward and type-safe. Alternative (shared Arc) would complicate the message pipeline.
-- **Reverse map for cleanup** — without it, cleaning up a dead actor would require scanning all groups. O(1) per group membership vs O(groups) scan.
-- **Lazy lifecycle** — groups are created implicitly on first join and deleted when the last member leaves. No explicit create/delete API needed. Matches Erlang `pg`.
-- **publish requires `Message: Clone`** — enforced at the type level. If a message type isn't Clone, it can't be broadcast. This is a compile-time safety guarantee.
-
-## Tests Added
-
-9 new tests (113 → 122 total):
-
-- `group_members_returns_joined_actors` — join + query returns members
-- `empty_group_returns_no_members` — nonexistent group → empty set
-- `publish_broadcasts_to_all_members` — 2 members, both receive the message
-- `leave_group_stops_receiving_publishes` — leave → excluded from future broadcasts
-- `dead_actor_auto_removed_from_group` — stop → removed from group
-- `actor_removed_from_all_groups_on_death` — multi-group membership cleanup
-- `empty_group_auto_deleted` — last member leaves → group removed from `groups()`
-- `ctx_join_group_from_handler` — join via on_start
-- `ctx_publish_broadcasts_from_handler` — publish via handler
-
-## Result
-
-- 122 tests pass (115 behavioral + 7 proptest)
-- All workspace crates compile, zero warnings
diff --git a/docs/development_history/cfuzz/CYCLE_15_ASK_PATTERN.md b/docs/development_history/cfuzz/CYCLE_15_ASK_PATTERN.md
deleted file mode 100644
index d40c8f0..0000000
--- a/docs/development_history/cfuzz/CYCLE_15_ASK_PATTERN.md
+++ /dev/null
@@ -1,67 +0,0 @@
-# Cycle 15: Ask Pattern for Typed Request-Response — Development History
-
-> Commit: `902471b` · 3 files · 166 insertions, 1 deletion
-
----
-
-## Motivation
-
-Request-response is one of the most common actor communication patterns: "send a question, wait for the answer." Before this change, implementing request-response in swactor required manual inbox creation, message construction with a reply-to address, sending, ticking, and polling — a verbose 5-step process. Every mature actor framework provides a convenience wrapper for this pattern.
-
-## Competitor Analysis
-
-| Framework | Pattern | Mechanism | Synchronous? |
-|-----------|---------|-----------|-------------|
-| Erlang | `gen_server:call` | `From` + `gen_server:reply` | Blocks caller (with timeout) |
-| Akka | `ask` | Temporary actor + `Future` | Returns Future |
-| Ractor | `call` | `RpcReplyPort` (oneshot channel) | Returns JoinHandle |
-| Kameo | `ask` | Async + `Reply` trait | Returns Future |
-| xactor | `Handler::handle` | Return value auto-routed | Implicit |
-| **Swactor** | **`rt.ask()`** | **Inbox + closure** | **`recv_ticking` (tick-driven)** |
-
-### Key Findings
-- Swactor's synchronous tick model requires explicit `reply_to` — there's no async runtime to suspend the caller
-- **Implicit auto-reply rejected** — would add magic to the message pipeline and complicate the actor interface
-- **Decision**: convenience wrapper over existing inbox pattern (not a new mechanism)
-
-## Implementation
-
-### Ask\<R\> Struct
-- Wraps an `Inbox<R>` with convenience methods
-- `try_recv()` — poll without ticking (works in both single and multi-threaded modes)
-- `recv_ticking(rt, max_ticks)` — tick the runtime until a response arrives or timeout (single-threaded only)
-- `reply_addr()` — access the inbox address for manual use
-
-### Runtime::ask()
-- `rt.ask(addr, |reply_to| Msg { reply_to })` — one-line request-response
-- Creates inbox, builds message via closure (user provides the reply_to field), sends, returns `Ask<R>`
-- Purely sugar over the existing `new_inbox → send_to → tick → try_recv` pattern
-
-### No Internal Changes
-- Zero changes to `ContextInner` or `ActorInterface`
-- No implicit auto-reply magic
-- Actors reply by explicitly sending to the `reply_to` address (same as before)
-
-**Key files modified:** `src/runtime.rs`, `tests/runtime_api.rs`
-
-## Design Decisions
-
-- **Closure-based message construction** — `rt.ask(addr, |reply_to| Msg { reply_to })` lets the user embed the reply address in any message shape. No trait requirements on the message type (beyond `Message`).
-- **`recv_ticking` for single-threaded** — in single-threaded mode, the runtime must be ticked for the target actor to process the request and reply. `recv_ticking` does this automatically. In multi-threaded mode, use `try_recv` with your own tick loop.
-- **No implicit reply** — frameworks like xactor auto-route the handler's return value as a reply. This is magical and doesn't fit swactor's explicit model. The ask pattern wraps existing mechanics without adding new ones.
-- **max_ticks timeout** — instead of wall-clock timeout, uses tick count for deterministic behavior (consistent with Cycle 10 timers).
-
-## Tests Added
-
-5 new tests (122 → 127 total):
-
-- `ask_recv_ticking_returns_response` — basic PingPong ask roundtrip
-- `ask_multiple_times_tracks_state` — 3 sequential asks to CounterActor, state increments
-- `ask_timeout_when_no_response` — ask dead actor → timeout error
-- `ask_try_recv_returns_none_before_tick` — poll before tick → None, after tick → Some
-- `ask_reply_addr_is_accessible` — reply address is valid for manual use
-
-## Result
-
-- 127 tests pass (120 behavioral + 7 proptest)
-- All workspace crates compile, zero warnings
diff --git a/docs/development_history/cfuzz/CYCLE_16_REGISTRY_BENCHMARKS.md b/docs/development_history/cfuzz/CYCLE_16_REGISTRY_BENCHMARKS.md
deleted file mode 100644
index 5f0d639..0000000
--- a/docs/development_history/cfuzz/CYCLE_16_REGISTRY_BENCHMARKS.md
+++ /dev/null
@@ -1,59 +0,0 @@
-# Cycle 16: Registry Benchmarks for Named Actors, Groups, Monitors, and Ask — Development History
-
-> Commit: `0ef6df9` · 2 files · 130 insertions, 1 deletion
-
----
-
-## Motivation
-
-Cycles 12–15 added four new features (named registry, monitoring, groups, ask pattern) without performance measurement. Before building more features on top of these primitives, it was important to quantify their overhead and ensure they're efficient enough for production use.
-
-## Benchmark Results
-
-| Benchmark | Time | Analysis |
-|-----------|------|----------|
-| `named_spawn_lookup` | ~2.4 µs | vs bare spawn 1.9 µs → **+0.5 µs** overhead for name registration |
-| `where_is_100_names` | ~9.0 µs | Includes setup overhead; per-lookup cost is negligible |
-| `group_publish/10` | ~4.8 µs | O(N) message cloning |
-| `group_publish/50` | ~15.5 µs | Linear scaling confirmed |
-| `group_publish/100` | ~60 µs | Linear with O(N) clones |
-| `monitor_setup` | ~13.4 µs | monitor + stop + cleanup full cycle |
-| `ask_roundtrip` | ~4.5 µs | vs manual roundtrip 3.0 µs → **+1.5 µs** for inbox creation |
-
-### Analysis
-
-- **Named lookup**: +0.5 µs over bare spawn — the `RwLock<HashMap>` insert is fast. Acceptable for a feature used at spawn time, not on the hot path.
-- **Group publish**: scales linearly with group size, as expected for O(N) message cloning. No optimization needed — the bottleneck is inherent (must clone and deliver N messages).
-- **Monitor setup**: 13.4 µs covers the full lifecycle (monitor → stop → cleanup → Down delivery). The monitoring machinery adds minimal per-message overhead.
-- **Ask roundtrip**: +1.5 µs over manual inbox pattern (4.5 µs vs 3.0 µs). The overhead is inbox creation. Acceptable for a convenience pattern — users who need maximum throughput can use the manual pattern.
-
-## Implementation
-
-5 new criterion benchmark functions added to `benches/runtime_benchmarks.rs` in a `registry` group:
-
-- `named_spawn_lookup` — spawn_named + where_is roundtrip
-- `where_is_100_names` — lookup in 100-name registry
-- `group_publish/{10,50,100}` — broadcast to N group members
-- `monitor_setup` — monitor + stop + Down delivery cycle
-- `ask_roundtrip` — ask + recv_ticking response
-
-**Key files modified:** `benches/runtime_benchmarks.rs`
-
-## Design Decisions
-
-- **Full-cycle benchmarks** — each benchmark measures the complete operation (not just the fast path). For example, `monitor_setup` includes stop and cleanup, not just the monitor call, because that's the real-world cost.
-- **Parameterized group publish** — three group sizes (10, 50, 100) to verify linear scaling and catch any unexpected superlinear behavior.
-- **No optimization undertaken** — all operations are efficient enough. The benchmark results serve as baselines for future changes.
-
-## Tests Added
-
-No new tests (benchmarks only). Test count remains at 127.
-
-## Result
-
-- All benchmarks run cleanly
-- 127 tests pass, zero warnings
-- All registry operations confirmed efficient for production use
-- Named lookup: <1 µs overhead over bare spawn
-- Ask: ~50% overhead over manual inbox pattern (acceptable for convenience)
-- Group publish: linear O(N) as expected
diff --git a/docs/development_history/cfuzz/CYCLE_17_SUPERVISION.md b/docs/development_history/cfuzz/CYCLE_17_SUPERVISION.md
deleted file mode 100644
index f7076b6..0000000
--- a/docs/development_history/cfuzz/CYCLE_17_SUPERVISION.md
+++ /dev/null
@@ -1,89 +0,0 @@
-# Cycle 17: Supervision Trees with handle_down and Supervisor Actor — Development History
-
-> Commit: `a70bd86` · 4 files · 754 insertions, 7 deletions
-
----
-
-## Motivation
-
-With monitoring (Cycle 13), lifecycle hooks (Cycle 9), and factory-based restart (Cycle 7) in place, swactor had all the building blocks for supervision trees — the signature feature of Erlang/OTP. Supervision trees provide structured fault tolerance: a parent actor (supervisor) monitors children and restarts them according to configurable policies when they fail.
-
-## Competitor Analysis
-
-| Framework | Supervisor Model | Strategies | Child Spec | Meltdown Protection |
-|-----------|-----------------|------------|------------|---------------------|
-| Erlang/OTP | Built-in `supervisor` behaviour | one_for_one, one_for_all, rest_for_one, simple_one_for_one | `{Id, MFA, Restart, Shutdown, Type}` | Intensity/period limits |
-| Akka | SupervisorStrategy | Resume, Restart, Stop, Escalate + BackoffSupervisor | N/A (inline) | MaxNrOfRetries/withinTimeRange |
-| Ractor | `ractor-supervisor` crate | External crate, event-based | SupervisionEvent callback | N/A |
-| Bastion | Built-in hierarchy | Redundancy groups | Structural (parent-child) | N/A |
-| CAF | No built-in supervisor | Monitor-based (manual) | N/A | N/A |
-| **Swactor** | **User-space `Supervisor` actor** | **OneForOne** (Cycle 17), **OneForAll/RestForOne** (Cycle 18) | **`ChildSpec`** | **max_restarts budget** |
-
-### Key Findings
-- Swactor has all the building blocks: monitor (Cycle 13), `spawn_restartable` (Cycle 7), lifecycle hooks (Cycle 9), `Down` messages (Cycle 13)
-- **Decision**: Supervisor as a user-space actor built on existing primitives (like Ractor's `ractor-supervisor` crate), not a special runtime construct
-- **`handle_down` callback** enables any actor to react to monitored deaths without requiring `Incoming = Down` — this is the key API gap that needed filling
-
-## Implementation
-
-### 1. `handle_down` Callback on ActorInterface
-
-The core API addition enabling supervision:
-
-- `fn handle_down(&mut self, ctx: &Ctx, down: Down)` — default no-op, called when a monitored actor dies and the actor's `Incoming` type is NOT `Down`
-- Implemented via second downcast attempt in `handle_any`: if the message is `Down` and the actor's `Incoming` type doesn't match, call `handle_down` instead of `handle`
-- Fully backward-compatible: actors with `Incoming = Down` still receive via `handle()` as before
-- This decouples supervision logic from the actor's primary message type
-
-### 2. `ctx.stop_actor(addr)` — Stop Another Actor
-
-- Sends graceful stop to another actor from handler context
-- Uses `StopSignal` through normal message routing (PoisonPill semantics)
-- Enables supervisor-controlled shutdown of children
-
-### 3. `Supervisor` Actor
-
-A user-space actor managing child actors:
-
-- **`SupervisorStrategy::OneForOne`** — only the failed child is restarted (Cycle 17)
-- **`RestartPolicy`**: `Permanent` (always restart), `Transient` (restart only on panic, not normal stop), `Temporary` (never restart)
-- **`ChildSpec`** — `{ id: String, restart: RestartPolicy, factory: Fn(&Ctx) -> Result<ActorAddress> }`
-- Children spawned in `on_start`, monitored via `ctx.monitor()`
-- Death detected via `handle_down`, restart policy consulted, factory invoked for replacement
-- **Meltdown detection**: stops itself when `total_restarts > max_restarts`
-- **Cascading shutdown**: `on_stop` sends stop signals to all living children
-
-### ActiveChild Struct
-- Tracks `addr: ActorAddress` and `monitor_ref: MonitorRef` per child
-- Reused by Router (Cycle 19)
-
-**Key files modified:** `src/actor.rs`, `tests/runtime_api.rs`, `docs/runtime.md`
-
-## Design Decisions
-
-- **User-space actor (not runtime primitive)** — the Supervisor is just an actor that uses existing APIs (monitor, spawn, stop). No special runtime support needed. This validates the composability of the monitoring and lifecycle systems.
-- **`handle_down` as opt-in callback** — adding `handle_down` to `ActorInterface` with a default no-op means existing actors don't need to change. Actors that want to react to deaths override it. The alternative (requiring `Incoming = Down`) would force actors to handle `Down` as their primary message type.
-- **Factory takes `&Ctx`** — the factory closure receives the context so it can use `ctx.spawn`, `ctx.monitor`, etc. during child creation. This enables the supervisor to monitor new children immediately.
-- **Meltdown protection** — if children keep crashing faster than they can be restarted, the supervisor stops itself rather than looping forever. Matches Erlang's intensity/period limits.
-- **Cascading shutdown** — when the supervisor stops, all living children receive stop signals. This prevents orphaned actors.
-
-## Tests Added
-
-10 new tests (127 → 138 total, counting 130 behavioral + 7 proptest + 1 doctest):
-
-- `handle_down_receives_death_notification` — handle_down callback fires on monitored death
-- `handle_down_skipped_when_incoming_is_down` — backward compat: Incoming=Down uses handle()
-- `ctx_stop_actor_stops_target` — one actor stops another via ctx.stop_actor()
-- `supervisor_restarts_permanent_child_on_panic` — panic → restart (OneForOne + Permanent)
-- `supervisor_does_not_restart_transient_child_on_normal_stop` — Normal stop → no restart
-- `supervisor_restarts_transient_child_on_panic` — Panicked → restart (Transient)
-- `supervisor_never_restarts_temporary_child` — Temporary → never restart
-- `supervisor_meltdown_after_max_restarts` — exceeding max_restarts stops supervisor
-- `supervisor_one_for_one_only_restarts_failed_child` — multi-child, only crashed child restarted
-- `supervisor_on_stop_kills_children` — supervisor shutdown cascades to children
-
-## Result
-
-- 138 tests pass (130 behavioral + 7 proptest + 1 doctest)
-- Zero warnings, full workspace compiles
-- Supervisor validates the composability of Cycles 7 (recovery), 9 (lifecycle), and 13 (monitoring)
diff --git a/docs/development_history/cfuzz/CYCLE_18_SUPERVISOR_STRATEGIES.md b/docs/development_history/cfuzz/CYCLE_18_SUPERVISOR_STRATEGIES.md
deleted file mode 100644
index e96a888..0000000
--- a/docs/development_history/cfuzz/CYCLE_18_SUPERVISOR_STRATEGIES.md
+++ /dev/null
@@ -1,86 +0,0 @@
-# Cycle 18: OneForAll and RestForOne Supervisor Strategies — Development History
-
-> Commit: `771c38c` · 4 files · 277 insertions, 2 deletions
-
----
-
-## Motivation
-
-Cycle 17 introduced supervision with the `OneForOne` strategy (only the failed child is restarted). Erlang/OTP defines two additional coordinated restart strategies that handle interdependent children:
-
-- **`one_for_all`** — when one child fails, ALL children are restarted (for tightly coupled children that share state assumptions)
-- **`rest_for_one`** — when one child fails, it and all children started AFTER it are restarted (for chains where later children depend on earlier ones)
-
-These strategies require coordinated shutdown: the supervisor must stop living siblings, wait for all of them to die, then restart the affected set in the original spec order.
-
-### Research Detour: SmallBox/InlineAny Optimization
-Before choosing this cycle's topic, investigated SmallBox optimization for message dispatch — a 44% queue throughput improvement was measured. However, it was deferred because:
-- Requires `unsafe` code in a core path
-- Would touch 32+ call sites across the codebase
-- Violates the "src/ structure frozen" constraint
-
-Extended the Supervisor with coordinated strategies instead — higher value, zero risk.
-
-## Competitor Analysis
-
-| Framework | OneForAll | RestForOne | Coordinated Shutdown |
-|-----------|-----------|------------|---------------------|
-| Erlang/OTP | Yes | Yes | Built into supervisor behaviour |
-| Akka | No (different model: Resume/Restart/Stop/Escalate) | No | N/A |
-| Ractor | No | No | N/A |
-| Bastion | Implicit (redundancy groups) | No | Implicit |
-| **Swactor** | **Yes** | **Yes** | **Phase-based state machine** |
-
-### Erlang's Coordinated Restart
-In Erlang, `one_for_all` and `rest_for_one` stop affected children in reverse start order, wait for all to terminate, then restart in start order. This guarantees initialization dependencies are respected.
-
-## Implementation
-
-### SupervisorPhase State Machine
-- `Normal` — steady state, processing handle_down events normally
-- `Stopping { awaiting: HashSet<ActorAddress>, restart_set: Vec<usize> }` — coordinated shutdown in progress
-
-### SupervisorStrategy Extensions
-- `SupervisorStrategy::OneForAll` — all children restarted when one fails
-- `SupervisorStrategy::RestForOne` — failed child + all children after it (in spec order) restarted
-
-### Coordinated Restart Flow
-1. Child dies → `handle_down` called
-2. Strategy determines affected indices (OneForAll: all, RestForOne: failed + later)
-3. `begin_coordinated_restart(ctx, indices)`:
-   - Sends stop signals to living siblings in the restart set
-   - Transitions to `Stopping` phase with `awaiting` set
-   - Already-dead children handled: if all targets are already dead, skip to immediate restart
-4. Subsequent `handle_down` calls during `Stopping` phase:
-   - Remove from `awaiting` set
-   - When `awaiting` is empty → all stopped
-5. `finish_restart(ctx)`:
-   - Restart all children in the restart set, in spec order
-   - Transition back to `Normal` phase
-
-### Refactoring
-- `check_intensity()` factored out of `handle_down` for restart budget checking — shared by all strategies
-
-**Key files modified:** `src/actor.rs`, `tests/runtime_api.rs`, `docs/runtime.md`
-
-## Design Decisions
-
-- **Phase-based state machine** — the `Stopping` phase cleanly separates "waiting for siblings to die" from "normal operation." This prevents races where a new death arrives while a coordinated restart is in progress.
-- **Stop signals (not kill)** — affected siblings are stopped gracefully (PoisonPill semantics), giving them a chance to run `on_stop` for cleanup. This matches Erlang's `terminate/2` being called during supervised shutdown.
-- **Restart in spec order** — children are restarted in the order they appear in the ChildSpec list, regardless of which child triggered the restart. This preserves initialization dependencies.
-- **Already-dead optimization** — if all children in the restart set are already dead (e.g., cascading failures), skip the `Stopping` phase entirely and restart immediately. Without this, the supervisor would wait forever for Down messages that already arrived.
-- **Meltdown protection shared** — the same `max_restarts` budget applies across all strategies. OneForAll restarts count as one restart event (not N), matching Erlang's behavior.
-
-## Tests Added
-
-3 new tests (138 → 141 total):
-
-- `supervisor_one_for_all_restarts_all_on_single_failure` — one child panics, all 3 get new addresses
-- `supervisor_rest_for_one_restarts_rest_after_failed` — child_b panics, child_a unchanged, child_b + child_c restarted
-- `supervisor_one_for_all_waits_for_all_downs_before_restart` — verifies coordinated shutdown completes before restart begins
-
-## Result
-
-- 141 tests pass (133 behavioral + 7 proptest + 1 doctest)
-- Zero warnings, full workspace compiles
-- All three Erlang-standard supervision strategies now available: OneForOne, OneForAll, RestForOne
diff --git a/docs/development_history/cfuzz/CYCLE_19_ROUTER.md b/docs/development_history/cfuzz/CYCLE_19_ROUTER.md
deleted file mode 100644
index 7897eaa..0000000
--- a/docs/development_history/cfuzz/CYCLE_19_ROUTER.md
+++ /dev/null
@@ -1,78 +0,0 @@
-# Cycle 19: Router Actor for Pooled Message Distribution — Development History
-
-> Commit: `c688f0a` · 4 files · 528 insertions, 3 deletions
-
----
-
-## Motivation
-
-Many workloads benefit from distributing messages across a pool of identical worker actors. Before this change, users had to manually manage actor pools: spawn N workers, track their addresses, implement distribution logic, and handle worker replacement on failure. A Router actor encapsulates this pattern — it receives messages and transparently forwards them to pool members using a configurable strategy.
-
-## Competitor Analysis
-
-| Framework | Pool/Router Model | Strategies | Auto-Replace |
-|-----------|------------------|------------|-------------|
-| Erlang | `poolboy` (checkout/checkin), `wpool` (transparent forwarding, 6 strategies + custom) | RoundRobin, Random, BestWorker, Hash, Available, custom | Manual |
-| Akka | Router actors (Pool vs Group), Resizer for dynamic sizing | RoundRobin, Random, SmallestMailbox, Balancing, Broadcast, ScatterGather, TailChopping, ConsistentHashing | Pool auto-creates, Group manual |
-| Actix | SyncArbiter (shared queue, implicit work-stealing) | N/A (shared queue) | N/A |
-| Kameo | ActorPool (least-connections, auto-replace dead workers) | Least-connections | Yes |
-| Ractor | No built-in router (process groups only) | N/A | N/A |
-| **Swactor** | **`Router<M>` actor** | **RoundRobin, Random, Broadcast** | **Yes (via monitor + handle_down)** |
-
-### Key Findings
-- **Router-as-actor** with transparent forwarding (wpool/Akka style) is the best fit — the router looks like a regular actor to callers
-- **User-space actor** like Supervisor (Cycle 17), reusing monitor + handle_down for worker replacement
-- **SmallestMailbox deferred** — requires runtime stats access not available in user-space
-- **ConsistentHashing deferred** — requires a hash function parameter, can be added later as a builder method
-
-## Implementation
-
-### Router\<M\> Actor
-- Generic over `M: Message` — same `Incoming` type as workers, enabling transparent forwarding
-- Workers spawned in `on_start`, monitored via `ctx.monitor()`, auto-replaced via `handle_down`
-- Reuses `ActiveChild` struct from Supervisor (addr + monitor_ref)
-
-### Routing Strategies
-- `RoutingStrategy::RoundRobin` — sequential circular distribution via counter
-- `RoutingStrategy::Random` — random worker selection via `get_random()` helper
-- `RoutingStrategy::Broadcast` — clone message to all live workers (`M: Clone` required)
-
-### Fault Tolerance
-- Dead worker detected via `handle_down` → factory invoked → new worker spawned and monitored
-- **Meltdown protection**: `total_restarts > max_restarts` → `ctx.stop_self()`
-- **Cascading shutdown**: `on_stop` sends stop signals to all workers
-
-### Configuration
-- `Router::new(pool_size, strategy, factory, max_restarts)` — all-in-one constructor
-- Factory: `Arc<dyn Fn(&Ctx) -> Result<ActorAddress, Error> + Send + Sync>`
-
-**Key files modified:** `src/actor.rs`, `tests/runtime_api.rs`, `docs/runtime.md`
-
-## Design Decisions
-
-- **Router-as-actor (transparent forwarding)** — callers send messages to the router's address as if it were a regular actor. The router forwards to pool members. This is the cleanest API: no special send function, no pool handle, just an address.
-- **User-space actor (not runtime primitive)** — like Supervisor, Router is built entirely on existing APIs (spawn, monitor, handle_down, stop). This validates the actor system's composability.
-- **Generic over M** — `Router<M>` has `Incoming = M`, same as the workers. Messages are forwarded with zero transformation. Type safety is enforced at compile time.
-- **Broadcast requires Clone** — broadcasting clones the message for each worker. The Clone bound is only required when using the Broadcast strategy, enforced at the type level.
-- **SmallestMailbox deferred** — would require reading per-actor mailbox depth from runtime stats, which isn't available from within a handler. Could be added with a stats query API.
-- **ConsistentHashing deferred** — requires a hash function parameter (user must define which part of the message determines the routing key). Better to add as a builder method with a closure parameter.
-- **Reuses ActiveChild from Supervisor** — the pattern of "track address + monitor ref, replace on death" is identical. Code sharing confirms the design consistency between Supervisor and Router.
-
-## Tests Added
-
-7 new tests (141 → 148 total):
-
-- `router_round_robin_distributes_across_workers` — 6 msgs to 3 workers, each gets 2
-- `router_broadcast_sends_to_all_workers` — 1 msg, all 3 workers receive
-- `router_random_delivers_to_some_worker` — 30 msgs across 3 workers, at least 2 workers used
-- `router_replaces_dead_worker` — panicked worker auto-replaced, pool size maintained
-- `router_meltdown_after_max_restarts` — 3 deaths with max_restarts=2 → router stops
-- `router_on_stop_kills_workers` — stopping router cascades to all workers
-- `router_broadcast_multiple_messages_all_received` — 5 msgs × 3 workers = 15 received
-
-## Result
-
-- 148 tests pass (140 behavioral + 7 proptest + 1 doctest)
-- Zero warnings, full workspace compiles
-- Router validates the composability of the entire cfuzz feature set: monitoring (Cycle 13), lifecycle hooks (Cycle 9), handle_down (Cycle 17), and the ActiveChild pattern (Cycle 17)
-- The cfuzz branch concludes with a comprehensive actor runtime featuring: fairness, backpressure, recovery, lifecycle management, timers, named registry, monitoring, groups, ask pattern, supervision trees, and routers
diff --git a/docs/development_history/ci/CI_DEPLOYMENT.md b/docs/development_history/ci/CI_DEPLOYMENT.md
deleted file mode 100644
index 82be2ff..0000000
--- a/docs/development_history/ci/CI_DEPLOYMENT.md
+++ /dev/null
@@ -1,140 +0,0 @@
-# CI Pipeline Deployment — Development History
-
-> Covers the first real deployment of the CI pipeline: Forgejo (VPS) → ci-relay
-> (iroh) → local-runner (Thinkpad). Verified end-to-end with a smoke-test
-> pipeline that reports status back to Forgejo.
->
-> *Branch: `spot-instance`*
-
----
-
-## What Was Done
-
-### Deployed Components
-
-| Component | Machine | How |
-|-----------|---------|-----|
-| `.ci.yml` | Repo root | Smoke pipeline: `echo "CI is alive"` on push to `*` |
-| `ci-relay` | VPS | Release binary, systemd service |
-| `local-runner` | Runner host | Release binary, started via nohup |
-| Forgejo webhook | VPS (Docker) | Hook #1, fires on push to relay's HTTP listener |
-
-### Deployment Steps
-
-1. **Created `.ci.yml`** — minimal smoke pipeline (`echo "CI is alive"`)
-2. **Generated webhook secret** — `openssl rand -hex 32` → `~/.ssh/forgejo.ci-webhook-secret`
-3. **Built release binaries** — `cargo build --release -p ci-relay -p local-runner`
-4. **Distributed binaries** — `scp` to VPS (`docean:`) and Thinkpad (`thinkpad:`)
-5. **Deployed ci-relay as systemd service** on VPS:
-   - Service file: `/etc/systemd/system/ci-relay.service`
-   - Iroh Node ID: `<IROH_NODE_ID>`
-6. **Started local-runner on Thinkpad** — connects to relay via iroh, confirmed "Connected to relay!"
-7. **Configured Forgejo**:
-   - Added `[webhook] ALLOWED_HOST_LIST = loopback,<DOCKER_BRIDGE_IP>` to `app.ini` (Forgejo blocks private IPs by default)
-   - Restarted Forgejo container
-   - Created webhook via API targeting `http://<DOCKER_BRIDGE_IP>:8787`
-   - **Fixed UFW firewall** — Docker bridge traffic to port 8787 was blocked by default DROP policy; added a UFW rule allowing the Docker subnet
-8. **Verified end-to-end** — pushed commit, Forgejo shows green check:
-   - `ci/hello`: success — "Job 'hello' completed"
-   - `ci/smoke`: success — "Pipeline 'smoke' success"
-
-### Issue Encountered: UFW Blocking Docker Bridge
-
-The plan assumed Docker bridge traffic (`172.17.0.1`) would reach the host's port 8787 unimpeded. UFW's default INPUT policy is DROP, which blocks this. The fix was a single firewall rule allowing the Docker subnet.
-
-### Credentials & Secrets
-
-| File | Purpose | Location |
-|------|---------|----------|
-| Forgejo API token | CI status reporting | Spot instance + Thinkpad |
-| HMAC webhook secret | Webhook signature verification | Spot instance + Thinkpad |
-
-Secrets are stored outside the repo. The webhook secret is embedded in the systemd service `ExecStart` line on the VPS. To rotate it: update the service file, restart ci-relay, update Forgejo webhook config.
-
-### Connection Details
-
-- **ci-relay** listens on HTTP (webhooks) + iroh (runner connection)
-- **local-runner** connects outbound to relay's iroh Node ID (NAT-friendly)
-- **Status reports** go directly from runner → Forgejo API over HTTPS (no relay)
-
----
-
-## Next Step: Real CI Jobs
-
-The smoke-test pipeline proves the plumbing works. The next step is replacing `echo "CI is alive"` with actual CI jobs in `.ci.yml`.
-
-Candidates for the first real pipeline:
-
-1. **`cargo check`** — fast compilation check, catches most errors
-2. **`cargo test`** — full test suite (simulation tests can be slow)
-3. **`cargo clippy`** — lint pass
-4. **Benchmark runs** — the whole reason for running CI on the Thinkpad (consistent hardware)
-
-Things to consider:
-
-- **Rust toolchain on Thinkpad**: `local-runner` shells out to run jobs, so the Thinkpad needs `rustup`/`cargo` installed and on PATH
-- **Build cache**: consecutive runs in separate `pipeline-N` dirs won't share a target directory. Consider a shared `CARGO_TARGET_DIR` or `sccache` for faster builds
-- **Job timeouts**: no timeout mechanism exists yet; a hung `cargo build` would block the single-threaded job queue forever
-- **Multiple jobs**: `.ci.yml` supports multiple jobs per pipeline, but they run sequentially. Could add `cargo check` as a fast gate before `cargo test`
-- **Branch filtering**: currently triggers on `*` — may want to restrict benchmarks to `master` only
-
-### Suggested `.ci.yml` Evolution
-
-```yaml
-pipelines:
-  check:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      check:
-        run: cargo check --workspace
-      test:
-        run: cargo test --workspace
-      clippy:
-        run: cargo clippy --workspace -- -D warnings
-
-  bench:
-    triggers:
-      - event: push
-        branches: ["master"]
-    jobs:
-      bench:
-        run: cargo bench --workspace
-```
-
----
-
-## Operational Notes
-
-### Restarting ci-relay (VPS)
-
-```bash
-ssh <VPS_HOST>
-systemctl restart ci-relay
-journalctl -u ci-relay -f
-```
-
-### Restarting local-runner (runner host)
-
-```bash
-ssh <RUNNER_HOST>
-pkill local-runner
-nohup ~/local-runner \
-  --relay-node-id <IROH_NODE_ID> \
-  --forgejo-url https://zachery.lol/code \
-  --forgejo-token "$(cat <TOKEN_FILE>)" \
-  --yaml ~/.ci.yml \
-  --work-dir ~/ci-work \
-  --repo-url https://zachery.lol/code/zacheryasc/swactor.git \
-  > ~/local-runner.log 2>&1 &
-```
-
-### Checking webhook deliveries
-
-```bash
-# Forgejo webhook UI: Settings → Webhooks → Hook #1 → Recent Deliveries
-# Or test delivery via API:
-curl -X POST "https://zachery.lol/code/api/v1/repos/zacheryasc/swactor/hooks/1/tests" \
-  -H "Authorization: token <YOUR_TOKEN>"
-```
diff --git a/docs/development_history/ci/CI_OUTPUT_IN_FORGEJO.md b/docs/development_history/ci/CI_OUTPUT_IN_FORGEJO.md
deleted file mode 100644
index c1c24b3..0000000
--- a/docs/development_history/ci/CI_OUTPUT_IN_FORGEJO.md
+++ /dev/null
@@ -1,139 +0,0 @@
-# CI Output Visible in Forgejo — Development History
-
-> Added two mechanisms so CI results are visible directly in the Forgejo web
-> UI without SSH-ing into the runner: **enhanced commit status descriptions**
-> and **PR comments** with full job output.
->
-> *Branch: `spot-instance`*
-
----
-
-## Problem
-
-The CI pipeline worked end-to-end but job output was only visible in the
-runner's stderr log on the Thinkpad. To see why clippy failed, you had to
-`ssh thinkpad 'tail ~/local-runner.log'`. Forgejo's commit status descriptions
-just said "Job 'clippy' completed" with no output.
-
-Forgejo lacks GitHub's Checks API (no annotations, no log viewer), so we use
-two complementary approaches.
-
-## What Was Done
-
-### 1. Enhanced Commit Status Descriptions
-
-On job completion, the status description now includes:
-
-- **On success**: `"Job 'check' passed"`
-- **On failure**: `"Job 'clippy' failed: command exited with code 101\n[stderr] error: you should consider..."` — last ~10 lines of output, capped at 250 characters.
-
-This is visible directly on the PR page and commit page in Forgejo without
-clicking anything.
-
-### 2. PR Comments with Full Output
-
-When a pipeline reaches terminal state, the StatusReporter:
-
-1. Queries `GET /repos/{owner}/{repo}/pulls?state=open` to find the PR for the branch
-2. Builds a markdown comment with `<details>` sections per job (up to 100 lines each)
-3. Posts it via `POST /repos/{owner}/{repo}/issues/{pr_number}/comments`
-4. Re-posts the pipeline commit status with `target_url` pointing to the comment
-
-Example comment format:
-
-```markdown
-## Pipeline `ci` — failure
-
-Commit: `5b7ae7b`
-
-<details>
-<summary>clippy — failed: command exited with code 101</summary>
-
-_Showing last 100 of 523 lines_
-
-\```
-error[E0599]: ...
-\```
-
-</details>
-
-<details>
-<summary>check — passed</summary>
-
-\```
-$ cargo check --workspace
-   Compiling ...
-\```
-
-</details>
-```
-
-### 3. `target_url` on Commit Statuses
-
-Added `target_url: Option<String>` to `StatusUpdate`. When a PR comment is
-successfully posted, the pipeline's commit status badge links directly to that
-comment. Clicking the status badge on the PR page jumps to the output.
-
-## Files Changed
-
-| File | Change |
-|------|--------|
-| `crates/ci/src/lib.rs` | Added `target_url: Option<String>` to `StatusUpdate` |
-| `crates/ci/src/status_reporter.rs` | Added `JobOutput`, `PostPipelineComment`, `find_pr_for_branch()`, `post_pr_comment()`, `build_pipeline_comment()`, `handle_pipeline_comment()` |
-| `crates/ci/src/local_coordinator.rs` | Enhanced `handle_job_complete()` descriptions; added `emit_pipeline_comment()`, called from `try_schedule_next()` |
-| `crates/ci/src/coordinator.rs` | Mechanical `target_url: None` at 4 sites |
-| `crates/simulation/src/ci/local_sim.rs` | Mechanical `target_url: None` at 3 sites |
-| `crates/simulation/src/ci/sim.rs` | Mechanical `target_url: None` at 2 sites |
-| `crates/ci/Cargo.toml` | Added `features = ["json"]` to `ureq` for `into_json()` |
-
-## Deployment & Verification
-
-Built and deployed updated `local-runner` to the Thinkpad, pushed to the
-`spot-instance` branch (which has PR #42 open), and observed:
-
-**Working:**
-
-- Commit statuses show descriptive output. The clippy failure status reads:
-  `Job 'clippy' failed: command exited with code 101` followed by the tail of
-  the clippy output, truncated at 250 chars.
-- Passed jobs show `"Job 'check' passed"` / `"Job 'test' passed"`.
-- Pipeline-level status correctly reports `ci/ci → failure`.
-
-**Blocked on token scope:**
-
-- PR comment posting returned HTTP 403. The Forgejo API token has
-  `write:repository` scope (sufficient for commit statuses) but needs
-  `write:issue` scope to post comments on PRs/issues.
-- The code degrades gracefully: logs the error, skips the comment, posts the
-  pipeline status without `target_url`.
-
-## TODO
-
-- [ ] Regenerate Forgejo API token with `write:issue` scope to enable PR comments
-- [ ] After token update, re-deploy and verify the comment + `target_url` flow end-to-end
-
-## Edge Cases Handled
-
-| Case | Behavior |
-|------|----------|
-| No open PR for branch | Comment silently skipped, status posted without `target_url` |
-| API failures (403, network) | Logged via `eprintln!`, degrades gracefully |
-| Long output | Capped at last 100 lines per job in PR comment, with `_Showing last N of M lines_` note |
-| Long description | Capped at 250 chars for commit status description field |
-| All HTTP code | Gated behind `#[cfg(feature = "local")]` — simulation builds unaffected |
-
-## Architecture Note
-
-All new HTTP calls (PR listing, comment posting) happen in the StatusReporter
-actor, which is fire-and-forget. The LocalCoordinator never blocks on HTTP.
-The flow is:
-
-```
-LocalCoordinator                    StatusReporter
-      |                                   |
-      |-- emit_status(StatusUpdate) ----->|-- POST /statuses/{sha}
-      |                                   |
-      |-- PostPipelineComment ----------->|-- GET /pulls?state=open
-      |                                   |-- POST /issues/{n}/comments
-      |                                   |-- POST /statuses/{sha} (with target_url)
-```
diff --git a/docs/development_history/ci/CI_RELAY.md b/docs/development_history/ci/CI_RELAY.md
deleted file mode 100644
index d4edd7c..0000000
--- a/docs/development_history/ci/CI_RELAY.md
+++ /dev/null
@@ -1,520 +0,0 @@
-# CI Webhook Relay via Iroh — Development History
-
-> Covers the implementation of `ci-relay` and the iroh webhook receiver in
-> `local-runner`, enabling Forgejo webhooks to reach a NAT'd CI runner via
-> iroh's QUIC transport with automatic NAT traversal.
->
-> ~3 files created · ~2 files modified · ~350 insertions
->
-> *Branch: `spot-instance`*
-
----
-
-## Table of Contents
-
-1. [Problem & Motivation](#1-problem--motivation)
-2. [Architecture](#2-architecture)
-3. [What Was Built](#3-what-was-built)
-4. [ci-relay Binary](#4-ci-relay-binary)
-5. [local-runner Iroh Receiver](#5-local-runner-iroh-receiver)
-6. [Wire Protocol](#6-wire-protocol)
-7. [Connection Flow](#7-connection-flow)
-8. [Design Decisions & Tradeoffs](#8-design-decisions--tradeoffs)
-9. [Manual Testing Guide](#9-manual-testing-guide)
-10. [Known Gaps & Future Improvements](#10-known-gaps--future-improvements)
-
----
-
-## 1. Problem & Motivation
-
-The CI runner (`local-runner`) was designed for same-LAN usage: Forgejo sends
-webhooks over HTTP to the runner's listen port. In the real deployment:
-
-- **Forgejo** runs on a VPS (`zachery.lol` / `139.59.195.69`)
-- **CI runner** runs on a Thinkpad at home (`192.168.1.102`), behind NAT
-
-The VPS cannot reach the Thinkpad directly — no inbound port is open, no
-static IP, no UPnP. Traditional solutions (SSH reverse tunnel, VPN, port
-forwarding on router) all require ongoing configuration and are fragile.
-
-iroh is already integrated in swactor's distribution layer (`iroh_driver.rs`)
-for SWIM protocol traffic. It provides QUIC connections with automatic NAT
-traversal via relay servers — exactly what's needed to bridge the webhook gap.
-
-### Why Not Just SSH Tunnel?
-
-An SSH tunnel (`ssh -R 8787:localhost:8787 zachery.lol`) would work, but:
-
-- Tunnels drop on network changes (laptop suspend, WiFi roaming)
-- Requires autossh or systemd to keep alive
-- Another moving part to debug when CI stops working
-- Doesn't reuse any existing infrastructure
-
-iroh handles reconnection, relay fallback, and NAT traversal automatically.
-The implementation reuses the same tagged-message-over-QUIC-stream pattern
-already proven in `iroh_driver.rs`.
-
----
-
-## 2. Architecture
-
-```
-┌─────────────────────────────┐        ┌──────────────────────────────────┐
-│ VPS (zachery.lol)           │        │ Thinkpad (192.168.1.102)         │
-│                             │  iroh  │                                  │
-│  Forgejo ──webhook──► Relay ├───────►│ local-runner                     │
-│                       :8787 │  QUIC  │  (coordinator, runner, reporter) │
-│                             │        │                                  │
-└─────────────────────────────┘        └──────────────────────────────────┘
-```
-
-**VPS side** — `ci-relay` binary:
-- HTTP listener receives webhook POSTs from Forgejo (localhost only)
-- iroh endpoint accepts the runner's inbound connection
-- Forwards parsed `WebhookEvent` payloads over iroh uni streams
-
-**Thinkpad side** — `local-runner` with `--relay-node-id`:
-- Connects to the VPS relay's iroh endpoint on startup
-- Receives `WebhookEvent` over iroh uni streams
-- Feeds events into `LocalCoordinator` via existing `Webhook` message
-- Status updates go directly Thinkpad → Forgejo API over HTTPS (no relay needed)
-
-The relay is intentionally minimal — it's a bridge, not a CI component. All CI
-logic stays in `local-runner`.
-
----
-
-## 3. What Was Built
-
-| Component | Location | Nature |
-|-----------|----------|--------|
-| ci-relay binary | `crates/ci-relay/Cargo.toml`, `src/main.rs` | **New** — VPS webhook relay |
-| Iroh receiver | `crates/local-runner/src/main.rs` | **Modified** — iroh webhook source |
-| Dependencies | `crates/local-runner/Cargo.toml` | **Modified** — added iroh, tokio, serde_json |
-| Workspace | `Cargo.toml` | **Modified** — added ci-relay to members |
-
----
-
-## 4. ci-relay Binary
-
-### `crates/ci-relay/src/main.rs`
-
-The relay runs two subsystems on a single process:
-
-1. **iroh acceptor** (tokio task): accepts inbound connections from the runner,
-   caches the most recent one in `Arc<TokioMutex<Option<Connection>>>`
-2. **HTTP listener** (main thread, blocking `tiny_http`): receives Forgejo
-   webhook POSTs, verifies HMAC, parses event, forwards over iroh
-
-### Webhook Handling
-
-Reuses the same verification and parsing logic as `webhook_server.rs`:
-
-- HMAC-SHA256 verification via `X-Forgejo-Signature` header (skippable with empty secret)
-- Event type from `X-Forgejo-Event` header: `push` → `Push`, `create` → `Tag`, `pull_request` → `Merge`
-- JSON parsing via `parse_webhook_json()` (re-exported from `swactor-ci`)
-
-The relay uses `parse_webhook_json` directly rather than duplicating parsing
-logic. This keeps webhook interpretation consistent between HTTP and iroh paths.
-
-### Forwarding
-
-On webhook receipt, the relay:
-1. Serializes the `WebhookEvent` to JSON
-2. Opens a unidirectional QUIC stream on the cached connection
-3. Writes the tagged message (`ci::WebhookEvent` tag + JSON payload)
-4. Finishes the stream
-
-If no runner is connected, the relay returns HTTP 502 to Forgejo. Forgejo will
-retry the webhook per its configured retry policy.
-
-### CLI
-
-```
-ci-relay [OPTIONS]
-
-Options:
-    --port <PORT>      HTTP port for Forgejo webhooks [default: 8787]
-    --secret <SECRET>  HMAC-SHA256 secret [default: "" (no verification)]
-```
-
-On startup, the relay prints its iroh Node ID — this is the value the runner
-needs for `--relay-node-id`.
-
----
-
-## 5. local-runner Iroh Receiver
-
-### New CLI Flag
-
-```
---relay-node-id <HEX>    Iroh Node ID of the VPS ci-relay
-```
-
-When `--relay-node-id` is provided:
-- The HTTP webhook listener is **not started** (no port conflict, no exposure)
-- An `iroh-receiver` thread starts instead
-
-When omitted, behavior is unchanged — the HTTP listener starts on `--port`
-as before.
-
-### `start_iroh_receiver()`
-
-Spawns a dedicated thread (`iroh-receiver`) with its own single-threaded tokio
-runtime:
-
-1. Creates an iroh `Endpoint` with ALPN `b"swactor/ci/1"`
-2. Connects to the relay's `PublicKey` (parsed from the hex flag)
-3. Enters a receive loop:
-   - `conn.accept_uni()` with 1-second timeout
-   - On stream: reads tagged message, deserializes `WebhookEvent`
-   - Sends `LocalCoordinatorMsg::Webhook(event)` to the coordinator via the swactor runtime
-   - On timeout: checks the `stop` flag (for graceful shutdown via Ctrl-C)
-   - On connection error: breaks and exits
-
-The thread respects the same `AtomicBool` stop flag as the main loop, so
-Ctrl-C cleanly shuts down both the swactor runtime and the iroh connection.
-
----
-
-## 6. Wire Protocol
-
-### ALPN
-
-```rust
-const CI_ALPN: &[u8] = b"swactor/ci/1";
-```
-
-Distinct from SWIM traffic (`b"swactor/swim/1"`). This allows both protocols
-to coexist on the same iroh endpoint in the future if needed.
-
-### Frame Format
-
-Same tagged-message format as `iroh_driver.rs`:
-
-```
-[4 bytes: tag_len (big-endian u32)]
-[tag_len bytes: tag string]
-[remaining bytes: payload]
-```
-
-For webhook events:
-- Tag: `"ci::WebhookEvent"` (17 bytes)
-- Payload: JSON-serialized `WebhookEvent`
-
-### Transport
-
-Each webhook is one unidirectional QUIC stream. The relay opens the stream,
-writes the tagged message, and finishes. The runner reads the message and the
-stream closes. No persistent framing or multiplexing needed — QUIC streams
-are lightweight.
-
----
-
-## 7. Connection Flow
-
-```
-1. VPS starts ci-relay
-   → iroh Endpoint binds
-   → prints Node ID (ed25519 public key, hex)
-   → HTTP listener starts on --port
-   → waits for runner connection
-
-2. Thinkpad starts local-runner --relay-node-id <hex>
-   → iroh Endpoint binds
-   → connects to relay's PublicKey
-   → iroh handles NAT traversal (direct or via relay server)
-   → relay logs "Runner connected: <runner-node-id>"
-
-3. Forgejo sends webhook POST to localhost:8787 on VPS
-   → relay verifies HMAC, parses event
-   → relay opens uni stream on cached connection
-   → writes tagged WebhookEvent
-   → runner receives, deserializes, dispatches to coordinator
-
-4. Coordinator triggers pipeline
-   → StatusReporter posts status to Forgejo API directly
-   (Thinkpad → zachery.lol over HTTPS, no relay involvement)
-```
-
-The iroh connection is initiated by the runner (outbound from NAT), so no port
-forwarding is needed. iroh's relay servers handle the initial rendezvous, then
-attempt direct QUIC hole-punching for subsequent traffic.
-
----
-
-## 8. Design Decisions & Tradeoffs
-
-### 8.1 Separate Binary vs. Library Module
-
-**Choice**: `ci-relay` is a standalone binary, not a module in `swactor-ci`.
-
-**Why**: The relay runs on the VPS, which doesn't need swactor's runtime,
-actors, or any CI execution logic. A small binary with minimal dependencies
-deploys easily. It only depends on `swactor-ci` for `parse_webhook_json` and
-the `WebhookEvent`/`EventType` types.
-
-**Tradeoff**: Two binaries to build and deploy instead of one. Acceptable
-given they run on different machines.
-
-### 8.2 Runner Connects to Relay (Not Vice Versa)
-
-**Choice**: The runner initiates the iroh connection to the relay.
-
-**Why**: The runner is behind NAT. iroh can traverse NAT for established
-connections, but the initial rendezvous requires at least one side to be
-reachable. The VPS relay has a public IP and gets a stable relay URL from iroh's
-infrastructure. The runner connects outbound, which always works regardless of
-NAT type.
-
-### 8.3 Single Cached Connection (Not Connection Pool)
-
-**Choice**: The relay caches exactly one runner connection in
-`Arc<TokioMutex<Option<Connection>>>`.
-
-**Why**: There's one runner. If a new connection arrives (e.g., runner
-restarts), it replaces the old one. No pool management needed.
-
-**Tradeoff**: If multiple runners were needed, this would need a map. For
-single-runner use, the simplicity is worth it.
-
-### 8.4 Own Tokio Runtime Per Thread
-
-**Choice**: The iroh-receiver thread creates its own single-threaded tokio
-runtime rather than sharing the swactor runtime or the main thread's runtime.
-
-**Why**: swactor's runtime is not tokio — it's a custom actor scheduler. The
-iroh receiver needs async for QUIC operations. A dedicated single-threaded
-runtime keeps the iroh I/O isolated from actor scheduling. Same pattern as
-`IrohDriver` in the distribution layer (which owns a multi-thread runtime).
-
-### 8.5 HTTP 502 When No Runner Connected
-
-**Choice**: If Forgejo sends a webhook but no runner is connected, the relay
-returns HTTP 502 (Bad Gateway).
-
-**Why**: 502 tells Forgejo the upstream is unavailable. Forgejo will retry
-the webhook according to its retry policy. This is better than 200 (silently
-dropping) or 500 (suggesting a relay bug). When the runner reconnects, the
-next webhook will succeed.
-
----
-
-## 9. Manual Testing Guide
-
-### Prerequisites
-
-Build both binaries:
-
-```bash
-cargo build -p ci-relay -p local-runner
-```
-
-### 9.1 Local Smoke Test (Single Machine)
-
-This tests the full relay path without needing two machines or Forgejo.
-
-**Terminal 1 — Start the relay:**
-
-```bash
-./target/debug/ci-relay --port 9787
-```
-
-Output:
-```
-ci-relay started
-  Iroh Node ID: <NODE_ID_HEX>
-  Webhook HTTP: http://0.0.0.0:9787
-
-Waiting for runner to connect...
-Listening for webhooks...
-```
-
-Copy the Node ID.
-
-**Terminal 2 — Start the runner:**
-
-You need a `.ci.yml` file. Create a minimal one:
-
-```yaml
-# /tmp/test-ci.yml
-pipelines:
-  test:
-    triggers:
-      - event: push
-        branches: ["*"]
-    jobs:
-      hello:
-        run: echo "hello from CI"
-```
-
-Then start:
-
-```bash
-./target/debug/local-runner \
-  --relay-node-id <NODE_ID_HEX> \
-  --yaml /tmp/test-ci.yml \
-  --work-dir /tmp/ci-work-test
-```
-
-You should see:
-```
-  Iroh local ID: <RUNNER_ID>
-  Connecting to relay <NODE_ID>...
-  Connected to relay!
-Local CI runner started
-  Webhook: via iroh relay
-```
-
-And in Terminal 1:
-```
-Runner connected: <RUNNER_ID>
-```
-
-**Terminal 3 — Send a fake webhook:**
-
-```bash
-curl -X POST http://localhost:9787 \
-  -H "Content-Type: application/json" \
-  -H "X-Forgejo-Event: push" \
-  -d '{
-    "ref": "refs/heads/main",
-    "after": "abc123def456789012345678901234567890abcd",
-    "repository": {
-      "name": "test-repo",
-      "owner": { "login": "testuser" }
-    }
-  }'
-```
-
-Expected output:
-
-- **curl** returns: `ok`
-- **Terminal 1** (relay):
-  ```
-  webhook: abc123de main on testuser/test-repo
-    → forwarded to runner
-  ```
-- **Terminal 2** (runner):
-  ```
-  iroh: received webhook abc123de on main
-  ```
-
-The runner will also try to post status to Forgejo and log URL errors (since
-we didn't pass `--forgejo-url`) — that's expected and confirms the event
-reached the coordinator.
-
-### 9.2 HMAC Verification Test
-
-Start the relay with a secret:
-
-```bash
-./target/debug/ci-relay --port 9787 --secret mysecret
-```
-
-**Without signature — should be rejected (401):**
-
-```bash
-curl -v -X POST http://localhost:9787 \
-  -H "X-Forgejo-Event: push" \
-  -d '{"ref":"refs/heads/main","after":"abc123","repository":{"name":"r","owner":{"login":"u"}}}'
-```
-
-**With correct signature:**
-
-```bash
-# Compute HMAC-SHA256
-BODY='{"ref":"refs/heads/main","after":"abc123","repository":{"name":"r","owner":{"login":"u"}}}'
-SIG=$(echo -n "$BODY" | openssl dgst -sha256 -hmac "mysecret" | awk '{print $2}')
-
-curl -X POST http://localhost:9787 \
-  -H "X-Forgejo-Event: push" \
-  -H "X-Forgejo-Signature: $SIG" \
-  -d "$BODY"
-```
-
-Should return `ok` and forward to the runner.
-
-### 9.3 Runner Reconnection Test
-
-1. Start relay and runner as in 9.1
-2. Kill the runner (Ctrl-C in Terminal 2)
-3. Restart the runner with the same `--relay-node-id`
-4. The relay should log `Runner connected: <ID>` again
-5. Send another webhook — it should flow through
-
-### 9.4 No Runner Connected Test
-
-1. Start the relay only (no runner)
-2. Send a webhook via curl
-3. Should get HTTP 502 and relay logs: `forward failed: no runner connected`
-
-### 9.5 Full End-to-End with Forgejo
-
-For a real deployment:
-
-**On VPS:**
-
-```bash
-./ci-relay --port 8787 --secret <your-webhook-secret>
-```
-
-**On Thinkpad:**
-
-```bash
-./local-runner \
-  --relay-node-id <NODE_ID_FROM_VPS> \
-  --forgejo-url https://zachery.lol \
-  --forgejo-token <your-forgejo-api-token> \
-  --yaml .ci.yml \
-  --work-dir ~/ci-work \
-  --repo-url https://zachery.lol/<owner>/<repo>.git
-```
-
-**In Forgejo (repo settings → Webhooks):**
-
-- Target URL: `http://localhost:8787`
-- Secret: `<your-webhook-secret>`
-- Events: Push, Create (tags), Pull Request
-
-Push a commit and watch:
-1. Relay logs the webhook and forwards it
-2. Runner logs the received event and starts a pipeline
-3. Forgejo shows commit status checks (pending → success/failure)
-
-### 9.6 Inspecting Iroh Connectivity
-
-Both binaries print their iroh Node ID on startup. To verify they're using
-relay servers (expected when both are behind NAT or on different networks),
-look for connection timing:
-
-- **Fast connection (~1-3s)**: direct QUIC hole-punch succeeded
-- **Slower connection (~5-10s)**: using iroh relay server fallback
-
-If connection hangs indefinitely, check that both machines have internet
-access and can reach iroh's relay servers (`https://relay.iroh.network`).
-
----
-
-## 10. Known Gaps & Future Improvements
-
-| Gap | Effort | Impact | Notes |
-|-----|--------|--------|-------|
-| Reconnection on runner side | Small | High | If the iroh connection drops mid-operation, the runner currently exits the receive loop. Should retry with backoff. |
-| Multiple runner support | Medium | Medium | Relay caches one connection. For running CI on multiple machines, need a connection map keyed by runner identity. |
-| Health check / heartbeat | Small | Medium | Neither side detects a silently dead connection until the next webhook. A periodic ping would surface stale connections faster. |
-| Relay authentication | Small | Medium | Any iroh endpoint can connect to the relay. Should verify the runner's public key against an allowlist. |
-| Binary size | Small | Low | ci-relay pulls in `swactor-ci` (which includes all CI types). A slimmer dependency with just `WebhookEvent` + `parse_webhook_json` would reduce the VPS binary. |
-| Logging | Small | Low | Both binaries use `eprintln!`. Structured logging (tracing) would help in production. |
-
----
-
-## Files Created/Modified
-
-| Action | File | Purpose |
-|--------|------|---------|
-| Created | `crates/ci-relay/Cargo.toml` | Relay binary manifest |
-| Created | `crates/ci-relay/src/main.rs` | Webhook relay: HTTP → iroh |
-| Modified | `crates/local-runner/Cargo.toml` | Added iroh, tokio, serde_json deps |
-| Modified | `crates/local-runner/src/main.rs` | Added `--relay-node-id` flag and iroh receiver |
-| Modified | `Cargo.toml` (workspace root) | Added ci-relay to workspace members |
diff --git a/docs/development_history/dashboard-improvements-research.md b/docs/development_history/dashboard-improvements-research.md
deleted file mode 100644
index d3db015..0000000
--- a/docs/development_history/dashboard-improvements-research.md
+++ /dev/null
@@ -1,28 +0,0 @@
-# Dashboard Improvements — Research Phase
-
-## Summary
-Researched 10 comparable monitoring/dashboard systems to inform swactor's dashboard improvement plan.
-
-## Systems Analyzed
-- **Actor runtimes**: Erlang Observer (GUI/CLI/Web), Akka Insights, Ray Dashboard, Orleans Dashboard
-- **Async/runtime tools**: tokio-console, Lunatic
-- **Message/infrastructure**: RabbitMQ Management, Consul UI, Nomad UI
-- **Web frameworks**: Phoenix LiveDashboard
-
-## Key Findings
-1. **Time-series history** is table-stakes — every system provides it
-2. **Actor detail drill-down** is universal (Observer has 6-tab process info, Orleans has grain state inspection)
-3. **Search/filter** exists in every system
-4. **Warning/anomaly detection** (tokio-console's lint system) is a high-value differentiator
-5. **Topology visualization** (Consul golden metrics, Observer supervision tree) is rare but powerful
-
-## Implementation Plan
-8 feature stages defined (see `CLAUDE/notes/feature-stages/`):
-1. Time-Series History Infrastructure
-2. Actor Detail Drill-Down
-3. Search and Filter
-4. Per-Worker Utilization Visualization
-5. Warning/Anomaly Detection
-6. Actor-to-Actor Message Flow Topology
-7. Per-Actor Logging
-8. Per-Message-Type Breakdown
diff --git a/docs/development_history/datastore/AUTH_SUMMARY.md b/docs/development_history/datastore/AUTH_SUMMARY.md
deleted file mode 100644
index f09300d..0000000
--- a/docs/development_history/datastore/AUTH_SUMMARY.md
+++ /dev/null
@@ -1,386 +0,0 @@
-# Datastore Auth: Development History
-
-**Branch:** `swactor-auth`
-**Base commit:** `af15416` (pre-auth baseline)
-**5 commits + uncommitted working tree changes**
-
----
-
-## What Was Built
-
-A complete ed25519 authorization layer for the distributed datastore, spanning:
-
-- **Auth engine** — `AuthzEngine` with ACL, signed request verification, replay protection, nonce GC
-- **GatewayActor** — actor-level enforcement point with grant/revoke, access requests, key listing
-- **Browser auth flow** — WASM Ed25519 crypto, device key generation, access request/grant/deny lifecycle
-- **Admin page** — owner key upload, pending request management, manual key grant, authorized key list
-- **Expanded CLI** — full CRUD + auth subcommands (`grant`, `revoke`, `requests`, `keys`, `deny`) with name resolution
-- **Storage persistence** — entry/manifest persistence to filesystem, startup bulk-load
-- **xtask** — `node`, `cli`, `wasm` subcommands with `config.toml` support
-- **WASM crypto crate** — `crates/crypto-wasm/`, a `no_std` cdylib exporting `ed25519_sign()`, `get_public_key()`, `buffer_ptr()`
-
-The auth system enforces binary access control (authorized or not) at the HTTP API boundary. Internal actors remain auth-unaware. Two auth paths: connection-level (iroh QUIC handshake proves NodeId) and per-request signed envelopes (for browser/HTTP API). This branch implements Path 2 end-to-end, including the browser UX.
-
----
-
-## Architecture
-
-```
-                  ┌──────────────────────────────────────────────────────┐
-                  │                 HTTP API (api.rs)                    │
-                  │                                                     │
-                  │  Ungated:                                           │
-                  │    GET  /              → browser UI (access page)   │
-                  │    GET  /admin         → admin page                 │
-                  │    GET  /crypto.wasm   → WASM Ed25519 module        │
-                  │    GET  /api/status    → node identity              │
-                  │                                                     │
-                  │  Auth-gated (X-Signed-Request header):              │
-                  │    POST /api/put       → check_auth → handle_put   │
-                  │    GET  /api/get       → check_auth → handle_get   │
-                  │    GET  /api/data      → check_auth → handle_data  │
-                  │    POST /api/delete    → check_auth → handle_delete│
-                  │    GET  /api/list      → check_auth → handle_list  │
-                  │                                                     │
-                  │  Auth management (owner-only):                      │
-                  │    POST /api/auth/grant   → check_auth_identity    │
-                  │    POST /api/auth/revoke  → check_auth_identity    │
-                  │    GET  /api/auth/requests→ check_auth_identity    │
-                  │    GET  /api/auth/keys    → check_auth_identity    │
-                  │    POST /api/auth/deny    → check_auth_identity    │
-                  │                                                     │
-                  │  Signature-only (proves key, no ACL check):         │
-                  │    POST /api/auth/request → check_auth_sig_only    │
-                  └───────────────┬─────────────────────────────────────┘
-                                  │
-                        GatewayMsg (various)
-                                  │
-                  ┌───────────────▼───────────────┐
-                  │        GatewayActor           │
-                  │                               │
-                  │  AuthzEngine:                  │
-                  │    1. verify ed25519 signature │
-                  │    2. check timestamp ±300s    │
-                  │    3. check nonce uniqueness   │
-                  │    4. check ACL                │
-                  │                               │
-                  │  Access request management:    │
-                  │    pending_requests HashMap    │
-                  │    grant resolves label from   │
-                  │    pending request name        │
-                  │                               │
-                  │  ACL persistence:              │
-                  │    persist_acl() on grant/     │
-                  │    revoke                      │
-                  └───────────────┬───────────────┘
-                                  │
-                  ┌───────────────▼───────────────┐
-                  │       DatastoreNode           │
-                  │                               │
-                  │  MetadataActor ◄──► BlobStore │
-                  │  (auth-unaware)               │
-                  └───────────────────────────────┘
-
-                  ┌───────────────────────────────┐
-                  │    Browser (WASM Ed25519)      │
-                  │                               │
-                  │  /crypto.wasm → initCrypto()  │
-                  │  deviceKeySeed in localStorage │
-                  │  signBytes() per request      │
-                  │  Access action for all ops     │
-                  │  → X-Signed-Request header     │
-                  └───────────────────────────────┘
-
-                  ┌───────────────────────────────┐
-                  │       CLI (store_cli)          │
-                  │                               │
-                  │  --key owner.key.json          │
-                  │  Per-action signing:           │
-                  │    Put/Get/Delete/List/Access  │
-                  │  Name resolution for           │
-                  │    grant/revoke/deny           │
-                  └───────────────────────────────┘
-```
-
----
-
-## Commit-by-Commit
-
-### `863185e` — feat: distributed datastore primitives protocol
-
-Foundation commit establishing the distributed datastore protocol. Defined the protocol messages (`GetChunkRequest`, `FindObjectRequest`, `StoreObjectRequest`, `ListObjectsRequest` and their responses), all implementing `NetworkMessage` with stable `type_tag()` strings. This is the wire protocol for inter-node communication over iroh/QUIC.
-
-**Key files:** `src/messages.rs` (inter-node message types)
-
-### `84c4408` — fix: cli for datastore works
-
-Brought up the `store_node` and `store_cli` binaries as `[[bin]]` targets with feature-gated dependencies (`node` and `cli` features). The node binary spawns the actor runtime, wires up BlobStoreActor/MetadataActor/DatastoreNode, and serves the HTTP API via `tiny_http`. The CLI binary talks to the node over HTTP with `ureq`. Added `clap` for arg parsing, `ctrlc` for graceful shutdown, and `runtime-dashboard` integration.
-
-**Key files:** `Cargo.toml` (features `node`/`cli`), `src/bin/store_node.rs`, `src/bin/store_cli.rs`, `src/api.rs`
-
-### `ebee109` — feat: mvp auth protocol
-
-Core auth implementation:
-
-- **`src/auth.rs`** — `DatastoreAction` enum, `SignedRequestPayload`, `SignedRequest` envelope, `AccessControlList` (with JSON persistence via `save()`/`load_or_create()`), `AuthzEngine` (4-step verification: signature, timestamp, nonce, ACL), `sign_request()`/`verify_signed_request()` helpers, `AuthzResult`/`DeniedReason` enums.
-- **`src/actors/gateway.rs`** — `GatewayActor` wrapping `AuthzEngine`. Handles `Authorize` (pure auth check), `HandleSignedRequest` (auth + dispatch via `action_to_node_msg()`), `CheckConnection` (Path 1), `Grant`/`Revoke` (owner-only ACL mutations), `NonceGcTick`.
-- **`src/messages.rs`** — `GatewayMsg` enum, `DatastoreResponse::Denied` variant.
-- **`crates/shared-types/`** — Extracted `ContentHash` into its own crate to break dependency cycles between `distribution` and `datastore`.
-
-Tests added (18 total):
-- `auth_scenario_tests.rs` (10 tests) — owner access, stranger denial, grant/revoke lifecycle, signed request happy path, tampered signature, stale timestamp, replayed nonce, nonce GC, non-owner grant/revoke rejection.
-- `acl_persistence_tests.rs` (2 tests) — save/load round-trip, create-on-missing.
-- `gateway_tests.rs` (4 tests) — connection allow/deny, signed request flow-through, unauthorized signed request denial.
-
-### `8ac45e5` — fix: adjust auth protocol to datastore protocol
-
-Aligned the auth types with the content-hash-first datastore protocol:
-- `DatastoreAction::Put` carries `content_hash`, `size_bytes`, and `tags` (not raw data).
-- `DatastoreAction::Get`/`Delete` use `content_hash`.
-- `DatastoreAction::List` uses `name_filter`.
-- `GatewayActor::action_to_node_msg()` maps actions to `DatastoreNodeMsg` variants.
-- Wired `check_auth()` into the HTTP API handlers (put, get, data, delete, list) — reads `X-Signed-Request` header, sends `GatewayMsg::Authorize` to the gateway actor, denies with 401/403/504 on failure.
-- `handle_status` intentionally left ungated.
-
-### `e549eef` — feat: auth MVP with integrated tests
-
-Wired auth into both binaries:
-
-**`store_node.rs`** — `--auth` and `--auth-dir <PATH>` flags:
-- Loads or generates owner keypair from `<auth-dir>/owner.key.json`.
-- Owner keypair's public key becomes the `NodeId` (deterministic identity across restarts).
-- Loads/creates `<auth-dir>/acl.json` with owner as sole authorized key.
-- Spawns `GatewayActor` and passes `Some(gateway_addr)` to `start_api_server`.
-- Sends `GatewayMsg::NonceGcTick` on the same cadence as the metadata GC tick.
-
-**`store_cli.rs`** — `--key <PATH>` flag:
-- Each command builds the appropriate `DatastoreAction`, signs it, sends as `X-Signed-Request` header.
-- `status` never signs (always open by design).
-
-**`http_auth_integration.rs`** — Full-stack integration test: spins up the actor runtime with GatewayActor, starts the HTTP server, proves owner is allowed (PUT/GET/LIST/DELETE), stranger gets 403, missing header gets 401.
-
----
-
-## Uncommitted Working Tree Changes
-
-The uncommitted changes represent the bulk of the user-facing work: browser UI, admin page, WASM crypto, expanded CLI, storage persistence, and xtask.
-
-### Browser UI (`ui_html.rs` — `DATASTORE_UI_HTML`)
-
-Complete browser access page served at `/`:
-
-- **Upload panel** — file input + optional name, PUT via `authFetch()`
-- **Object table** — list all objects with hash, name, size; download and delete buttons
-- **Detail modal** — click a row to see full metadata, chunks, tags
-- **Auth detection** — on load, `detectAuth()` fetches `/api/list`; if 401, enables auth mode
-- **WASM crypto integration** — `initCrypto()` fetches `/crypto.wasm`, `initKeys()` generates or loads device seed from `localStorage`, derives public key via WASM
-- **Auth banner** — shown when user is not authorized, with access request form (name + optional message)
-- **Pending state** — after submitting request, shows "waiting for operator approval" with 5-second polling; auto-refreshes when granted
-- **Device key display** — shows truncated public key hex in header when auth is active
-- **JWK migration** — handles legacy `localStorage.deviceKey` (JWK format) by extracting the `d` parameter as seed
-
-### Admin Page (`ui_html.rs` — `DATASTORE_ADMIN_HTML`)
-
-Owner administration page served at `/admin`:
-
-- **Owner key upload** — file input for `key.json`, loads secret/public key hex, derives via WASM to verify, test call to `/api/auth/requests` to confirm ownership
-- **Pending access requests table** — name, message, key (truncated), grant/deny buttons
-- **Authorized keys table** — name (label), key (truncated), revoke button
-- **Manual grant form** — input for 64-char hex public key + optional name
-- **Name disambiguation** — when multiple entries share the same name, appends `(key_prefix)` suffix
-- **`ownerAuthFetch()`** — signs all admin API calls with `DatastoreAction::Access`
-
-### WASM Ed25519 Crypto (`crates/crypto-wasm/`)
-
-New `no_std` Rust crate compiled to `wasm32-unknown-unknown`:
-
-- **`Cargo.toml`** — `swactor-crypto-wasm`, `cdylib` crate type, depends on `ed25519-dalek` (no default features)
-- **`src/lib.rs`** — Three exported functions:
-  - `buffer_ptr()` → pointer to 8192-byte shared buffer
-  - `get_public_key()` — reads 32-byte seed from `BUF[0..32]`, writes public key to `BUF[32..64]`
-  - `ed25519_sign(msg_len)` — reads seed from `BUF[0..32]`, message from `BUF[128..128+msg_len]`, writes 64-byte signature to `BUF[64..128]`
-- **`crypto_wasm.wasm`** — pre-built binary embedded in the datastore via `include_bytes!("crypto_wasm.wasm")`
-- Served at `/crypto.wasm` endpoint (ungated)
-- Replaces the earlier Web Crypto API approach — Web Crypto's Ed25519 support is inconsistent across browsers; WASM provides deterministic behavior using the same `ed25519-dalek` crate as the Rust backend
-
-### Expanded GatewayActor (`actors/gateway.rs`)
-
-New message handlers beyond the original `Authorize`/`HandleSignedRequest`/`CheckConnection`/`Grant`/`Revoke`:
-
-- **`VerifySignature`** — calls `check_signature_only()` (no ACL check). Used for access request submissions where the caller needs to prove key ownership without being in the ACL.
-- **`SubmitAccessRequest`** — stores `AccessRequestInfo { key, name, message, requested_at }` in `pending_requests: HashMap<NodeId, AccessRequestInfo>`.
-- **`ListAccessRequests`** — owner-only; returns all pending requests.
-- **`DenyAccessRequest`** — owner-only; removes a pending request.
-- **`ListAuthorizedKeys`** — owner-only; returns `Vec<AuthorizedKeyInfo>` with labels.
-
-Grant now resolves labels: when granting a key that has a pending request, the request's `name` field becomes the key's label (unless an explicit label is provided).
-
-### Expanded Auth Types (`auth.rs`)
-
-- **`AccessRequestInfo`** — `{ key: NodeId, name: String, message: String, requested_at: u64 }`
-- **`AuthorizedKeyInfo`** — `{ key: NodeId, label: String }`
-- **`DatastoreAction::Access`** — new variant for browser-originated requests that prove identity without binding to specific content. The browser uses `Access` for all operations (auth is at the HTTP layer).
-- **`key_labels: HashMap<String, String>`** added to `AccessControlList` — maps hex public key to human-readable name. Populated by `grant()`, removed by `revoke()`.
-- **`check_signature_only()`** on `AuthzEngine` — verifies signature, timestamp, and nonce but skips ACL check.
-- **`authorized_key_list()`** on `AuthzEngine` — returns all authorized keys with their labels.
-
-### Storage Persistence (`storage/mod.rs`, `storage/in_memory.rs`)
-
-Extended `StorageBackend` trait with entry persistence:
-
-- **`write_entry()`** / **`read_entry()`** / **`delete_entry()`** / **`list_entries()`** — persist `ObjectEntry` JSON to disk
-- **`FilesystemBackend`** layout extended:
-  ```
-  {root}/
-  ├── chunks/{hex[0..2]}/{hex[2..4]}/{full_hex_hash}
-  ├── manifests/{hex[0..2]}/{hex[2..4]}/{full_hex_hash}
-  └── entries/{hex[0..2]}/{hex[2..4]}/{full_hex_hash}
-  ```
-- **`BlobStoreMsg::WriteEntry`** / **`DeleteEntry`** — fire-and-forget messages for entry persistence
-- **`BlobStoreMsg::LoadAll`** — startup bulk-load of all entries + their manifests
-- **`MetadataMsg::BulkLoad`** — injects loaded entries into MetadataActor's index
-- **`store_node.rs` startup sequence** — sends `LoadAll` to BlobStoreActor, polls for `LoadedAll` response, sends `BulkLoad` to MetadataActor
-
-### Expanded CLI (`store_cli.rs`)
-
-Full CRUD + auth management subcommands:
-
-| Subcommand | Auth | Description |
-|------------|------|-------------|
-| `put <path> [--name]` | `--key` signs `DatastoreAction::Put` | Upload a file |
-| `get <hash> [--output]` | `--key` signs `DatastoreAction::Get` | Metadata or download |
-| `delete <hash>` | `--key` signs `DatastoreAction::Delete` | Delete an object |
-| `list [--name] [--all]` | `--key` signs `DatastoreAction::List` | List objects |
-| `status` | Never signed | Node identity |
-| `grant <key_or_name> [--name]` | `--key` signs `Access` | Authorize a key (owner-only) |
-| `revoke <key_or_name>` | `--key` signs `Access` | Revoke a key (owner-only) |
-| `requests` | `--key` signs `Access` | List pending access requests |
-| `keys` | `--key` signs `Access` | List authorized keys |
-| `deny <key_or_name>` | `--key` signs `Access` | Deny a pending request |
-
-**Name resolution:** `grant`, `revoke`, and `deny` accept either a 64-char hex key or a human-readable name. When given a name, the CLI fetches the relevant list from the API and resolves the name to a key. Disambiguated names (`"alice (c9d0e1f2)"`) are supported.
-
-### xtask (`xtask/src/main.rs`)
-
-Development task runner with three new subcommands beyond the existing `test`:
-
-- **`cargo xtask node`** — builds and runs `swactor-store-node`. Flags: `--port`, `--storage-path`, `--auth` (default: true), `--auth-dir`. Builds with `--features node` first, then runs the binary directly (not via `cargo run`) to avoid SIGINT issues. Ignores SIGINT in the xtask process so the child handles Ctrl-C.
-- **`cargo xtask cli`** — builds and runs `swactor-store`. Flags: `--url`, `--key`. Auto-detects `./auth/owner.key.json` if present. Passes extra args through.
-- **`cargo xtask wasm`** — builds `swactor-crypto-wasm` for `wasm32-unknown-unknown --release`, copies the output to `crates/datastore/src/crypto_wasm.wasm`, optionally runs `wasm-strip`.
-- **`config.toml` support** — reads `xtask/config.toml` for default values (node port, storage path, auth settings, CLI url/key).
-
-**`xtask/Cargo.toml`** — added `toml`, `serde`, `libc` dependencies.
-
-### HTTP API Expansion (`api.rs`)
-
-New endpoints:
-
-| Method | Path | Auth | Handler |
-|--------|------|------|---------|
-| `POST` | `/api/auth/grant?key=<hex>[&name=<label>]` | Owner (full check) | `handle_auth_grant` |
-| `POST` | `/api/auth/revoke?key=<hex>` | Owner (full check) | `handle_auth_revoke` |
-| `POST` | `/api/auth/request` | Signature-only | `handle_auth_request` |
-| `GET`  | `/api/auth/requests` | Owner (full check) | `handle_auth_requests_list` |
-| `GET`  | `/api/auth/keys` | Owner (full check) | `handle_auth_keys_list` |
-| `POST` | `/api/auth/deny?key=<hex>` | Owner (full check) | `handle_auth_deny` |
-| `GET`  | `/` | None | Browser UI |
-| `GET`  | `/admin` | None | Admin page |
-| `GET`  | `/crypto.wasm` | None | WASM module |
-
-New internal functions:
-- `check_auth_identity()` — like `check_auth()` but returns the caller's `NodeId` (needed for grant/revoke to identify the requester).
-- `check_auth_signature_only()` — verifies signature without ACL check (for access request submission).
-- `respond_wasm()`, `respond_admin_html()` — serve the new static assets.
-- `CRYPTO_WASM` constant — `include_bytes!("crypto_wasm.wasm")`.
-
-### DatastoreResponse Expansion (`messages.rs`)
-
-New response variants:
-- `AccessRequests { requests: Vec<AccessRequestInfo> }` — response to `ListAccessRequests`
-- `AuthorizedKeys { keys: Vec<AuthorizedKeyInfo> }` — response to `ListAuthorizedKeys`
-- `LoadedAll { entries: Vec<(ObjectEntry, ObjectManifest)> }` — response to `BlobStoreMsg::LoadAll`
-
----
-
-## Key File Format
-
-`owner.key.json` / any client `key.json`:
-
-```json
-{
-  "version": 1,
-  "secret_key": "...64 hex chars (32 bytes)...",
-  "public_key": "...64 hex chars (32 bytes)...",
-  "created_at": "2026-02-15T12:00:00Z"
-}
-```
-
-Generated by the node on first `--auth` run. The CLI reads it via `--key`. The admin page uploads it for authentication. The browser generates a simpler device seed (32 random bytes stored as hex in `localStorage.deviceKeySeed`).
-
----
-
-## Test Summary
-
-| Test File | Count | What |
-|-----------|-------|------|
-| `auth_scenario_tests.rs` | 10 | AuthzEngine: signing, verification, timestamp, nonce, ACL, grant/revoke |
-| `acl_persistence_tests.rs` | 2 | ACL JSON round-trip, create-on-missing |
-| `gateway_tests.rs` | 4 | GatewayActor: connection check, signed request flow, denial |
-| `http_auth_integration.rs` | 1 | Full HTTP stack: owner PUT/GET/LIST/DELETE, stranger 403, no-header 401 |
-| **Auth total** | **17** | |
-
-Pre-existing datastore tests (blob_store, metadata, datastore_node, chunking, gc, storage, transfer, multi_node, api_integration, dashboard_integration) continue to pass.
-
----
-
-## Design Decisions
-
-1. **WASM Ed25519 over Web Crypto** — Web Crypto's Ed25519 support varies by browser (Safari lacking, Firefox gated behind flags as of early 2026). A WASM module using `ed25519-dalek` with `no_std` gives deterministic, cross-browser behavior and byte-level compatibility with the Rust backend. The compiled module is ~27KB stripped.
-
-2. **`DatastoreAction::Access` for browser ops** — The browser signs a lightweight `Access` action for every API call rather than constructing per-operation payloads. This simplifies the browser JS (no need to compute content hashes client-side) while still proving identity. The actual data operations are auth-gated at the HTTP layer.
-
-3. **Signature-only check for access requests** — `POST /api/auth/request` uses `check_auth_signature_only()` which verifies the signature/timestamp/nonce but skips the ACL check. This allows an unauthorized user to prove key ownership when requesting access, without being in the ACL yet.
-
-4. **Key labels in ACL** — `key_labels: HashMap<String, String>` maps hex public key to human-readable name. Labels are set on grant (from the access request's `name` field or an explicit `--name` flag) and removed on revoke. This enables the admin page and CLI to show meaningful names instead of raw hex keys.
-
-5. **Access request flow** — Instead of requiring out-of-band key exchange, browser users can submit an access request with their name and a message. The request is stored in-memory in the GatewayActor's `pending_requests`. The owner can grant or deny from the admin page or CLI. On grant, the pending request is removed and its name becomes the key label.
-
-6. **Entry persistence** — `StorageBackend` trait extended with `write_entry()`/`read_entry()`/`delete_entry()`/`list_entries()`. The `FilesystemBackend` stores entries as JSON files in a `entries/` directory with the same 2-level hex sharding as chunks. On startup, `BlobStoreMsg::LoadAll` reads all entries and their manifests, then `MetadataMsg::BulkLoad` injects them into the MetadataActor's index. This means stored objects survive node restarts.
-
-7. **xtask builds then execs** — `cargo xtask node` and `cargo xtask cli` build the binary first, then exec it directly (not via `cargo run`). This avoids cargo sitting in the process chain and dying from SIGINT before the node finishes its shutdown sequence.
-
-8. **Status endpoint stays open** — `/api/status`, `/`, `/admin`, and `/crypto.wasm` are never auth-gated. Status enables health checks; the UI/admin pages need to be loadable before authentication; the WASM module is needed to perform authentication.
-
-9. **ACL persisted to auth-dir** — The ACL is stored at `<auth-dir>/acl.json` (default: `./auth/acl.json`), not inside the storage path. This separates auth config from data storage.
-
-10. **CLI name resolution** — `grant`, `revoke`, and `deny` accept human-readable names in addition to hex keys. When given a name, the CLI fetches the pending requests or authorized keys list from the API and resolves the name. If multiple entries match, it prints disambiguated names (e.g., `"alice (c9d0e1f2)"`) and asks the user to re-run.
-
----
-
-## File Inventory
-
-| File | What |
-|------|------|
-| `crates/shared-types/` | `ContentHash` crate (breaks dependency cycles) |
-| `crates/crypto-wasm/Cargo.toml` | WASM crypto crate config |
-| `crates/crypto-wasm/src/lib.rs` | `no_std` Ed25519 sign/derive/buffer exports |
-| `crates/datastore/src/crypto_wasm.wasm` | Pre-built WASM binary (embedded via `include_bytes!`) |
-| `crates/datastore/Cargo.toml` | Feature flags (`node`/`cli`), dependencies |
-| `crates/datastore/src/auth.rs` | Auth engine, ACL, signing, verification, access request types |
-| `crates/datastore/src/actors/gateway.rs` | GatewayActor — auth enforcement + access request management |
-| `crates/datastore/src/actors/blob_store.rs` | BlobStoreActor — entry persistence, LoadAll |
-| `crates/datastore/src/actors/metadata.rs` | MetadataActor — entry persistence writes, BulkLoad |
-| `crates/datastore/src/messages.rs` | GatewayMsg, BlobStoreMsg (WriteEntry/DeleteEntry/LoadAll), DatastoreResponse extensions |
-| `crates/datastore/src/api.rs` | HTTP API — auth endpoints, WASM/admin serving, auth checking functions |
-| `crates/datastore/src/ui_html.rs` | Browser UI (access page) + Admin page HTML/CSS/JS |
-| `crates/datastore/src/storage/mod.rs` | StorageBackend trait (entry methods), FilesystemBackend |
-| `crates/datastore/src/storage/in_memory.rs` | InMemoryBackend (entry methods) |
-| `crates/datastore/src/bin/store_node.rs` | Node binary — `--auth`, `--auth-dir`, keypair mgmt, gateway spawn, bulk-load |
-| `crates/datastore/src/bin/store_cli.rs` | CLI binary — `--key`, all subcommands, name resolution |
-| `xtask/Cargo.toml` | xtask dependencies (toml, serde, libc) |
-| `xtask/src/main.rs` | `node`, `cli`, `wasm` subcommands, `config.toml` support |
-| `docs/datastore/DATASTORE_AUTH.md` | Auth specification document |
-| `tests/auth_scenario_tests.rs` | 10 AuthzEngine scenario tests |
-| `tests/acl_persistence_tests.rs` | 2 ACL persistence tests |
-| `tests/gateway_tests.rs` | 4 GatewayActor tests |
-| `tests/http_auth_integration.rs` | 1 full-stack HTTP auth integration test |
diff --git a/docs/development_history/datastore/CHANGES.md b/docs/development_history/datastore/CHANGES.md
deleted file mode 100644
index 9bff0b0..0000000
--- a/docs/development_history/datastore/CHANGES.md
+++ /dev/null
@@ -1,93 +0,0 @@
-# Unified Swactor Node with Datastore Dashboard Management
-
-This document summarizes the changes on the `datastore-dashboard` branch.
-
-## Problem
-
-The swactor ecosystem had two separate binaries with no overlap:
-
-- **`swactor-node`** (in `runtime-dashboard`) — distribution + dashboard, no datastore
-- **`swactor-store-node`** (in `swactor-datastore`) — datastore + optional dashboard, no distribution
-
-The dashboard's `/datastore` page was read-only (stats via SSE). The standalone datastore had its own management UI on a separate port. Neither binary gave you the full picture.
-
-## Solution
-
-A single batteries-included `swactor-node` crate that combines distribution, dashboard, and datastore. The dashboard now supports full datastore CRUD and lifecycle management. Old binaries remain as lightweight alternatives.
-
-**Quick start:**
-
-```
-cargo xtask dev-node
-```
-
-Opens an iroh node with in-memory datastore on dashboard port 9090.
-
-## What Changed
-
-### New files
-
-| File | Purpose |
-|------|---------|
-| `crates/swactor-node/Cargo.toml` | Unified node crate — depends on `runtime-dashboard`, `swactor-datastore`, and `distribution` |
-| `crates/swactor-node/src/main.rs` | Combined binary with CLI: `--transport` (iroh default), `--storage-path`, `--no-datastore`, `--dashboard-port`, etc. Main loop merges distribution ticking with datastore GC/dissemination |
-| `crates/datastore/src/bridge.rs` | `DatastoreBridge` — implements the dashboard's provider trait by sending actor messages and polling responses. `DatastoreNodeFactory` — spawns a fresh set of datastore actors on demand (used by the start/stop UI) |
-
-### Modified files
-
-**`Cargo.toml` (workspace root)**
-- Added `"crates/swactor-node"` to workspace members.
-
-**`crates/datastore/src/lib.rs`**
-- Added `pub mod bridge` behind `#[cfg(feature = "node")]`.
-
-**`crates/runtime-dashboard/src/datastore_collector.rs`**
-- Expanded `DatastoreStatsProvider` trait with CRUD methods: `list_objects`, `get_object`, `get_data`, `put_data`, `delete_object`, `node_status`, `is_running`, `shutdown_datastore`. All have default impls returning `Err("not supported")` so existing `DatastoreMetrics` impl compiles unchanged.
-- Added `ListScope` enum (`Local` / `Swarm`).
-- Added `DatastoreFactory` trait for starting datastores from the dashboard.
-
-**`crates/runtime-dashboard/src/lib.rs`**
-- Added `datastore_factory` field to `DashboardHandle`.
-- Added `set_datastore_factory()` and `datastore_provider()` methods.
-- Threads factory through to `spawn_http_server()`.
-
-**`crates/runtime-dashboard/src/server.rs`**
-- Switched route matching from path-only to `(method, path)` tuples.
-- Added 8 new API routes under `/api/datastore/`:
-  - `GET  /api/datastore/list` — list objects (local or swarm scope)
-  - `GET  /api/datastore/get` — object metadata + manifest
-  - `GET  /api/datastore/data` — download raw bytes
-  - `GET  /api/datastore/status` — node identity
-  - `POST /api/datastore/put` — upload data
-  - `POST /api/datastore/delete` — delete object
-  - `POST /api/datastore/start` — start datastore via factory
-  - `POST /api/datastore/shutdown` — stop datastore
-- SSE `datastore` event now wraps the snapshot in an envelope: `{"is_running": bool, "snapshot": ...}`.
-
-**`crates/runtime-dashboard/src/datastore_html.rs`**
-- Full rewrite merging the monitoring dashboard (SSE-driven stats, event timeline, transfers) with the management UI from `ui_html.rs`:
-  - Upload panel (file input + optional name)
-  - Objects table with Origin column (local/remote badges) and action buttons (download, delete)
-  - Detail modal (hash, name, size, node, tags, chunk list)
-  - Toast notifications
-  - Lifecycle buttons: Start Datastore / Stop (shown based on `is_running` from SSE)
-
-**`xtask/src/main.rs`**
-- Added `dev-node` subcommand: builds and runs the unified node with happy defaults (iroh transport, port 9090, 3 actors, in-memory datastore).
-- Options: `--port`, `--actors`, `--storage`, `--no-datastore`, `--tcp`, `--listen`, `--release`.
-
-## Design Decisions
-
-- **Iroh is the default transport.** TCP is available via `--tcp` flag or `--transport tcp`.
-- **Datastore is on by default** (in-memory). Disable with `--no-datastore`.
-- **Dashboard-only API** — no separate datastore HTTP port. The dashboard serves all CRUD routes.
-- **Factory pattern** — even when started with `--no-datastore`, the dashboard can start/stop a datastore at runtime via `DatastoreNodeFactory`.
-- **No circular dependencies** — `swactor-node` sits atop the dependency graph: `swactor-node` -> `runtime-dashboard` + `swactor-datastore[node]`. The bridge trait lives in `runtime-dashboard` with default method impls.
-- **Old binaries kept** — `runtime-dashboard`'s `swactor-node` and `swactor-datastore`'s `swactor-store-node` still work as lightweight alternatives.
-
-## Verification
-
-```
-cargo build -p swactor-node -p runtime-dashboard -p swactor-datastore   # clean, 0 warnings
-cargo test -p swactor -p distribution -p runtime-dashboard -p swactor-datastore -p swactor-node   # 323 tests pass
-```
diff --git a/docs/development_history/datastore/DATASTORE_AUTH.md b/docs/development_history/datastore/DATASTORE_AUTH.md
deleted file mode 100644
index 2b6d237..0000000
--- a/docs/development_history/datastore/DATASTORE_AUTH.md
+++ /dev/null
@@ -1,305 +0,0 @@
-# Swactor Datastore Auth Specification
-
-**Version:** 0.1.0 (MVP)
-**Status:** Draft
-**Companion to:** `DATASTORE_PROTOCOL.md`
-
-## 1. Overview
-
-This document specifies the authorization layer for the Swactor Datastore. It defines how access is controlled for external clients connecting to a datastore node.
-
-### Principles
-
-- **Cryptographic identity** — keys, not passwords. Every participant is identified by an ed25519 public key (`NodeId`).
-- **Binary access** — a client is either authorized or not. No permission tiers for MVP.
-- **Owner-only administration** — only the datastore owner can grant or revoke access.
-- **Transport-layer authentication** — iroh's QUIC handshake cryptographically proves a peer's `NodeId`. This spec builds authorization on top of that.
-
-### Non-Goals (MVP)
-
-- Per-path permission scoping.
-- Permission tiers (read-only, read-write, admin).
-- Capability tokens or time-limited delegated access.
-- Multi-level delegation chains.
-
-## 2. Trust Boundaries
-
-```
-┌─────────────────────────────────────────────┐
-│             Cluster (SWIM mesh)              │
-│                                              │
-│  Node A ◄──────────────► Node B             │
-│           implicitly trusted                 │
-│           (no auth checks)                   │
-└──────────────────┬──────────────────────────┘
-                   │
-                   │  auth boundary
-                   │
-        ┌──────────▼──────────┐
-        │   External Clients  │
-        │                     │
-        │  CLI tool           │
-        │  Browser user       │
-        └─────────────────────┘
-```
-
-- **Cluster-internal** (node-to-node via SWIM): implicitly trusted. Nodes that are members of the SWIM cluster communicate freely — no per-request auth checks.
-- **External clients** (CLI, browser): must be authorized. Every external request is checked against the Access Control List before being dispatched to the actor system.
-
-## 3. Identity Model
-
-The auth layer reuses the existing ed25519 identity model from the distribution layer:
-
-- Every client (CLI tool, browser user, node) has an ed25519 keypair.
-- Identity is the 32-byte public key, represented as `NodeId`.
-- The same `NodeId` type from `distribution::types` is used throughout.
-
-There is no separate "user" concept — a keypair *is* an identity.
-
-## 4. Access Control List
-
-### 4.1 Structure
-
-```
-AccessControlList {
-    owner:           NodeId,              // The datastore owner's public key
-    authorized_keys: Set<NodeId>,         // Explicitly authorized client keys
-}
-```
-
-- The **owner** always has full access (implicit; never needs to be in `authorized_keys`).
-- An empty `authorized_keys` set means only the owner can access the datastore.
-
-### 4.2 Persistence
-
-The ACL is persisted as a JSON file alongside the datastore's `storage_path`:
-
-```
-{storage_path}/
-├── chunks/
-├── manifests/
-└── acl.json              # AccessControlList
-```
-
-### 4.3 Mutations
-
-| Operation | Signature | Who |
-|-----------|-----------|-----|
-| Grant access | `grant(key: NodeId)` | Owner only |
-| Revoke access | `revoke(key: NodeId)` | Owner only |
-
-- `grant` adds a `NodeId` to `authorized_keys`. Idempotent — granting an already-authorized key is a no-op.
-- `revoke` removes a `NodeId` from `authorized_keys`. Idempotent — revoking a non-existent key is a no-op.
-- Revoking the owner is a no-op (the owner's implicit access cannot be removed).
-- Both operations persist the updated ACL to disk immediately.
-
-## 5. Auth Path 1 — Direct iroh Connection
-
-For clients that connect directly to the datastore node over iroh (QUIC):
-
-```
-Client (ed25519 keypair)              Datastore Node
-        │                                    │
-        │──── iroh QUIC handshake ──────────>│
-        │     (proves client's NodeId)       │
-        │                                    │
-        │                              check NodeId
-        │                              against ACL
-        │                                    │
-        │<─── accept / reject ──────────────│
-        │                                    │
-        │     (if accepted, all ops on       │
-        │      this connection are allowed)  │
-```
-
-1. The iroh QUIC handshake cryptographically proves the peer's `NodeId` (ed25519 public key).
-2. On connection establishment, the node checks the peer's `NodeId` against the ACL.
-3. If authorized → connection accepted. All operations on that connection are allowed with no per-message overhead.
-4. If not authorized → connection rejected immediately.
-
-This is the preferred auth path — zero overhead after the initial handshake.
-
-## 6. Auth Path 2 — Signed Requests (Browser Relay)
-
-For browser users who cannot establish direct iroh connections (e.g., because the browser communicates via a website backend that relays requests):
-
-### 6.1 Threat Model
-
-The website backend acts as an **untrusted relay**. It forwards requests between the browser and the datastore node but never sees private keys. The relay cannot forge, modify, or replay requests.
-
-### 6.2 Signed Envelope
-
-Each request is wrapped in a signed envelope:
-
-```
-SignedRequest {
-    payload:    SignedRequestPayload,    // The request details
-    public_key: NodeId,                 // Client's public key
-    signature:  Signature,              // ed25519 signature over serialized payload
-}
-
-SignedRequestPayload {
-    action:    DatastoreAction,         // What the client wants to do
-    timestamp: u64,                     // Unix timestamp (seconds)
-    nonce:     [u8; 16],                // 16 random bytes
-}
-
-DatastoreAction = enum {
-    Put { name, content_hash, size_bytes, tags },
-    Get { content_hash },
-    Delete { content_hash },
-    List { name_filter },
-}
-```
-
-### 6.3 Verification Steps
-
-The datastore node verifies a signed request in strict order:
-
-1. **Signature validity** — verify the ed25519 signature over the canonical serialization of `SignedRequestPayload` using the provided `public_key`.
-2. **Timestamp freshness** — reject if `|now - payload.timestamp| > 300` seconds.
-3. **Nonce uniqueness** — reject if `payload.nonce` has been seen before within the time window.
-4. **ACL check** — reject if `public_key` is not in the ACL.
-
-If any step fails, the request is denied with the corresponding `DeniedReason`.
-
-### 6.4 Put Payload Note
-
-`DatastoreAction::Put` references a `content_hash` rather than embedding raw file data. The bulk data is uploaded separately, and its integrity is guaranteed by blake3 content addressing. The signed envelope authorizes the *operation*, not the data transfer.
-
-## 7. Replay Protection
-
-### 7.1 Timestamp Window
-
-- Requests must have a `timestamp` within ±300 seconds of the node's wall clock.
-- This bounds the maximum clock drift between client and server.
-- Requests outside this window are rejected with `DeniedReason::RequestExpired`.
-
-### 7.2 Nonce
-
-- Each request includes a 16-byte random nonce.
-- The node maintains a set of recently seen nonces.
-- Duplicate nonces within the time window are rejected with `DeniedReason::ReplayDetected`.
-
-### 7.3 Nonce Garbage Collection
-
-- Nonces are stored alongside their timestamps.
-- When a nonce's timestamp falls outside the ±300 second window, it is eligible for GC.
-- GC runs periodically (piggy-backed on request processing or a background sweep).
-
-## 8. Enforcement Point
-
-Auth is enforced at the **edge** of the actor system — between external clients and the internal actors:
-
-```
-External Client
-      │
-      ▼
-┌─────────────┐
-│  Auth Gate   │◄── ACL check happens here
-└──────┬──────┘
-       │
-       ▼
-┌──────────────┐    ┌─────────────────┐    ┌────────────────┐
-│ MetadataActor│◄──►│ BlobStoreActor  │    │ TransferActor  │
-│              │    │                 │    │                │
-│  (auth-      │    │  (auth-         │    │  (auth-        │
-│   unaware)   │    │   unaware)      │    │   unaware)     │
-└──────────────┘    └─────────────────┘    └────────────────┘
-```
-
-### 8.1 Direct iroh Connections
-
-- Auth check at connection acceptance time.
-- Once accepted, the connection is fully trusted for all operations.
-- No per-message overhead.
-
-### 8.2 Signed Requests (Browser Relay)
-
-- A `GatewayActor` receives signed request envelopes.
-- The GatewayActor verifies the envelope (signature, timestamp, nonce, ACL).
-- If valid, the GatewayActor dispatches the inner action to the `MetadataActor`.
-- If invalid, the GatewayActor returns the denial reason to the relay.
-
-### 8.3 Internal Actors
-
-`MetadataActor`, `BlobStoreActor`, and `TransferActor` remain **auth-unaware**. They process messages from any source within the actor system. The auth boundary is strictly external.
-
-## 9. Key Management
-
-### 9.1 Key Generation
-
-- Uses `ed25519_dalek` keypairs (same as node identity).
-- CLI: `swactor-store auth keygen` generates a new keypair and prints both the secret key (for the client to store) and the public key (to share with the owner).
-- Browser: keypair generated client-side using WebCrypto Ed25519 or wasm-compiled ed25519. The private key never leaves the browser.
-
-### 9.2 Grant Flow
-
-```
-1. Client generates an ed25519 keypair.
-2. Client shares their public key with the datastore owner (out-of-band).
-3. Owner runs: swactor-store auth grant <pubkey>
-4. Client can now access the datastore.
-```
-
-The out-of-band exchange is intentional — it keeps the trust model simple. The owner explicitly decides who gets access.
-
-### 9.3 Revocation
-
-```
-1. Owner runs: swactor-store auth revoke <pubkey>
-2. Client's access is immediately revoked.
-3. Existing direct iroh connections from that client remain open until disconnected.
-4. Signed requests from the revoked key are rejected immediately.
-```
-
-Note: revoking a key does not forcibly disconnect an active iroh session. The revocation takes effect on the next connection attempt. For immediate disconnection, the owner should also restart the node or implement connection tracking (future extension).
-
-## 10. CLI Extensions
-
-The following subcommands are added under `swactor-store auth`:
-
-```
-swactor-store auth keygen
-    Generate a new ed25519 keypair.
-    Prints the public key (hex) and secret key (hex) to stdout.
-
-swactor-store auth grant <pubkey>
-    Add a public key to the ACL's authorized_keys set.
-    Requires running on the owner's node.
-
-swactor-store auth revoke <pubkey>
-    Remove a public key from the ACL's authorized_keys set.
-    Requires running on the owner's node.
-
-swactor-store auth list
-    Show all authorized keys (including the owner).
-
-swactor-store auth whoami
-    Show this node's public key (NodeId).
-```
-
-## 11. Integration with Datastore Protocol
-
-Each protocol flow from `DATASTORE_PROTOCOL.md` §6 has a clear auth integration point:
-
-| Protocol Flow | Auth Path 1 (Direct) | Auth Path 2 (Signed Request) |
-|---------------|----------------------|------------------------------|
-| §6.1 PUT | Connection-level ACL check | `SignedRequest { action: Put { name, content_hash, size_bytes, tags }, .. }` |
-| §6.2 GET (Local) | Connection-level ACL check | `SignedRequest { action: Get { content_hash }, .. }` |
-| §6.3 GET (Remote) | Connection-level ACL check | `SignedRequest { action: Get { content_hash }, .. }` → node handles remote fetch internally |
-| §6.4 DELETE | Connection-level ACL check | `SignedRequest { action: Delete { content_hash }, .. }` |
-| §6.5 LIST (Local) | Connection-level ACL check | `SignedRequest { action: List { name_filter }, .. }` |
-| §6.6 LIST (Swarm-Wide) | Connection-level ACL check | `SignedRequest { action: List { name_filter }, .. }` → node handles fan-out internally |
-
-In all cases, auth is enforced *before* the request reaches the actor system. Internal inter-node communication (DHT replication, chunk transfers between cluster members) is not subject to auth checks.
-
-## 12. Future Extensions
-
-These are explicitly **out of scope** for MVP but inform the design:
-
-- **Per-path permission scoping** — restrict a key to specific path prefixes (e.g., read-only access to `photos/`).
-- **Permission tiers** — read-only, read-write, admin roles.
-- **Capability tokens** — time-limited, scope-limited bearer tokens for delegated access without sharing long-lived keys.
-- **Multi-level delegation** — allow authorized users to grant limited access to others.
-- **Connection tracking** — forcibly disconnect revoked keys from active iroh sessions.
diff --git a/docs/development_history/datastore/PROTOCOL.md b/docs/development_history/datastore/PROTOCOL.md
deleted file mode 100644
index 85dc919..0000000
--- a/docs/development_history/datastore/PROTOCOL.md
+++ /dev/null
@@ -1,471 +0,0 @@
-# Swactor Datastore Protocol Specification
-
-**Version:** 0.2.0 (MVP)
-**Status:** Draft
-
-## 1. Overview
-
-The Swactor Datastore is a distributed personal file/blob storage protocol for small trusted clusters (laptop, phone, browser). It provides content-hash-first addressing with immutable content-addressed objects, replicated via a Kademlia-based metadata DHT.
-
-### Design Principles
-
-- **Content-hash-first addressing** — every object is identified by `blake3(blob_bytes)`. This is the primary key for all operations.
-- **Immutable content-addressed objects** — content hashes are unique identifiers. There are no write conflicts by construction.
-- **Names are metadata** — optional flat strings attached to objects, not keys. Multiple objects can share a name; distinguished by content hash.
-- **Separation of data and metadata** — chunks are large opaque blobs; metadata is small, gossiped, and queryable.
-- **Crash-safe** — fsync before acknowledge on all writes.
-- **Actor-based** — three actor types coordinate via message passing within the swactor runtime.
-- **Transport-agnostic** — protocol messages defined as `NetworkMessage` types; MVP uses iroh (QUIC + NAT hole-punch + encryption).
-- **Pluggable storage** — `StorageBackend` trait abstracts I/O for filesystem (MVP), IndexedDB (browser), etc.
-
-## 2. Terminology
-
-| Term | Definition |
-|------|-----------|
-| **Object** | Content-addressed blob identified by `blake3(blob_bytes)`. May carry an optional human-readable name as metadata. |
-| **Blob** | The raw byte content of an object. |
-| **Chunk** | A fixed-size (1 MB default) slice of a blob, identified by its blake3 content hash. |
-| **Manifest** | An ordered list of `ChunkRef`s describing how to reassemble an object from chunks. Stored under the object's content hash. |
-| **ContentHash** | 32-byte blake3 digest. Primary identifier for blobs and DHT key. |
-| **ObjectEntry** | Metadata record: content hash, optional name, owner node, tags. |
-| **DHT overlay** | A Kademlia distributed hash table for object metadata, separate from the actor directory DHT. Keys are `blake3(blob_bytes)`. |
-| **StorageBackend** | Trait abstracting chunk and manifest I/O for pluggable backends (filesystem, IndexedDB, etc.). |
-| **Node** | A device running the swactor runtime with a datastore actor set (BlobStoreActor + MetadataActor). |
-
-## 3. Data Model
-
-### 3.1 ContentHash
-
-```
-ContentHash = blake3(data)[0..32]    // 32 bytes
-```
-
-- **Hashing algorithm:** blake3 — 2-3x faster than sha256, tree-hashable (parallel hashing of large chunks), same 32-byte output. Supports streaming hashing for large blobs via `blake3::Hasher`.
-- **Display:** first 8 bytes as hex + ellipsis (e.g. `a1b2c3d4e5f6a7b8…`).
-- **XOR distance:** bitwise XOR of the 32-byte arrays, used for Kademlia routing in the metadata DHT.
-
-### 3.2 ObjectEntry
-
-```
-ObjectEntry {
-    content_hash:  ContentHash,              // blake3(entire_blob) — primary identifier
-    name:          Option<String>,           // Optional flat string, not a path
-    node_id:       NodeId,                   // Node that stores the object
-    tags:          BTreeMap<String, String>,  // User-defined key-value tags
-    size_bytes:    u64,                      // Total object size
-    created_at:    u64,                      // Wall-clock creation time (informational)
-}
-```
-
-No conflict resolution is needed — content hashes are unique identifiers. Storing the same blob twice is a no-op (same content hash). Different blobs always have different content hashes.
-
-### 3.3 ObjectManifest
-
-```
-ObjectManifest {
-    content_hash:  ContentHash,         // blake3(entire_blob) — NOT the hash of this manifest
-    chunks:        Vec<ChunkRef>,       // Ordered list of chunks
-    total_size:    u64,                 // Total object size in bytes
-    chunk_size:    u32,                 // Fixed chunk size used (e.g. 1MB)
-    content_type:  Option<String>,      // MIME type
-}
-
-ChunkRef {
-    hash:   ContentHash,                // Content hash of chunk data
-    offset: u64,                        // Byte offset in original object
-    size:   u32,                        // Actual size (last chunk may be smaller)
-}
-```
-
-The `content_hash` field is `blake3(entire_blob)`, computed via a streaming hasher alongside chunking. The manifest is stored and looked up using this content hash as the key.
-
-### 3.4 Storage Backend
-
-The `StorageBackend` trait abstracts all chunk and manifest I/O:
-
-```rust
-pub trait StorageBackend: Send {
-    fn write_chunk(&mut self, hash: &ContentHash, data: &[u8]) -> Result<(), io::Error>;
-    fn read_chunk(&self, hash: &ContentHash) -> Result<Option<Vec<u8>>, io::Error>;
-    fn delete_chunk(&mut self, hash: &ContentHash) -> Result<(), io::Error>;
-    fn has_chunk(&self, hash: &ContentHash) -> bool;
-    fn list_chunks(&self) -> Vec<ContentHash>;
-    fn write_manifest(&mut self, manifest: &ObjectManifest) -> Result<(), io::Error>;
-    fn read_manifest(&self, content_hash: &ContentHash) -> Result<Option<ObjectManifest>, io::Error>;
-    fn delete_manifest(&mut self, content_hash: &ContentHash) -> Result<(), io::Error>;
-}
-```
-
-#### MVP: FilesystemBackend
-
-Two-level directory sharding to avoid huge directories:
-
-```
-{storage_path}/
-├── chunks/
-│   └── {hex[0..2]}/
-│       └── {hex[2..4]}/
-│           └── {full_hex_hash}        # Raw chunk bytes
-└── manifests/
-    └── {hex[0..2]}/
-        └── {hex[2..4]}/
-            └── {full_hex_hash}        # JSON-serialized ObjectManifest
-```
-
-Example: chunk with hash `abcdef12...` is stored at `chunks/ab/cd/abcdef12...`.
-
-All writes are fsynced before acknowledging.
-
-## 4. Content Addressing
-
-### 4.1 Chunking Algorithm
-
-Fixed-size chunking (MVP):
-
-1. Read the input file in `chunk_size` byte blocks (default: 1,048,576 = 1 MB).
-2. For each block, compute `ContentHash::of(block)`.
-3. Store each chunk via the `StorageBackend`.
-4. Build a `Vec<ChunkRef>` with sequential offsets.
-5. Compute `content_hash = blake3(entire_blob)` using a streaming hasher fed alongside chunking.
-6. Create the `ObjectManifest` with this `content_hash` and store it via the `StorageBackend` keyed by `content_hash`.
-
-The last chunk may be smaller than `chunk_size`.
-
-### 4.2 Reassembly
-
-1. Read the `ObjectManifest` (by its `content_hash`).
-2. For each `ChunkRef` in order, read the chunk by `hash`.
-3. Concatenate all chunk data to reconstruct the original blob.
-4. Verify: `blake3(reassembled) == content_hash` (optional integrity check).
-
-## 5. Metadata DHT
-
-> **Status:** Types and routing table logic exist in the `distribution` crate. `MetadataActor` has a dissemination queue (`enqueue`/`take_pending`) and peer-to-peer replication via `SetPeers` + `DisseminateTick`. Verified in local multi-node simulation. Full Kademlia iterative lookup (FIND_VALUE with α-parallel queries) is not yet implemented — dissemination is epidemic/gossip-style.
-
-### 5.1 Overlay Design
-
-The metadata DHT is a **separate Kademlia overlay** from the actor directory. It stores `ObjectEntry` records keyed by `blake3(blob_bytes)` — the content hash of the entire blob.
-
-This separation ensures:
-- Object metadata routing doesn't interfere with actor discovery.
-- Different replication factors can be used (objects may be stored on fewer nodes).
-- The DHT can be independently tuned for the metadata workload.
-
-### 5.2 Key Mapping
-
-```
-DHT key = blake3(blob_bytes) = entry.content_hash
-```
-
-### 5.3 Store Flow
-
-When storing object metadata:
-1. Use `key = entry.content_hash`.
-2. Find the `k` closest nodes to `key` in the metadata DHT routing table.
-3. Send `StoreObjectRequest { entry }` to each of the `k` closest nodes.
-
-### 5.4 Lookup Flow
-
-When looking up object metadata:
-1. Send `FindObjectRequest { content_hash }` to the `α` closest known nodes.
-2. Each node responds with either `Found(ObjectEntry)` or `Closer(Vec<(NodeId, SocketAddr)>)`.
-3. Continue querying closer nodes until convergence.
-
-No merge step is needed — content hashes are unique identifiers.
-
-## 6. Protocol Flows
-
-### 6.1 PUT — Store an Object
-
-```
-User                    MetadataActor           BlobStoreActor
- │                           │                        │
- │─── PutObject ────────────>│                        │
- │                           │                        │
- │                           │  (chunk the file,      │
- │                           │   stream blake3 hash)  │
- │                           │                        │
- │                           │─── WriteChunk ────────>│
- │                           │<── ChunkStored ────────│  (repeat for each chunk)
- │                           │                        │
- │                           │─── WriteManifest ─────>│
- │                           │<── ManifestStored ─────│
- │                           │                        │
- │                           │  (create ObjectEntry,  │
- │                           │   store in local index,│
- │                           │   enqueue for DHT      │
- │                           │   dissemination)       │
- │                           │                        │
- │<── PutOk {content_hash} ─│                        │
-```
-
-### 6.2 GET — Retrieve an Object (Local)
-
-```
-User                    MetadataActor           BlobStoreActor
- │                           │                        │
- │─── GetObject ────────────>│                        │
- │   {content_hash}          │                        │
- │                           │  (lookup content_hash  │
- │                           │   in local index)      │
- │                           │                        │
- │<── GetOk { entry,        │                        │
- │          manifest } ──────│                        │
- │                                                    │
- │  (for each chunk in manifest)                      │
- │───────────── ReadChunk ───────────────────────────>│
- │<────────────── ChunkOk ───────────────────────────│
- │                                                    │
- │  (reassemble chunks into original file)            │
-```
-
-### 6.3 GET — Retrieve an Object (Remote)
-
-> **Status:** `TransferActor` state machine is functional and stores received chunks to the local `BlobStoreActor`. Chunks must be fed externally (via `ChunkReceived` messages). Automatic chunk pulling from remote nodes is not yet implemented — the test harness or a future network adapter plays the "pull" role. Verified in multi-node simulation.
-
-```
-User        MetadataActor       TransferActor       Remote BlobStore
- │               │                    │                     │
- │─ GetObject ──>│                    │                     │
- │ {content_hash}│                    │                     │
- │               │  (not in local     │                     │
- │               │   index; DHT       │                     │
- │               │   lookup)          │                     │
- │               │                    │                     │
- │               │─ StartDownload ───>│                     │
- │               │                    │                     │
- │               │                    │── GetChunkRequest ─>│
- │               │                    │<─ GetChunkResponse ─│
- │               │                    │                     │
- │               │                    │  (repeat for each   │
- │               │                    │   chunk)            │
- │               │                    │                     │
- │               │<─ TransferComplete │                     │
- │               │                    │                     │
- │<── GetOk ────│                    │  (stops self)       │
-```
-
-### 6.4 DELETE — Remove an Object
-
-```
-User                    MetadataActor
- │                           │
- │─── DeleteObject ─────────>│
- │   {content_hash}          │
- │                           │
- │                           │  (remove from local   )
- │                           │  (index, best-effort   )
- │                           │  (notify DHT peers     )
- │                           │
- │<── DeleteOk              │
- │   {content_hash} ────────│
-```
-
-Chunk data is **not** immediately deleted. Unreferenced chunks are cleaned up during GC sweeps (see Section 10).
-
-### 6.5 LIST — List Objects (Local)
-
-```
-User                    MetadataActor
- │                           │
- │─── ListLocal ────────────>│
- │   {name_filter}           │
- │                           │
- │                           │  (filter local index   )
- │                           │  (by name substring    )
- │                           │
- │<── ListOk { entries } ───│
-```
-
-### 6.6 LIST — List Objects (Swarm-Wide)
-
-> **Status:** `ListSwarm` currently delegates to `ListLocal` (returns local entries only). Fan-out to peer MetadataActors is not yet wired. Swarm-wide listing is verified in simulation by querying each node and merging results in the test harness.
-
-```
-User        MetadataActor           Remote MetadataActors
- │               │                        │
- │─ ListSwarm ──>│                        │
- │ {name_filter} │                        │
- │               │── ListObjectsRequest ─>│  (fan-out to all known
- │               │<─ ListObjectsResponse ─│   alive nodes)
- │               │                        │
- │               │  (merge all results,   │
- │               │   deduplicate by       │
- │               │   content hash)        │
- │               │                        │
- │<── ListOk ───│                        │
-```
-
-## 7. Actor Architecture
-
-> **Status:** All three actor types are fully implemented and tested. `DatastoreNode` coordinator routes commands to internal actors. 83+ tests across 8 test files verify single-node operations. Multi-node dissemination and cross-node transfers verified in simulation.
-
-### 7.1 BlobStoreActor
-
-**Responsibility:** Chunk and manifest I/O via `StorageBackend` trait.
-
-- **State:** `Box<dyn StorageBackend>`
-- **Lifecycle:** Long-lived, one per node.
-- **Guarantees:** Delegates to backend; filesystem backend fsyncs before acknowledging.
-
-**Message types:** `BlobStoreMsg` (see `messages.rs`)
-
-### 7.2 MetadataActor
-
-**Responsibility:** Object metadata index, DHT routing.
-
-- **State:** Local object index (`HashMap<ContentHash, ObjectEntry>`), manifest cache, dissemination queue.
-- **Lifecycle:** Long-lived, one per node.
-- **Coordinates with:** BlobStoreActor (for manifest storage), remote MetadataActors (DHT operations).
-
-**Message types:** `MetadataMsg` (see `messages.rs`)
-
-### 7.3 TransferActor
-
-**Responsibility:** Downloading an object (all its chunks) from a remote node.
-
-- **State:** Manifest, pending/received chunk sets, retry counts.
-- **Lifecycle:** Ephemeral — spawned per download, self-terminates on completion/failure/cancel.
-- **Coordinates with:** Remote BlobStoreActor (chunk requests), local BlobStoreActor (chunk storage).
-
-**Message types:** `TransferMsg` (see `messages.rs`)
-
-## 8. Wire Protocol
-
-> **Status:** All message types are defined with `NetworkMessage` implementations and stable type tags. Serialization is JSON (serde). No transport integration yet — messages are passed directly via actor addresses in simulation.
-
-### 8.1 Message Types
-
-All inter-node messages implement `NetworkMessage` with a stable `type_tag()`:
-
-| Message | type_tag | Direction |
-|---------|----------|-----------|
-| `GetChunkRequest` | `swactor_datastore::GetChunkRequest` | requester → holder |
-| `GetChunkResponse` | `swactor_datastore::GetChunkResponse` | holder → requester |
-| `StoreObjectRequest` | `swactor_datastore::StoreObjectRequest` | writer → DHT nodes |
-| `FindObjectRequest` | `swactor_datastore::FindObjectRequest` | reader → DHT nodes |
-| `FindObjectResponse` | `swactor_datastore::FindObjectResponse` | DHT node → reader |
-| `GetManifestRequest` | `swactor_datastore::GetManifestRequest` | requester → holder |
-| `GetManifestResponse` | `swactor_datastore::GetManifestResponse` | holder → requester |
-| `ListObjectsRequest` | `swactor_datastore::ListObjectsRequest` | requester → remote node |
-| `ListObjectsResponse` | `swactor_datastore::ListObjectsResponse` | remote node → requester |
-
-`FindObjectRequest` contains a `content_hash` field (the `blake3(blob_bytes)` key).
-
-### 8.2 Serialization
-
-MVP: serde JSON for all messages. Binary format (bincode or msgpack) planned for later to reduce overhead, especially for `GetChunkResponse` which carries large payloads.
-
-### 8.3 Framing
-
-Messages are framed over iroh QUIC streams:
-- Each request/response pair uses a single bidirectional stream.
-- Message format: `[4-byte length (big-endian)][JSON payload]`.
-
-## 9. Naming
-
-Names are **optional flat strings** — human-readable labels attached to objects as metadata.
-
-- Names are not keys. The content hash is the only primary identifier.
-- Multiple objects can share the same name. They are distinguished by content hash.
-- Names are simple strings (e.g. `"vacation.jpg"`, `"backup-2024-01"`). No path hierarchy, no separators enforced.
-- No conflict resolution is needed — different content always produces different content hashes.
-
-## 10. Garbage Collection
-
-> **Status:** Fully implemented. `MetadataActor::gc_tick()` builds a referenced chunk set from all local manifests and sends `GcUnreferenced` to `BlobStoreActor`. Verified with 6 GC-specific tests including deduplication safety, interval gating, and empty-store edge case.
-
-### 10.1 Entry Removal
-
-Deleting an object:
-1. Remove the `ObjectEntry` from the local index.
-2. Best-effort notify DHT peers to remove their replicas.
-3. Remove the local manifest.
-
-### 10.2 Chunk Reference Counting
-
-Unreferenced chunk cleanup:
-
-1. Build a referenced set: union of all chunk hashes from all local manifest entries.
-2. Send `BlobStoreMsg::GcUnreferenced { referenced }` to the BlobStoreActor.
-3. BlobStoreActor diffs its chunk list against the referenced set and deletes unreferenced chunks.
-
-**Safety:** A chunk may be referenced by multiple objects (deduplication). Only delete when zero references remain.
-
-### 10.3 GC Schedule
-
-- `MetadataActor` runs `gc_tick()` every tick. Actual GC sweep happens every `gc_interval` ticks (default: 1000).
-- Chunk GC is triggered less frequently (order of minutes) to avoid overhead.
-
-## 11. Failure Modes
-
-### 11.1 Node Offline
-
-- **Metadata persists** in the DHT (replicated to k-closest nodes). Lookups succeed as long as any replica is alive.
-- **Chunk fetches fail** if the only copy is on the offline node. The TransferActor retries once, then reports failure.
-- **Recovery:** When the node comes back, its metadata is re-disseminated (anti-entropy).
-
-### 11.2 Transfer Interrupted
-
-- **Partial state:** Some chunks may be written to the local BlobStoreActor before the transfer fails.
-- **Cleanup:** Partially downloaded chunks are not harmful — they're content-addressed and may be useful for future downloads. Unreferenced chunks are cleaned up by GC.
-- **Retry:** The user can retry the GET, and only missing chunks need to be fetched (future optimization).
-
-### 11.3 DHT Inconsistency
-
-- **Stale metadata:** A node may serve an outdated ObjectEntry. Anti-entropy dissemination ensures replicas converge.
-- Content addressing eliminates write conflicts — storing the same content hash twice is idempotent.
-
-### 11.4 Disk Full
-
-- `StorageBackend::write_chunk` fails with an I/O error, which is propagated back to the requester as `DatastoreResponse::Error`.
-- No partial writes — fsync ensures atomicity (filesystem backend).
-
-## 12. CLI Interface
-
-> **Status:** Command types defined in `src/cli.rs`. Parser, dispatcher, and `[[bin]]` target not yet implemented. Planned for a follow-up session.
-
-```
-swactor-store put <local-path> [--name <label>] [--tag key=value...]
-    Store a local file as a distributed object.
-    Returns the content hash of the stored object.
-    --name sets an optional human-readable label.
-
-swactor-store get <content-hash>[@<node>] [--output <local-path>]
-    Retrieve an object by content hash. Fetches from the specified node or discovers via DHT.
-    --output defaults to the object's name (if set) in the current directory.
-
-swactor-store delete <content-hash>
-    Remove an object from the local index and notify DHT peers.
-
-swactor-store list [--name <substring>] [--node <node-name>] [--all]
-    List objects. --name filters by name substring. --all queries all nodes (swarm-wide). Default is local.
-
-swactor-store status
-    Show node info: identity, chunk count, storage usage.
-```
-
-## 13. Browser API
-
-> **Status:** Not started. Separate milestone.
-
-WASM-exposed functions for browser integration:
-
-```
-list_objects(name_filter: Option<String>) -> Vec<ObjectEntry>
-    List objects visible to this node, optionally filtered by name.
-
-get_object(content_hash: ContentHash) -> Result<Vec<u8>, Error>
-    Download and reassemble an object by content hash.
-
-put_object(data: Vec<u8>, name: Option<String>) -> Result<ContentHash, Error>
-    Chunk, store, and register an object. Returns the content hash.
-
-delete_object(content_hash: ContentHash) -> Result<(), Error>
-    Remove an object from the local index.
-
-get_node_status() -> NodeStatus
-    Node identity, chunk count, connected peers.
-```
-
-These map directly to the MetadataActor message types. The WASM runtime handles serialization across the JS/Rust boundary.
diff --git a/docs/development_history/datastore/SUMMARY.md b/docs/development_history/datastore/SUMMARY.md
deleted file mode 100644
index 682758c..0000000
--- a/docs/development_history/datastore/SUMMARY.md
+++ /dev/null
@@ -1,317 +0,0 @@
-# swactor-datastore: Development History & Status
-
-## Overview
-
-`swactor-datastore` is a distributed personal file/blob storage protocol for small trusted clusters (laptop, phone, browser). It provides content-hash-first addressing with immutable content-addressed objects, replicated via epidemic metadata dissemination across peers.
-
-The implementation is organized as a single Rust crate (`crates/datastore/`) built on the `swactor` actor runtime. It was developed in 7 ordered modules (local single-node operations) followed by a multi-node simulation phase.
-
-**Current state: 93 tests across 9 test files, all passing. Zero warnings.**
-
----
-
-## Architecture
-
-```
-┌─────────────────────────────────────────────────────┐
-│                   DatastoreNode                      │  Coordinator/facade
-│            (single entry point for callers)           │
-├────────────────────┬────────────────────────────────┤
-│   MetadataActor    │         BlobStoreActor          │  Long-lived, one per node
-│  (object index,    │     (chunk & manifest I/O       │
-│   dissemination,   │      via StorageBackend)        │
-│   GC orchestration)│                                 │
-├────────────────────┴────────────────────────────────┤
-│              TransferActor (ephemeral)                │  One per download
-│         (chunk tracking, retry, self-termination)     │
-├─────────────────────────────────────────────────────┤
-│               StorageBackend trait                    │  Pluggable I/O
-│    FilesystemBackend  │  InMemoryBackend             │
-├─────────────────────────────────────────────────────┤
-│            Chunking Engine (pure functions)           │  No I/O, deterministic
-│     chunk_blob · reassemble_blob · verify_integrity  │
-└─────────────────────────────────────────────────────┘
-```
-
-### Core Design Principles
-
-- **Content-hash-first addressing** -- every object identified by `blake3(blob_bytes)`.
-- **Immutable content-addressed objects** -- no write conflicts by construction.
-- **Names are metadata** -- optional flat strings, not keys.
-- **Separation of data and metadata** -- chunks are large opaque blobs; metadata is small and gossiped.
-- **Actor-based** -- three actor types coordinate via message passing.
-- **Transport-agnostic** -- protocol messages defined as `NetworkMessage` types.
-- **Pluggable storage** -- `StorageBackend` trait abstracts I/O.
-
----
-
-## Module-by-Module Development History
-
-### Module 1: Chunking Engine
-
-**What:** Pure functions for content-addressed blob chunking and reassembly. `chunk_blob()`, `reassemble_blob()`, `verify_integrity()`, plus `ContentHash`, `ObjectManifest`, `ChunkRef` types.
-
-**Key decisions:**
-- Fixed-size chunking over content-defined chunking (simpler, deterministic; CDC dedup unnecessary for small clusters)
-- BLAKE3 for all hashing (3-7 GB/s, 32-byte output matching `NodeId`)
-- Whole-blob hash as content hash rather than Merkle root of chunk hashes
-- Empty blob produces a valid zero-chunk manifest
-
-**Tests:** 13 (10 scenario + 3 proptest). Round-trips, edge cases, integrity verification, determinism.
-
-**Files:** `src/chunking.rs`, `src/types.rs`
-
----
-
-### Module 2: Storage Backend
-
-**What:** `StorageBackend` trait with two implementations: `FilesystemBackend` (2-level hex-sharded dirs, fsync-on-write) and `InMemoryBackend` (HashMap-based for tests/WASM).
-
-**Key decisions:**
-- 2-level hex sharding (65,536 possible directories) to avoid hot directories
-- In-memory chunk index for O(1) `has_chunk` lookups, populated via scan-on-init
-- JSON manifest serialization for debuggability
-- `Send` but not `Sync` on the trait (single-actor ownership)
-- Idempotent writes and deletes
-
-**Tests:** 12 (9 parameterized across both backends + 2 FS-only + 1 proptest).
-
-**Files:** `src/storage/mod.rs`, `src/storage/in_memory.rs`
-
----
-
-### Module 3: BlobStoreActor
-
-**What:** Message-driven actor wrapping `Box<dyn StorageBackend>` for chunk/manifest CRUD plus garbage collection. Also introduced the shared test harness (`tests/common/mod.rs`).
-
-**Key decisions:**
-- Thin delegation -- actor adds no logic beyond message dispatch
-- Explicit `reply_to` pattern (tell, not ask) for response routing
-- Fire-and-forget deletes and GC (no reply needed)
-- `Box<dyn StorageBackend>` for dynamic dispatch (one backend per instance)
-- Single-threaded tick-based testing for determinism
-
-**Tests:** 7 scenario tests through the swactor runtime.
-
-**Established patterns:** `reply_to` pattern, shared test harness with `test_runtime()`, `tick_n()`, `tick_until_recv()`, `DatastoreHarness`.
-
-**Files:** `src/actors/blob_store.rs`, `tests/blob_store_tests.rs`, `tests/common/mod.rs`
-
----
-
-### Module 4: MetadataActor
-
-**What:** Object metadata index (`HashMap<ContentHash, ObjectEntry>`), manifest cache, SWIM-inspired gossip dissemination queue. Handles local CRUD, DHT protocol messages (`HandleFindObject`, `HandleStoreObject`), and GC tick orchestration.
-
-**Key decisions:**
-- Node ID stamping on `PutObject` (prevents spoofing; remote entries retain original owner)
-- Idempotent DHT store (insert-if-absent semantics)
-- Synthetic empty manifest for `HandleFindObject` when manifest is missing
-- Separate `GetObject` (local, error on missing manifest) vs `HandleFindObject` (DHT, synthesizes empty manifest)
-- SWIM-style dissemination with budget `Lambda * ceil(log2(n))`, Lambda=3
-
-**Tests:** 10 scenario tests covering CRUD, DHT operations, idempotency, lifecycle.
-
-**Files:** `src/actors/metadata.rs`, `tests/metadata_tests.rs`
-
----
-
-### Module 5: TransferActor
-
-**What:** Ephemeral per-download actor. Tracks pending/received chunks, forwards received chunks to BlobStoreActor, implements per-chunk retry, self-terminates on completion/failure/cancel.
-
-**Key decisions:**
-- Ephemeral actor pattern (one per download, isolates transfer state)
-- Passive design -- chunks driven externally via `ChunkReceived`/`ChunkFailed` (decoupled from networking)
-- Whole-transfer failure on any chunk exhausting retries
-- `max_retries` defaults to 1 (first failure allows retry, second aborts)
-- Fire-and-forget chunk persistence (ChunkStored reply silently dropped)
-
-**Tests:** 10 scenario tests covering state machine transitions, retry logic, cancellation, data recovery.
-
-**Files:** `src/actors/transfer.rs`, `tests/transfer_tests.rs`
-
----
-
-### Module 6: DatastoreNode Coordinator
-
-**What:** Facade actor encapsulating BlobStoreActor + MetadataActor behind a single address. Routes 6 user-facing commands and 5 network protocol variants.
-
-**Key decisions:**
-- Pass-through `reply_to` pattern (responses go directly to caller, coordinator never intercepts)
-- Inline chunking in `handle_put` (synchronous, no async coordination)
-- Fire-and-forget chunk writes (same pattern as TransferActor)
-- Immutable state after construction
-- `Put` uses `data: Vec<u8>` not `PathBuf` (testable, WASM-compatible)
-
-**Tests:** 12 scenario tests through `NodeHarness`.
-
-**Files:** `src/actors/datastore_node.rs`, `tests/datastore_node_tests.rs`
-
----
-
-### Module 7: Garbage Collection
-
-**What:** Completed `MetadataActor::gc_tick()` to build a referenced chunk set from all manifests and send `GcUnreferenced` to BlobStoreActor for orphan cleanup.
-
-**Key decisions:**
-- `blob_store_addr = None` guard for backward compatibility (GC no-ops when not wired)
-- Fire-and-forget `GcUnreferenced` (no reply needed)
-- `spawn_metadata_with_config()` helper to wire blob_store_addr before spawning
-- Mark-and-sweep: union of all chunk hashes from all manifests = referenced set
-
-**Tests:** 6 scenario tests covering cleanup, preservation, deduplication safety, interval gating, empty-store edge case.
-
-**Files:** `src/actors/metadata.rs` (delta), `tests/gc_tests.rs`, `tests/common/mod.rs` (GcHarness)
-
----
-
-### Multi-Node Simulation (Phases 3-4)
-
-**What:** Wired up MetadataActor for peer-to-peer metadata dissemination. Added `SetPeers` and `DisseminateTick` messages. Created `MultiNodeHarness` for simulating clusters on a single Runtime. Extended `HandleStoreObject` to carry manifests alongside entries for full metadata replication.
-
-**Key decisions:**
-- Single Runtime for simulation -- all nodes' actors share one Runtime; actor addresses are globally unique so cross-node messaging "just works" via `ctx.send()`
-- MetadataActor owns peer relationships (simpler than routing through DatastoreNode)
-- Manifest dissemination alongside entry dissemination (peers receive both)
-- TransferActor stays passive -- tests feed chunks from remote BlobStoreActor (test harness plays the "network adapter" role)
-- No automatic remote GET orchestration yet -- DatastoreNode remains a stateless router
-
-**New messages:**
-- `MetadataMsg::SetPeers { peers: Vec<ActorAddress> }`
-- `MetadataMsg::DisseminateTick`
-- `MetadataMsg::HandleStoreObject` extended with `manifest: Option<ObjectManifest>`
-
-**Tests:** 10 new scenario tests in `tests/multi_node_tests.rs`:
-
-| # | Test | Verifies |
-|---|------|----------|
-| 1 | `metadata_replicates_to_peer_after_dissemination` | Put on 0, disseminate, node 1 finds it |
-| 2 | `metadata_replicates_to_all_peers_in_3_node_cluster` | Full cluster replication |
-| 3 | `dissemination_budget_expires_after_enough_rounds` | Budget exhaustion, fresh entries still work |
-| 4 | `delete_on_origin_does_not_propagate_to_peers` | Delete is local only |
-| 5 | `duplicate_put_via_dissemination_is_idempotent` | No duplicate entries on peer |
-| 6 | `find_object_on_peer_after_dissemination` | HandleFindObject succeeds on peer |
-| 7 | `chunk_transfer_from_remote_blob_store` | TransferActor pulls chunks cross-node |
-| 8 | `full_remote_get_scenario` | End-to-end: put on 0, disseminate, transfer 0->1, reassemble matches |
-| 9 | `list_across_all_nodes_finds_objects_from_any_node` | Simulated ListSwarm fan-out |
-| 10 | `gc_on_one_node_does_not_affect_other_nodes` | GC isolation between nodes |
-
-**Files:** `src/messages.rs`, `src/actors/metadata.rs`, `tests/common/mod.rs` (MultiNodeHarness), `tests/multi_node_tests.rs`
-
----
-
-## Code Quality Pass
-
-Alongside the multi-node work, a cleanup pass was performed:
-
-- **PROTOCOL.md** -- Added honest `> Status:` annotations to sections 5 (Metadata DHT), 6.3 (Remote GET), 6.6 (ListSwarm), 7 (Actor Architecture), 8 (Wire Protocol), 10 (GC), 12 (CLI), and 13 (Browser API)
-- **metadata.rs** -- Updated stale `ListSwarm` "MVP" comment
-- **transfer.rs** -- Updated architecture comments describing simulation-ready passive design
-- **tests/common/mod.rs** -- Removed 3 unused imports (`ActorInterface`, `Ctx`, `DatastoreNodeMsg`)
-
----
-
-## Test Summary
-
-| Test File | Count | What |
-|-----------|-------|------|
-| `chunking_tests.rs` | 13 | Pure function round-trips, edge cases, proptests |
-| `storage_tests.rs` | 12 | Backend CRUD, parameterized across FS + InMemory, proptests |
-| `blob_store_tests.rs` | 7 | Actor-level chunk/manifest CRUD, GC |
-| `metadata_tests.rs` | 10 | Object index, DHT protocol, lifecycle |
-| `transfer_tests.rs` | 10 | Download state machine, retry, cancel |
-| `datastore_node_tests.rs` | 12 | Coordinator routing, network protocol |
-| `datastore_tests.rs` | 13 | Content-addressing properties, proptests |
-| `gc_tests.rs` | 6 | Mark-and-sweep GC, dedup safety |
-| `multi_node_tests.rs` | 10 | Dissemination, cross-node transfer, GC isolation |
-| **Total** | **93** | |
-
-**Testing philosophy:** Scenario/story tests first, property-based tests for invariants, contract tests for serialization. No white-box/structural tests. Low coupling to internals -- tests should survive a refactor.
-
----
-
-## Future Work
-
-### Near-Term (Next Sessions)
-
-**CLI Implementation (Phase 2)**
-- Parser and dispatcher using `clap`
-- `[[bin]]` target in Cargo.toml
-- `ContentHash::from_hex()` for CLI input
-- Commands: `put <path>`, `fetch <hash>` (metadata only), `get <hash> --output <path>` (full download), `delete <hash>`, `list`, `status`
-- Single-node only (no networking); spawns its own actor set
-- Follow `crates/node/src/main.rs` pattern
-
-**ListSwarm Fan-Out**
-- Currently delegates to `ListLocal`. Wire MetadataActor to query all peers and merge/deduplicate results by content hash.
-
-**Automatic Remote GET Orchestration**
-- Currently, remote GET requires manual orchestration (test harness or external driver reads chunks from remote BlobStore and feeds them to TransferActor).
-- DatastoreNode needs to become stateful: detect local miss, query peers via `HandleFindObject`, spawn TransferActor, coordinate chunk pulling from the remote BlobStoreActor.
-- This is the largest remaining architectural change for local functionality.
-
-### Medium-Term
-
-**Transport Integration (iroh/QUIC)**
-- Wire `NetworkMessage` types to actual network transport.
-- DatastoreNode gains peer management (`AddPeer`/`RemovePeer`) at the node level.
-- Replace simulation-only direct actor addressing with network-routed messages.
-- Framing: `[4-byte length (big-endian)][JSON payload]` over QUIC streams.
-
-**Anti-Entropy / Repair**
-- When a node comes back online, re-disseminate its metadata to peers.
-- Periodic full-index comparison between peers to detect and repair drift.
-
-**Active Chunk Pulling in TransferActor**
-- `StartDownload` sends `GetChunkRequest` to the source node for each chunk.
-- Currently passive (chunks fed externally); make it drive its own downloads.
-
-**Parallel Chunk Fetching**
-- TransferActor currently fetches sequentially. Add configurable concurrency (`max_concurrent_transfers` in config already exists).
-
-### Longer-Term
-
-**Browser API (WASM)**
-- Expose `list_objects`, `get_object`, `put_object`, `delete_object`, `get_node_status` via WASM bindings.
-- Use `InMemoryBackend` (or IndexedDB backend) in the browser.
-- Coordinate with `crates/wasm/` for the in-browser swactor runtime.
-
-**Binary Wire Format**
-- Replace JSON serialization with bincode or msgpack for `GetChunkResponse` and other payload-heavy messages.
-
-**Content-Defined Chunking (CDC)**
-- Replace fixed-size chunking with FastCDC or similar for better cross-object deduplication.
-- Transparent to the rest of the system -- only `chunk_blob()` changes; manifest format is the same.
-
-**Streaming / Large File Support**
-- Current `Put` takes `data: Vec<u8>` (entire blob in memory). For large files, add streaming chunking that reads from a `Read` source.
-
-**Delete Propagation**
-- Currently, delete is local only (by design). Add optional "tombstone dissemination" to remove entries from peers.
-
-**Replication Factor Control**
-- Currently, dissemination is epidemic (all peers get everything). Add configurable k-closest replication for the metadata DHT.
-
-**IndexedDB Backend**
-- Implement `StorageBackend` for browser IndexedDB for persistent storage in web contexts.
-
----
-
-## Key Files
-
-| File | Purpose |
-|------|---------|
-| `src/types.rs` | Core types: `ContentHash`, `ObjectEntry`, `ObjectManifest`, `ChunkRef`, `DatastoreConfig` |
-| `src/messages.rs` | All inter-node and intra-node message types |
-| `src/chunking.rs` | Pure chunking/reassembly functions |
-| `src/storage/mod.rs` | `StorageBackend` trait + `FilesystemBackend` |
-| `src/storage/in_memory.rs` | `InMemoryBackend` |
-| `src/actors/blob_store.rs` | Chunk/manifest I/O actor |
-| `src/actors/metadata.rs` | Object index, dissemination, GC orchestration |
-| `src/actors/transfer.rs` | Ephemeral download actor |
-| `src/actors/datastore_node.rs` | Coordinator/facade |
-| `src/cli.rs` | CLI command type definitions (types only, no implementation) |
-| `PROTOCOL.md` | Protocol specification with status annotations |
-| `PROTOCOL_IMPLEMENTATION_PLAN.md` | Original 7-module implementation plan |
-| `tests/common/mod.rs` | Shared test harness: DatastoreHarness, GcHarness, MultiNodeHarness, NodeHarness |
diff --git a/docs/development_history/distribution/DEPLOY_REGRESSION_TESTS.md b/docs/development_history/distribution/DEPLOY_REGRESSION_TESTS.md
deleted file mode 100644
index f7f1773..0000000
--- a/docs/development_history/distribution/DEPLOY_REGRESSION_TESTS.md
+++ /dev/null
@@ -1,418 +0,0 @@
-# Deploy Regression Tests — Development History
-
-> Covers the addition of deployment topology simulation (NAT, relay, firewall),
-> 14 deploy scenario tests, 8 adversarial topology tests, and the supporting
-> simulation infrastructure. Motivated by two bugs discovered during a real
-> 3-node DigitalOcean deploy.
->
-> ~1,230 insertions across 15 modified files + 3 new files
->
-> *Branch: `datastore-dashboard`*
-
----
-
-## Table of Contents
-
-1. [Overview & Motivation](#1-overview--motivation)
-2. [The Deploy Bugs](#2-the-deploy-bugs)
-3. [What Was Built](#3-what-was-built)
-4. [Simulation Infrastructure](#4-simulation-infrastructure)
-5. [Deploy Scenario Tests](#5-deploy-scenario-tests)
-6. [Adversarial Topology Tests](#6-adversarial-topology-tests)
-7. [Bug-Class Regression Validation](#7-bug-class-regression-validation)
-8. [SWIM Protocol Enhancements](#8-swim-protocol-enhancements)
-9. [Deploy Tooling](#9-deploy-tooling)
-10. [Dashboard API](#10-dashboard-api)
-11. [Design Decisions](#11-design-decisions)
-12. [Known Gaps & Future Work](#12-known-gaps--future-work)
-
----
-
-## 1. Overview & Motivation
-
-The simulation crate had 15 cluster scenario tests (from the SIMULATION_TESTING
-cycle) and 6 original distribution tests. All assumed flat network topologies —
-every node could directly reach every other node. No tests modeled NAT, relay
-dependencies, firewalled nodes, or the actual deployment sequence where a
-controller script orchestrates peer introductions.
-
-During a real 3-node DigitalOcean deploy (1 public VPS + 2 home NAT machines),
-two bugs hit that the existing test suite could not have caught:
-
-1. The deploy script sent `join_seed` to the seed node itself
-2. Port 3340 was blocked by firewall — all NAT nodes couldn't reach the relay
-
-Both were fixed in production, but nothing prevented the same *class* of bug
-from recurring. This work adds simulation-level coverage for deployment
-topologies and the controller-driven introduction flow, plus concrete regression
-tests that replay the exact bugs.
-
----
-
-## 2. The Deploy Bugs
-
-### Bug 1: Self-Join ("Connecting to ourself")
-
-**What happened**: The deploy script's peer-sync logic sent each node's own
-`node_id` as part of the join-seed list. When the seed node received a
-`join_seed` pointing to itself, iroh rejected the connection with "Connecting
-to ourself." The seed never learned about other nodes.
-
-**Root cause**: The peer-sync endpoint didn't filter `own_id` from the peer
-list before initiating the SWIM join.
-
-**Fix applied**: Filter `own_id` from new peers in `swactor-node/src/main.rs`
-before calling join.
-
-**Simulation gap**: No test sent a `Join { node_idx: X, seed_idx: X }` (self-join)
-or `Introduce { node_a: X, node_b: X }` (self-introduction). Even if the
-protocol handled it gracefully (no crash), the *consequence* — a deploy that
-only sends self-joins and never makes real introductions — was untested.
-
-### Bug 2: Firewall Blocks Relay Port
-
-**What happened**: Port 3340 was blocked by the DigitalOcean firewall. All NAT
-nodes behind home routers couldn't reach the public relay node. The cluster was
-stuck at 0 peers — SWIM probes from NAT→relay were silently dropped.
-
-**Root cause**: The deploy script didn't verify relay port reachability before
-proceeding with introductions. The failure was silent — no error, just 0 peers
-forever.
-
-**Fix applied**: Added firewall rule for port 3340 to the deploy provisioning.
-
-**Simulation gap**: No test modeled a topology where the relay was alive but
-unreachable by NAT nodes. Existing relay-death tests killed the relay entirely,
-which is a different failure mode (relay process crash vs. network-level block).
-
----
-
-## 3. What Was Built
-
-| Component | Location | Description |
-|-----------|----------|-------------|
-| Network topology model | `sim.rs` | `NodeLocation`, `NetworkTopology`, NAT/firewall reachability |
-| Per-link faults | `sim.rs` | `LinkFault`, `SetRelayPenalty` in `NetworkFault` |
-| Deferred join | `sim.rs` | Nodes that skip auto-join, require `SimAction::Join`/`Introduce` |
-| Controller actions | `sim.rs` | `SimAction::Join`, `SimAction::Introduce` |
-| 5 property checkers | `properties.rs` | Group convergence, stability, asymmetry, zero-convergence, staggered join |
-| 14 deploy scenario tests | `deploy_scenarios.rs` | NAT topology, relay failure, controller actions, compound faults |
-| 8 adversarial topology tests | `topology_adversarial.rs` | Per-link degradation, relay flapping, split-brain, hub saturation |
-| Indirect ack forwarding | `swim/node.rs` | `ForwardAck` action for relay-mediated probes |
-| `IndirectAck` wire message | `messages.rs` | New message type for forwarded acks |
-| Peer sync endpoint | `dashboard/server.rs` | `POST /api/peers/sync` for bulk introduction |
-| Native deploy pipeline | `xtask/deploy.rs` | 6-phase provisioning with convergence retry |
-
-All 22 new simulation tests run in ~0.2s total. The full test suite
-(existing + new) passes.
-
----
-
-## 4. Simulation Infrastructure
-
-### Network Topology Model
-
-Three new types model node placement:
-
-```rust
-pub enum NodeLocation {
-    Public,                       // Cloud VPS — accepts inbound from anyone
-    Nat { group: String },        // Behind NAT — same-group LAN only, or via relay
-    Firewalled,                   // No inbound or outbound
-}
-
-pub struct NetworkTopology {
-    pub locations: Vec<NodeLocation>,  // Per-node, indexed by node_idx
-    pub relay_nodes: Vec<usize>,       // Indices of relay-capable nodes
-}
-```
-
-Reachability rules in `NetworkState::directly_reachable()`:
-
-| From \ To | Public | Nat(same) | Nat(diff) | Firewalled |
-|-----------|--------|-----------|-----------|------------|
-| **Public** | yes | no (can't initiate to NAT) | no | no |
-| **Nat(same)** | yes | yes (LAN) | no | no |
-| **Nat(diff)** | yes | no | no | no |
-| **Firewalled** | no | no | no | no |
-
-Cross-NAT-group communication requires a relay path: both endpoints must be
-able to reach an alive relay node (in either direction, since connections are
-bidirectional once established).
-
-### Per-Link Faults
-
-Two new `NetworkFault` variants:
-
-```rust
-NetworkFault::LinkFault { round, from, to, rate, bidirectional }
-NetworkFault::SetRelayPenalty { round, rate }
-```
-
-`LinkFault` sets a drop rate on a specific (from, to) pair, enabling targeted
-degradation (e.g., "site-b gateway is lossy" without affecting site-a). The
-`bidirectional` flag optionally blocks both directions.
-
-`SetRelayPenalty` adds extra drop probability for relay-routed messages. The
-composition formula ensures independent fault probabilities:
-
-```
-effective_rate = 1 - (1 - base_rate) * (1 - relay_penalty)
-```
-
-### Deferred Join & Controller Actions
-
-`DistributionSimConfig` gained:
-
-- `deferred_join: Vec<usize>` — nodes that skip the automatic seed-join during
-  setup, modeling nodes that haven't been deployed yet
-- `SimAction::Join { node_idx, seed_idx }` — mid-simulation join via a seed
-- `SimAction::Introduce { node_a, node_b }` — bidirectional introduction
-  modeling `POST /api/peers/sync`
-
-`Introduce` is implemented as two back-to-back `handle_join_request` calls —
-A introduces itself to B, then B introduces itself to A — matching the real
-deploy flow.
-
-### Property Checkers
-
-Five new property functions in `properties.rs`:
-
-| Function | Purpose |
-|----------|---------|
-| `check_group_convergence` | Subset of nodes converge (spread within tolerance) after a round |
-| `check_membership_stability` | Counts direction flips in member_count (detects suspect→dead cycling) |
-| `check_view_asymmetry` | Max spread of member_count across alive nodes |
-| `check_zero_convergence` | Detects all-nodes-stuck-at-zero failure mode |
-| `check_staggered_join` | Verifies deferred-join nodes reach quorum by deadline |
-
----
-
-## 5. Deploy Scenario Tests
-
-14 tests in `crates/simulation/tests/deploy_scenarios.rs`, organized by what
-they exercise:
-
-### Baseline Topology (Tests 1–3)
-
-| # | Test | Topology | Assertion |
-|---|------|----------|-----------|
-| 1 | `home_cloud_topology_converges_via_relay` | 1 Public + 2 NAT("home") | 100% accuracy — the "happy path" home deploy |
-| 2 | `multi_site_nat_communicates_via_relay` | 1 Public + 2 NAT("home") + 2 NAT("office") | 100% accuracy — multi-site |
-| 3 | `relay_death_partitions_nat_groups` | Same as #2, kill relay at round 30 | Home/office groups maintain internal connectivity; cross-group lost |
-
-### Deploy Lifecycle (Tests 4–6)
-
-| # | Test | Scenario | Assertion |
-|---|------|----------|-----------|
-| 4 | `rolling_redeploy_with_reintroduction` | Kill node 1 at round 20, revive at 40, re-join at 45 | Revived node sees >= 1 member |
-| 5 | `staggered_startup_seed_first` | 4 nodes, non-seed deferred, joined at rounds 10/20/30 | All 4 joined by round 100, >= 75% accuracy |
-| 6 | `firewalled_node_isolated_others_converge` | 4 normal + 1 firewalled (deferred, never joins) | 4 normal converge; firewalled sees 0 |
-
-### Controller Actions (Tests 7–9)
-
-| # | Test | Scenario | Assertion |
-|---|------|----------|-----------|
-| 7 | `controller_driven_peer_introduction` | 4 Public nodes, all deferred, all 6 pairs introduced at round 10 | 100% accuracy via Introduce |
-| 8 | `deploy_auth_race_recovery_via_two_pass` | 100% drop at round 5 (auth race), clear at 10, re-introduce at 15 | Recovery via two-pass introduction |
-| 9 | `degenerate_controller_actions_do_not_degrade_convergence` | Self-joins + self-introductions + redundant re-introductions prepended to real introductions | Converges to 100%; speed gap <= 10 rounds vs. clean run |
-
-### Relay & Fault Scenarios (Tests 10–12)
-
-| # | Test | Scenario | Assertion |
-|---|------|----------|-----------|
-| 10 | `relay_dependency_failure_prevents_cross_group_convergence` | All NAT↔relay links blocked (firewall) | LAN groups converge internally; full cluster < 100%; not zero |
-| 11 | `introduction_strategy_equivalence_under_nat_topology` | Star vs full-mesh vs chain introduction strategies | All >= 75% accuracy; spread <= 0.5 |
-| 12 | `mid_deploy_compound_fault_recovery` | 80% drops + seed kill + partition + revive + heal + re-introduce | >= 75% accuracy after recovery; all 5 alive; global convergence by round 60 |
-
-### Bug Replays (Tests 13–14)
-
-| # | Test | Real Bug | Assertion |
-|---|------|----------|-----------|
-| 13 | `bug_replay_self_join_only_deploy_fails_to_converge` | Deploy sends only self-joins, never cross-node introductions | **Must fail**: zero-convergence, < 50% accuracy |
-| 14 | `bug_replay_firewall_blocks_relay_port_silent_isolation` | Firewall blocks all NAT↔relay traffic for entire simulation | **Must fail**: < 100% accuracy; relay isolated at 0 members; LAN peers still see each other |
-
----
-
-## 6. Adversarial Topology Tests
-
-8 tests in `crates/simulation/tests/topology_adversarial.rs`, focused on
-per-link degradation and relay-mediated failure modes:
-
-| # | Test | Scenario | Assertion |
-|---|------|----------|-----------|
-| 1 | `per_link_degradation_causes_asymmetric_views` | Site-b at 40% link loss, site-a clean | Final spread reflects asymmetry |
-| 2 | `relay_penalty_causes_false_suspicions` | 50% relay penalty + tight SWIM timeouts | Not zero-convergence; some accuracy maintained |
-| 3 | `asymmetric_relay_links_create_view_divergence` | 60% one-direction loss on relay links | Bounded view divergence |
-| 4 | `relay_flapping_causes_membership_oscillation` | 3 relay kill/revive cycles | Membership eventually stabilizes |
-| 5 | `hub_saturation_degrades_spoke_connectivity` | Hub alive but 40% lossy to all spokes | Graceful degradation |
-| 6 | `correlated_nat_gateway_failure` | All NAT gateway links fail simultaneously | LAN groups survive; cross-group degraded |
-| 7 | `split_brain_with_dual_relays` | Kill relay-a, block group-a from relay-b | Detectable partition |
-| 8 | `relay_is_target_causes_isolation_on_death` | Relay killed; NAT group loses only relay path | NAT group isolated |
-
----
-
-## 7. Bug-Class Regression Validation
-
-The two bug-replay tests (13, 14) validate that the simulation framework
-*catches the bug class*, not just the specific instance. They model the exact
-failure scenario and assert that the buggy deploy **fails to converge** — the
-test passes by confirming the failure:
-
-### Self-Join Regression (Test 13)
-
-Models a deploy where the controller only sends self-joins (`Join{0,0}`,
-`Join{1,1}`, `Join{2,2}`) and never sends cross-node introductions. All nodes
-are deferred, so without correct introductions they never discover each other.
-
-**Assertions (inverted — the test passes when the deploy fails):**
-- `check_zero_convergence` must **fail** (all nodes stuck at 0 members)
-- Membership accuracy < 0.5
-
-This proves that test 9's assertions (convergence despite degenerate actions)
-would catch a deploy that accidentally sends only self-joins.
-
-### Firewall Regression (Test 14)
-
-Models a deploy where `LinkFault { rate: 1.0, bidirectional: true }` blocks all
-NAT↔relay traffic for the entire simulation. The deploy script introduces all
-pairs, but messages to/from the relay are dropped.
-
-**Assertions (inverted — the test passes when the deploy is degraded):**
-- Membership accuracy < 1.0 (full convergence must NOT succeed)
-- Relay node isolated at 0 members
-- Same-group LAN peers still converge (the failure is cross-group, not total)
-
-This proves that test 10's assertions (degraded accuracy under relay failure)
-would detect a silently firewalled relay.
-
----
-
-## 8. SWIM Protocol Enhancements
-
-### Indirect Ack Forwarding
-
-SWIM's indirect probe path (Prober → Relay → Target) previously had no return
-path for the ack. When the relay forwarded a PingReq to the target and the
-target replied with an Ack, the ack went directly from target to relay — but
-relay didn't know to forward it back to the original prober.
-
-**New flow:**
-
-```
-Prober --PingReq--> Relay --Ping--> Target
-                    Relay <--Ack--- Target
-Prober <--ForwardAck-- Relay
-```
-
-The relay tracks pending requests in `pending_relays: Vec<(requester, target, seq)>`.
-When an ack arrives matching a pending relay entry, the relay generates a
-`ForwardAck` action. The prober handles this via `handle_indirect_ack()`.
-
-**Wire message**: New `IndirectAck` message type with tag `"swactor_dist::IndirectAck"`.
-
-### SWIM Timeout Tuning
-
-`swactor-node` SWIM config adjusted for relay-aware operation:
-- `probe_timeout`: 3 → 6 (allows relay RTT)
-- `suspicion_timeout`: 20 → 40 (allows refutation piggyback through relay path)
-
----
-
-## 9. Deploy Tooling
-
-### Native Deploy Pipeline (`xtask/src/deploy.rs`)
-
-6-phase deployment replacing Docker-only approach:
-
-1. **Build**: `cargo build --release -p swactor-node`
-2. **Deploy**: Transfer binary + generate `node.toml` + install systemd unit
-3. **Health**: Wait for all nodes' dashboard endpoints to respond
-4. **Introduce**: `POST /api/peers/sync` with all peers + seed designation
-5. **Convergence**: Poll member counts with multi-attempt retry + re-sync on failure
-6. **Report**: Final cluster state
-
-Key functions:
-- `collect_node_info()` — Gather node IDs and relay URLs from all machines
-- `pick_seed()` — Select a relay node as cluster seed
-- `sync_peers()` — O(n) bulk peer sync replacing O(n^2) pairwise adds
-- `native_deploy_to_machine()` — Full provisioning with absolute path handling
-
-### Peer Introduction Strategy Shift
-
-**Old**: O(n^2) individual `POST /api/peers/add` calls, one per pair.
-**New**: Single O(n) `POST /api/peers/sync` per node, sending the full peer
-list + seed designation. Each node atomically adds all peers and initiates
-the SWIM join.
-
----
-
-## 10. Dashboard API
-
-### `POST /api/peers/sync` (`dashboard/server.rs`)
-
-New endpoint for bulk peer introduction:
-
-```json
-{
-  "peers": [
-    { "node_id": "abc123...", "relay_url": "https://..." },
-    ...
-  ],
-  "join_seed": "abc123..."
-}
-```
-
-- Validates all peer node IDs before persisting
-- Atomically adds peers and triggers SWIM join to seed
-- Supports both hex and base58 node ID encodings
-- Returns JSON response with peer count
-
----
-
-## 11. Design Decisions
-
-| Decision | Rationale |
-|----------|-----------|
-| LinkFault over RelayPenalty for firewall tests | RelayPenalty only affects relay-*routed* messages; SWIM gossip through the seed's direct NAT→Public connection still disseminates membership. LinkFault blocking all NAT↔relay traffic properly models the real firewall scenario. |
-| Bug replays assert failure, not success | Proving a bad deploy *fails to converge* is stronger than proving a good deploy converges. It verifies the property checkers would actually catch the bug. |
-| Deferred join as default for controller tests | Real deploys don't auto-join — the controller orchestrates introductions. Deferred join models this accurately. |
-| O(n) peer-sync over O(n^2) pairwise | Reduces deploy-time network calls. Single atomic operation per node prevents partial-introduction races. |
-| Relay pending_relays capped at 16 | FIFO eviction prevents memory growth from orphaned relay entries. 16 is generous — each probe cycle generates at most `indirect_probes` entries. |
-| Inverted assertions for regression tests | `assert!(!zero_check.passed, ...)` reads clearly: "the buggy deploy *should* produce zero-convergence." |
-
----
-
-## 12. Known Gaps & Future Work
-
-| Gap | Priority | Notes |
-|-----|----------|-------|
-| Relay penalty + gossip interaction | Medium | RelayPenalty doesn't prevent convergence through gossip — may need a "relay-only topology" mode where cross-group messages MUST go through relay |
-| Kademlia under NAT topology | Medium | Directory repair and lookup haven't been tested under NAT constraints |
-| Deploy rollback testing | Medium | What happens when a deploy partially succeeds and needs rollback |
-| Real DigitalOcean integration test | Low | Run the deploy pipeline against actual DO droplets in CI |
-| Chaos engineering mode | Low | Random fault injection during deploy (a la BUGGIFY) |
-
----
-
-## Files Created/Modified
-
-| Action | File | Purpose |
-|--------|------|---------|
-| Created | `crates/simulation/tests/deploy_scenarios.rs` | 14 deploy scenario tests |
-| Created | `crates/simulation/tests/topology_adversarial.rs` | 8 adversarial topology tests |
-| Modified | `crates/simulation/src/distribution/sim.rs` | Topology model, deferred join, link faults, controller actions |
-| Modified | `crates/simulation/src/distribution/properties.rs` | 5 new property checkers |
-| Modified | `crates/simulation/src/distribution/trace.rs` | New event kinds for introductions |
-| Modified | `crates/distribution/src/swim/node.rs` | ForwardAck, pending_relays, diagnostic logging |
-| Modified | `crates/distribution/src/messages.rs` | IndirectAck message type |
-| Modified | `crates/distribution/src/node.rs` | handle_indirect_ack, piggyback composition |
-| Modified | `crates/distribution/src/driver.rs` | Route IndirectAck messages |
-| Modified | `crates/distribution/src/iroh_driver.rs` | Relay URL caching |
-| Modified | `crates/distribution/tests/common/mod.rs` | Handle ForwardAck in test harness |
-| Modified | `crates/dashboard/src/server.rs` | POST /api/peers/sync endpoint |
-| Modified | `crates/dashboard/examples/dashboard_demo.rs` | Handle ForwardAck in demo |
-| Modified | `crates/swactor-node/src/main.rs` | SWIM timeout tuning, self-join filter |
-| Modified | `xtask/src/deploy.rs` | Native deploy pipeline |
-| Modified | `xtask/src/main.rs` | Config defaults, native deploy wiring |
-| Modified | `.gitignore` | Ignore .deploy/ except example config |
diff --git a/docs/development_history/distribution/DISTRIBUTION.md b/docs/development_history/distribution/DISTRIBUTION.md
deleted file mode 100644
index 252b387..0000000
--- a/docs/development_history/distribution/DISTRIBUTION.md
+++ /dev/null
@@ -1,879 +0,0 @@
-# Distribution Layer — Development History
-
-> Covers all work after the TUI / agent-interface / stats-hook milestone.
-> ~99 files changed · 8,152 insertions · 1,694 deletions
->
-> *Note: this work was squash-merged into master as a single commit.
-> The phases below reflect the logical development order on the feature branch.*
-
----
-
-## Table of Contents
-
-1. [Overview & Motivation](#1-overview--motivation)
-2. [What Was Built](#2-what-was-built)
-3. [Development Phases](#3-development-phases)
-4. [Distribution Crate — Architecture](#4-distribution-crate--architecture)
-5. [Distribution Crate — SWIM Implementation](#5-distribution-crate--swim-implementation)
-6. [Distribution Crate — Kademlia Implementation](#6-distribution-crate--kademlia-implementation)
-7. [Distribution Crate — Integration Layer (DistributedNode)](#7-distribution-crate--integration-layer-distributednode)
-8. [Distribution Crate — Supporting Modules](#8-distribution-crate--supporting-modules)
-9. [Simulation Framework](#9-simulation-framework)
-10. [Dashboard Integration](#10-dashboard-integration)
-11. [Crate Renames & Workspace Cleanup](#11-crate-renames--workspace-cleanup)
-12. [Design Decisions & Tradeoffs](#12-design-decisions--tradeoffs)
-13. [What's Unclear / Indeterminate](#13-whats-unclear--indeterminate)
-14. [Known Gaps & Future Improvements](#14-known-gaps--future-improvements)
-15. [Test Coverage Summary](#15-test-coverage-summary)
-
----
-
-## 1. Overview & Motivation
-
-Before this work, swactor was a single-node actor runtime with basic transport. Actors could be spawned, messaged, and monitored — but only within one process. The goal of the distribution layer is **cluster membership + distributed actor location** without depending on external coordination services (etcd, Consul, ZooKeeper).
-
-Two classic distributed systems protocols were chosen:
-
-- **SWIM** (Scalable Weakly-consistent Infection-style Membership) — for cluster membership and failure detection. Each node probes peers in constant-overhead rounds, piggybacking membership updates on protocol messages. Failures are detected within O(log n) protocol periods with tunable false-positive rates.
-
-- **Kademlia** — for the actor directory (which node owns which actor). A DHT with XOR-distance routing, providing O(log n) lookup without a central registry. Entries are cryptographically signed (ed25519) so nodes can't forge actor locations.
-
-The two protocols are independent: SWIM manages liveness ("who is in the cluster?"), Kademlia manages location ("where is actor X?"). A thin integration layer (`DistributedNode`) wires membership events into routing table updates and triggers repair/replication when nodes die.
-
----
-
-## 2. What Was Built
-
-| Component | Location | Source LOC | Test LOC | Files |
-|-----------|----------|-----------|----------|-------|
-| Distribution crate | `crates/distribution/` | ~3,045 | ~2,613 | 23 source + 13 test |
-| Simulation crate | `crates/simulation/` | ~5,118 | (included) | 21 |
-| Dashboard integration | `crates/runtime-dashboard/` | ~1,350 | — | 8 changed + 2 new |
-| Crate renames | workspace-wide | — | — | 34 files touched |
-
-**Distribution crate** (`crates/distribution/`): Full SWIM membership protocol (probe cycle, CRDT member list, piggybacked dissemination, Lifeguard extensions) + full Kademlia DHT (256-bucket routing table, iterative lookup, signed directory, repair/republish) + TCP transport with connection pooling + JSON codec + LRU location cache. 133 behavioral tests.
-
-**Simulation crate** (`crates/simulation/`): Protocol-agnostic simulation harness with two implementations — a distribution simulation (SWIM cluster formation, actor resolution, fault injection) and a gossip simulation (migrated from the former `swactor-gossip` crate, feature-gated). 47 tests including 36 gossip property tests and 6 distribution scenario tests.
-
-**Dashboard integration**: Distribution monitoring page (747-line HTML/JS with force-directed graph, Barnes-Hut quadtree layout, ego-centric node selection, 9 stat cards, real-time SSE updates). Trait-based provider decoupling. 554-line demo example with 9-node churn simulation.
-
-**Crate renames**: `swactor-python` → `python`, `swactor-dp-mnist` → `dp-mnist`, `swactor-wasm` → `wasm`, `swactor-gossip` → absorbed into `crates/simulation/src/gossip/` (feature-gated), `gossip-dashboard` → `simulation`.
-
-**Totals**: ~99 files changed, 8,152 insertions, 1,694 deletions.
-
----
-
-## 3. Development Phases
-
-The implementation plan (`distribution_plan.md`) defined 12 chunks (0–11). They were developed in 5 logical phases on the feature branch (squash-merged to master as one commit):
-
-### Phase 1 — Distribution crate + simulation + crate renames
-The bulk of the work (~6,900 lines).
-
-Delivered plan chunks 0–11:
-- Created `crates/distribution/` with the complete SWIM + Kademlia implementation (types, crypto, codec, transport, cache, messages, snapshot, node integration)
-- Created `crates/simulation/` with distribution simulation harness + migrated gossip simulation
-- Renamed crates: `swactor-python` → `python`, `swactor-wasm` → `wasm`, `swactor-gossip` absorbed into simulation
-- 13 test files with 133 distribution tests + 47 simulation tests
-
-### Phase 2 — Housekeeping: gossip feature-gate, renames, example fixes
-
-- Feature-gated gossip module behind `gossip` feature in simulation crate
-- Renamed `swactor-dp-mnist` → `dp-mnist`
-- Renamed `gossip-dashboard` → `simulation-dashboard`
-- Fixed examples broken by crate renames
-
-### Phase 3 — Distribution snapshot accessors for dashboard consumption
-
-- Added public accessors on `DistributedNode`: `entries()`, `all_nodes()`, `bucket_sizes()`, `recent_probe_targets()`
-- Created `DistributionNodeSnapshot` — serializable point-in-time state for monitoring
-- Added `snapshot()` method on `DistributedNode`
-
-### Phase 4 — Distribution monitoring page in runtime-dashboard
-
-- Added `distribution_collector.rs` — `DistributionStatsProvider` trait + generic `DistributionCollector<T>`
-- Added `distribution_html.rs` — 747-line self-contained HTML/CSS/JS dashboard page
-- Wired SSE `/events` stream to include `distribution` event type
-- Feature-gated with `distribution` feature (default on)
-
-### Phase 5 — Distribution dashboard demo example
-
-- Added `dashboard_demo.rs` (later expanded to 554 lines) — 9-node cluster with runtime + distribution + dashboard
-- Introduced `SnapshotProvider` decoupling pattern
-
----
-
-## 4. Distribution Crate — Architecture
-
-### Module Layout
-
-```
-crates/distribution/src/
-├── lib.rs              (10 lines)  — module exports
-├── types.rs            (178)       — NodeId, MemberState, NodeRecord, DirectoryEntry
-├── crypto.rs           (84)        — ed25519 keypair, signing, verification
-├── codec.rs            (52)        — JSON codec registry for 10 message types
-├── transport.rs        (248)       — TCP with connection pooling, length-prefix framing
-├── cache.rs            (96)        — LRU location cache (ActorAddress → NodeId)
-├── messages.rs         (155)       — 10 protocol message types
-├── snapshot.rs         (156)       — DistributionNodeSnapshot for monitoring
-├── node.rs             (297)       — DistributedNode (top-level integration)
-├── swim/
-│   ├── mod.rs          (5)
-│   ├── probe.rs        (357)       — Probe cycle FSM
-│   ├── member_list.rs  (161)       — CRDT membership map
-│   ├── dissemination.rs(134)       — Piggybacked update queue
-│   ├── node.rs         (329)       — SwimNode (composition layer)
-│   └── lifeguard.rs    (132)       — Health-aware timeout scaling
-└── kademlia/
-    ├── mod.rs          (4)
-    ├── routing_table.rs(200)       — 256 k-buckets, LRU eviction
-    ├── directory.rs    (157)       — Signed actor location storage
-    ├── lookup.rs       (193)       — Iterative FIND_NODE state machine
-    └── repair.rs       (97)        — Re-replication + periodic republish
-```
-
-### Dependency Structure
-
-```
-                    types.rs ◄─── crypto.rs
-                       ▲
-          ┌────────────┼────────────┐
-          │            │            │
-     messages.rs    codec.rs   transport.rs
-          ▲            ▲
-          │            │
-    ┌─────┴─────┐     │
-    │           │     │
-swim/         kademlia/
-    │           │
-    └─────┬─────┘
-          │
-       node.rs  ◄─── cache.rs
-          │
-       snapshot.rs
-```
-
-SWIM and Kademlia are **independent** of each other. `node.rs` (DistributedNode) is the sole integration point where membership events from SWIM drive routing table updates in Kademlia.
-
-### Core Design Pattern: Pure State Machines
-
-Both protocols follow `(state, event) → (state, Vec<Action>)`. The state machine processes an input event, mutates internal state, and returns a list of actions the caller must execute (send messages, update timers, etc.). The state machine never performs I/O — the caller is responsible for dispatch.
-
-This pattern makes every component independently testable without a runtime, networking, or timers.
-
----
-
-## 5. Distribution Crate — SWIM Implementation
-
-### 5.1 Probe Cycle — `swim/probe.rs` (357 lines)
-
-The probe cycle is a three-phase finite state machine:
-
-```
-           ┌────────────────────────────────────┐
-           │                                    │
-           ▼                                    │
-        Idle ──[tick]──► WaitingDirectAck ──────┤
-                           │                    │
-                        [timeout]               │
-                           │                [ack received]
-                           ▼                    │
-                   WaitingIndirectAck ──────────┘
-                           │
-                        [timeout]
-                           │
-                           ▼
-                     Suspect target
-```
-
-**Configuration** (`SwimConfig`):
-- `probe_interval: u64` — ticks between probe cycles (default: 10)
-- `probe_timeout: u64` — ticks to wait for direct ack (default: 3)
-- `indirect_probes: usize` — number of relay nodes for indirect probing (default: 3)
-- `suspicion_timeout: u64` — ticks before declaring suspected node dead (default: 30)
-
-**Target selection**: Round-robin through members with XOR-based shuffle. When the probe index wraps, the member order is reshuffled. This ensures every member is probed before any is probed twice, while avoiding predictable patterns. The 16 most recent probe targets are tracked in a `VecDeque` for dashboard display.
-
-**Suspicion timers**: Stored as `Vec<SuspicionTimer>` — `(NodeId, started_at)` tuples. Each tick, timers are checked; expired ones emit `DeclareDead` actions. If an ack arrives for a suspected node, the timer is cancelled.
-
-**Inputs** (`SwimEvent`): `Tick`, `AckReceived { from, sequence }`, `IndirectAckReceived { target, sequence }`
-
-**Outputs** (`SwimAction`): `SendPing`, `SendPingReq`, `Suspect`, `DeclareDead`, `Refute`
-
-The probe logic is a pure function — `step(event, members) → Vec<SwimAction>` — with no I/O, no timers, no concurrency. The caller (SwimNode) translates actions into real network messages.
-
-### 5.2 Member List — `swim/member_list.rs` (161 lines)
-
-The member list is a CRDT with merge semantics based on incarnation numbers:
-
-```
-MemberList
-  self_id: NodeId
-  self_incarnation: u64
-  members: HashMap<NodeId, MemberEntry>   // excludes self
-```
-
-**Merge rule** (in `apply()`):
-1. Higher incarnation number always wins — replace entry regardless of state
-2. Same incarnation, higher state priority wins — `Dead (2) > Suspect (1) > Alive (0)`
-3. Lower incarnation number is ignored
-
-This ensures convergence: all nodes eventually agree on the highest-incarnation state for each member.
-
-**Incarnation refutation**: When a node receives a `Suspect` about itself, it increments `self_incarnation` and broadcasts `Alive` with the new incarnation. Since higher incarnation always wins, this overrides the suspicion at all nodes.
-
-**Key methods**: `apply()` (merge), `suspect()` (Alive → Suspect), `declare_dead()` (any → Dead), `refute()` (bump self incarnation), `alive_members()`, `snapshot()` (for join responses).
-
-### 5.3 Dissemination — `swim/dissemination.rs` (134 lines)
-
-Membership updates are piggybacked on all SWIM protocol messages (pings, acks, ping-reqs) using infection-style counting.
-
-**Transmit budget**: Each update is transmitted `Λ × ⌈log₂(n)⌉` times, where `Λ` (lambda) defaults to 3 and `n` is the cluster size. For a 10-node cluster, each update rides ~12 messages before expiring.
-
-**Priority ordering**: When selecting which updates to piggyback (up to 8 per message), `Dead` updates are sent first, then `Suspect`, then `Alive`. This ensures failure information propagates fastest.
-
-**Deduplication**: If a newer update for the same node arrives (higher incarnation, or same incarnation with higher-priority state), the old entry is replaced. This prevents stale information from consuming transmit budget.
-
-**Wire format**: Updates are serialized to JSON bytes via `pack_piggyback()` and deserialized via `unpack_piggyback()`. The piggyback field is a `Vec<u8>` on every SWIM message.
-
-### 5.4 SwimNode — `swim/node.rs` (329 lines)
-
-SwimNode composes the probe cycle, dissemination queue, and member list into a unified interface.
-
-**`NodeAction` enum** (6 variants):
-- `SendPing { to, to_addr, sequence, piggyback }` — direct probe with gossip payload
-- `SendPingReq { relay, relay_addr, target, target_addr, sequence, piggyback }` — indirect probe
-- `SendAck { to, to_addr, sequence, piggyback }` — probe response
-- `SendJoinRequest { to_addr }` — cluster bootstrap
-- `SendJoinResponse { to, to_addr, members }` — membership snapshot for joiner
-- `MembershipChanged { node_id, state, incarnation }` — notification hook for Kademlia wiring
-
-**`MembershipChanged`** is the key integration point: DistributedNode listens for this action and translates it into routing table inserts/removes, cache invalidations, and repair queue entries.
-
-**Join protocol** (one RTT):
-1. Joiner calls `join([seed_addrs])` → emits `SendJoinRequest` to each seed
-2. Seed receives `JoinRequest` → adds joiner to member list → enqueues for dissemination → responds with `SendJoinResponse` containing current member snapshot
-3. Joiner receives `JoinResponse` → applies all members → cluster membership bootstrapped
-
-**Graceful leave**: `leave()` enqueues a self-death update for dissemination. Other nodes receive the death notification through normal gossip and remove the departing node.
-
-### 5.5 Lifeguard — `swim/lifeguard.rs` (132 lines)
-
-Lifeguard implements three mechanisms from the Lifeguard paper (Hashicorp, 2018) to reduce false-positive failure detections under load:
-
-**1. Local Health Multiplier (LHM)**: Tracks a health score (0 = healthy, up to `max_health_score` = 8). Each nack increments the score; each ack decrements it. The score translates to a multiplier (`1 + score`) that stretches probe intervals and timeouts. A degraded node probes less aggressively, giving itself more time to respond to others.
-
-**2. Dynamic Suspect Timeout**: Scales with cluster size:
-```
-timeout = clamp(base × ⌈log₂(n + 1)⌉ × multiplier, min, max)
-```
-Default range: 15–120 ticks. Larger clusters get longer timeouts to accommodate higher message volumes.
-
-**3. Protocol Period Scaling**: Probe interval and timeout are both multiplied by the health multiplier. Under load, the protocol slows down rather than dropping probes — this prevents cascading false suspicions.
-
-**Status**: Lifeguard is fully implemented as pure computation but **not yet wired into `SwimProbe`**. The interface for feeding ack/nack events and reading dynamic timeouts is designed, but the connection point is missing. See [Section 13](#13-whats-unclear--indeterminate) for details.
-
----
-
-## 6. Distribution Crate — Kademlia Implementation
-
-### 6.1 Routing Table — `kademlia/routing_table.rs` (200 lines)
-
-The routing table stores known nodes indexed by XOR distance from self.
-
-```
-RoutingTable
-  self_id: NodeId
-  buckets: Vec<KBucket>   // 256 buckets, one per bit of distance
-  k: usize                // bucket capacity (default: 20)
-```
-
-**Bucket selection**: For a given `node_id`, compute `xor_leading_zeros(self_id, node_id)`. This gives an index 0–255 (clamped at 255). Bucket 0 contains nodes with the most-significant-bit different from self (farthest); bucket 255 would contain nodes with all bits matching (closest, essentially self).
-
-**Insertion logic**:
-- Node already in bucket → move to back (most-recent, LRU update)
-- Bucket has space → add to back
-- Bucket full → add to replacement cache (not main list)
-
-**Replacement cache**: Each bucket maintains a secondary `VecDeque` of replacement candidates. When a node is removed from the main list (e.g., declared dead), the first replacement is promoted. This implements Kademlia's longevity bias — long-lived nodes are preferred because they're statistically more likely to remain alive.
-
-**`closest(target, count)`**: Collects all nodes from all buckets, sorts by XOR distance to target, returns the `count` nearest. Used for lookup initialization and FIND_NODE responses.
-
-**Design choice**: Static 256 buckets regardless of cluster size. Most high-index buckets are empty for small clusters, but the memory overhead is negligible (256 empty `VecDeque`s). This avoids the complexity of S/Kademlia's dynamic bucket splitting while maintaining correctness.
-
-### 6.2 Directory — `kademlia/directory.rs` (157 lines)
-
-The directory stores actor-to-node mappings with cryptographic signatures.
-
-```
-DirectoryShard
-  entries: HashMap<ActorAddress, Vec<DirectoryEntry>>
-```
-
-**Multi-entry model**: Multiple nodes can claim the same actor address (e.g., during migration or replication). Each entry is signed by the claiming node's ed25519 key.
-
-**Store logic** (`store(entry) → bool`):
-1. Verify signature — reject if invalid
-2. If node_id not already stored for this actor → push entry
-3. If node_id already stored → replace only if `generation > existing.generation`
-
-**Quorum resolution** (`resolve_quorum_entries(entries, quorum)`):
-1. Group entries by `(node_id, generation)` pair
-2. Verify all signatures
-3. The group with the highest generation that has ≥ quorum entries wins
-4. Returns `Resolved(entry)`, `NoQuorum(entries)`, or `NotFound`
-
-**Death cleanup** (`remove_by_node(node_id)`): Removes all entries held by a dead node and returns them for re-replication via the repair queue.
-
-### 6.3 Iterative Lookup — `kademlia/lookup.rs` (193 lines)
-
-The lookup state machine implements Kademlia's iterative FIND_NODE algorithm:
-
-```
-NodeLookup
-  target: NodeId
-  known: HashMap<NodeId, (SocketAddr, [u8; 32])>   // distance cached
-  queried: HashSet<NodeId>
-  pending: HashSet<NodeId>
-  round: usize
-  done: bool
-```
-
-**Constants**: `ALPHA = 3` (concurrency), `K = 20` (replication), `MAX_ROUNDS = 20`.
-
-**Algorithm**:
-1. **Start**: Initialize `known` with k closest nodes from local routing table. Query the α closest.
-2. **Each response**: Add newly discovered nodes to `known`. When all pending queries return, start next round.
-3. **Next round**: Sort `known` by XOR distance. Pick up to α unqueried nodes from the k closest. Query them.
-4. **Termination**: All k closest have been queried, OR no new nodes discovered in a round, OR MAX_ROUNDS exceeded.
-
-**Outputs** (`LookupAction`): `Query { node_id, addr }` or `Done { closest: Vec<(NodeId, SocketAddr)> }`.
-
-**Design choice**: The lookup is agnostic to FIND_VALUE vs. FIND_NODE — it always returns the k closest nodes. The caller interprets the result and issues the appropriate FIND_VALUE RPCs if looking for an actor. This keeps the state machine simple but means there's no early-termination optimization when the value is found during lookup (see [Section 13](#13-whats-unclear--indeterminate)).
-
-### 6.4 Repair & Republish — `kademlia/repair.rs` (97 lines)
-
-Two mechanisms maintain directory consistency under churn:
-
-**`RepairQueue`** (reactive — on node death):
-```
-RepairQueue
-  pending: HashMap<ActorAddress, DirectoryEntry>
-```
-When a node is declared dead, `on_node_death(dead_node, shard)` extracts all directory entries the dead node held and queues them for re-STORE on the next-closest node. The caller calls `drain()` to get entries and issue STORE RPCs.
-
-**`RepublishTracker`** (proactive — periodic):
-```
-RepublishTracker
-  local_actors: HashMap<ActorAddress, u64>   // generation
-  interval: u64
-  next_republish: u64
-```
-Tracks locally-spawned actors. On each `tick()`, if the republish interval has elapsed, returns all local actors for re-STORE. This counters topology drift: as nodes join and leave, the "r-closest" nodes for an actor change, and periodic republish keeps entries on the currently-closest nodes.
-
-Both are **pull-based** — they return data for the caller to act on, rather than performing I/O themselves. This matches the overall "caller drives" philosophy.
-
----
-
-## 7. Distribution Crate — Integration Layer (DistributedNode)
-
-### Composition
-
-```
-DistributedNode
-  ├── keypair: Keypair                    — identity (ed25519)
-  ├── swim: SwimNode                      — membership & failure detection
-  │     ├── members: MemberList           — CRDT member map
-  │     ├── probe: SwimProbe              — probe cycle FSM
-  │     └── dissemination: DisseminationQueue
-  ├── routing_table: RoutingTable         — 256 k-buckets
-  ├── directory: DirectoryShard           — actor → node mappings
-  ├── cache: LocationCache                — LRU (ActorAddress → NodeId)
-  ├── repair_queue: RepairQueue           — re-replication queue
-  ├── republish: RepublishTracker         — periodic re-STORE
-  └── tick_count: u64
-```
-
-### Actor Resolution Flow
-
-```
-resolve_actor(actor_addr)
-  │
-  ├─► Check LRU cache ──► HIT ──► Cached(NodeId)
-  │
-  ├─► Check local directory shard ──► HIT ──► Cached(NodeId) + update cache
-  │
-  └─► Get closest nodes from routing table
-        └─► NeedsLookup { closest_nodes }
-              (caller drives iterative Kademlia lookup)
-```
-
-Three-tier resolution: O(1) cache lookup → O(1) local directory → O(log n) Kademlia lookup. The `NeedsLookup` result contains the closest known nodes; the caller must drive the `NodeLookup` state machine and issue FIND_VALUE RPCs.
-
-### Membership Change Cascade
-
-When SWIM emits `MembershipChanged`, DistributedNode reacts based on the new state:
-
-**`Alive` (new node joined)**:
-1. Insert into routing table (appropriate k-bucket)
-
-**`Dead` (node failed or left)**:
-1. Remove from routing table
-2. Invalidate all cache entries pointing to the dead node (`cache.invalidate_node()`)
-3. Extract dead node's directory entries → populate repair queue
-4. Repair queue entries available on next `drain()`
-
-### tick() as the Driver
-
-`tick()` is the main entry point. It:
-1. Calls `swim.tick()` → gets `Vec<NodeAction>`
-2. Processes `MembershipChanged` actions (routing table / cache / repair)
-3. Checks `republish.tick()` → adds re-STORE actions if interval elapsed
-4. Increments tick counter
-5. Returns combined `Vec<NodeAction>` for caller to dispatch
-
-The caller runs a loop: `tick()` → dispatch actions (send messages via transport) → handle incoming messages → `tick()` → ...
-
-### snapshot() for Monitoring
-
-`snapshot()` returns a `DistributionNodeSnapshot` — a serializable point-in-time view of the entire node state. Used by the dashboard for live monitoring without blocking the tick loop.
-
----
-
-## 8. Distribution Crate — Supporting Modules
-
-### 8.1 types.rs (178 lines)
-
-Core data types shared across all modules:
-
-- **`NodeId([u8; 32])`** — ed25519 public key, doubling as Kademlia key. `xor_distance()` computes bitwise XOR for routing. `xor_leading_zeros()` counts leading zero bits (0–256) to determine k-bucket index.
-
-- **`Signature([u8; 64])`** — ed25519 signature. Serde-serializable.
-
-- **`MemberState`** — `Alive | Suspect | Dead`. Implements `Ord` via `priority()` (0, 1, 2) for CRDT merge: Dead > Suspect > Alive at same incarnation.
-
-- **`NodeRecord`** — Wire-format membership entry: `{ node_id, addr, state, incarnation }`. Used in join responses and membership snapshots.
-
-- **`DirectoryEntry`** — Signed actor→node binding: `{ actor_addr, node_id, generation, signature }`. `payload()` extracts the signable portion (excludes signature field) for verification.
-
-### 8.2 crypto.rs (84 lines)
-
-Thin wrapper around `ed25519_dalek`:
-
-- **`Keypair`** — wraps `ed25519_dalek::SigningKey`. `generate()` creates a random keypair. `node_id()` returns the public key as `NodeId`. Identity = public key (self-certifying, no CA needed).
-
-- **`sign_directory_entry(actor_addr, generation)`** — creates and signs a `DirectoryEntry` in one call.
-
-- **`verify_directory_entry(entry)`** — reconstructs the payload, verifies the ed25519 signature against `entry.node_id`.
-
-### 8.3 codec.rs (52 lines)
-
-- **`impl_json_codec!`** macro — generates `JsonCodec<T>` implementing the `Codec<T>` trait for any serde type.
-
-- **`distribution_codec_registry()`** — returns a `CodecRegistry` with all 10 message types registered. JSON format chosen for debuggability; acknowledged as production debt (see [Section 12](#12-design-decisions--tradeoffs)).
-
-### 8.4 cache.rs (96 lines)
-
-Simple LRU cache for actor location:
-
-```
-LocationCache
-  entries: HashMap<ActorAddress, CacheEntry>
-  capacity: usize
-  counter: u64   // monotonic ordering
-```
-
-- `get()` returns `Option<NodeId>` and updates LRU ordering
-- `peek()` returns `Option<NodeId>` without updating order
-- `insert()` adds entry, evicts least-recently-used if at capacity
-- `invalidate_node(node_id)` bulk-removes all entries for a dead node
-
-### 8.5 transport.rs (248 lines)
-
-TCP transport with connection pooling and length-prefix framing:
-
-**Wire format**:
-```
-[4 bytes: frame_len (big-endian u32)]
-[32 bytes: destination ActorAddress]
-[4 bytes: type_tag_len (big-endian u32)]
-[N bytes: type_tag (UTF-8 string)]
-[remaining: JSON payload]
-```
-
-- **`TcpTransport`** — connection pool (`HashMap<SocketAddr, TcpStream>`). `send_to()` reuses or creates connections. `set_nodelay(true)` for low latency.
-
-- **`TcpAcceptor`** — non-blocking TCP listener. `try_recv()` accepts pending connections and reads framed messages.
-
-### 8.6 messages.rs (155 lines)
-
-All 10 protocol message types, each implementing `NetworkMessage`:
-
-**SWIM messages**: `Ping`, `Ack`, `PingReq`, `JoinRequest`, `JoinResponse`, `MembershipUpdate`
-
-**Kademlia messages**: `FindNodeRequest`, `FindNodeResponse`, `StoreRequest`, `FindValueRequest`, `FindValueResponse` (enum: `Found(DirectoryEntry)` | `Closer(Vec<(NodeId, SocketAddr)>)`)
-
-### 8.7 snapshot.rs (156 lines)
-
-`DistributionNodeSnapshot` — serializable monitoring state:
-- SWIM: member list with `alive_count`, `suspect_count`, `dead_count`
-- Kademlia: `routing_table_size`, `routing_buckets` (index → count), `routing_neighbors`
-- Cache: `cache_size`, `cache_entries` (actor → node mappings)
-- Directory: `directory_entry_count`
-- Repair: `repair_queue_size`
-- Monitoring: `recent_probe_targets` (hex NodeId strings)
-
----
-
-## 9. Simulation Framework
-
-The simulation crate (`crates/simulation/`) provides a protocol-agnostic testing harness with two protocol implementations.
-
-### Architecture
-
-```
-crates/simulation/src/
-├── lib.rs                    — module exports
-├── config.rs       (15)     — SimConfig
-├── topology.rs     (81)     — Topology enum + edge computation
-├── trace.rs        (24)     — generic Event<K>, SimulationTrace<K, S>
-├── properties.rs   (48)     — PropertyResult, std_dev, coeff_of_variation, chi_squared_uniform
-├── distribution/
-│   ├── mod.rs      (3)
-│   ├── sim.rs      (473)   — DistributionSimConfig, run_simulation()
-│   ├── trace.rs    (27)    — DistributionEventKind, DistributionSnapshot
-│   └── properties.rs (183) — 4 property checks + DistributionMetrics
-└── gossip/                  — feature-gated ("gossip")
-    ├── mod.rs      (8)
-    ├── protocol.rs (341)   — GossipActor, LWW key-value store
-    ├── sim.rs      (337)   — GossipSimConfig, ST + MT harnesses
-    ├── trace.rs    (101)   — GossipEvent, GossipEventKind, NodeSnapshot
-    ├── properties.rs (857) — 25 property checks, GossipMetrics
-    ├── report.rs   (550)   — HTML trace report with SVG visualizations
-    └── property_report.rs (786) — HTML property verification report
-```
-
-### Shared Infrastructure
-
-**`Topology` enum**: `Ring`, `Star`, `FullMesh`, `Chain`, `Partitioned`. Each variant computes edges via `edges(num_nodes)`. `Partitioned` splits nodes into two halves; `heal_edges()` reconnects them.
-
-**`SimulationTrace<K, S>`**: Generic trace type parameterized over event kind `K` and snapshot type `S`. Stores node names, topology edges, events, and per-round snapshots. Reused by both distribution and gossip simulations.
-
-**Property utilities**: `PropertyResult` struct (name, category, passed, expected, actual, description). Helper functions: `std_dev()`, `coeff_of_variation()`, `chi_squared_uniform()`.
-
-### Distribution Simulation (`src/distribution/`)
-
-**Harness** (`run_simulation()` — 473 lines):
-1. Initialize N nodes with sequential addresses (`127.0.0.1:10001+i`)
-2. Form cluster: `nodes[1..]` join via seed (node 0)
-3. Tick-settle: 10 rounds for SWIM convergence
-4. Register actors per node + propagate directory entries via STORE
-5. Main loop per round:
-   - Apply kill/revive schedule (fault injection)
-   - Tick all nodes + deliver actions (`tick_all_and_deliver` + `deliver_actions_tagged`)
-   - Resolve random actors from random nodes
-   - Take snapshots (member count, routing table size, directory entries, cache size, repair queue)
-6. Return `SimulationTrace<DistributionEventKind, DistributionSnapshot>`
-
-**Event kinds**: `Joined`, `MembershipChanged`, `ActorRegistered`, `ActorStored`, `ActorResolved`, `ActorResolveFailed`, `NodeKilled`, `NodeRevived`, `PingSent`, `AckReceived`.
-
-**Properties** (4 checks):
-1. `check_join_convergence()` — cluster membership converges within bound
-2. `check_membership_accuracy()` — fraction of alive nodes with correct membership view
-3. `check_actor_resolution()` — actor resolution success rate ≥ minimum threshold
-4. `check_failure_detection()` — killed nodes detected (member count reduced after death)
-
-### Gossip Simulation (`src/gossip/`)
-
-Migrated from the former `swactor-gossip` crate, feature-gated with `gossip`.
-
-**Protocol**: LWW (Last-Writer-Wins) key-value gossip. Each round, a node picks a random peer and pushes its entire state. The receiver merges by version number (higher wins). Simple but well-understood — serves as a baseline for property testing.
-
-**Dual harnesses**: Single-threaded (deterministic, tick-driven) and multi-threaded (non-deterministic, sleep-based). Both produce the same trace format.
-
-**Properties** (25 checks across 8 categories):
-
-| Category | Checks | Examples |
-|----------|--------|---------|
-| Reliability | 3 | Delivery ratio, atomic delivery, LWW single-value |
-| Latency | 5 | Convergence bound, last-node latency, S-curve shape, zero residue, partition heals |
-| Message complexity | 4 | Total push count, redundancy ratio, one-push-per-node-per-round, linear scaling |
-| Bandwidth/Load | 3 | Hub hotspot detection, load balance CV, amplification factor |
-| Convergence | 5 | Monotonic curve, entropy at convergence, entropy decreasing, partition no-converge, partial before heal |
-| Consistency | 2 | No stale reads, state size stabilizes |
-| Scalability | 2 | Sublinear round scaling, no push without peers |
-| Peer selection | 1 | Chi-squared uniformity |
-
-**Reporting**: Self-contained HTML reports with embedded CSS/SVG: trace reports (topology visualization, propagation heatmap, convergence curve, message flow timeline) and property reports (executive summary, per-section results, scalability plots, thread comparison).
-
-### Gossip as Testbed for Distribution
-
-The gossip property framework (45 tests across 11 test scenarios) served as the testbed for building the simulation infrastructure. The distribution simulation reuses the same `Topology`, `SimulationTrace`, and `PropertyResult` types but currently has only 6 scenario tests vs. gossip's 45. Expanding distribution property coverage using the gossip framework's patterns is a known future improvement.
-
----
-
-## 10. Dashboard Integration
-
-### distribution_collector.rs (36 lines)
-
-Decoupled provider pattern:
-
-```rust
-pub trait DistributionStatsProvider: Send + Sync {
-    fn snapshot(&self) -> Option<DistributionNodeSnapshot>;
-}
-```
-
-Generic wrapper `DistributionCollector<T>` holds `Arc<Mutex<T>>` and implements the trait. The dashboard never touches `DistributedNode` directly — it polls the trait for a serializable snapshot.
-
-### distribution_html.rs (747 lines)
-
-Self-contained HTML/CSS/JS served at `/distribution`. Key features:
-
-- **Force-directed graph** with Barnes-Hut quadtree optimization (O(N log N)). Nodes represent cluster members; edges show Kademlia routing relationships.
-- **Ego-centric click mode**: Click any node to focus — highlights its routing neighbors with dashed edges, fades other nodes to 15% opacity. Self node shown with 1.5x radius and white outline.
-- **Color-coded node states**: Alive (green #4caf50), Suspect (orange #ff9800), Dead (red #f44336), Self (indigo #6366f1).
-- **9 stat cards**: Members, Alive, Suspect, Dead, LRU Cache size, Routing Table size, Directory entries, Repair Queue size, Recent probes.
-- **Members table**: State, node ID (truncated), address, incarnation.
-- **LRU cache table**: Actor address → residing node ID (top 200 entries).
-- **Routing bucket histogram**: Distribution of entries across k-buckets.
-- **Recent probes list**: Most recent SWIM probe targets.
-- **Real-time SSE updates**: Subscribes to `/events` stream, updates every ~200ms.
-- **Dark theme**: GitHub-style (#0f1117 background).
-
-### server.rs — SSE Route Additions
-
-Feature-gated with `#[cfg(feature = "distribution")]`:
-
-- Route: `"/distribution"` serves the HTML template
-- SSE stream: `/events` includes `"distribution"` event type with serialized `DistributionNodeSnapshot` JSON
-- Polling: Same 200ms interval as runtime stats
-- Gracefully handles no provider attached (skips poll)
-
-### lib.rs — Feature Gate
-
-```rust
-#[cfg(feature = "distribution")]
-pub mod distribution_collector;
-
-// In DashboardHandle:
-pub fn set_distribution(&self, provider: Arc<dyn DistributionStatsProvider>) { ... }
-```
-
-Feature `distribution` is **default-on** in the dashboard crate's `Cargo.toml`.
-
-### dashboard_demo.rs (554 lines)
-
-Full demo composing runtime + distribution + dashboard:
-
-- **9-node cluster** with SWIM probing (probe_interval=5, probe_timeout=2)
-- **Actor workload**: 16 ping-pong actors + counter actors (growing to 500)
-- **Churn cycle** (every 400 rounds starting at round 200):
-  - Kill peer 8 (simulated crash)
-  - Revive peer 8 after 150 rounds
-  - Peer 7 graceful leave at round 200
-  - Peer 7 rejoin at round 350
-
-**SnapshotProvider decoupling pattern**: Instead of giving the SSE thread direct access to `DistributedNode` via `Arc<Mutex<>>`, the demo holds a cached `Option<DistributionNodeSnapshot>` behind `Arc<Mutex<>>`. The main loop updates the snapshot every tick; the SSE thread reads it. This means the SSE thread never contends for the node lock — snapshots can be up to 200ms stale (one tick round), which is acceptable for monitoring.
-
----
-
-## 11. Crate Renames & Workspace Cleanup
-
-| Before | After | Rationale |
-|--------|-------|-----------|
-| `swactor-python` | `python` | Reduce crate name pollution; the workspace context makes the parent clear |
-| `swactor-dp-mnist` | `dp-mnist` | Same |
-| `swactor-wasm` | `wasm` | Same |
-| `swactor-gossip` | absorbed into `crates/simulation/src/gossip/` | Gossip is a simulation protocol, not production code. Feature-gated with `gossip` |
-| `gossip-dashboard` | `simulation` | Shared simulation report infrastructure used by both gossip and distribution sims |
-
-The gossip protocol was originally in its own crate with a separate dashboard. Since it's primarily useful for property testing (not production membership), it was consolidated into the simulation crate behind a feature gate. This avoids maintaining a separate crate for what is essentially test infrastructure, while keeping it available for comparison benchmarking.
-
----
-
-## 12. Design Decisions & Tradeoffs
-
-### 12.1 Pure State Machines vs. Async Actors
-
-**Choice**: `(state, event) → (state, Vec<Action>)` pattern throughout.
-
-**Why not make SwimNode an Actor?** It was tempting — swactor is an actor runtime, after all. But embedding SWIM inside the actor system creates a circular dependency: the membership layer would depend on the runtime it's trying to distribute.
-
-**Pros**: Every component is testable without a runtime, networking, or timers. Tests are deterministic — feed events, assert actions. The caller controls the execution model (single-threaded tick loop, dedicated thread, or integrated into worker threads).
-
-**Cons**: The caller must implement the dispatch loop (tick → send actions → receive messages → tick). This is boilerplate but keeps the library pure.
-
-**Alternative considered**: Embed a `Runtime` inside `DistributedNode` for a self-driving tick loop. Rejected because it couples the distribution layer to a specific runtime configuration and makes testing non-deterministic.
-
-### 12.2 SWIM over Full-State Gossip
-
-**Choice**: SWIM for membership, not the existing `swactor-gossip` LWW protocol.
-
-**Why**: SWIM has O(1) message overhead per probe round (ping one node, piggyback updates). Full-push gossip is O(state_size) per round per node. For membership (where the state is the member list), SWIM also provides built-in failure detection — the probe cycle itself is the detector.
-
-**Tradeoff**: SWIM is more complex to implement correctly (probe phases, suspicion timers, incarnation numbers). The gossip protocol is simpler but doesn't detect failures — it only propagates state.
-
-**The gossip crate remains** (in simulation/) for key-value use cases and as a property testing baseline.
-
-### 12.3 Kademlia over Consistent Hashing
-
-**Choice**: Kademlia DHT for actor location directory.
-
-**Why**: Kademlia provides iterative lookup without a central hash ring. No single point of failure. Logarithmic lookup (O(log n) hops). The XOR distance metric is symmetric and satisfies the triangle inequality, enabling efficient routing.
-
-**Tradeoff**: More complex than consistent hashing with virtual nodes. Requires active maintenance (bucket refresh, entry republish, repair on death). A hash ring is simpler and sufficient for static clusters but requires ring rebalancing on every membership change.
-
-### 12.4 ed25519 for Identity + Signing
-
-**Choice**: `NodeId = ed25519 public key`. Identity is the key.
-
-**Why**: Self-certifying identity. No certificate authority needed. A node proves its identity by signing messages with its private key. Directory entries are signed, preventing forgery — node A can't claim to host an actor that lives on node B.
-
-**Tradeoff**: 32-byte NodeIds (larger than 16-byte UUIDs). No key rotation without changing identity. An alternative is separate identity and signing keys (more flexible key management, but more complex).
-
-### 12.5 JSON Wire Format
-
-**Choice**: All protocol messages serialized as JSON.
-
-**Why**: Debuggable. `tcpdump` or wireshark can read messages directly. During development, this saved significant debugging time — you can print a SWIM Ping and see exactly what's in it.
-
-**Tradeoff**: 2-3x larger than bincode, slower parsing. Not suitable for production at scale. `codec.rs` acknowledges this debt — the codec registry abstraction exists specifically to make swapping to bincode/msgpack a one-line change.
-
-### 12.6 TCP over UDP for SWIM
-
-**Choice**: TCP transport for all SWIM messages (including probes).
-
-**Why**: Connection pooling amortizes TCP handshake cost. No message size limits or fragmentation needed. The existing swactor transport infrastructure was TCP-based, so reuse was natural.
-
-**Tradeoff**: Most SWIM implementations (Hashicorp Memberlist, SWIM paper) use UDP for probes because it's lower overhead per message and avoids TCP head-of-line blocking. TCP adds ~40 bytes of header overhead per message and can stall if a connection is congested. For large clusters, UDP with application-level retries would be more appropriate.
-
-### 12.7 In-Process Simulation over Network Simulation
-
-**Choice**: Simulation uses direct method calls (`node.handle_ping(...)`) instead of real networking.
-
-**Why**: Deterministic execution (single-threaded mode). Fast — no syscalls, no port allocation, no TCP handshakes. No port conflicts in CI. A 100-round simulation of 20 nodes completes in milliseconds.
-
-**Tradeoff**: Doesn't test real network failures (packet loss, reordering, delayed delivery, TCP RST). The gap between "works in simulation" and "works on a real network" is where subtle bugs hide. Adding a probabilistic drop/delay/reorder layer to the simulation is a known future improvement.
-
-### 12.8 Pull-Based Repair vs. Automatic re-STORE
-
-**Choice**: `RepairQueue` returns entries to the caller rather than automatically issuing STORE RPCs.
-
-**Why**: Keeps the library pure — `tick()` never performs I/O. The caller decides when and how to re-STORE. This matches the overall "caller drives" philosophy: state machines produce actions, callers execute them.
-
-**Tradeoff**: Easy for a caller to forget to drain the repair queue. Requires vigilance in the dispatch loop. An alternative is `tick()` returning `StoreRequest` actions alongside `SendPing`/`SendAck` — which would make repair automatic while staying pure. This is a likely future change.
-
-### 12.9 Static 256 k-Buckets vs. Dynamic Splitting
-
-**Choice**: Fixed 256 k-buckets, one per bit of the 256-bit key space.
-
-**Why**: Simpler implementation. Predictable memory (256 buckets × k entries max). No splitting/merging logic. For clusters up to ~1000 nodes, most buckets are empty or sparse, but the overhead is negligible.
-
-**Tradeoff**: S/Kademlia's dynamic splitting is more space-efficient for large clusters and provides better load balancing across buckets. For clusters > 10,000 nodes, the static approach wastes memory on empty high-index buckets. Not a concern at current scale.
-
-### 12.10 Snapshot Provider Decoupling
-
-**Choice**: Dashboard demo uses `SnapshotProvider` with cached `Option<DistributionNodeSnapshot>` instead of `Arc<Mutex<DistributedNode>>`.
-
-**Why**: The SSE thread (HTTP server) must not block on the node's tick loop. With `Arc<Mutex<DistributedNode>>`, the SSE thread would contend for the lock every 200ms, potentially stalling ticks. The snapshot pattern means the SSE thread reads a pre-computed snapshot — zero contention.
-
-**Tradeoff**: Snapshot can be up to 200ms stale (one tick round). For monitoring purposes this is acceptable. For operational tooling (e.g., "is this node alive RIGHT NOW?"), direct access might be needed.
-
----
-
-## 13. What's Unclear / Indeterminate
-
-### 13.1 Lifeguard Wiring
-
-`lifeguard.rs` is fully implemented and tested (16 tests) but not integrated into `SwimProbe`. The `HealthMultiplier` computes dynamic timeouts and interval scaling, but there's no call site in `probe.rs` that reads these values.
-
-**Open question**: Should Lifeguard modify `SwimConfig` dynamically (mutate the config struct each tick), or should `SwimProbe` query a `HealthMultiplier` reference each time it needs a timeout? The first approach is simpler but means config values are no longer stable; the second requires threading a reference through probe methods.
-
-### 13.2 FIND_VALUE vs. FIND_NODE
-
-The `NodeLookup` state machine is generic — it finds the k closest nodes to a target. There's no dedicated `ValueLookup` that terminates early when a directory entry is found mid-lookup.
-
-`ResolveResult::NeedsLookup` returns closest nodes from the routing table, but the caller has no state machine to drive the actual FIND_VALUE queries. The gap between "I know who to ask" and "I got the answer" is unimplemented.
-
-**Impact**: Actor resolution currently works only for locally-cached or locally-stored entries. Cross-node resolution requires the caller to manually drive the lookup, which no code currently does.
-
-### 13.3 Replication Factor
-
-`distribution_plan.md` specifies `r = 2f+1` quorum replication, but the implementation doesn't enforce a replication factor. `register_actor()` stores locally and returns the `DirectoryEntry` — the caller is responsible for issuing STORE to the r-closest nodes. No mechanism tracks whether r copies exist.
-
-### 13.4 TTL / Expiration
-
-`DirectoryShard::remove_where()` exists but is never called. Directory entries have no timestamp or TTL field. Without TTL, orphaned entries from permanently dead nodes accumulate indefinitely. `RepairQueue` handles known deaths but not silent disappearances (nodes that crash without being detected, or entries for actors that were unregistered but not cleaned up).
-
-### 13.5 Real Network Integration
-
-The transport layer (`TcpTransport`, `TcpAcceptor`) is implemented and tested, but `DistributedNode` never uses it directly. All integration tests and simulations use in-process method calls. The actual wiring of `node.tick() → transport.send()` for each `NodeAction` is missing.
-
-### 13.6 Multi-Threaded Tick
-
-`DistributedNode` is `!Send + !Sync` (contains mutable references and non-atomic state). Running it in a multi-threaded context requires wrapping in `Arc<Mutex<>>` (as the dashboard demo does). It's unclear whether the tick loop should be:
-- A dedicated thread (simple, but adds latency for actor resolution queries)
-- Integrated into the runtime's worker threads (low latency, but requires `Send + Sync` or a message-passing interface)
-- An actor within the swactor runtime (elegant, but circular dependency concerns from [12.1](#121-pure-state-machines-vs-async-actors))
-
----
-
-## 14. Known Gaps & Future Improvements
-
-Listed with rough effort estimates. Not prioritized.
-
-| Gap | Effort | Impact | Notes |
-|-----|--------|--------|-------|
-| Wire Lifeguard into SwimProbe | Small | High | Reduces false positives under load. Feed ack/nack events to `HealthMultiplier`, read dynamic timeouts in probe cycle |
-| FIND_VALUE lookup state machine | Medium | High | Clone `NodeLookup`, add early termination when value found. Bridge the `NeedsLookup` → actual resolution gap |
-| Automatic STORE replication after `register_actor` | Medium | High | `tick()` emits `StoreRequest` actions to r-closest nodes after registration |
-| Republish automation in tick() | Small | Medium | `tick()` emits re-STORE actions when `RepublishTracker` fires. Currently returns data but no one acts on it |
-| TTL/expiration for directory entries | Small | Medium | Add timestamp field to `DirectoryEntry` + periodic `remove_where(expired)` in tick |
-| UDP transport for SWIM probes | Medium | Medium | New transport impl with message fragmentation. Lower per-message overhead, avoids TCP HOL blocking |
-| Push-pull anti-entropy | Medium | Medium | Periodically exchange full member lists for partition recovery. Supplements SWIM's piggybacked dissemination |
-| Bucket refresh for Kademlia | Small | Low | Periodic FIND_NODE for random IDs in sparse buckets. Keeps routing table fresh |
-| Network failure injection in simulation | Medium | High | Probabilistic drop/delay/reorder layer. Bridges the gap between in-process and real-network testing |
-| Distribution property tests | Medium | Medium | Apply gossip's 25-property framework to SWIM convergence and actor resolution. Currently 6 tests vs gossip's 47 |
-| Distribution HTML reports in simulation | Medium | Low | Visualization for SWIM probe cycles, membership evolution, resolution success rates |
-| Bincode/msgpack wire format | Small | Medium | Swap codec, benchmark. Infrastructure exists (`CodecRegistry` abstraction) |
-| S/Kademlia security extensions | Large | Low (for now) | Node ID certification, disjoint lookup paths, bucket verification. Needed for adversarial environments |
-| Multi-DC support | Large | Low (for now) | RTT-aware timeouts, zone-aware routing, cross-DC replication strategies |
-
----
-
-## 15. Test Coverage Summary
-
-### Distribution Crate — 133 Tests
-
-| File | Module | Tests | Focus |
-|------|--------|-------|-------|
-| `types_and_crypto.rs` | Core | 19 | NodeId XOR distance, MemberState ordering, DirectoryEntry signing, Keypair generation |
-| `transport_and_codec.rs` | Core | 6 | TCP framing, wire format round-trip, codec registry |
-| `cache.rs` | Core | 7 | LRU eviction, capacity enforcement, bulk invalidation by node |
-| `swim_probe.rs` | SWIM | 13 | Probe cycle phases, suspicion timers, indirect probe relay, timeout transitions |
-| `swim_node.rs` | SWIM | 11 | Join protocol, leave, ping/ack handling, incarnation refutation, piggyback |
-| `swim_dissemination.rs` | SWIM | 11 | Transmit budget, priority ordering, deduplication, piggyback pack/unpack |
-| `lifeguard.rs` | SWIM | 16 | Health scoring, ack/nack tracking, dynamic timeout scaling, multiplier bounds |
-| `kademlia_routing.rs` | Kademlia | 14 | Bucket insertion, LRU eviction, replacement promotion, closest-k query |
-| `kademlia_lookup.rs` | Kademlia | 7 | Iterative convergence, round termination, α-concurrency, failure handling |
-| `kademlia_directory.rs` | Kademlia | 12 | Store with signature verification, generation ordering, quorum resolution |
-| `repair.rs` | Kademlia | 6 | Death-triggered re-replication, periodic republish scheduling |
-| `node_integration.rs` | Integration | 11 | 3-node cluster: join handshake, membership convergence, actor registration + resolution, leave + death cascade |
-
-### Simulation Crate — 47 Tests
-
-| File | Tests | Focus |
-|------|-------|-------|
-| `gossip_properties.rs` | 36 | 25 property checks across 11 topology/config scenarios (ring, star, mesh, chain, partitioned, scaled) |
-| `gossip_convergence.rs` | 5 | Behavioral convergence: chain propagation, higher-version-wins, disjoint merge, mutual gossip, concurrent updates |
-| `distribution_sim.rs` | 6 | Cluster convergence, node death detection, rejoin recovery, actor resolution, full-mesh properties |
-
-### Testing Philosophy
-
-All tests follow behavioral Given/When/Then style — not structural (no insert-then-lookup). Tests encode decisions the system made, not just echo what the code does. The `deliver_actions()` helper in integration tests simulates network rounds by routing `NodeAction` outputs to the appropriate handler methods on peer nodes, enabling multi-node scenarios without real networking.
-
-**Asymmetry note**: The distribution simulation has 6 tests vs. gossip's 47. This reflects development sequencing — the gossip framework was built first as a testbed, and applying its full property suite to distribution is a known future improvement.
-
-### Total: 180 tests across both crates.
diff --git a/docs/development_history/distribution/DOCKER_REALIZATION.md b/docs/development_history/distribution/DOCKER_REALIZATION.md
deleted file mode 100644
index 00bdc1b..0000000
--- a/docs/development_history/distribution/DOCKER_REALIZATION.md
+++ /dev/null
@@ -1,705 +0,0 @@
-# Distribution Realization — Development History
-
-> Covers all work to bridge the pure-logic distributed runtime to real TCP networking,
-> package it as a Docker-deployable node binary, verify it against the simulation
-> tests via a 5-node Docker cluster, and validate cross-machine behavior via a
-> LAN cluster split across two physical machines.
->
-> ~22 files changed · ~1,600 insertions
->
-> *Branch: `distribution-realization`*
-
----
-
-## Table of Contents
-
-1. [Overview & Motivation](#1-overview--motivation)
-2. [What Was Built](#2-what-was-built)
-3. [Development Phases](#3-development-phases)
-4. [Wire Protocol Gap — Piggyback Extension](#4-wire-protocol-gap--piggyback-extension)
-5. [NodeDriver — TCP ↔ NodeAction Bridge](#5-nodedriver--tcp--nodeaction-bridge)
-6. [REST API Endpoint](#6-rest-api-endpoint)
-7. [Node Binary](#7-node-binary)
-8. [Docker Infrastructure](#8-docker-infrastructure)
-9. [Integration Test Harness](#9-integration-test-harness)
-10. [Cross-Machine LAN Cluster](#10-cross-machine-lan-cluster)
-11. [Design Decisions & Tradeoffs](#11-design-decisions--tradeoffs)
-12. [Bugs Encountered](#12-bugs-encountered)
-13. [Known Gaps & Future Improvements](#13-known-gaps--future-improvements)
-14. [Test Coverage Summary](#14-test-coverage-summary)
-
----
-
-## 1. Overview & Motivation
-
-The distribution layer (`crates/distribution/`) was built as a set of **pure state machines** — `DistributedNode::tick()` produces `Vec<NodeAction>` that the caller translates to network I/O. All existing tests used in-process method calls: simulation nodes forwarded actions directly via `node.handle_ping(...)` without real networking.
-
-This left a critical gap: **no code existed to actually run the protocol over TCP**. The `TcpTransport` and `TcpAcceptor` were implemented and tested in isolation, and the `NodeAction` enum described exactly what messages to send where, but the bridge between them was missing. From DISTRIBUTION.md §13.5:
-
-> *"The actual wiring of `node.tick() → transport.send()` for each `NodeAction` is missing."*
-
-This work closes that gap by:
-
-1. **Extending wire protocol messages** with piggyback fields required for SWIM dissemination
-2. **Creating NodeDriver** — the bridge that maps `NodeAction` → TCP sends and TCP receives → handler calls
-3. **Adding a REST endpoint** for programmatic cluster health queries
-4. **Packaging a node binary** (`swactor-node`) with CLI, dashboard, and actor registration
-5. **Building Docker infrastructure** for a 5-node cluster with static IPs
-6. **Writing integration tests** that mirror the simulation scenarios and verify real TCP behavior matches simulation expectations
-
-The result: `docker compose up` spins up 5 nodes that form a SWIM cluster, register actors in the Kademlia directory, and can be observed via the runtime dashboard — matching the outcomes of the simulation tests.
-
----
-
-## 2. What Was Built
-
-| Component | Location | Lines | Files |
-|-----------|----------|-------|-------|
-| Wire protocol extension | `crates/distribution/src/messages.rs` | ~15 | 1 modified |
-| NodeDriver | `crates/distribution/src/driver.rs` | ~264 | 1 new |
-| REST API endpoint | `crates/runtime-dashboard/src/server.rs` | ~30 | 1 modified |
-| Node binary | `crates/node/` | ~200 | 2 new |
-| Dockerfile | `Dockerfile` | 9 | 1 new |
-| Docker Compose (single-machine) | `tests/docker/docker-compose.yml` | 71 | 1 new |
-| Docker Compose (LAN) | `tests/docker/docker-compose.lan-*.yml` | ~80 | 2 new |
-| LAN orchestration script | `tests/docker/run-lan-cluster.sh` | ~100 | 1 new |
-| Test harness | `tests/docker/` | ~400 | 4 new |
-| LAN integration tests | `tests/docker/tests/lan_cluster.rs` | ~200 | 1 new |
-| Test updates | `crates/distribution/tests/transport_and_codec.rs` | ~5 | 1 modified |
-| Workspace config | `Cargo.toml` (root) | ~2 | 1 modified |
-
----
-
-## 3. Development Phases
-
-### Phase 1 — Extend wire protocol messages with piggyback
-
-SWIM propagates membership changes by "piggybacking" encoded gossip data on every Ping, Ack, and PingReq message. The internal `NodeAction::SendPing` carried a `piggyback: Vec<u8>` field, but the wire-level `Ping` struct in `messages.rs` did not. Without the piggyback field in the wire message, SWIM dissemination could not function over TCP — nodes would send pings and acks but never propagate membership updates.
-
-Additionally, `Ping` needed a `from_addr: SocketAddr` field because `handle_ping()` requires the sender's **listen address** (not the TCP ephemeral port of the incoming connection).
-
-### Phase 2 — Create NodeDriver (TCP ↔ NodeAction bridge)
-
-The core bridge component. Owns a `DistributedNode`, `TcpTransport`, and `TcpAcceptor`. Translates between the pure state machine world and real TCP I/O.
-
-### Phase 3 — Add `/api/distribution` REST endpoint
-
-The dashboard's SSE stream provides real-time snapshot updates, but integration tests need a synchronous polling endpoint. Added a simple GET handler that returns `DistributionNodeSnapshot` as JSON.
-
-### Phase 4 — Create node binary crate
-
-A CLI binary (`swactor-node`) that wires together the NodeDriver, actor runtime, and dashboard into a deployable process.
-
-### Phase 5 — Docker infrastructure
-
-Multi-stage Dockerfile and 5-service docker-compose.yml with a bridge network and static IPs.
-
-### Phase 6 — Integration tests
-
-Rust test crate with utilities for cluster lifecycle management and 4 `#[ignore]` test scenarios that mirror the simulation tests.
-
-### Phase 7 — Cross-machine LAN cluster
-
-Split the single-machine cluster into two compose files — one for each physical machine — using `network_mode: host` for real LAN communication. Added `LanClusterHandle` to orchestrate builds and container lifecycle across machines via SSH. 4 new LAN test scenarios mirror the single-machine tests but exercise real network boundaries.
-
-### Phase 8 — Stale connection fix and test hardening
-
-Discovered and fixed a stale TCP connection pool bug in `transport.rs` where killed-and-restarted nodes couldn't rejoin because the seed's pool still held a dead connection. Added build-once optimization via `std::sync::Once` and tightened all convergence timeouts from 60–90s to 30s.
-
----
-
-## 4. Wire Protocol Gap — Piggyback Extension
-
-### The Problem
-
-SWIM dissemination works by attaching membership gossip to protocol messages. The `DisseminationQueue` encodes updates into a `Vec<u8>` via `pack_piggyback()`, and `NodeAction::SendPing` carries this as `piggyback: Vec<u8>`. But the wire-level `Ping` struct only had `{ from, sequence }` — no piggyback field. This meant:
-
-- In-process simulation: works — `handle_ping()` receives the piggyback directly from the action
-- Over TCP: broken — the piggyback bytes are never serialized into the wire message
-
-### The Fix
-
-**`messages.rs`** — Added fields to three structs:
-
-```rust
-pub struct Ping {
-    pub from: NodeId,
-    pub from_addr: SocketAddr,   // NEW: sender's listen address
-    pub sequence: u64,
-    #[serde(default)]
-    pub piggyback: Vec<u8>,      // NEW: SWIM gossip payload
-}
-
-pub struct Ack {
-    pub from: NodeId,
-    pub sequence: u64,
-    #[serde(default)]
-    pub piggyback: Vec<u8>,      // NEW
-}
-
-pub struct PingReq {
-    pub from: NodeId,
-    pub target: NodeId,
-    pub target_addr: SocketAddr,
-    pub sequence: u64,
-    #[serde(default)]
-    pub piggyback: Vec<u8>,      // NEW
-}
-```
-
-**`#[serde(default)]`** ensures backward compatibility — if a message arrives without piggyback (e.g., from an older node), it deserializes as an empty `Vec<u8>` rather than failing.
-
-**`from_addr` on Ping**: The `handle_ping()` method signature requires `from_addr: SocketAddr` to learn the sender's cluster-visible listen address. Without this, the receiving node would only see the TCP ephemeral port, which is useless for SWIM (you need to know where to send Ack/PingReq *back* to the sender's listen address).
-
-**`transport_and_codec.rs`** — Updated Ping constructors in two tests to include the new fields.
-
----
-
-## 5. NodeDriver — TCP ↔ NodeAction Bridge
-
-### `crates/distribution/src/driver.rs` (264 lines)
-
-```
-NodeDriver
-  ├── node: DistributedNode      — pure state machine
-  ├── transport: TcpTransport    — connection pool for outgoing TCP
-  ├── acceptor: TcpAcceptor      — non-blocking listener for incoming TCP
-  └── streams: Vec<TcpStream>    — accepted connections (reused across recv calls)
-```
-
-### Outgoing: NodeAction → TCP
-
-`tick()` calls `node.tick()` → iterates the returned `Vec<NodeAction>` → maps each to a wire message and sends via TCP:
-
-| NodeAction | Wire Message | Destination |
-|------------|-------------|-------------|
-| `SendPing { to_addr, sequence, piggyback, .. }` | `Ping { from, from_addr, sequence, piggyback }` | `to_addr` |
-| `SendAck { to_addr, sequence, piggyback, .. }` | `Ack { from, sequence, piggyback }` | `to_addr` |
-| `SendPingReq { relay_addr, target, target_addr, sequence, piggyback, .. }` | `PingReq { from, target, target_addr, sequence, piggyback }` | `relay_addr` |
-| `SendJoinRequest { to_addr }` | `JoinRequest { from, addr }` | `to_addr` |
-| `SendJoinResponse { to_addr, members, .. }` | `JoinResponse { members }` | `to_addr` |
-| `MembershipChanged { .. }` | *(no network I/O)* | — |
-
-Messages are encoded via `serde_json::to_vec()` (not the `Codec<M>` trait — see [§10.2](#102-direct-serde-vs-codec-trait)) and wrapped in a `WireEnvelope` for TCP framing.
-
-### Incoming: TCP → Handler
-
-`recv()` calls `acceptor.try_recv()` → for each `(WireEnvelope, SocketAddr)`, dispatches by `type_tag`:
-
-| type_tag | Handler | Returns |
-|----------|---------|---------|
-| `"swactor_dist::Ping"` | `node.handle_ping(from, from_addr, seq, &piggyback)` | `Vec<NodeAction>` (Ack) |
-| `"swactor_dist::Ack"` | `node.handle_ack(from, seq, &piggyback)` | `Vec<NodeAction>` |
-| `"swactor_dist::PingReq"` | `node.handle_ping_req(from, target, target_addr, seq, &piggyback)` | `Vec<NodeAction>` |
-| `"swactor_dist::JoinRequest"` | `node.handle_join_request(from, addr)` | `Vec<NodeAction>` |
-| `"swactor_dist::JoinResponse"` | `node.handle_join_response(members)` | `Vec<NodeAction>` |
-
-Response actions (e.g., the Ack generated by handle_ping) are immediately sent via the same `send_actions()` path.
-
-### SWIM_DEST Dummy Address
-
-The `WireEnvelope` format requires a `dest: ActorAddress` field (transport was designed for actor-level routing). SWIM messages route by `SocketAddr`, not `ActorAddress`, so a dummy `const SWIM_DEST: ActorAddress = ActorAddress([0u8; 32])` is used. The field is ignored on the receive side — dispatch is by `type_tag`.
-
-### Public API
-
-```rust
-impl NodeDriver {
-    fn new(config: DistributedNodeConfig) -> Result<Self, Error>;
-    fn join(&mut self, seeds: &[SocketAddr]);
-    fn tick(&mut self);             // advance SWIM + send outgoing
-    fn recv(&mut self);             // process incoming TCP
-    fn snapshot(&self) -> DistributionNodeSnapshot;
-    fn node(&self) -> &DistributedNode;
-    fn node_mut(&mut self) -> &mut DistributedNode;
-    fn node_id(&self) -> NodeId;
-    fn listen_addr(&self) -> SocketAddr;
-}
-```
-
----
-
-## 6. REST API Endpoint
-
-### `/api/distribution` in `crates/runtime-dashboard/src/server.rs`
-
-Feature-gated with `#[cfg(feature = "distribution")]`. Returns `DistributionNodeSnapshot` as JSON on GET.
-
-```rust
-#[cfg(feature = "distribution")]
-fn handle_distribution_api(
-    request: tiny_http::Request,
-    distribution: Arc<Mutex<Option<Arc<dyn DistributionStatsProvider>>>>,
-) {
-    // Lock → snapshot → serialize → respond 200 with JSON
-    // Returns {} if no provider attached
-}
-```
-
-The route is registered alongside existing routes (`/`, `/actors`, `/distribution`, `/events`):
-
-```
-"/api/distribution" => handle_distribution_api(request, distribution)
-```
-
-This endpoint is what the Docker integration tests poll to verify cluster state.
-
----
-
-## 7. Node Binary
-
-### `crates/node/` — `swactor-node`
-
-**Cargo.toml dependencies**: `distribution`, `runtime-dashboard`, `swactor`, `clap`, `ctrlc`
-
-**CLI arguments**:
-
-```
-swactor-node --listen <IP:PORT> [--seed <IP:PORT>] [--dashboard-port <PORT>] [--actors <N>]
-```
-
-| Arg | Default | Purpose |
-|-----|---------|---------|
-| `--listen` | (required) | SWIM protocol listen address |
-| `--seed` | (none) | Seed node to join; omit for the seed itself |
-| `--dashboard-port` | 9090 | HTTP dashboard port |
-| `--actors` | 0 | Number of dummy `HeartbeatActor`s to register |
-
-### Startup Sequence
-
-1. Parse CLI args
-2. Set SIGTERM/SIGINT handler (`ctrlc`)
-3. Start dashboard HTTP server
-4. Create actor runtime (2 threads, 1024 max actors)
-5. Create `NodeDriver` with SWIM config (probe_interval=5, probe_timeout=3, indirect_probes=2, suspicion_timeout=20)
-6. If `--seed` provided: `driver.join(&[seed])`
-7. Spawn `--actors` dummy HeartbeatActors, register each in the node's directory
-8. Wire `SnapshotProvider` to dashboard (decoupled via `Arc<Mutex<Option<Snapshot>>>`)
-9. Main loop (100ms sleep):
-   - `driver.recv()` — process incoming TCP
-   - `driver.tick()` — SWIM protocol + send outgoing TCP
-   - Send Heartbeat to each actor (keeps them alive)
-   - Update cached snapshot for dashboard
-
-### SnapshotProvider Decoupling
-
-Same pattern used in `dashboard_demo.rs`: the dashboard SSE thread reads a cached `Option<DistributionNodeSnapshot>` behind `Arc<Mutex<>>`, while the main loop writes a fresh snapshot each tick. The SSE thread never contends for the NodeDriver — snapshots can be up to 100ms stale, which is fine for monitoring.
-
----
-
-## 8. Docker Infrastructure
-
-### Dockerfile (9 lines)
-
-Multi-stage build:
-
-```dockerfile
-FROM rust:1.93-slim AS builder
-WORKDIR /build
-COPY . .
-RUN cargo build --release -p node
-
-FROM debian:bookworm-slim
-COPY --from=builder /build/target/release/swactor-node /usr/local/bin/
-ENTRYPOINT ["swactor-node"]
-```
-
-Builder stage compiles the workspace in release mode. Runtime stage is a minimal Debian image with only the binary.
-
-### docker-compose.yml — 5-Node Cluster
-
-```
-Network: 10.0.1.0/24 (bridge)
-
-┌─────────────────────────────────────────────────────────────────┐
-│  seed (10.0.1.10)     --listen 10.0.1.10:7000                  │
-│  Dashboard: host:9091 → container:9090                          │
-│  No --seed (this IS the seed)                                   │
-├─────────────────────────────────────────────────────────────────┤
-│  node-2 (10.0.1.11)  --listen 10.0.1.11:7000 --seed 10.0.1.10 │
-│  Dashboard: host:9092 → container:9090                          │
-├─────────────────────────────────────────────────────────────────┤
-│  node-3 (10.0.1.12)  --listen 10.0.1.12:7000 --seed 10.0.1.10 │
-│  Dashboard: host:9093 → container:9090                          │
-├─────────────────────────────────────────────────────────────────┤
-│  node-4 (10.0.1.13)  --listen 10.0.1.13:7000 --seed 10.0.1.10 │
-│  Dashboard: host:9094 → container:9090                          │
-├─────────────────────────────────────────────────────────────────┤
-│  node-5 (10.0.1.14)  --listen 10.0.1.14:7000 --seed 10.0.1.10 │
-│  Dashboard: host:9095 → container:9090                          │
-└─────────────────────────────────────────────────────────────────┘
-```
-
-Each node registers 2 actors (`--actors 2`), for 10 total across the cluster.
-
-**Static IPs**: Avoids DNS resolution complexity. Each node knows its own IP and the seed's IP at startup. SWIM dissemination handles the rest — after joining, nodes learn about each other through piggybacked gossip.
-
-**Port mapping**: Each container's dashboard (port 9090) is mapped to a unique host port (9091–9095) so the test harness can query each node independently.
-
----
-
-## 9. Integration Test Harness
-
-### `tests/docker/` — Workspace Member
-
-**Structure**:
-```
-tests/docker/
-├── Cargo.toml              — depends on distribution, reqwest, serde_json
-├── docker-compose.yml      — 5-node cluster definition
-├── src/
-│   └── lib.rs              — test utilities
-└── tests/
-    └── cluster.rs          — 4 integration test scenarios
-```
-
-### Test Utilities (`src/lib.rs`)
-
-| Function/Type | Purpose |
-|---------------|---------|
-| `ClusterHandle` | RAII wrapper — `start()` runs `docker compose up`, `Drop` runs `docker compose down` |
-| `poll_distribution(port)` | GET `/api/distribution` → `Option<DistributionNodeSnapshot>` |
-| `wait_for_convergence(ports, expected_alive, timeout)` | Poll until all nodes see `>= expected_alive` members |
-| `wait_for_death_detection(ports, max_alive, timeout)` | Poll until all nodes see `<= max_alive` members |
-| `kill_node(service)` | `docker compose stop <service>` |
-| `restart_node(service)` | `docker compose start <service>` |
-
-**Compose file resolution**: Uses `env!("CARGO_MANIFEST_DIR")` to build an absolute path to `docker-compose.yml` at compile time. This avoids path-doubling issues when `cargo test` runs from a different working directory.
-
-### 4 Test Scenarios (`tests/cluster.rs`)
-
-All marked `#[ignore]` — require Docker. Run with: `cargo test -p docker-tests -- --ignored`
-
-#### Test 1: `cluster_of_five_converges`
-*Mirrors: `distribution_sim.rs::cluster_of_five_converges`*
-
-```
-Given: 5 nodes started via docker compose
-When:  wait up to 30s for convergence
-Then:  all 5 nodes report alive_count >= 4
-       and routing_table_size >= 3
-```
-
-#### Test 2: `node_death_is_detected`
-*Mirrors: `distribution_sim.rs::node_death_is_detected`*
-
-```
-Given: converged 5-node cluster
-When:  docker compose stop node-3
-Then:  within 30s, surviving 4 nodes report alive_count <= 4
-       and at least one survivor sees dead_count >= 1
-```
-
-#### Test 3: `killed_node_rejoins`
-*Mirrors: `distribution_sim.rs::killed_node_rejoins`*
-
-```
-Given: converged cluster, node-3 killed and detected dead
-When:  docker compose start node-3
-Then:  within 30s, node-3 reports alive_count >= 1
-```
-
-#### Test 4: `actors_resolvable_across_cluster`
-*Mirrors: `distribution_sim.rs::actors_resolvable_across_cluster`*
-
-```
-Given: converged 5-node cluster, each with 2 registered actors
-When:  query each node's snapshot
-Then:  each node has directory_entry_count >= 2
-       total directory entries across cluster >= 10
-       total cache entries >= 5
-```
-
-### Simulation ↔ Docker Parity
-
-The simulation tests run in-process with direct method calls. The Docker tests exercise the same protocol logic but over real TCP connections, Docker networking, and process boundaries. Both assert the same behavioral properties:
-
-| Property | Simulation Test | Docker Test |
-|----------|----------------|-------------|
-| 5-node cluster converges | `cluster_of_five_converges` | `cluster_of_five_converges` |
-| Dead node detected | `node_death_is_detected` | `node_death_is_detected` |
-| Killed node rejoins | `killed_node_rejoins` | `killed_node_rejoins` |
-| Actors in directory | `actors_resolvable_across_cluster` | `actors_resolvable_across_cluster` |
-
----
-
-## 10. Cross-Machine LAN Cluster
-
-### Motivation
-
-The single-machine Docker cluster validates SWIM over TCP within a bridge network on one host. This leaves a gap: real deployments span multiple machines with distinct network stacks. The LAN cluster tests exercise this by splitting 5 nodes across two physical machines communicating over a real Ethernet LAN.
-
-### Infrastructure
-
-**Machines**:
-- **devuan-hpz** (192.168.1.106): runs seed + node-2 (2 nodes)
-- **thinkpad** (192.168.1.102): runs node-3, node-4, node-5 (3 nodes)
-
-**Split compose files**: Unlike the single-machine cluster (bridge network with static IPs), the LAN cluster uses `network_mode: host` so containers bind directly to the host's LAN interface.
-
-```
-docker-compose.lan-hpz.yml         docker-compose.lan-thinkpad.yml
-┌──────────────────────────┐       ┌───────────────────────────────┐
-│ seed   192.168.1.106:7000│       │ node-3  192.168.1.102:7000    │
-│ node-2 192.168.1.106:7001│       │ node-4  192.168.1.102:7001    │
-│ Dashboards: 9091, 9092   │       │ node-5  192.168.1.102:7002    │
-└──────────────────────────┘       │ Dashboards: 9093, 9094, 9095  │
-        ↕ LAN (2ms)               └───────────────────────────────┘
-```
-
-Each thinkpad node seeds to `192.168.1.106:7000` (the hpz seed). With `network_mode: host`, each node needs a unique port on its host — hence 7000/7001 on hpz and 7000/7001/7002 on thinkpad.
-
-### Orchestration
-
-**Repo sync**: thinkpad has no rsync, so `LanClusterHandle` uses `tar czf | scp | ssh tar xzf` to push the workspace (excluding `target/` and `.git/`).
-
-**Build-once optimization**: A `static BUILD_LAN_ONCE: Once` ensures that repo sync + `docker compose build` on both machines happens exactly once per test run. Subsequent `LanClusterHandle::start()` calls skip the build and just run `docker compose up -d`. This reduced the full 4-test suite from ~840s to ~630s.
-
-**Remote control**: `kill_remote_node()` and `restart_remote_node()` execute `docker compose stop/start` on the thinkpad via SSH.
-
-### Shell Script (`run-lan-cluster.sh`)
-
-A standalone orchestration script for quick LAN validation outside of `cargo test`. Syncs repo, builds on both machines, starts both sides, polls all 5 dashboards for convergence, reports pass/fail, and tears down via a trap handler on exit.
-
-### LAN Test Scenarios (`tests/docker/tests/lan_cluster.rs`)
-
-All marked `#[test] #[ignore]`, run with: `cargo test -p docker-tests -- --ignored lan_ --test-threads=1`
-
-#### Test 1: `lan_cluster_converges`
-```
-Given: 5 nodes split across hpz and thinkpad
-When:  wait up to 30s for convergence
-Then:  all 5 nodes report alive_count >= 4 and routing_table_size >= 3
-```
-
-#### Test 2: `lan_remote_node_death_detected`
-```
-Given: converged LAN cluster
-When:  kill node-3 on thinkpad
-Then:  within 30s, 4 survivors see alive_count <= 4
-       and at least one survivor sees dead_count >= 1
-```
-
-#### Test 3: `lan_killed_remote_node_rejoins`
-```
-Given: converged cluster, node-3 killed and detected dead
-When:  restart node-3 on thinkpad
-Then:  within 30s, node-3 reports alive_count >= 1
-```
-
-#### Test 4: `lan_actors_resolvable_cross_machine`
-```
-Given: converged 5-node LAN cluster, each with 2 registered actors
-When:  query each node's snapshot
-Then:  each node has directory_entry_count >= 2
-       total directory entries >= 10, total cache >= 5
-```
-
----
-
-## 11. Design Decisions & Tradeoffs
-
-### 11.1 NodeDriver as Separate Module (not in node binary)
-
-**Choice**: `driver.rs` lives in `crates/distribution/`, not in `crates/node/`.
-
-**Why**: The driver is reusable — any binary that wants to run a DistributedNode over TCP can use it. The node binary (`crates/node/`) is one consumer; future consumers might embed distribution in a larger application. Keeping the driver in the distribution crate means it stays testable alongside the protocol logic.
-
-### 11.2 Direct serde_json vs. Codec Trait
-
-**Choice**: NodeDriver uses `serde_json::to_vec()`/`serde_json::from_slice()` directly, not the `Codec<M>` trait or `CodecRegistry`.
-
-**Why**: The `Codec<M>` trait is parametric — `JsonCodec` implements `Codec<Ping>`, `Codec<Ack>`, etc. as separate trait impls. You can't write generic code like `codec.encode(any_message)` because each message type is a different impl. The CodecRegistry solves this on the send side via type erasure (`TypeId → encoder`), but it requires `Box<dyn Any>` downcasting which adds complexity for no benefit here — the driver already knows the concrete message type at each call site.
-
-Using `serde_json` directly is simpler and equivalent — the JsonCodec just calls `serde_json` internally. When the codec is eventually swapped to bincode/msgpack, the driver can switch to the new serializer just as easily.
-
-### 11.3 Static IPs over DNS
-
-**Choice**: Docker Compose services use static IPs (`10.0.1.10`–`10.0.1.14`) rather than Docker DNS names.
-
-**Why**: The SWIM protocol routes by `SocketAddr`, not hostname. Using DNS would require DNS resolution at startup plus a hostname→addr mapping. Static IPs are simpler and deterministic. The subnet `10.0.1.0/24` is a private range unlikely to conflict with host networking.
-
-**Tradeoff**: Less flexible — adding a 6th node requires editing the compose file with a new static IP. Acceptable for a fixed test cluster.
-
-### 11.4 `#[ignore]` Tests over Separate Test Target
-
-**Choice**: Docker tests use `#[test] #[ignore]` rather than a separate binary or integration test feature flag.
-
-**Why**: Standard Rust convention. `cargo test` skips them by default; `cargo test -- --ignored` runs them. No extra CI configuration needed. The test crate is already in its own workspace member (`tests/docker/`), providing isolation.
-
-### 11.5 Host Networking for LAN Cluster
-
-**Choice**: LAN compose files use `network_mode: host` instead of Docker bridge networking.
-
-**Why**: Bridge networking with port forwarding would work for single-machine tests but not for cross-machine communication — a container on machine A needs to reach a container on machine B at its real LAN IP. With host networking, containers bind directly to the host's interface and are reachable at the host's LAN address. This requires unique ports per container on each host (7000, 7001, ... instead of all using 7000).
-
-### 11.6 Build-Once via `std::sync::Once`
-
-**Choice**: Docker images are built once per test run using `std::sync::Once`, then reused across all 4 tests.
-
-**Why**: Each `docker compose up --build` triggers a full Rust release build inside Docker (~40s on hpz, ~50s on thinkpad). With 4 serial tests, that's 8 redundant builds. Separating `docker compose build` (guarded by `Once`) from `docker compose up -d` (per-test) cuts total runtime from ~840s to ~630s. The first test pays the build cost; tests 2–4 just start pre-built containers.
-
-### 11.7 100ms Tick Loop over Async Runtime
-
-**Choice**: The node binary uses a synchronous 100ms `thread::sleep` loop, not tokio/async-std.
-
-**Why**: The entire distribution layer is synchronous (`DistributedNode` is `!Send`). Introducing an async runtime adds complexity with no benefit — the tick loop is CPU-light (one tick processes a handful of messages) and the 100ms sleep provides natural backpressure. The TCP transport uses non-blocking I/O for the acceptor and blocking I/O with connection pooling for outgoing sends.
-
-### 11.8 `#[serde(default)]` for Backward Compatibility
-
-**Choice**: New `piggyback` fields use `#[serde(default)]` so missing fields deserialize as empty `Vec<u8>`.
-
-**Why**: If a node running old code (without piggyback) sends a Ping to a node running new code, the message should still deserialize successfully. The new node sees an empty piggyback — no gossip propagated, but no crash either. This matters during rolling upgrades.
-
----
-
-## 12. Bugs Encountered
-
-### 12.1 Compose File Path Doubling
-
-**Symptom**: `cargo test -p docker-tests -- --ignored` failed with:
-```
-open tests/docker/tests/docker/docker-compose.yml: no such file or directory
-```
-
-**Cause**: The compose file path was defined as a relative constant:
-```rust
-const COMPOSE_FILE: &str = "tests/docker/docker-compose.yml";
-```
-But `cargo test` runs with the crate root as working directory. Since the crate root is already `tests/docker/`, the resolved path became `tests/docker/tests/docker/docker-compose.yml` — doubled.
-
-**Fix**: Replaced the relative constant with `env!("CARGO_MANIFEST_DIR")`:
-```rust
-const COMPOSE_DIR: &str = env!("CARGO_MANIFEST_DIR");
-
-fn compose_file() -> String {
-    let mut p = PathBuf::from(COMPOSE_DIR);
-    p.push("docker-compose.yml");
-    p.to_string_lossy().into_owned()
-}
-```
-
-This compiles the crate's absolute filesystem path into the binary, so the compose file is always found regardless of working directory.
-
-### 12.2 Codec Trait Parametric Mismatch
-
-**Symptom**: First version of `driver.rs` attempted:
-```rust
-self.codec.encode(&msg)  // where codec: JsonCodec
-```
-
-Compilation failed because `JsonCodec` implements `Codec<Ping>`, `Codec<Ack>`, etc. as separate trait impls. A single `codec` variable can't be used generically across all message types without trait object gymnastics.
-
-**Fix**: Bypassed the Codec trait entirely. Used `serde_json::to_vec()` and `serde_json::from_slice()` directly. The driver knows the concrete type at each match arm, so generic dispatch isn't needed.
-
-### 12.3 Stale TCP Connection Pool on Node Rejoin
-
-**Symptom**: The `lan_killed_remote_node_rejoins` test failed — the restarted node's dashboard responded (it was running) but reported `alive_count=0`. The node never received a `JoinResponse` from the seed.
-
-**Cause**: `TcpTransport` maintains a connection pool keyed by `SocketAddr`. When node-3 was killed (container stopped), the seed's pool still held a TCP connection to `192.168.1.102:7000`. When node-3 restarted and sent a `JoinRequest`, the seed generated a `JoinResponse` and called `send_to(192.168.1.102:7000, ...)`. The pool returned the stale connection — `try_clone()` succeeded (the FD was still valid), but `write_all()` silently failed or the data went into a dead socket. The `JoinResponse` was never delivered.
-
-**Fix**: Added retry-on-write-failure logic to `TcpTransport::send_to()`:
-
-```rust
-pub fn send_to(&self, addr: SocketAddr, envelope: WireEnvelope) -> Result<(), Error> {
-    let buf = encode_wire_envelope(&envelope);
-    let mut stream = self.get_or_connect(addr)?;
-    match stream.write_all(&buf) {
-        Ok(()) => Ok(()),
-        Err(_) => {
-            // Evict stale connection and retry once
-            self.pool.lock().unwrap().remove(&addr);
-            let mut stream = self.get_or_connect(addr)?;
-            stream
-                .write_all(&buf)
-                .map_err(|e| Error::from(format!("TCP send to {addr}: {e}")))
-        }
-    }
-}
-```
-
-On write failure, the stale entry is evicted and a fresh connection is established. This handles the common case of a peer that died and came back at the same address. The retry is limited to one attempt — if the second write also fails, the error propagates.
-
-**Impact**: This bug only manifests in kill/restart scenarios where a node returns at the same `SocketAddr`. It would not appear in simulation tests (no real TCP) or in the single-machine bridge cluster (Docker assigns new IPs on restart). It required real LAN testing with `network_mode: host` to surface.
-
----
-
-## 13. Known Gaps & Future Improvements
-
-| Gap | Effort | Impact | Notes |
-|-----|--------|--------|-------|
-| Kademlia messages not wired in driver | Medium | High | NodeDriver only handles SWIM messages. FindNode/FindValue/Store RPCs are not sent or received. Full Kademlia lookup requires this. |
-| No graceful shutdown protocol | Small | Medium | Node binary calls `driver.node().leave()` but doesn't drain in-flight messages or wait for death dissemination |
-| Heartbeat actors are fire-and-forget | Small | Low | HeartbeatActor never responds; actor liveness isn't verified |
-| No health check in Docker | Small | Medium | Compose could use `HEALTHCHECK` to avoid `--wait` fallback path |
-| No TLS | Medium | Medium | All TCP traffic is plaintext. Fine for a test cluster on a private network; not suitable for production |
-| No resource limits | Small | Low | Docker containers have no memory/CPU limits; could OOM on constrained hosts |
-| No partition testing | Medium | High | Docker supports `iptables`-based network partitions but no test exercises split-brain scenarios yet |
-
----
-
-## 14. Test Coverage Summary
-
-### Existing Tests — Unchanged
-
-All 182 existing tests continue to pass:
-- 134 distribution crate tests (133 original + 1 from updated constructors)
-- 47 simulation tests
-- 1 swactor core test
-
-### Docker Integration Tests — 4 Single-Machine Scenarios
-
-| Test | Mirrors Simulation | Asserts |
-|------|-------------------|---------|
-| `cluster_of_five_converges` | `distribution_sim::cluster_of_five_converges` | alive_count >= 4, routing_table_size >= 3 |
-| `node_death_is_detected` | `distribution_sim::node_death_is_detected` | alive_count <= 4, dead_count >= 1 |
-| `killed_node_rejoins` | `distribution_sim::killed_node_rejoins` | alive_count >= 1 after restart |
-| `actors_resolvable_across_cluster` | `distribution_sim::actors_resolvable_across_cluster` | directory_entry_count >= 2, total >= 10, cache >= 5 |
-
-Run with: `cargo test -p docker-tests -- --ignored cluster --test-threads=1`
-
-### LAN Integration Tests — 4 Cross-Machine Scenarios
-
-| Test | Asserts |
-|------|---------|
-| `lan_cluster_converges` | 5 nodes across 2 machines: alive_count >= 4, routing_table_size >= 3 |
-| `lan_remote_node_death_detected` | Kill node on thinkpad: survivors see alive_count <= 4, dead_count >= 1 |
-| `lan_killed_remote_node_rejoins` | Restart killed node: rejoins with alive_count >= 1 |
-| `lan_actors_resolvable_cross_machine` | directory_entry_count >= 2 per node, total >= 10, cache >= 5 |
-
-Run with: `cargo test -p docker-tests -- --ignored lan_ --test-threads=1`
-
-All convergence timeouts are 30 seconds. Convergence happens in seconds over the LAN; 30s is a generous safety margin that still catches real failures quickly.
-
-### Verification
-
-- `cargo check --workspace` — clean
-- `cargo test` — all 182 tests pass
-- `cargo build --release -p node` — node binary builds
-- Local 2-node TCP smoke test — nodes discover each other, dashboard returns valid JSON
-- Single-machine Docker tests: 4/4 pass (on thinkpad)
-- LAN Docker tests: 4/4 pass (hpz + thinkpad, ~630s total)
-
----
-
-## Files Created/Modified
-
-| Action | File | Purpose |
-|--------|------|---------|
-| Modified | `crates/distribution/src/messages.rs` | Added piggyback + from_addr fields |
-| Created | `crates/distribution/src/driver.rs` | NodeDriver (TCP ↔ NodeAction bridge) |
-| Modified | `crates/distribution/src/lib.rs` | Added `pub mod driver` |
-| Modified | `crates/distribution/src/transport.rs` | Stale connection retry in `send_to()` |
-| Modified | `crates/distribution/tests/transport_and_codec.rs` | Updated Ping constructors |
-| Modified | `crates/runtime-dashboard/src/server.rs` | Added `/api/distribution` route |
-| Created | `crates/node/Cargo.toml` | Node binary crate config |
-| Created | `crates/node/src/main.rs` | swactor-node CLI binary |
-| Modified | `Cargo.toml` (root) | Added `crates/node`, `tests/docker` to workspace |
-| Created | `Dockerfile` | Multi-stage Docker build |
-| Created | `tests/docker/Cargo.toml` | Docker tests crate config |
-| Created | `tests/docker/docker-compose.yml` | 5-node single-machine cluster |
-| Created | `tests/docker/docker-compose.lan-hpz.yml` | LAN cluster — hpz side (2 nodes) |
-| Created | `tests/docker/docker-compose.lan-thinkpad.yml` | LAN cluster — thinkpad side (3 nodes) |
-| Created | `tests/docker/run-lan-cluster.sh` | LAN cluster orchestration script |
-| Created | `tests/docker/src/lib.rs` | Test utilities (ClusterHandle, LanClusterHandle, build-once) |
-| Created | `tests/docker/tests/cluster.rs` | 4 single-machine integration tests |
-| Created | `tests/docker/tests/lan_cluster.rs` | 4 cross-machine LAN integration tests |
diff --git a/docs/development_history/distribution/IROH_TRANSPORT.md b/docs/development_history/distribution/IROH_TRANSPORT.md
deleted file mode 100644
index d36557c..0000000
--- a/docs/development_history/distribution/IROH_TRANSPORT.md
+++ /dev/null
@@ -1,738 +0,0 @@
-# iroh P2P Transport — Development History
-
-> Covers the integration of iroh as an alternative P2P transport for the
-> distribution layer: removing SocketAddr from all protocol types, adding
-> TCP address hints at the wire-frame level, feature-gating TCP, implementing
-> the iroh driver, updating the node binary for transport selection, and
-> removing inherently flaky multi-threaded gossip tests.
->
-> ~29 files changed · ~1,360 insertions · ~970 deletions (excluding Cargo.lock)
->
-> *Branch: `iroh`*
-
----
-
-## Table of Contents
-
-1. [Overview & Motivation](#1-overview--motivation)
-2. [What Was Built](#2-what-was-built)
-3. [Development Phases](#3-development-phases)
-4. [Protocol Layer: Transport-Agnostic Refactor](#4-protocol-layer-transport-agnostic-refactor)
-5. [TCP Driver: Address Book & Wire Frame Hints](#5-tcp-driver-address-book--wire-frame-hints)
-6. [Feature-Gated TCP Transport](#6-feature-gated-tcp-transport)
-7. [IrohDriver — QUIC P2P Transport](#7-irohdriver--quic-p2p-transport)
-8. [Node Binary: Transport Selection](#8-node-binary-transport-selection)
-9. [Flaky Multi-Threaded Gossip Tests](#9-flaky-multi-threaded-gossip-tests)
-10. [Design Decisions & Tradeoffs](#10-design-decisions--tradeoffs)
-11. [Known Gaps & Future Improvements](#11-known-gaps--future-improvements)
-12. [Test Coverage Summary](#12-test-coverage-summary)
-
----
-
-## 1. Overview & Motivation
-
-The distribution layer used raw TCP with no encryption, no NAT traversal, and
-`SocketAddr` baked into every protocol type — from `NodeRecord` to `SwimAction`
-to `MemberEntry`. This created two problems:
-
-1. **No security or reachability**: TCP provides no built-in authentication,
-   encryption, or NAT hole-punching. Nodes behind NAT or across WAN boundaries
-   cannot form clusters without manual port-forwarding.
-
-2. **Transport is not pluggable**: `SocketAddr` in protocol types meant every
-   handler, every message, and every test was coupled to TCP addressing. Adding
-   a new transport required modifying the entire protocol stack.
-
-iroh provides QUIC-based peer-to-peer connections with built-in TLS (ed25519
-authentication), automatic NAT hole-punching with relay server fallback, and
-identity-based addressing. The swactor `NodeId([u8; 32])` and iroh `PublicKey`
-are both ed25519 public keys, making identity alignment trivial — the same 32
-bytes serve as both the SWIM node identifier and the iroh network address.
-
-From `DOCKER_REALIZATION.md` §13:
-
-> *"No TLS — All TCP traffic is plaintext. Fine for a test cluster on a
-> private network; not suitable for production."*
-
-This work closes that gap by making the entire protocol layer transport-agnostic
-(addressed by `NodeId` only) and providing iroh as a production-grade alternative
-to TCP.
-
----
-
-## 2. What Was Built
-
-| Component | Location | Nature |
-|-----------|----------|--------|
-| Protocol refactor | 12 source + 7 test files in `crates/distribution/` | Refactor: remove SocketAddr from all protocol types |
-| TCP address book | `crates/distribution/src/driver.rs` | Enhance: NodeId → SocketAddr mapping + wire frame hints |
-| Feature gates | `Cargo.toml`, `lib.rs` | Config: `tcp` and `iroh` features |
-| IrohDriver | `crates/distribution/src/iroh_driver.rs` (510 lines) | New: iroh QUIC transport |
-| iroh tests | `crates/distribution/tests/iroh_driver.rs` (69 lines) | New: 3 integration tests |
-| Node binary | `crates/node/Cargo.toml`, `crates/node/src/main.rs` | Enhance: `--transport tcp\|iroh` selection |
-| Simulation cleanup | `crates/simulation/` | Fix: remove 5 flaky MT gossip tests |
-
----
-
-## 3. Development Phases
-
-### Phase 1 — Remove SocketAddr from all protocol and message types
-
-The largest change. Every `SocketAddr` in the protocol layer was removed —
-`NodeRecord`, `MemberEntry`, `SwimAction`, `NodeAction`, messages, Kademlia
-types, `DistributedNode`, and all 7 test files. After this phase, the entire
-protocol stack addresses nodes exclusively by `NodeId`. Transport-specific
-addressing lives in the driver layer.
-
-### Phase 2 — TCP driver address book and wire frame hints
-
-The TCP driver gained a `PeerAddressBook` (HashMap<NodeId, SocketAddr>) and
-the wire frame format was extended with `AddressHint` sections. The driver
-learns addresses from incoming frames and includes its own address as a hint
-on every outgoing message. Join responses include all known member addresses.
-
-### Phase 3 — Feature-gate TCP transport
-
-TCP-specific modules (`transport.rs`, `driver.rs`) gated behind `#[cfg(feature = "tcp")]`.
-The distribution crate compiles cleanly with `--no-default-features`, producing
-a transport-agnostic library with just the protocol state machines.
-
-### Phase 4 — IrohDriver implementation
-
-New `iroh_driver.rs` module (510 lines) behind `#[cfg(feature = "iroh")]`.
-Same driver pattern as `NodeDriver`: sync API wrapping a tokio runtime, with
-QUIC stream-per-message transport. Identity alignment via shared ed25519-dalek
-bytes between iroh's `SecretKey` and swactor's `Keypair`.
-
-### Phase 5 — Node binary transport selection
-
-CLI gained `--transport <tcp|iroh>` and `--seed-node-id <hex>` flags.
-Transport-specific code gated by features: `cargo run -p node --features tcp`
-or `cargo run -p node --features iroh`.
-
-### Phase 6 — Testing and flaky test removal
-
-3 new iroh driver integration tests. Investigated and removed 5 flaky
-multi-threaded gossip property tests whose failures were inherent to the
-sleep-based MT simulation harness.
-
----
-
-## 4. Protocol Layer: Transport-Agnostic Refactor
-
-### The Problem
-
-`SocketAddr` appeared in 19 types across 12 source files:
-
-- `NodeRecord.addr`, `MemberEntry.addr` — membership data
-- `SwimAction::SendPing.to_addr`, `SwimAction::SendPingReq.relay_addr` — probe actions
-- `NodeAction::SendPing.to_addr`, `NodeAction::SendJoinRequest.to_addr` — driver actions
-- `Ping.from_addr`, `PingReq.target_addr`, `JoinRequest.addr` — wire messages
-- `NodeEntry.addr` — Kademlia routing table
-- `LookupAction::Query.addr`, `LookupAction::Done` — lookup results
-- `DistributedNodeConfig.listen_addr`, `DistributedNode::join()` — node config
-- `SwimNode.self_addr`, `SwimNode::new(self_addr)` — SWIM state
-
-Every protocol handler took `SocketAddr` parameters. Every test constructed
-`SocketAddr` literals. Adding a non-TCP transport would require threading a
-different address type through every layer — or worse, making address types
-generic (adds complexity everywhere for a concern that belongs in the driver).
-
-### The Solution
-
-Remove all `SocketAddr` from protocol types. Nodes are addressed by `NodeId`
-only. The driver (TCP or iroh) maintains its own address resolution.
-
-**Types changed:**
-
-| Type | Before | After |
-|------|--------|-------|
-| `NodeRecord` | `{ node_id, addr, state, incarnation }` | `{ node_id, state, incarnation }` |
-| `MemberEntry` | `{ node_id, addr, state, incarnation }` | `{ node_id, state, incarnation }` |
-| `NodeEntry` | `{ node_id, addr }` | `{ node_id }` |
-| `SwimAction::SendPing` | `{ to, to_addr, sequence }` | `{ to, sequence }` |
-| `SwimAction::SendPingReq` | `{ relay, relay_addr, target, target_addr, sequence }` | `{ relay, target, sequence }` |
-| `NodeAction::SendPing` | `{ to, to_addr, sequence, piggyback }` | `{ to, sequence, piggyback }` |
-| `NodeAction::SendAck` | `{ to, to_addr, sequence, piggyback }` | `{ to, sequence, piggyback }` |
-| `NodeAction::SendPingReq` | 5 fields with addrs | `{ relay, target, sequence, piggyback }` |
-| `NodeAction::SendJoinResponse` | `{ to, to_addr, members }` | `{ to, members }` |
-| `Ping` | `{ from, from_addr, sequence, piggyback }` | `{ from, sequence, piggyback }` |
-| `PingReq` | `{ from, target, target_addr, sequence, piggyback }` | `{ from, target, sequence, piggyback }` |
-| `JoinRequest` | `{ from, addr }` | `{ from }` |
-| `FindNodeResponse.closest` | `Vec<(NodeId, SocketAddr)>` | `Vec<NodeId>` |
-| `LookupAction::Query` | `{ node_id, addr }` | `{ node_id }` |
-| `LookupAction::Done.closest` | `Vec<(NodeId, SocketAddr)>` | `Vec<NodeId>` |
-
-**Methods changed:**
-
-| Method | Removed parameter |
-|--------|-------------------|
-| `SwimNode::new()` | `self_addr: SocketAddr` |
-| `MemberList::apply()` | `addr: SocketAddr` |
-| `RoutingTable::insert()` | `addr: SocketAddr` |
-| `SwimNode::handle_ping()` | `from_addr: SocketAddr` |
-| `SwimNode::handle_ping_req()` | `target_addr: SocketAddr` |
-| `SwimNode::handle_join_request()` | `from_addr: SocketAddr` |
-| `DistributedNode::handle_ping()` | `from_addr: SocketAddr` |
-| `DistributedNode::handle_ping_req()` | `target_addr: SocketAddr` |
-| `DistributedNode::handle_join_request()` | `from_addr: SocketAddr` |
-
-**Removed entirely:**
-
-- `SwimNode::join()` — join initiation moved to driver layer
-- `SwimNode::self_addr()` — no transport address in protocol layer
-- `NodeAction::SendJoinRequest` — driver sends join directly
-- `DistributedNode::listen_addr()` — driver-level concern
-- `DistributedNode::join()` — delegated to driver
-- `DistributedNodeConfig.listen_addr` — driver-level concern
-
-**Snapshot fields changed:**
-
-`MemberInfo.addr`, `NeighborInfo.addr`, and `DistributionNodeSnapshot.listen_addr`
-changed from `SocketAddr`/`String` to `Option<String>`. The protocol layer leaves
-them as `None`; the driver enriches them from its own address resolution.
-
----
-
-## 5. TCP Driver: Address Book & Wire Frame Hints
-
-### The Problem
-
-With `SocketAddr` removed from protocol types, the TCP driver needs its own
-mechanism to resolve `NodeId → SocketAddr` for outgoing messages, and to learn
-addresses from incoming messages.
-
-### PeerAddressBook
-
-```rust
-struct PeerAddressBook(HashMap<NodeId, SocketAddr>);
-
-impl PeerAddressBook {
-    fn learn(&mut self, node_id: NodeId, addr: SocketAddr);
-    fn resolve(&self, node_id: &NodeId) -> Option<SocketAddr>;
-    fn all_hints(&self) -> Vec<AddressHint>;
-}
-```
-
-The driver learns addresses from two sources:
-1. **Incoming TCP connections**: the sender's `SocketAddr` is extracted from the
-   wire frame's address hint section
-2. **Join responses**: all member addresses from the responding node's address book
-
-### Wire Frame Extension
-
-The TCP frame format gained an `AddressHint` section:
-
-```
-Before: [4B frame_len][32B dest][4B tag_len][tag_bytes][payload_bytes]
-After:  [4B frame_len][32B dest][4B tag_len][tag_bytes][4B hints_len][hints_bytes][payload_bytes]
-```
-
-Where `hints_bytes` is JSON-serialized `Vec<AddressHint>`:
-
-```rust
-#[derive(Serialize, Deserialize)]
-pub struct AddressHint {
-    pub node_id: NodeId,
-    pub addr: SocketAddr,
-}
-```
-
-For most messages, the hint section contains 1 entry — the sender's own
-`(NodeId, listen_addr)`. For join responses, it contains all known member
-addresses from the sender's address book.
-
-### Backward Compatibility
-
-The `hints_len` field enables forward parsing — old code that doesn't understand
-hints can skip the section by reading `hints_len` bytes. However, old and new
-wire formats are not interoperable without version negotiation (a known
-limitation).
-
-### Snapshot Enrichment
-
-`NodeDriver::snapshot()` calls `self.node.snapshot()` (which returns `None`
-for all address fields), then enriches `MemberInfo.addr` and `NeighborInfo.addr`
-from the address book, and fills `listen_addr` from the driver's own listen address.
-
----
-
-## 6. Feature-Gated TCP Transport
-
-### `crates/distribution/Cargo.toml`
-
-```toml
-[features]
-default = ["tcp"]
-tcp = []
-iroh = ["dep:iroh", "dep:tokio"]
-
-[dependencies]
-iroh = { version = "0.96", optional = true }
-tokio = { version = "1", features = ["rt-multi-thread"], optional = true }
-```
-
-### `crates/distribution/src/lib.rs`
-
-```rust
-#[cfg(feature = "tcp")]
-pub mod transport;
-#[cfg(feature = "tcp")]
-pub mod driver;
-#[cfg(feature = "iroh")]
-pub mod iroh_driver;
-```
-
-Always compiled (no feature gates): `types`, `crypto`, `messages`, `codec`,
-`swim/`, `kademlia/`, `node`, `registry`, `cache`, `snapshot`.
-
-### Test Restructuring
-
-`transport_and_codec.rs` was restructured: codec tests (JSON round-trip,
-registry dispatch) remain at the top level; TCP-specific tests (`TcpTransport`,
-`TcpAcceptor`, wire frame encoding) moved into a `#[cfg(feature = "tcp")] mod tcp_transport` block.
-
-### Verification
-
-`cargo check -p distribution --no-default-features` compiles cleanly — the
-distribution crate produces a transport-agnostic library with just protocol
-state machines, crypto, and codec.
-
----
-
-## 7. IrohDriver — QUIC P2P Transport
-
-### `crates/distribution/src/iroh_driver.rs` (510 lines)
-
-```
-IrohDriver
-  ├── node: DistributedNode       — pure state machine
-  ├── endpoint: iroh::Endpoint    — QUIC endpoint with TLS
-  ├── rt: tokio::runtime::Runtime — owned async runtime
-  └── connections: HashMap<NodeId, iroh::Connection>  — connection cache
-```
-
-### Design: Sync API, Async Internals
-
-The driver exposes a synchronous API (`tick()`, `recv()`, `join()`) matching
-the existing `NodeDriver` pattern, while internally owning a tokio runtime for
-iroh's async QUIC operations. All async calls go through `rt.block_on()`:
-
-```rust
-pub fn tick(&mut self) {
-    let actions = self.node.tick();
-    self.send_actions(&actions);  // internally calls rt.block_on()
-}
-
-pub fn recv(&mut self) {
-    let incoming = self.rt.block_on(async { self.receive_pending().await });
-    for (tag, payload, from_key) in incoming {
-        let response_actions = self.dispatch_incoming(&tag, &payload, from);
-        self.send_actions(&response_actions);
-    }
-}
-```
-
-This keeps the main loop pattern identical between TCP and iroh — the caller
-runs a 100ms tick loop without caring which transport is underneath.
-
-### Identity Alignment
-
-iroh uses ed25519 for endpoint identity. The swactor `Keypair` wraps the same
-`ed25519_dalek` crate. Identity alignment is achieved by reconstructing a
-swactor `Keypair` from iroh's `SecretKey` bytes:
-
-```rust
-let iroh_secret = endpoint.secret_key().to_bytes();
-let keypair = Keypair::from_bytes(&iroh_secret);
-let node = DistributedNode::with_keypair(keypair, config.node);
-```
-
-This ensures `driver.node_id()` and the iroh endpoint's public key are the
-same 32 bytes — messages addressed to a `NodeId` are routable by iroh without
-any translation layer.
-
-### ALPN Protocol Negotiation
-
-```rust
-const ALPN: &[u8] = b"swactor/swim/1";
-```
-
-iroh uses ALPN (Application-Layer Protocol Negotiation) to multiplex protocols
-on a single QUIC endpoint. The ALPN string identifies the SWIM protocol version,
-enabling future protocol upgrades without port changes.
-
-### Message Framing Over QUIC
-
-Each SWIM message is one QUIC stream:
-
-```
-Unidirectional: [4B tag_len][tag_bytes][payload_bytes]
-Bidirectional:  request on send side, response on recv side (JoinRequest → JoinResponse)
-```
-
-**Unidirectional streams** for fire-and-forget messages (Ping, Ack, PingReq,
-JoinResponse). One stream per message — clean isolation, no head-of-line
-blocking between messages.
-
-**Bidirectional streams** for request-response (JoinRequest → JoinResponse).
-The joiner opens a bidi stream, writes the request, calls `finish()`, then
-reads the response from the recv side.
-
-### Connection Caching
-
-```rust
-connections: HashMap<NodeId, Connection>
-```
-
-On send, the driver checks the cache:
-- **Hit + open**: reuse the connection
-- **Hit + closed**: remove stale entry, reconnect
-- **Miss**: `endpoint.connect(target_key, ALPN).await`, cache the new connection
-
-On write failure, the driver evicts the stale connection and retries once
-(same pattern as the TCP driver's stale connection fix from DOCKER_REALIZATION.md §12.3).
-
-### Receiving Messages
-
-`receive_pending()` polls two sources:
-
-1. **New incoming connections**: `endpoint.accept()` with 1ms timeout, read
-   all available streams from each new connection
-2. **Cached connections**: iterate existing connections, accept pending streams
-
-Both uni and bidi streams are polled with 1ms timeouts. Messages are collected
-into a `Vec<(tag, payload, remote_id)>` and dispatched synchronously after
-the async poll completes.
-
-### Join Protocol
-
-Same one-RTT protocol as TCP, adapted for iroh addressing:
-
-1. Joiner calls `join(&[PublicKey])` — for each seed, opens a bidi stream,
-   sends `JoinRequest`, reads `JoinResponse`
-2. Seed receives `JoinRequest` on a bidi stream, generates response via
-   `node.handle_join_request()`, writes `JoinResponse` back on the same stream
-3. Joiner processes `JoinResponse` via `node.handle_join_response()`, populating
-   the member list and routing table
-
-Seeds are identified by iroh `PublicKey` rather than `SocketAddr`. iroh handles
-relay-assisted connection establishment, NAT traversal, and address discovery
-internally.
-
----
-
-## 8. Node Binary: Transport Selection
-
-### `crates/node/Cargo.toml`
-
-```toml
-[features]
-default = ["tcp"]
-tcp = ["distribution/tcp"]
-iroh = ["distribution/iroh", "dep:iroh"]
-
-[dependencies]
-distribution = { path = "../distribution" }
-iroh = { version = "0.96", optional = true }
-```
-
-The `iroh` crate is a direct dependency of the node binary (not just transitive
-through distribution) because `main.rs` references `iroh::RelayMode` and
-`iroh::PublicKey` directly for CLI argument parsing.
-
-### CLI Changes
-
-```
-swactor-node --transport <tcp|iroh>
-             [--listen <IP:PORT>]        # TCP mode
-             [--seed <IP:PORT>]          # TCP mode
-             [--seed-node-id <hex>]      # iroh mode
-             [--dashboard-port <PORT>]
-             [--actors <N>]
-```
-
-| Arg | Mode | Purpose |
-|-----|------|---------|
-| `--transport` | both | `tcp` (default) or `iroh` |
-| `--listen` | TCP | Required: listen address |
-| `--seed` | TCP | Seed node address |
-| `--seed-node-id` | iroh | Seed node's ed25519 public key (64-char hex) |
-
-### Transport Dispatch
-
-```rust
-match args.transport.as_str() {
-    #[cfg(feature = "tcp")]
-    "tcp" => run_tcp(args, node_config, &handle, &dash, &stop),
-    #[cfg(feature = "iroh")]
-    "iroh" => run_iroh(args, node_config, &handle, &dash, &stop),
-    other => { /* error: unknown transport */ }
-}
-```
-
-Both `run_tcp()` and `run_iroh()` follow the same main loop pattern:
-create driver → optional join → spawn actors → snapshot loop with 100ms sleep.
-The only difference is driver construction and seed addressing.
-
----
-
-## 9. Flaky Multi-Threaded Gossip Tests
-
-### The Problem
-
-5 multi-threaded gossip property tests failed intermittently:
-
-- `partition_heals_and_converges_mt` — delivery_ratio as low as 0.74 (expected >0.98)
-- `all_nodes_receive_all_keys_in_ring_1000_mt` — delivery_ratio of 1.25 (impossible >1.0)
-- `convergence_curve_is_monotonic_mt` — delivery_ratio undershoot
-- `fullmesh_converges_in_log_n_rounds_mt` — convergence bound exceeded
-- `lww_ensures_single_final_value_mt` — timing-dependent value check
-
-### Root Cause 1: Sleep-Based Settling
-
-The MT simulation harness uses `thread::sleep(settle_ms)` (8–10ms) to wait
-for message processing between rounds:
-
-```rust
-// sim.rs — MT harness
-let settle_ms = (ticks_per_round as u64 * 2).max(10);
-thread::sleep(Duration::from_millis(settle_ms));
-```
-
-Under thread scheduling pressure, gossip messages don't propagate fully
-before snapshots are taken. For the partition-heal test, gossip must cross
-a 2-edge bridge between two 25-node groups — under non-deterministic
-scheduling, this can take much longer than 10ms, causing undershoot.
-
-This is **inherent** to the sleep-based approach. No amount of parameter
-tuning makes it reliable — increasing settle times slows the test suite
-without eliminating the race.
-
-### Root Cause 2: Snapshot Duplication
-
-The snapshot extraction loop iterates events in reverse and breaks when the
-tick counter changes:
-
-```rust
-for event in log.iter().rev() {
-    if event.tick != current_round_tick {
-        break;
-    }
-    if let GossipEventKind::StateSnapshot { ref snapshot } = event.kind {
-        round_snapshots.push((event.node_name.clone(), snapshot.clone()));
-    }
-}
-```
-
-In the MT harness, snapshot events can arrive with the same tick counter value
-but from different processing windows (the tick counter is an `AtomicU64` read
-by actors on different threads). This causes `round_snapshots` to contain
-duplicate entries for the same node, inflating `delivery_ratio` above 1.0.
-
-### Resolution
-
-All 5 MT gossip tests were removed. The single-threaded variants test the
-exact same protocol properties deterministically — the MT tests added no
-protocol coverage, only testing the harness's timing assumptions.
-
-The MT simulation harness code (`run_simulation_multi_threaded`,
-`heal_partition_via_handle`) remains available for future use if a proper
-synchronization mechanism replaces the sleep-based approach.
-
----
-
-## 10. Design Decisions & Tradeoffs
-
-### 10.1 Transport-Only Integration (Keep SWIM, Swap Transport)
-
-**Choice**: iroh replaces TCP at the transport layer only. SWIM protocol,
-Kademlia DHT, and all state machines are unchanged.
-
-**Why**: SWIM and Kademlia are transport-agnostic protocols — they produce
-`NodeAction`s that say "send this to NodeId X", not "send this to IP:port".
-The refactor to remove `SocketAddr` makes this separation explicit in the type
-system. Adding iroh required zero changes to protocol logic.
-
-**Tradeoff**: iroh could provide additional capabilities (e.g., topic-based
-pubsub, blob sync) that could simplify parts of SWIM dissemination. These
-are left for future work.
-
-### 10.2 Sync API with Owned Tokio Runtime
-
-**Choice**: `IrohDriver` owns a `tokio::runtime::Runtime` and exposes a
-synchronous API via `rt.block_on()`.
-
-**Why**: The existing main loop pattern is synchronous — `tick()`, `recv()`,
-`sleep(100ms)`. Rewriting the entire driver/binary to be async would be a
-larger change with no benefit, since the state machine is inherently
-synchronous. The owned runtime is contained — it doesn't leak async into
-the caller.
-
-**Tradeoff**: `block_on()` burns a thread while waiting. For a single driver
-this is fine. For embedding multiple drivers in one process, a shared runtime
-would be more efficient.
-
-### 10.3 Stream-Per-Message Over QUIC
-
-**Choice**: Each SWIM message opens a new QUIC stream (uni for
-fire-and-forget, bidi for request-response).
-
-**Why**: Clean isolation between messages — no framing needed beyond the
-tag/payload format, no head-of-line blocking between messages. QUIC streams
-are lightweight (no TCP handshake, just a stream ID on an existing connection).
-Opening and closing a stream is comparable to sending a single UDP packet in
-terms of overhead.
-
-**Tradeoff**: Higher stream-management overhead than persistent streams. For
-high-frequency messaging, a persistent stream with multiplexed framing would
-be more efficient. The stream-per-message pattern is easy to swap later without
-changing the driver's public API.
-
-### 10.4 Address Hints in TCP Wire Frame (Not Protocol Layer)
-
-**Choice**: TCP addressing travels in the wire frame header as `AddressHint`
-sections, not in SWIM message payloads.
-
-**Why**: Address hints are a TCP transport concern. iroh doesn't need them —
-nodes are addressed by public key, and iroh handles routing internally. Putting
-hints in the protocol messages would re-couple the protocol to a specific
-addressing scheme. The frame-level approach keeps protocol messages clean and
-lets each transport carry whatever metadata it needs.
-
-**Tradeoff**: The wire frame format is now transport-specific (TCP frames have
-hints, QUIC streams don't). This is acceptable because the frame format is
-already transport-specific (TCP has length-prefix framing, QUIC doesn't need it).
-
-### 10.5 Keypair Reconstruction from iroh SecretKey
-
-**Choice**: Construct a swactor `Keypair` from iroh's `SecretKey` bytes rather
-than generating a separate identity.
-
-**Why**: Both use ed25519-dalek internally. Sharing the key material means
-`driver.node_id()` and `endpoint.id()` are the same 32-byte public key. Any
-message addressed to a `NodeId` is directly routable by iroh without a lookup
-table. If they were separate keys, we'd need a `NodeId → iroh::PublicKey`
-mapping — another address book, duplicating the TCP driver's problem.
-
-**Tradeoff**: Ties swactor identity to iroh identity. If iroh ever changes its
-key format or the ed25519-dalek versions diverge, the byte-level reconstruction
-would break. This is mitigated by both depending on the same `ed25519-dalek`
-version via `iroh 0.96`.
-
-### 10.6 Removing Flaky Tests Over Fixing Them
-
-**Choice**: Removed all 5 MT gossip tests rather than increasing sleep
-timeouts or adding retry logic.
-
-**Why**: The flakiness is inherent to the sleep-based synchronization model,
-not to insufficient timeout values. Increasing sleep times makes the test suite
-slower without eliminating the race — it just makes failures rarer, which is
-worse (harder to reproduce, blocks CI intermittently). The ST variants test the
-same properties deterministically and have never failed.
-
-**Tradeoff**: No MT gossip testing. If the gossip protocol has concurrency
-bugs (e.g., data races in the `GossipActor`), the ST tests won't catch them.
-The right fix is a proper synchronization mechanism in the MT harness (barriers,
-message-count-based settling) — not sleep-and-hope.
-
----
-
-## 11. Known Gaps & Future Improvements
-
-| Gap | Effort | Impact | Notes |
-|-----|--------|--------|-------|
-| iroh cluster integration tests | Medium | High | Two IrohDrivers joining and verifying SWIM convergence over real QUIC connections. Current tests verify identity/snapshot but not multi-node communication. |
-| Actor-to-actor transport over iroh | Large | High | Currently only SWIM messages go over iroh. Actor messages still require the existing swactor transport layer. |
-| iroh Docker test scenarios | Medium | Medium | Add iroh transport variant to Docker compose with `--transport iroh` and `--seed-node-id` flags. |
-| Persistent QUIC streams | Small | Medium | Replace stream-per-message with persistent streams for high-frequency SWIM probes. Reduces stream setup overhead. |
-| iroh relay server configuration | Small | Medium | CLI currently hardcodes `RelayMode::Default` (n0 production relays). Add `--relay-url` flag for custom relay servers. |
-| Shared tokio runtime | Small | Low | Allow passing an existing runtime to `IrohDriver::new()` instead of creating one per driver instance. |
-| MT gossip harness fix | Medium | Low | Replace sleep-based settling with barrier or message-count synchronization. Would re-enable MT property tests. |
-| Wire format version negotiation | Medium | Medium | TCP hint-extended frames and old frames are not interoperable. Version header would enable rolling upgrades. |
-
----
-
-## 12. Test Coverage Summary
-
-### Changes to Existing Tests
-
-All 7 test files in `crates/distribution/tests/` updated for the NodeId-only
-API — removed `SocketAddr` construction, removed address parameters from handler
-calls, updated action pattern matching. TCP-specific tests gated behind
-`#[cfg(feature = "tcp")]`.
-
-### New Tests — 3 iroh Driver Tests
-
-| Test | Assertion |
-|------|-----------|
-| `iroh_driver_creates_with_unique_identity` | Two drivers have different `node_id()` values |
-| `iroh_driver_snapshot_contains_node_id` | Snapshot has non-empty `node_id` and empty member list |
-| `iroh_driver_identity_matches_iroh_endpoint` | Snapshot `node_id` hex matches `driver.node_id()` bytes |
-
-Run with: `cargo test -p distribution --features iroh`
-
-### Removed Tests — 5 Flaky MT Gossip Tests
-
-| Test | Reason |
-|------|--------|
-| `all_nodes_receive_all_keys_in_ring_1000_mt` | delivery_ratio > 1.0 from snapshot duplication |
-| `fullmesh_converges_in_log_n_rounds_mt` | Convergence bound exceeded under thread pressure |
-| `convergence_curve_is_monotonic_mt` | delivery_ratio undershoot from incomplete settling |
-| `partition_heals_and_converges_mt` | delivery_ratio 0.74 from slow cross-partition gossip |
-| `lww_ensures_single_final_value_mt` | Timing-dependent value convergence check |
-
-### Final Test Counts
-
-| Crate | Tests | Change |
-|-------|-------|--------|
-| distribution | 153 | +3 (iroh), net same (protocol refactor, no new/removed) |
-| simulation (gossip) | 31 | -5 (removed MT variants) |
-| simulation (distribution) | 21 | unchanged |
-| **Total** | **205** | **-2 net** |
-
-### Verification
-
-- `cargo check -p distribution --no-default-features` — compiles without TCP
-- `cargo check -p distribution --features "tcp,iroh"` — compiles with both
-- `cargo test -p distribution` — 150 tests pass (TCP default)
-- `cargo test -p distribution --features iroh` — 153 tests pass (TCP + iroh)
-- `cargo test -p simulation` — 52 tests pass (31 gossip + 21 distribution)
-- `cargo build -p node --features tcp` — binary builds
-- `cargo build -p node --features iroh` — binary builds
-
----
-
-## Files Created/Modified
-
-| Action | File | Purpose |
-|--------|------|---------|
-| Created | `crates/distribution/src/iroh_driver.rs` | IrohDriver (QUIC P2P transport) |
-| Created | `crates/distribution/tests/iroh_driver.rs` | 3 iroh integration tests |
-| Modified | `crates/distribution/Cargo.toml` | Feature flags, iroh/tokio deps |
-| Modified | `crates/distribution/src/lib.rs` | Feature-gated module exports |
-| Modified | `crates/distribution/src/types.rs` | Removed SocketAddr from NodeRecord |
-| Modified | `crates/distribution/src/messages.rs` | Removed SocketAddr from wire messages |
-| Modified | `crates/distribution/src/node.rs` | Removed SocketAddr from handlers, added `with_keypair()` |
-| Modified | `crates/distribution/src/snapshot.rs` | Address fields → `Option<String>` |
-| Modified | `crates/distribution/src/driver.rs` | PeerAddressBook, wire frame hints, enriched snapshot |
-| Modified | `crates/distribution/src/transport.rs` | Extended frame format with hints section |
-| Modified | `crates/distribution/src/swim/node.rs` | Removed SocketAddr from NodeAction, handlers |
-| Modified | `crates/distribution/src/swim/probe.rs` | Removed SocketAddr from SwimAction |
-| Modified | `crates/distribution/src/swim/member_list.rs` | Removed addr from MemberEntry |
-| Modified | `crates/distribution/src/swim/dissemination.rs` | Removed addr from membership_update() |
-| Modified | `crates/distribution/src/kademlia/routing_table.rs` | Removed addr from NodeEntry, insert() |
-| Modified | `crates/distribution/src/kademlia/lookup.rs` | Removed addr from LookupAction |
-| Modified | `crates/distribution/tests/swim_probe.rs` | Updated for NodeId-only API |
-| Modified | `crates/distribution/tests/swim_node.rs` | Updated for NodeId-only API |
-| Modified | `crates/distribution/tests/swim_dissemination.rs` | Updated for NodeId-only API |
-| Modified | `crates/distribution/tests/kademlia_routing.rs` | Updated for NodeId-only API |
-| Modified | `crates/distribution/tests/kademlia_lookup.rs` | Updated for NodeId-only API |
-| Modified | `crates/distribution/tests/node_integration.rs` | Updated for NodeId-only API |
-| Modified | `crates/distribution/tests/registry.rs` | Updated for NodeId-only API |
-| Modified | `crates/distribution/tests/transport_and_codec.rs` | TCP tests gated, codec tests ungated |
-| Modified | `crates/distribution/tests/types_and_crypto.rs` | Removed SocketAddr from NodeRecord test |
-| Modified | `crates/node/Cargo.toml` | Feature flags, iroh dep |
-| Modified | `crates/node/src/main.rs` | Transport selection CLI |
-| Modified | `crates/simulation/src/distribution/sim.rs` | Updated for NodeId-only API |
-| Modified | `crates/simulation/tests/gossip_properties.rs` | Removed 5 flaky MT tests |
diff --git a/docs/development_history/distribution/SIMULATION_TESTING.md b/docs/development_history/distribution/SIMULATION_TESTING.md
deleted file mode 100644
index 1a9547b..0000000
--- a/docs/development_history/distribution/SIMULATION_TESTING.md
+++ /dev/null
@@ -1,190 +0,0 @@
-# Simulation Testing — Development History
-
-> Covers the addition of network fault injection to the simulation harness
-> and 15 new cluster scenario tests, informed by research into production
-> distributed systems testing practices.
->
-> 4 files changed · ~950 insertions
->
-> *Branch: `distribution-realization`*
-
----
-
-## Table of Contents
-
-1. [Overview & Motivation](#1-overview--motivation)
-2. [What Was Built](#2-what-was-built)
-3. [Research Phase](#3-research-phase)
-4. [Network Fault Injection](#4-network-fault-injection)
-5. [Cluster Scenario Tests](#5-cluster-scenario-tests)
-6. [Key Findings](#6-key-findings)
-7. [Design Decisions](#7-design-decisions)
-8. [Known Gaps & Future Work](#8-known-gaps--future-work)
-
----
-
-## 1. Overview & Motivation
-
-The simulation crate (`crates/simulation/`) had 6 distribution tests covering
-happy-path scenarios: cluster convergence, node death detection, node rejoin,
-and actor resolution. All tests assumed a perfect network — 100% delivery,
-zero latency variation, no partitions.
-
-Real networks drop packets, partition nodes, and deliver messages out of order.
-The SWIM protocol's correctness under these conditions was untested. This work
-adds network fault simulation and exercises the protocol under adversarial
-conditions drawn from established testing methodologies.
-
----
-
-## 2. What Was Built
-
-| Component | Location | Description |
-|-----------|----------|-------------|
-| Network fault model | `crates/simulation/src/distribution/sim.rs` | Partition, heal, and message drop simulation |
-| 15 cluster scenario tests | `crates/simulation/tests/cluster_scenarios.rs` | Behavioral tests for failure modes |
-| Research notes | `CLAUDE/notes/research_simulation_testing.md` | Survey of 7 codebases/frameworks |
-
-All 15 new tests run in ~1.4s total (well under the 2-minute cap).
-The original 6 distribution_sim tests are unaffected.
-
----
-
-## 3. Research Phase
-
-Seven codebases and frameworks were studied for their simulation testing
-methodology:
-
-| Source | Key Takeaway |
-|--------|-------------|
-| **FoundationDB** | Deterministic simulation: single-threaded, seeded PRNG, simulated time. BUGGIFY injects faults inside production code at ~25% activation × 25% firing probability. |
-| **Hashicorp memberlist** | ~80 test functions. Lifeguard extensions: suspicion timer with log(k+1) decay, health-aware probe timeouts, dogpile confirmation. |
-| **Antithesis** | Categorized fault injection: network, process, disk, timing. Emphasis on property-based invariant checking. |
-| **TigerBeetle** | VOPR simulation + Vortex TCP proxy. Runs millions of seeds nightly. |
-| **Turmoil** (tokio-rs) | Rust DST: `sim.partition(a,b)`, `sim.hold(a,b)`, `sim.repair(a,b)`. Seeded RNG, simulated time. |
-| **MadSim** | Rust DST used by RisingWave. FIRO scheduling, libc interception for true determinism. |
-| **Jepsen** | Standard nemesis catalog: partition, kill, pause, clock skew, membership change. |
-
-Full notes: `CLAUDE/notes/research_simulation_testing.md`
-
----
-
-## 4. Network Fault Injection
-
-Three new types model network conditions:
-
-```rust
-pub struct Partition {
-    pub side_a: Vec<usize>,   // node indices
-    pub side_b: Vec<usize>,
-    pub asymmetric: bool,     // if true, only side_a→side_b is blocked
-}
-
-pub enum NetworkFault {
-    Partition { round: usize, partition: Partition },
-    Heal { round: usize },
-    SetDropRate { round: usize, rate: f64 },
-}
-```
-
-`NetworkState` tracks blocked pairs (as a `HashSet<(usize, usize)>`) and
-applies probabilistic message dropping via a deterministic LCG PRNG
-(seed `0x853c49e6748fea9b`). The `should_deliver(from, to)` method checks
-both partition membership and drop rate before allowing message delivery.
-
-Faults are applied per-round in `run_simulation` before the tick/deliver
-cycle. Initial join and settle phases always use a clean `NetworkState`
-(no faults during cluster formation).
-
-### Backward Compatibility
-
-`DistributionSimConfig` gained a `network_faults: Vec<NetworkFault>` field
-defaulting to an empty vec. Existing tests that don't set this field
-see no behavior change — the renamed `deliver_actions_tagged_with_net`
-function with a clean `NetworkState` is functionally identical to the
-original `deliver_actions_tagged`.
-
----
-
-## 5. Cluster Scenario Tests
-
-15 tests organized by failure category:
-
-### Partitions
-| Test | Scenario | Assertion |
-|------|----------|-----------|
-| `symmetric_partition_splits_membership_views` | 6 nodes split {0,1,2} vs {3,4,5} | Each side forms sub-cluster; dead-declared nodes not auto-rediscovered |
-| `asymmetric_partition_causes_one_sided_suspicion` | 5 nodes, one-way block | Recovery after heal |
-| `partition_plus_kill_in_minority_side` | 6 nodes, partition + kill in minority | Compound failure handled |
-| `sequential_partitions_fragment_cluster` | Sequential partition events | Creates sub-clusters |
-| `actor_resolution_degrades_during_partition` | Actors registered pre-partition | Cached resolutions survive partition |
-
-### Message Loss
-| Test | Scenario | Assertion |
-|------|----------|-----------|
-| `cluster_converges_under_10_percent_message_loss` | 10% drop rate | Some membership maintained |
-| `heavy_message_loss_causes_membership_instability` | 30% drop rate | Degrades but doesn't crash |
-| `cluster_survives_brief_message_loss` | 15% loss for 15 rounds then heals | ≥2 well-connected survivors |
-
-### Node Failures
-| Test | Scenario | Assertion |
-|------|----------|-----------|
-| `cluster_survives_seed_node_death` | Kill node 0 (seed) | 4 survivors maintain ≥60% accuracy |
-| `simultaneous_two_node_failure_detected` | Kill 2 of 7 at once | Both deaths detected |
-| `cascading_failures_leave_quorum_intact` | Kill 3 of 7 sequentially | Survivors maintain membership |
-| `graceful_leave_detected_faster_than_crash` | Crash detection timing | Bounded detection rounds |
-
-### Scale & Churn
-| Test | Scenario | Assertion |
-|------|----------|-----------|
-| `cluster_of_fifty_converges` | 50-node cluster | ≥90% accuracy |
-| `rapid_churn_maintains_partial_membership` | 8 nodes, 4 kill/revive cycles | Partial membership maintained |
-| `membership_changes_disseminate_to_all_nodes` | 10-node cluster, verify propagation | All survivors detect death |
-
----
-
-## 6. Key Findings
-
-1. **SWIM does not auto-rediscover dead-declared nodes.** Once the suspicion
-   timeout expires and a node is declared dead, it is permanently removed.
-   Re-joining requires the join protocol. This is correct SWIM behavior,
-   not a bug — but tests must account for it.
-
-2. **Message loss is highly destabilizing for SWIM** because it affects both
-   the direct probe AND indirect probes in the same cycle. Default config
-   (`suspicion_timeout=5`, `indirect_probes=1`) cannot tolerate even 15%
-   loss. Tuned config (`suspicion_timeout=15–20`, `indirect_probes=2`,
-   `probe_timeout=5`) tolerates ~10%.
-
-3. **The LCG PRNG for message dropping needs a non-zero seed** to avoid
-   correlated early values (seed 0 always produces 0.0 as first output,
-   causing deterministic first-message drop).
-
-4. **50-node clusters converge quickly** with the simulation's
-   topology-aware join strategy, achieving ≥90% accuracy.
-
----
-
-## 7. Design Decisions
-
-| Decision | Rationale |
-|----------|-----------|
-| LCG instead of `rand` crate | Keeps simulation deterministic without adding dependencies; 64-bit LCG with Knuth constants is sufficient for drop-rate testing |
-| Blocked pairs in HashSet | O(1) lookup per message; partition model maps directly to real network behavior |
-| Clean NetworkState for join/settle | Faults during initial cluster formation would conflate test setup with test assertions |
-| Loose accuracy thresholds for loss tests | SWIM's sensitivity to message loss means tight thresholds create flaky tests; the behavioral property being tested is "degrades gracefully" not "maintains perfect accuracy" |
-| Tests verify SWIM's actual semantics | Rather than expecting auto-recovery after partition heal (which SWIM doesn't support), tests verify the sub-cluster formation that actually occurs |
-
----
-
-## 8. Known Gaps & Future Work
-
-| Gap | Priority | Notes |
-|-----|----------|-------|
-| Property-based invariant checking | High | Formal completeness/accuracy as automated checks |
-| Message reordering | Medium | Out-of-order delivery in network model |
-| Kademlia-specific scenarios | Medium | Routing table convergence under churn, directory repair |
-| Suspicion refutation tests | Medium | Incarnation bump prevents false death |
-| Graceful leave protocol | Medium | Wire `node.leave()` into simulation |
-| BUGGIFY-style injection | Low | Probabilistic faults at protocol decision points |
-| Re-join after partition heal | Low | Auto-rediscovery mechanism (not standard SWIM) |
diff --git a/docs/development_history/distribution/SWIM_FLAKY_TEST_POSTMORTEM.md b/docs/development_history/distribution/SWIM_FLAKY_TEST_POSTMORTEM.md
deleted file mode 100644
index f8ec9b6..0000000
--- a/docs/development_history/distribution/SWIM_FLAKY_TEST_POSTMORTEM.md
+++ /dev/null
@@ -1,218 +0,0 @@
-# After-Action: SWIM Flaky Test (`node_death_tombstones_entries`)
-
-> A ~20% failure rate in a SWIM death-detection test sat undetected because every gate that should have caught it — CI, assertion design, test harness correctness, and flakiness discipline — was either absent or structurally unable to surface the bug.
-
----
-
-## 1. Incident Summary
-
-The `node_death_tombstones_entries` test in `registry.rs` failed roughly 1 in 5 runs. Two independent bugs conspired to produce the flakiness:
-
-**Bug 1 — Protocol:** `check_suspicion_timeouts` in `probe.rs` declared nodes dead on timer expiry without checking whether the node was still `Suspect`. If a refutation (Alive with higher incarnation) arrived between suspicion and timeout, the node was killed anyway. The original code:
-
-```rust
-for node_id in expired {
-    if members.declare_dead(node_id) {
-        actions.push(SwimAction::DeclareDead(node_id));
-    }
-    self.cancel_suspicion_timer(node_id);
-}
-```
-
-**Bug 2 — Test harness:** The 3-node gossip loop delivered actions to multiple targets in a single `deliver_actions` call, then attributed all responses to a single `sender_id`. When A ticked and sent pings to both B and C, the responses from both were delivered back to A as if they all came from A — misattributing the sender. This caused C's pings to look like self-pings, triggering false suspicions that fed into Bug 1.
-
-The interaction: the sender misattribution created false suspicions at non-deterministic rates (depending on tick ordering), and the missing state guard turned those false suspicions into false death declarations. When B was falsely declared dead, its name registration was tombstoned and the test's soft assertion silently passed without verifying the mechanism worked.
-
-**The fix** (commit `205dc23`, 2 files, +45/−14): added a `still_suspect` guard before `declare_dead`, and split the gossip loop to deliver to each target node separately so responses carry the correct `sender_id`.
-
-See the commit diff for full technical details. The rest of this document focuses on how a 20% failure rate was merged and what changes prevent it from happening again.
-
----
-
-## 2. How This Got Into the Repo
-
-Five gates should have caught this. All five failed.
-
-### 2a. No CI exists
-
-There is no automated testing infrastructure. No pre-merge checks, no post-push smoke tests. The project uses Forgejo for source hosting. CI integration is being planned separately.
-
-A 20% failure rate is invisible with a single manual `cargo test` — you hit the 80% pass rate and move on. CI running tests on every push would have surfaced the failure within a handful of commits. Without it, the only defense is the developer's willingness to run the test more than once. That is not a defense.
-
-### 2b. The soft assertion hid failures
-
-The test ended with this:
-
-```rust
-let a_resolved = a.resolve_name("b-service");
-
-if a_resolved.is_none() {
-    // A has tombstoned it — propagate to C.
-    gossip_rounds(&mut a, a_id, &mut c, c_id, 5);
-    assert_eq!(c.resolve_name("b-service"), None,
-        "C should see tombstone after B's death propagates");
-}
-// If SWIM hasn't declared death yet, the test still passes — the mechanism
-// is wired, just needs more ticks. The important thing: no panics, clean flow.
-```
-
-If SWIM didn't declare B dead — whether because it correctly needed more ticks *or* because the test harness was broken — the test passed. The comment "the mechanism is wired, just needs more ticks" was written with honest intent but created a test that could never fail for the wrong reason *and* never fail for the right reason. A test that can't fail is not a test.
-
-### 2c. The 2-node test harness doesn't generalize to 3 nodes
-
-The `deliver_actions` helper in `registry.rs` takes a `sender_id` parameter and delivers all actions to a list of target nodes, collecting all responses into a flat `Vec<NodeAction>`. When the caller attributes those responses with a single `sender_id`, the implicit assumption is: every response in the vec came from the same node.
-
-This is correct for 2-node tests — if A sends to B, all responses came from B. Every other test in `registry.rs` and `node_integration.rs` uses exactly this pattern with exactly 2 nodes. It works perfectly.
-
-The `node_death_tombstones_entries` test was the first to use 3 nodes. It passed actions to `deliver_actions` with both B and C in the targets list, then attributed all responses to a single sender. Nobody noticed the attribution broke because:
-
-1. The helper's API doesn't prevent it — it returns a flat `Vec`, not a per-target map.
-2. All other tests were 2-node, establishing a pattern that appeared safe.
-3. The simulation layer (`sim.rs:deliver_actions_tagged_with_net`) already solved this correctly with response-tagged delivery: `Vec<(usize, Vec<NodeAction>)>`. The test harness didn't reuse that pattern.
-
-### 2d. The simulation layer is a false safety net
-
-The simulation test suite is extensive: 19 cluster scenarios and 96 total tests across 7 test files. They exercise partition healing, cascading failures, 50-node convergence, message loss, and actor resolution during network events. They all pass.
-
-But simulation bypasses the unit test harness entirely. `deliver_actions_tagged_with_net` in `sim.rs` routes responses back with the correct `(responder_idx, Vec<NodeAction>)` tagging:
-
-```rust
-fn deliver_actions_tagged_with_net(
-    actions: &[NodeAction],
-    sender_idx: usize,
-    sender_id: NodeId,
-    nodes: &mut [Option<DistributedNode>],
-    node_ids: &[NodeId],
-    net: &mut NetworkState,
-) -> Vec<(usize, Vec<NodeAction>)> {
-```
-
-The simulation proved the protocol works while the unit test harness was silently broken. The simulation caught 0% of this bug because the bug lived in the test harness, not the protocol. Bug 1 (the missing `still_suspect` guard) *could* have been caught by simulation — but only with a scenario specifically designed to refute a suspected node before timeout expiry. No such scenario existed because the guard's absence is only observable under that exact sequence.
-
-### 2e. No flakiness detection discipline
-
-There is no practice of running timing-sensitive tests multiple times before merge. No tooling (`cargo-nextest`, `just test-repeat`, a loop in a shell script) to surface intermittent failures.
-
-A 20% failure rate requires only 5 runs to detect with 99.97% probability: `1 − 0.8^5 = 0.99968`. Nobody ran it 5 times.
-
----
-
-## 3. Preventing This Class of Bug
-
-Each recommendation addresses a specific gap from section 2. They are ordered from structural (make the bug class impossible) to procedural (catch it if it happens).
-
-### 3a. Shared test harness with sender-tagged delivery — DONE
-
-**Gap addressed:** 2c (harness doesn't generalize to 3+ nodes)
-
-**Implemented:** A `TestCluster` harness was extracted into `crates/distribution/tests/common/mod.rs`. It contains:
-
-- `test_config()` — the shared `DistributedNodeConfig` previously duplicated in both test files.
-- `deliver_actions_tagged()` — free function returning `Vec<(usize, Vec<NodeAction>)>` (responses tagged by responder index), modeled on the simulation's `deliver_actions_tagged_with_net`. An `excluded` slice parameter handles death simulation (nodes that neither tick nor receive).
-- `TestCluster` struct — owns parallel `Vec<NodeId>` and `Vec<DistributedNode>` (borrow-split friendly). Public API: `new(n)`, `with_config(n, config)`, `node_id(idx)`, `Index`/`IndexMut` for direct node access, `gossip_rounds(n)`, and `gossip_rounds_excluding(dead, n)`.
-
-`gossip_round()` follows the simulation's `tick_all_and_deliver` pattern: tick all live nodes, deliver with tagged responses, deliver responses back using the responder's identity. Sender misattribution is **structurally impossible** — the tagged return type forces correct attribution at every delivery step.
-
-All duplicated helpers (`deliver_actions`, `form_cluster`, `join_nodes`, `gossip_rounds`) were removed from both `registry.rs` and `node_integration.rs`. 4 multi-node tests in `registry.rs` and 6 in `node_integration.rs` were rewritten to use `TestCluster`. Single-node tests use only `test_config()` from common.
-
-The formerly flaky `node_death_tombstones_entries` went from a 50-line manual per-target delivery loop to 3 calls: `cluster.gossip_rounds(5)`, `cluster.gossip_rounds_excluding(&[1], 20)`, `cluster.gossip_rounds_excluding(&[1], 5)`. Verified 50/50 passes post-rewrite.
-
-### 3b. Hard assertions, no soft paths
-
-**Gap addressed:** 2b (soft assertion)
-
-Every test must assert on its expected outcome unconditionally. No `if result.is_none() { ... }` pass-either-way branches. If SWIM needs more ticks to detect death, give it more ticks. Don't let the test pass when the expected behavior didn't happen.
-
-Add negative assertions where applicable. For instance, after B dies, assert that C is still Alive — not just that B is Dead. This catches false-positive death declarations that spill over to healthy nodes.
-
-### 3c. `declare_dead` state contract
-
-**Gap addressed:** defense in depth
-
-`MemberList::declare_dead` currently accepts any non-`Dead` state:
-
-```rust
-pub fn declare_dead(&mut self, node_id: NodeId) -> bool {
-    if let Some(entry) = self.members.get_mut(&node_id) {
-        if entry.state != MemberState::Dead {
-            entry.state = MemberState::Dead;
-            return true;
-        }
-    }
-    false
-}
-```
-
-It should guard that the node is `Suspect` at the point of call, not leave correctness to callers. The SWIM protocol invariant is: a node transitions `Alive → Suspect → Dead`. Killing an `Alive` node directly violates that invariant. The caller (`check_suspicion_timeouts`) now checks, but the function's own contract should enforce the invariant independently.
-
-### 3d. Multi-run flakiness detection — RESOLVED (policy)
-
-**Gap addressed:** 2e (no flakiness discipline)
-
-**Policy:** No flaky tests are accepted into the repository. Tests must pass deterministically. Timing-sensitive tests involving 3+ nodes should be run multiple times before merge to verify stability. Tooling (`cargo-nextest`, `justfile` targets) can be adopted as needed but the policy is the primary gate.
-
-### 3e. CI
-
-**Gap addressed:** 2a (no CI)
-
-The project uses Forgejo for source hosting. CI workflow integration is being planned separately and is not an action item for this postmortem. When available, the CI pipeline should run `cargo test --workspace` on push to main and on PR. Stretch: `cargo nextest run --retries 3` to specifically surface flaky tests before merge.
-
-### 3f. Simulation scenario for suspect-then-refute — DONE
-
-**Gap addressed:** 2d (simulation didn't test the violated invariant)
-
-**Implemented:** `suspect_refuted_before_timeout_no_false_death` in `crates/simulation/tests/cluster_scenarios.rs`. 3-node cluster with asymmetric partitions making node 1 unreachable by probes from nodes 0 and 2, while node 1's outgoing messages still carry incarnation bumps enabling refutation. Partitions heal before the suspicion timer fires. Asserts all 3 nodes alive (no false deaths) and 100% membership accuracy after refutation.
-
----
-
-## 4. Files Modified
-
-| File | Change |
-|------|--------|
-| `crates/distribution/src/swim/probe.rs` | Added `still_suspect` guard in `check_suspicion_timeouts`; cancel probe phase if target declared dead (+20/−2) |
-| `crates/distribution/tests/registry.rs` | Split 3-node gossip delivery to per-target calls with correct sender attribution (+25/−12) |
-
-### Follow-up: Flaky tests removed and replaced
-
-The three tests with pass-either-way assertions were removed and replaced with deterministic equivalents:
-
-| File | Test | Change |
-|------|------|--------|
-| `crates/distribution/tests/swim_node.rs` | `membership_updates_piggyback_on_pings` | Replaced `if !pings.is_empty()` guard with hard assertion; tick 6 to ensure probe fires |
-| `crates/distribution/tests/swim_node.rs` | `leave_enqueues_death_for_dissemination` | Replaced tautological `alive_count() > 0` fallback with hard assertion on piggyback |
-| `crates/distribution/tests/registry.rs` | `node_death_tombstones_entries` | Replaced soft `if a_resolved.is_none()` branch with unconditional `assert_eq!` |
-
-Additionally, `MemberList::declare_dead` was tightened to only accept `Suspect → Dead` transitions, enforcing the SWIM lifecycle invariant at the function boundary.
-
-### Follow-up: Shared `TestCluster` harness (recommendation 3a)
-
-Extracted a shared test harness that makes sender-misattribution structurally impossible:
-
-| File | Change |
-|------|--------|
-| `crates/distribution/tests/common/mod.rs` | **New** — `test_config()`, `deliver_actions_tagged()`, `TestCluster` struct |
-| `crates/distribution/tests/registry.rs` | Removed `test_config`, `deliver_actions`, `form_cluster`, `gossip_rounds` helpers; added `mod common`; rewrote 4 multi-node tests to use `TestCluster` |
-| `crates/distribution/tests/node_integration.rs` | Removed `test_config`, `deliver_actions`, `join_nodes` helpers; added `mod common`; rewrote 6 multi-node tests to use `TestCluster` |
-| `crates/distribution/src/node.rs` | Added `#[derive(Clone)]` on `DistributedNodeConfig` (required by `TestCluster::with_config`) |
-| `crates/distribution/src/registry.rs` | Added `#[derive(Clone)]` on `RegistryConfig` (transitive requirement) |
-
-### Follow-up: `watch_notification` missing `StdExtension`
-
-The `watch_notification` test in `crates/bin-runner/tests/wasm_actor.rs` panicked because the runtime was created without `StdExtension`, which `ctx.watch()` requires (via `get_ext()` in `crates/std/src/ctx_ext.rs`). Every other test in the workspace that uses `ctx.watch()` installs the extension — this one was simply missed.
-
-Same root cause pattern as the SWIM flaky test: a test harness setup gap that was invisible because no other test exercised that path with that configuration. Unlike the SWIM bug, this was a hard failure (panic), not a flaky one — it failed 100% of the time.
-
-| File | Change |
-|------|--------|
-| `crates/bin-runner/tests/wasm_actor.rs` | Added `StdExtension` to imports; installed `.with_extension(Arc::new(StdExtension::new()))` on the runtime in `watch_notification` |
-
-32/32 bin-runner tests now pass.
-
----
-
-## 5. Verification
-
-- **Post-fix:** 0/50 failures (was ~10/50 pre-fix)
-- **Full distribution suite:** all tests pass
-- **Simulation suite:** all 96 tests pass (unaffected — the bugs were in the unit test harness and a protocol guard, not the simulation layer)
-- **Post-`TestCluster` extraction:** all 149 distribution tests pass; `node_death_tombstones_entries` verified 50/50 passes after rewrite to `TestCluster`; all 65 simulation tests unaffected
diff --git a/docs/development_history/distribution/WIRE_HINTS_BUGFIX.md b/docs/development_history/distribution/WIRE_HINTS_BUGFIX.md
deleted file mode 100644
index dd3b7fe..0000000
--- a/docs/development_history/distribution/WIRE_HINTS_BUGFIX.md
+++ /dev/null
@@ -1,534 +0,0 @@
-# Bugfixes: TCP Wire Hints + iroh Driver Join Protocol
-
-> Two bugs found during first LAN cluster test without Docker.
-> Same session, same root pattern: send path built, receive path left incomplete, no integration test.
-
----
-
-## Table of Contents
-
-### Part 1 — TCP Wire Frame Address Hints Never Decoded
-*3 files changed · ~40 insertions, ~30 deletions*
-
-1. [Symptom](#1-symptom)
-2. [Root Cause](#2-root-cause)
-3. [How It Happened](#3-how-it-happened)
-4. [The Fix](#4-the-fix)
-5. [Test Added](#5-test-added)
-6. [Why Existing Tests Missed It](#6-why-existing-tests-missed-it)
-7. [Preventing This Class of Bug](#7-preventing-this-class-of-bug)
-
-### Part 2 — iroh Driver Join Protocol Never Worked
-*1 file changed · ~40 insertions, ~60 deletions*
-
-8. [Symptom (iroh)](#8-symptom-iroh)
-9. [Root Cause (iroh)](#9-root-cause-iroh)
-10. [How It Happened (iroh)](#10-how-it-happened-iroh)
-11. [The Fix (iroh)](#11-the-fix-iroh)
-12. [What IROH_TRANSPORT.md Said vs What the Code Did](#12-what-iroh_transportmd-said-vs-what-the-code-did)
-13. [Current State: What Works, What Worries Me](#13-current-state-what-works-what-worries-me)
-14. [Preventing This Class of Bug (Revised)](#14-preventing-this-class-of-bug-revised)
-
----
-
-## 1. Symptom
-
-Two `swactor-node` processes on separate machines (devuan-hpz at 192.168.1.106, thinkpad at 192.168.1.102) started, connected over TCP, and the joiner printed `Joining cluster via seed 192.168.1.102:7000` with no error. Yet both nodes reported empty SWIM member lists indefinitely. The AGENTS diagnostic protocol confirmed it:
-
-```
-curl localhost:9090/api/investigate?cmd=overview
-→ "actors": 10, "workers": 2, ...   (runtime healthy)
-
-curl localhost:9090/events | grep members
-→ "members":[]                       (SWIM membership empty)
-```
-
-TCP connectivity was verified (`nc -zv 192.168.1.102 7000` → open). The port was listening. The join message was sent. But membership never formed.
-
----
-
-## 2. Root Cause
-
-Three related bugs in the TCP transport layer, all stemming from an incomplete implementation of address hints in the wire protocol.
-
-### Bug A: Encoding/decoding mismatch
-
-`encode_wire_envelope_with_hints()` in `driver.rs` wrote frames in an extended format:
-
-```
-[4B frame_len][32B dest][4B tag_len][tag][4B hints_len][hints_json][payload_json]
-```
-
-But `read_wire_envelope()` in `transport.rs` decoded the original format:
-
-```
-[4B frame_len][32B dest][4B tag_len][tag][remaining → payload]
-```
-
-Everything after the type tag — including the 4-byte `hints_len` field and the hints JSON — was slurped into `payload`. When `serde_json::from_slice` tried to deserialize the message, it hit the `hints_len` prefix bytes (not valid JSON) and silently failed.
-
-### Bug B: Hints never extracted from the wire
-
-Even if decoding had been correct, `TcpAcceptor::try_recv()` returned `Vec<(WireEnvelope, SocketAddr)>` with no mechanism to pass hints back to the caller.
-
-### Bug C: `learn_hints()` never called
-
-`NodeDriver::recv()` discarded the peer address (`_peer_addr`) and never called the existing `learn_hints()` method, leaving the `PeerAddressBook` permanently empty. Without the address book, the seed couldn't resolve the joiner's `NodeId` to a `SocketAddr` to send the `JoinResponse` back.
-
-### The cascade
-
-1. Node A sends `JoinRequest` with hints `[{A.node_id, A.listen_addr}]` to B
-2. B's decoder corrupts the payload → `JoinRequest` deserializes anyway (simple struct, hints prepended but serde is lenient with trailing data for some formats — but actually fails here because the hints_len bytes precede the JSON)
-3. Even if B somehow processes the `JoinRequest` and generates a `SendJoinResponse` action, B calls `resolve_addr(A.node_id)` which fails because A's address was never learned from hints
-4. `send_action` prints `driver: send error: no address known for node ...` to stderr
-5. A never receives the `JoinResponse`, membership stays empty on both sides
-
----
-
-## 3. How It Happened
-
-The address hints system was designed during the distribution realization phase (see `DOCKER_REALIZATION.md`) but was never completed. The evidence is in the code itself:
-
-**`driver.rs:331-342` contained this comment block:**
-
-```rust
-// Extract hints from the envelope's payload prefix (if present)
-// For simplicity in the wire format, hints are embedded at the end of the
-// type_tag as a JSON suffix. But actually, we'll use the existing frame format
-// and embed hints in a slightly different way.
-//
-// Actually, for backwards compatibility with the existing wire format,
-// we'll detect and parse hints from the peer_addr on the TCP socket.
-// The actual hint extraction happens via the message payloads for now.
-//
-// For this first pass: we parse the message and extract the sender's NodeId
-// from the message itself, then associate it with the peer address.
-```
-
-This reads as a stream of consciousness — three contradictory approaches considered, none implemented. The comment "for this first pass" suggests intent to revisit, but the revisit never happened.
-
-**Likely sequence of events:**
-
-1. The encoding side (`encode_wire_envelope_with_hints`, `send_wire_with_hints`) was implemented first — it's the simpler direction (just add bytes to the buffer)
-2. The decoding side was deferred. The comment block shows uncertainty about how to handle it
-3. The Docker integration tests — which should have caught this — used a 5-node cluster where all nodes joined the same seed. The seed learned joiner addresses not from hints but from the TCP peer address on the accepted connection. In a Docker bridge network with static IPs, the peer address **happens to be the same as the listen address** (no NAT, no ephemeral ports for the listener side). So the Docker tests passed by accident
-4. The `learn_hints()` method was written (correct implementation) but the call site in `recv()` was never added
-5. The existing `transport_and_codec.rs` TCP tests used `TcpTransport::send_to()` which calls `encode_wire_envelope()` (no hints), not `encode_wire_envelope_with_hints()`. So the roundtrip tests passed because they never exercised the extended frame format
-
-**In short**: the send path was built, the receive path was left as a TODO, and the test infrastructure didn't exercise the gap.
-
----
-
-## 4. The Fix
-
-### `crates/distribution/src/transport.rs`
-
-**Unified wire format.** Changed `encode_wire_envelope()` to always write a `[4B hints_len=0]` field, making both the hint-aware and hint-free encoders produce the same frame structure:
-
-```
-[4B frame_len][32B dest][4B tag_len][tag][4B hints_len][hints][payload]
-```
-
-Updated `read_wire_envelope()` and `read_envelope_blocking()` to parse `hints_len`, extract hints bytes, then read the remaining as payload. Changed return type to `(WireEnvelope, Vec<u8>)`.
-
-Updated `try_recv()` return type to `Vec<(WireEnvelope, SocketAddr, Vec<u8>)>` to propagate hints.
-
-### `crates/distribution/src/driver.rs`
-
-**Wired hints into the receive pipeline.** Updated `recv()` to:
-
-1. Destructure the 3-tuple from `try_recv`
-2. Deserialize hints bytes as `Vec<AddressHint>`
-3. Call `self.learn_hints()` **before** dispatching the message
-
-The ordering matters: hints must be learned before dispatch because `dispatch_incoming` may generate response actions (e.g., `SendJoinResponse`) that need to resolve the sender's address from the address book.
-
-Removed the stale comment block in `dispatch_incoming`.
-
-### `crates/distribution/tests/transport_and_codec.rs`
-
-Updated existing TCP test destructuring for the new 3-tuple. Added `two_drivers_complete_join_handshake` scenario test (see below).
-
----
-
-## 5. Test Added
-
-```rust
-#[test]
-fn two_drivers_complete_join_handshake()
-```
-
-**Scenario:** Two `NodeDriver` instances on localhost. Driver A joins Driver B. After two `recv()` rounds (B processes join request + sends response, A processes response), assert that A's member list is non-empty.
-
-**Why this test catches the bug:** If hints are broken, B cannot resolve A's address to send the `JoinResponse`. A never receives it, and its member list stays empty. The test asserts on the observable outcome (join completes) without coupling to hint extraction internals.
-
-This is a contract-level test that would survive a complete refactor of the hint mechanism — as long as two drivers can join over TCP, it passes.
-
----
-
-## 6. Why Existing Tests Missed It
-
-### Simulation: bypasses wire encoding entirely
-
-`crates/simulation/src/distribution/sim.rs:619` — `deliver_actions_tagged_with_net()` matches on `NodeAction` variants and calls handler methods directly:
-
-```rust
-NodeAction::SendJoinResponse { to, members, .. } => {
-    if let Some(ref mut node) = nodes[idx] {
-        let resp = node.handle_join_response(members.clone());
-        // ...
-    }
-}
-```
-
-No `WireEnvelope`, no TCP, no `encode_wire_envelope_with_hints`, no `read_wire_envelope`. The simulation tests exercise the SWIM protocol state machine in isolation from the transport. This is a valid architecture for testing protocol correctness — but it creates a blind spot at the transport boundary.
-
-### TCP transport tests: used the wrong encoder
-
-The existing `wire_envelope_roundtrips_through_tcp` test used `TcpTransport::send_to()`, which calls `encode_wire_envelope()` (the hint-free encoder). The hint-aware encoder `encode_wire_envelope_with_hints()` lived in `driver.rs` and was never tested in isolation or via a roundtrip.
-
-### Docker integration tests: worked by coincidence
-
-In the Docker bridge network, each container has a static IP. When node-2 connects to the seed, the seed sees the peer address as `10.0.1.11:EPHEMERAL` — but the original `driver.rs` learned addresses from the `from_addr` field inside the `Ping` message, not from wire hints. The join path bypassed hints entirely because `handle_join_request(from)` doesn't need an address — it returns a `SendJoinResponse { to: from_node_id }`, and the address was already in the book from earlier Ping exchanges.
-
-Wait — actually, that's not right either. Looking more carefully: in Docker, the seed received the `JoinRequest` and generated `SendJoinResponse { to: joiner_node_id }`. It then needed to `resolve_addr(joiner_node_id)`. Since `from_addr` was only in Ping messages (not JoinRequest), how did Docker tests pass?
-
-The answer is in the original `driver.rs` before the hints refactor: the `JoinRequest` message originally carried a `from_addr: SocketAddr` field (see `DOCKER_REALIZATION.md` §4), and the driver learned the joiner's address from it directly. The hints mechanism was added later as a more general replacement, but the `from_addr` field was removed from `JoinRequest` at the same time. The hints were supposed to carry that information instead — but the receive side was never completed.
-
-This means the bug was **introduced** during the hints refactor itself. The old `from_addr`-based path worked; the new hints-based path was half-built.
-
----
-
-## 7. Preventing This Class of Bug
-
-### The pattern: asymmetric encode/decode implementations
-
-This is a classic serialization bug. The encoder and decoder were implemented at different times, possibly by different prompts/sessions, and the decoder was left incomplete. The encoder compiles and runs fine in isolation — you can write bytes to TCP all day. The decoder compiles and runs fine too — it just reads the wrong bytes. No type system catches this because both sides deal in `Vec<u8>`.
-
-### Recommendations
-
-**1. Roundtrip tests for every wire format change.**
-
-Any time the wire format gains a new field or section, add a test that encodes a frame and decodes it back, asserting field equality. The existing `wire_envelope_roundtrips_through_tcp` test did this for the basic format but was never updated for the extended format with hints. Rule: **if you add an encoder, add the matching decoder test in the same commit.**
-
-**2. Integration tests that assert on protocol outcomes, not just connectivity.**
-
-The Docker tests asserted that nodes converge (alive_count >= N). This is good but insufficient — the tests passed because the old `from_addr` mechanism was still partially functional. A stronger assertion would have been: "the seed's address book contains the joiner's address after a join" — but that's white-box. The best middle ground is scenario tests like `two_drivers_complete_join_handshake` that test the full join flow over real TCP without Docker overhead.
-
-**3. One canonical frame format.**
-
-The root cause was two encoder functions (`encode_wire_envelope` and `encode_wire_envelope_with_hints`) producing different frame layouts consumed by one decoder. The fix unified them: `encode_wire_envelope` now writes `hints_len=0`, so there's exactly one frame format. **Never have two encoders for one decoder.**
-
-**4. Don't defer the receive side.**
-
-The comment block in `dispatch_incoming` was a red flag: three approaches considered, none implemented, marked "first pass." If the send side is too complex to decode immediately, that's a sign the design needs simplification before the send side ships. Ship encode and decode together or not at all.
-
-**5. Simulation/transport boundary coverage.**
-
-The simulation's direct-call architecture is correct for testing protocol logic at speed. But it means every transport-layer feature (wire format extensions, connection management, address resolution) needs its own test layer. Consider a "simulation over loopback TCP" mode that exercises the wire format without requiring Docker.
-
----
-
-## Files Modified
-
-| File | Change |
-|------|--------|
-| `crates/distribution/src/transport.rs` | Unified wire format with hints_len field; updated encoder, both decoders, and `try_recv` |
-| `crates/distribution/src/driver.rs` | `recv()` extracts and learns hints before dispatch; removed stale comment |
-| `crates/distribution/tests/transport_and_codec.rs` | Updated destructuring in 3 existing tests; added `two_drivers_complete_join_handshake` |
-
-## Verification (TCP)
-
-- `cargo test -p distribution` — 149 tests pass (including new scenario test)
-- `cargo test` — full workspace green (35 core tests + 149 distribution tests)
-- Live 2-node LAN cluster: both nodes report each other as `alive` with resolved addresses via the AGENTS protocol
-
----
-
-# Bugfix: iroh Driver Join Protocol Never Worked
-
-> 1 file changed · ~40 insertions, ~60 deletions
->
-> Discovered immediately after fixing TCP hints, when testing iroh transport for the first time between two real machines
-
----
-
-## Table of Contents (Part 2)
-
-8. [Symptom (iroh)](#8-symptom-iroh)
-9. [Root Cause (iroh)](#9-root-cause-iroh)
-10. [How It Happened (iroh)](#10-how-it-happened-iroh)
-11. [The Fix (iroh)](#11-the-fix-iroh)
-12. [What IROH_TRANSPORT.md Said vs What the Code Did](#12-what-iroh_transportmd-said-vs-what-the-code-did)
-13. [Current State: What Works, What Worries Me](#13-current-state-what-works-what-worries-me)
-14. [Preventing This Class of Bug (Revised)](#14-preventing-this-class-of-bug-revised)
-
----
-
-## 8. Symptom (iroh)
-
-After fixing the TCP wire hints bug and confirming a 2-node TCP cluster, we switched to `--transport iroh` to test the QUIC/P2P path. Local node (devuan-hpz) started as seed. Thinkpad joined with `--seed-node-id <local's public key>`.
-
-```
-Node fcc58a98 started (iroh)
-Joining cluster via seed f4b6e9fe
-iroh driver: join error to f4b6e9fe...: connection lost
-```
-
-The iroh connection was established (iroh's DNS address lookup via pkarr/n0 resolved the seed), but the join handshake failed with "connection lost." Membership stayed empty on both sides.
-
----
-
-## 9. Root Cause (iroh)
-
-Three bugs in `iroh_driver.rs`, all in the connection/stream management layer. Like the TCP hints bug, each one alone would prevent the join handshake from completing.
-
-### Bug A: `send_join_request` blocked on a bidi response that could never arrive
-
-The joiner opened a **bidirectional** QUIC stream to send the `JoinRequest` and then waited for the `JoinResponse` on the recv half of the same stream:
-
-```rust
-let (mut send, mut recv) = conn.open_bi().await?;
-write_message(&mut send, tag.as_bytes(), &payload).await?;
-send.finish()?;
-// Blocks here forever:
-let (resp_tag, resp_payload) = read_message(&mut recv).await?;
-```
-
-The seed's `read_streams()` accepted the bidi stream but **discarded the send half**:
-
-```rust
-Ok(Ok((_send, mut recv))) => {
-    match read_message(&mut recv).await { ... }
-```
-
-The JoinRequest was read and dispatched. `dispatch_incoming` generated `NodeAction::SendJoinResponse`. `send_actions` called `send_message`, which opened a **new uni stream** on a separate connection. The response went out — but not on the bidi stream the joiner was waiting on. The joiner blocked indefinitely until the QUIC idle timeout fired → "connection lost."
-
-### Bug B: Accepted connections were never cached
-
-`receive_pending()` accepted incoming connections via `endpoint.accept()`, read their streams, then let the `Connection` drop at the end of the `match` arm. The connection was never inserted into `self.connections`:
-
-```rust
-Ok(Some(incoming)) => {
-    if let Ok(conn) = incoming.await {
-        let remote_id = conn.remote_id();
-        self.read_streams(&conn, remote_id, &mut messages).await;
-        // conn drops here — never cached
-    }
-}
-```
-
-This meant the seed had no way to send messages back to the joiner through the connection the joiner established.
-
-### Bug C: `dispatch_incoming` tried to `connect()` back to the joiner
-
-Because the accepted connection was lost, the seed's JoinRequest handler tried to establish a **new outbound** connection to the joiner:
-
-```rust
-"swactor_dist::JoinRequest" => {
-    // ...
-    if !self.connections.contains_key(&from) {
-        let endpoint = self.endpoint.clone();
-        if let Ok(conn) = self.rt.block_on(async {
-            endpoint.connect(key, ALPN).await
-        }) {
-            self.connections.insert(from, conn);
-        }
-    }
-```
-
-This required the **joiner** to have already published its address to n0's DNS/pkarr infrastructure — a process that takes seconds. If the joiner hadn't published yet, `endpoint.connect()` failed silently. Even if it succeeded, this created a second connection instead of reusing the one the joiner already established — doubling connection state and introducing asymmetric routing.
-
-### The cascade
-
-1. Joiner connects to seed via iroh (address resolved through DNS/pkarr), opens bidi stream, sends JoinRequest, blocks on bidi recv
-2. Seed accepts connection, reads JoinRequest from bidi stream, discards `_send` half
-3. Seed processes JoinRequest → generates `SendJoinResponse { to: joiner_id }`
-4. Seed's `send_message()` calls `get_or_connect(joiner_id)` — no cached connection
-5. Seed tries `endpoint.connect(joiner_key, ALPN)` — fails if joiner hasn't published to DNS yet, or creates a redundant second connection
-6. Even if step 5 succeeds, response goes out on a uni stream of a different connection — the joiner never sees it
-7. Joiner's bidi recv times out → "connection lost"
-8. Membership stays empty on both sides
-
----
-
-## 10. How It Happened (iroh)
-
-`IROH_TRANSPORT.md` §7 describes the intended join protocol:
-
-> *"Joiner calls `join(&[PublicKey])` — for each seed, opens a bidi stream, sends `JoinRequest`, reads `JoinResponse`"*
->
-> *"Seed receives `JoinRequest` on a bidi stream, generates response via `node.handle_join_request()`, writes `JoinResponse` back on the same stream"*
-
-The design called for the seed to write the `JoinResponse` back on the **same bidi stream**. The code never implemented this. Here's what was actually built:
-
-1. **Joiner side**: correctly opens bidi, sends request, waits for response on bidi recv half. This matches the design.
-2. **Seed side**: reads bidi streams via `read_streams()`, but discards the send half (`_send`). Messages are collected into a `Vec<(tag, payload, from_key)>` — no mechanism to carry the send stream back to the dispatcher. The response goes through `dispatch_incoming` → `send_actions` → `send_message` → opens a new uni stream. This does **not** match the design.
-
-The disconnect: `read_streams` was written to collect messages generically (from both uni and bidi streams). The generic collection model (`Vec<(String, Vec<u8>, PublicKey)>`) has no slot for a "response channel." The bidi send half would need to be threaded through to the JoinRequest handler specifically — a special case the generic model doesn't accommodate.
-
-The likely sequence:
-
-1. `send_message` and `get_or_connect` were implemented first — they handle all outgoing messages generically through uni streams
-2. `receive_pending` and `read_streams` were implemented as the generic receive path
-3. `send_join_request` was written to use bidi, matching the design doc
-4. The seed-side bidi response path was **never implemented** — the generic receive/dispatch/send pipeline was assumed to handle it, but it routes responses through `send_message` which opens new uni streams
-5. The `dispatch_incoming` JoinRequest handler added a `connect()` back to the joiner as a workaround for not having the accepted connection cached — but this workaround depends on DNS publication timing
-6. No integration test ever exercised the two-driver join path over real iroh connections (the three existing iroh tests check identity and snapshots only)
-
-**In short**: the same pattern as the TCP hints bug. The send path was built. The design doc described a receive path. The receive path was never connected to the send path. No test covered the gap.
-
----
-
-## 11. The Fix (iroh)
-
-### `crates/distribution/src/iroh_driver.rs`
-
-**Changed `send_join_request` to fire-and-forget.** Replaced bidi stream with uni stream. The joiner sends the `JoinRequest` and returns immediately. The `JoinResponse` arrives later through the normal `recv()` loop — the seed sends it back over the connection the joiner established (which is now properly cached).
-
-```rust
-// Before: blocked on bidi response that never came
-let (mut send, mut recv) = conn.open_bi().await?;
-write_message(&mut send, tag.as_bytes(), &payload).await?;
-send.finish()?;
-let (resp_tag, resp_payload) = read_message(&mut recv).await?;
-
-// After: fire-and-forget on uni stream
-let mut send = conn.open_uni().await?;
-write_message(&mut send, tag.as_bytes(), &payload).await?;
-send.finish()?;
-```
-
-**Changed `receive_pending` to return accepted connections.** Return type changed from `Vec<(String, Vec<u8>, PublicKey)>` to `(Vec<...>, Vec<(NodeId, Connection)>)`. `recv()` inserts new connections into `self.connections` via `entry().or_insert()` before dispatching messages.
-
-This ordering matters: connections must be cached **before** dispatch, because `dispatch_incoming` may generate response actions that need to route back through the newly cached connection.
-
-**Removed the `connect()` back-connect in `dispatch_incoming`.** The JoinRequest handler no longer tries to establish a new outbound connection to the joiner. The accepted incoming connection is already cached from `receive_pending`. `send_message` → `get_or_connect` finds it in the cache.
-
-**Removed bidi stream handling from `read_streams`.** Since all messages now use uni streams, the bidi accept loop was removed. This eliminates dead code and makes the stream model consistent: uni streams only, everywhere.
-
----
-
-## 12. What IROH_TRANSPORT.md Said vs What the Code Did
-
-| IROH_TRANSPORT.md §7 claim | Actual behavior before fix |
-|---|---|
-| "Opens a bidi stream, sends JoinRequest, reads JoinResponse" | Correct on joiner side. But seed never wrote to the bidi send half. |
-| "Seed receives JoinRequest on a bidi stream, generates response via handle_join_request(), writes JoinResponse back on the same stream" | Seed read from bidi, dispatched to generic handler, sent response on a **new uni stream** via `send_message`. Never wrote back on the bidi stream. |
-| "Both uni and bidi streams are polled" (§7, Receiving Messages) | Bidi streams were polled, but the send half was discarded. Only the recv half was read — functionally identical to uni. |
-| "On send, the driver checks the cache" (§7, Connection Caching) | Accepted connections were never put in the cache. Only outbound connections (from `get_or_connect`) were cached. |
-
-The design doc was written to describe intended behavior. The code was written to pass identity/snapshot tests. The gap between intent and implementation was never tested because no integration test exercised the multi-node join path.
-
-After the fix, the design is simpler than what the doc described: **all messages use uni streams, including JoinRequest**. The bidi request-response pattern is gone entirely. The JoinResponse arrives asynchronously through the normal `recv()` loop, same as Ping/Ack/PingReq. The join protocol now works identically to how it works over TCP — fire JoinRequest, seed processes and sends JoinResponse via its own send path, joiner picks it up on the next recv cycle.
-
-`IROH_TRANSPORT.md` §7 and §10.3 should be updated to reflect this. The doc currently describes a bidi join protocol that no longer exists.
-
----
-
-## 13. Current State: What Works, What Worries Me
-
-### What works
-
-- Two nodes on separate machines join and maintain SWIM membership over iroh QUIC
-- Peer discovery via n0's DNS/pkarr infrastructure (joiner resolves seed's public key → relay URL → direct address)
-- SWIM probes flow bidirectionally (Ping/Ack over uni streams on cached connections)
-- Connection caching: seed caches the joiner's accepted connection, joiner caches its outbound connection
-- Hot reconnect: `send_message` evicts stale connections and retries once
-
-### What worries me
-
-**1. No integration test for iroh join handshake.**
-
-The three existing iroh tests (`iroh_driver_creates_with_unique_identity`, `iroh_driver_snapshot_contains_node_id`, `iroh_driver_identity_matches_iroh_endpoint`) test identity alignment and snapshot structure. None of them test two `IrohDriver`s joining and exchanging SWIM probes. The TCP driver has `two_drivers_complete_join_handshake` — the iroh driver has no equivalent.
-
-Writing one is non-trivial because `IrohDriver` owns a tokio runtime internally and needs iroh's address lookup infrastructure to resolve peers. A loopback test would either need an in-memory address lookup or `Endpoint::builder().address_lookup(MemoryLookup)` wiring. This should be the next thing built.
-
-**2. `entry().or_insert()` silently drops fresh connections.**
-
-When `recv()` caches new connections:
-
-```rust
-self.connections.entry(node_id).or_insert(conn);
-```
-
-If a connection for that `NodeId` already exists (e.g., a stale outbound connection), the fresh inbound connection is silently dropped. The driver continues using the old (possibly broken) connection. This should use `insert()` to unconditionally replace, or at minimum check `close_reason()` on the existing connection before deciding which to keep.
-
-**3. 1ms timeout polling is a scheduling lottery.**
-
-`receive_pending` and `read_streams` use `tokio::time::timeout(Duration::from_millis(1), ...)`. If a message arrives 2ms after the poll, it waits until the next main loop iteration (100ms later). For SWIM probes with a 3-second timeout, this is fine. For join latency, it means the JoinResponse takes at least one main loop cycle (100ms) to arrive instead of arriving immediately.
-
-The alternative — longer poll timeouts — would make `recv()` block longer, delaying `tick()` and heartbeats. The right fix is making the main loop async (select on endpoint events + tick timer), but that's a larger refactor.
-
-**4. Relay dependency on n0's infrastructure.**
-
-`Endpoint::builder()` applies the `N0` preset which publishes addresses to and resolves from n0.computer's pkarr relay and DNS servers. If those servers go down, nodes can't discover each other by public key alone. For LAN-only clusters, this is unnecessary overhead and a reliability risk. The `address-lookup-mdns` feature (mDNS local discovery) would eliminate the WAN dependency for LAN clusters but requires the `address-lookup-mdns` cargo feature on iroh, which isn't currently enabled.
-
-**5. The `_from` parameter in `dispatch_incoming` is unused.**
-
-After removing the `connect()` call, the `from: NodeId` parameter is no longer used. It's renamed to `_from` to suppress the warning, but its existence is a code smell — it suggests the dispatcher might need sender identity for something, but currently doesn't. The sender identity is already embedded in the message payloads (`Ping.from`, `JoinRequest.from`, etc.), so the parameter is truly redundant.
-
-**6. Connection lifecycle is unclear on longer timescales.**
-
-The `connections` HashMap grows monotonically — connections are added but only removed when a send fails. If a node joins, leaves, and a new node with a different identity takes its place, the old connection lingers. There's no periodic cleanup, no max connection count, no TTL. For a 2-node test this is irrelevant. For a 50-node cluster running for hours, the HashMap could accumulate stale entries.
-
----
-
-## 14. Preventing This Class of Bug (Revised)
-
-Both the TCP hints bug and the iroh driver bug share the same root pattern. Updating the recommendations from §7 with what we learned.
-
-### The pattern: design docs that describe untested behavior
-
-Both bugs were in code that had accompanying design documentation (DOCKER_REALIZATION.md for TCP hints, IROH_TRANSPORT.md §7 for iroh join). The docs described correct behavior. The code didn't implement it. The tests didn't check.
-
-A design doc is not a test. A design doc that describes send-then-receive behavior is especially dangerous because both sides compile independently — the compiler can't tell you that the send side is writing bytes nobody reads, or that the receive side is discarding a stream handle the send side is waiting on.
-
-### Revised recommendations
-
-**1. Every driver gets a join handshake integration test. (Upgraded from "roundtrip tests" to "scenario tests.")**
-
-Not "test that encoding roundtrips" — test that **two drivers can join and form a cluster**. The TCP driver now has `two_drivers_complete_join_handshake`. The iroh driver needs the equivalent. The test asserts on the observable outcome (member list is non-empty after join), not on internal state. If the join protocol changes, the test still passes as long as joining works.
-
-**2. Don't mix stream patterns in the same protocol.**
-
-The original iroh driver used uni streams for Ping/Ack/PingReq/JoinResponse and bidi streams for JoinRequest→JoinResponse. The `read_streams` function had to handle both, and the bidi path was broken. The fix: uni streams for everything. One stream pattern, one receive path, one send path. If you need request-response semantics, implement them at the application level (correlation IDs) rather than at the stream level.
-
-**3. If the design doc says "the seed writes back on the same stream," test exactly that.**
-
-The IROH_TRANSPORT.md §7 design was reasonable. The bug wasn't in the design — it was in the implementation diverging from the design without anyone noticing. If a design doc describes a specific data flow, write a test that asserts on that flow before moving on. The test would have immediately shown that the seed wasn't writing to the bidi send half.
-
-In this case, we chose a different design (uni-only, fire-and-forget join) rather than fixing the bidi implementation. That's fine — the simpler design is better. But the doc should be updated to match, and the test should enforce whichever design is chosen.
-
-**4. Cache every connection you accept.**
-
-If `endpoint.accept()` gives you a connection, put it in your connection map. If you don't, you have a one-way channel — you can read from the peer but not write back. This is a general rule for connection-oriented transports: accepted connections are valuable because the remote already established them. Creating a new outbound connection is expensive (address lookup, TLS handshake, relay negotiation) and may fail if the remote hasn't published its address yet.
-
-**5. Test the transport, not just the protocol.**
-
-The simulation tests exercise SWIM correctness at protocol speed. The TCP `two_drivers_complete_join_handshake` exercises the TCP transport. The iroh identity tests exercise endpoint construction. Nobody tested **iroh SWIM over iroh transport**. Each layer was tested in isolation; the integration between them was assumed to work. It didn't.
-
-The testing pyramid for the distribution layer should be:
-- **Protocol tests** (simulation): SWIM state machine correctness, fast, deterministic
-- **Transport tests** (per-driver): two drivers join over real transport, observable outcome
-- **Integration tests** (multi-machine or Docker): full nodes with dashboard, actors, and real network conditions
-
-We have the first tier. We have half of the second (TCP only). We have none of the third for iroh. The iroh transport test is the most urgent gap.
-
----
-
-## Files Modified (iroh fix)
-
-| File | Change |
-|------|--------|
-| `crates/distribution/src/iroh_driver.rs` | `send_join_request`: bidi→uni fire-and-forget; `receive_pending`: returns new connections; `recv()`: caches accepted connections before dispatch; `dispatch_incoming`: removed redundant `connect()` back to joiner; `read_streams`: removed dead bidi handling |
-
-## Verification (iroh)
-
-- `cargo build -p distribution --features iroh` — clean (1 pre-existing warning)
-- `cargo test -p distribution` — 149 tests pass (TCP path unaffected)
-- Live 2-node LAN cluster over iroh:
-  - Local (f4b6e9fe) sees thinkpad (fcc58a98) as `alive`
-  - Thinkpad (fcc58a98) sees local (f4b6e9fe) as `alive`
-  - SWIM probes flowing bidirectionally (16+ probe rounds observed)
-  - Peer discovery via n0 DNS/pkarr infrastructure — no manual address configuration
diff --git a/docs/development_history/distribution/distribution_plan.md b/docs/development_history/distribution/distribution_plan.md
deleted file mode 100644
index 859b975..0000000
--- a/docs/development_history/distribution/distribution_plan.md
+++ /dev/null
@@ -1,353 +0,0 @@
-# Distributed Actor Runtime: Implementation Plan
-
-## Overview
-
-Two-layer distributed system:
-
-1. **SWIM/Lifeguard membership** — node discovery, failure detection, membership gossip.
-2. **Kademlia-style actor directory** — decentralized `actor_id → node` lookup with signed entries, quorum reads, Byzantine-tolerant up to `n ≤ f < 2f + 1`.
-
-Key properties: 256-bit actor IDs, fixed placement (no migration), forwarding on cache miss is acceptable, node count << actor count, actor count unbounded.
-
-```
-┌──────────────────────────────────────────────────┐
-│  Node                                            │
-│                                                  │
-│  Local Registry ─ LRU Cache ─ Directory Shard    │
-│                                                  │
-│  ──── Kademlia Routing Table (256 k-buckets) ──  │
-│                                                  │
-│  ──── SWIM Membership Layer ───────────────────  │
-│                                                  │
-│  ──── Transport (pluggable) ───────────────────  │
-└──────────────────────────────────────────────────┘
-```
-
-### Core Invariants
-
-- `node_id` = ed25519 public key (identity + signing key in one).
-- Directory entries are signed by the spawning node. Replication factor `r = 2f+1`, quorum reads require `f+1` agreement.
-- SWIM membership is a per-node CRDT: higher generation wins, within a generation `dead > suspect > alive`.
-
----
-
-## Existing Infrastructure (what we're building on)
-
-### Already implemented
-
-- **`ActorAddress([u8; 32])`** — 256-bit actor identity, random generation, serde support. Lives in `src/actor.rs`.
-- **Transport layer** (`src/transport.rs`, feature-gated `transport`):
-  - `Transport` trait — `fn send(&self, envelope: WireEnvelope) -> Result<(), Error>`
-  - `Codec<M>` trait — user-provided encode/decode per message type
-  - `NetworkMessage` trait — marker with `type_tag()` for wire routing
-  - `WireEnvelope { dest: ActorAddress, type_tag: String, payload: Vec<u8> }`
-  - `CodecRegistry` — type-erased encoder/decoder dispatch (TypeId → encode, type_tag → decode)
-  - `TransportRouter` — address→transport mapping (`RwLock<HashMap<ActorAddress, Arc<dyn Transport>>>`)
-  - `InMemoryTransport` — in-process transport via mpsc
-  - `send_via_transport()` — crate-internal helper wiring codec+router
-  - TCP transport example with length-prefix framing in `examples/tcp_ping_pong.rs`
-- **Delivery integration** (`src/delivery.rs`):
-  - `TickContext::route_nonlocal()` — tries inbox registry → transport router → error
-  - Message routing already falls through to transport when address is not local
-- **Gossip crate** (`crates/swactor-gossip/`):
-  - LWW key-value gossip (NOT SWIM membership — different protocol)
-  - Full-push gossip (sends entire state each round)
-  - Simulation harness with topologies: Ring, Star, FullMesh, Chain, Partitioned
-  - Event tracing, snapshots, property-based tests
-  - Gossip + runtime dashboards (`crates/gossip-dashboard/`, `crates/runtime-dashboard/`)
-
-### What still needs building
-
-- `NodeId` type (ed25519 public key) — distinct from `ActorAddress`
-- ed25519 crypto primitives (keypair gen, sign, verify)
-- `DirectoryEntry`, `NodeRecord` types
-- SWIM membership protocol (probes, failure detection, dissemination)
-- Piggyback field on `WireEnvelope` for SWIM dissemination
-- Kademlia routing table and lookup
-- Actor directory (STORE / FIND_VALUE with quorum)
-- Node-level integration type
-- Connection pooling and bidirectional TCP listener
-
----
-
-## Workflow
-
-Each chunk: **Think** (understand constraints), **Plan** (design interfaces), **Act** (implement and test).
-
-After each chunk: `git add -A && git commit -m "<chunk summary>"`.
-
----
-
-### Chunk 0: Core Types and Crypto
-
-Define `NodeId` (ed25519 public key wrapper), `Keypair`, `Signature`, `DirectoryEntry`, `NodeRecord`. Leverage existing `ActorAddress` as-is for actor identity. Add `ed25519-dalek` dependency. Implement sign/verify. Unit test serialization round-trips and signature correctness.
-
-**New crate**: `crates/swactor-distribution/` — keeps distribution concerns out of the core runtime.
-
-**Types to define**:
-- `NodeId([u8; 32])` — ed25519 public key, XOR distance for Kademlia
-- `Keypair` — ed25519 signing key + public key
-- `Signature([u8; 64])` — ed25519 signature
-- `NodeRecord { node_id, addr: SocketAddr, generation: u64 }` — SWIM membership record
-- `DirectoryEntry { actor_addr: ActorAddress, node_id: NodeId, generation: u64, signature: Signature }` — signed actor→node binding
-- `MemberState { Alive, Suspect, Dead }` — SWIM state enum
-
-**Files**: `crates/swactor-distribution/src/{lib.rs, types.rs, crypto.rs}`
-
-```bash
-git add -A && git commit -m "chunk-0: distribution crate, core types, crypto primitives"
-```
-
----
-
-### Chunk 1: Transport Extensions
-
-Extend the existing transport layer for distribution needs. The `Transport` trait, `Codec`, `WireEnvelope`, `CodecRegistry`, and `TransportRouter` already exist — this chunk adds what's missing for node-to-node communication.
-
-**Changes**:
-- Add optional `piggyback: Vec<u8>` field to `WireEnvelope` for SWIM dissemination (backward-compatible: empty vec = no piggyback)
-- Promote the TCP transport from the example into a reusable `TcpTransport` in the distribution crate, with connection pooling (`HashMap<SocketAddr, TcpStream>`) and a listening accept loop
-- Add `request()` to `Transport` trait (send + await response) — needed for SWIM probes and Kademlia lookups
-- Register distribution message codecs (`Ping`, `PingReq`, `Ack`, `FindNode`, `Store`, `FindValue`) in a `DistributionCodecRegistry`
-
-**Files**: `crates/swactor-distribution/src/{transport.rs, codec.rs}`, modifications to `src/transport.rs` (piggyback field)
-
-```bash
-git add -A && git commit -m "chunk-1: transport extensions for distribution"
-```
-
----
-
-### Chunk 2: SWIM Probes
-
-Implement the SWIM probe cycle as a state machine in the distribution crate. This is pure protocol logic, testable without networking.
-
-**Components**:
-- `SwimProbe` state machine: periodic random-order pinging, `PingReq` indirect probes on timeout
-- `MemberList` — the membership CRDT: `HashMap<NodeId, (MemberState, incarnation: u64)>`
-- State transitions: `Alive → Suspect → Dead`, with incarnation-based refutation (suspected node bumps incarnation to refute)
-- `SwimConfig` — probe interval, probe timeout, suspicion timeout
-
-**Key design**: The probe logic is a pure function `(current_state, event) → (new_state, actions)` where actions are messages to send. This makes it testable without real networking — reuse the simulation pattern from `swactor-gossip`.
-
-**Files**: `crates/swactor-distribution/src/{swim/mod.rs, swim/probe.rs, swim/member_list.rs}`
-
-```bash
-git add -A && git commit -m "chunk-2: SWIM probe cycle and failure detection"
-```
-
----
-
-### Chunk 3: SWIM Dissemination
-
-Membership changes piggyback on existing protocol messages — no separate gossip channel. This builds on the `piggyback` field added in Chunk 1.
-
-**Components**:
-- Dissemination queue: list of `(MembershipUpdate, transmit_count)` entries
-- Infection-style counting: each update transmitted `Λ * log(n)` times before eviction
-- Priority ordering: `dead > suspect > alive` (most urgent first)
-- Piggyback packing: serialize top-N updates into the piggyback field of outgoing messages
-- Piggyback unpacking: on receive, extract and apply membership updates before processing the primary message
-
-**Reuse**: The `swactor-gossip` simulation harness (topologies, tracing) can validate dissemination convergence. Consider adapting the property tests.
-
-**Files**: `crates/swactor-distribution/src/swim/dissemination.rs`
-
-```bash
-git add -A && git commit -m "chunk-3: SWIM piggybacked dissemination"
-```
-
----
-
-### Chunk 4: SWIM Join Protocol
-
-Implement seed-node bootstrap and dynamic cluster formation.
-
-**Components**:
-- `JoinRequest` / `JoinResponse` messages
-- New node contacts seed(s), receives current member list, is announced via dissemination
-- Solo-node case: first node starts with empty member list, becomes its own seed
-- `SwimNode` — the integrated SWIM actor: probe timer + dissemination + join/leave
-
-**Files**: `crates/swactor-distribution/src/swim/join.rs`, update `swim/mod.rs`
-
-```bash
-git add -A && git commit -m "chunk-4: join protocol and seed node bootstrap"
-```
-
----
-
-### Chunk 5: Kademlia Routing Table
-
-Pure data structure, no network calls. Implement as a standalone module.
-
-**Components**:
-- 256-entry k-bucket array indexed by `XOR(self_id, target_id).leading_zeros()`
-- XOR distance metric on `NodeId` (256-bit)
-- Per-bucket LRU eviction: prefer long-lived nodes, new nodes wait in replacement cache
-- `closest(target: NodeId, count: usize) -> Vec<NodeId>` — k-closest query
-- `insert(node_id)` / `remove(node_id)` with LRU maintenance
-
-**Files**: `crates/swactor-distribution/src/kademlia/routing_table.rs`
-
-```bash
-git add -A && git commit -m "chunk-5: kademlia k-bucket routing table"
-```
-
----
-
-### Chunk 6: Kademlia Node Lookup
-
-Iterative `FIND_NODE` using the `Transport::request()` method from Chunk 1.
-
-**Components**:
-- `NodeLookup` — async iterative walker: start from α closest local contacts, query in parallel, incorporate responses, converge on k-closest
-- `FindNodeRequest { target: NodeId }` / `FindNodeResponse { closest: Vec<(NodeId, SocketAddr)> }` messages
-- Lookup termination: all k-closest nodes queried, or max rounds exceeded
-
-**Files**: `crates/swactor-distribution/src/kademlia/lookup.rs`
-
-```bash
-git add -A && git commit -m "chunk-6: iterative FIND_NODE lookup"
-```
-
----
-
-### Chunk 7: Actor Directory (STORE / FIND_VALUE)
-
-The largest chunk. Signed directory entries with quorum reads.
-
-**Components**:
-- `DirectoryShard` — local storage of `HashMap<ActorAddress, Vec<DirectoryEntry>>`
-- **STORE**: sign a `DirectoryEntry`, use FIND_NODE to locate the `r` closest nodes to the `ActorAddress`, store on all of them
-- **FIND_VALUE**: quorum read — query `r` nodes, require `f+1` agreement on the same `(node_id, generation)`, verify signatures, highest-generation-wins conflict resolution
-- Fallback: if quorum not met from initial `r` nodes, iterative walk to find more replicas
-
-**Files**: `crates/swactor-distribution/src/kademlia/directory.rs`
-
-```bash
-git add -A && git commit -m "chunk-7: signed directory STORE and quorum FIND_VALUE"
-```
-
----
-
-### Chunk 8: Cache and Message Routing
-
-Wire the directory into the existing routing pipeline in `src/delivery.rs`.
-
-**Components**:
-- LRU cache: `ActorAddress → NodeId` with bounded capacity and TTL
-- Extended routing pipeline: local `AddressMap` → LRU cache hit → Kademlia FIND_VALUE → `Transport::send()`
-- Redirect/forward on receiving side: if a message arrives for a non-local actor, look up the correct node and forward
-- Cache invalidation: on delivery failure (transport error), evict the stale entry and re-resolve
-
-**Integration point**: `TickContext::route_nonlocal()` currently tries inbox → transport. This chunk extends it to: inbox → cache → directory resolve → transport.
-
-**Files**: `crates/swactor-distribution/src/cache.rs`, modifications to `src/delivery.rs`
-
-```bash
-git add -A && git commit -m "chunk-8: LRU cache and message routing pipeline"
-```
-
----
-
-### Chunk 9: Directory Republish and Repair
-
-React to SWIM death notifications to maintain directory consistency.
-
-**Components**:
-- Wire SWIM `Dead` events into directory layer: when a node dies, identify affected directory entries and replicate to replacement nodes
-- Periodic republish: spawning nodes re-STORE their entries on a timer to heal accumulated churn
-- TTL-based expiration: entries whose host node is confirmed dead are expired after a grace period
-
-**Files**: `crates/swactor-distribution/src/kademlia/repair.rs`
-
-```bash
-git add -A && git commit -m "chunk-9: directory republish and churn repair"
-```
-
----
-
-### Chunk 10: Node Integration
-
-Compose SWIM + Kademlia + Transport + Cache into a single `DistributedNode` type.
-
-**Components**:
-- `DistributedNode` — public API: `start(config)`, `stop()`, `spawn(actor)`, `send(addr, msg)`, `members() -> Vec<NodeRecord>`
-- Wraps a `Runtime` + `SwimNode` + `RoutingTable` + `DirectoryShard` + `LruCache`
-- Startup sequence: generate keypair → bind transport → join cluster (SWIM) → populate routing table → ready
-- Shutdown sequence: leave cluster (SWIM disseminate Dead for self) → drain in-flight messages → close transport
-- End-to-end test: multi-node cluster, spawn actors, send cross-node messages, kill nodes, verify fault tolerance
-
-**Files**: `crates/swactor-distribution/src/node.rs`, `crates/swactor-distribution/tests/integration.rs`
-
-```bash
-git add -A && git commit -m "chunk-10: node integration and public API"
-```
-
----
-
-### Chunk 11: Hardening (Lifeguard)
-
-Add Lifeguard protocol extensions for production resilience.
-
-**Components**:
-- **Local Health Multiplier (LHM)**: degraded nodes (high nack rate, slow acks) increase their own probe interval to reduce false accusations
-- **Dynamic suspect timeout**: scaled by `log(n)` where n = cluster size
-- **Protocol period scaling**: under load, probe intervals stretch rather than dropping probes
-- Stress tests: simulated partitions, asymmetric failures, high churn — reuse the `swactor-gossip` simulation harness patterns
-
-**Files**: `crates/swactor-distribution/src/swim/lifeguard.rs`, stress test binaries
-
-```bash
-git add -A && git commit -m "chunk-11: lifeguard hardening and stress tests"
-```
-
----
-
-## Dependency Graph
-
-```
-[0] ─→ [1] ─→ [2] ─→ [3] ─→ [4] ─┐
-              │                     │
-              └─→ [5] ─→ [6] ─→ [7] ─┐
-                                      ├─→ [8] ─→ [10] ─→ [11]
-                                      │     │
-                                      │    [9] ┘
-                                      │
-                             [4] ─────┘
-```
-
-Chunks 2-4 (SWIM) and 5-7 (Kademlia) can be developed in parallel off the transport extensions. Chunk 10 merges them. Chunk 11 is a hardening pass.
-
----
-
-## Crate Layout
-
-```
-crates/swactor-distribution/
-├── Cargo.toml           # deps: swactor, ed25519-dalek, serde
-├── src/
-│   ├── lib.rs
-│   ├── types.rs         # NodeId, Keypair, Signature, NodeRecord, DirectoryEntry, MemberState
-│   ├── crypto.rs        # sign, verify, keypair generation
-│   ├── transport.rs     # TcpTransport (pooled), DistributionCodecRegistry
-│   ├── codec.rs         # Codecs for all distribution messages
-│   ├── cache.rs         # LRU actor location cache
-│   ├── node.rs          # DistributedNode public API
-│   ├── swim/
-│   │   ├── mod.rs       # SwimNode actor
-│   │   ├── probe.rs     # Probe cycle state machine
-│   │   ├── member_list.rs  # Membership CRDT
-│   │   ├── dissemination.rs  # Piggybacked gossip queue
-│   │   ├── join.rs      # Seed-node bootstrap
-│   │   └── lifeguard.rs # LHM, dynamic timeouts
-│   └── kademlia/
-│       ├── mod.rs
-│       ├── routing_table.rs  # k-bucket array
-│       ├── lookup.rs    # Iterative FIND_NODE
-│       ├── directory.rs # STORE / FIND_VALUE with quorum
-│       └── repair.rs    # Republish and churn healing
-└── tests/
-    └── integration.rs   # End-to-end multi-node tests
-```
diff --git a/docs/development_history/in-browser/BROWSER_RUNTIME.md b/docs/development_history/in-browser/BROWSER_RUNTIME.md
deleted file mode 100644
index 6b0f0e5..0000000
--- a/docs/development_history/in-browser/BROWSER_RUNTIME.md
+++ /dev/null
@@ -1,69 +0,0 @@
-# Browser Runtime API — Development History
-
-> Stage 2 of the in-browser swactor runtime. Replaces the hardcoded PoC with
-> a generic, type-safe API using opaque address handles and typed inboxes.
-
----
-
-## Changes
-
-### Core Types
-
-**`WasmRuntime`** — wraps `swactor::Runtime` in single-threaded mode.
-Methods: `tick()`, `actor_count()`, `send_u32()`, `send_bytes()`,
-`stop_actor()`, `uptime_ms()`, `new_inbox_u32()`, `new_inbox_bytes()`.
-Also exposes `runtime()` for Rust-side custom spawn functions.
-
-**`WasmAddr`** — opaque handle wrapping `ActorAddress`. Returned by spawn
-functions, passed to send functions. JS holds it as an opaque object.
-Has `toString()` for debugging.
-
-**`WasmInboxU32`** / **`WasmInboxBytes`** — typed inboxes for receiving
-results from actors. Each has `addr()` → `WasmAddr` (so actors know where
-to send) and `try_recv()` → `Option<T>`.
-
-### Design Decisions
-
-| # | Decision | Rationale |
-|---|----------|-----------|
-| 1 | Opaque `WasmAddr` handles instead of indices | Type-safe, stable identity, no out-of-bounds errors |
-| 2 | Typed inbox types instead of generic `Inbox<T>` | wasm-bindgen doesn't support generics; concrete types are explicit |
-| 3 | Free-standing `spawn_*` functions, not methods | Each actor type gets its own spawn function with typed args |
-| 4 | `send_u32`/`send_bytes` on runtime | Common send types; custom types use typed spawn wrappers |
-| 5 | Evolved existing `crates/wasm/` instead of new crate | Less churn, existing build/test infrastructure |
-
-### Actor Pattern
-
-Users expose actors to JS by writing one `#[wasm_bindgen]` spawn function
-per actor type:
-
-```rust
-#[wasm_bindgen]
-pub fn spawn_my_actor(rt: &WasmRuntime, arg: JsValue) -> WasmAddr {
-    let actor = MyActor::from_js(arg);
-    let addr = rt.runtime().spawn(actor).unwrap();
-    WasmAddr(addr)
-}
-```
-
-## Test Coverage
-
-10 Node.js tests in `crates/wasm/test.mjs`:
-
-| Test | Scenario |
-|------|----------|
-| accumulator | Counter processes messages, reports running totals to inbox |
-| relay | Relay forwards messages to counter (cross-actor, 2 ticks) |
-| multiple counters | Two independent counters report to same inbox |
-| actor_count | Spawning 3 actors reflects in stats |
-| WasmAddr toString | Address has non-empty debug representation |
-| stop_actor | Graceful stop removes actor from runtime |
-| bytes inbox | WasmInboxBytes receives Uint8Array correctly |
-| uptime_ms | Returns non-negative number |
-
-## Verification
-
-- `cargo test -p swactor` — native tests pass (no regressions)
-- `cargo build --target wasm32-unknown-unknown -p wasm` — compiles
-- `wasm-pack build --target nodejs` in `crates/wasm/` — builds pkg/
-- `node test.mjs` in `crates/wasm/` — 10/10 tests pass
diff --git a/docs/development_history/in-browser/DEMO.md b/docs/development_history/in-browser/DEMO.md
deleted file mode 100644
index 3d8d117..0000000
--- a/docs/development_history/in-browser/DEMO.md
+++ /dev/null
@@ -1,60 +0,0 @@
-# Stage 5 — Interactive Browser Demo
-
-Visual verification page for the in-browser swactor runtime. Single self-contained
-HTML file that loads the `--target web` wasm build and exposes every API surface
-through a live dashboard.
-
-## Running
-
-```bash
-# Build for browser (one-time, or after Rust changes)
-cd crates/wasm && wasm-pack build --target web --out-dir pkg-web
-
-# Serve (any static server works — needs correct .wasm MIME type)
-cd crates/wasm && python3 -m http.server 8080
-```
-
-Open `http://localhost:8080/demo.html`.
-
-## What It Covers
-
-| Feature | How to verify |
-|---|---|
-| Runtime tick loop | Start/Pause button, Step for single tick, adjustable 1–60 tps |
-| Actor spawning | Spawn Counter, Relay, GroupMember, Sentinel from dropdown |
-| Message delivery | Send u32 to any actor, inbox polling shows received values |
-| Cross-actor relay | Spawn Relay → target Counter, send to relay, counter accumulates |
-| Actor stopping | Stop button on each card, actor disappears from viz |
-| Watching / death notifications | Spawn Sentinel watching an actor, stop the watched actor |
-| Name registry | Register/Lookup/Unregister names, live list in sidebar |
-| Groups | GroupMember auto-joins on spawn, Broadcast sends to all members |
-| Stats | Live actor count, total messages, total panics, uptime, tick count |
-
-## Architecture
-
-```
-demo.html
-  ├── imports pkg-web/wasm.js (ES module, --target web)
-  ├── creates WasmRuntime (single-threaded, StdExtension)
-  ├── requestAnimationFrame tick loop
-  ├── canvas visualization (actor circle graph + edges)
-  └── event log (spawn, send, recv, death, naming, groups)
-```
-
-All state lives in the page. No build step, no bundler, no framework — just
-the wasm module and vanilla JS.
-
-## Suggested Walkthrough
-
-1. **Counter basics** — Spawn a Counter, Step once, click "Send 1", Step again.
-   Inbox log shows the running total.
-2. **Relay chain** — Spawn Counter #1, then Relay targeting #1. Send to the relay,
-   observe the counter accumulating.
-3. **Death watching** — Spawn a Counter, then a Sentinel watching it. Stop the
-   counter. The sentinel reports the death and self-terminates.
-4. **Groups** — Spawn 3 GroupMembers in "workers". Hit "Broadcast 42". All three
-   receive the message.
-5. **Naming** — Register "@main" for an actor. Lookup confirms it resolves. Unregister
-   and verify it's gone.
-6. **Burst load** — Spawn several counters, click "Send ×10" on each, start the
-   runtime at 60 tps. Watch messages processed climb.
diff --git a/docs/development_history/in-browser/FEATURE_PARITY.md b/docs/development_history/in-browser/FEATURE_PARITY.md
deleted file mode 100644
index 2ac323b..0000000
--- a/docs/development_history/in-browser/FEATURE_PARITY.md
+++ /dev/null
@@ -1,75 +0,0 @@
-# Feature Parity — Development History
-
-> Stage 4 of the in-browser swactor runtime. Enables swactor-std extensions
-> (naming, monitoring, groups) and core actor watching in the wasm crate.
-
----
-
-## Changes
-
-### swactor-std wasm compilation
-
-- Added `wasm` feature to `crates/std/Cargo.toml` (forwards to `swactor/wasm`)
-- Changed swactor dependency to `default-features = false`, forwarding `getrandom`
-  feature when active (`getrandom = ["dep:getrandom", "swactor/getrandom"]`)
-- Cfg-gated `getrandom::getrandom()` call in `router.rs` `RoutingStrategy::Random`
-  — falls back to round-robin when `getrandom` feature is disabled (wasm mode)
-
-### RuntimeNaming: register_name
-
-- Added `register_name(name, addr)` method to `RuntimeNaming` trait and impl
-  — allows registering a name for an already-spawned actor from outside the runtime
-  — complements existing `spawn_named` (which spawns + registers atomically)
-
-### Core watching fix: StopSignal death notifications
-
-- Fixed gap in `worker.rs` tick_all: externally-stopped actors (via `rt.stop_actor()`)
-  were not added to the `deaths` list, so core WatchRegistry (phase 5b) never fired
-  for them. Added `deaths.push((addr, ExitReason::Stopped))` when StopSignal is
-  intercepted (line 737). All 140 existing native tests continue to pass.
-
-### WasmRuntime: StdExtension + new APIs
-
-- `WasmRuntime::new()` now installs `StdExtension` automatically
-- New inbox type: `WasmInboxString` for receiving string notifications
-- **Naming API**: `register_name`, `where_is`, `unregister_name`, `registered_names`
-- **Groups API**: `join_group`, `leave_group`, `publish_to_group_u32`,
-  `group_member_count`, `group_names`
-- **Stats API**: `total_messages`, `total_panics` (returned as f64 for JS compat)
-- New demo actors:
-  - `Sentinel` — watches a target via `ctx.watch()`, reports death to string inbox
-  - `GroupMember` — joins a group on start, forwards u32 messages to report inbox
-
-### Design Decisions
-
-| # | Decision | Rationale |
-|---|----------|-----------|
-| 1 | StdExtension always installed | Browser runtime should have full naming/groups by default |
-| 2 | Stats as f64, not u64 | wasm-bindgen maps u64 to BigInt which JSON.stringify rejects |
-| 3 | Sentinel actor for watching | Demonstrates core watching from JS without exposing Watch API directly |
-| 4 | register_name on RuntimeNaming | Needed for post-spawn registration from JS (no actor context available) |
-| 5 | Round-robin fallback for Random routing | wasm mode disables getrandom; graceful degradation preferred |
-
-## Test Coverage
-
-22 new assertions across 10 new test scenarios (30 total, from 10):
-
-| Test | Scenario |
-|------|----------|
-| naming — register_name and where_is | Register name, resolve, verify not-found returns undefined |
-| naming — unregister_name | Unregister returns previous addr, name no longer resolves |
-| naming — registered_names | Lists all registered names as CSV |
-| naming — duplicate name rejected | Second registration with same name fails |
-| groups — join_group and publish_to_group_u32 | Two members receive broadcast message |
-| groups — leave_group | Member count decreases after leave |
-| groups — group_names | Lists all active group names |
-| watching — sentinel reports actor death | Stop target → sentinel receives death notification |
-| stats — total_messages | Counts processed messages across workers |
-| stats — total_panics starts at zero | Fresh runtime has zero panics |
-
-## Verification
-
-- `cargo test -p swactor -p swactor-std` — 157 native tests pass (no regressions)
-- `cargo build --target wasm32-unknown-unknown -p wasm` — compiles
-- `wasm-pack build --target nodejs` in `crates/wasm/` — builds pkg/
-- `node test.mjs` in `crates/wasm/` — 30/30 tests pass
diff --git a/docs/development_history/in-browser/PLATFORM_ABSTRACTION.md b/docs/development_history/in-browser/PLATFORM_ABSTRACTION.md
deleted file mode 100644
index 30738ed..0000000
--- a/docs/development_history/in-browser/PLATFORM_ABSTRACTION.md
+++ /dev/null
@@ -1,82 +0,0 @@
-# Platform Abstraction Layer — Development History
-
-> Stage 1 of the in-browser swactor runtime. Makes core swactor compile for
-> `wasm32-unknown-unknown` without behavioral changes on native targets.
-
----
-
-## Changes
-
-### 1. `web-time` dependency + `wasm` feature flag
-
-**File**: `Cargo.toml`
-
-Added `web-time` as an optional dependency and a `wasm` feature that bundles
-`no_random` + `web-time`:
-
-```toml
-wasm = ["no_random", "dep:web-time"]
-web-time = { version = "0.2", optional = true }
-```
-
-`web-time` is a drop-in replacement for `std::time::Instant`:
-- Native: re-exports `std::time::Instant` (zero-cost)
-- wasm32: uses `performance.now()` via `js-sys`
-
-### 2. Platform-aware `Instant` re-export
-
-**File**: `src/lib.rs`
-
-```rust
-#[cfg(feature = "wasm")]
-pub(crate) use web_time::Instant;
-#[cfg(not(feature = "wasm"))]
-pub(crate) use std::time::Instant;
-```
-
-All modules (`runtime.rs`, `worker.rs`) now use `crate::Instant` instead of
-`std::time::Instant`. Single point of truth — no cfg noise in consumer code.
-
-### 3. cfg-gated `Runtime::run()` and `RuntimeHandle`
-
-**File**: `src/runtime.rs`
-
-`Runtime::run()` calls `std::thread::spawn()` which is not available on wasm32.
-Both `run()` and `RuntimeHandle` (which holds `JoinHandle<()>`) are gated:
-
-```rust
-#[cfg(not(target_arch = "wasm32"))]
-pub fn run(self) -> Result<RuntimeHandle, Error> { ... }
-```
-
-On wasm32, the browser crate will provide its own `run()` via Web Workers.
-`tick()` remains available on all platforms for single-threaded driving.
-
-### 4. Updated `crates/wasm/` to use `wasm` feature
-
-**File**: `crates/wasm/Cargo.toml`
-
-Changed from `features = ["no_random"]` to `features = ["wasm"]` to pick up
-the `web-time` Instant on wasm32.
-
-## What Did NOT Need Abstraction
-
-Key discovery: on wasm32 with the `+atomics` target feature, most of
-`std::sync` and `std::thread` works:
-
-- `OnceLock<Thread>` — compiles and works (futex-based)
-- `Thread::unpark()` — works (futex → `memory.atomic.notify`)
-- `thread::park_timeout()` — works (futex → `memory.atomic.wait32`)
-- `thread::yield_now()` — works (no-op on wasm)
-- `Mutex`, `RwLock` — work (futex-based)
-- `crossbeam-queue` — works (uses `core::sync::atomic`)
-- `AtomicBool/Usize/U64` — work (wasm atomic instructions)
-
-Only `std::thread::spawn()` and `JoinHandle` are not functional on wasm32.
-
-## Verification
-
-- `cargo test` — all native tests pass (no regressions)
-- `cargo test --features wasm` — all native tests pass with wasm feature
-- `cargo build --target wasm32-unknown-unknown --features wasm --no-default-features` — compiles
-- `cargo build --target wasm32-unknown-unknown -p wasm` — existing PoC crate compiles
diff --git a/docs/development_history/pooled-datastore/POOLED_DATASTORE.md b/docs/development_history/pooled-datastore/POOLED_DATASTORE.md
deleted file mode 100644
index 4060b98..0000000
--- a/docs/development_history/pooled-datastore/POOLED_DATASTORE.md
+++ /dev/null
@@ -1,423 +0,0 @@
-# Pooled Datastore & Sim-Cluster — Development History
-
-> Adds a gossip-converged pooled storage protocol, a generic gossip channel
-> abstraction, a pool dashboard page, shared pool types, iroh connection
-> hardening, and a Docker-free multi-process sim-cluster test harness.
->
-> ~18 new/modified files · ~2,400 insertions
->
-> *Branch: `pooled-datastore`*
-
----
-
-## Table of Contents
-
-1. [Overview & Motivation](#1-overview--motivation)
-2. [What Was Built](#2-what-was-built)
-3. [Pooled Storage Protocol](#3-pooled-storage-protocol)
-4. [Generic Gossip Channel Abstraction](#4-generic-gossip-channel-abstraction)
-5. [Pool Disseminator](#5-pool-disseminator)
-6. [Pool Coordinator Actor](#6-pool-coordinator-actor)
-7. [Shared Pool Types](#7-shared-pool-types)
-8. [Dashboard Pool Page](#8-dashboard-pool-page)
-9. [Iroh Connection Hardening](#9-iroh-connection-hardening)
-10. [Sim-Cluster Test Harness](#10-sim-cluster-test-harness)
-11. [Design Decisions & Tradeoffs](#11-design-decisions--tradeoffs)
-12. [Test Coverage](#12-test-coverage)
-13. [Known Gaps & Future Work](#13-known-gaps--future-work)
-
----
-
-## 1. Overview & Motivation
-
-The existing datastore provides content-addressed storage on individual nodes,
-but there is no mechanism for multiple nodes to form a shared storage pool —
-knowing who has what content, how much capacity each node offers, or where to
-place new data.
-
-This branch introduces a **pooled datastore protocol** that layers on top of
-the existing content-addressed datastore. Multiple nodes join a named pool,
-gossip their membership/capacity/content-locations via SWIM piggyback, and
-converge on a shared view of the pool's state. This enables:
-
-- **Content location**: find which node(s) hold a given content hash without
-  fan-out queries.
-- **Capacity-aware placement**: route new writes to the node with the most free
-  space.
-- **Pool ACL**: optional allow-list to restrict which nodes can join a pool.
-- **Live observability**: a new dashboard page shows pool membership, capacity
-  bars, content location map, and ACL state in real time via SSE.
-
-Separately, the branch also introduces:
-
-- A **generic gossip channel abstraction** (`GossipChannel` trait +
-  `DisseminationBuffer<T>`) that replaces the 4 duplicated dissemination
-  patterns in the distribution crate.
-- A **sim-cluster test harness** (`cargo xtask test sim-cluster` / `cargo
-  xtask sim-cluster`) that spawns real multi-process clusters with a local iroh
-  relay — no Docker required.
-- **Iroh connection hardening**: relay URL resolution cascade and connect
-  timeouts to prevent indefinite hangs during peer connection.
-
----
-
-## 2. What Was Built
-
-| Component | Crate / Location | Lines |
-|-----------|-----------------|-------|
-| Pool types (PoolId, entries, config) | `crates/shared-types/src/pool.rs` | ~170 |
-| Gossip channel trait + DisseminationBuffer | `crates/distribution/src/gossip_channel.rs` | ~270 |
-| Pool disseminator (CRDT state + gossip) | `crates/datastore/src/pool/disseminator.rs` | ~720 |
-| Pool coordinator actor | `crates/datastore/src/pool/coordinator.rs` | ~275 |
-| Pool messages | `crates/datastore/src/pool/messages.rs` | ~80 |
-| Pool dashboard HTML/JS | `crates/dashboard/src/pool_html.rs` | ~390 |
-| Sim-cluster harness | `xtask/src/sim_cluster.rs` | ~700 |
-| Pool integration tests | `crates/datastore/tests/pool_tests.rs` | ~340 |
-| Docker compose (dev cluster) | `tests/docker/docker-compose.dev-cluster.yml` | ~75 |
-
-Modified files:
-
-| File | Change |
-|------|--------|
-| `crates/distribution/src/iroh_driver.rs` | Relay URL cascade + connect timeout |
-| `crates/swactor-node/src/main.rs` | Seed node relay URL hints for iroh |
-| `crates/datastore/tests/dashboard_integration_test.rs` | Start HTTP standalone |
-| `xtask/src/main.rs` | `sim-cluster` subcommand + test group |
-| `xtask/Cargo.toml` | reqwest, tokio, iroh-relay deps |
-
----
-
-## 3. Pooled Storage Protocol
-
-The pool protocol is a set of four CRDT entry types that converge via gossip:
-
-```
-┌────────────────────────────────────────────────────┐
-│                   Pool State (per node)             │
-├──────────────┬─────────────┬───────────┬───────────┤
-│  Membership  │  Capacity   │  Content  │    ACL    │
-│              │             │  Location │           │
-│ node→state   │ node→bytes  │ (hash,    │ node→     │
-│ (Active/Left)│ (total/used)│  node)→   │  grant/   │
-│              │             │  tombstone│  revoke   │
-├──────────────┴─────────────┴───────────┴───────────┤
-│             Higher generation always wins           │
-│          (last-writer-wins register per key)        │
-└────────────────────────────────────────────────────┘
-```
-
-**Convergence rule**: For each entry type, the key is derived from the entry
-(e.g. `node_id` for membership, `(content_hash, node_id)` for content
-locations). When two entries share a key, the one with the higher `generation`
-wins. This makes all merges commutative, associative, and idempotent — a CRDT.
-
-**Deletion**: Content locations and ACL entries use tombstones (`tombstone:
-true` / `revoked: true`) with a generation bump. Tombstones are garbage
-collected after a configurable TTL.
-
-**Dissemination**: All entries go through a shared `DisseminationBuffer<PoolEntry>`
-which transmits each entry `Λ * ceil(log₂(n))` times before eviction, matching
-the standard SWIM protocol budget.
-
----
-
-## 4. Generic Gossip Channel Abstraction
-
-**File**: `crates/distribution/src/gossip_channel.rs`
-
-Before this branch, SWIM piggyback dissemination was hardcoded for membership
-updates, directory entries, and dead-letter notifications — each with its own
-copy of the `Λ * ceil(log₂(n))` budget logic.
-
-The new abstraction provides:
-
-- **`GossipChannel` trait**: A topic-tagged channel that produces/consumes
-  `Vec<u8>` entries for piggyback. Methods: `topic_tag()`,
-  `take_pending_bytes()`, `apply_incoming_bytes()`, `re_disseminate_all()`,
-  `on_node_death()`, `gc_tick()`.
-
-- **`DisseminationBuffer<T>`**: A generic budget-limited queue. Entries are
-  enqueued with a transmit budget of `Λ * ceil(log₂(n))` and evicted after
-  exhaustion. Supports `enqueue`, `enqueue_or_replace` (idempotent upsert),
-  `take`, `re_enqueue_all`, and `retain`.
-
-- **Serialization helpers**: `serialize_each()` and `deserialize_each()` for
-  converting between typed entries and `Vec<u8>`.
-
-The pool disseminator is the first consumer, plugging into the distribution
-layer via `SharedPoolChannel` which wraps `Arc<Mutex<PoolDisseminator>>`.
-
----
-
-## 5. Pool Disseminator
-
-**File**: `crates/datastore/src/pool/disseminator.rs`
-
-The core state machine. Manages four `HashMap` tables (membership, capacity,
-content locations, ACL) and a single `DisseminationBuffer<PoolEntry>`.
-
-Key methods:
-
-- **Lifecycle**: `join()`, `leave()` — announce membership state changes.
-- **Storage**: `announce_content()`, `remove_content()`, `announce_capacity()`.
-- **ACL**: `grant_access()`, `revoke_access()`, `is_node_authorized()`.
-- **Queries**: `active_members()`, `member_count()`, `content_count()`,
-  `locate_content()`, `node_with_most_free_space()`, `pool_capacity_summary()`.
-- **Dashboard**: `snapshot_json()` — full JSON snapshot for SSE.
-- **Internal**: `merge_entry()` applies the higher-generation-wins rule.
-  `take_pending_inner()` / `apply_incoming_inner()` drive gossip exchange.
-
-`SharedPoolChannel` wraps this in an `Arc<Mutex<>>` and implements
-`GossipChannel`, bridging ownership between the `PoolCoordinator` actor
-(lifecycle/queries) and `DistributedNode` (gossip transport).
-
----
-
-## 6. Pool Coordinator Actor
-
-**File**: `crates/datastore/src/pool/coordinator.rs`
-
-An actor implementing `ActorInterface` for `PoolCoordinatorMsg`. It acts as a
-placement-aware CRUD facade:
-
-- **PoolPut/Get/Delete/List**: Delegates to the co-located `DatastoreNode`
-  actor. Future: redirect to best node based on capacity.
-- **PoolStatus**: Queries the disseminator and returns a JSON status snapshot.
-- **JoinPool/LeavePool**: Checks ACL authorization, then calls the
-  disseminator.
-- **GrantPoolAccess/RevokePoolAccess**: Manages the allow-list.
-- **PoolTick**: Periodic capacity re-announcement (every 100 ticks).
-
----
-
-## 7. Shared Pool Types
-
-**File**: `crates/shared-types/src/pool.rs`
-
-Types live in `shared-types` to avoid circular dependencies between
-`distribution` and `datastore`:
-
-- **`PoolId`**: `blake3(name_bytes)` — 32-byte deterministic pool identifier.
-  Supports hex encoding/decoding and truncated display.
-- **`PoolMemberEntry`**: Node membership with `Active`/`Left` state.
-- **`PoolCapacityEntry`**: Storage capacity announcement (total/used bytes).
-- **`ContentLocationEntry`**: Where a content hash is stored, with tombstone
-  support.
-- **`PoolACLEntry`**: Authorization grant/revoke with `granted_by` provenance.
-- **`PoolEntry`**: Tagged enum wrapping all four entry types for gossip
-  serialization.
-- **`PoolConfig`**: Pool configuration (name, capacity, TTL, GC interval, Λ).
-
----
-
-## 8. Dashboard Pool Page
-
-**File**: `crates/dashboard/src/pool_html.rs`
-
-A new `/pool` page in the dashboard with:
-
-- **Summary cards**: pool name, member count, content count, total/used
-  capacity.
-- **Capacity bars**: per-node usage with color thresholds (green < 70%, orange
-  < 90%, red >= 90%).
-- **Members table**: node ID (truncated with tooltip), state, total/used/free.
-- **Content location map**: content hash → replica count → node list.
-- **ACL panel**: open mode indicator or allow-list table.
-- **Join/Leave buttons**: POST to `/api/pool/join` and `/api/pool/leave`.
-- **Live updates**: SSE `pool` events drive real-time state refresh.
-
----
-
-## 9. Iroh Connection Hardening
-
-**File**: `crates/distribution/src/iroh_driver.rs`
-
-Two problems fixed:
-
-1. **Relay URL resolution cascade**: When connecting to a peer, the driver now
-   tries three sources in order: (a) explicit relay URL cache from prior
-   connections, (b) SWIM metadata gossip (via `node.relay_url()`), (c) the
-   local node's own home relay. Previously only the explicit cache was checked,
-   causing connections to fail when the cache was empty.
-
-2. **Connect timeout**: All `endpoint.connect()` calls now have a 2-second
-   `tokio::time::timeout` wrapper. Previously, connections could hang
-   indefinitely if a peer was unreachable.
-
-**File**: `crates/swactor-node/src/main.rs`
-
-Seed node addresses now include relay URLs so iroh can locate the seed through
-the relay server, rather than relying solely on direct addressing.
-
----
-
-## 10. Sim-Cluster Test Harness
-
-**File**: `xtask/src/sim_cluster.rs`
-
-A new test stage and development tool that spawns real multi-process swactor
-clusters without Docker:
-
-### Test mode: `cargo xtask test sim-cluster`
-
-Runs 4 scenarios sequentially, each with a fresh 5-node cluster:
-
-| # | Scenario | Validates |
-|---|----------|-----------|
-| 1 | Cluster convergence | All 5 nodes see >= 4 alive peers, routing table >= 4 |
-| 2 | Node death detection | Kill node 2, survivors detect alive drop, dead count >= 1 |
-| 3 | Killed node rejoins | Kill node 2, restart it, rejoined node sees alive >= 1 |
-| 4 | Actors resolvable | Each node has >= 2 directory entries, total >= 10 |
-
-### Interactive mode: `cargo xtask sim-cluster --nodes N`
-
-Spawns a persistent cluster for development. Prints dashboard URLs and blocks
-until Ctrl-C.
-
-### Infrastructure
-
-- **Local relay server**: Embedded `iroh-relay` server on an ephemeral port.
-  Nodes connect through the relay rather than requiring direct connectivity.
-- **RAII lifecycle**: `SimCluster` owns child processes and SIGTERM's them on
-  drop. `RelayServer` owns its tokio runtime.
-- **Config generation**: Each node gets a `node.toml` with dashboard port,
-  actor count, relay host/port, and optional seed node ID.
-- **Seed key discovery**: Polls the seed node's key file on disk to extract the
-  public key before spawning joiner nodes.
-- **HTTP observation**: Polls `/api/distribution` on each node's dashboard.
-  Uses `serde_json::Value` to avoid compile-time coupling to protocol types.
-- **Node lifecycle**: `kill_node()` sends SIGTERM, `restart_node()` re-spawns
-  with the same config (non-seed nodes get the seed's public key).
-
-### Dev cluster compose
-
-**File**: `tests/docker/docker-compose.dev-cluster.yml`
-
-A 3-node Docker Compose file for development with pool configuration
-(`--pool-name dev-pool --pool-capacity 104857600`). Uses a bridge network with
-static IPs.
-
----
-
-## 11. Design Decisions & Tradeoffs
-
-**Higher-generation-wins CRDT over vector clocks**: Pool entries use a simple
-monotonic generation counter per entry key. This is sufficient because each
-entry has a single writer (the node that owns it). Vector clocks would add
-complexity without benefit since there are no concurrent writers for the same
-key.
-
-**Tombstones with TTL over immediate deletion**: Content locations and ACL
-revocations use tombstones that propagate via gossip before being GC'd. Without
-tombstones, a deleted entry could be re-introduced by a node that hasn't yet
-received the deletion.
-
-**Shared `Arc<Mutex<>>` over message-passing for disseminator**: The pool
-disseminator needs to be accessed by both the coordinator actor (for
-lifecycle/queries) and the distribution layer (for gossip). Rather than adding
-an actor-to-actor message protocol, the disseminator is wrapped in
-`Arc<Mutex<PoolDisseminator>>`. The lock is held only briefly for individual
-operations.
-
-**Sim-cluster over Docker for testing**: Docker adds build time, image
-management, and network configuration complexity. The sim-cluster spawns bare
-processes on localhost, uses an embedded iroh relay, and tears down in
-milliseconds. Scenarios that previously required Docker Compose now run with
-`cargo xtask test sim-cluster`.
-
-**HTTP polling over direct protocol observation**: The sim-cluster observes
-node state via HTTP (`/api/distribution`) rather than linking against protocol
-types. This makes the test harness resilient to protocol changes and mirrors
-how an operator would observe a real cluster.
-
-**Pool types in `shared-types`**: Pool entry types live in `shared-types`
-rather than `datastore` to avoid a circular dependency — `distribution` needs
-to know about pool entries for gossip serialization, and `datastore` depends on
-`distribution`.
-
----
-
-## 12. Test Coverage
-
-### Unit tests (disseminator internals)
-
-In `crates/datastore/src/pool/disseminator.rs`:
-
-- `join_and_query_members` — join lifecycle
-- `leave_removes_from_active` — leave lifecycle
-- `announce_and_locate_content` — content announcement + query
-- `remove_content_tombstones` — tombstone semantics
-- `capacity_summary` — capacity aggregation
-- `acl_grant_and_check` / `acl_revoke` / `empty_acl_means_open` — ACL logic
-- `higher_generation_wins_merge` — CRDT merge rule
-- `two_disseminators_converge_via_gossip_exchange` — two-node gossip
-- `three_node_convergence_loop` — multi-round gossip convergence
-
-### Unit tests (gossip channel)
-
-In `crates/distribution/src/gossip_channel.rs`:
-
-- `budget_math_*` (4 tests) — transmit budget calculation
-- `enqueue_take_evicts_after_budget` — budget exhaustion
-- `enqueue_or_replace_*` (2 tests) — idempotent upsert
-- `re_enqueue_all_refreshes_budgets` — anti-entropy
-- `retain_removes_non_matching` — predicate-based eviction
-- `serialize_deserialize_roundtrip` — wire format
-
-### Unit tests (shared types)
-
-In `crates/shared-types/src/pool.rs`:
-
-- `pool_id_from_name_is_deterministic` / `pool_id_different_names_differ`
-- `pool_id_hex_roundtrip`
-- `pool_entry_serde_roundtrip`
-- `higher_generation_wins_for_membership`
-- `content_location_tombstone_semantics`
-
-### Integration tests (pool protocol)
-
-In `crates/datastore/tests/pool_tests.rs`:
-
-- `two_nodes_converge_on_membership` — two-node gossip convergence
-- `content_location_propagates_via_gossip` — cross-node content discovery
-- `leave_propagates_via_gossip` — membership leave propagation
-- `content_deletion_propagates` — tombstone propagation
-- `acl_grant_propagates` — ACL gossip
-- `capacity_propagates_and_summarizes` — capacity gossip + aggregation
-- `placement_query_picks_node_with_most_space` — capacity-aware placement
-- `five_node_pool_converges` — 5-node full convergence
-- `shared_pool_channel_topic_tag` — GossipChannel interface
-- `gossip_channel_bytes_roundtrip` — wire format through GossipChannel
-
-### Sim-cluster scenarios (multi-process)
-
-In `xtask/src/sim_cluster.rs`:
-
-- Cluster convergence (5 nodes)
-- Node death detection (kill + observe)
-- Killed node rejoins (kill + restart + observe)
-- Actors resolvable (directory entry propagation)
-
----
-
-## 13. Known Gaps & Future Work
-
-- **Remote content fetch**: `PoolGet` currently only checks the local
-  datastore. It should use `locate_content()` to fetch from the node that
-  actually has the content.
-- **Capacity-aware placement**: `PoolPut` delegates to the local datastore.
-  It should use `node_with_most_free_space()` to route writes to the best node.
-- **Actual usage tracking**: `PoolTick` re-announces capacity with `used: 0`.
-  It should query the `BlobStore` for actual disk usage.
-- **GossipChannel integration**: The `GossipChannel` trait and
-  `SharedPoolChannel` are built but not yet wired into `DistributedNode`'s
-  piggyback system. The existing hardcoded dissemination channels need to be
-  migrated to the new trait.
-- **Dashboard SSE integration**: The pool dashboard HTML is built, but the
-  server-side SSE event source for `pool` events needs to be wired to the
-  `PoolDisseminator::snapshot_json()` method.
-- **Sim-cluster namespace isolation**: The harness uses high ephemeral ports
-  for isolation. Full Linux network namespace isolation (as designed in
-  `TEST_ISOLATION.md`) is a future enhancement.
-- **Sim-cluster in CI**: The sim-cluster test group is opt-in and excluded
-  from `essential`/`all`. Once proven stable, it should be added to CI.
diff --git a/docs/diagrams/actor_lifecycle.svg b/docs/diagrams/actor_lifecycle.svg
deleted file mode 100644
index 5e17b8d..0000000
--- a/docs/diagrams/actor_lifecycle.svg
+++ /dev/null
@@ -1,145 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1000 700" font-family="system-ui, sans-serif">
-  <defs>
-    <!-- Drop shadow filter -->
-    <filter id="shadow" x="-4%" y="-4%" width="108%" height="108%">
-      <feDropShadow dx="1" dy="2" stdDeviation="3" flood-color="#000" flood-opacity="0.10"/>
-    </filter>
-    <!-- Arrow markers -->
-    <marker id="arrow-gray" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#5f6368">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-green" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#34a853">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-red" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#ea4335">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-  </defs>
-
-  <!-- Background -->
-  <rect width="1000" height="700" rx="8" fill="#f8f9fb" stroke="#e0e3e8" stroke-width="1.5"/>
-
-  <!-- Title -->
-  <text x="500" y="42" text-anchor="middle" font-size="20" font-weight="bold" fill="#202124">Actor Lifecycle</text>
-  <text x="500" y="62" text-anchor="middle" font-size="12" fill="#5f6368">src/runtime.rs · src/worker.rs</text>
-
-  <!-- ============================================ -->
-  <!-- Entry circle -->
-  <circle cx="90" cy="200" r="16" fill="#4285f4" filter="url(#shadow)"/>
-  <text x="90" y="205" text-anchor="middle" font-size="14" fill="#fff" font-weight="bold">&#x25B6;</text>
-
-  <!-- Arrow: entry → SPAWNED -->
-  <line x1="106" y1="200" x2="156" y2="200" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="131" y="192" text-anchor="middle" font-size="11" fill="#5f6368">spawn()</text>
-
-  <!-- ============================================ -->
-  <!-- STATE: SPAWNED -->
-  <rect x="168" y="170" width="155" height="60" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="245" y="196" text-anchor="middle" font-size="14" font-weight="600" fill="#1a73e8">SPAWNED</text>
-  <text x="245" y="214" text-anchor="middle" font-size="10" fill="#5f6368">in spawn queue</text>
-
-  <!-- Arrow: SPAWNED → READY -->
-  <line x1="323" y1="200" x2="393" y2="200" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="358" y="190" text-anchor="middle" font-size="11" fill="#5f6368">Phase 1/4</text>
-  <text x="358" y="203" text-anchor="middle" font-size="10" fill="#5f6368">drain →</text>
-  <text x="358" y="215" text-anchor="middle" font-size="10" fill="#5f6368">pool.insert()</text>
-
-  <!-- ============================================ -->
-  <!-- STATE: READY -->
-  <rect x="405" y="170" width="155" height="60" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="482" y="196" text-anchor="middle" font-size="14" font-weight="600" fill="#137333">READY</text>
-  <text x="482" y="214" text-anchor="middle" font-size="10" fill="#5f6368">in pool, mailbox empty</text>
-
-  <!-- Arrow: READY → MAILBOX_PENDING (down) -->
-  <line x1="482" y1="230" x2="482" y2="320" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="492" y="266" font-size="11" fill="#5f6368">send_to /</text>
-  <text x="492" y="280" font-size="10" fill="#5f6368">deliver pushes</text>
-  <text x="492" y="293" font-size="10" fill="#5f6368">to VecDeque</text>
-
-  <!-- ============================================ -->
-  <!-- STATE: MAILBOX_PENDING -->
-  <rect x="405" y="330" width="155" height="60" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="482" y="354" text-anchor="middle" font-size="13" font-weight="600" fill="#e37400">MAILBOX</text>
-  <text x="482" y="372" text-anchor="middle" font-size="13" font-weight="600" fill="#e37400">PENDING</text>
-
-  <!-- Arrow: MAILBOX_PENDING → PROCESSING (right) -->
-  <line x1="560" y1="360" x2="630" y2="360" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="595" y="350" text-anchor="middle" font-size="11" fill="#5f6368">Phase 3</text>
-  <text x="595" y="374" text-anchor="middle" font-size="10" fill="#5f6368">pop_front()</text>
-
-  <!-- ============================================ -->
-  <!-- STATE: PROCESSING -->
-  <rect x="642" y="330" width="155" height="60" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="719" y="356" text-anchor="middle" font-size="14" font-weight="600" fill="#1a73e8">PROCESSING</text>
-  <text x="719" y="374" text-anchor="middle" font-size="10" fill="#5f6368">handler executing</text>
-
-  <!-- Arrow: PROCESSING → READY (success, up and left, curved) -->
-  <path d="M 719 330 Q 719 268 600 200 Q 580 190 560 200"
-        fill="none" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="670" y="258" font-size="11" fill="#34a853" font-weight="600">handler OK</text>
-
-  <!-- Arrow: PROCESSING → PANIC_STATE (down) -->
-  <line x1="719" y1="390" x2="719" y2="470" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <text x="740" y="430" font-size="11" fill="#ea4335" font-weight="600">panic!</text>
-  <text x="740" y="444" font-size="10" fill="#ea4335">catch_unwind</text>
-
-  <!-- ============================================ -->
-  <!-- STATE: PANIC_STATE -->
-  <rect x="642" y="480" width="155" height="60" rx="12" fill="#fce8e6" stroke="#ea4335" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="719" y="506" text-anchor="middle" font-size="14" font-weight="600" fill="#c5221f">PANIC</text>
-  <text x="719" y="524" text-anchor="middle" font-size="10" fill="#5f6368">caught, actor survives</text>
-
-  <!-- Arrow: PANIC_STATE → PROCESSING (loop back left then up) -->
-  <path d="M 642 510 Q 610 510 610 440 Q 610 370 630 360"
-        fill="none" stroke="#5f6368" stroke-width="1.8" stroke-dasharray="5,3" marker-end="url(#arrow-gray)"/>
-  <text x="580" y="450" font-size="10" fill="#5f6368">next msg,</text>
-  <text x="580" y="463" font-size="10" fill="#5f6368">next tick</text>
-
-  <!-- ============================================ -->
-  <!-- STATE: DEAD -->
-  <rect x="168" y="480" width="155" height="60" rx="12" fill="#f1f3f4" stroke="#9aa0a6" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="245" y="506" text-anchor="middle" font-size="14" font-weight="600" fill="#5f6368">DEAD</text>
-  <text x="245" y="524" text-anchor="middle" font-size="10" fill="#5f6368">removed from pool</text>
-
-  <!-- Arrow: READY → DEAD -->
-  <path d="M 405 220 Q 350 250 310 350 Q 280 420 280 470"
-        fill="none" stroke="#9aa0a6" stroke-width="1.5" stroke-dasharray="4,3" marker-end="url(#arrow-gray)"/>
-  <text x="310" y="380" font-size="10" fill="#9aa0a6">shutdown /</text>
-  <text x="310" y="393" font-size="10" fill="#9aa0a6">pool.remove()</text>
-
-  <!-- Arrow: PROCESSING → DEAD -->
-  <path d="M 642 385 Q 500 440 370 480"
-        fill="none" stroke="#9aa0a6" stroke-width="1.5" stroke-dasharray="4,3" marker-end="url(#arrow-gray)"/>
-  <text x="490" y="446" font-size="10" fill="#9aa0a6">shutdown</text>
-
-  <!-- Arrow: PANIC_STATE → DEAD -->
-  <path d="M 642 510 Q 500 520 340 510"
-        fill="none" stroke="#9aa0a6" stroke-width="1.5" stroke-dasharray="4,3" marker-end="url(#arrow-gray)"/>
-
-  <!-- ============================================ -->
-  <!-- Legend -->
-  <rect x="50" y="600" width="900" height="75" rx="8" fill="none" stroke="#e0e3e8" stroke-width="1"/>
-  <text x="70" y="622" font-size="12" font-weight="600" fill="#202124">Legend</text>
-
-  <!-- Normal arrow -->
-  <line x1="70" y1="645" x2="105" y2="645" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="115" y="649" font-size="11" fill="#5f6368">Transition</text>
-
-  <!-- Success arrow -->
-  <line x1="220" y1="645" x2="255" y2="645" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="265" y="649" font-size="11" fill="#34a853">Success</text>
-
-  <!-- Error arrow -->
-  <line x1="370" y1="645" x2="405" y2="645" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <text x="415" y="649" font-size="11" fill="#ea4335">Error / Panic</text>
-
-  <!-- Dashed arrow -->
-  <line x1="540" y1="645" x2="575" y2="645" stroke="#9aa0a6" stroke-width="1.5" stroke-dasharray="4,3" marker-end="url(#arrow-gray)"/>
-  <text x="585" y="649" font-size="11" fill="#9aa0a6">Shutdown path</text>
-
-  <!-- Source refs -->
-  <text x="780" y="649" font-size="10" fill="#9aa0a6">runtime.rs:125-134 · worker.rs:204-219</text>
-</svg>
diff --git a/docs/diagrams/actor_resolution.svg b/docs/diagrams/actor_resolution.svg
deleted file mode 100644
index 885d9c1..0000000
--- a/docs/diagrams/actor_resolution.svg
+++ /dev/null
@@ -1,185 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1100 780" font-family="system-ui, sans-serif">
-  <defs>
-    <filter id="shadow" x="-4%" y="-4%" width="108%" height="108%">
-      <feDropShadow dx="1" dy="2" stdDeviation="3" flood-color="#000" flood-opacity="0.10"/>
-    </filter>
-    <marker id="arrow-gray" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#5f6368">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-green" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#34a853">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-red" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#ea4335">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-blue" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#4285f4">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-  </defs>
-
-  <!-- Background -->
-  <rect width="1100" height="780" rx="8" fill="#f8f9fb" stroke="#e0e3e8" stroke-width="1.5"/>
-
-  <!-- Title -->
-  <text x="550" y="38" text-anchor="middle" font-size="20" font-weight="bold" fill="#202124">Actor Registration &amp; Resolution</text>
-  <text x="550" y="58" text-anchor="middle" font-size="12" fill="#5f6368">node.rs · kademlia/directory.rs · kademlia/lookup.rs · cache.rs</text>
-
-  <!-- ============================================ -->
-  <!-- LEFT LANE: REGISTRATION -->
-  <!-- ============================================ -->
-  <rect x="30" y="80" width="480" height="570" rx="6" fill="#e6f4ea" fill-opacity="0.2" stroke="#34a853" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="102" font-size="13" font-weight="700" fill="#34a853" letter-spacing="1">REGISTRATION</text>
-
-  <!-- Step 1: register_actor() -->
-  <rect x="80" y="125" width="200" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="180" y="147" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">register_actor(</text>
-  <text x="180" y="164" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">addr, generation)</text>
-
-  <!-- Arrow down -->
-  <line x1="180" y1="175" x2="180" y2="210" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step 2: sign entry -->
-  <rect x="80" y="218" width="200" height="44" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="180" y="237" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">keypair.sign_entry()</text>
-  <text x="180" y="253" text-anchor="middle" font-size="10" fill="#5f6368">ed25519 over payload</text>
-
-  <!-- Arrow down -->
-  <line x1="180" y1="262" x2="180" y2="295" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step 3: store locally -->
-  <rect x="80" y="302" width="200" height="44" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="180" y="321" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">directory.store(entry)</text>
-  <text x="180" y="337" text-anchor="middle" font-size="10" fill="#5f6368">local shard</text>
-
-  <!-- Arrow down -->
-  <line x1="180" y1="346" x2="180" y2="380" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step 4: cache locally -->
-  <rect x="80" y="386" width="200" height="44" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="180" y="405" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">cache.insert(addr, self)</text>
-  <text x="180" y="421" text-anchor="middle" font-size="10" fill="#5f6368">LRU location cache</text>
-
-  <!-- Arrow down -->
-  <line x1="180" y1="430" x2="180" y2="465" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step 5: register for republish -->
-  <rect x="80" y="472" width="200" height="44" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="180" y="491" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">republish.register()</text>
-  <text x="180" y="507" text-anchor="middle" font-size="10" fill="#5f6368">periodic re-STORE</text>
-
-  <!-- Arrow down -->
-  <line x1="180" y1="516" x2="180" y2="550" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step 6: return signed entry -->
-  <rect x="80" y="556" width="200" height="44" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="180" y="575" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">return entry</text>
-  <text x="180" y="591" text-anchor="middle" font-size="10" fill="#5f6368">caller STOREs to r-closest</text>
-
-  <!-- Side note: STORE replication -->
-  <rect x="320" y="300" width="170" height="90" rx="10" fill="#fff" stroke="#e0e3e8" stroke-width="1" filter="url(#shadow)"/>
-  <text x="340" y="320" font-size="11" font-weight="600" fill="#202124">Replication</text>
-  <text x="340" y="338" font-size="10" fill="#5f6368">STORE to r-closest</text>
-  <text x="340" y="353" font-size="10" fill="#5f6368">nodes by XOR distance</text>
-  <text x="340" y="368" font-size="10" fill="#5f6368">to actor_addr (treated</text>
-  <text x="340" y="383" font-size="10" fill="#5f6368">as 256-bit Kademlia key)</text>
-  <line x1="280" y1="340" x2="310" y2="340" stroke="#5f6368" stroke-width="1" stroke-dasharray="4,3" marker-end="url(#arrow-gray)"/>
-
-  <!-- ============================================ -->
-  <!-- RIGHT LANE: RESOLUTION -->
-  <!-- ============================================ -->
-  <rect x="540" y="80" width="530" height="570" rx="6" fill="#fef7e0" fill-opacity="0.2" stroke="#f9ab00" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="560" y="102" font-size="13" font-weight="700" fill="#e37400" letter-spacing="1">RESOLUTION</text>
-
-  <!-- Step 1: resolve_actor() -->
-  <rect x="620" y="125" width="200" height="44" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="720" y="144" text-anchor="middle" font-size="13" font-weight="600" fill="#e37400">resolve_actor(addr)</text>
-  <text x="720" y="160" text-anchor="middle" font-size="10" fill="#5f6368">3-tier lookup chain</text>
-
-  <!-- Arrow down -->
-  <line x1="720" y1="169" x2="720" y2="205" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Diamond: cache hit? -->
-  <polygon points="720,210 790,240 720,270 650,240" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="720" y="237" text-anchor="middle" font-size="10" font-weight="600" fill="#e37400">cache</text>
-  <text x="720" y="249" text-anchor="middle" font-size="10" font-weight="600" fill="#e37400">hit?</text>
-
-  <!-- Arrow: cache hit → return (right) -->
-  <line x1="790" y1="240" x2="890" y2="240" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <rect x="900" y="220" width="140" height="40" rx="10" fill="#e6f4ea" stroke="#34a853" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="970" y="237" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">Cached(node)</text>
-  <text x="970" y="252" text-anchor="middle" font-size="10" fill="#34a853">fast path</text>
-  <text x="840" y="233" text-anchor="middle" font-size="10" fill="#34a853" font-weight="600">hit</text>
-
-  <!-- Arrow: cache miss → local shard (down) -->
-  <line x1="720" y1="270" x2="720" y2="310" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="740" y="295" font-size="10" fill="#5f6368">miss</text>
-
-  <!-- Diamond: local shard? -->
-  <polygon points="720,315 790,345 720,375 650,345" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="720" y="342" text-anchor="middle" font-size="10" font-weight="600" fill="#e37400">local</text>
-  <text x="720" y="354" text-anchor="middle" font-size="10" font-weight="600" fill="#e37400">shard?</text>
-
-  <!-- Arrow: local hit → return + cache (right) -->
-  <line x1="790" y1="345" x2="890" y2="345" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <rect x="900" y="325" width="140" height="40" rx="10" fill="#e6f4ea" stroke="#34a853" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="970" y="342" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">Cached(node)</text>
-  <text x="970" y="357" text-anchor="middle" font-size="10" fill="#34a853">+ cache insert</text>
-  <text x="840" y="338" text-anchor="middle" font-size="10" fill="#34a853" font-weight="600">found</text>
-
-  <!-- Arrow: local miss → Kademlia lookup (down) -->
-  <line x1="720" y1="375" x2="720" y2="415" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="740" y="400" font-size="10" fill="#5f6368">not found</text>
-
-  <!-- Step: find closest nodes -->
-  <rect x="620" y="420" width="200" height="44" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="720" y="440" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">routing_table</text>
-  <text x="720" y="455" text-anchor="middle" font-size="10" fill="#5f6368">.closest(target, 3)</text>
-
-  <!-- Arrow down -->
-  <line x1="720" y1="464" x2="720" y2="498" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Diamond: have nodes? -->
-  <polygon points="720,502 780,528 720,554 660,528" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="720" y="525" text-anchor="middle" font-size="10" font-weight="600" fill="#e37400">nodes</text>
-  <text x="720" y="537" text-anchor="middle" font-size="10" font-weight="600" fill="#e37400">found?</text>
-
-  <!-- Arrow: no nodes → NotFound (right) -->
-  <line x1="780" y1="528" x2="890" y2="528" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <rect x="900" y="508" width="140" height="40" rx="10" fill="#fce8e6" stroke="#ea4335" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="970" y="526" text-anchor="middle" font-size="12" font-weight="600" fill="#c5221f">NotFound</text>
-  <text x="970" y="541" text-anchor="middle" font-size="10" fill="#ea4335">no nodes known</text>
-  <text x="835" y="520" text-anchor="middle" font-size="10" fill="#ea4335" font-weight="600">empty</text>
-
-  <!-- Arrow: has nodes → NeedsLookup (down) -->
-  <line x1="720" y1="554" x2="720" y2="588" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- NeedsLookup result -->
-  <rect x="600" y="594" width="240" height="44" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="720" y="613" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">NeedsLookup</text>
-  <text x="720" y="629" text-anchor="middle" font-size="10" fill="#5f6368">caller runs iterative FIND_VALUE</text>
-
-  <!-- ============================================ -->
-  <!-- BOTTOM: NETWORK LOOKUP -->
-  <!-- ============================================ -->
-  <rect x="30" y="665" width="1040" height="90" rx="6" fill="#e8f0fe" fill-opacity="0.2" stroke="#4285f4" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="686" font-size="13" font-weight="700" fill="#4285f4" letter-spacing="1">NETWORK LOOKUP (caller-driven)</text>
-
-  <text x="80" y="710" font-size="11" fill="#5f6368">FIND_VALUE to closest nodes</text>
-  <line x1="260" y1="707" x2="310" y2="707" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-  <text x="330" y="710" font-size="11" fill="#5f6368">quorum read (f+1)</text>
-  <line x1="480" y1="707" x2="530" y2="707" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-  <text x="550" y="710" font-size="11" fill="#5f6368">verify signatures</text>
-  <line x1="680" y1="707" x2="730" y2="707" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-  <text x="750" y="710" font-size="11" fill="#5f6368">highest generation wins</text>
-  <line x1="910" y1="707" x2="960" y2="707" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="980" y="710" font-size="11" fill="#34a853" font-weight="600">cache</text>
-
-  <text x="720" y="740" text-anchor="middle" font-size="10" fill="#9aa0a6">driven by NodeLookup state machine (kademlia/lookup.rs)</text>
-
-  <!-- Source ref -->
-  <text x="550" y="770" text-anchor="middle" font-size="10" fill="#9aa0a6">node.rs:188-229 · directory.rs:27-157 · lookup.rs:48-193 · cache.rs:36-61</text>
-</svg>
diff --git a/docs/diagrams/architecture.svg b/docs/diagrams/architecture.svg
deleted file mode 100644
index 8ef737a..0000000
--- a/docs/diagrams/architecture.svg
+++ /dev/null
@@ -1,1118 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
- "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<!-- Generated by graphviz version 14.1.1 (20251213.1925)
- -->
-<!-- Title: swactor Pages: 1 -->
-<svg width="3803pt" height="2179pt"
- viewBox="0.00 0.00 3803.00 2179.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 2174.6)">
-<title>swactor</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-2174.6 3799.29,-2174.6 3799.29,4 -4,4"/>
-<text xml:space="preserve" text-anchor="middle" x="1897.64" y="-2154" font-family="Helvetica,sans-Serif" font-size="14.00">swactor — internal dependency DAG</text>
-<g id="clust1" class="cluster">
-<title>cluster_actor</title>
-<path fill="#e3f2fd" stroke="#1565c0" d="M1030.78,-1548C1030.78,-1548 3775.29,-1548 3775.29,-1548 3781.29,-1548 3787.29,-1554 3787.29,-1560 3787.29,-1560 3787.29,-1702 3787.29,-1702 3787.29,-1708 3781.29,-1714 3775.29,-1714 3775.29,-1714 1030.78,-1714 1030.78,-1714 1024.78,-1714 1018.78,-1708 1018.78,-1702 1018.78,-1702 1018.78,-1560 1018.78,-1560 1018.78,-1554 1024.78,-1548 1030.78,-1548"/>
-<text xml:space="preserve" text-anchor="middle" x="2403.03" y="-1697.4" font-family="Helvetica,sans-Serif" font-size="14.00">actor</text>
-</g>
-<g id="clust2" class="cluster">
-<title>cluster_worker</title>
-<path fill="#fce4ec" stroke="#c62828" d="M952.82,-1292C952.82,-1292 2444.45,-1292 2444.45,-1292 2450.45,-1292 2456.45,-1298 2456.45,-1304 2456.45,-1304 2456.45,-1489 2456.45,-1489 2456.45,-1495 2450.45,-1501 2444.45,-1501 2444.45,-1501 952.82,-1501 952.82,-1501 946.82,-1501 940.82,-1495 940.82,-1489 940.82,-1489 940.82,-1304 940.82,-1304 940.82,-1298 946.82,-1292 952.82,-1292"/>
-<text xml:space="preserve" text-anchor="middle" x="1698.63" y="-1484.4" font-family="Helvetica,sans-Serif" font-size="14.00">worker</text>
-</g>
-<g id="clust3" class="cluster">
-<title>cluster_channel</title>
-<path fill="#fff3e0" stroke="#e65100" d="M1619.64,-959C1619.64,-959 2964.53,-959 2964.53,-959 2970.53,-959 2976.53,-965 2976.53,-971 2976.53,-971 2976.53,-1073 2976.53,-1073 2976.53,-1079 2970.53,-1085 2964.53,-1085 2964.53,-1085 1619.64,-1085 1619.64,-1085 1613.64,-1085 1607.64,-1079 1607.64,-1073 1607.64,-1073 1607.64,-971 1607.64,-971 1607.64,-965 1613.64,-959 1619.64,-959"/>
-<text xml:space="preserve" text-anchor="middle" x="2292.09" y="-1068.4" font-family="Helvetica,sans-Serif" font-size="14.00">channel</text>
-</g>
-<g id="clust4" class="cluster">
-<title>cluster_error</title>
-<path fill="#f3e5f5" stroke="#7b1fa2" d="M3265.86,-1793C3265.86,-1793 3581.45,-1793 3581.45,-1793 3587.45,-1793 3593.45,-1799 3593.45,-1805 3593.45,-1805 3593.45,-1859 3593.45,-1859 3593.45,-1865 3587.45,-1871 3581.45,-1871 3581.45,-1871 3265.86,-1871 3265.86,-1871 3259.86,-1871 3253.86,-1865 3253.86,-1859 3253.86,-1859 3253.86,-1805 3253.86,-1805 3253.86,-1799 3259.86,-1793 3265.86,-1793"/>
-<text xml:space="preserve" text-anchor="middle" x="3423.66" y="-1854.4" font-family="Helvetica,sans-Serif" font-size="14.00">error</text>
-</g>
-<g id="clust5" class="cluster">
-<title>cluster_config</title>
-<path fill="#e8f5e9" stroke="#2e7d32" d="M2181.83,-428C2181.83,-428 2963,-428 2963,-428 2969,-428 2975,-434 2975,-440 2975,-440 2975,-519 2975,-519 2975,-525 2969,-531 2963,-531 2963,-531 2181.83,-531 2181.83,-531 2175.83,-531 2169.83,-525 2169.83,-519 2169.83,-519 2169.83,-440 2169.83,-440 2169.83,-434 2175.83,-428 2181.83,-428"/>
-<text xml:space="preserve" text-anchor="middle" x="2572.42" y="-514.4" font-family="Helvetica,sans-Serif" font-size="14.00">config</text>
-</g>
-<g id="clust6" class="cluster">
-<title>cluster_delivery</title>
-<path fill="#fff9c4" stroke="#f9a825" d="M1537.29,-131C1537.29,-131 3016.95,-131 3016.95,-131 3022.95,-131 3028.95,-137 3028.95,-143 3028.95,-143 3028.95,-362 3028.95,-362 3028.95,-368 3022.95,-374 3016.95,-374 3016.95,-374 1537.29,-374 1537.29,-374 1531.29,-374 1525.29,-368 1525.29,-362 1525.29,-362 1525.29,-143 1525.29,-143 1525.29,-137 1531.29,-131 1537.29,-131"/>
-<text xml:space="preserve" text-anchor="middle" x="2277.12" y="-357.4" font-family="Helvetica,sans-Serif" font-size="14.00">delivery</text>
-</g>
-<g id="clust7" class="cluster">
-<title>cluster_stats</title>
-<path fill="#e0f7fa" stroke="#00838f" d="M2122.24,-567C2122.24,-567 3233.86,-567 3233.86,-567 3239.86,-567 3245.86,-573 3245.86,-579 3245.86,-579 3245.86,-817 3245.86,-817 3245.86,-823 3239.86,-829 3233.86,-829 3233.86,-829 2122.24,-829 2122.24,-829 2116.24,-829 2110.24,-823 2110.24,-817 2110.24,-817 2110.24,-579 2110.24,-579 2110.24,-573 2116.24,-567 2122.24,-567"/>
-<text xml:space="preserve" text-anchor="middle" x="2678.05" y="-812.4" font-family="Helvetica,sans-Serif" font-size="14.00">stats</text>
-</g>
-<g id="clust8" class="cluster">
-<title>cluster_runtime</title>
-<path fill="#fbe9e7" stroke="#d84315" d="M27.74,-872C27.74,-872 1256.23,-872 1256.23,-872 1262.23,-872 1268.23,-878 1268.23,-884 1268.23,-884 1268.23,-1068 1268.23,-1068 1268.23,-1074 1262.23,-1080 1256.23,-1080 1256.23,-1080 27.74,-1080 27.74,-1080 21.74,-1080 15.74,-1074 15.74,-1068 15.74,-1068 15.74,-884 15.74,-884 15.74,-878 21.74,-872 27.74,-872"/>
-<text xml:space="preserve" text-anchor="middle" x="641.98" y="-1063.4" font-family="Helvetica,sans-Serif" font-size="14.00">runtime</text>
-</g>
-<g id="clust9" class="cluster">
-<title>cluster_transport</title>
-<path fill="#e3f2fd" stroke="#1565c0" stroke-dasharray="5,2" d="M20,-1893C20,-1893 3516.36,-1893 3516.36,-1893 3522.36,-1893 3528.36,-1899 3528.36,-1905 3528.36,-1905 3528.36,-2090 3528.36,-2090 3528.36,-2096 3522.36,-2102 3516.36,-2102 3516.36,-2102 20,-2102 20,-2102 14,-2102 8,-2096 8,-2090 8,-2090 8,-1905 8,-1905 8,-1899 14,-1893 20,-1893"/>
-<text xml:space="preserve" text-anchor="middle" x="1768.18" y="-2085.4" font-family="Helvetica,sans-Serif" font-size="14.00">transport &#160;(feature&#45;gated)</text>
-</g>
-<!-- Message -->
-<g id="node1" class="node">
-<title>Message</title>
-<polygon fill="#bbdefb" stroke="black" points="1685.41,-1569 1685.41,-1605 1779.66,-1605 1779.66,-1569 1685.41,-1569"/>
-<text xml:space="preserve" text-anchor="middle" x="1732.53" y="-1584.1" font-family="Helvetica,sans-Serif" font-size="11.00">«trait» Message</text>
-</g>
-<!-- ActorInterface -->
-<g id="node2" class="node">
-<title>ActorInterface</title>
-<polygon fill="#bbdefb" stroke="black" points="1026.78,-1571.2 1026.78,-1618.8 1338.78,-1618.8 1338.78,-1571.2 1026.78,-1571.2"/>
-<text xml:space="preserve" text-anchor="middle" x="1085.83" y="-1591.7" font-family="Helvetica,sans-Serif" font-size="11.00">«trait» ActorInterface</text>
-<polyline fill="none" stroke="black" points="1144.87,-1571.2 1144.87,-1618.8"/>
-<text xml:space="preserve" text-anchor="middle" x="1241.82" y="-1604.9" font-family="Helvetica,sans-Serif" font-size="11.00">Incoming(Message)</text>
-<text xml:space="preserve" text-anchor="middle" x="1241.82" y="-1591.7" font-family="Helvetica,sans-Serif" font-size="11.00">Response(Message)</text>
-<text xml:space="preserve" text-anchor="middle" x="1241.82" y="-1578.5" font-family="Helvetica,sans-Serif" font-size="11.00">handle((&amp;self, &amp;Ctx, Self::Incoming))</text>
-</g>
-<!-- ActorInterface&#45;&gt;Message -->
-<g id="edge1" class="edge">
-<title>ActorInterface&#45;&gt;Message</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M1339.21,-1588.1C1339.21,-1588.1 1673.52,-1588.1 1673.52,-1588.1"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="1673.52,-1591.6 1683.52,-1588.1 1673.52,-1584.6 1673.52,-1591.6"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-1577.7" font-family="Helvetica,sans-Serif" font-size="9.00">Incoming</text>
-</g>
-<!-- Ctx -->
-<g id="node7" class="node">
-<title>Ctx</title>
-<polygon fill="#bbdefb" stroke="black" points="1641.8,-1645 1641.8,-1681 1823.26,-1681 1823.26,-1645 1641.8,-1645"/>
-<text xml:space="preserve" text-anchor="middle" x="1658.05" y="-1660" font-family="Helvetica,sans-Serif" font-size="11.00">Ctx</text>
-<polyline fill="none" stroke="black" points="1674.3,-1645.6 1674.3,-1681"/>
-<text xml:space="preserve" text-anchor="middle" x="1748.78" y="-1666.6" font-family="Helvetica,sans-Serif" font-size="11.00">inner: &amp;&#39;a dyn ContextInner</text>
-<text xml:space="preserve" text-anchor="middle" x="1748.78" y="-1653.4" font-family="Helvetica,sans-Serif" font-size="11.00">self_addr: ActorAddress</text>
-</g>
-<!-- ActorInterface&#45;&gt;Ctx -->
-<g id="edge2" class="edge">
-<title>ActorInterface&#45;&gt;Ctx</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M1339.12,-1612.4C1479.38,-1612.4 1663.29,-1612.4 1663.29,-1612.4 1663.29,-1612.4 1663.29,-1633.22 1663.29,-1633.22"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="1659.79,-1633.22 1663.29,-1643.22 1666.79,-1633.22 1659.79,-1633.22"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-1611.7" font-family="Helvetica,sans-Serif" font-size="9.00">handle</text>
-</g>
-<!-- ActorAddress -->
-<g id="node3" class="node">
-<title>ActorAddress</title>
-<polygon fill="#bbdefb" stroke="black" points="3638.46,-1557 3638.46,-1593 3779.29,-1593 3779.29,-1557 3638.46,-1557"/>
-<text xml:space="preserve" text-anchor="middle" x="3679.47" y="-1572.1" font-family="Helvetica,sans-Serif" font-size="11.00">ActorAddress</text>
-<polyline fill="none" stroke="black" points="3720.49,-1557.8 3720.49,-1593"/>
-<text xml:space="preserve" text-anchor="middle" x="3749.89" y="-1572.1" font-family="Helvetica,sans-Serif" font-size="11.00">0: [u8; ..]</text>
-</g>
-<!-- Actor -->
-<g id="node4" class="node">
-<title>Actor</title>
-<polygon fill="#bbdefb" stroke="black" points="1144.16,-1639 1144.16,-1675 1221.4,-1675 1221.4,-1639 1144.16,-1639"/>
-<text xml:space="preserve" text-anchor="middle" x="1164.99" y="-1654.1" font-family="Helvetica,sans-Serif" font-size="11.00">Actor</text>
-<polyline fill="none" stroke="black" points="1185.83,-1639.8 1185.83,-1675"/>
-<text xml:space="preserve" text-anchor="middle" x="1203.61" y="-1654.1" font-family="Helvetica,sans-Serif" font-size="11.00">0: A</text>
-</g>
-<!-- AnyActor -->
-<g id="node5" class="node">
-<title>AnyActor</title>
-<polygon fill="#bbdefb" stroke="black" points="2680.49,-1557 2680.49,-1593 3032.57,-1593 3032.57,-1557 2680.49,-1557"/>
-<text xml:space="preserve" text-anchor="middle" x="2727.62" y="-1572.1" font-family="Helvetica,sans-Serif" font-size="11.00">«trait» AnyActor</text>
-<polyline fill="none" stroke="black" points="2774.74,-1557.8 2774.74,-1593"/>
-<text xml:space="preserve" text-anchor="middle" x="2903.65" y="-1572.1" font-family="Helvetica,sans-Serif" font-size="11.00">handle_any((&amp;self, &amp;Ctx, Box&lt;dyn Any + Send&gt;))</text>
-</g>
-<!-- Actor&#45;&gt;AnyActor -->
-<g id="edge8" class="edge">
-<title>Actor&#45;&gt;AnyActor</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="1,5" d="M1182.29,-1638.73C1182.29,-1633.36 1182.29,-1628.9 1182.29,-1628.9 1182.29,-1628.9 2685.29,-1628.9 2685.29,-1628.9 2685.29,-1628.9 2685.29,-1604.76 2685.29,-1604.76"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="2688.79,-1604.76 2685.29,-1594.76 2681.79,-1604.76 2688.79,-1604.76"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-1627.7" font-family="Helvetica,sans-Serif" font-size="9.00">impl</text>
-</g>
-<!-- Actor&#45;&gt;Ctx -->
-<g id="edge9" class="edge">
-<title>Actor&#45;&gt;Ctx</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M1221.87,-1660C1221.87,-1660 1629.95,-1660 1629.95,-1660"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="1629.95,-1663.5 1639.95,-1660 1629.95,-1656.5 1629.95,-1663.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-1664.7" font-family="Helvetica,sans-Serif" font-size="9.00">handle_any() param</text>
-</g>
-<!-- AnyActor&#45;&gt;Ctx -->
-<g id="edge3" class="edge">
-<title>AnyActor&#45;&gt;Ctx</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M2687.29,-1593.16C2687.29,-1617.27 2687.29,-1656.83 2687.29,-1656.83 2687.29,-1656.83 1835.16,-1656.83 1835.16,-1656.83"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="1835.16,-1653.33 1825.16,-1656.83 1835.16,-1660.33 1835.16,-1653.33"/>
-<text xml:space="preserve" text-anchor="middle" x="2301.13" y="-1652.7" font-family="Helvetica,sans-Serif" font-size="9.00">handle_any</text>
-</g>
-<!-- ContextInner -->
-<g id="node6" class="node">
-<title>ContextInner</title>
-<polygon fill="#bbdefb" stroke="black" points="2050.82,-1557 2050.82,-1593 2551.44,-1593 2551.44,-1557 2050.82,-1557"/>
-<text xml:space="preserve" text-anchor="middle" x="2107.12" y="-1572" font-family="Helvetica,sans-Serif" font-size="11.00">«trait» ContextInner</text>
-<polyline fill="none" stroke="black" points="2163.42,-1557.6 2163.42,-1593"/>
-<text xml:space="preserve" text-anchor="middle" x="2357.43" y="-1578.6" font-family="Helvetica,sans-Serif" font-size="11.00">send_any((&amp;self, ActorAddress, Box&lt;dyn Any + Send&gt;) → Result&lt;(), Error&gt;)</text>
-<text xml:space="preserve" text-anchor="middle" x="2357.43" y="-1565.4" font-family="Helvetica,sans-Serif" font-size="11.00">spawn_any((&amp;self, ActorAddress, Box&lt;dyn AnyActor&gt;) → Result&lt;(), Error&gt;)</text>
-</g>
-<!-- ContextInner&#45;&gt;ActorAddress -->
-<g id="edge4" class="edge">
-<title>ContextInner&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M2528.29,-1593.32C2528.29,-1596.86 2528.29,-1599.5 2528.29,-1599.5 2528.29,-1599.5 3662.29,-1599.5 3662.29,-1599.5 3662.29,-1599.5 3662.29,-1598.88 3662.29,-1598.88"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="3665.79,-1604.83 3662.29,-1594.83 3658.79,-1604.83 3665.79,-1604.83"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-1635.7" font-family="Helvetica,sans-Serif" font-size="9.00">send_any</text>
-</g>
-<!-- ContextInner&#45;&gt;AnyActor -->
-<g id="edge5" class="edge">
-<title>ContextInner&#45;&gt;AnyActor</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M2551.62,-1575C2551.62,-1575 2668.81,-1575 2668.81,-1575"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="2668.81,-1578.5 2678.81,-1575 2668.81,-1571.5 2668.81,-1578.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-1577.7" font-family="Helvetica,sans-Serif" font-size="9.00">spawn_any</text>
-</g>
-<!-- Error -->
-<g id="node15" class="node">
-<title>Error</title>
-<polygon fill="#e1bee7" stroke="black" points="3261.86,-1802 3261.86,-1838 3585.45,-1838 3585.45,-1802 3261.86,-1802"/>
-<text xml:space="preserve" text-anchor="middle" x="3282.09" y="-1817.1" font-family="Helvetica,sans-Serif" font-size="11.00">Error</text>
-<polyline fill="none" stroke="black" points="3302.31,-1802.8 3302.31,-1838"/>
-<text xml:space="preserve" text-anchor="middle" x="3443.88" y="-1817.1" font-family="Helvetica,sans-Serif" font-size="11.00">0: Box&lt;dyn std :: error :: Error + Send + Sync + &#39;static&gt;</text>
-</g>
-<!-- ContextInner&#45;&gt;Error -->
-<g id="edge36" class="edge">
-<title>ContextInner&#45;&gt;Error</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M2539.29,-1593.5C2539.29,-1649.07 2539.29,-1810.75 2539.29,-1810.75 2539.29,-1810.75 3249.18,-1810.75 3249.18,-1810.75"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="3249.18,-1814.25 3259.18,-1810.75 3249.18,-1807.25 3249.18,-1814.25"/>
-<text xml:space="preserve" text-anchor="middle" x="2856.53" y="-1719.7" font-family="Helvetica,sans-Serif" font-size="9.00">send_any</text>
-</g>
-<!-- Ctx&#45;&gt;ActorAddress -->
-<g id="edge7" class="edge">
-<title>Ctx&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M1823.45,-1669.17C2208.51,-1669.17 3685.29,-1669.17 3685.29,-1669.17 3685.29,-1669.17 3685.29,-1604.67 3685.29,-1604.67"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="3688.79,-1604.67 3685.29,-1594.67 3681.79,-1604.67 3688.79,-1604.67"/>
-<text xml:space="preserve" text-anchor="middle" x="2856.53" y="-1672.7" font-family="Helvetica,sans-Serif" font-size="9.00">self_addr</text>
-</g>
-<!-- Ctx&#45;&gt;ContextInner -->
-<g id="edge6" class="edge">
-<title>Ctx&#45;&gt;ContextInner</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M1801.29,-1644.8C1801.29,-1620.64 1801.29,-1581 1801.29,-1581 1801.29,-1581 2038.96,-1581 2038.96,-1581"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="2038.96,-1584.5 2048.96,-1581 2038.96,-1577.5 2038.96,-1584.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-1593.7" font-family="Helvetica,sans-Serif" font-size="9.00">inner</text>
-</g>
-<!-- Ctx&#45;&gt;Error -->
-<g id="edge37" class="edge">
-<title>Ctx&#45;&gt;Error</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M1732.29,-1681.32C1732.29,-1722.73 1732.29,-1820 1732.29,-1820 1732.29,-1820 3249.21,-1820 3249.21,-1820"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="3249.21,-1823.5 3259.21,-1820 3249.21,-1816.5 3249.21,-1823.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-1755.7" font-family="Helvetica,sans-Serif" font-size="9.00">send() param</text>
-</g>
-<!-- Worker -->
-<g id="node8" class="node">
-<title>Worker</title>
-<polygon fill="#ffcdd2" stroke="black" points="972.36,-1300.4 972.36,-1387.6 1393.2,-1387.6 1393.2,-1300.4 972.36,-1300.4"/>
-<text xml:space="preserve" text-anchor="middle" x="998.08" y="-1340.7" font-family="Helvetica,sans-Serif" font-size="11.00">Worker</text>
-<polyline fill="none" stroke="black" points="1023.8,-1300.4 1023.8,-1387.6"/>
-<text xml:space="preserve" text-anchor="middle" x="1208.5" y="-1373.7" font-family="Helvetica,sans-Serif" font-size="11.00">id: WorkerId</text>
-<text xml:space="preserve" text-anchor="middle" x="1208.5" y="-1360.5" font-family="Helvetica,sans-Serif" font-size="11.00">pool: ActorPool</text>
-<text xml:space="preserve" text-anchor="middle" x="1208.5" y="-1347.3" font-family="Helvetica,sans-Serif" font-size="11.00">transfer_rx: Receiver&lt;Envelope&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="1208.5" y="-1334.1" font-family="Helvetica,sans-Serif" font-size="11.00">spawn_rx: Receiver&lt;(ActorAddress, Box&lt;dyn AnyActor&gt;)&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="1208.5" y="-1320.9" font-family="Helvetica,sans-Serif" font-size="11.00">stats: Arc&lt;WorkerStats&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="1208.5" y="-1307.7" font-family="Helvetica,sans-Serif" font-size="11.00">mailbox_snapshot: Arc&lt;std::sync::Mutex&lt;Vec&lt;(ActorAddress, usize)&gt;&gt;&gt;</text>
-</g>
-<!-- Worker&#45;&gt;ActorAddress -->
-<g id="edge38" class="edge">
-<title>Worker&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1393.55,-1347.67C1992.96,-1347.67 3664.29,-1347.67 3664.29,-1347.67 3664.29,-1347.67 3664.29,-1544.51 3664.29,-1544.51"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="3660.79,-1544.51 3664.29,-1554.51 3667.79,-1544.51 3660.79,-1544.51"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-923.7" font-family="Helvetica,sans-Serif" font-size="9.00">spawn_rx</text>
-</g>
-<!-- Worker&#45;&gt;AnyActor -->
-<g id="edge39" class="edge">
-<title>Worker&#45;&gt;AnyActor</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1393.56,-1359.61C1807.62,-1359.61 2687.29,-1359.61 2687.29,-1359.61 2687.29,-1359.61 2687.29,-1544.37 2687.29,-1544.37"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2683.79,-1544.37 2687.29,-1554.37 2690.79,-1544.37 2683.79,-1544.37"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-1311.7" font-family="Helvetica,sans-Serif" font-size="9.00">spawn_rx</text>
-</g>
-<!-- ActorPool -->
-<g id="node11" class="node">
-<title>ActorPool</title>
-<polygon fill="#ffcdd2" stroke="black" points="1586.31,-1384 1586.31,-1420 1878.76,-1420 1878.76,-1384 1586.31,-1384"/>
-<text xml:space="preserve" text-anchor="middle" x="1618.15" y="-1399.1" font-family="Helvetica,sans-Serif" font-size="11.00">ActorPool</text>
-<polyline fill="none" stroke="black" points="1650,-1384.8 1650,-1420"/>
-<text xml:space="preserve" text-anchor="middle" x="1764.38" y="-1399.1" font-family="Helvetica,sans-Serif" font-size="11.00">actors: HashMap&lt;ActorAddress, ActorSlot&gt;</text>
-</g>
-<!-- Worker&#45;&gt;ActorPool -->
-<g id="edge10" class="edge">
-<title>Worker&#45;&gt;ActorPool</title>
-<path fill="none" stroke="#c62828" stroke-dasharray="5,2" d="M1393.57,-1371.56C1497.68,-1371.56 1601.29,-1371.56 1601.29,-1371.56 1601.29,-1371.56 1601.29,-1372.76 1601.29,-1372.76"/>
-<polygon fill="#c62828" stroke="#c62828" points="1597.79,-1372.08 1601.29,-1382.08 1604.79,-1372.08 1597.79,-1372.08"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-1394.7" font-family="Helvetica,sans-Serif" font-size="9.00">pool</text>
-</g>
-<!-- Receiver -->
-<g id="node13" class="node">
-<title>Receiver</title>
-<polygon fill="#ffe0b2" stroke="black" points="1615.64,-1016 1615.64,-1052 1849.42,-1052 1849.42,-1016 1615.64,-1016"/>
-<text xml:space="preserve" text-anchor="middle" x="1645.34" y="-1031.1" font-family="Helvetica,sans-Serif" font-size="11.00">Receiver</text>
-<polyline fill="none" stroke="black" points="1675.05,-1016.8 1675.05,-1052"/>
-<text xml:space="preserve" text-anchor="middle" x="1762.23" y="-1031.1" font-family="Helvetica,sans-Serif" font-size="11.00">queue: Arc&lt;HybridChannel&lt;T&gt;&gt;</text>
-</g>
-<!-- Worker&#45;&gt;Receiver -->
-<g id="edge47" class="edge">
-<title>Worker&#45;&gt;Receiver</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1349.29,-1300.22C1349.29,-1214.21 1349.29,-1031.5 1349.29,-1031.5 1349.29,-1031.5 1602.93,-1031.5 1602.93,-1031.5"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="1602.93,-1035 1612.93,-1031.5 1602.93,-1028 1602.93,-1035"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-1100.7" font-family="Helvetica,sans-Serif" font-size="9.00">transfer_rx</text>
-</g>
-<!-- WorkerId -->
-<g id="node18" class="node">
-<title>WorkerId</title>
-<polygon fill="#fff59d" stroke="black" points="2799.27,-250 2799.27,-286 2913.8,-286 2913.8,-250 2799.27,-250"/>
-<text xml:space="preserve" text-anchor="middle" x="2829.58" y="-265.1" font-family="Helvetica,sans-Serif" font-size="11.00">WorkerId</text>
-<polyline fill="none" stroke="black" points="2859.89,-250.8 2859.89,-286"/>
-<text xml:space="preserve" text-anchor="middle" x="2886.84" y="-265.1" font-family="Helvetica,sans-Serif" font-size="11.00">0: usize</text>
-</g>
-<!-- Worker&#45;&gt;WorkerId -->
-<g id="edge49" class="edge">
-<title>Worker&#45;&gt;WorkerId</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1393.65,-1335.73C1771.6,-1335.73 2525.29,-1335.73 2525.29,-1335.73 2525.29,-1335.73 2525.29,-271.7 2525.29,-271.7 2525.29,-271.7 2786.56,-271.7 2786.56,-271.7"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2786.56,-275.2 2796.56,-271.7 2786.56,-268.2 2786.56,-275.2"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-650.7" font-family="Helvetica,sans-Serif" font-size="9.00">id</text>
-</g>
-<!-- Envelope -->
-<g id="node21" class="node">
-<title>Envelope</title>
-<polygon fill="#fff59d" stroke="black" points="2184.99,-140 2184.99,-176 2417.27,-176 2417.27,-140 2184.99,-140"/>
-<text xml:space="preserve" text-anchor="middle" x="2215.92" y="-155" font-family="Helvetica,sans-Serif" font-size="11.00">Envelope</text>
-<polyline fill="none" stroke="black" points="2246.86,-140.6 2246.86,-176"/>
-<text xml:space="preserve" text-anchor="middle" x="2332.07" y="-161.6" font-family="Helvetica,sans-Serif" font-size="11.00">dest: ActorAddress</text>
-<text xml:space="preserve" text-anchor="middle" x="2332.07" y="-148.4" font-family="Helvetica,sans-Serif" font-size="11.00">payload: Box&lt;dyn Any + Send&gt;</text>
-</g>
-<!-- Worker&#45;&gt;Envelope -->
-<g id="edge50" class="edge">
-<title>Worker&#45;&gt;Envelope</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1304.29,-1300.03C1304.29,-1085.39 1304.29,-158 1304.29,-158 1304.29,-158 2172.56,-158 2172.56,-158"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2172.56,-161.5 2182.56,-158 2172.56,-154.5 2172.56,-161.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1732.53" y="-162.7" font-family="Helvetica,sans-Serif" font-size="9.00">transfer_rx</text>
-</g>
-<!-- TickContext -->
-<g id="node24" class="node">
-<title>TickContext</title>
-<polygon fill="#fff59d" stroke="black" points="1533.29,-227.2 1533.29,-340.8 1931.78,-340.8 1931.78,-227.2 1533.29,-227.2"/>
-<text xml:space="preserve" text-anchor="middle" x="1570.32" y="-280.7" font-family="Helvetica,sans-Serif" font-size="11.00">TickContext</text>
-<polyline fill="none" stroke="black" points="1607.36,-227.2 1607.36,-340.8"/>
-<text xml:space="preserve" text-anchor="middle" x="1769.57" y="-326.9" font-family="Helvetica,sans-Serif" font-size="11.00">address_map: &amp;&#39;a AddressMap</text>
-<text xml:space="preserve" text-anchor="middle" x="1769.57" y="-313.7" font-family="Helvetica,sans-Serif" font-size="11.00">transfer_txs: &amp;&#39;a [Sender&lt;Envelope&gt;]</text>
-<text xml:space="preserve" text-anchor="middle" x="1769.57" y="-300.5" font-family="Helvetica,sans-Serif" font-size="11.00">spawn_txs: &amp;&#39;a [Sender&lt;(ActorAddress, Box&lt;dyn AnyActor&gt;)&gt;]</text>
-<text xml:space="preserve" text-anchor="middle" x="1769.57" y="-287.3" font-family="Helvetica,sans-Serif" font-size="11.00">placement: &amp;&#39;a Placement</text>
-<text xml:space="preserve" text-anchor="middle" x="1769.57" y="-274.1" font-family="Helvetica,sans-Serif" font-size="11.00">inbox_registry: &amp;&#39;a InboxRegistry</text>
-<text xml:space="preserve" text-anchor="middle" x="1769.57" y="-260.9" font-family="Helvetica,sans-Serif" font-size="11.00">config: &amp;&#39;a RuntimeConfig</text>
-<text xml:space="preserve" text-anchor="middle" x="1769.57" y="-247.7" font-family="Helvetica,sans-Serif" font-size="11.00">codec_registry: Option&lt;&amp;&#39;a crate::transport::CodecRegistry&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="1769.57" y="-234.5" font-family="Helvetica,sans-Serif" font-size="11.00">transport_router: Option&lt;&amp;&#39;a crate::transport::TransportRouter&gt;</text>
-</g>
-<!-- Worker&#45;&gt;TickContext -->
-<g id="edge53" class="edge">
-<title>Worker&#45;&gt;TickContext</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1393.61,-1311.84C1480.08,-1311.84 1560.29,-1311.84 1560.29,-1311.84 1560.29,-1311.84 1560.29,-353.36 1560.29,-353.36"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="1563.79,-353.36 1560.29,-343.36 1556.79,-353.36 1563.79,-353.36"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-425.7" font-family="Helvetica,sans-Serif" font-size="9.00">tick_once() param</text>
-</g>
-<!-- WorkerStats -->
-<g id="node26" class="node">
-<title>WorkerStats</title>
-<polygon fill="#b2ebf2" stroke="black" points="2118.24,-668.6 2118.24,-795.4 2484.02,-795.4 2484.02,-668.6 2118.24,-668.6"/>
-<text xml:space="preserve" text-anchor="middle" x="2156.49" y="-728.7" font-family="Helvetica,sans-Serif" font-size="11.00">WorkerStats</text>
-<polyline fill="none" stroke="black" points="2194.75,-668.6 2194.75,-795.4"/>
-<text xml:space="preserve" text-anchor="middle" x="2339.39" y="-781.5" font-family="Helvetica,sans-Serif" font-size="11.00">num_actors: AtomicUsize</text>
-<text xml:space="preserve" text-anchor="middle" x="2339.39" y="-768.3" font-family="Helvetica,sans-Serif" font-size="11.00">total_mailbox_depth: AtomicUsize</text>
-<text xml:space="preserve" text-anchor="middle" x="2339.39" y="-755.1" font-family="Helvetica,sans-Serif" font-size="11.00">messages_processed: AtomicU64</text>
-<text xml:space="preserve" text-anchor="middle" x="2339.39" y="-741.9" font-family="Helvetica,sans-Serif" font-size="11.00">local_sends: AtomicU64</text>
-<text xml:space="preserve" text-anchor="middle" x="2339.39" y="-728.7" font-family="Helvetica,sans-Serif" font-size="11.00">cross_sends: AtomicU64</text>
-<text xml:space="preserve" text-anchor="middle" x="2339.39" y="-715.5" font-family="Helvetica,sans-Serif" font-size="11.00">inbox_sends: AtomicU64</text>
-<text xml:space="preserve" text-anchor="middle" x="2339.39" y="-702.3" font-family="Helvetica,sans-Serif" font-size="11.00">type_mismatches: AtomicU64</text>
-<text xml:space="preserve" text-anchor="middle" x="2339.39" y="-689.1" font-family="Helvetica,sans-Serif" font-size="11.00">panics: AtomicU64</text>
-<text xml:space="preserve" text-anchor="middle" x="2339.39" y="-675.9" font-family="Helvetica,sans-Serif" font-size="11.00">tick_timings: std::sync::Mutex&lt;VecDeque&lt;TickTiming&gt;&gt;</text>
-</g>
-<!-- Worker&#45;&gt;WorkerStats -->
-<g id="edge54" class="edge">
-<title>Worker&#45;&gt;WorkerStats</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1393.51,-1323.79C1673.24,-1323.79 2132.29,-1323.79 2132.29,-1323.79 2132.29,-1323.79 2132.29,-808.16 2132.29,-808.16"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2135.79,-808.16 2132.29,-798.16 2128.79,-808.16 2135.79,-808.16"/>
-<text xml:space="preserve" text-anchor="middle" x="1732.53" y="-819.7" font-family="Helvetica,sans-Serif" font-size="9.00">stats</text>
-</g>
-<!-- WorkerContext -->
-<g id="node9" class="node">
-<title>WorkerContext</title>
-<polygon fill="#ffcdd2" stroke="black" points="948.82,-1406.6 948.82,-1467.4 1416.74,-1467.4 1416.74,-1406.6 948.82,-1406.6"/>
-<text xml:space="preserve" text-anchor="middle" x="993.49" y="-1433.7" font-family="Helvetica,sans-Serif" font-size="11.00">WorkerContext</text>
-<polyline fill="none" stroke="black" points="1038.17,-1406.6 1038.17,-1467.4"/>
-<text xml:space="preserve" text-anchor="middle" x="1227.45" y="-1453.5" font-family="Helvetica,sans-Serif" font-size="11.00">worker_id: WorkerId</text>
-<text xml:space="preserve" text-anchor="middle" x="1227.45" y="-1440.3" font-family="Helvetica,sans-Serif" font-size="11.00">tc: &amp;&#39;a TickContext&lt;&#39;a&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="1227.45" y="-1427.1" font-family="Helvetica,sans-Serif" font-size="11.00">pending_local: &amp;&#39;a RefCell&lt;Vec&lt;(ActorAddress, Box&lt;dyn Any + Send&gt;)&gt;&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="1227.45" y="-1413.9" font-family="Helvetica,sans-Serif" font-size="11.00">stats: &amp;&#39;a WorkerStats</text>
-</g>
-<!-- WorkerContext&#45;&gt;ActorAddress -->
-<g id="edge40" class="edge">
-<title>WorkerContext&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1417.22,-1460.2C1916.85,-1460.2 3041.29,-1460.2 3041.29,-1460.2 3041.29,-1460.2 3041.29,-1575 3041.29,-1575 3041.29,-1575 3625.79,-1575 3625.79,-1575"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="3625.79,-1578.5 3635.79,-1575 3625.79,-1571.5 3625.79,-1578.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-1351.7" font-family="Helvetica,sans-Serif" font-size="9.00">pending_local</text>
-</g>
-<!-- WorkerContext&#45;&gt;AnyActor -->
-<g id="edge44" class="edge">
-<title>WorkerContext&#45;&gt;AnyActor</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1417.08,-1464.05C1838.81,-1464.05 2682.29,-1464.05 2682.29,-1464.05 2682.29,-1464.05 2682.29,-1544.41 2682.29,-1544.41"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2678.79,-1544.41 2682.29,-1554.41 2685.79,-1544.41 2678.79,-1544.41"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-1509.7" font-family="Helvetica,sans-Serif" font-size="9.00">spawn_any() param</text>
-</g>
-<!-- WorkerContext&#45;&gt;ContextInner -->
-<g id="edge43" class="edge">
-<title>WorkerContext&#45;&gt;ContextInner</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" stroke-dasharray="1,5" d="M1411.29,-1467.86C1411.29,-1505.6 1411.29,-1564.5 1411.29,-1564.5 1411.29,-1564.5 2038.33,-1564.5 2038.33,-1564.5"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2038.33,-1568 2048.33,-1564.5 2038.33,-1561 2038.33,-1568"/>
-<text xml:space="preserve" text-anchor="middle" x="1732.53" y="-1503.7" font-family="Helvetica,sans-Serif" font-size="9.00">impl</text>
-</g>
-<!-- WorkerContext&#45;&gt;Error -->
-<g id="edge48" class="edge">
-<title>WorkerContext&#45;&gt;Error</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1405.29,-1467.74C1405.29,-1559.42 1405.29,-1824.62 1405.29,-1824.62 1405.29,-1824.62 3249.2,-1824.62 3249.2,-1824.62"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="3249.2,-1828.13 3259.2,-1824.63 3249.2,-1821.13 3249.2,-1828.13"/>
-<text xml:space="preserve" text-anchor="middle" x="2301.13" y="-1795.7" font-family="Helvetica,sans-Serif" font-size="9.00">send_any() param</text>
-</g>
-<!-- WorkerContext&#45;&gt;WorkerId -->
-<g id="edge51" class="edge">
-<title>WorkerContext&#45;&gt;WorkerId</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1416.96,-1456.35C1804.82,-1456.35 2538.29,-1456.35 2538.29,-1456.35 2538.29,-1456.35 2538.29,-279.1 2538.29,-279.1 2538.29,-279.1 2786.63,-279.1 2786.63,-279.1"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2786.63,-282.6 2796.63,-279.1 2786.63,-275.6 2786.63,-282.6"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-684.7" font-family="Helvetica,sans-Serif" font-size="9.00">worker_id</text>
-</g>
-<!-- WorkerContext&#45;&gt;TickContext -->
-<g id="edge52" class="edge">
-<title>WorkerContext&#45;&gt;TickContext</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1416.98,-1413.3C1500.04,-1413.3 1573.29,-1413.3 1573.29,-1413.3 1573.29,-1413.3 1573.29,-353.44 1573.29,-353.44"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="1576.79,-353.44 1573.29,-343.44 1569.79,-353.44 1576.79,-353.44"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-1191.7" font-family="Helvetica,sans-Serif" font-size="9.00">tc</text>
-</g>
-<!-- WorkerContext&#45;&gt;WorkerStats -->
-<g id="edge55" class="edge">
-<title>WorkerContext&#45;&gt;WorkerStats</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1416.94,-1436.5C1702.13,-1436.5 2146.29,-1436.5 2146.29,-1436.5 2146.29,-1436.5 2146.29,-808.03 2146.29,-808.03"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2149.79,-808.03 2146.29,-798.03 2142.79,-808.03 2149.79,-808.03"/>
-<text xml:space="preserve" text-anchor="middle" x="1732.53" y="-942.7" font-family="Helvetica,sans-Serif" font-size="9.00">stats</text>
-</g>
-<!-- ActorSlot -->
-<g id="node10" class="node">
-<title>ActorSlot</title>
-<polygon fill="#ffcdd2" stroke="black" points="2153.81,-1416 2153.81,-1452 2448.45,-1452 2448.45,-1416 2153.81,-1416"/>
-<text xml:space="preserve" text-anchor="middle" x="2184.13" y="-1431" font-family="Helvetica,sans-Serif" font-size="11.00">ActorSlot</text>
-<polyline fill="none" stroke="black" points="2214.44,-1416.6 2214.44,-1452"/>
-<text xml:space="preserve" text-anchor="middle" x="2331.45" y="-1437.6" font-family="Helvetica,sans-Serif" font-size="11.00">mailbox: VecDeque&lt;Box&lt;dyn Any + Send&gt;&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="2331.45" y="-1424.4" font-family="Helvetica,sans-Serif" font-size="11.00">actor: Box&lt;dyn AnyActor&gt;</text>
-</g>
-<!-- ActorSlot&#45;&gt;AnyActor -->
-<g id="edge41" class="edge">
-<title>ActorSlot&#45;&gt;AnyActor</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M2448.72,-1434C2556.66,-1434 2684.29,-1434 2684.29,-1434 2684.29,-1434 2684.29,-1544.3 2684.29,-1544.3"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2680.79,-1544.3 2684.29,-1554.3 2687.79,-1544.3 2680.79,-1544.3"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-1465.7" font-family="Helvetica,sans-Serif" font-size="9.00">actor</text>
-</g>
-<!-- ActorPool&#45;&gt;ActorAddress -->
-<g id="edge42" class="edge">
-<title>ActorPool&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1879.12,-1396.3C2327.65,-1396.3 3651.29,-1396.3 3651.29,-1396.3 3651.29,-1396.3 3651.29,-1544.28 3651.29,-1544.28"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="3647.79,-1544.28 3651.29,-1554.28 3654.79,-1544.28 3647.79,-1544.28"/>
-<text xml:space="preserve" text-anchor="middle" x="2856.53" y="-1397.7" font-family="Helvetica,sans-Serif" font-size="9.00">actors</text>
-</g>
-<!-- ActorPool&#45;&gt;AnyActor -->
-<g id="edge45" class="edge">
-<title>ActorPool&#45;&gt;AnyActor</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1879.05,-1402.7C2146.22,-1402.7 2685.29,-1402.7 2685.29,-1402.7 2685.29,-1402.7 2685.29,-1544.29 2685.29,-1544.29"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2681.79,-1544.29 2685.29,-1554.29 2688.79,-1544.29 2681.79,-1544.29"/>
-<text xml:space="preserve" text-anchor="middle" x="2301.13" y="-1491.7" font-family="Helvetica,sans-Serif" font-size="9.00">insert() param</text>
-</g>
-<!-- ActorPool&#45;&gt;ContextInner -->
-<g id="edge46" class="edge">
-<title>ActorPool&#45;&gt;ContextInner</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1851.29,-1420.49C1851.29,-1462.3 1851.29,-1560.5 1851.29,-1560.5 1851.29,-1560.5 2038.29,-1560.5 2038.29,-1560.5"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2038.29,-1564 2048.29,-1560.5 2038.29,-1557 2038.29,-1564"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-1475.7" font-family="Helvetica,sans-Serif" font-size="9.00">tick_all() param</text>
-</g>
-<!-- ActorPool&#45;&gt;ActorSlot -->
-<g id="edge11" class="edge">
-<title>ActorPool&#45;&gt;ActorSlot</title>
-<path fill="none" stroke="#c62828" stroke-dasharray="5,2" d="M1879.24,-1409.1C2006.79,-1409.1 2171.29,-1409.1 2171.29,-1409.1 2171.29,-1409.1 2171.29,-1409.75 2171.29,-1409.75"/>
-<polygon fill="#c62828" stroke="#c62828" points="2167.79,-1404.13 2171.29,-1414.13 2174.79,-1404.13 2167.79,-1404.13"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-1416.7" font-family="Helvetica,sans-Serif" font-size="9.00">actors</text>
-</g>
-<!-- ActorPool&#45;&gt;WorkerStats -->
-<g id="edge56" class="edge">
-<title>ActorPool&#45;&gt;WorkerStats</title>
-<path fill="none" stroke="#c62828" stroke-width="1.5" d="M1879.09,-1389.9C1995.66,-1389.9 2139.29,-1389.9 2139.29,-1389.9 2139.29,-1389.9 2139.29,-807.95 2139.29,-807.95"/>
-<polygon fill="#c62828" stroke="#c62828" stroke-width="1.5" points="2142.79,-807.95 2139.29,-797.95 2135.79,-807.95 2142.79,-807.95"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-1164.7" font-family="Helvetica,sans-Serif" font-size="9.00">tick_all() param</text>
-</g>
-<!-- HybridChannel -->
-<g id="node12" class="node">
-<title>HybridChannel</title>
-<polygon fill="#ffe0b2" stroke="black" points="2744.53,-992 2744.53,-1028 2968.53,-1028 2968.53,-992 2744.53,-992"/>
-<text xml:space="preserve" text-anchor="middle" x="2788.91" y="-1007" font-family="Helvetica,sans-Serif" font-size="11.00">HybridChannel</text>
-<polyline fill="none" stroke="black" points="2833.29,-992.6 2833.29,-1028"/>
-<text xml:space="preserve" text-anchor="middle" x="2900.91" y="-1013.6" font-family="Helvetica,sans-Serif" font-size="11.00">ring: ArrayQueue&lt;T&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="2900.91" y="-1000.4" font-family="Helvetica,sans-Serif" font-size="11.00">overflow: SegQueue&lt;T&gt;</text>
-</g>
-<!-- Receiver&#45;&gt;HybridChannel -->
-<g id="edge12" class="edge">
-<title>Receiver&#45;&gt;HybridChannel</title>
-<path fill="none" stroke="#e65100" stroke-dasharray="5,2" d="M1849.9,-1024.17C1849.9,-1024.17 2732.84,-1024.17 2732.84,-1024.17"/>
-<polygon fill="#e65100" stroke="#e65100" points="2732.84,-1027.67 2742.84,-1024.17 2732.84,-1020.67 2732.84,-1027.67"/>
-<text xml:space="preserve" text-anchor="middle" x="2301.13" y="-1043.7" font-family="Helvetica,sans-Serif" font-size="9.00">queue</text>
-</g>
-<!-- Sender -->
-<g id="node14" class="node">
-<title>Sender</title>
-<polygon fill="#ffe0b2" stroke="black" points="2188.21,-968 2188.21,-1004 2414.05,-1004 2414.05,-968 2188.21,-968"/>
-<text xml:space="preserve" text-anchor="middle" x="2213.94" y="-983.1" font-family="Helvetica,sans-Serif" font-size="11.00">Sender</text>
-<polyline fill="none" stroke="black" points="2239.68,-968.8 2239.68,-1004"/>
-<text xml:space="preserve" text-anchor="middle" x="2326.87" y="-983.1" font-family="Helvetica,sans-Serif" font-size="11.00">queue: Arc&lt;HybridChannel&lt;T&gt;&gt;</text>
-</g>
-<!-- Receiver&#45;&gt;Sender -->
-<g id="edge14" class="edge">
-<title>Receiver&#45;&gt;Sender</title>
-<path fill="none" stroke="#e65100" stroke-dasharray="5,2" d="M1849.69,-1019.83C2016.19,-1019.83 2301.29,-1019.83 2301.29,-1019.83 2301.29,-1019.83 2301.29,-1015.62 2301.29,-1015.62"/>
-<polygon fill="#e65100" stroke="#e65100" points="2304.79,-1015.62 2301.29,-1005.62 2297.79,-1015.62 2304.79,-1015.62"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-1021.7" font-family="Helvetica,sans-Serif" font-size="9.00">new_sender() param</text>
-</g>
-<!-- Sender&#45;&gt;HybridChannel -->
-<g id="edge13" class="edge">
-<title>Sender&#45;&gt;HybridChannel</title>
-<path fill="none" stroke="#e65100" stroke-dasharray="5,2" d="M2414.53,-998C2414.53,-998 2732.72,-998 2732.72,-998"/>
-<polygon fill="#e65100" stroke="#e65100" points="2732.72,-1001.5 2742.72,-998 2732.72,-994.5 2732.72,-1001.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-1000.7" font-family="Helvetica,sans-Serif" font-size="9.00">queue</text>
-</g>
-<!-- SenderT -->
-<g id="node22" class="node">
-<title>SenderT</title>
-<polygon fill="#fff59d" stroke="black" points="2692.11,-305 2692.11,-341 3020.95,-341 3020.95,-305 2692.11,-305"/>
-<text xml:space="preserve" text-anchor="middle" x="2738.01" y="-320.1" font-family="Helvetica,sans-Serif" font-size="11.00">«trait» SenderT</text>
-<polyline fill="none" stroke="black" points="2783.92,-305.8 2783.92,-341"/>
-<text xml:space="preserve" text-anchor="middle" x="2902.44" y="-320.1" font-family="Helvetica,sans-Serif" font-size="11.00">try_send_any((&amp;self, Box&lt;dyn Any + Send&gt;))</text>
-</g>
-<!-- Sender&#45;&gt;SenderT -->
-<g id="edge57" class="edge">
-<title>Sender&#45;&gt;SenderT</title>
-<path fill="none" stroke="#e65100" stroke-width="1.5" stroke-dasharray="1,5" d="M2414.3,-979.5C2537.83,-979.5 2718.29,-979.5 2718.29,-979.5 2718.29,-979.5 2718.29,-353.51 2718.29,-353.51"/>
-<polygon fill="#e65100" stroke="#e65100" stroke-width="1.5" points="2721.79,-353.51 2718.29,-343.51 2714.79,-353.51 2721.79,-353.51"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-857.7" font-family="Helvetica,sans-Serif" font-size="9.00">impl</text>
-</g>
-<!-- BackoffPolicy -->
-<g id="node16" class="node">
-<title>BackoffPolicy</title>
-<polygon fill="#c8e6c9" stroke="black" points="2746.06,-436.6 2746.06,-497.4 2967,-497.4 2967,-436.6 2746.06,-436.6"/>
-<text xml:space="preserve" text-anchor="middle" x="2787.08" y="-463.7" font-family="Helvetica,sans-Serif" font-size="11.00">BackoffPolicy</text>
-<polyline fill="none" stroke="black" points="2828.09,-436.6 2828.09,-497.4"/>
-<text xml:space="preserve" text-anchor="middle" x="2897.55" y="-483.5" font-family="Helvetica,sans-Serif" font-size="11.00">spin_threshold: u32</text>
-<text xml:space="preserve" text-anchor="middle" x="2897.55" y="-470.3" font-family="Helvetica,sans-Serif" font-size="11.00">yield_threshold: u32</text>
-<text xml:space="preserve" text-anchor="middle" x="2897.55" y="-457.1" font-family="Helvetica,sans-Serif" font-size="11.00">sleep_increment_us: u64</text>
-<text xml:space="preserve" text-anchor="middle" x="2897.55" y="-443.9" font-family="Helvetica,sans-Serif" font-size="11.00">sleep_max_us: u64</text>
-</g>
-<!-- RuntimeConfig -->
-<g id="node17" class="node">
-<title>RuntimeConfig</title>
-<polygon fill="#c8e6c9" stroke="black" points="2177.83,-436.6 2177.83,-497.4 2424.43,-497.4 2424.43,-436.6 2177.83,-436.6"/>
-<text xml:space="preserve" text-anchor="middle" x="2222.21" y="-463.7" font-family="Helvetica,sans-Serif" font-size="11.00">RuntimeConfig</text>
-<polyline fill="none" stroke="black" points="2266.59,-436.6 2266.59,-497.4"/>
-<text xml:space="preserve" text-anchor="middle" x="2345.51" y="-483.5" font-family="Helvetica,sans-Serif" font-size="11.00">max_actors: usize</text>
-<text xml:space="preserve" text-anchor="middle" x="2345.51" y="-470.3" font-family="Helvetica,sans-Serif" font-size="11.00">actor_max_messages: usize</text>
-<text xml:space="preserve" text-anchor="middle" x="2345.51" y="-457.1" font-family="Helvetica,sans-Serif" font-size="11.00">num_threads: usize</text>
-<text xml:space="preserve" text-anchor="middle" x="2345.51" y="-443.9" font-family="Helvetica,sans-Serif" font-size="11.00">backoff_policy: BackoffPolicy</text>
-</g>
-<!-- RuntimeConfig&#45;&gt;BackoffPolicy -->
-<g id="edge15" class="edge">
-<title>RuntimeConfig&#45;&gt;BackoffPolicy</title>
-<path fill="none" stroke="#2e7d32" stroke-dasharray="5,2" d="M2424.74,-467C2424.74,-467 2734.48,-467 2734.48,-467"/>
-<polygon fill="#2e7d32" stroke="#2e7d32" points="2734.48,-470.5 2744.48,-467 2734.48,-463.5 2734.48,-470.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-469.7" font-family="Helvetica,sans-Serif" font-size="9.00">backoff_policy</text>
-</g>
-<!-- AddressMap -->
-<g id="node19" class="node">
-<title>AddressMap</title>
-<polygon fill="#fff59d" stroke="black" points="2124.64,-195 2124.64,-231 2477.62,-231 2477.62,-195 2124.64,-195"/>
-<text xml:space="preserve" text-anchor="middle" x="2163.52" y="-210.1" font-family="Helvetica,sans-Serif" font-size="11.00">AddressMap</text>
-<polyline fill="none" stroke="black" points="2202.39,-195.8 2202.39,-231"/>
-<text xml:space="preserve" text-anchor="middle" x="2340.01" y="-210.1" font-family="Helvetica,sans-Serif" font-size="11.00">inner: RwLock&lt;HashMap&lt;ActorAddress, WorkerId&gt;&gt;</text>
-</g>
-<!-- AddressMap&#45;&gt;ActorAddress -->
-<g id="edge58" class="edge">
-<title>AddressMap&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M2478.1,-213C2865.3,-213 3753.29,-213 3753.29,-213 3753.29,-213 3753.29,-1544.25 3753.29,-1544.25"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="3749.79,-1544.25 3753.29,-1554.25 3756.79,-1544.25 3749.79,-1544.25"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-185.7" font-family="Helvetica,sans-Serif" font-size="9.00">inner</text>
-</g>
-<!-- AddressMap&#45;&gt;WorkerId -->
-<g id="edge16" class="edge">
-<title>AddressMap&#45;&gt;WorkerId</title>
-<path fill="none" stroke="#f9a825" stroke-dasharray="5,2" d="M2435.29,-231.36C2435.29,-243.39 2435.29,-256.9 2435.29,-256.9 2435.29,-256.9 2787.33,-256.9 2787.33,-256.9"/>
-<polygon fill="#f9a825" stroke="#f9a825" points="2787.33,-260.4 2797.33,-256.9 2787.33,-253.4 2787.33,-260.4"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-256.7" font-family="Helvetica,sans-Serif" font-size="9.00">inner</text>
-</g>
-<!-- Placement -->
-<g id="node20" class="node">
-<title>Placement</title>
-<polygon fill="#fff59d" stroke="black" points="2210.24,-250 2210.24,-286 2392.02,-286 2392.02,-250 2210.24,-250"/>
-<text xml:space="preserve" text-anchor="middle" x="2244.22" y="-265" font-family="Helvetica,sans-Serif" font-size="11.00">Placement</text>
-<polyline fill="none" stroke="black" points="2278.21,-250.6 2278.21,-286"/>
-<text xml:space="preserve" text-anchor="middle" x="2335.12" y="-271.6" font-family="Helvetica,sans-Serif" font-size="11.00">next: AtomicUsize</text>
-<text xml:space="preserve" text-anchor="middle" x="2335.12" y="-258.4" font-family="Helvetica,sans-Serif" font-size="11.00">num_workers: usize</text>
-</g>
-<!-- Placement&#45;&gt;WorkerId -->
-<g id="edge22" class="edge">
-<title>Placement&#45;&gt;WorkerId</title>
-<path fill="none" stroke="#f9a825" stroke-dasharray="5,2" d="M2392.22,-264.3C2392.22,-264.3 2787.48,-264.3 2787.48,-264.3"/>
-<polygon fill="#f9a825" stroke="#f9a825" points="2787.48,-267.8 2797.48,-264.3 2787.48,-260.8 2787.48,-267.8"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-290.7" font-family="Helvetica,sans-Serif" font-size="9.00">next_worker() param</text>
-</g>
-<!-- Envelope&#45;&gt;ActorAddress -->
-<g id="edge59" class="edge">
-<title>Envelope&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M2417.63,-158C2764.46,-158 3766.29,-158 3766.29,-158 3766.29,-158 3766.29,-1544.3 3766.29,-1544.3"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="3762.79,-1544.3 3766.29,-1554.3 3769.79,-1544.3 3762.79,-1544.3"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-147.7" font-family="Helvetica,sans-Serif" font-size="9.00">dest</text>
-</g>
-<!-- InboxRegistry -->
-<g id="node23" class="node">
-<title>InboxRegistry</title>
-<polygon fill="#fff59d" stroke="black" points="2090.7,-305 2090.7,-341 2511.56,-341 2511.56,-305 2090.7,-305"/>
-<text xml:space="preserve" text-anchor="middle" x="2132.33" y="-320.1" font-family="Helvetica,sans-Serif" font-size="11.00">InboxRegistry</text>
-<polyline fill="none" stroke="black" points="2173.95,-305.8 2173.95,-341"/>
-<text xml:space="preserve" text-anchor="middle" x="2342.76" y="-320.1" font-family="Helvetica,sans-Serif" font-size="11.00">senders: RwLock&lt;HashMap&lt;ActorAddress, Arc&lt;dyn SenderT&gt;&gt;&gt;</text>
-</g>
-<!-- InboxRegistry&#45;&gt;ActorAddress -->
-<g id="edge60" class="edge">
-<title>InboxRegistry&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M2493.29,-341.22C2493.29,-392.9 2493.29,-536.7 2493.29,-536.7 2493.29,-536.7 3728.29,-536.7 3728.29,-536.7 3728.29,-536.7 3728.29,-1544.27 3728.29,-1544.27"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="3724.79,-1544.27 3728.29,-1554.27 3731.79,-1544.27 3724.79,-1544.27"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-223.7" font-family="Helvetica,sans-Serif" font-size="9.00">senders</text>
-</g>
-<!-- InboxRegistry&#45;&gt;Error -->
-<g id="edge64" class="edge">
-<title>InboxRegistry&#45;&gt;Error</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M2511.78,-329.17C2569.39,-329.17 2616.29,-329.17 2616.29,-329.17 2616.29,-329.17 2616.29,-1806.12 2616.29,-1806.12 2616.29,-1806.12 3249.46,-1806.12 3249.46,-1806.12"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="3249.46,-1809.63 3259.46,-1806.13 3249.46,-1802.63 3249.46,-1809.63"/>
-<text xml:space="preserve" text-anchor="middle" x="2856.53" y="-942.7" font-family="Helvetica,sans-Serif" font-size="9.00">try_deliver() param</text>
-</g>
-<!-- InboxRegistry&#45;&gt;SenderT -->
-<g id="edge17" class="edge">
-<title>InboxRegistry&#45;&gt;SenderT</title>
-<path fill="none" stroke="#f9a825" stroke-dasharray="5,2" d="M2511.9,-316.83C2511.9,-316.83 2680.22,-316.83 2680.22,-316.83"/>
-<polygon fill="#f9a825" stroke="#f9a825" points="2680.22,-320.33 2690.22,-316.83 2680.22,-313.33 2680.22,-320.33"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-325.7" font-family="Helvetica,sans-Serif" font-size="9.00">senders</text>
-</g>
-<!-- TickContext&#45;&gt;ActorAddress -->
-<g id="edge61" class="edge">
-<title>TickContext&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M1932.02,-292.5C2439.79,-292.5 3741.29,-292.5 3741.29,-292.5 3741.29,-292.5 3741.29,-1544.35 3741.29,-1544.35"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="3737.79,-1544.35 3741.29,-1554.35 3744.79,-1544.35 3737.79,-1544.35"/>
-<text xml:space="preserve" text-anchor="middle" x="2856.53" y="-857.7" font-family="Helvetica,sans-Serif" font-size="9.00">spawn_txs</text>
-</g>
-<!-- TickContext&#45;&gt;AnyActor -->
-<g id="edge62" class="edge">
-<title>TickContext&#45;&gt;AnyActor</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M1932.14,-298.5C2212.83,-298.5 2690.29,-298.5 2690.29,-298.5 2690.29,-298.5 2690.29,-1544.68 2690.29,-1544.68"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="2686.79,-1544.68 2690.29,-1554.68 2693.79,-1544.68 2686.79,-1544.68"/>
-<text xml:space="preserve" text-anchor="middle" x="2301.13" y="-1151.7" font-family="Helvetica,sans-Serif" font-size="9.00">spawn_txs</text>
-</g>
-<!-- TickContext&#45;&gt;Sender -->
-<g id="edge63" class="edge">
-<title>TickContext&#45;&gt;Sender</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M1914.29,-341.13C1914.29,-506.66 1914.29,-974.9 1914.29,-974.9 1914.29,-974.9 2175.67,-974.9 2175.67,-974.9"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="2175.67,-978.4 2185.67,-974.9 2175.67,-971.4 2175.67,-978.4"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-781.7" font-family="Helvetica,sans-Serif" font-size="9.00">transfer_txs</text>
-</g>
-<!-- TickContext&#45;&gt;Error -->
-<g id="edge65" class="edge">
-<title>TickContext&#45;&gt;Error</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M1905.29,-341.24C1905.29,-619.24 1905.29,-1815.38 1905.29,-1815.38 1905.29,-1815.38 3249.25,-1815.38 3249.25,-1815.38"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="3249.25,-1818.88 3259.25,-1815.38 3249.25,-1811.88 3249.25,-1818.88"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-1119.7" font-family="Helvetica,sans-Serif" font-size="9.00">route_nonlocal() param</text>
-</g>
-<!-- TickContext&#45;&gt;RuntimeConfig -->
-<g id="edge66" class="edge">
-<title>TickContext&#45;&gt;RuntimeConfig</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M1923.29,-341.03C1923.29,-391.33 1923.29,-456.7 1923.29,-456.7 1923.29,-456.7 2165.14,-456.7 2165.14,-456.7"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="2165.14,-460.2 2175.14,-456.7 2165.14,-453.2 2165.14,-460.2"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-417.7" font-family="Helvetica,sans-Serif" font-size="9.00">config</text>
-</g>
-<!-- TickContext&#45;&gt;AddressMap -->
-<g id="edge18" class="edge">
-<title>TickContext&#45;&gt;AddressMap</title>
-<path fill="none" stroke="#f9a825" stroke-dasharray="5,2" d="M1932.1,-240.5C2046.39,-240.5 2167.29,-240.5 2167.29,-240.5 2167.29,-240.5 2167.29,-239.6 2167.29,-239.6"/>
-<polygon fill="#f9a825" stroke="#f9a825" points="2170.79,-243.01 2167.29,-233.01 2163.79,-243.01 2170.79,-243.01"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-264.7" font-family="Helvetica,sans-Serif" font-size="9.00">address_map</text>
-</g>
-<!-- TickContext&#45;&gt;Placement -->
-<g id="edge20" class="edge">
-<title>TickContext&#45;&gt;Placement</title>
-<path fill="none" stroke="#f9a825" stroke-dasharray="5,2" d="M1932.2,-261.83C1932.2,-261.83 2198.23,-261.83 2198.23,-261.83"/>
-<polygon fill="#f9a825" stroke="#f9a825" points="2198.23,-265.33 2208.23,-261.83 2198.23,-258.33 2198.23,-265.33"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-298.7" font-family="Helvetica,sans-Serif" font-size="9.00">placement</text>
-</g>
-<!-- TickContext&#45;&gt;Envelope -->
-<g id="edge19" class="edge">
-<title>TickContext&#45;&gt;Envelope</title>
-<path fill="none" stroke="#f9a825" stroke-dasharray="5,2" d="M1732.29,-226.99C1732.29,-197.36 1732.29,-167.25 1732.29,-167.25 1732.29,-167.25 2173.13,-167.25 2173.13,-167.25"/>
-<polygon fill="#f9a825" stroke="#f9a825" points="2173.13,-170.75 2183.13,-167.25 2173.13,-163.75 2173.13,-170.75"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-230.7" font-family="Helvetica,sans-Serif" font-size="9.00">transfer_txs</text>
-</g>
-<!-- TickContext&#45;&gt;InboxRegistry -->
-<g id="edge21" class="edge">
-<title>TickContext&#45;&gt;InboxRegistry</title>
-<path fill="none" stroke="#f9a825" stroke-dasharray="5,2" d="M1932.2,-322.9C1932.2,-322.9 2078.85,-322.9 2078.85,-322.9"/>
-<polygon fill="#f9a825" stroke="#f9a825" points="2078.85,-326.4 2088.85,-322.9 2078.85,-319.4 2078.85,-326.4"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-332.7" font-family="Helvetica,sans-Serif" font-size="9.00">inbox_registry</text>
-</g>
-<!-- CodecRegistry -->
-<g id="node37" class="node">
-<title>CodecRegistry</title>
-<polygon fill="#bbdefb" stroke="black" points="2703.88,-1957 2703.88,-1993 3009.19,-1993 3009.19,-1957 2703.88,-1957"/>
-<text xml:space="preserve" text-anchor="middle" x="2747.94" y="-1972" font-family="Helvetica,sans-Serif" font-size="11.00">CodecRegistry</text>
-<polyline fill="none" stroke="black" points="2792.01,-1957.6 2792.01,-1993"/>
-<text xml:space="preserve" text-anchor="middle" x="2900.6" y="-1978.6" font-family="Helvetica,sans-Serif" font-size="11.00">encoders: HashMap&lt;TypeId, EncodeFn&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="2900.6" y="-1965.4" font-family="Helvetica,sans-Serif" font-size="11.00">decoders: HashMap&lt;String, DecodeFn&gt;</text>
-</g>
-<!-- TickContext&#45;&gt;CodecRegistry -->
-<g id="edge67" class="edge">
-<title>TickContext&#45;&gt;CodecRegistry</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M1887.29,-341.21C1887.29,-638.02 1887.29,-1988.83 1887.29,-1988.83 1887.29,-1988.83 2691.22,-1988.83 2691.22,-1988.83"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="2691.22,-1992.33 2701.22,-1988.83 2691.22,-1985.33 2691.22,-1992.33"/>
-<text xml:space="preserve" text-anchor="middle" x="2301.13" y="-1274.7" font-family="Helvetica,sans-Serif" font-size="9.00">codec_registry</text>
-</g>
-<!-- TransportRouter -->
-<g id="node38" class="node">
-<title>TransportRouter</title>
-<polygon fill="#bbdefb" stroke="black" points="2086.12,-1950 2086.12,-1986 2516.14,-1986 2516.14,-1950 2086.12,-1950"/>
-<text xml:space="preserve" text-anchor="middle" x="2134.17" y="-1965.1" font-family="Helvetica,sans-Serif" font-size="11.00">TransportRouter</text>
-<polyline fill="none" stroke="black" points="2182.21,-1950.8 2182.21,-1986"/>
-<text xml:space="preserve" text-anchor="middle" x="2349.18" y="-1965.1" font-family="Helvetica,sans-Serif" font-size="11.00">routes: RwLock&lt;HashMap&lt;ActorAddress, Arc&lt;dyn Transport&gt;&gt;&gt;</text>
-</g>
-<!-- TickContext&#45;&gt;TransportRouter -->
-<g id="edge68" class="edge">
-<title>TickContext&#45;&gt;TransportRouter</title>
-<path fill="none" stroke="#f9a825" stroke-width="1.5" d="M1896.29,-341.04C1896.29,-633.93 1896.29,-1955.17 1896.29,-1955.17 1896.29,-1955.17 2073.4,-1955.17 2073.4,-1955.17"/>
-<polygon fill="#f9a825" stroke="#f9a825" stroke-width="1.5" points="2073.4,-1958.67 2083.4,-1955.17 2073.4,-1951.67 2073.4,-1958.67"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-1275.7" font-family="Helvetica,sans-Serif" font-size="9.00">transport_router</text>
-</g>
-<!-- TickTiming -->
-<g id="node25" class="node">
-<title>TickTiming</title>
-<polygon fill="#b2ebf2" stroke="black" points="2744.55,-748.2 2744.55,-795.8 2968.51,-795.8 2968.51,-748.2 2744.55,-748.2"/>
-<text xml:space="preserve" text-anchor="middle" x="2779.13" y="-768.7" font-family="Helvetica,sans-Serif" font-size="11.00">TickTiming</text>
-<polyline fill="none" stroke="black" points="2813.72,-748.2 2813.72,-795.8"/>
-<text xml:space="preserve" text-anchor="middle" x="2891.12" y="-781.9" font-family="Helvetica,sans-Serif" font-size="11.00">phase_us: [u64; ..]</text>
-<text xml:space="preserve" text-anchor="middle" x="2891.12" y="-768.7" font-family="Helvetica,sans-Serif" font-size="11.00">messages_processed: usize</text>
-<text xml:space="preserve" text-anchor="middle" x="2891.12" y="-755.5" font-family="Helvetica,sans-Serif" font-size="11.00">did_work: bool</text>
-</g>
-<!-- WorkerStats&#45;&gt;TickTiming -->
-<g id="edge23" class="edge">
-<title>WorkerStats&#45;&gt;TickTiming</title>
-<path fill="none" stroke="#00838f" stroke-dasharray="5,2" d="M2484.14,-779.83C2484.14,-779.83 2732.93,-779.83 2732.93,-779.83"/>
-<polygon fill="#00838f" stroke="#00838f" points="2732.93,-783.33 2742.93,-779.83 2732.93,-776.33 2732.93,-783.33"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-769.7" font-family="Helvetica,sans-Serif" font-size="9.00">tick_timings</text>
-</g>
-<!-- WorkerInfo -->
-<g id="node27" class="node">
-<title>WorkerInfo</title>
-<polygon fill="#b2ebf2" stroke="black" points="2747.9,-602.6 2747.9,-729.4 2965.16,-729.4 2965.16,-602.6 2747.9,-602.6"/>
-<text xml:space="preserve" text-anchor="middle" x="2782.8" y="-662.7" font-family="Helvetica,sans-Serif" font-size="11.00">WorkerInfo</text>
-<polyline fill="none" stroke="black" points="2817.69,-602.6 2817.69,-729.4"/>
-<text xml:space="preserve" text-anchor="middle" x="2891.43" y="-715.5" font-family="Helvetica,sans-Serif" font-size="11.00">id: usize</text>
-<text xml:space="preserve" text-anchor="middle" x="2891.43" y="-702.3" font-family="Helvetica,sans-Serif" font-size="11.00">num_actors: usize</text>
-<text xml:space="preserve" text-anchor="middle" x="2891.43" y="-689.1" font-family="Helvetica,sans-Serif" font-size="11.00">mailbox_depth: usize</text>
-<text xml:space="preserve" text-anchor="middle" x="2891.43" y="-675.9" font-family="Helvetica,sans-Serif" font-size="11.00">messages_processed: u64</text>
-<text xml:space="preserve" text-anchor="middle" x="2891.43" y="-662.7" font-family="Helvetica,sans-Serif" font-size="11.00">local_sends: u64</text>
-<text xml:space="preserve" text-anchor="middle" x="2891.43" y="-649.5" font-family="Helvetica,sans-Serif" font-size="11.00">cross_sends: u64</text>
-<text xml:space="preserve" text-anchor="middle" x="2891.43" y="-636.3" font-family="Helvetica,sans-Serif" font-size="11.00">inbox_sends: u64</text>
-<text xml:space="preserve" text-anchor="middle" x="2891.43" y="-623.1" font-family="Helvetica,sans-Serif" font-size="11.00">type_mismatches: u64</text>
-<text xml:space="preserve" text-anchor="middle" x="2891.43" y="-609.9" font-family="Helvetica,sans-Serif" font-size="11.00">panics: u64</text>
-</g>
-<!-- WorkerStats&#45;&gt;WorkerInfo -->
-<g id="edge27" class="edge">
-<title>WorkerStats&#45;&gt;WorkerInfo</title>
-<path fill="none" stroke="#00838f" stroke-dasharray="5,2" d="M2484.14,-699C2484.14,-699 2736.2,-699 2736.2,-699"/>
-<polygon fill="#00838f" stroke="#00838f" points="2736.2,-702.5 2746.2,-699 2736.2,-695.5 2736.2,-702.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-731.7" font-family="Helvetica,sans-Serif" font-size="9.00">snapshot() param</text>
-</g>
-<!-- ActorInfo -->
-<g id="node28" class="node">
-<title>ActorInfo</title>
-<polygon fill="#b2ebf2" stroke="black" points="3050.57,-662.2 3050.57,-709.8 3237.86,-709.8 3237.86,-662.2 3050.57,-662.2"/>
-<text xml:space="preserve" text-anchor="middle" x="3080.58" y="-682.7" font-family="Helvetica,sans-Serif" font-size="11.00">ActorInfo</text>
-<polyline fill="none" stroke="black" points="3110.59,-662.2 3110.59,-709.8"/>
-<text xml:space="preserve" text-anchor="middle" x="3174.23" y="-695.9" font-family="Helvetica,sans-Serif" font-size="11.00">address: ActorAddress</text>
-<text xml:space="preserve" text-anchor="middle" x="3174.23" y="-682.7" font-family="Helvetica,sans-Serif" font-size="11.00">worker_id: usize</text>
-<text xml:space="preserve" text-anchor="middle" x="3174.23" y="-669.5" font-family="Helvetica,sans-Serif" font-size="11.00">mailbox_depth: usize</text>
-</g>
-<!-- ActorInfo&#45;&gt;ActorAddress -->
-<g id="edge69" class="edge">
-<title>ActorInfo&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#00838f" stroke-width="1.5" d="M3238.25,-686C3397.3,-686 3702.29,-686 3702.29,-686 3702.29,-686 3702.29,-1544.57 3702.29,-1544.57"/>
-<polygon fill="#00838f" stroke="#00838f" stroke-width="1.5" points="3698.79,-1544.57 3702.29,-1554.57 3705.79,-1544.57 3698.79,-1544.57"/>
-<text xml:space="preserve" text-anchor="middle" x="3423.66" y="-796.7" font-family="Helvetica,sans-Serif" font-size="9.00">address</text>
-</g>
-<!-- RuntimeStats -->
-<g id="node29" class="node">
-<title>RuntimeStats</title>
-<polygon fill="#b2ebf2" stroke="black" points="2161.94,-576 2161.94,-650 2440.32,-650 2440.32,-576 2161.94,-576"/>
-<text xml:space="preserve" text-anchor="middle" x="2202.96" y="-609.7" font-family="Helvetica,sans-Serif" font-size="11.00">RuntimeStats</text>
-<polyline fill="none" stroke="black" points="2243.97,-576 2243.97,-650"/>
-<text xml:space="preserve" text-anchor="middle" x="2342.14" y="-636.1" font-family="Helvetica,sans-Serif" font-size="11.00">num_workers: usize</text>
-<text xml:space="preserve" text-anchor="middle" x="2342.14" y="-622.9" font-family="Helvetica,sans-Serif" font-size="11.00">actors: Vec&lt;(ActorAddress, usize)&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="2342.14" y="-609.7" font-family="Helvetica,sans-Serif" font-size="11.00">workers: Vec&lt;WorkerInfo&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="2342.14" y="-596.5" font-family="Helvetica,sans-Serif" font-size="11.00">actor_details: Vec&lt;ActorInfo&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="2342.14" y="-583.3" font-family="Helvetica,sans-Serif" font-size="11.00">tick_timings: Vec&lt;Vec&lt;TickTiming&gt;&gt;</text>
-</g>
-<!-- RuntimeStats&#45;&gt;ActorAddress -->
-<g id="edge70" class="edge">
-<title>RuntimeStats&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#00838f" stroke-width="1.5" d="M2440.6,-584.37C2797.37,-584.37 3715.29,-584.37 3715.29,-584.37 3715.29,-584.37 3715.29,-1544.26 3715.29,-1544.26"/>
-<polygon fill="#00838f" stroke="#00838f" stroke-width="1.5" points="3711.79,-1544.26 3715.29,-1554.26 3718.79,-1544.26 3711.79,-1544.26"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-556.7" font-family="Helvetica,sans-Serif" font-size="9.00">actors</text>
-</g>
-<!-- RuntimeStats&#45;&gt;TickTiming -->
-<g id="edge26" class="edge">
-<title>RuntimeStats&#45;&gt;TickTiming</title>
-<path fill="none" stroke="#00838f" stroke-dasharray="5,2" d="M2440.57,-634.37C2475.02,-634.37 2502.29,-634.37 2502.29,-634.37 2502.29,-634.37 2502.29,-763.77 2502.29,-763.77 2502.29,-763.77 2732.93,-763.77 2732.93,-763.77"/>
-<polygon fill="#00838f" stroke="#00838f" points="2732.93,-767.27 2742.93,-763.77 2732.93,-760.27 2732.93,-767.27"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-694.7" font-family="Helvetica,sans-Serif" font-size="9.00">tick_timings</text>
-</g>
-<!-- RuntimeStats&#45;&gt;WorkerInfo -->
-<g id="edge24" class="edge">
-<title>RuntimeStats&#45;&gt;WorkerInfo</title>
-<path fill="none" stroke="#00838f" stroke-dasharray="5,2" d="M2440.57,-618.23C2440.57,-618.23 2736.17,-618.23 2736.17,-618.23"/>
-<polygon fill="#00838f" stroke="#00838f" points="2736.17,-621.73 2746.17,-618.23 2736.17,-614.73 2736.17,-621.73"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-654.7" font-family="Helvetica,sans-Serif" font-size="9.00">workers</text>
-</g>
-<!-- RuntimeStats&#45;&gt;ActorInfo -->
-<g id="edge25" class="edge">
-<title>RuntimeStats&#45;&gt;ActorInfo</title>
-<path fill="none" stroke="#00838f" stroke-dasharray="5,2" d="M2440.36,-593.23C2679.84,-593.23 3144.29,-593.23 3144.29,-593.23 3144.29,-593.23 3144.29,-650.6 3144.29,-650.6"/>
-<polygon fill="#00838f" stroke="#00838f" points="3140.79,-650.6 3144.29,-660.6 3147.79,-650.6 3140.79,-650.6"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-609.7" font-family="Helvetica,sans-Serif" font-size="9.00">actor_details</text>
-</g>
-<!-- Inbox -->
-<g id="node30" class="node">
-<title>Inbox</title>
-<polygon fill="#ffccbc" stroke="black" points="1105.33,-1011 1105.33,-1047 1260.23,-1047 1260.23,-1011 1105.33,-1011"/>
-<text xml:space="preserve" text-anchor="middle" x="1126.78" y="-1026" font-family="Helvetica,sans-Serif" font-size="11.00">Inbox</text>
-<polyline fill="none" stroke="black" points="1148.24,-1011.6 1148.24,-1047"/>
-<text xml:space="preserve" text-anchor="middle" x="1204.23" y="-1032.6" font-family="Helvetica,sans-Serif" font-size="11.00">addr: ActorAddress</text>
-<text xml:space="preserve" text-anchor="middle" x="1204.23" y="-1019.4" font-family="Helvetica,sans-Serif" font-size="11.00">inner: Receiver&lt;M&gt;</text>
-</g>
-<!-- Inbox&#45;&gt;ActorAddress -->
-<g id="edge71" class="edge">
-<title>Inbox&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M1182.29,-1047.35C1182.29,-1086.8 1182.29,-1176.2 1182.29,-1176.2 1182.29,-1176.2 3677.29,-1176.2 3677.29,-1176.2 3677.29,-1176.2 3677.29,-1544.29 3677.29,-1544.29"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="3673.79,-1544.29 3677.29,-1554.29 3680.79,-1544.29 3673.79,-1544.29"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-1190.7" font-family="Helvetica,sans-Serif" font-size="9.00">addr</text>
-</g>
-<!-- Inbox&#45;&gt;Receiver -->
-<g id="edge76" class="edge">
-<title>Inbox&#45;&gt;Receiver</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M1260.67,-1023.5C1260.67,-1023.5 1603.07,-1023.5 1603.07,-1023.5"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="1603.07,-1027 1613.07,-1023.5 1603.07,-1020 1603.07,-1027"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-1032.7" font-family="Helvetica,sans-Serif" font-size="9.00">inner</text>
-</g>
-<!-- RuntimeHandle -->
-<g id="node31" class="node">
-<title>RuntimeHandle</title>
-<polygon fill="#ffccbc" stroke="black" points="23.74,-946 23.74,-982 281.37,-982 281.37,-946 23.74,-946"/>
-<text xml:space="preserve" text-anchor="middle" x="69.65" y="-961" font-family="Helvetica,sans-Serif" font-size="11.00">RuntimeHandle</text>
-<polyline fill="none" stroke="black" points="115.56,-946.6 115.56,-982"/>
-<text xml:space="preserve" text-anchor="middle" x="198.47" y="-967.6" font-family="Helvetica,sans-Serif" font-size="11.00">runtime: Arc&lt;Runtime&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="198.47" y="-954.4" font-family="Helvetica,sans-Serif" font-size="11.00">threads: Vec&lt;JoinHandle&lt;()&gt;&gt;</text>
-</g>
-<!-- Runtime -->
-<g id="node32" class="node">
-<title>Runtime</title>
-<polygon fill="#ffccbc" stroke="black" points="372.13,-880.8 372.13,-1047.2 835.78,-1047.2 835.78,-880.8 372.13,-880.8"/>
-<text xml:space="preserve" text-anchor="middle" x="400.61" y="-960.7" font-family="Helvetica,sans-Serif" font-size="11.00">Runtime</text>
-<polyline fill="none" stroke="black" points="429.09,-880.8 429.09,-1047.2"/>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-1033.3" font-family="Helvetica,sans-Serif" font-size="11.00">config: RuntimeConfig</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-1020.1" font-family="Helvetica,sans-Serif" font-size="11.00">address_map: Arc&lt;AddressMap&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-1006.9" font-family="Helvetica,sans-Serif" font-size="11.00">inbox_registry: Arc&lt;InboxRegistry&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-993.7" font-family="Helvetica,sans-Serif" font-size="11.00">transfer_txs: Vec&lt;Sender&lt;Envelope&gt;&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-980.5" font-family="Helvetica,sans-Serif" font-size="11.00">spawn_txs: Vec&lt;Sender&lt;(ActorAddress, Box&lt;dyn AnyActor&gt;)&gt;&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-967.3" font-family="Helvetica,sans-Serif" font-size="11.00">placement: Placement</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-954.1" font-family="Helvetica,sans-Serif" font-size="11.00">is_running: AtomicBool</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-940.9" font-family="Helvetica,sans-Serif" font-size="11.00">worker_stats: Vec&lt;Arc&lt;WorkerStats&gt;&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-927.7" font-family="Helvetica,sans-Serif" font-size="11.00">mailbox_snapshots: Vec&lt;Arc&lt;std::sync::Mutex&lt;Vec&lt;(ActorAddress, usize)&gt;&gt;&gt;&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-914.5" font-family="Helvetica,sans-Serif" font-size="11.00">tick_workers: RefCell&lt;Vec&lt;Worker&gt;&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-901.3" font-family="Helvetica,sans-Serif" font-size="11.00">codec_registry: Option&lt;Arc&lt;crate::transport::CodecRegistry&gt;&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="632.43" y="-888.1" font-family="Helvetica,sans-Serif" font-size="11.00">transport_router: Option&lt;Arc&lt;crate::transport::TransportRouter&gt;&gt;</text>
-</g>
-<!-- RuntimeHandle&#45;&gt;Runtime -->
-<g id="edge28" class="edge">
-<title>RuntimeHandle&#45;&gt;Runtime</title>
-<path fill="none" stroke="#d84315" stroke-dasharray="5,2" d="M281.61,-970.17C281.61,-970.17 360.49,-970.17 360.49,-970.17"/>
-<polygon fill="#d84315" stroke="#d84315" points="360.49,-973.67 370.49,-970.17 360.49,-966.67 360.49,-973.67"/>
-<text xml:space="preserve" text-anchor="middle" x="330.62" y="-949.7" font-family="Helvetica,sans-Serif" font-size="9.00">runtime</text>
-</g>
-<!-- Runtime&#45;&gt;ActorAddress -->
-<g id="edge72" class="edge">
-<title>Runtime&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M836.17,-942.59C1554.01,-942.59 3689.29,-942.59 3689.29,-942.59 3689.29,-942.59 3689.29,-1544.48 3689.29,-1544.48"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="3685.79,-1544.48 3689.29,-1554.48 3692.79,-1544.48 3685.79,-1544.48"/>
-<text xml:space="preserve" text-anchor="middle" x="2301.13" y="-2.7" font-family="Helvetica,sans-Serif" font-size="9.00">spawn_txs</text>
-</g>
-<!-- Runtime&#45;&gt;AnyActor -->
-<g id="edge73" class="edge">
-<title>Runtime&#45;&gt;AnyActor</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M836.09,-955.04C1379.65,-955.04 2689.29,-955.04 2689.29,-955.04 2689.29,-955.04 2689.29,-1544.51 2689.29,-1544.51"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2685.79,-1544.51 2689.29,-1554.51 2692.79,-1544.51 2685.79,-1544.51"/>
-<text xml:space="preserve" text-anchor="middle" x="1732.53" y="-1217.7" font-family="Helvetica,sans-Serif" font-size="9.00">spawn_txs</text>
-</g>
-<!-- Runtime&#45;&gt;ContextInner -->
-<g id="edge74" class="edge">
-<title>Runtime&#45;&gt;ContextInner</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" stroke-dasharray="1,5" d="M835.89,-989.7C1249.23,-989.7 2070.29,-989.7 2070.29,-989.7 2070.29,-989.7 2070.29,-1544.25 2070.29,-1544.25"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2066.79,-1544.25 2070.29,-1554.25 2073.79,-1544.25 2066.79,-1544.25"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-1543.7" font-family="Helvetica,sans-Serif" font-size="9.00">impl</text>
-</g>
-<!-- Runtime&#45;&gt;Worker -->
-<g id="edge75" class="edge">
-<title>Runtime&#45;&gt;Worker</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M836.28,-1035.17C940.01,-1035.17 1039.29,-1035.17 1039.29,-1035.17 1039.29,-1035.17 1039.29,-1287.81 1039.29,-1287.81"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="1035.79,-1287.81 1039.29,-1297.81 1042.79,-1287.81 1035.79,-1287.81"/>
-<text xml:space="preserve" text-anchor="middle" x="892.3" y="-1298.7" font-family="Helvetica,sans-Serif" font-size="9.00">tick_workers</text>
-</g>
-<!-- Runtime&#45;&gt;Sender -->
-<g id="edge77" class="edge">
-<title>Runtime&#45;&gt;Sender</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M835.94,-982.3C835.94,-982.3 2175.62,-982.3 2175.62,-982.3"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2175.62,-985.8 2185.62,-982.3 2175.62,-978.8 2175.62,-985.8"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-983.7" font-family="Helvetica,sans-Serif" font-size="9.00">transfer_txs</text>
-</g>
-<!-- Runtime&#45;&gt;Error -->
-<g id="edge78" class="edge">
-<title>Runtime&#45;&gt;Error</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M720.29,-1047.36C720.29,-1264.21 720.29,-1829.25 720.29,-1829.25 720.29,-1829.25 3249.12,-1829.25 3249.12,-1829.25"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="3249.12,-1832.75 3259.12,-1829.25 3249.12,-1825.75 3249.12,-1832.75"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-1830.7" font-family="Helvetica,sans-Serif" font-size="9.00">spawn() param</text>
-</g>
-<!-- Runtime&#45;&gt;RuntimeConfig -->
-<g id="edge79" class="edge">
-<title>Runtime&#45;&gt;RuntimeConfig</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M650.29,-880.33C650.29,-741.18 650.29,-477.3 650.29,-477.3 650.29,-477.3 2165.12,-477.3 2165.12,-477.3"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2165.12,-480.8 2175.12,-477.3 2165.12,-473.8 2165.12,-480.8"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-524.7" font-family="Helvetica,sans-Serif" font-size="9.00">config</text>
-</g>
-<!-- Runtime&#45;&gt;AddressMap -->
-<g id="edge80" class="edge">
-<title>Runtime&#45;&gt;AddressMap</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M557.29,-880.49C557.29,-684.34 557.29,-210.6 557.29,-210.6 557.29,-210.6 2112.06,-210.6 2112.06,-210.6"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2112.06,-214.1 2122.06,-210.6 2112.06,-207.1 2112.06,-214.1"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-78.7" font-family="Helvetica,sans-Serif" font-size="9.00">address_map</text>
-</g>
-<!-- Runtime&#45;&gt;Placement -->
-<g id="edge83" class="edge">
-<title>Runtime&#45;&gt;Placement</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M836.16,-905.21C1231.1,-905.21 1991.29,-905.21 1991.29,-905.21 1991.29,-905.21 1991.29,-274.17 1991.29,-274.17 1991.29,-274.17 2197.57,-274.17 2197.57,-274.17"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2197.57,-277.67 2207.57,-274.17 2197.57,-270.67 2197.57,-277.67"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-116.7" font-family="Helvetica,sans-Serif" font-size="9.00">placement</text>
-</g>
-<!-- Runtime&#45;&gt;Envelope -->
-<g id="edge82" class="edge">
-<title>Runtime&#45;&gt;Envelope</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M465.29,-880.59C465.29,-672.81 465.29,-148.75 465.29,-148.75 465.29,-148.75 2172.28,-148.75 2172.28,-148.75"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2172.28,-152.25 2182.28,-148.75 2172.28,-145.25 2172.28,-152.25"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-40.7" font-family="Helvetica,sans-Serif" font-size="9.00">transfer_txs</text>
-</g>
-<!-- Runtime&#45;&gt;InboxRegistry -->
-<g id="edge81" class="edge">
-<title>Runtime&#45;&gt;InboxRegistry</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M835.91,-917.67C1257.05,-917.67 2104.29,-917.67 2104.29,-917.67 2104.29,-917.67 2104.29,-353.72 2104.29,-353.72"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2107.79,-353.72 2104.29,-343.72 2100.79,-353.72 2107.79,-353.72"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-201.7" font-family="Helvetica,sans-Serif" font-size="9.00">inbox_registry</text>
-</g>
-<!-- Runtime&#45;&gt;TickContext -->
-<g id="edge84" class="edge">
-<title>Runtime&#45;&gt;TickContext</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M835.98,-892.76C1115.01,-892.76 1546.29,-892.76 1546.29,-892.76 1546.29,-892.76 1546.29,-353.54 1546.29,-353.54"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="1549.79,-353.54 1546.29,-343.54 1542.79,-353.54 1549.79,-353.54"/>
-<text xml:space="preserve" text-anchor="middle" x="1182.78" y="-247.7" font-family="Helvetica,sans-Serif" font-size="9.00">make_tick_context() param</text>
-</g>
-<!-- Runtime&#45;&gt;WorkerStats -->
-<g id="edge85" class="edge">
-<title>Runtime&#45;&gt;WorkerStats</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M836.25,-930.13C1262.28,-930.13 2125.29,-930.13 2125.29,-930.13 2125.29,-930.13 2125.29,-808.05 2125.29,-808.05"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2128.79,-808.05 2125.29,-798.05 2121.79,-808.05 2128.79,-808.05"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-735.7" font-family="Helvetica,sans-Serif" font-size="9.00">worker_stats</text>
-</g>
-<!-- Runtime&#45;&gt;RuntimeStats -->
-<g id="edge86" class="edge">
-<title>Runtime&#45;&gt;RuntimeStats</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M743.29,-880.37C743.29,-776.55 743.29,-613 743.29,-613 743.29,-613 2149.24,-613 2149.24,-613"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2149.24,-616.5 2159.24,-613 2149.24,-609.5 2149.24,-616.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-616.7" font-family="Helvetica,sans-Serif" font-size="9.00">stats() param</text>
-</g>
-<!-- Runtime&#45;&gt;Inbox -->
-<g id="edge29" class="edge">
-<title>Runtime&#45;&gt;Inbox</title>
-<path fill="none" stroke="#d84315" stroke-dasharray="5,2" d="M836.05,-1022.83C836.05,-1022.83 1093.43,-1022.83 1093.43,-1022.83"/>
-<polygon fill="#d84315" stroke="#d84315" points="1093.43,-1026.33 1103.43,-1022.83 1093.43,-1019.33 1093.43,-1026.33"/>
-<text xml:space="preserve" text-anchor="middle" x="892.3" y="-1020.7" font-family="Helvetica,sans-Serif" font-size="9.00">new_inbox() param</text>
-</g>
-<!-- Runtime&#45;&gt;RuntimeHandle -->
-<g id="edge30" class="edge">
-<title>Runtime&#45;&gt;RuntimeHandle</title>
-<path fill="none" stroke="#d84315" stroke-dasharray="5,2" d="M371.64,-957.83C371.64,-957.83 293.3,-957.83 293.3,-957.83"/>
-<polygon fill="#d84315" stroke="#d84315" points="293.3,-954.33 283.3,-957.83 293.3,-961.33 293.3,-954.33"/>
-<text xml:space="preserve" text-anchor="middle" x="330.62" y="-983.7" font-family="Helvetica,sans-Serif" font-size="9.00">run() param</text>
-</g>
-<!-- Runtime&#45;&gt;CodecRegistry -->
-<g id="edge87" class="edge">
-<title>Runtime&#45;&gt;CodecRegistry</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M488.29,-1047.62C488.29,-1292.55 488.29,-1991.17 488.29,-1991.17 488.29,-1991.17 2691.15,-1991.17 2691.15,-1991.17"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2691.15,-1994.67 2701.15,-1991.17 2691.15,-1987.67 2691.15,-1994.67"/>
-<text xml:space="preserve" text-anchor="middle" x="1732.53" y="-1873.7" font-family="Helvetica,sans-Serif" font-size="9.00">codec_registry</text>
-</g>
-<!-- Runtime&#45;&gt;TransportRouter -->
-<g id="edge88" class="edge">
-<title>Runtime&#45;&gt;TransportRouter</title>
-<path fill="none" stroke="#d84315" stroke-width="1.5" d="M604.29,-1047.27C604.29,-1286.85 604.29,-1960.83 604.29,-1960.83 604.29,-1960.83 2073.52,-1960.83 2073.52,-1960.83"/>
-<polygon fill="#d84315" stroke="#d84315" stroke-width="1.5" points="2073.52,-1964.33 2083.52,-1960.83 2073.52,-1957.33 2073.52,-1964.33"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-1964.7" font-family="Helvetica,sans-Serif" font-size="9.00">transport_router</text>
-</g>
-<!-- Codec -->
-<g id="node33" class="node">
-<title>Codec</title>
-<polygon fill="#bbdefb" stroke="black" points="2691.97,-1902 2691.97,-1938 3021.09,-1938 3021.09,-1902 2691.97,-1902"/>
-<text xml:space="preserve" text-anchor="middle" x="2732.68" y="-1917" font-family="Helvetica,sans-Serif" font-size="11.00">«trait» Codec</text>
-<polyline fill="none" stroke="black" points="2773.38,-1902.6 2773.38,-1938"/>
-<text xml:space="preserve" text-anchor="middle" x="2897.24" y="-1923.6" font-family="Helvetica,sans-Serif" font-size="11.00">encode((&amp;self, &amp;M) → Result&lt;Vec&lt;u8&gt;, Error&gt;)</text>
-<text xml:space="preserve" text-anchor="middle" x="2897.24" y="-1910.4" font-family="Helvetica,sans-Serif" font-size="11.00">decode((&amp;self, &amp;[u8]) → Result&lt;M, Error&gt;)</text>
-</g>
-<!-- Codec&#45;&gt;Error -->
-<g id="edge94" class="edge">
-<title>Codec&#45;&gt;Error</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M3021.41,-1920C3139.7,-1920 3278.29,-1920 3278.29,-1920 3278.29,-1920 3278.29,-1850.61 3278.29,-1850.61"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="3281.79,-1850.61 3278.29,-1840.61 3274.79,-1850.61 3281.79,-1850.61"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-1867.7" font-family="Helvetica,sans-Serif" font-size="9.00">encode</text>
-</g>
-<!-- NetworkMessage -->
-<g id="node34" class="node">
-<title>NetworkMessage</title>
-<polygon fill="#bbdefb" stroke="black" points="16,-1967 16,-2003 289.11,-2003 289.11,-1967 16,-1967"/>
-<text xml:space="preserve" text-anchor="middle" x="83.3" y="-1982.1" font-family="Helvetica,sans-Serif" font-size="11.00">«trait» NetworkMessage</text>
-<polyline fill="none" stroke="black" points="150.59,-1967.8 150.59,-2003"/>
-<text xml:space="preserve" text-anchor="middle" x="219.85" y="-1982.1" font-family="Helvetica,sans-Serif" font-size="11.00">type_tag(() → &amp;&#39;static str)</text>
-</g>
-<!-- WireEnvelope -->
-<g id="node35" class="node">
-<title>WireEnvelope</title>
-<polygon fill="#bbdefb" stroke="black" points="3326.95,-2017.2 3326.95,-2064.8 3520.36,-2064.8 3520.36,-2017.2 3326.95,-2017.2"/>
-<text xml:space="preserve" text-anchor="middle" x="3369.19" y="-2037.7" font-family="Helvetica,sans-Serif" font-size="11.00">WireEnvelope</text>
-<polyline fill="none" stroke="black" points="3411.43,-2017.2 3411.43,-2064.8"/>
-<text xml:space="preserve" text-anchor="middle" x="3465.89" y="-2050.9" font-family="Helvetica,sans-Serif" font-size="11.00">dest: ActorAddress</text>
-<text xml:space="preserve" text-anchor="middle" x="3465.89" y="-2037.7" font-family="Helvetica,sans-Serif" font-size="11.00">type_tag: String</text>
-<text xml:space="preserve" text-anchor="middle" x="3465.89" y="-2024.5" font-family="Helvetica,sans-Serif" font-size="11.00">payload: Vec&lt;u8&gt;</text>
-</g>
-<!-- WireEnvelope&#45;&gt;ActorAddress -->
-<g id="edge89" class="edge">
-<title>WireEnvelope&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M3520.76,-2041C3618.94,-2041 3756.29,-2041 3756.29,-2041 3756.29,-2041 3756.29,-1605.54 3756.29,-1605.54"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="3759.79,-1605.54 3756.29,-1595.54 3752.79,-1605.54 3759.79,-1605.54"/>
-<text xml:space="preserve" text-anchor="middle" x="3611.95" y="-2033.7" font-family="Helvetica,sans-Serif" font-size="9.00">dest</text>
-</g>
-<!-- Transport -->
-<g id="node36" class="node">
-<title>Transport</title>
-<polygon fill="#bbdefb" stroke="black" points="2682.82,-2012 2682.82,-2048 3030.25,-2048 3030.25,-2012 2682.82,-2012"/>
-<text xml:space="preserve" text-anchor="middle" x="2731.16" y="-2027.1" font-family="Helvetica,sans-Serif" font-size="11.00">«trait» Transport</text>
-<polyline fill="none" stroke="black" points="2779.51,-2012.8 2779.51,-2048"/>
-<text xml:space="preserve" text-anchor="middle" x="2904.88" y="-2027.1" font-family="Helvetica,sans-Serif" font-size="11.00">send((&amp;self, WireEnvelope) → Result&lt;(), Error&gt;)</text>
-</g>
-<!-- Transport&#45;&gt;Error -->
-<g id="edge95" class="edge">
-<title>Transport&#45;&gt;Error</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M3025.29,-2011.55C3025.29,-1962.73 3025.29,-1833.88 3025.29,-1833.88 3025.29,-1833.88 3249.35,-1833.88 3249.35,-1833.88"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="3249.35,-1837.38 3259.35,-1833.88 3249.35,-1830.38 3249.35,-1837.38"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-1935.7" font-family="Helvetica,sans-Serif" font-size="9.00">send</text>
-</g>
-<!-- Transport&#45;&gt;WireEnvelope -->
-<g id="edge31" class="edge">
-<title>Transport&#45;&gt;WireEnvelope</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M3030.54,-2032.6C3030.54,-2032.6 3315.19,-2032.6 3315.19,-2032.6"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="3315.19,-2036.1 3325.19,-2032.6 3315.19,-2029.1 3315.19,-2036.1"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-2053.7" font-family="Helvetica,sans-Serif" font-size="9.00">send</text>
-</g>
-<!-- CodecRegistry&#45;&gt;ActorAddress -->
-<g id="edge91" class="edge">
-<title>CodecRegistry&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M3009.58,-1975C3260.62,-1975 3732.29,-1975 3732.29,-1975 3732.29,-1975 3732.29,-1605.76 3732.29,-1605.76"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="3735.79,-1605.76 3732.29,-1595.76 3728.79,-1605.76 3735.79,-1605.76"/>
-<text xml:space="preserve" text-anchor="middle" x="3423.66" y="-1986.7" font-family="Helvetica,sans-Serif" font-size="9.00">receive() param</text>
-</g>
-<!-- CodecRegistry&#45;&gt;Error -->
-<g id="edge96" class="edge">
-<title>CodecRegistry&#45;&gt;Error</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M3009.64,-1965.75C3135.87,-1965.75 3294.29,-1965.75 3294.29,-1965.75 3294.29,-1965.75 3294.29,-1850.73 3294.29,-1850.73"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="3297.79,-1850.73 3294.29,-1840.73 3290.79,-1850.73 3297.79,-1850.73"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-1901.7" font-family="Helvetica,sans-Serif" font-size="9.00">encode() param</text>
-</g>
-<!-- CodecRegistry&#45;&gt;WireEnvelope -->
-<g id="edge34" class="edge">
-<title>CodecRegistry&#45;&gt;WireEnvelope</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M3009.43,-1984.25C3187.12,-1984.25 3456.29,-1984.25 3456.29,-1984.25 3456.29,-1984.25 3456.29,-2005.42 3456.29,-2005.42"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="3452.79,-2005.42 3456.29,-2015.42 3459.79,-2005.42 3452.79,-2005.42"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-2019.7" font-family="Helvetica,sans-Serif" font-size="9.00">receive() param</text>
-</g>
-<!-- TransportRouter&#45;&gt;ActorAddress -->
-<g id="edge90" class="edge">
-<title>TransportRouter&#45;&gt;ActorAddress</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M2516.53,-1953C2911,-1953 3709.29,-1953 3709.29,-1953 3709.29,-1953 3709.29,-1605.76 3709.29,-1605.76"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="3712.79,-1605.76 3709.29,-1595.76 3705.79,-1605.76 3712.79,-1605.76"/>
-<text xml:space="preserve" text-anchor="middle" x="3144.22" y="-2137.7" font-family="Helvetica,sans-Serif" font-size="9.00">routes</text>
-</g>
-<!-- TransportRouter&#45;&gt;Transport -->
-<g id="edge32" class="edge">
-<title>TransportRouter&#45;&gt;Transport</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M2516.49,-1971.5C2605.94,-1971.5 2689.29,-1971.5 2689.29,-1971.5 2689.29,-1971.5 2689.29,-2000.3 2689.29,-2000.3"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="2685.79,-2000.3 2689.29,-2010.3 2692.79,-2000.3 2685.79,-2000.3"/>
-<text xml:space="preserve" text-anchor="middle" x="2615.97" y="-1984.7" font-family="Helvetica,sans-Serif" font-size="9.00">routes</text>
-</g>
-<!-- InMemoryTransport -->
-<g id="node39" class="node">
-<title>InMemoryTransport</title>
-<polygon fill="#bbdefb" stroke="black" points="965.95,-1995 965.95,-2031 1399.61,-2031 1399.61,-1995 965.95,-1995"/>
-<text xml:space="preserve" text-anchor="middle" x="1021.93" y="-2010.1" font-family="Helvetica,sans-Serif" font-size="11.00">InMemoryTransport</text>
-<polyline fill="none" stroke="black" points="1077.92,-1995.8 1077.92,-2031"/>
-<text xml:space="preserve" text-anchor="middle" x="1238.76" y="-2010.1" font-family="Helvetica,sans-Serif" font-size="11.00">tx: std::sync::Mutex&lt;std::sync::mpsc::Sender&lt;WireEnvelope&gt;&gt;</text>
-</g>
-<!-- InMemoryTransport&#45;&gt;Receiver -->
-<g id="edge93" class="edge">
-<title>InMemoryTransport&#45;&gt;Receiver</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M1399.98,-2001.3C1452.74,-2001.3 1494.29,-2001.3 1494.29,-2001.3 1494.29,-2001.3 1494.29,-1039.5 1494.29,-1039.5 1494.29,-1039.5 1602.89,-1039.5 1602.89,-1039.5"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="1602.89,-1043 1612.89,-1039.5 1602.89,-1036 1602.89,-1043"/>
-<text xml:space="preserve" text-anchor="middle" x="1475.01" y="-1902.7" font-family="Helvetica,sans-Serif" font-size="9.00">pair() param</text>
-</g>
-<!-- InMemoryTransport&#45;&gt;Sender -->
-<g id="edge92" class="edge">
-<title>InMemoryTransport&#45;&gt;Sender</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M1399.81,-1997.9C1432.37,-1997.9 1455.29,-1997.9 1455.29,-1997.9 1455.29,-1997.9 1455.29,-997.1 1455.29,-997.1 1455.29,-997.1 2175.66,-997.1 2175.66,-997.1"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="2175.66,-1000.6 2185.66,-997.1 2175.66,-993.6 2175.66,-1000.6"/>
-<text xml:space="preserve" text-anchor="middle" x="1732.53" y="-1267.7" font-family="Helvetica,sans-Serif" font-size="9.00">tx</text>
-</g>
-<!-- InMemoryTransport&#45;&gt;Error -->
-<g id="edge97" class="edge">
-<title>InMemoryTransport&#45;&gt;Error</title>
-<path fill="none" stroke="#1565c0" stroke-width="1.5" d="M1399.97,-2004.7C1941.86,-2004.7 3310.29,-2004.7 3310.29,-2004.7 3310.29,-2004.7 3310.29,-1850.66 3310.29,-1850.66"/>
-<polygon fill="#1565c0" stroke="#1565c0" stroke-width="1.5" points="3313.79,-1850.66 3310.29,-1840.66 3306.79,-1850.66 3313.79,-1850.66"/>
-<text xml:space="preserve" text-anchor="middle" x="2301.13" y="-2099.7" font-family="Helvetica,sans-Serif" font-size="9.00">send() param</text>
-</g>
-<!-- InMemoryTransport&#45;&gt;WireEnvelope -->
-<g id="edge33" class="edge">
-<title>InMemoryTransport&#45;&gt;WireEnvelope</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="5,2" d="M1400.08,-2008.1C1956.89,-2008.1 3391.29,-2008.1 3391.29,-2008.1 3391.29,-2008.1 3391.29,-2008.96 3391.29,-2008.96"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="3387.79,-2005.23 3391.29,-2015.23 3394.79,-2005.23 3387.79,-2005.23"/>
-<text xml:space="preserve" text-anchor="middle" x="2301.13" y="-2052.7" font-family="Helvetica,sans-Serif" font-size="9.00">tx</text>
-</g>
-<!-- InMemoryTransport&#45;&gt;Transport -->
-<g id="edge35" class="edge">
-<title>InMemoryTransport&#45;&gt;Transport</title>
-<path fill="none" stroke="#1565c0" stroke-dasharray="1,5" d="M1399.88,-2021.5C1399.88,-2021.5 2670.9,-2021.5 2670.9,-2021.5"/>
-<polygon fill="#1565c0" stroke="#1565c0" points="2670.9,-2025 2680.9,-2021.5 2670.9,-2018 2670.9,-2025"/>
-<text xml:space="preserve" text-anchor="middle" x="1991.3" y="-2015.7" font-family="Helvetica,sans-Serif" font-size="9.00">impl</text>
-</g>
-</g>
-</svg>
diff --git a/docs/diagrams/dataflow.svg b/docs/diagrams/dataflow.svg
deleted file mode 100644
index 45b38a1..0000000
--- a/docs/diagrams/dataflow.svg
+++ /dev/null
@@ -1,806 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
- "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<!-- Generated by graphviz version 14.1.1 (20251213.1925)
- -->
-<!-- Title: dataflow Pages: 1 -->
-<svg width="2635pt" height="973pt"
- viewBox="0.00 0.00 2635.00 973.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 969)">
-<title>dataflow</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-969 2630.68,-969 2630.68,4 -4,4"/>
-<g id="clust1" class="cluster">
-<title>cluster_legend</title>
-<path fill="none" stroke="#888888" d="M20,-8C20,-8 251.44,-8 251.44,-8 257.44,-8 263.44,-14 263.44,-20 263.44,-20 263.44,-165 263.44,-165 263.44,-171 257.44,-177 251.44,-177 251.44,-177 20,-177 20,-177 14,-177 8,-171 8,-165 8,-165 8,-20 8,-20 8,-14 14,-8 20,-8"/>
-<text xml:space="preserve" text-anchor="middle" x="53.9" y="-163.1" font-family="Helvetica,sans-Serif" font-size="11.00">Data on Arrows</text>
-</g>
-<g id="clust2" class="cluster">
-<title>cluster_flow_a</title>
-<path fill="#fdedec" stroke="#c0392b" d="M112.72,-185C112.72,-185 2422.02,-185 2422.02,-185 2428.02,-185 2434.02,-191 2434.02,-197 2434.02,-197 2434.02,-254 2434.02,-254 2434.02,-260 2428.02,-266 2422.02,-266 2422.02,-266 112.72,-266 112.72,-266 106.72,-266 100.72,-260 100.72,-254 100.72,-254 100.72,-197 100.72,-197 100.72,-191 106.72,-185 112.72,-185"/>
-<text xml:space="preserve" text-anchor="start" x="108.72" y="-252.1" font-family="Helvetica,sans-Serif" font-size="11.00" fill="#922b21">FLOW A — Cross&#45;Worker Message Send</text>
-</g>
-<g id="clust3" class="cluster">
-<title>cluster_flow_b</title>
-<path fill="#ebf5fb" stroke="#2980b9" d="M81.25,-274C81.25,-274 1999.84,-274 1999.84,-274 2005.84,-274 2011.84,-280 2011.84,-286 2011.84,-286 2011.84,-355 2011.84,-355 2011.84,-361 2005.84,-367 1999.84,-367 1999.84,-367 81.25,-367 81.25,-367 75.25,-367 69.25,-361 69.25,-355 69.25,-355 69.25,-286 69.25,-286 69.25,-280 75.25,-274 81.25,-274"/>
-<text xml:space="preserve" text-anchor="start" x="77.25" y="-353.1" font-family="Helvetica,sans-Serif" font-size="11.00" fill="#1a5276">FLOW B — Same&#45;Worker Message Send (during tick)</text>
-</g>
-<g id="clust4" class="cluster">
-<title>cluster_flow_c</title>
-<path fill="#eafaf1" stroke="#27ae60" d="M92.26,-375C92.26,-375 2606.68,-375 2606.68,-375 2612.68,-375 2618.68,-381 2618.68,-387 2618.68,-387 2618.68,-446 2618.68,-446 2618.68,-452 2612.68,-458 2606.68,-458 2606.68,-458 92.26,-458 92.26,-458 86.26,-458 80.26,-452 80.26,-446 80.26,-446 80.26,-387 80.26,-387 80.26,-381 86.26,-375 92.26,-375"/>
-<text xml:space="preserve" text-anchor="start" x="88.26" y="-444.1" font-family="Helvetica,sans-Serif" font-size="11.00" fill="#1e8449">FLOW C — Actor Spawn</text>
-</g>
-<g id="clust5" class="cluster">
-<title>cluster_flow_d</title>
-<path fill="#e8f8f5" stroke="#117864" d="M93.09,-466C93.09,-466 1687.49,-466 1687.49,-466 1693.49,-466 1699.49,-472 1699.49,-478 1699.49,-478 1699.49,-651 1699.49,-651 1699.49,-657 1693.49,-663 1687.49,-663 1687.49,-663 93.09,-663 93.09,-663 87.09,-663 81.09,-657 81.09,-651 81.09,-651 81.09,-478 81.09,-478 81.09,-472 87.09,-466 93.09,-466"/>
-<text xml:space="preserve" text-anchor="start" x="89.09" y="-649.1" font-family="Helvetica,sans-Serif" font-size="11.00" fill="#0e6655">FLOW D — External Inbox</text>
-</g>
-<g id="clust6" class="cluster">
-<title>cluster_flow_e</title>
-<path fill="#f4ecf7" stroke="#6c3483" d="M95.31,-671C95.31,-671 2253.94,-671 2253.94,-671 2259.94,-671 2265.94,-677 2265.94,-683 2265.94,-683 2265.94,-945 2265.94,-945 2265.94,-951 2259.94,-957 2253.94,-957 2253.94,-957 95.31,-957 95.31,-957 89.31,-957 83.31,-951 83.31,-945 83.31,-945 83.31,-683 83.31,-683 83.31,-677 89.31,-671 95.31,-671"/>
-<text xml:space="preserve" text-anchor="start" x="91.31" y="-943.1" font-family="Helvetica,sans-Serif" font-size="11.00" fill="#6c3483">FLOW E — The 6&#45;Phase Tick Cycle (Worker::tick_once)</text>
-</g>
-<!-- dlegend -->
-<g id="node1" class="node">
-<title>dlegend</title>
-<text xml:space="preserve" text-anchor="start" x="30" y="-130" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="#c0392b">━━━</text>
-<text xml:space="preserve" text-anchor="start" x="63" y="-129" font-family="Helvetica,sans-Serif" font-size="10.00" fill="#c0392b">Envelope (dest + payload)</text>
-<text xml:space="preserve" text-anchor="start" x="30" y="-110" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="#27ae60">━━━</text>
-<text xml:space="preserve" text-anchor="start" x="63" y="-109" font-family="Helvetica,sans-Serif" font-size="10.00" fill="#27ae60">Spawn tuple (addr, Box&lt;dyn AnyActor&gt;)</text>
-<text xml:space="preserve" text-anchor="start" x="30" y="-90" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="#2980b9">━━━</text>
-<text xml:space="preserve" text-anchor="start" x="63" y="-89" font-family="Helvetica,sans-Serif" font-size="10.00" fill="#2980b9">Pending local (addr, Box&lt;dyn Any&gt;)</text>
-<text xml:space="preserve" text-anchor="start" x="30" y="-70" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="#8e44ad">━━━</text>
-<text xml:space="preserve" text-anchor="start" x="63" y="-69" font-family="Helvetica,sans-Serif" font-size="10.00" fill="#8e44ad">Box&lt;dyn Any + Send&gt; (raw message)</text>
-<text xml:space="preserve" text-anchor="start" x="30" y="-50" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="#e67300">━━━</text>
-<text xml:space="preserve" text-anchor="start" x="63" y="-49" font-family="Helvetica,sans-Serif" font-size="10.00" fill="#e67300">Stats (atomics)</text>
-<text xml:space="preserve" text-anchor="start" x="30" y="-30" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="#117864">━━━</text>
-<text xml:space="preserve" text-anchor="start" x="63" y="-29" font-family="Helvetica,sans-Serif" font-size="10.00" fill="#117864">WorkerId (lookup result)</text>
-</g>
-<!-- a_caller -->
-<g id="node2" class="node">
-<title>a_caller</title>
-<ellipse fill="#f5b7b1" stroke="black" cx="135.72" cy="-215" rx="27" ry="18"/>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-212" font-family="Helvetica,sans-Serif" font-size="10.00">Caller</text>
-</g>
-<!-- a_send -->
-<g id="node3" class="node">
-<title>a_send</title>
-<path fill="white" stroke="black" d="M494.57,-233C494.57,-233 410.31,-233 410.31,-233 404.31,-233 398.31,-227 398.31,-221 398.31,-221 398.31,-209 398.31,-209 398.31,-203 404.31,-197 410.31,-197 410.31,-197 494.57,-197 494.57,-197 500.57,-197 506.57,-203 506.57,-209 506.57,-209 506.57,-221 506.57,-221 506.57,-227 500.57,-233 494.57,-233"/>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-218" font-family="Helvetica,sans-Serif" font-size="10.00">Runtime</text>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-206" font-family="Helvetica,sans-Serif" font-size="10.00">::send_to(addr, msg)</text>
-</g>
-<!-- a_caller&#45;&gt;a_send -->
-<g id="edge1" class="edge">
-<title>a_caller&#45;&gt;a_send</title>
-<path fill="none" stroke="#333333" d="M163.01,-215C211.85,-215 317.87,-215 386.87,-215"/>
-<polygon fill="#333333" stroke="#333333" points="386.52,-218.5 396.52,-215 386.52,-211.5 386.52,-218.5"/>
-</g>
-<!-- a_lookup -->
-<g id="node4" class="node">
-<title>a_lookup</title>
-<path fill="#e8daef" stroke="black" d="M750.59,-233C750.59,-233 696.89,-233 696.89,-233 690.89,-233 684.89,-227 684.89,-221 684.89,-221 684.89,-209 684.89,-209 684.89,-203 690.89,-197 696.89,-197 696.89,-197 750.59,-197 750.59,-197 756.59,-197 762.59,-203 762.59,-209 762.59,-209 762.59,-221 762.59,-221 762.59,-227 756.59,-233 750.59,-233"/>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-218" font-family="Helvetica,sans-Serif" font-size="10.00">AddressMap</text>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-206" font-family="Helvetica,sans-Serif" font-size="10.00">::lookup(addr)</text>
-</g>
-<!-- a_send&#45;&gt;a_lookup -->
-<g id="edge2" class="edge">
-<title>a_send&#45;&gt;a_lookup</title>
-<path fill="none" stroke="#333333" d="M506.97,-215C555.33,-215 625.95,-215 673.08,-215"/>
-<polygon fill="#333333" stroke="#333333" points="673.01,-218.5 683.01,-215 673.01,-211.5 673.01,-218.5"/>
-</g>
-<!-- a_box -->
-<g id="node5" class="node">
-<title>a_box</title>
-<path fill="white" stroke="black" d="M1065.68,-233C1065.68,-233 1007,-233 1007,-233 1001,-233 995,-227 995,-221 995,-221 995,-209 995,-209 995,-203 1001,-197 1007,-197 1007,-197 1065.68,-197 1065.68,-197 1071.68,-197 1077.68,-203 1077.68,-209 1077.68,-209 1077.68,-221 1077.68,-221 1077.68,-227 1071.68,-233 1065.68,-233"/>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-218" font-family="Helvetica,sans-Serif" font-size="10.00">Box::new(msg)</text>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-206" font-family="Helvetica,sans-Serif" font-size="10.00">→ Envelope</text>
-</g>
-<!-- a_lookup&#45;&gt;a_box -->
-<g id="edge3" class="edge">
-<title>a_lookup&#45;&gt;a_box</title>
-<path fill="none" stroke="#117864" d="M762.83,-215C818.26,-215 921.33,-215 983.59,-215"/>
-<polygon fill="#117864" stroke="#117864" points="983.21,-218.5 993.21,-215 983.21,-211.5 983.21,-218.5"/>
-<text xml:space="preserve" text-anchor="middle" x="869.07" y="-217.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#117864">WorkerId</text>
-</g>
-<!-- a_tx -->
-<g id="node6" class="node">
-<title>a_tx</title>
-<path fill="#d1f2eb" stroke="black" d="M1347.65,-237C1347.65,-237 1303.41,-237 1303.41,-237 1297.41,-237 1291.41,-231 1291.41,-225 1291.41,-225 1291.41,-205 1291.41,-205 1291.41,-199 1297.41,-193 1303.41,-193 1303.41,-193 1347.65,-193 1347.65,-193 1353.65,-193 1359.65,-199 1359.65,-205 1359.65,-205 1359.65,-225 1359.65,-225 1359.65,-231 1353.65,-237 1347.65,-237"/>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-224" font-family="Helvetica,sans-Serif" font-size="10.00">transfer_txs</text>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-212" font-family="Helvetica,sans-Serif" font-size="10.00">[worker_id]</text>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-200" font-family="Helvetica,sans-Serif" font-size="10.00">.try_send()</text>
-</g>
-<!-- a_box&#45;&gt;a_tx -->
-<g id="edge4" class="edge">
-<title>a_box&#45;&gt;a_tx</title>
-<path fill="none" stroke="#c0392b" stroke-width="2" d="M1077.88,-215C1130.73,-215 1222.95,-215 1278.41,-215"/>
-<polygon fill="#c0392b" stroke="#c0392b" stroke-width="2" points="1278.31,-218.5 1288.31,-215 1278.31,-211.5 1278.31,-218.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1195.12" y="-217.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">Envelope</text>
-</g>
-<!-- a_hybrid -->
-<g id="node7" class="node">
-<title>a_hybrid</title>
-<path fill="#d1f2eb" stroke="black" d="M1682.32,-233C1682.32,-235.21 1663.54,-237 1640.42,-237 1617.3,-237 1598.51,-235.21 1598.51,-233 1598.51,-233 1598.51,-197 1598.51,-197 1598.51,-194.79 1617.3,-193 1640.42,-193 1663.54,-193 1682.32,-194.79 1682.32,-197 1682.32,-197 1682.32,-233 1682.32,-233"/>
-<path fill="none" stroke="black" d="M1682.32,-233C1682.32,-230.79 1663.54,-229 1640.42,-229 1617.3,-229 1598.51,-230.79 1598.51,-233"/>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-218" font-family="Helvetica,sans-Serif" font-size="10.00">HybridChannel</text>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-206" font-family="Helvetica,sans-Serif" font-size="10.00">ring → overflow</text>
-</g>
-<!-- a_tx&#45;&gt;a_hybrid -->
-<g id="edge5" class="edge">
-<title>a_tx&#45;&gt;a_hybrid</title>
-<path fill="none" stroke="#c0392b" stroke-width="2" d="M1360.02,-215C1413.92,-215 1520.45,-215 1585.26,-215"/>
-<polygon fill="#c0392b" stroke="#c0392b" stroke-width="2" points="1585.01,-218.5 1595.01,-215 1585.01,-211.5 1585.01,-218.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1471.7" y="-217.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">Envelope</text>
-</g>
-<!-- a_rx -->
-<g id="node8" class="node">
-<title>a_rx</title>
-<path fill="#fadbd8" stroke="black" d="M1986.84,-237C1986.84,-237 1947.04,-237 1947.04,-237 1941.04,-237 1935.04,-231 1935.04,-225 1935.04,-225 1935.04,-205 1935.04,-205 1935.04,-199 1941.04,-193 1947.04,-193 1947.04,-193 1986.84,-193 1986.84,-193 1992.84,-193 1998.84,-199 1998.84,-205 1998.84,-205 1998.84,-225 1998.84,-225 1998.84,-231 1992.84,-237 1986.84,-237"/>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-224" font-family="Helvetica,sans-Serif" font-size="10.00">Worker</text>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-212" font-family="Helvetica,sans-Serif" font-size="10.00">transfer_rx</text>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-200" font-family="Helvetica,sans-Serif" font-size="10.00">.try_recv()</text>
-</g>
-<!-- a_hybrid&#45;&gt;a_rx -->
-<g id="edge6" class="edge">
-<title>a_hybrid&#45;&gt;a_rx</title>
-<path fill="none" stroke="#c0392b" stroke-width="2" d="M1682.52,-215C1743.85,-215 1858.85,-215 1921.87,-215"/>
-<polygon fill="#c0392b" stroke="#c0392b" stroke-width="2" points="1921.83,-218.5 1931.83,-215 1921.83,-211.5 1921.83,-218.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1805.63" y="-217.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">Envelope</text>
-</g>
-<!-- a_deliver -->
-<g id="node9" class="node">
-<title>a_deliver</title>
-<path fill="#fadbd8" stroke="black" d="M2245.95,-233C2245.95,-233 2192.26,-233 2192.26,-233 2186.26,-233 2180.26,-227 2180.26,-221 2180.26,-221 2180.26,-209 2180.26,-209 2180.26,-203 2186.26,-197 2192.26,-197 2192.26,-197 2245.95,-197 2245.95,-197 2251.95,-197 2257.95,-203 2257.95,-209 2257.95,-209 2257.95,-221 2257.95,-221 2257.95,-227 2251.95,-233 2245.95,-233"/>
-<text xml:space="preserve" text-anchor="middle" x="2219.1" y="-218" font-family="Helvetica,sans-Serif" font-size="10.00">ActorPool</text>
-<text xml:space="preserve" text-anchor="middle" x="2219.1" y="-206" font-family="Helvetica,sans-Serif" font-size="10.00">::deliver(addr)</text>
-</g>
-<!-- a_rx&#45;&gt;a_deliver -->
-<g id="edge7" class="edge">
-<title>a_rx&#45;&gt;a_deliver</title>
-<path fill="none" stroke="#c0392b" stroke-width="2" d="M1999.12,-215C2041.2,-215 2116.7,-215 2167.11,-215"/>
-<polygon fill="#c0392b" stroke="#c0392b" stroke-width="2" points="2166.95,-218.5 2176.95,-215 2166.95,-211.5 2166.95,-218.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2125.01" y="-217.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">Envelope</text>
-</g>
-<!-- a_mailbox -->
-<g id="node10" class="node">
-<title>a_mailbox</title>
-<path fill="#fadbd8" stroke="black" d="M2414.02,-237C2414.02,-237 2364.21,-237 2364.21,-237 2358.21,-237 2352.21,-231 2352.21,-225 2352.21,-225 2352.21,-205 2352.21,-205 2352.21,-199 2358.21,-193 2364.21,-193 2364.21,-193 2414.02,-193 2414.02,-193 2420.02,-193 2426.02,-199 2426.02,-205 2426.02,-205 2426.02,-225 2426.02,-225 2426.02,-231 2420.02,-237 2414.02,-237"/>
-<text xml:space="preserve" text-anchor="middle" x="2389.11" y="-224" font-family="Helvetica,sans-Serif" font-size="10.00">ActorSlot</text>
-<text xml:space="preserve" text-anchor="middle" x="2389.11" y="-212" font-family="Helvetica,sans-Serif" font-size="10.00">mailbox</text>
-<text xml:space="preserve" text-anchor="middle" x="2389.11" y="-200" font-family="Helvetica,sans-Serif" font-size="10.00">.push_back()</text>
-</g>
-<!-- a_deliver&#45;&gt;a_mailbox -->
-<g id="edge8" class="edge">
-<title>a_deliver&#45;&gt;a_mailbox</title>
-<path fill="none" stroke="#8e44ad" stroke-width="1.5" d="M2258.23,-215C2282.36,-215 2313.77,-215 2339.66,-215"/>
-<polygon fill="#8e44ad" stroke="#8e44ad" stroke-width="1.5" points="2339.6,-218.5 2349.6,-215 2339.6,-211.5 2339.6,-218.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2306.19" y="-217.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#8e44ad">payload</text>
-</g>
-<!-- b_actor -->
-<g id="node11" class="node">
-<title>b_actor</title>
-<ellipse fill="#aed6f1" stroke="black" cx="135.72" cy="-310" rx="58.47" ry="22.63"/>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-313" font-family="Helvetica,sans-Serif" font-size="10.00">Actor::handle()</text>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-301" font-family="Helvetica,sans-Serif" font-size="10.00">calls ctx.send()</text>
-</g>
-<!-- b_wctx -->
-<g id="node12" class="node">
-<title>b_wctx</title>
-<path fill="#fadbd8" stroke="black" d="M481.78,-328C481.78,-328 423.1,-328 423.1,-328 417.1,-328 411.1,-322 411.1,-316 411.1,-316 411.1,-304 411.1,-304 411.1,-298 417.1,-292 423.1,-292 423.1,-292 481.78,-292 481.78,-292 487.78,-292 493.78,-298 493.78,-304 493.78,-304 493.78,-316 493.78,-316 493.78,-322 487.78,-328 481.78,-328"/>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-313" font-family="Helvetica,sans-Serif" font-size="10.00">WorkerContext</text>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-301" font-family="Helvetica,sans-Serif" font-size="10.00">::send_any()</text>
-</g>
-<!-- b_actor&#45;&gt;b_wctx -->
-<g id="edge9" class="edge">
-<title>b_actor&#45;&gt;b_wctx</title>
-<path fill="none" stroke="#333333" d="M194.44,-310C253.05,-310 342.97,-310 399.43,-310"/>
-<polygon fill="#333333" stroke="#333333" points="399.09,-313.5 409.09,-310 399.09,-306.5 399.09,-313.5"/>
-</g>
-<!-- b_lookup -->
-<g id="node13" class="node">
-<title>b_lookup</title>
-<path fill="#e8daef" stroke="black" d="M750.59,-328C750.59,-328 696.89,-328 696.89,-328 690.89,-328 684.89,-322 684.89,-316 684.89,-316 684.89,-304 684.89,-304 684.89,-298 690.89,-292 696.89,-292 696.89,-292 750.59,-292 750.59,-292 756.59,-292 762.59,-298 762.59,-304 762.59,-304 762.59,-316 762.59,-316 762.59,-322 756.59,-328 750.59,-328"/>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-313" font-family="Helvetica,sans-Serif" font-size="10.00">AddressMap</text>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-301" font-family="Helvetica,sans-Serif" font-size="10.00">::lookup(addr)</text>
-</g>
-<!-- b_wctx&#45;&gt;b_lookup -->
-<g id="edge10" class="edge">
-<title>b_wctx&#45;&gt;b_lookup</title>
-<path fill="none" stroke="#333333" d="M494.05,-310C541.9,-310 621.39,-310 672.92,-310"/>
-<polygon fill="#333333" stroke="#333333" points="672.91,-313.5 682.91,-310 672.91,-306.5 672.91,-313.5"/>
-</g>
-<!-- b_pending -->
-<g id="node14" class="node">
-<title>b_pending</title>
-<path fill="#d6eaf8" stroke="black" d="M1073.46,-332C1073.46,-332 999.22,-332 999.22,-332 993.22,-332 987.22,-326 987.22,-320 987.22,-320 987.22,-300 987.22,-300 987.22,-294 993.22,-288 999.22,-288 999.22,-288 1073.46,-288 1073.46,-288 1079.46,-288 1085.46,-294 1085.46,-300 1085.46,-300 1085.46,-320 1085.46,-320 1085.46,-326 1079.46,-332 1073.46,-332"/>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-319" font-family="Helvetica,sans-Serif" font-size="10.00">pending_local</text>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-307" font-family="Helvetica,sans-Serif" font-size="10.00">.borrow_mut()</text>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-295" font-family="Helvetica,sans-Serif" font-size="10.00">.push((addr, msg))</text>
-</g>
-<!-- b_lookup&#45;&gt;b_pending -->
-<g id="edge11" class="edge">
-<title>b_lookup&#45;&gt;b_pending</title>
-<path fill="none" stroke="#117864" d="M762.83,-310C815.9,-310 912.63,-310 975.41,-310"/>
-<polygon fill="#117864" stroke="#117864" points="975.21,-313.5 985.21,-310 975.21,-306.5 975.21,-313.5"/>
-<text xml:space="preserve" text-anchor="middle" x="869.07" y="-312.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#117864">same WorkerId</text>
-</g>
-<!-- b_phase5 -->
-<g id="node15" class="node">
-<title>b_phase5</title>
-<polygon fill="#f9e79f" stroke="black" stroke-width="2" points="1356.31,-338 1294.75,-338 1294.75,-282 1356.31,-282 1356.31,-338"/>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-325" font-family="Helvetica,sans-Serif" font-size="10.00">Phase 5:</text>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-313" font-family="Helvetica,sans-Serif" font-size="10.00">DELIVER</text>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-301" font-family="Helvetica,sans-Serif" font-size="10.00">PENDING</text>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-289" font-family="Helvetica,sans-Serif" font-size="10.00">LOCAL</text>
-</g>
-<!-- b_pending&#45;&gt;b_phase5 -->
-<g id="edge12" class="edge">
-<title>b_pending&#45;&gt;b_phase5</title>
-<path fill="none" stroke="#2980b9" stroke-width="1.5" stroke-dasharray="5,2" d="M1085.73,-310C1140.82,-310 1229.92,-310 1282.3,-310"/>
-<polygon fill="#2980b9" stroke="#2980b9" stroke-width="1.5" points="1282.2,-313.5 1292.2,-310 1282.2,-306.5 1282.2,-313.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1195.12" y="-312.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#2980b9">buffered</text>
-</g>
-<!-- b_deliver -->
-<g id="node16" class="node">
-<title>b_deliver</title>
-<path fill="#fadbd8" stroke="black" d="M1667.26,-328C1667.26,-328 1613.57,-328 1613.57,-328 1607.57,-328 1601.57,-322 1601.57,-316 1601.57,-316 1601.57,-304 1601.57,-304 1601.57,-298 1607.57,-292 1613.57,-292 1613.57,-292 1667.26,-292 1667.26,-292 1673.26,-292 1679.26,-298 1679.26,-304 1679.26,-304 1679.26,-316 1679.26,-316 1679.26,-322 1673.26,-328 1667.26,-328"/>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-313" font-family="Helvetica,sans-Serif" font-size="10.00">ActorPool</text>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-301" font-family="Helvetica,sans-Serif" font-size="10.00">::deliver(addr)</text>
-</g>
-<!-- b_phase5&#45;&gt;b_deliver -->
-<g id="edge13" class="edge">
-<title>b_phase5&#45;&gt;b_deliver</title>
-<path fill="none" stroke="#2980b9" stroke-width="2" d="M1356.53,-310C1410.05,-310 1522.53,-310 1588.4,-310"/>
-<polygon fill="#2980b9" stroke="#2980b9" stroke-width="2" points="1588.28,-313.5 1598.28,-310 1588.28,-306.5 1588.28,-313.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1471.7" y="-312.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#2980b9">(addr, payload)</text>
-</g>
-<!-- b_mailbox -->
-<g id="node17" class="node">
-<title>b_mailbox</title>
-<path fill="#fadbd8" stroke="black" d="M1991.84,-332C1991.84,-332 1942.04,-332 1942.04,-332 1936.04,-332 1930.04,-326 1930.04,-320 1930.04,-320 1930.04,-300 1930.04,-300 1930.04,-294 1936.04,-288 1942.04,-288 1942.04,-288 1991.84,-288 1991.84,-288 1997.84,-288 2003.84,-294 2003.84,-300 2003.84,-300 2003.84,-320 2003.84,-320 2003.84,-326 1997.84,-332 1991.84,-332"/>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-319" font-family="Helvetica,sans-Serif" font-size="10.00">ActorSlot</text>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-307" font-family="Helvetica,sans-Serif" font-size="10.00">mailbox</text>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-295" font-family="Helvetica,sans-Serif" font-size="10.00">.push_back()</text>
-</g>
-<!-- b_deliver&#45;&gt;b_mailbox -->
-<g id="edge14" class="edge">
-<title>b_deliver&#45;&gt;b_mailbox</title>
-<path fill="none" stroke="#8e44ad" stroke-width="1.5" d="M1679.6,-310C1738.94,-310 1853.2,-310 1918.01,-310"/>
-<polygon fill="#8e44ad" stroke="#8e44ad" stroke-width="1.5" points="1917.62,-313.5 1927.62,-310 1917.62,-306.5 1917.62,-313.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1805.63" y="-312.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#8e44ad">payload</text>
-</g>
-<!-- c_caller -->
-<g id="node18" class="node">
-<title>c_caller</title>
-<ellipse fill="#a9dfbf" stroke="black" cx="135.72" cy="-406" rx="47.46" ry="22.63"/>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-409" font-family="Helvetica,sans-Serif" font-size="10.00">Caller /</text>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-397" font-family="Helvetica,sans-Serif" font-size="10.00">ctx.spawn()</text>
-</g>
-<!-- c_spawn -->
-<g id="node19" class="node">
-<title>c_spawn</title>
-<path fill="white" stroke="black" d="M480.12,-424C480.12,-424 424.76,-424 424.76,-424 418.76,-424 412.76,-418 412.76,-412 412.76,-412 412.76,-400 412.76,-400 412.76,-394 418.76,-388 424.76,-388 424.76,-388 480.12,-388 480.12,-388 486.12,-388 492.12,-394 492.12,-400 492.12,-400 492.12,-412 492.12,-412 492.12,-418 486.12,-424 480.12,-424"/>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-409" font-family="Helvetica,sans-Serif" font-size="10.00">Runtime</text>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-397" font-family="Helvetica,sans-Serif" font-size="10.00">::spawn(actor)</text>
-</g>
-<!-- c_caller&#45;&gt;c_spawn -->
-<g id="edge15" class="edge">
-<title>c_caller&#45;&gt;c_spawn</title>
-<path fill="none" stroke="#333333" d="M183.5,-406C241.77,-406 340.95,-406 400.92,-406"/>
-<polygon fill="#333333" stroke="#333333" points="400.85,-409.5 410.85,-406 400.85,-402.5 400.85,-409.5"/>
-</g>
-<!-- c_addr -->
-<g id="node20" class="node">
-<title>c_addr</title>
-<path fill="#d5f5e3" stroke="black" d="M754.76,-424C754.76,-424 692.73,-424 692.73,-424 686.73,-424 680.73,-418 680.73,-412 680.73,-412 680.73,-400 680.73,-400 680.73,-394 686.73,-388 692.73,-388 692.73,-388 754.76,-388 754.76,-388 760.76,-388 766.76,-394 766.76,-400 766.76,-400 766.76,-412 766.76,-412 766.76,-418 760.76,-424 754.76,-424"/>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-409" font-family="Helvetica,sans-Serif" font-size="10.00">ActorAddress</text>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-397" font-family="Helvetica,sans-Serif" font-size="10.00">::new_random()</text>
-</g>
-<!-- c_spawn&#45;&gt;c_addr -->
-<g id="edge16" class="edge">
-<title>c_spawn&#45;&gt;c_addr</title>
-<path fill="none" stroke="#333333" d="M492.6,-406C539.12,-406 616.97,-406 669.07,-406"/>
-<polygon fill="#333333" stroke="#333333" points="668.91,-409.5 678.91,-406 668.91,-402.5 668.91,-409.5"/>
-</g>
-<!-- c_place -->
-<g id="node21" class="node">
-<title>c_place</title>
-<path fill="#e8daef" stroke="black" d="M1065.68,-428C1065.68,-428 1007,-428 1007,-428 1001,-428 995,-422 995,-416 995,-416 995,-396 995,-396 995,-390 1001,-384 1007,-384 1007,-384 1065.68,-384 1065.68,-384 1071.68,-384 1077.68,-390 1077.68,-396 1077.68,-396 1077.68,-416 1077.68,-416 1077.68,-422 1071.68,-428 1065.68,-428"/>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-415" font-family="Helvetica,sans-Serif" font-size="10.00">Placement</text>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-403" font-family="Helvetica,sans-Serif" font-size="10.00">::next_worker()</text>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-391" font-family="Helvetica,sans-Serif" font-size="10.00">round&#45;robin</text>
-</g>
-<!-- c_addr&#45;&gt;c_place -->
-<g id="edge17" class="edge">
-<title>c_addr&#45;&gt;c_place</title>
-<path fill="none" stroke="#333333" d="M766.96,-406C823.21,-406 922.69,-406 983.46,-406"/>
-<polygon fill="#333333" stroke="#333333" points="983.19,-409.5 993.19,-406 983.19,-402.5 983.19,-409.5"/>
-</g>
-<!-- c_addrmap -->
-<g id="node22" class="node">
-<title>c_addrmap</title>
-<path fill="#e8daef" stroke="black" d="M1360.16,-424C1360.16,-424 1290.91,-424 1290.91,-424 1284.91,-424 1278.91,-418 1278.91,-412 1278.91,-412 1278.91,-400 1278.91,-400 1278.91,-394 1284.91,-388 1290.91,-388 1290.91,-388 1360.16,-388 1360.16,-388 1366.16,-388 1372.16,-394 1372.16,-400 1372.16,-400 1372.16,-412 1372.16,-412 1372.16,-418 1366.16,-424 1360.16,-424"/>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-409" font-family="Helvetica,sans-Serif" font-size="10.00">AddressMap</text>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-397" font-family="Helvetica,sans-Serif" font-size="10.00">::insert(addr, wid)</text>
-</g>
-<!-- c_place&#45;&gt;c_addrmap -->
-<g id="edge18" class="edge">
-<title>c_place&#45;&gt;c_addrmap</title>
-<path fill="none" stroke="#117864" d="M1077.88,-406C1127.25,-406 1210.96,-406 1266.99,-406"/>
-<polygon fill="#117864" stroke="#117864" points="1266.99,-409.5 1276.99,-406 1266.99,-402.5 1266.99,-409.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1195.12" y="-408.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#117864">WorkerId</text>
-</g>
-<!-- c_box -->
-<g id="node23" class="node">
-<title>c_box</title>
-<path fill="white" stroke="black" d="M1667.81,-424C1667.81,-424 1613.02,-424 1613.02,-424 1607.02,-424 1601.02,-418 1601.02,-412 1601.02,-412 1601.02,-400 1601.02,-400 1601.02,-394 1607.02,-388 1613.02,-388 1613.02,-388 1667.81,-388 1667.81,-388 1673.81,-388 1679.81,-394 1679.81,-400 1679.81,-400 1679.81,-412 1679.81,-412 1679.81,-418 1673.81,-424 1667.81,-424"/>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-409" font-family="Helvetica,sans-Serif" font-size="10.00">Box::new(</text>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-397" font-family="Helvetica,sans-Serif" font-size="10.00">Actor::new(a))</text>
-</g>
-<!-- c_addrmap&#45;&gt;c_box -->
-<g id="edge19" class="edge">
-<title>c_addrmap&#45;&gt;c_box</title>
-<path fill="none" stroke="#333333" d="M1372.36,-406C1430.29,-406 1529.63,-406 1589.45,-406"/>
-<polygon fill="#333333" stroke="#333333" points="1589.35,-409.5 1599.35,-406 1589.35,-402.5 1589.35,-409.5"/>
-</g>
-<!-- c_tx -->
-<g id="node24" class="node">
-<title>c_tx</title>
-<path fill="#d1f2eb" stroke="black" d="M1987.39,-428C1987.39,-428 1946.49,-428 1946.49,-428 1940.49,-428 1934.49,-422 1934.49,-416 1934.49,-416 1934.49,-396 1934.49,-396 1934.49,-390 1940.49,-384 1946.49,-384 1946.49,-384 1987.39,-384 1987.39,-384 1993.39,-384 1999.39,-390 1999.39,-396 1999.39,-396 1999.39,-416 1999.39,-416 1999.39,-422 1993.39,-428 1987.39,-428"/>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-415" font-family="Helvetica,sans-Serif" font-size="10.00">spawn_txs</text>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-403" font-family="Helvetica,sans-Serif" font-size="10.00">[worker_id]</text>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-391" font-family="Helvetica,sans-Serif" font-size="10.00">.try_send()</text>
-</g>
-<!-- c_box&#45;&gt;c_tx -->
-<g id="edge20" class="edge">
-<title>c_box&#45;&gt;c_tx</title>
-<path fill="none" stroke="#27ae60" stroke-width="2" d="M1680.24,-406C1740.87,-406 1857.68,-406 1921.56,-406"/>
-<polygon fill="#27ae60" stroke="#27ae60" stroke-width="2" points="1921.32,-409.5 1931.32,-406 1921.32,-402.5 1921.32,-409.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1805.63" y="-408.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#27ae60">(addr, actor_box)</text>
-</g>
-<!-- c_hybrid -->
-<g id="node25" class="node">
-<title>c_hybrid</title>
-<path fill="#d1f2eb" stroke="black" d="M2260.18,-420.73C2260.18,-422.53 2241.77,-424 2219.1,-424 2196.44,-424 2178.03,-422.53 2178.03,-420.73 2178.03,-420.73 2178.03,-391.27 2178.03,-391.27 2178.03,-389.47 2196.44,-388 2219.1,-388 2241.77,-388 2260.18,-389.47 2260.18,-391.27 2260.18,-391.27 2260.18,-420.73 2260.18,-420.73"/>
-<path fill="none" stroke="black" d="M2260.18,-420.73C2260.18,-418.92 2241.77,-417.45 2219.1,-417.45 2196.44,-417.45 2178.03,-418.92 2178.03,-420.73"/>
-<text xml:space="preserve" text-anchor="middle" x="2219.1" y="-403" font-family="Helvetica,sans-Serif" font-size="10.00">HybridChannel</text>
-</g>
-<!-- c_tx&#45;&gt;c_hybrid -->
-<g id="edge21" class="edge">
-<title>c_tx&#45;&gt;c_hybrid</title>
-<path fill="none" stroke="#27ae60" stroke-width="2" d="M1999.88,-406C2041.47,-406 2114.77,-406 2164.84,-406"/>
-<polygon fill="#27ae60" stroke="#27ae60" stroke-width="2" points="2164.65,-409.5 2174.65,-406 2164.65,-402.5 2164.65,-409.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2125.01" y="-408.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#27ae60">spawn tuple</text>
-</g>
-<!-- c_rx -->
-<g id="node26" class="node">
-<title>c_rx</title>
-<path fill="#fadbd8" stroke="black" d="M2407.61,-428C2407.61,-428 2370.61,-428 2370.61,-428 2364.61,-428 2358.61,-422 2358.61,-416 2358.61,-416 2358.61,-396 2358.61,-396 2358.61,-390 2364.61,-384 2370.61,-384 2370.61,-384 2407.61,-384 2407.61,-384 2413.61,-384 2419.61,-390 2419.61,-396 2419.61,-396 2419.61,-416 2419.61,-416 2419.61,-422 2413.61,-428 2407.61,-428"/>
-<text xml:space="preserve" text-anchor="middle" x="2389.11" y="-415" font-family="Helvetica,sans-Serif" font-size="10.00">Worker</text>
-<text xml:space="preserve" text-anchor="middle" x="2389.11" y="-403" font-family="Helvetica,sans-Serif" font-size="10.00">spawn_rx</text>
-<text xml:space="preserve" text-anchor="middle" x="2389.11" y="-391" font-family="Helvetica,sans-Serif" font-size="10.00">.try_recv()</text>
-</g>
-<!-- c_hybrid&#45;&gt;c_rx -->
-<g id="edge22" class="edge">
-<title>c_hybrid&#45;&gt;c_rx</title>
-<path fill="none" stroke="#27ae60" stroke-width="2" d="M2260.35,-406C2285.97,-406 2319.14,-406 2345.26,-406"/>
-<polygon fill="#27ae60" stroke="#27ae60" stroke-width="2" points="2345.17,-409.5 2355.17,-406 2345.17,-402.5 2345.17,-409.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2306.19" y="-408.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#27ae60">spawn tuple</text>
-</g>
-<!-- c_pool -->
-<g id="node27" class="node">
-<title>c_pool</title>
-<path fill="#fadbd8" stroke="black" d="M2598.68,-428C2598.68,-428 2550.55,-428 2550.55,-428 2544.55,-428 2538.55,-422 2538.55,-416 2538.55,-416 2538.55,-396 2538.55,-396 2538.55,-390 2544.55,-384 2550.55,-384 2550.55,-384 2598.68,-384 2598.68,-384 2604.68,-384 2610.68,-390 2610.68,-396 2610.68,-396 2610.68,-416 2610.68,-416 2610.68,-422 2604.68,-428 2598.68,-428"/>
-<text xml:space="preserve" text-anchor="middle" x="2574.62" y="-415" font-family="Helvetica,sans-Serif" font-size="10.00">ActorPool</text>
-<text xml:space="preserve" text-anchor="middle" x="2574.62" y="-403" font-family="Helvetica,sans-Serif" font-size="10.00">::insert(addr,</text>
-<text xml:space="preserve" text-anchor="middle" x="2574.62" y="-391" font-family="Helvetica,sans-Serif" font-size="10.00">actor_box)</text>
-</g>
-<!-- c_rx&#45;&gt;c_pool -->
-<g id="edge23" class="edge">
-<title>c_rx&#45;&gt;c_pool</title>
-<path fill="none" stroke="#27ae60" stroke-width="2" d="M2420.01,-406C2448.52,-406 2491.94,-406 2525.36,-406"/>
-<polygon fill="#27ae60" stroke="#27ae60" stroke-width="2" points="2525.05,-409.5 2535.05,-406 2525.05,-402.5 2525.05,-409.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2482.28" y="-408.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#27ae60">(addr, actor_box)</text>
-</g>
-<!-- d_caller -->
-<g id="node28" class="node">
-<title>d_caller</title>
-<ellipse fill="#a3e4d7" stroke="black" cx="135.72" cy="-522" rx="27" ry="18"/>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-519" font-family="Helvetica,sans-Serif" font-size="10.00">Caller</text>
-</g>
-<!-- d_new -->
-<g id="node29" class="node">
-<title>d_new</title>
-<path fill="white" stroke="black" d="M491.24,-540C491.24,-540 413.64,-540 413.64,-540 407.64,-540 401.64,-534 401.64,-528 401.64,-528 401.64,-516 401.64,-516 401.64,-510 407.64,-504 413.64,-504 413.64,-504 491.24,-504 491.24,-504 497.24,-504 503.24,-510 503.24,-516 503.24,-516 503.24,-528 503.24,-528 503.24,-534 497.24,-540 491.24,-540"/>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-525" font-family="Helvetica,sans-Serif" font-size="10.00">Runtime</text>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-513" font-family="Helvetica,sans-Serif" font-size="10.00">::new_inbox::&lt;M&gt;()</text>
-</g>
-<!-- d_caller&#45;&gt;d_new -->
-<g id="edge24" class="edge">
-<title>d_caller&#45;&gt;d_new</title>
-<path fill="none" stroke="#333333" d="M163.01,-522C212.62,-522 321.23,-522 390.1,-522"/>
-<polygon fill="#333333" stroke="#333333" points="389.71,-525.5 399.71,-522 389.71,-518.5 389.71,-525.5"/>
-</g>
-<!-- d_addr -->
-<g id="node30" class="node">
-<title>d_addr</title>
-<path fill="#d5f5e3" stroke="black" d="M754.76,-540C754.76,-540 692.73,-540 692.73,-540 686.73,-540 680.73,-534 680.73,-528 680.73,-528 680.73,-516 680.73,-516 680.73,-510 686.73,-504 692.73,-504 692.73,-504 754.76,-504 754.76,-504 760.76,-504 766.76,-510 766.76,-516 766.76,-516 766.76,-528 766.76,-528 766.76,-534 760.76,-540 754.76,-540"/>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-525" font-family="Helvetica,sans-Serif" font-size="10.00">ActorAddress</text>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-513" font-family="Helvetica,sans-Serif" font-size="10.00">::new_random()</text>
-</g>
-<!-- d_new&#45;&gt;d_addr -->
-<g id="edge25" class="edge">
-<title>d_new&#45;&gt;d_addr</title>
-<path fill="none" stroke="#333333" d="M503.46,-522C550.54,-522 620.82,-522 669.06,-522"/>
-<polygon fill="#333333" stroke="#333333" points="669,-525.5 679,-522 669,-518.5 669,-525.5"/>
-</g>
-<!-- d_recv -->
-<g id="node31" class="node">
-<title>d_recv</title>
-<path fill="#d1f2eb" stroke="black" d="M1065.96,-540C1065.96,-540 1006.72,-540 1006.72,-540 1000.72,-540 994.72,-534 994.72,-528 994.72,-528 994.72,-516 994.72,-516 994.72,-510 1000.72,-504 1006.72,-504 1006.72,-504 1065.96,-504 1065.96,-504 1071.96,-504 1077.96,-510 1077.96,-516 1077.96,-516 1077.96,-528 1077.96,-528 1077.96,-534 1071.96,-540 1065.96,-540"/>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-525" font-family="Helvetica,sans-Serif" font-size="10.00">Receiver&lt;M&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-513" font-family="Helvetica,sans-Serif" font-size="10.00">::new(capacity)</text>
-</g>
-<!-- d_addr&#45;&gt;d_recv -->
-<g id="edge26" class="edge">
-<title>d_addr&#45;&gt;d_recv</title>
-<path fill="none" stroke="#333333" d="M766.96,-522C823.21,-522 922.69,-522 983.46,-522"/>
-<polygon fill="#333333" stroke="#333333" points="983.19,-525.5 993.19,-522 983.19,-518.5 983.19,-525.5"/>
-</g>
-<!-- d_sender -->
-<g id="node32" class="node">
-<title>d_sender</title>
-<path fill="#d1f2eb" stroke="black" d="M1367.25,-510C1367.25,-510 1283.82,-510 1283.82,-510 1277.82,-510 1271.82,-504 1271.82,-498 1271.82,-498 1271.82,-486 1271.82,-486 1271.82,-480 1277.82,-474 1283.82,-474 1283.82,-474 1367.25,-474 1367.25,-474 1373.25,-474 1379.25,-480 1379.25,-486 1379.25,-486 1379.25,-498 1379.25,-498 1379.25,-504 1373.25,-510 1367.25,-510"/>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-495" font-family="Helvetica,sans-Serif" font-size="10.00">Sender&lt;M&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-483" font-family="Helvetica,sans-Serif" font-size="10.00">= recv.new_sender()</text>
-</g>
-<!-- d_recv&#45;&gt;d_sender -->
-<g id="edge27" class="edge">
-<title>d_recv&#45;&gt;d_sender</title>
-<path fill="none" stroke="#e67300" d="M1078.31,-516.99C1105.24,-513.76 1141.25,-509.55 1173.11,-506.2 1201.72,-503.19 1233.4,-500.18 1260.35,-497.7"/>
-<polygon fill="#e67300" stroke="#e67300" points="1260.45,-501.2 1270.09,-496.81 1259.81,-494.23 1260.45,-501.2"/>
-<text xml:space="preserve" text-anchor="middle" x="1195.12" y="-508.9" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#e67300">clone Arc</text>
-</g>
-<!-- d_inbox -->
-<g id="node34" class="node">
-<title>d_inbox</title>
-<path fill="#d6eaf8" stroke="black" d="M1357.66,-576C1357.66,-576 1293.4,-576 1293.4,-576 1287.4,-576 1281.4,-570 1281.4,-564 1281.4,-564 1281.4,-544 1281.4,-544 1281.4,-538 1287.4,-532 1293.4,-532 1293.4,-532 1357.66,-532 1357.66,-532 1363.66,-532 1369.66,-538 1369.66,-544 1369.66,-544 1369.66,-564 1369.66,-564 1369.66,-570 1363.66,-576 1357.66,-576"/>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-563" font-family="Helvetica,sans-Serif" font-size="10.00">return Inbox {</text>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-551" font-family="Helvetica,sans-Serif" font-size="10.00">addr, inner: recv</text>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-539" font-family="Helvetica,sans-Serif" font-size="10.00">}</text>
-</g>
-<!-- d_recv&#45;&gt;d_inbox -->
-<g id="edge29" class="edge">
-<title>d_recv&#45;&gt;d_inbox</title>
-<path fill="none" stroke="#333333" d="M1078.18,-526.55C1128.46,-532.15 1214.02,-541.69 1269.9,-547.91"/>
-<polygon fill="#333333" stroke="#333333" points="1269.18,-551.35 1279.51,-548.98 1269.96,-544.4 1269.18,-551.35"/>
-<text xml:space="preserve" text-anchor="middle" x="1195.12" y="-544.51" font-family="Helvetica,sans-Serif" font-size="9.00">Receiver</text>
-</g>
-<!-- d_reg -->
-<g id="node33" class="node">
-<title>d_reg</title>
-<path fill="#e8daef" stroke="black" d="M1679.49,-518C1679.49,-518 1601.34,-518 1601.34,-518 1595.34,-518 1589.34,-512 1589.34,-506 1589.34,-506 1589.34,-486 1589.34,-486 1589.34,-480 1595.34,-474 1601.34,-474 1601.34,-474 1679.49,-474 1679.49,-474 1685.49,-474 1691.49,-480 1691.49,-486 1691.49,-486 1691.49,-506 1691.49,-506 1691.49,-512 1685.49,-518 1679.49,-518"/>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-505" font-family="Helvetica,sans-Serif" font-size="10.00">InboxRegistry</text>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-493" font-family="Helvetica,sans-Serif" font-size="10.00">::register(</text>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-481" font-family="Helvetica,sans-Serif" font-size="10.00">addr, Arc&lt;sender&gt;)</text>
-</g>
-<!-- d_sender&#45;&gt;d_reg -->
-<g id="edge28" class="edge">
-<title>d_sender&#45;&gt;d_reg</title>
-<path fill="none" stroke="#e67300" d="M1379.61,-492.68C1434.45,-493.38 1519.96,-494.47 1577.76,-495.21"/>
-<polygon fill="#e67300" stroke="#e67300" points="1577.38,-498.71 1587.42,-495.34 1577.46,-491.71 1577.38,-498.71"/>
-<text xml:space="preserve" text-anchor="middle" x="1471.7" y="-496.94" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#e67300">Arc&lt;dyn SenderT&gt;</text>
-</g>
-<!-- d_send -->
-<g id="node35" class="node">
-<title>d_send</title>
-<path fill="white" stroke="black" d="M170.35,-634C170.35,-634 101.09,-634 101.09,-634 95.09,-634 89.09,-628 89.09,-622 89.09,-622 89.09,-602 89.09,-602 89.09,-596 95.09,-590 101.09,-590 101.09,-590 170.35,-590 170.35,-590 176.35,-590 182.35,-596 182.35,-602 182.35,-602 182.35,-622 182.35,-622 182.35,-628 176.35,-634 170.35,-634"/>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-621" font-family="Helvetica,sans-Serif" font-size="10.00">Runtime</text>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-609" font-family="Helvetica,sans-Serif" font-size="10.00">::send_to(</text>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-597" font-family="Helvetica,sans-Serif" font-size="10.00">inbox_addr, msg)</text>
-</g>
-<!-- d_miss -->
-<g id="node36" class="node">
-<title>d_miss</title>
-<path fill="#e8daef" stroke="black" d="M483.17,-630C483.17,-630 421.71,-630 421.71,-630 415.71,-630 409.71,-624 409.71,-618 409.71,-618 409.71,-606 409.71,-606 409.71,-600 415.71,-594 421.71,-594 421.71,-594 483.17,-594 483.17,-594 489.17,-594 495.17,-600 495.17,-606 495.17,-606 495.17,-618 495.17,-618 495.17,-624 489.17,-630 483.17,-630"/>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-615" font-family="Helvetica,sans-Serif" font-size="10.00">AddressMap</text>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-603" font-family="Helvetica,sans-Serif" font-size="10.00">::lookup → miss</text>
-</g>
-<!-- d_send&#45;&gt;d_miss -->
-<g id="edge30" class="edge">
-<title>d_send&#45;&gt;d_miss</title>
-<path fill="none" stroke="#333333" d="M182.82,-612C240.08,-612 337.59,-612 398.04,-612"/>
-<polygon fill="#333333" stroke="#333333" points="397.74,-615.5 407.74,-612 397.74,-608.5 397.74,-615.5"/>
-</g>
-<!-- d_try -->
-<g id="node37" class="node">
-<title>d_try</title>
-<path fill="#e8daef" stroke="black" d="M755.59,-634C755.59,-634 691.9,-634 691.9,-634 685.9,-634 679.9,-628 679.9,-622 679.9,-622 679.9,-602 679.9,-602 679.9,-596 685.9,-590 691.9,-590 691.9,-590 755.59,-590 755.59,-590 761.59,-590 767.59,-596 767.59,-602 767.59,-602 767.59,-622 767.59,-622 767.59,-628 761.59,-634 755.59,-634"/>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-621" font-family="Helvetica,sans-Serif" font-size="10.00">InboxRegistry</text>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-609" font-family="Helvetica,sans-Serif" font-size="10.00">::try_deliver(</text>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-597" font-family="Helvetica,sans-Serif" font-size="10.00">addr, Box(msg))</text>
-</g>
-<!-- d_miss&#45;&gt;d_try -->
-<g id="edge31" class="edge">
-<title>d_miss&#45;&gt;d_try</title>
-<path fill="none" stroke="#333333" d="M495.52,-612C542.04,-612 617.15,-612 668.17,-612"/>
-<polygon fill="#333333" stroke="#333333" points="668.11,-615.5 678.11,-612 668.11,-608.5 668.11,-615.5"/>
-<text xml:space="preserve" text-anchor="middle" x="583.92" y="-625.5" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#666666">not a worker</text>
-<text xml:space="preserve" text-anchor="middle" x="583.92" y="-614.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#666666">actor</text>
-</g>
-<!-- d_dyn -->
-<g id="node38" class="node">
-<title>d_dyn</title>
-<path fill="#d1f2eb" stroke="black" d="M1086.54,-634C1086.54,-634 986.14,-634 986.14,-634 980.14,-634 974.14,-628 974.14,-622 974.14,-622 974.14,-602 974.14,-602 974.14,-596 980.14,-590 986.14,-590 986.14,-590 1086.54,-590 1086.54,-590 1092.54,-590 1098.54,-596 1098.54,-602 1098.54,-602 1098.54,-622 1098.54,-622 1098.54,-628 1092.54,-634 1086.54,-634"/>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-621" font-family="Helvetica,sans-Serif" font-size="10.00">Arc&lt;dyn SenderT&gt;</text>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-609" font-family="Helvetica,sans-Serif" font-size="10.00">::try_send_any()</text>
-<text xml:space="preserve" text-anchor="middle" x="1036.34" y="-597" font-family="Helvetica,sans-Serif" font-size="10.00">downcast → Sender&lt;M&gt;</text>
-</g>
-<!-- d_try&#45;&gt;d_dyn -->
-<g id="edge32" class="edge">
-<title>d_try&#45;&gt;d_dyn</title>
-<path fill="none" stroke="#8e44ad" stroke-width="1.5" d="M767.93,-612C817.99,-612 901.32,-612 961.67,-612"/>
-<polygon fill="#8e44ad" stroke="#8e44ad" stroke-width="1.5" points="961.53,-615.5 971.53,-612 961.53,-608.5 961.53,-615.5"/>
-<text xml:space="preserve" text-anchor="middle" x="869.07" y="-614.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#8e44ad">Box&lt;dyn Any&gt;</text>
-</g>
-<!-- d_hybrid -->
-<g id="node39" class="node">
-<title>d_hybrid</title>
-<path fill="#d1f2eb" stroke="black" d="M1366.61,-630.73C1366.61,-632.53 1348.2,-634 1325.53,-634 1302.87,-634 1284.46,-632.53 1284.46,-630.73 1284.46,-630.73 1284.46,-601.27 1284.46,-601.27 1284.46,-599.47 1302.87,-598 1325.53,-598 1348.2,-598 1366.61,-599.47 1366.61,-601.27 1366.61,-601.27 1366.61,-630.73 1366.61,-630.73"/>
-<path fill="none" stroke="black" d="M1366.61,-630.73C1366.61,-628.92 1348.2,-627.45 1325.53,-627.45 1302.87,-627.45 1284.46,-628.92 1284.46,-630.73"/>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-613" font-family="Helvetica,sans-Serif" font-size="10.00">HybridChannel</text>
-</g>
-<!-- d_dyn&#45;&gt;d_hybrid -->
-<g id="edge33" class="edge">
-<title>d_dyn&#45;&gt;d_hybrid</title>
-<path fill="none" stroke="#c0392b" stroke-width="1.5" d="M1098.95,-612.86C1150.5,-613.58 1223.25,-614.59 1272.06,-615.27"/>
-<polygon fill="#c0392b" stroke="#c0392b" stroke-width="1.5" points="1271.92,-618.77 1281.97,-615.41 1272.02,-611.77 1271.92,-618.77"/>
-<text xml:space="preserve" text-anchor="middle" x="1195.12" y="-617.18" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">M (typed)</text>
-</g>
-<!-- d_tryrecv -->
-<g id="node40" class="node">
-<title>d_tryrecv</title>
-<path fill="#d6eaf8" stroke="black" d="M1660.31,-634C1660.31,-634 1620.53,-634 1620.53,-634 1614.53,-634 1608.53,-628 1608.53,-622 1608.53,-622 1608.53,-610 1608.53,-610 1608.53,-604 1614.53,-598 1620.53,-598 1620.53,-598 1660.31,-598 1660.31,-598 1666.31,-598 1672.31,-604 1672.31,-610 1672.31,-610 1672.31,-622 1672.31,-622 1672.31,-628 1666.31,-634 1660.31,-634"/>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-619" font-family="Helvetica,sans-Serif" font-size="10.00">Inbox</text>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-607" font-family="Helvetica,sans-Serif" font-size="10.00">::try_recv()</text>
-</g>
-<!-- d_hybrid&#45;&gt;d_tryrecv -->
-<g id="edge34" class="edge">
-<title>d_hybrid&#45;&gt;d_tryrecv</title>
-<path fill="none" stroke="#c0392b" stroke-width="1.5" d="M1366.8,-616C1425.81,-616 1535.36,-616 1596.08,-616"/>
-<polygon fill="#c0392b" stroke="#c0392b" stroke-width="1.5" points="1595.99,-619.5 1605.99,-616 1595.99,-612.5 1595.99,-619.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1471.7" y="-618.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">M</text>
-</g>
-<!-- e_phase1 -->
-<g id="node41" class="node">
-<title>e_phase1</title>
-<polygon fill="#27ae60" stroke="none" points="375.97,-887 375.97,-913 528.91,-913 528.91,-887 375.97,-887"/>
-<polygon fill="none" stroke="black" points="375.97,-887 375.97,-913 528.91,-913 528.91,-887 375.97,-887"/>
-<text xml:space="preserve" text-anchor="start" x="433.54" y="-898" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="white">Phase 1</text>
-<polygon fill="none" stroke="black" points="375.97,-833 375.97,-887 528.91,-887 528.91,-833 375.97,-833"/>
-<text xml:space="preserve" text-anchor="start" x="397.99" y="-872" font-family="Helvetica,sans-Serif" font-size="10.00">DRAIN SPAWN QUEUE</text>
-<text xml:space="preserve" text-anchor="start" x="408.54" y="-862" font-family="Helvetica,sans-Serif" font-size="10.00">spawn_rx.try_recv()</text>
-<text xml:space="preserve" text-anchor="start" x="382.97" y="-852" font-family="Helvetica,sans-Serif" font-size="10.00">→ ActorPool::insert(addr, actor)</text>
-<text xml:space="preserve" text-anchor="start" x="412.7" y="-842" font-family="Helvetica,sans-Serif" font-style="italic" font-size="10.00">repeat until empty</text>
-</g>
-<!-- e_phase2 -->
-<g id="node42" class="node">
-<title>e_phase2</title>
-<polygon fill="#c0392b" stroke="none" points="638.93,-852 638.93,-878 808.56,-878 808.56,-852 638.93,-852"/>
-<polygon fill="none" stroke="black" points="638.93,-852 638.93,-878 808.56,-878 808.56,-852 638.93,-852"/>
-<text xml:space="preserve" text-anchor="start" x="704.84" y="-863" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="white">Phase 2</text>
-<polygon fill="none" stroke="black" points="638.93,-798 638.93,-852 808.56,-852 808.56,-798 638.93,-798"/>
-<text xml:space="preserve" text-anchor="start" x="660.68" y="-837" font-family="Helvetica,sans-Serif" font-size="10.00">DRAIN TRANSFER QUEUE</text>
-<text xml:space="preserve" text-anchor="start" x="649.55" y="-827" font-family="Helvetica,sans-Serif" font-size="10.00">transfer_rx.try_recv() → Envelope</text>
-<text xml:space="preserve" text-anchor="start" x="645.93" y="-817" font-family="Helvetica,sans-Serif" font-size="10.00">→ ActorPool::deliver(dest, payload)</text>
-<text xml:space="preserve" text-anchor="start" x="662.04" y="-807" font-family="Helvetica,sans-Serif" font-style="italic" font-size="10.00">repeat up to max(len&gt;&gt;1, 1)</text>
-</g>
-<!-- e_phase1&#45;&gt;e_phase2 -->
-<g id="edge35" class="edge">
-<title>e_phase1&#45;&gt;e_phase2</title>
-<path fill="none" stroke="#333333" stroke-width="2" d="M536.81,-862.17C562.68,-858.8 591.52,-855.05 618.62,-851.53"/>
-<polygon fill="#333333" stroke="#333333" stroke-width="2" points="618.88,-855.03 628.34,-850.27 617.97,-848.09 618.88,-855.03"/>
-</g>
-<!-- e_pool -->
-<g id="node49" class="node">
-<title>e_pool</title>
-<polygon fill="#fadbd8" stroke="black" points="2012.88,-870 1925.01,-870 1921.01,-866 1921.01,-826 2008.88,-826 2012.88,-830 2012.88,-870"/>
-<polyline fill="none" stroke="black" points="2008.88,-866 1921.01,-866"/>
-<polyline fill="none" stroke="black" points="2008.88,-866 2008.88,-826"/>
-<polyline fill="none" stroke="black" points="2008.88,-866 2012.88,-870"/>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-857" font-family="Helvetica,sans-Serif" font-size="10.00">ActorPool</text>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-845" font-family="Helvetica,sans-Serif" font-size="10.00">(HashMap&lt;Addr,</text>
-<text xml:space="preserve" text-anchor="middle" x="1966.94" y="-833" font-family="Helvetica,sans-Serif" font-size="10.00">ActorSlot&gt;)</text>
-</g>
-<!-- e_phase1&#45;&gt;e_pool -->
-<g id="edge42" class="edge">
-<title>e_phase1&#45;&gt;e_pool</title>
-<path fill="none" stroke="#27ae60" stroke-dasharray="5,2" d="M536.82,-884C566.47,-887.49 600.14,-890.97 630.93,-893 1126.95,-925.77 1254.73,-931.59 1749.36,-882 1804.11,-876.51 1866.1,-866.38 1909.69,-858.6"/>
-<polygon fill="#27ae60" stroke="#27ae60" points="1910.21,-862.06 1919.43,-856.84 1908.96,-855.17 1910.21,-862.06"/>
-<text xml:space="preserve" text-anchor="middle" x="1195.12" y="-921.11" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#27ae60">insert</text>
-</g>
-<!-- e_phase3 -->
-<g id="node43" class="node">
-<title>e_phase3</title>
-<polygon fill="#8e44ad" stroke="none" points="929.57,-833 929.57,-859 1143.11,-859 1143.11,-833 929.57,-833"/>
-<polygon fill="none" stroke="black" points="929.57,-833 929.57,-859 1143.11,-859 1143.11,-833 929.57,-833"/>
-<text xml:space="preserve" text-anchor="start" x="1017.44" y="-844" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="white">Phase 3</text>
-<polygon fill="none" stroke="black" points="929.57,-769 929.57,-833 1143.11,-833 1143.11,-769 929.57,-769"/>
-<text xml:space="preserve" text-anchor="start" x="992.44" y="-818" font-family="Helvetica,sans-Serif" font-size="10.00">TICK ALL ACTORS</text>
-<text xml:space="preserve" text-anchor="start" x="987.71" y="-808" font-family="Helvetica,sans-Serif" font-size="10.00">for (addr, slot) in pool:</text>
-<text xml:space="preserve" text-anchor="start" x="961.17" y="-798" font-family="Helvetica,sans-Serif" font-size="10.00"> &#160;while msg = mailbox.pop_front():</text>
-<text xml:space="preserve" text-anchor="start" x="936.57" y="-788" font-family="Helvetica,sans-Serif" font-size="10.00"> &#160;&#160;&#160;catch_unwind(actor.handle_any(ctx, msg))</text>
-<text xml:space="preserve" text-anchor="start" x="956.59" y="-778" font-family="Helvetica,sans-Serif" font-style="italic" font-size="10.00">actors may call ctx.send / ctx.spawn</text>
-</g>
-<!-- e_phase2&#45;&gt;e_phase3 -->
-<g id="edge36" class="edge">
-<title>e_phase2&#45;&gt;e_phase3</title>
-<path fill="none" stroke="#333333" stroke-width="2" d="M816.25,-830.93C845.27,-828.69 877.88,-826.17 908.9,-823.77"/>
-<polygon fill="#333333" stroke="#333333" stroke-width="2" points="908.9,-827.28 918.6,-823.02 908.36,-820.3 908.9,-827.28"/>
-</g>
-<!-- e_phase2&#45;&gt;e_pool -->
-<g id="edge43" class="edge">
-<title>e_phase2&#45;&gt;e_pool</title>
-<path fill="none" stroke="#c0392b" stroke-dasharray="5,2" d="M816.42,-858.09C849.4,-864.44 887,-870.66 921.57,-874 1297.37,-910.3 1752.56,-870.38 1909.54,-854.19"/>
-<polygon fill="#c0392b" stroke="#c0392b" points="1909.67,-857.69 1919.25,-853.17 1908.94,-850.73 1909.67,-857.69"/>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-891.49" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">deliver</text>
-</g>
-<!-- e_phase4 -->
-<g id="node44" class="node">
-<title>e_phase4</title>
-<polygon fill="#27ae60" stroke="none" points="1247.13,-737 1247.13,-763 1403.93,-763 1403.93,-737 1247.13,-737"/>
-<polygon fill="none" stroke="black" points="1247.13,-737 1247.13,-763 1403.93,-763 1403.93,-737 1247.13,-737"/>
-<text xml:space="preserve" text-anchor="start" x="1306.63" y="-748" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="white">Phase 4</text>
-<polygon fill="none" stroke="black" points="1247.13,-683 1247.13,-737 1403.93,-737 1403.93,-683 1247.13,-683"/>
-<text xml:space="preserve" text-anchor="start" x="1254.13" y="-722" font-family="Helvetica,sans-Serif" font-size="10.00">DRAIN SPAWN QUEUE AGAIN</text>
-<text xml:space="preserve" text-anchor="start" x="1254.95" y="-712" font-family="Helvetica,sans-Serif" font-style="italic" font-size="10.00">(picks up spawns from phase 3)</text>
-<text xml:space="preserve" text-anchor="start" x="1281.63" y="-702" font-family="Helvetica,sans-Serif" font-size="10.00">spawn_rx.try_recv()</text>
-<text xml:space="preserve" text-anchor="start" x="1279.96" y="-692" font-family="Helvetica,sans-Serif" font-size="10.00">→ ActorPool::insert()</text>
-</g>
-<!-- e_phase3&#45;&gt;e_phase4 -->
-<g id="edge37" class="edge">
-<title>e_phase3&#45;&gt;e_phase4</title>
-<path fill="none" stroke="#333333" stroke-width="2" d="M1150.85,-778.03C1176.06,-770.04 1202.57,-761.64 1227.08,-753.88"/>
-<polygon fill="#333333" stroke="#333333" stroke-width="2" points="1227.95,-757.27 1236.43,-750.92 1225.84,-750.6 1227.95,-757.27"/>
-</g>
-<!-- e_spawn_rx -->
-<g id="node47" class="node">
-<title>e_spawn_rx</title>
-<path fill="#d1f2eb" stroke="black" d="M180.12,-765C180.12,-767.21 160.22,-769 135.72,-769 111.22,-769 91.31,-767.21 91.31,-765 91.31,-765 91.31,-729 91.31,-729 91.31,-726.79 111.22,-725 135.72,-725 160.22,-725 180.12,-726.79 180.12,-729 180.12,-729 180.12,-765 180.12,-765"/>
-<path fill="none" stroke="black" d="M180.12,-765C180.12,-762.79 160.22,-761 135.72,-761 111.22,-761 91.31,-762.79 91.31,-765"/>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-750" font-family="Helvetica,sans-Serif" font-size="10.00">spawn_rx</text>
-<text xml:space="preserve" text-anchor="middle" x="135.72" y="-738" font-family="Helvetica,sans-Serif" font-size="10.00">(HybridChannel)</text>
-</g>
-<!-- e_phase3&#45;&gt;e_spawn_rx -->
-<g id="edge46" class="edge">
-<title>e_phase3&#45;&gt;e_spawn_rx</title>
-<path fill="none" stroke="#27ae60" stroke-dasharray="5,2" d="M958.11,-765.07C917.63,-742.28 866.25,-717.67 816.56,-706 589.3,-652.62 308.24,-705.96 191.51,-733.16"/>
-<polygon fill="#27ae60" stroke="#27ae60" points="190.81,-729.73 181.88,-735.44 192.42,-736.54 190.81,-729.73"/>
-<text xml:space="preserve" text-anchor="middle" x="583.92" y="-697.12" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#27ae60">ctx.spawn →</text>
-<text xml:space="preserve" text-anchor="middle" x="583.92" y="-686.32" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#27ae60">spawn_txs</text>
-</g>
-<!-- e_phase3&#45;&gt;e_pool -->
-<g id="edge44" class="edge">
-<title>e_phase3&#45;&gt;e_pool</title>
-<path fill="none" stroke="#8e44ad" stroke-dasharray="5,2" d="M1162.09,-835.89C1165.8,-836.3 1169.48,-836.67 1173.11,-837 1448.24,-862.06 1779.25,-854.59 1909.44,-850.19"/>
-<polygon fill="#8e44ad" stroke="#8e44ad" points="1162.73,-832.44 1152.39,-834.74 1161.91,-839.39 1162.73,-832.44"/>
-<polygon fill="#8e44ad" stroke="#8e44ad" points="1909.29,-853.7 1919.16,-849.85 1909.04,-846.7 1909.29,-853.7"/>
-<text xml:space="preserve" text-anchor="middle" x="1471.7" y="-867.13" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#8e44ad">pop mailbox +</text>
-<text xml:space="preserve" text-anchor="middle" x="1471.7" y="-856.33" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#8e44ad">handle_any</text>
-</g>
-<!-- e_pending -->
-<g id="node50" class="node">
-<title>e_pending</title>
-<path fill="#d6eaf8" stroke="black" d="M1355.71,-825C1355.71,-825 1295.35,-825 1295.35,-825 1289.35,-825 1283.35,-819 1283.35,-813 1283.35,-813 1283.35,-801 1283.35,-801 1283.35,-795 1289.35,-789 1295.35,-789 1295.35,-789 1355.71,-789 1355.71,-789 1361.71,-789 1367.71,-795 1367.71,-801 1367.71,-801 1367.71,-813 1367.71,-813 1367.71,-819 1361.71,-825 1355.71,-825"/>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-810" font-family="Helvetica,sans-Serif" font-size="10.00">pending_local</text>
-<text xml:space="preserve" text-anchor="middle" x="1325.53" y="-798" font-family="Helvetica,sans-Serif" font-size="10.00">(RefCell&lt;Vec&gt;)</text>
-</g>
-<!-- e_phase3&#45;&gt;e_pending -->
-<g id="edge45" class="edge">
-<title>e_phase3&#45;&gt;e_pending</title>
-<path fill="none" stroke="#2980b9" stroke-dasharray="5,2" d="M1150.85,-811.23C1192.5,-810.22 1237.69,-809.12 1271.53,-808.29"/>
-<polygon fill="#2980b9" stroke="#2980b9" points="1271.58,-811.79 1281.49,-808.05 1271.41,-804.79 1271.58,-811.79"/>
-<text xml:space="preserve" text-anchor="middle" x="1195.12" y="-824" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#2980b9">ctx.send →</text>
-<text xml:space="preserve" text-anchor="middle" x="1195.12" y="-813.2" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#2980b9">buffer local</text>
-</g>
-<!-- e_phase5 -->
-<g id="node45" class="node">
-<title>e_phase5</title>
-<polygon fill="#2980b9" stroke="none" points="1539.47,-737 1539.47,-763 1741.36,-763 1741.36,-737 1539.47,-737"/>
-<polygon fill="none" stroke="black" points="1539.47,-737 1539.47,-763 1741.36,-763 1741.36,-737 1539.47,-737"/>
-<text xml:space="preserve" text-anchor="start" x="1621.51" y="-748" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="white">Phase 5</text>
-<polygon fill="none" stroke="black" points="1539.47,-683 1539.47,-737 1741.36,-737 1741.36,-683 1539.47,-683"/>
-<text xml:space="preserve" text-anchor="start" x="1577.06" y="-722" font-family="Helvetica,sans-Serif" font-size="10.00">DELIVER PENDING LOCAL</text>
-<text xml:space="preserve" text-anchor="start" x="1546.47" y="-712" font-family="Helvetica,sans-Serif" font-size="10.00">for (addr, payload) in pending_local.take():</text>
-<text xml:space="preserve" text-anchor="start" x="1564.82" y="-702" font-family="Helvetica,sans-Serif" font-size="10.00"> &#160;ActorPool::deliver(addr, payload)</text>
-<text xml:space="preserve" text-anchor="start" x="1556.77" y="-692" font-family="Helvetica,sans-Serif" font-style="italic" font-size="10.00">same&#45;worker messages from phase 3</text>
-</g>
-<!-- e_phase4&#45;&gt;e_phase5 -->
-<g id="edge38" class="edge">
-<title>e_phase4&#45;&gt;e_phase5</title>
-<path fill="none" stroke="#333333" stroke-width="2" d="M1411.62,-723C1444.57,-723 1482.91,-723 1518.63,-723"/>
-<polygon fill="#333333" stroke="#333333" stroke-width="2" points="1518.63,-726.5 1528.63,-723 1518.63,-719.5 1518.63,-726.5"/>
-</g>
-<!-- e_phase4&#45;&gt;e_pool -->
-<g id="edge48" class="edge">
-<title>e_phase4&#45;&gt;e_pool</title>
-<path fill="none" stroke="#27ae60" stroke-dasharray="5,2" d="M1411.81,-747.98C1448.44,-758.17 1491.85,-769.51 1531.47,-778 1665.97,-806.8 1826.17,-829.71 1909.4,-840.78"/>
-<polygon fill="#27ae60" stroke="#27ae60" points="1908.75,-844.22 1919.12,-842.06 1909.67,-837.28 1908.75,-844.22"/>
-<text xml:space="preserve" text-anchor="middle" x="1640.42" y="-820.1" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#27ae60">insert</text>
-</g>
-<!-- e_phase6 -->
-<g id="node46" class="node">
-<title>e_phase6</title>
-<polygon fill="#e67300" stroke="none" points="1869.89,-745 1869.89,-771 2063.99,-771 2063.99,-745 1869.89,-745"/>
-<polygon fill="none" stroke="black" points="1869.89,-745 1869.89,-771 2063.99,-771 2063.99,-745 1869.89,-745"/>
-<text xml:space="preserve" text-anchor="start" x="1948.04" y="-756" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00" fill="white">Phase 6</text>
-<polygon fill="none" stroke="black" points="1869.89,-683 1869.89,-745 2063.99,-745 2063.99,-683 1869.89,-683"/>
-<text xml:space="preserve" text-anchor="start" x="1929.16" y="-729" font-family="Helvetica,sans-Serif" font-size="10.00">UPDATE STATS</text>
-<text xml:space="preserve" text-anchor="start" x="1892.19" y="-717" font-family="Helvetica,sans-Serif" font-size="10.00">stats.num_actors.store(pool.len())</text>
-<text xml:space="preserve" text-anchor="start" x="1890.24" y="-705" font-family="Helvetica,sans-Serif" font-size="10.00">stats.total_mailbox_depth.store(...)</text>
-<text xml:space="preserve" text-anchor="start" x="1876.89" y="-693" font-family="Helvetica,sans-Serif" font-size="10.00">stats.messages_processed.fetch_add(n)</text>
-</g>
-<!-- e_phase5&#45;&gt;e_phase6 -->
-<g id="edge39" class="edge">
-<title>e_phase5&#45;&gt;e_phase6</title>
-<path fill="none" stroke="#333333" stroke-width="2" d="M1749.03,-724.33C1781.12,-724.72 1816.43,-725.16 1849.08,-725.56"/>
-<polygon fill="#333333" stroke="#333333" stroke-width="2" points="1848.86,-729.06 1858.9,-725.68 1848.94,-722.06 1848.86,-729.06"/>
-</g>
-<!-- e_phase5&#45;&gt;e_pool -->
-<g id="edge50" class="edge">
-<title>e_phase5&#45;&gt;e_pool</title>
-<path fill="none" stroke="#2980b9" stroke-dasharray="5,2" d="M1749.23,-760.37C1778.76,-770.96 1810.67,-782.73 1839.89,-794.2 1863.11,-803.31 1888.46,-813.98 1910.29,-823.41"/>
-<polygon fill="#2980b9" stroke="#2980b9" points="1908.74,-826.56 1919.31,-827.32 1911.53,-820.13 1908.74,-826.56"/>
-<text xml:space="preserve" text-anchor="middle" x="1805.63" y="-796.9" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#2980b9">deliver</text>
-</g>
-<!-- e_stats -->
-<g id="node51" class="node">
-<title>e_stats</title>
-<path fill="#d1c4e9" stroke="black" d="M2245.94,-745C2245.94,-745 2192.27,-745 2192.27,-745 2186.27,-745 2180.27,-739 2180.27,-733 2180.27,-733 2180.27,-721 2180.27,-721 2180.27,-715 2186.27,-709 2192.27,-709 2192.27,-709 2245.94,-709 2245.94,-709 2251.94,-709 2257.94,-715 2257.94,-721 2257.94,-721 2257.94,-733 2257.94,-733 2257.94,-739 2251.94,-745 2245.94,-745"/>
-<text xml:space="preserve" text-anchor="middle" x="2219.1" y="-730" font-family="Helvetica,sans-Serif" font-size="10.00">WorkerStats</text>
-<text xml:space="preserve" text-anchor="middle" x="2219.1" y="-718" font-family="Helvetica,sans-Serif" font-size="10.00">(Arc, atomics)</text>
-</g>
-<!-- e_phase6&#45;&gt;e_stats -->
-<g id="edge51" class="edge">
-<title>e_phase6&#45;&gt;e_stats</title>
-<path fill="none" stroke="#e67300" stroke-width="1.5" d="M2071.86,-727C2105.04,-727 2140.26,-727 2167.83,-727"/>
-<polygon fill="#e67300" stroke="#e67300" stroke-width="1.5" points="2167.65,-730.5 2177.65,-727 2167.65,-723.5 2167.65,-730.5"/>
-<text xml:space="preserve" text-anchor="middle" x="2125.01" y="-729.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#e67300">store/fetch_add</text>
-</g>
-<!-- e_spawn_rx&#45;&gt;e_phase1 -->
-<g id="edge40" class="edge">
-<title>e_spawn_rx&#45;&gt;e_phase1</title>
-<path fill="none" stroke="#27ae60" stroke-width="1.5" d="M180.48,-764.52C225.94,-782.72 298.48,-811.76 357.07,-835.22"/>
-<polygon fill="#27ae60" stroke="#27ae60" stroke-width="1.5" points="355.52,-838.37 366.11,-838.84 358.13,-831.87 355.52,-838.37"/>
-<text xml:space="preserve" text-anchor="middle" x="311.7" y="-831.35" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#27ae60">(addr, actor_box)</text>
-</g>
-<!-- e_spawn_rx&#45;&gt;e_phase4 -->
-<g id="edge47" class="edge">
-<title>e_spawn_rx&#45;&gt;e_phase4</title>
-<path fill="none" stroke="#27ae60" stroke-width="1.5" d="M180.48,-743.82C241.24,-739.69 354.63,-733 451.44,-733 451.44,-733 451.44,-733 1037.34,-733 1100.67,-733 1171.8,-730.54 1227.44,-728.06"/>
-<polygon fill="#27ae60" stroke="#27ae60" stroke-width="1.5" points="1227.32,-731.57 1237.15,-727.62 1227,-724.58 1227.32,-731.57"/>
-<text xml:space="preserve" text-anchor="middle" x="723.74" y="-735.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#27ae60">(addr, actor_box)</text>
-</g>
-<!-- e_transfer_rx -->
-<g id="node48" class="node">
-<title>e_transfer_rx</title>
-<path fill="#d1f2eb" stroke="black" d="M496.84,-803C496.84,-805.21 476.94,-807 452.44,-807 427.94,-807 408.04,-805.21 408.04,-803 408.04,-803 408.04,-767 408.04,-767 408.04,-764.79 427.94,-763 452.44,-763 476.94,-763 496.84,-764.79 496.84,-767 496.84,-767 496.84,-803 496.84,-803"/>
-<path fill="none" stroke="black" d="M496.84,-803C496.84,-800.79 476.94,-799 452.44,-799 427.94,-799 408.04,-800.79 408.04,-803"/>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-788" font-family="Helvetica,sans-Serif" font-size="10.00">transfer_rx</text>
-<text xml:space="preserve" text-anchor="middle" x="452.44" y="-776" font-family="Helvetica,sans-Serif" font-size="10.00">(HybridChannel)</text>
-</g>
-<!-- e_transfer_rx&#45;&gt;e_phase2 -->
-<g id="edge41" class="edge">
-<title>e_transfer_rx&#45;&gt;e_phase2</title>
-<path fill="none" stroke="#c0392b" stroke-width="1.5" d="M497.31,-793.63C530.35,-800.14 577.03,-809.32 619.35,-817.65"/>
-<polygon fill="#c0392b" stroke="#c0392b" stroke-width="1.5" points="618.44,-821.04 628.93,-819.54 619.8,-814.17 618.44,-821.04"/>
-<text xml:space="preserve" text-anchor="middle" x="583.92" y="-817.37" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">Envelope</text>
-</g>
-<!-- e_pending&#45;&gt;e_phase5 -->
-<g id="edge49" class="edge">
-<title>e_pending&#45;&gt;e_phase5</title>
-<path fill="none" stroke="#2980b9" stroke-width="1.5" d="M1368.08,-795.85C1406.8,-785.45 1466.44,-769.44 1519.96,-755.07"/>
-<polygon fill="#2980b9" stroke="#2980b9" stroke-width="1.5" points="1520.68,-758.5 1529.43,-752.53 1518.87,-751.74 1520.68,-758.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1471.7" y="-780.13" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#2980b9">(addr, payload)</text>
-</g>
-</g>
-</svg>
diff --git a/docs/diagrams/datastore_chunk_lifecycle.svg b/docs/diagrams/datastore_chunk_lifecycle.svg
deleted file mode 100644
index f0dffdc..0000000
--- a/docs/diagrams/datastore_chunk_lifecycle.svg
+++ /dev/null
@@ -1,170 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1000 600" font-family="system-ui, sans-serif">
-  <defs>
-    <filter id="shadow" x="-4%" y="-4%" width="108%" height="108%">
-      <feDropShadow dx="1" dy="2" stdDeviation="3" flood-color="#000" flood-opacity="0.10"/>
-    </filter>
-    <marker id="arrow-gray" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#5f6368">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-green" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#34a853">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-red" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#ea4335">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-  </defs>
-
-  <!-- Background -->
-  <rect width="1000" height="600" rx="8" fill="#f8f9fb" stroke="#e0e3e8" stroke-width="1.5"/>
-
-  <!-- Title -->
-  <text x="500" y="42" text-anchor="middle" font-size="20" font-weight="bold" fill="#202124">Chunk Lifecycle</text>
-  <text x="500" y="62" text-anchor="middle" font-size="12" fill="#5f6368">chunking.rs &#xB7; storage.rs &#xB7; actors/blob_store.rs</text>
-
-  <!-- ═══════════════════════════════════════════════════════════ -->
-  <!-- Row 1: Creation -->
-  <!-- ═══════════════════════════════════════════════════════════ -->
-
-  <!-- Blob Data -->
-  <rect x="40" y="100" width="120" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="100" y="125" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">Blob Data</text>
-  <text x="100" y="140" text-anchor="middle" font-size="10" fill="#5f6368">raw bytes</text>
-
-  <!-- Arrow -->
-  <line x1="160" y1="125" x2="210" y2="125" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- blake3 hash -->
-  <rect x="222" y="100" width="130" height="50" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="287" y="125" text-anchor="middle" font-size="13" font-weight="600" fill="#e37400">blake3 hash</text>
-  <text x="287" y="140" text-anchor="middle" font-size="10" fill="#5f6368">ContentHash</text>
-
-  <!-- Arrow -->
-  <line x1="352" y1="125" x2="405" y2="125" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- chunk_blob() -->
-  <rect x="417" y="100" width="140" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="487" y="125" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">chunk_blob()</text>
-  <text x="487" y="140" text-anchor="middle" font-size="10" fill="#5f6368">split by chunk_size</text>
-
-  <!-- Arrow fan-out -->
-  <line x1="557" y1="115" x2="620" y2="105" stroke="#34a853" stroke-width="1.5" marker-end="url(#arrow-green)"/>
-  <line x1="557" y1="125" x2="620" y2="125" stroke="#34a853" stroke-width="1.5" marker-end="url(#arrow-green)"/>
-  <line x1="557" y1="135" x2="620" y2="145" stroke="#34a853" stroke-width="1.5" marker-end="url(#arrow-green)"/>
-
-  <!-- ChunkRef boxes -->
-  <rect x="630" y="88" width="110" height="30" rx="6" fill="#e6f4ea" stroke="#34a853" stroke-width="1.2"/>
-  <text x="685" y="108" text-anchor="middle" font-size="11" font-weight="600" fill="#137333">ChunkRef[0]</text>
-
-  <rect x="630" y="122" width="110" height="30" rx="6" fill="#e6f4ea" stroke="#34a853" stroke-width="1.2"/>
-  <text x="685" y="142" text-anchor="middle" font-size="11" font-weight="600" fill="#137333">ChunkRef[1]</text>
-
-  <rect x="630" y="156" width="110" height="30" rx="6" fill="#e6f4ea" stroke="#34a853" stroke-width="1.2"/>
-  <text x="685" y="176" text-anchor="middle" font-size="11" font-weight="600" fill="#137333">ChunkRef[N]</text>
-
-  <!-- Brace → ObjectManifest -->
-  <line x1="740" y1="103" x2="770" y2="137" stroke="#5f6368" stroke-width="1"/>
-  <line x1="740" y1="137" x2="770" y2="137" stroke="#5f6368" stroke-width="1"/>
-  <line x1="740" y1="171" x2="770" y2="137" stroke="#5f6368" stroke-width="1"/>
-  <line x1="770" y1="137" x2="800" y2="137" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <rect x="812" y="112" width="155" height="50" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="889" y="137" text-anchor="middle" font-size="13" font-weight="600" fill="#e37400">ObjectManifest</text>
-  <text x="889" y="152" text-anchor="middle" font-size="10" fill="#5f6368">chunks + total_size</text>
-
-  <!-- ═══════════════════════════════════════════════════════════ -->
-  <!-- Row 2: Storage -->
-  <!-- ═══════════════════════════════════════════════════════════ -->
-
-  <text x="500" y="220" text-anchor="middle" font-size="14" font-weight="600" fill="#202124">Storage</text>
-
-  <!-- WriteChunk -->
-  <rect x="100" y="240" width="200" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="200" y="260" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">BlobStoreMsg</text>
-  <text x="200" y="278" text-anchor="middle" font-size="10" fill="#5f6368">::WriteChunk { hash, data }</text>
-
-  <line x1="300" y1="265" x2="380" y2="265" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-
-  <!-- StorageBackend -->
-  <rect x="392" y="240" width="220" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="502" y="260" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">StorageBackend</text>
-  <text x="502" y="278" text-anchor="middle" font-size="10" fill="#5f6368">::write_chunk(hash, data)</text>
-
-  <line x1="612" y1="265" x2="690" y2="265" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-
-  <!-- Disk/Memory -->
-  <rect x="702" y="240" width="180" height="50" rx="12" fill="#f1f3f4" stroke="#9aa0a6" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="792" y="260" text-anchor="middle" font-size="13" font-weight="600" fill="#5f6368">Filesystem /</text>
-  <text x="792" y="278" text-anchor="middle" font-size="10" fill="#5f6368">InMemoryBackend</text>
-
-  <!-- ═══════════════════════════════════════════════════════════ -->
-  <!-- Row 3: Reference tracking -->
-  <!-- ═══════════════════════════════════════════════════════════ -->
-
-  <text x="500" y="340" text-anchor="middle" font-size="14" font-weight="600" fill="#202124">Reference Tracking</text>
-
-  <rect x="100" y="360" width="200" height="50" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="200" y="380" text-anchor="middle" font-size="13" font-weight="600" fill="#e37400">ObjectManifest</text>
-  <text x="200" y="398" text-anchor="middle" font-size="10" fill="#5f6368">references chunk hashes</text>
-
-  <line x1="300" y1="385" x2="380" y2="385" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="340" y="377" text-anchor="middle" font-size="10" fill="#5f6368">owns</text>
-
-  <rect x="392" y="360" width="220" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="502" y="385" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">MetadataActor</text>
-
-  <text x="502" y="398" text-anchor="middle" font-size="10" fill="#5f6368">tracks all manifests</text>
-
-  <!-- ═══════════════════════════════════════════════════════════ -->
-  <!-- Row 4: GC -->
-  <!-- ═══════════════════════════════════════════════════════════ -->
-
-  <text x="500" y="460" text-anchor="middle" font-size="14" font-weight="600" fill="#202124">Garbage Collection</text>
-
-  <rect x="60" y="480" width="150" height="50" rx="12" fill="#fce8e6" stroke="#ea4335" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="135" y="505" text-anchor="middle" font-size="13" font-weight="600" fill="#c5221f">GcTick</text>
-  <text x="135" y="520" text-anchor="middle" font-size="10" fill="#5f6368">periodic trigger</text>
-
-  <line x1="210" y1="505" x2="280" y2="505" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <rect x="292" y="480" width="200" height="50" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="392" y="500" text-anchor="middle" font-size="12" font-weight="600" fill="#e37400">Collect referenced</text>
-  <text x="392" y="518" text-anchor="middle" font-size="10" fill="#5f6368">hashes from manifests</text>
-
-  <line x1="492" y1="505" x2="560" y2="505" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <rect x="572" y="480" width="200" height="50" rx="12" fill="#fce8e6" stroke="#ea4335" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="672" y="500" text-anchor="middle" font-size="12" font-weight="600" fill="#c5221f">GcUnreferenced</text>
-  <text x="672" y="518" text-anchor="middle" font-size="10" fill="#5f6368">delete orphan chunks</text>
-
-  <line x1="772" y1="505" x2="830" y2="505" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-
-  <!-- Deleted -->
-  <rect x="842" y="488" width="100" height="34" rx="8" fill="#f1f3f4" stroke="#9aa0a6" stroke-width="1.5"/>
-  <text x="892" y="510" text-anchor="middle" font-size="12" font-weight="600" fill="#5f6368">Deleted</text>
-
-  <!-- ============================================ -->
-  <!-- Legend -->
-  <rect x="50" y="555" width="900" height="30" rx="6" fill="none" stroke="#e0e3e8" stroke-width="1"/>
-  <text x="70" y="575" font-size="11" font-weight="600" fill="#202124">Legend</text>
-
-  <line x1="130" y1="572" x2="160" y2="572" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="168" y="576" font-size="10" fill="#5f6368">Transition</text>
-
-  <line x1="260" y1="572" x2="290" y2="572" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="298" y="576" font-size="10" fill="#34a853">Data flow</text>
-
-  <line x1="380" y1="572" x2="410" y2="572" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <text x="418" y="576" font-size="10" fill="#ea4335">Deletion</text>
-
-  <rect x="510" y="564" width="40" height="16" rx="4" fill="#e8f0fe" stroke="#4285f4" stroke-width="1"/>
-  <text x="560" y="576" font-size="10" fill="#4285f4">Actor / Component</text>
-
-  <rect x="680" y="564" width="40" height="16" rx="4" fill="#fef7e0" stroke="#f9ab00" stroke-width="1"/>
-  <text x="730" y="576" font-size="10" fill="#e37400">Data type</text>
-
-  <rect x="810" y="564" width="40" height="16" rx="4" fill="#e6f4ea" stroke="#34a853" stroke-width="1"/>
-  <text x="860" y="576" font-size="10" fill="#34a853">Success state</text>
-</svg>
diff --git a/docs/diagrams/datastore_transfer.svg b/docs/diagrams/datastore_transfer.svg
deleted file mode 100644
index dd09007..0000000
--- a/docs/diagrams/datastore_transfer.svg
+++ /dev/null
@@ -1,153 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1000 700" font-family="system-ui, sans-serif">
-  <defs>
-    <filter id="shadow" x="-4%" y="-4%" width="108%" height="108%">
-      <feDropShadow dx="1" dy="2" stdDeviation="3" flood-color="#000" flood-opacity="0.10"/>
-    </filter>
-    <marker id="arrow-gray" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#5f6368">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-green" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#34a853">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-red" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#ea4335">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-blue" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#4285f4">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-  </defs>
-
-  <!-- Background -->
-  <rect width="1000" height="700" rx="8" fill="#f8f9fb" stroke="#e0e3e8" stroke-width="1.5"/>
-
-  <!-- Title -->
-  <text x="500" y="42" text-anchor="middle" font-size="20" font-weight="bold" fill="#202124">Datastore Remote GET Transfer Flow</text>
-  <text x="500" y="62" text-anchor="middle" font-size="12" fill="#5f6368">api.rs:583-706 &#xB7; types.rs</text>
-
-  <!-- ── Client ──────────────────────────────────────────── -->
-  <rect x="40" y="100" width="130" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="105" y="130" text-anchor="middle" font-size="14" font-weight="600" fill="#1a73e8">Client</text>
-
-  <!-- Arrow: Client → API Server -->
-  <line x1="170" y1="125" x2="240" y2="125" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="205" y="117" text-anchor="middle" font-size="10" fill="#5f6368">GET /api/data</text>
-
-  <!-- ── API Server ──────────────────────────────────────── -->
-  <rect x="252" y="100" width="150" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="327" y="130" text-anchor="middle" font-size="14" font-weight="600" fill="#1a73e8">API Server</text>
-
-  <!-- Arrow: API Server → DatastoreNode -->
-  <line x1="402" y1="125" x2="470" y2="125" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="436" y="117" text-anchor="middle" font-size="10" fill="#5f6368">Get msg</text>
-
-  <!-- ── DatastoreNode ───────────────────────────────────── -->
-  <rect x="482" y="100" width="160" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="562" y="130" text-anchor="middle" font-size="14" font-weight="600" fill="#1a73e8">DatastoreNode</text>
-
-  <!-- Arrow: DatastoreNode → MetadataActor -->
-  <line x1="562" y1="150" x2="562" y2="200" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="580" y="180" font-size="10" fill="#5f6368">lookup</text>
-
-  <!-- ── MetadataActor (local) ───────────────────────────── -->
-  <rect x="482" y="210" width="160" height="50" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="562" y="235" text-anchor="middle" font-size="13" font-weight="600" fill="#e37400">MetadataActor</text>
-  <text x="562" y="250" text-anchor="middle" font-size="10" fill="#5f6368">(local)</text>
-
-  <!-- Arrow: MetadataActor → Not Found (red, left) -->
-  <line x1="482" y1="235" x2="420" y2="235" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <text x="450" y="227" text-anchor="middle" font-size="10" fill="#ea4335">Not Found</text>
-
-  <!-- ── try_remote_get box ──────────────────────────────── -->
-  <rect x="210" y="210" width="200" height="50" rx="12" fill="#fce8e6" stroke="#ea4335" stroke-width="1.5" filter="url(#shadow)" stroke-dasharray="5,3"/>
-  <text x="310" y="235" text-anchor="middle" font-size="12" font-weight="600" fill="#c5221f">try_remote_get()</text>
-  <text x="310" y="250" text-anchor="middle" font-size="10" fill="#5f6368">iterate peers</text>
-
-  <!-- Arrow: try_remote_get → Peer Metadata -->
-  <line x1="310" y1="260" x2="310" y2="320" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="340" y="295" font-size="10" fill="#34a853">FindObject</text>
-
-  <!-- ── Peer MetadataActor ──────────────────────────────── -->
-  <rect x="210" y="330" width="200" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="310" y="355" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">Peer MetadataActor</text>
-  <text x="310" y="370" text-anchor="middle" font-size="10" fill="#5f6368">(remote node)</text>
-
-  <!-- Arrow: Peer Metadata → Peer BlobStore -->
-  <line x1="310" y1="380" x2="310" y2="430" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="340" y="410" font-size="10" fill="#34a853">Found!</text>
-
-  <!-- ── Peer BlobStore ──────────────────────────────────── -->
-  <rect x="210" y="440" width="200" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="310" y="465" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">Peer BlobStore</text>
-  <text x="310" y="480" text-anchor="middle" font-size="10" fill="#5f6368">ReadChunk &#xD7; N</text>
-
-  <!-- Arrow fan-out: Peer BlobStore → Chunks -->
-  <line x1="230" y1="490" x2="150" y2="540" stroke="#4285f4" stroke-width="1.5" marker-end="url(#arrow-blue)"/>
-  <line x1="310" y1="490" x2="310" y2="540" stroke="#4285f4" stroke-width="1.5" marker-end="url(#arrow-blue)"/>
-  <line x1="390" y1="490" x2="470" y2="540" stroke="#4285f4" stroke-width="1.5" marker-end="url(#arrow-blue)"/>
-
-  <!-- Chunk boxes -->
-  <rect x="100" y="545" width="100" height="36" rx="8" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.2" filter="url(#shadow)"/>
-  <text x="150" y="568" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">Chunk 1</text>
-
-  <rect x="260" y="545" width="100" height="36" rx="8" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.2" filter="url(#shadow)"/>
-  <text x="310" y="568" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">Chunk 2</text>
-
-  <rect x="420" y="545" width="100" height="36" rx="8" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.2" filter="url(#shadow)"/>
-  <text x="470" y="568" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">Chunk N</text>
-
-  <!-- Arrows: Chunks → Local BlobStore -->
-  <line x1="150" y1="581" x2="560" y2="610" stroke="#4285f4" stroke-width="1.2" marker-end="url(#arrow-blue)"/>
-  <line x1="310" y1="581" x2="560" y2="610" stroke="#4285f4" stroke-width="1.2" marker-end="url(#arrow-blue)"/>
-  <line x1="470" y1="581" x2="560" y2="610" stroke="#4285f4" stroke-width="1.2" marker-end="url(#arrow-blue)"/>
-
-  <!-- ── Local BlobStore ─────────────────────────────────── -->
-  <rect x="510" y="600" width="180" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="600" y="625" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">Local BlobStore</text>
-  <text x="600" y="640" text-anchor="middle" font-size="10" fill="#5f6368">WriteChunk &#xD7; N</text>
-
-  <!-- Arrow: Local BlobStore → Reassemble -->
-  <line x1="690" y1="625" x2="740" y2="625" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-
-  <!-- ── Reassemble ──────────────────────────────────────── -->
-  <rect x="752" y="600" width="150" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="827" y="625" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">reassemble_blob</text>
-  <text x="827" y="640" text-anchor="middle" font-size="10" fill="#5f6368">verify integrity</text>
-
-  <!-- Arrow: Reassemble → Client (curved up) -->
-  <path d="M 902 620 Q 950 600 960 400 Q 960 200 180 130"
-        fill="none" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="960" y="370" font-size="11" fill="#34a853" font-weight="600">200 OK</text>
-  <text x="960" y="385" font-size="10" fill="#34a853">blob data</text>
-
-  <!-- ── Dashboard integration ────────────────────────────── -->
-  <rect x="700" y="330" width="180" height="50" rx="12" fill="#f3e8fd" stroke="#9c27b0" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="790" y="350" text-anchor="middle" font-size="12" font-weight="600" fill="#7b1fa2">DatastoreMetrics</text>
-  <text x="790" y="367" text-anchor="middle" font-size="10" fill="#5f6368">begin/advance/end</text>
-
-  <line x1="410" y1="460" x2="700" y2="355" stroke="#9c27b0" stroke-width="1.2" stroke-dasharray="4,3" marker-end="url(#arrow-gray)"/>
-  <text x="570" y="395" font-size="9" fill="#9c27b0">transfer progress</text>
-
-  <!-- ============================================ -->
-  <!-- Legend -->
-  <rect x="50" y="660" width="900" height="30" rx="6" fill="none" stroke="#e0e3e8" stroke-width="1"/>
-  <text x="70" y="680" font-size="11" font-weight="600" fill="#202124">Legend</text>
-
-  <line x1="130" y1="677" x2="160" y2="677" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="168" y="681" font-size="10" fill="#5f6368">Transition</text>
-
-  <line x1="260" y1="677" x2="290" y2="677" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="298" y="681" font-size="10" fill="#34a853">Success path</text>
-
-  <line x1="400" y1="677" x2="430" y2="677" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <text x="438" y="681" font-size="10" fill="#ea4335">Not found / fallback</text>
-
-  <line x1="580" y1="677" x2="610" y2="677" stroke="#4285f4" stroke-width="1.5" marker-end="url(#arrow-blue)"/>
-  <text x="618" y="681" font-size="10" fill="#4285f4">Chunk transfer</text>
-
-  <line x1="720" y1="677" x2="750" y2="677" stroke="#9c27b0" stroke-width="1.2" stroke-dasharray="4,3"/>
-  <text x="758" y="681" font-size="10" fill="#9c27b0">Metrics tracking</text>
-</svg>
diff --git a/docs/diagrams/distribution_minor_flows.svg b/docs/diagrams/distribution_minor_flows.svg
deleted file mode 100644
index 5595224..0000000
--- a/docs/diagrams/distribution_minor_flows.svg
+++ /dev/null
@@ -1,199 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1100 900" font-family="system-ui, sans-serif">
-  <defs>
-    <filter id="shadow" x="-4%" y="-4%" width="108%" height="108%">
-      <feDropShadow dx="1" dy="2" stdDeviation="3" flood-color="#000" flood-opacity="0.10"/>
-    </filter>
-    <marker id="arrow-gray" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#5f6368">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-green" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#34a853">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-red" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#ea4335">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-blue" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#4285f4">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-  </defs>
-
-  <!-- Background -->
-  <rect width="1100" height="900" rx="8" fill="#f8f9fb" stroke="#e0e3e8" stroke-width="1.5"/>
-
-  <!-- Title -->
-  <text x="550" y="38" text-anchor="middle" font-size="20" font-weight="bold" fill="#202124">Distribution — Minor Flows</text>
-  <text x="550" y="58" text-anchor="middle" font-size="12" fill="#5f6368">swim/node.rs · swim/dissemination.rs · node.rs · kademlia/repair.rs</text>
-
-  <!-- ============================================ -->
-  <!-- SECTION 1: JOIN HANDSHAKE -->
-  <!-- ============================================ -->
-  <rect x="30" y="80" width="1040" height="220" rx="6" fill="#e6f4ea" fill-opacity="0.2" stroke="#34a853" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="102" font-size="13" font-weight="700" fill="#34a853" letter-spacing="1">JOIN HANDSHAKE</text>
-
-  <!-- New Node -->
-  <rect x="70" y="130" width="150" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="145" y="152" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">New Node</text>
-  <text x="145" y="168" text-anchor="middle" font-size="10" fill="#5f6368">joins cluster</text>
-
-  <!-- Arrow: New Node → SendJoinRequest -->
-  <line x1="220" y1="155" x2="300" y2="155" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="260" y="148" text-anchor="middle" font-size="10" fill="#5f6368">join(seeds)</text>
-
-  <!-- SendJoinRequest -->
-  <rect x="310" y="130" width="180" height="50" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="400" y="152" text-anchor="middle" font-size="12" font-weight="600" fill="#e37400">SendJoinRequest</text>
-  <text x="400" y="168" text-anchor="middle" font-size="10" fill="#5f6368">to seed address</text>
-
-  <!-- Arrow: → Seed Node -->
-  <line x1="490" y1="155" x2="570" y2="155" stroke="#4285f4" stroke-width="1.8" marker-end="url(#arrow-blue)"/>
-
-  <!-- Seed Node -->
-  <rect x="580" y="130" width="150" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="655" y="152" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">Seed Node</text>
-  <text x="655" y="168" text-anchor="middle" font-size="10" fill="#5f6368">handle_join_request</text>
-
-  <!-- Arrow: Seed → add to members -->
-  <line x1="655" y1="180" x2="655" y2="215" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <!-- Seed actions -->
-  <rect x="560" y="220" width="190" height="56" rx="10" fill="#fff" stroke="#e0e3e8" stroke-width="1" filter="url(#shadow)"/>
-  <text x="580" y="240" font-size="10" fill="#5f6368">1. members.apply(new, Alive)</text>
-  <text x="580" y="254" font-size="10" fill="#5f6368">2. dissemination.enqueue()</text>
-  <text x="580" y="268" font-size="10" fill="#5f6368">3. MembershipChanged event</text>
-
-  <!-- Arrow: Seed → SendJoinResponse -->
-  <line x1="750" y1="248" x2="810" y2="248" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <!-- SendJoinResponse -->
-  <rect x="820" y="220" width="210" height="56" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="925" y="242" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">SendJoinResponse</text>
-  <text x="925" y="258" text-anchor="middle" font-size="10" fill="#5f6368">full membership snapshot</text>
-  <text x="925" y="270" text-anchor="middle" font-size="10" fill="#5f6368">(including self + all members)</text>
-
-  <!-- Arrow: back to New Node -->
-  <path d="M 820 270 Q 400 285 230 220 Q 180 200 170 185"
-        fill="none" stroke="#34a853" stroke-width="1.5" marker-end="url(#arrow-green)"/>
-  <text x="380" y="260" font-size="10" fill="#34a853" font-weight="600">handle_join_response → populate MemberList + RoutingTable</text>
-
-  <!-- ============================================ -->
-  <!-- SECTION 2: DISSEMINATION PIGGYBACKING -->
-  <!-- ============================================ -->
-  <rect x="30" y="320" width="1040" height="230" rx="6" fill="#fef7e0" fill-opacity="0.2" stroke="#f9ab00" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="342" font-size="13" font-weight="700" fill="#e37400" letter-spacing="1">DISSEMINATION PIGGYBACKING</text>
-
-  <!-- MembershipUpdate -->
-  <rect x="70" y="365" width="175" height="50" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="157" y="387" text-anchor="middle" font-size="12" font-weight="600" fill="#e37400">MembershipUpdate</text>
-  <text x="157" y="403" text-anchor="middle" font-size="10" fill="#5f6368">(id, addr, state, inc)</text>
-
-  <!-- Arrow → enqueue -->
-  <line x1="245" y1="390" x2="310" y2="390" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- DisseminationQueue -->
-  <rect x="320" y="365" width="200" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="420" y="386" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">DisseminationQueue</text>
-  <text x="420" y="402" text-anchor="middle" font-size="10" fill="#5f6368">.enqueue(update, n)</text>
-
-  <!-- Arrow → budget -->
-  <line x1="420" y1="415" x2="420" y2="445" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <!-- Budget annotation -->
-  <rect x="320" y="450" width="200" height="44" rx="10" fill="#fff" stroke="#e0e3e8" stroke-width="1" filter="url(#shadow)"/>
-  <text x="340" y="468" font-size="11" font-weight="600" fill="#202124">budget = Λ * ceil(log₂(n))</text>
-  <text x="340" y="484" font-size="10" fill="#5f6368">Λ = 3 (default), n = cluster size</text>
-
-  <!-- Arrow → pack_piggyback -->
-  <line x1="520" y1="390" x2="590" y2="390" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- pack_piggyback -->
-  <rect x="600" y="365" width="200" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="700" y="386" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">pack_piggyback(max)</text>
-  <text x="700" y="402" text-anchor="middle" font-size="10" fill="#5f6368">sort by priority, take max</text>
-
-  <!-- Priority annotation -->
-  <rect x="600" y="450" width="200" height="44" rx="10" fill="#fff" stroke="#e0e3e8" stroke-width="1" filter="url(#shadow)"/>
-  <text x="620" y="468" font-size="11" font-weight="600" fill="#202124">Priority ordering:</text>
-  <text x="620" y="484" font-size="10" fill="#5f6368">Dead (2) > Suspect (1) > Alive (0)</text>
-
-  <!-- Arrow → on wire -->
-  <line x1="800" y1="390" x2="865" y2="390" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- On wire message -->
-  <rect x="875" y="355" width="170" height="70" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="960" y="378" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">Ping / Ack /</text>
-  <text x="960" y="394" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">PingReq</text>
-  <text x="960" y="414" text-anchor="middle" font-size="10" fill="#5f6368">+ piggybacked updates</text>
-
-  <!-- Decrement annotation -->
-  <rect x="875" y="450" width="170" height="44" rx="10" fill="#fff" stroke="#e0e3e8" stroke-width="1" filter="url(#shadow)"/>
-  <text x="895" y="468" font-size="10" fill="#5f6368">remaining -= 1 per send</text>
-  <text x="895" y="484" font-size="10" fill="#5f6368">evict at remaining == 0</text>
-
-  <!-- Arrow from on wire → decrement -->
-  <line x1="960" y1="425" x2="960" y2="445" stroke="#5f6368" stroke-width="1" stroke-dasharray="4,3" marker-end="url(#arrow-gray)"/>
-
-  <!-- ============================================ -->
-  <!-- SECTION 3: MEMBERSHIP CHANGE CASCADE -->
-  <!-- ============================================ -->
-  <rect x="30" y="570" width="1040" height="300" rx="6" fill="#fce8e6" fill-opacity="0.15" stroke="#ea4335" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="592" font-size="13" font-weight="700" fill="#ea4335" letter-spacing="1">MEMBERSHIP CHANGE CASCADE (on node death)</text>
-
-  <!-- SWIM detects death -->
-  <rect x="70" y="615" width="180" height="50" rx="12" fill="#fce8e6" stroke="#ea4335" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="160" y="637" text-anchor="middle" font-size="12" font-weight="600" fill="#c5221f">SWIM: DeclareDead</text>
-  <text x="160" y="653" text-anchor="middle" font-size="10" fill="#5f6368">suspicion timer expired</text>
-
-  <!-- Arrow → MembershipChanged -->
-  <line x1="250" y1="640" x2="310" y2="640" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-
-  <!-- MembershipChanged -->
-  <rect x="320" y="615" width="190" height="50" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="415" y="637" text-anchor="middle" font-size="12" font-weight="600" fill="#e37400">MembershipChanged</text>
-  <text x="415" y="653" text-anchor="middle" font-size="10" fill="#5f6368">(Dead, node_id)</text>
-
-  <!-- Arrow down to handle_membership_change -->
-  <line x1="415" y1="665" x2="415" y2="700" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- handle_membership_change branching -->
-  <!-- Branch 1: RoutingTable -->
-  <line x1="415" y1="700" x2="160" y2="740" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-  <rect x="60" y="745" width="200" height="44" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="160" y="764" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">routing_table.remove()</text>
-  <text x="160" y="780" text-anchor="middle" font-size="10" fill="#5f6368">evict dead node</text>
-
-  <!-- Branch 2: Cache -->
-  <line x1="415" y1="700" x2="415" y2="745" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-  <rect x="310" y="745" width="210" height="44" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="415" y="764" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">cache.invalidate_node()</text>
-  <text x="415" y="780" text-anchor="middle" font-size="10" fill="#5f6368">purge stale locations</text>
-
-  <!-- Branch 3: RepairQueue -->
-  <line x1="415" y1="700" x2="680" y2="740" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-  <rect x="580" y="745" width="200" height="44" rx="12" fill="#fce8e6" stroke="#ea4335" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="680" y="764" text-anchor="middle" font-size="12" font-weight="600" fill="#c5221f">repair.on_node_death()</text>
-  <text x="680" y="780" text-anchor="middle" font-size="10" fill="#5f6368">extract + queue entries</text>
-
-  <!-- Arrow: RepairQueue → re-STORE -->
-  <line x1="780" y1="767" x2="850" y2="767" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <!-- re-STORE -->
-  <rect x="860" y="745" width="185" height="44" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="952" y="764" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">re-STORE entries</text>
-  <text x="952" y="780" text-anchor="middle" font-size="10" fill="#5f6368">to new r-closest nodes</text>
-
-  <!-- Branch 4: Disseminate -->
-  <line x1="415" y1="700" x2="900" y2="660" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-  <rect x="820" y="635" width="220" height="44" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="930" y="654" text-anchor="middle" font-size="12" font-weight="600" fill="#e37400">dissemination.enqueue()</text>
-  <text x="930" y="670" text-anchor="middle" font-size="10" fill="#5f6368">propagate death to cluster</text>
-
-  <!-- Cascade label -->
-  <text x="415" y="843" text-anchor="middle" font-size="10" font-weight="600" fill="#ea4335">All four actions happen in a single tick</text>
-
-  <!-- Source ref -->
-  <text x="550" y="885" text-anchor="middle" font-size="10" fill="#9aa0a6">node.rs:125-285 · dissemination.rs:42-118 · repair.rs:28-51</text>
-</svg>
diff --git a/docs/diagrams/message_lifecycle.svg b/docs/diagrams/message_lifecycle.svg
deleted file mode 100644
index 7224312..0000000
--- a/docs/diagrams/message_lifecycle.svg
+++ /dev/null
@@ -1,155 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1100 800" font-family="system-ui, sans-serif">
-  <defs>
-    <filter id="shadow" x="-4%" y="-4%" width="108%" height="108%">
-      <feDropShadow dx="1" dy="2" stdDeviation="3" flood-color="#000" flood-opacity="0.10"/>
-    </filter>
-    <marker id="arrow-gray" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#5f6368">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-green" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#34a853">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-red" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#ea4335">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-blue" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#4285f4">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-  </defs>
-
-  <!-- Background -->
-  <rect width="1100" height="800" rx="8" fill="#f8f9fb" stroke="#e0e3e8" stroke-width="1.5"/>
-
-  <!-- Title -->
-  <text x="550" y="40" text-anchor="middle" font-size="20" font-weight="bold" fill="#202124">Message Lifecycle</text>
-  <text x="550" y="60" text-anchor="middle" font-size="12" fill="#5f6368">src/worker.rs · src/delivery.rs · src/channel.rs · src/actor.rs</text>
-
-  <!-- ============================================ -->
-  <!-- SWIM LANE: ORIGIN -->
-  <!-- ============================================ -->
-  <rect x="30" y="80" width="1040" height="120" rx="6" fill="#e8f0fe" fill-opacity="0.25" stroke="#4285f4" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="100" font-size="13" font-weight="700" fill="#4285f4" letter-spacing="1">ORIGIN</text>
-
-  <!-- Entry 1: runtime.send_to -->
-  <rect x="150" y="110" width="200" height="52" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="250" y="133" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">runtime.send_to(</text>
-  <text x="250" y="150" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">addr, msg)</text>
-
-  <!-- Entry 2: ctx.send -->
-  <rect x="700" y="110" width="200" height="52" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="800" y="133" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">ctx.send(</text>
-  <text x="800" y="150" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">addr, msg)</text>
-
-  <text x="160" y="187" font-size="10" fill="#5f6368">external caller</text>
-  <text x="710" y="187" font-size="10" fill="#5f6368">from actor handler</text>
-
-  <!-- Arrows from both entries down into routing -->
-  <line x1="250" y1="162" x2="250" y2="220" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <line x1="800" y1="162" x2="800" y2="220" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Converge arrows to decision diamond -->
-  <path d="M 250 220 Q 250 240 460 255" fill="none" stroke="#5f6368" stroke-width="1.8"/>
-  <path d="M 800 220 Q 800 240 590 255" fill="none" stroke="#5f6368" stroke-width="1.8"/>
-
-  <!-- ============================================ -->
-  <!-- SWIM LANE: ROUTING -->
-  <!-- ============================================ -->
-  <rect x="30" y="210" width="1040" height="260" rx="6" fill="#fef7e0" fill-opacity="0.2" stroke="#f9ab00" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="232" font-size="13" font-weight="700" fill="#e37400" letter-spacing="1">ROUTING</text>
-
-  <!-- Decision diamond: AddressMap::lookup -->
-  <polygon points="525,250 620,290 525,330 430,290" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="525" y="286" text-anchor="middle" font-size="11" font-weight="600" fill="#e37400">AddressMap</text>
-  <text x="525" y="300" text-anchor="middle" font-size="11" font-weight="600" fill="#e37400">::lookup()</text>
-
-  <!-- Branch LEFT: Not found → InboxRegistry -->
-  <line x1="430" y1="290" x2="265" y2="290" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="350" y="282" text-anchor="middle" font-size="11" fill="#5f6368" font-weight="600">not found</text>
-
-  <rect x="100" y="265" width="165" height="50" rx="12" fill="#f1f3f4" stroke="#9aa0a6" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="182" y="286" text-anchor="middle" font-size="12" font-weight="600" fill="#5f6368">InboxRegistry</text>
-  <text x="182" y="302" text-anchor="middle" font-size="10" fill="#9aa0a6">::try_deliver()</text>
-
-  <!-- InboxRegistry → External Receiver -->
-  <line x1="182" y1="315" x2="182" y2="365" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-  <rect x="100" y="370" width="165" height="44" rx="10" fill="#e6f4ea" stroke="#34a853" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="182" y="390" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">Receiver&lt;M&gt;</text>
-  <text x="182" y="405" text-anchor="middle" font-size="10" fill="#5f6368">external consumer</text>
-
-  <!-- Branch DOWN: Same worker → pending_local -->
-  <line x1="525" y1="330" x2="525" y2="385" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="536" y="355" font-size="11" fill="#5f6368" font-weight="600">same</text>
-  <text x="536" y="368" font-size="10" fill="#5f6368">worker</text>
-
-  <rect x="435" y="390" width="180" height="50" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="525" y="412" text-anchor="middle" font-size="12" font-weight="600" fill="#e37400">pending_local</text>
-  <text x="525" y="428" text-anchor="middle" font-size="10" fill="#5f6368">RefCell&lt;Vec&gt; buffer</text>
-
-  <text x="525" y="458" text-anchor="middle" font-size="10" fill="#f9ab00" font-weight="600">delivered in Phase 5</text>
-
-  <!-- Branch RIGHT: Different worker → HybridChannel -->
-  <line x1="620" y1="290" x2="750" y2="290" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="685" y="282" text-anchor="middle" font-size="11" fill="#5f6368" font-weight="600">different</text>
-  <text x="685" y="296" text-anchor="middle" font-size="10" fill="#5f6368">worker</text>
-
-  <rect x="752" y="260" width="185" height="60" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="844" y="281" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">Envelope::new()</text>
-  <text x="844" y="298" text-anchor="middle" font-size="10" fill="#5f6368">→ HybridChannel</text>
-  <text x="844" y="312" text-anchor="middle" font-size="9" fill="#9aa0a6">ArrayQueue + SegQueue</text>
-
-  <text x="844" y="340" text-anchor="middle" font-size="10" fill="#4285f4" font-weight="600">drained in Phase 2</text>
-
-  <!-- Arrows from pending_local and HybridChannel converge down -->
-  <path d="M 525 440 L 525 500" fill="none" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <path d="M 844 320 Q 844 460 660 500" fill="none" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- ============================================ -->
-  <!-- SWIM LANE: DELIVERY -->
-  <!-- ============================================ -->
-  <rect x="30" y="480" width="1040" height="290" rx="6" fill="#e6f4ea" fill-opacity="0.2" stroke="#34a853" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="500" font-size="13" font-weight="700" fill="#34a853" letter-spacing="1">DELIVERY</text>
-
-  <!-- pool.deliver -->
-  <rect x="430" y="510" width="200" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="530" y="532" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">pool.deliver(addr, payload)</text>
-  <text x="530" y="548" text-anchor="middle" font-size="10" fill="#5f6368">push to VecDeque mailbox</text>
-
-  <!-- Arrow down to Phase 3 -->
-  <line x1="530" y1="560" x2="530" y2="600" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="542" y="584" font-size="10" fill="#5f6368">Phase 3</text>
-
-  <!-- mailbox.pop_front -->
-  <rect x="420" y="605" width="220" height="48" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="530" y="625" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">mailbox.pop_front()</text>
-  <text x="530" y="641" text-anchor="middle" font-size="10" fill="#5f6368">→ AnyActor::handle_any()</text>
-
-  <!-- Arrow down to downcast diamond -->
-  <line x1="530" y1="653" x2="530" y2="685" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Downcast diamond -->
-  <polygon points="530,688 590,715 530,742 470,715" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="530" y="718" text-anchor="middle" font-size="10" font-weight="600" fill="#e37400">downcast</text>
-
-  <!-- Success branch (left) -->
-  <line x1="470" y1="715" x2="350" y2="715" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <rect x="200" y="695" width="150" height="40" rx="10" fill="#e6f4ea" stroke="#34a853" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="275" y="712" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">User Handler</text>
-  <text x="275" y="726" text-anchor="middle" font-size="10" fill="#34a853">called</text>
-
-  <!-- Failure branch (right) -->
-  <line x1="590" y1="715" x2="710" y2="715" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <rect x="710" y="695" width="150" height="40" rx="10" fill="#fce8e6" stroke="#ea4335" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="785" y="712" text-anchor="middle" font-size="12" font-weight="600" fill="#c5221f">Dropped</text>
-  <text x="785" y="726" text-anchor="middle" font-size="10" fill="#ea4335">type mismatch</text>
-
-  <!-- Labels on branches -->
-  <text x="410" y="708" text-anchor="middle" font-size="10" fill="#34a853" font-weight="600">OK</text>
-  <text x="650" y="708" text-anchor="middle" font-size="10" fill="#ea4335" font-weight="600">fail</text>
-
-  <!-- Source refs bottom -->
-  <text x="550" y="780" text-anchor="middle" font-size="10" fill="#9aa0a6">worker.rs:134-151 · delivery.rs:92-116 · channel.rs · actor.rs:53-59</text>
-</svg>
diff --git a/docs/diagrams/runtime_lifecycle.svg b/docs/diagrams/runtime_lifecycle.svg
deleted file mode 100644
index 229763d..0000000
--- a/docs/diagrams/runtime_lifecycle.svg
+++ /dev/null
@@ -1,229 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1200 900" font-family="system-ui, sans-serif">
-  <defs>
-    <filter id="shadow" x="-4%" y="-4%" width="108%" height="108%">
-      <feDropShadow dx="1" dy="2" stdDeviation="3" flood-color="#000" flood-opacity="0.10"/>
-    </filter>
-    <marker id="arrow-gray" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#5f6368">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-green" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#34a853">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-red" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#ea4335">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-blue" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#4285f4">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-  </defs>
-
-  <!-- Background -->
-  <rect width="1200" height="900" rx="8" fill="#f8f9fb" stroke="#e0e3e8" stroke-width="1.5"/>
-
-  <!-- Title -->
-  <text x="600" y="40" text-anchor="middle" font-size="20" font-weight="bold" fill="#202124">Runtime Lifecycle</text>
-  <text x="600" y="60" text-anchor="middle" font-size="12" fill="#5f6368">src/runtime.rs · src/worker.rs · src/config.rs</text>
-
-  <!-- ============================================ -->
-  <!-- SECTION 1: CONSTRUCTION -->
-  <!-- ============================================ -->
-  <rect x="30" y="80" width="1140" height="145" rx="6" fill="#e8f0fe" fill-opacity="0.18" stroke="#4285f4" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="102" font-size="13" font-weight="700" fill="#4285f4" letter-spacing="1">CONSTRUCTION</text>
-  <text x="1140" y="102" text-anchor="end" font-size="10" fill="#9aa0a6">runtime.rs:80-122</text>
-
-  <!-- Step 1: Runtime::new -->
-  <rect x="55" y="118" width="175" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="142" y="140" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">Runtime::new(config)</text>
-  <text x="142" y="156" text-anchor="middle" font-size="10" fill="#5f6368">parse RuntimeConfig</text>
-
-  <line x1="230" y1="143" x2="285" y2="143" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step 2: Create Workers -->
-  <rect x="290" y="118" width="175" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="377" y="140" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">Create Workers</text>
-  <text x="377" y="156" text-anchor="middle" font-size="10" fill="#5f6368">N per config.workers</text>
-
-  <line x1="465" y1="143" x2="520" y2="143" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step 3: Allocate Channels -->
-  <rect x="525" y="118" width="195" height="50" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="622" y="138" text-anchor="middle" font-size="12" font-weight="600" fill="#e37400">Allocate Channels</text>
-  <text x="622" y="154" text-anchor="middle" font-size="10" fill="#5f6368">transfer_tx/rx + spawn_tx/rx</text>
-  <text x="622" y="165" text-anchor="middle" font-size="9" fill="#9aa0a6">per worker</text>
-
-  <line x1="720" y1="143" x2="775" y2="143" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step 4: Init Shared State -->
-  <rect x="780" y="118" width="195" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="877" y="138" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">Init Shared State</text>
-  <text x="877" y="155" text-anchor="middle" font-size="10" fill="#5f6368">AddressMap, InboxRegistry,</text>
-  <text x="877" y="165" text-anchor="middle" font-size="9" fill="#5f6368">Placement</text>
-
-  <!-- Arrow from construction down to tick cycle -->
-  <line x1="600" y1="195" x2="600" y2="245" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="612" y="222" font-size="10" fill="#5f6368">ready</text>
-
-  <!-- ============================================ -->
-  <!-- SECTION 2: TICK CYCLE -->
-  <!-- ============================================ -->
-  <rect x="30" y="250" width="1140" height="280" rx="6" fill="#e6f4ea" fill-opacity="0.15" stroke="#34a853" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="272" font-size="13" font-weight="700" fill="#34a853" letter-spacing="1">TICK CYCLE</text>
-  <text x="1140" y="272" text-anchor="end" font-size="10" fill="#9aa0a6">worker.rs:40-96</text>
-
-  <!-- Phase boxes - row of 6 -->
-  <!-- Phase 1 -->
-  <rect x="55" y="295" width="155" height="80" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <circle cx="75" cy="311" r="12" fill="#4285f4"/>
-  <text x="75" y="316" text-anchor="middle" font-size="11" fill="#fff" font-weight="bold">1</text>
-  <text x="132" y="316" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">Drain Spawns</text>
-  <text x="132" y="335" text-anchor="middle" font-size="10" fill="#5f6368">spawn_rx →</text>
-  <text x="132" y="349" text-anchor="middle" font-size="10" fill="#5f6368">pool.insert()</text>
-  <text x="132" y="366" text-anchor="middle" font-size="9" fill="#9aa0a6">new actors join</text>
-
-  <line x1="210" y1="335" x2="240" y2="335" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <!-- Phase 2 -->
-  <rect x="245" y="295" width="155" height="80" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <circle cx="265" cy="311" r="12" fill="#f9ab00"/>
-  <text x="265" y="316" text-anchor="middle" font-size="11" fill="#fff" font-weight="bold">2</text>
-  <text x="322" y="316" text-anchor="middle" font-size="12" font-weight="600" fill="#e37400">Drain Transfers</text>
-  <text x="322" y="335" text-anchor="middle" font-size="10" fill="#5f6368">transfer_rx →</text>
-  <text x="322" y="349" text-anchor="middle" font-size="10" fill="#5f6368">pool.deliver()</text>
-  <text x="322" y="366" text-anchor="middle" font-size="9" fill="#9aa0a6">cross-worker msgs</text>
-
-  <line x1="400" y1="335" x2="430" y2="335" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <!-- Phase 3 -->
-  <rect x="435" y="295" width="155" height="80" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <circle cx="455" cy="311" r="12" fill="#34a853"/>
-  <text x="455" y="316" text-anchor="middle" font-size="11" fill="#fff" font-weight="bold">3</text>
-  <text x="512" y="316" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">tick_all()</text>
-  <text x="512" y="335" text-anchor="middle" font-size="10" fill="#5f6368">pop_front → handle</text>
-  <text x="512" y="349" text-anchor="middle" font-size="10" fill="#5f6368">+ catch_unwind</text>
-  <text x="512" y="366" text-anchor="middle" font-size="9" fill="#9aa0a6">process messages</text>
-
-  <line x1="590" y1="335" x2="620" y2="335" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <!-- Phase 4 -->
-  <rect x="625" y="295" width="155" height="80" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <circle cx="645" cy="311" r="12" fill="#4285f4"/>
-  <text x="645" y="316" text-anchor="middle" font-size="11" fill="#fff" font-weight="bold">4</text>
-  <text x="712" y="316" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">Drain Spawns</text>
-  <text x="712" y="335" text-anchor="middle" font-size="10" fill="#5f6368">again: actors</text>
-  <text x="712" y="349" text-anchor="middle" font-size="10" fill="#5f6368">spawned in Phase 3</text>
-  <text x="712" y="366" text-anchor="middle" font-size="9" fill="#9aa0a6">handler-created</text>
-
-  <line x1="780" y1="335" x2="810" y2="335" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <!-- Phase 5 -->
-  <rect x="815" y="295" width="155" height="80" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <circle cx="835" cy="311" r="12" fill="#f9ab00"/>
-  <text x="835" y="316" text-anchor="middle" font-size="11" fill="#fff" font-weight="bold">5</text>
-  <text x="892" y="316" text-anchor="middle" font-size="12" font-weight="600" fill="#e37400">pending_local</text>
-  <text x="892" y="335" text-anchor="middle" font-size="10" fill="#5f6368">drain buffer →</text>
-  <text x="892" y="349" text-anchor="middle" font-size="10" fill="#5f6368">pool.deliver()</text>
-  <text x="892" y="366" text-anchor="middle" font-size="9" fill="#9aa0a6">same-worker msgs</text>
-
-  <line x1="970" y1="335" x2="1000" y2="335" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <!-- Phase 6 -->
-  <rect x="1005" y="295" width="145" height="80" rx="12" fill="#f1f3f4" stroke="#9aa0a6" stroke-width="1.8" filter="url(#shadow)"/>
-  <circle cx="1025" cy="311" r="12" fill="#9aa0a6"/>
-  <text x="1025" y="316" text-anchor="middle" font-size="11" fill="#fff" font-weight="bold">6</text>
-  <text x="1077" y="316" text-anchor="middle" font-size="12" font-weight="600" fill="#5f6368">Publish Stats</text>
-  <text x="1077" y="335" text-anchor="middle" font-size="10" fill="#5f6368">update atomics</text>
-  <text x="1077" y="349" text-anchor="middle" font-size="10" fill="#5f6368">WorkerStats</text>
-
-  <!-- Large curved loop-back arrow from Phase 6 back to Phase 1 -->
-  <path d="M 1077 375 Q 1077 430 900 445 Q 600 465 300 445 Q 132 430 132 395"
-        fill="none" stroke="#34a853" stroke-width="2.5" marker-end="url(#arrow-green)" stroke-dasharray="8,4"/>
-  <text x="600" y="470" text-anchor="middle" font-size="12" fill="#34a853" font-weight="600">next tick iteration</text>
-
-  <!-- tick_once label -->
-  <text x="600" y="510" text-anchor="middle" font-size="11" fill="#5f6368" font-style="italic">one call to tick_once() executes phases 1–6</text>
-
-  <!-- ============================================ -->
-  <!-- SECTION 3: EXECUTION MODES -->
-  <!-- ============================================ -->
-  <rect x="30" y="540" width="1140" height="330" rx="6" fill="#fef7e0" fill-opacity="0.12" stroke="#f9ab00" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="562" font-size="13" font-weight="700" fill="#e37400" letter-spacing="1">EXECUTION MODES</text>
-  <text x="1140" y="562" text-anchor="end" font-size="10" fill="#9aa0a6">runtime.rs:185-217</text>
-
-  <!-- Mode A: tick() -->
-  <rect x="55" y="580" width="520" height="200" rx="10" fill="#fff" stroke="#4285f4" stroke-width="1.5" filter="url(#shadow)"/>
-  <rect x="55" y="580" width="520" height="32" rx="10" fill="#4285f4"/>
-  <rect x="55" y="600" width="520" height="12" fill="#4285f4"/>
-  <text x="315" y="601" text-anchor="middle" font-size="14" font-weight="bold" fill="#fff">tick() mode — single-threaded</text>
-
-  <!-- tick() flow -->
-  <rect x="80" y="630" width="170" height="42" rx="8" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.2"/>
-  <text x="165" y="648" text-anchor="middle" font-size="11" font-weight="600" fill="#1a73e8">user calls</text>
-  <text x="165" y="663" text-anchor="middle" font-size="11" font-weight="600" fill="#1a73e8">runtime.tick()</text>
-
-  <line x1="250" y1="651" x2="290" y2="651" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <rect x="295" y="630" width="170" height="42" rx="8" fill="#e6f4ea" stroke="#34a853" stroke-width="1.2"/>
-  <text x="380" y="648" text-anchor="middle" font-size="11" font-weight="600" fill="#137333">iterate</text>
-  <text x="380" y="663" text-anchor="middle" font-size="11" font-weight="600" fill="#137333">tick_workers</text>
-
-  <line x1="380" y1="672" x2="380" y2="700" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <rect x="295" y="705" width="170" height="42" rx="8" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.2"/>
-  <text x="380" y="723" text-anchor="middle" font-size="11" font-weight="600" fill="#e37400">w.tick_once()</text>
-  <text x="380" y="738" text-anchor="middle" font-size="10" fill="#5f6368">for each worker</text>
-
-  <!-- Loop arrow for tick_workers -->
-  <path d="M 465 726 Q 495 726 495 665 Q 495 651 465 651"
-        fill="none" stroke="#34a853" stroke-width="1.2" marker-end="url(#arrow-green)"/>
-  <text x="512" y="692" font-size="9" fill="#34a853">next</text>
-
-  <text x="165" y="756" font-size="10" fill="#5f6368">RefCell&lt;Vec&lt;Worker&gt;&gt; — stays on caller's thread</text>
-
-  <!-- Mode B: run() -->
-  <rect x="620" y="580" width="530" height="200" rx="10" fill="#fff" stroke="#34a853" stroke-width="1.5" filter="url(#shadow)"/>
-  <rect x="620" y="580" width="530" height="32" rx="10" fill="#34a853"/>
-  <rect x="620" y="600" width="530" height="12" fill="#34a853"/>
-  <text x="885" y="601" text-anchor="middle" font-size="14" font-weight="bold" fill="#fff">run() mode — multi-threaded</text>
-
-  <!-- run() flow -->
-  <rect x="645" y="630" width="155" height="42" rx="8" fill="#e6f4ea" stroke="#34a853" stroke-width="1.2"/>
-  <text x="722" y="648" text-anchor="middle" font-size="11" font-weight="600" fill="#137333">workers → threads</text>
-  <text x="722" y="663" text-anchor="middle" font-size="10" fill="#5f6368">std::thread::spawn</text>
-
-  <line x1="800" y1="651" x2="835" y2="651" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <rect x="840" y="630" width="155" height="42" rx="8" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.2"/>
-  <text x="917" y="648" text-anchor="middle" font-size="11" font-weight="600" fill="#1a73e8">while is_running</text>
-  <text x="917" y="663" text-anchor="middle" font-size="10" fill="#5f6368">{ tick_once(); backoff() }</text>
-
-  <line x1="1000" y1="651" x2="1035" y2="651" stroke="#5f6368" stroke-width="1.5" marker-end="url(#arrow-gray)"/>
-
-  <rect x="1040" y="636" width="90" height="30" rx="8" fill="#e6f4ea" stroke="#34a853" stroke-width="1.2"/>
-  <text x="1085" y="656" text-anchor="middle" font-size="11" font-weight="600" fill="#137333">Handle</text>
-
-  <!-- Loop arrow -->
-  <path d="M 995 651 Q 1010 690 917 690 Q 850 690 840 672"
-        fill="none" stroke="#34a853" stroke-width="1.2" marker-end="url(#arrow-green)"/>
-  <text x="930" y="705" text-anchor="middle" font-size="9" fill="#34a853">loop</text>
-
-  <!-- Returns RuntimeHandle -->
-  <text x="722" y="700" font-size="10" fill="#5f6368">returns RuntimeHandle to caller</text>
-
-  <!-- Shutdown flow -->
-  <rect x="645" y="720" width="480" height="42" rx="8" fill="#fce8e6" stroke="#ea4335" stroke-width="1.2"/>
-  <text x="885" y="738" text-anchor="middle" font-size="12" font-weight="600" fill="#c5221f">Shutdown</text>
-  <text x="885" y="752" text-anchor="middle" font-size="10" fill="#ea4335">is_running.store(false) → worker loops exit → thread.join()</text>
-
-  <!-- Arrow from run loop to shutdown -->
-  <path d="M 917 672 Q 917 706 885 718"
-        fill="none" stroke="#ea4335" stroke-width="1.2" marker-end="url(#arrow-red)"/>
-
-  <!-- ============================================ -->
-  <!-- Bottom source refs and legend -->
-  <!-- ============================================ -->
-  <text x="600" y="885" text-anchor="middle" font-size="10" fill="#9aa0a6">runtime.rs:80-122 (new) · worker.rs:40-96 (tick_once) · worker.rs:98-120 (run loop) · runtime.rs:185-217 (run) · config.rs (BackoffPolicy)</text>
-</svg>
diff --git a/docs/diagrams/swim_probe_cycle.svg b/docs/diagrams/swim_probe_cycle.svg
deleted file mode 100644
index 98bc67c..0000000
--- a/docs/diagrams/swim_probe_cycle.svg
+++ /dev/null
@@ -1,186 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1100 750" font-family="system-ui, sans-serif">
-  <defs>
-    <filter id="shadow" x="-4%" y="-4%" width="108%" height="108%">
-      <feDropShadow dx="1" dy="2" stdDeviation="3" flood-color="#000" flood-opacity="0.10"/>
-    </filter>
-    <marker id="arrow-gray" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#5f6368">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-green" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#34a853">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-red" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#ea4335">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-blue" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#4285f4">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-  </defs>
-
-  <!-- Background -->
-  <rect width="1100" height="750" rx="8" fill="#f8f9fb" stroke="#e0e3e8" stroke-width="1.5"/>
-
-  <!-- Title -->
-  <text x="550" y="40" text-anchor="middle" font-size="20" font-weight="bold" fill="#202124">SWIM Probe Cycle</text>
-  <text x="550" y="60" text-anchor="middle" font-size="12" fill="#5f6368">swim/probe.rs · swim/node.rs · swim/lifeguard.rs</text>
-
-  <!-- ============================================ -->
-  <!-- SWIM LANE: PROBE STATE MACHINE -->
-  <!-- ============================================ -->
-  <rect x="30" y="80" width="690" height="550" rx="6" fill="#e8f0fe" fill-opacity="0.2" stroke="#4285f4" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="100" font-size="13" font-weight="700" fill="#4285f4" letter-spacing="1">PROBE STATE MACHINE</text>
-
-  <!-- STATE: IDLE -->
-  <rect x="60" y="130" width="160" height="56" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="140" y="155" text-anchor="middle" font-size="14" font-weight="600" fill="#1a73e8">IDLE</text>
-  <text x="140" y="173" text-anchor="middle" font-size="10" fill="#5f6368">waiting for interval</text>
-
-  <!-- Arrow: IDLE → pick target -->
-  <line x1="220" y1="158" x2="280" y2="158" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="250" y="148" text-anchor="middle" font-size="10" fill="#5f6368">tick ≥</text>
-  <text x="250" y="172" text-anchor="middle" font-size="10" fill="#5f6368">next_probe</text>
-
-  <!-- Diamond: has target? -->
-  <polygon points="340,158 395,130 450,158 395,186" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="395" y="155" text-anchor="middle" font-size="10" font-weight="600" fill="#e37400">pick</text>
-  <text x="395" y="167" text-anchor="middle" font-size="10" font-weight="600" fill="#e37400">target</text>
-
-  <!-- Arrow: pick target → SendPing -->
-  <line x1="450" y1="158" x2="510" y2="158" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- STATE: SendPing -->
-  <rect x="520" y="130" width="170" height="56" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="605" y="152" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">SendPing</text>
-  <text x="605" y="170" text-anchor="middle" font-size="10" fill="#5f6368">direct probe to target</text>
-
-  <!-- Arrow: SendPing → WaitingDirectAck -->
-  <line x1="605" y1="186" x2="605" y2="240" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- STATE: WaitingDirectAck -->
-  <rect x="490" y="250" width="230" height="56" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="605" y="273" text-anchor="middle" font-size="13" font-weight="600" fill="#e37400">WaitingDirectAck</text>
-  <text x="605" y="291" text-anchor="middle" font-size="10" fill="#5f6368">probe_timeout ticks</text>
-
-  <!-- Arrow: WaitingDirectAck → IDLE (ack received, green, curves left) -->
-  <path d="M 490 270 Q 350 270 240 210 Q 200 195 200 186"
-        fill="none" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="340" y="248" font-size="11" fill="#34a853" font-weight="600">Ack received</text>
-
-  <!-- Diamond: timeout? -->
-  <polygon points="605,316 660,345 605,374 550,345" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="605" y="349" text-anchor="middle" font-size="10" font-weight="600" fill="#e37400">timeout?</text>
-
-  <!-- Arrow: WaitingDirectAck → timeout diamond -->
-  <line x1="605" y1="306" x2="605" y2="316" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Arrow: timeout → SendPingReq -->
-  <line x1="605" y1="374" x2="605" y2="405" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <text x="638" y="395" font-size="10" fill="#ea4335">no ack</text>
-
-  <!-- STATE: SendPingReq (indirect) -->
-  <rect x="475" y="410" width="260" height="56" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="605" y="433" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">SendPingReq</text>
-  <text x="605" y="451" text-anchor="middle" font-size="10" fill="#5f6368">k relays forward to target</text>
-
-  <!-- Arrow: SendPingReq → WaitingIndirectAck -->
-  <line x1="605" y1="466" x2="605" y2="495" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- STATE: WaitingIndirectAck -->
-  <rect x="475" y="500" width="260" height="56" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="605" y="523" text-anchor="middle" font-size="13" font-weight="600" fill="#e37400">WaitingIndirectAck</text>
-  <text x="605" y="541" text-anchor="middle" font-size="10" fill="#5f6368">probe_timeout ticks</text>
-
-  <!-- Arrow: WaitingIndirectAck → IDLE (indirect ack, green, curves far left) -->
-  <path d="M 475 520 Q 300 520 180 400 Q 120 330 120 186"
-        fill="none" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="155" y="380" font-size="11" fill="#34a853" font-weight="600">Indirect</text>
-  <text x="155" y="395" font-size="11" fill="#34a853" font-weight="600">ack</text>
-
-  <!-- Arrow: WaitingIndirectAck → SUSPECT (timeout, red) -->
-  <path d="M 605 556 L 605 590"
-        fill="none" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <text x="638" y="578" font-size="10" fill="#ea4335">timeout</text>
-
-  <!-- ============================================ -->
-  <!-- SWIM LANE: SUSPICION -->
-  <!-- ============================================ -->
-  <rect x="30" y="640" width="1040" height="85" rx="6" fill="#fce8e6" fill-opacity="0.2" stroke="#ea4335" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="660" font-size="13" font-weight="700" fill="#ea4335" letter-spacing="1">SUSPICION</text>
-
-  <!-- STATE: SUSPECT -->
-  <rect x="475" y="595" width="200" height="48" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="575" y="616" text-anchor="middle" font-size="13" font-weight="600" fill="#e37400">Suspect(target)</text>
-  <text x="575" y="632" text-anchor="middle" font-size="10" fill="#5f6368">start suspicion timer</text>
-
-  <!-- Arrow: SUSPECT → back to IDLE -->
-  <path d="M 475 610 Q 300 610 200 550 Q 100 490 80 186"
-        fill="none" stroke="#34a853" stroke-width="1.5" stroke-dasharray="5,3" marker-end="url(#arrow-green)"/>
-  <text x="190" y="545" font-size="10" fill="#34a853">refuted / ack</text>
-
-  <!-- Arrow: SUSPECT timer → DEAD -->
-  <line x1="675" y1="619" x2="790" y2="690" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <text x="750" y="650" font-size="10" fill="#ea4335">suspicion_timeout</text>
-
-  <!-- STATE: DEAD -->
-  <rect x="790" y="668" width="180" height="44" rx="12" fill="#fce8e6" stroke="#ea4335" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="880" y="688" text-anchor="middle" font-size="14" font-weight="600" fill="#c5221f">DeclareDead</text>
-  <text x="880" y="703" text-anchor="middle" font-size="10" fill="#5f6368">disseminate + cascade</text>
-
-  <!-- ============================================ -->
-  <!-- RIGHT PANEL: NETWORK PEERS -->
-  <!-- ============================================ -->
-  <rect x="740" y="80" width="330" height="380" rx="6" fill="#e6f4ea" fill-opacity="0.2" stroke="#34a853" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="760" y="100" font-size="13" font-weight="700" fill="#34a853" letter-spacing="1">NETWORK</text>
-
-  <!-- Target node -->
-  <rect x="780" y="130" width="160" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="860" y="152" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">Target Node</text>
-  <text x="860" y="168" text-anchor="middle" font-size="10" fill="#5f6368">probe destination</text>
-
-  <!-- Arrow: SendPing → Target -->
-  <path d="M 690 150 L 770 148" fill="none" stroke="#4285f4" stroke-width="1.5" marker-end="url(#arrow-blue)"/>
-  <text x="730" y="140" text-anchor="middle" font-size="10" fill="#4285f4">Ping</text>
-
-  <!-- Arrow: Target → Ack -->
-  <path d="M 780 170 Q 740 200 730 265" fill="none" stroke="#34a853" stroke-width="1.5" marker-end="url(#arrow-green)"/>
-  <text x="746" y="218" font-size="10" fill="#34a853">Ack</text>
-
-  <!-- Relay nodes -->
-  <rect x="780" y="240" width="160" height="50" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="860" y="262" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">Relay 1..k</text>
-  <text x="860" y="278" text-anchor="middle" font-size="10" fill="#5f6368">indirect_probes peers</text>
-
-  <!-- Arrow: SendPingReq → Relays -->
-  <path d="M 735 435 Q 760 380 785 310 Q 790 290 780 280"
-        fill="none" stroke="#4285f4" stroke-width="1.5" marker-end="url(#arrow-blue)"/>
-  <text x="773" y="365" font-size="10" fill="#4285f4">PingReq</text>
-
-  <!-- Arrow: Relay → Target (forward) -->
-  <line x1="860" y1="240" x2="860" y2="190" stroke="#5f6368" stroke-width="1.2" stroke-dasharray="4,3" marker-end="url(#arrow-gray)"/>
-  <text x="890" y="218" font-size="9" fill="#5f6368">forward</text>
-
-  <!-- Lifeguard annotation -->
-  <rect x="780" y="340" width="260" height="80" rx="10" fill="#fff" stroke="#e0e3e8" stroke-width="1" filter="url(#shadow)"/>
-  <text x="800" y="360" font-size="11" font-weight="600" fill="#202124">Lifeguard Scaling</text>
-  <text x="800" y="378" font-size="10" fill="#5f6368">probe_interval *= (1 + health_score)</text>
-  <text x="800" y="394" font-size="10" fill="#5f6368">probe_timeout  *= (1 + health_score)</text>
-  <text x="800" y="410" font-size="10" fill="#5f6368">suspicion_timeout = base * log(n) * mult</text>
-
-  <!-- ============================================ -->
-  <!-- Legend -->
-  <rect x="50" y="670" width="400" height="55" rx="8" fill="none" stroke="#e0e3e8" stroke-width="1"/>
-  <text x="70" y="690" font-size="12" font-weight="600" fill="#202124">Legend</text>
-  <line x1="70" y1="710" x2="100" y2="710" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="110" y="714" font-size="10" fill="#34a853">Ack / success</text>
-  <line x1="200" y1="710" x2="230" y2="710" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <text x="240" y="714" font-size="10" fill="#ea4335">Timeout / failure</text>
-  <line x1="350" y1="710" x2="380" y2="710" stroke="#4285f4" stroke-width="1.5" marker-end="url(#arrow-blue)"/>
-  <text x="390" y="714" font-size="10" fill="#4285f4">Probe msg</text>
-
-  <!-- Source ref -->
-  <text x="550" y="740" text-anchor="middle" font-size="10" fill="#9aa0a6">probe.rs:139-344 · node.rs:81-328 · lifeguard.rs:47-102</text>
-</svg>
diff --git a/docs/diagrams/tick_cycle.svg b/docs/diagrams/tick_cycle.svg
deleted file mode 100644
index c509c77..0000000
--- a/docs/diagrams/tick_cycle.svg
+++ /dev/null
@@ -1,258 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
- "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<!-- Generated by graphviz version 14.1.1 (20251213.1925)
- -->
-<!-- Title: tick_cycle Pages: 1 -->
-<svg width="1100pt" height="1053pt"
- viewBox="0.00 0.00 1100.00 1053.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 1049.2)">
-<title>tick_cycle</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-1049.2 1096.05,-1049.2 1096.05,4 -4,4"/>
-<g id="clust1" class="cluster">
-<title>cluster_backoff</title>
-<path fill="#f5f5f5" stroke="#888888" d="M20,-874.4C20,-874.4 385,-874.4 385,-874.4 391,-874.4 397,-880.4 397,-886.4 397,-886.4 397,-1025.2 397,-1025.2 397,-1031.2 391,-1037.2 385,-1037.2 385,-1037.2 20,-1037.2 20,-1037.2 14,-1037.2 8,-1031.2 8,-1025.2 8,-1025.2 8,-886.4 8,-886.4 8,-880.4 14,-874.4 20,-874.4"/>
-<text xml:space="preserve" text-anchor="middle" x="62.96" y="-1024.2" font-family="Helvetica,sans-Serif" font-size="10.00">Worker::run() backoff</text>
-</g>
-<!-- start -->
-<g id="node1" class="node">
-<title>start</title>
-<ellipse fill="#333333" stroke="black" cx="519" cy="-900.4" rx="10.8" ry="10.8"/>
-</g>
-<!-- phase1 -->
-<g id="node3" class="node">
-<title>phase1</title>
-<path fill="#d6eaf8" stroke="#2980b9" d="M633.78,-837.4C633.78,-837.4 492.22,-837.4 492.22,-837.4 486.22,-837.4 480.22,-831.4 480.22,-825.4 480.22,-825.4 480.22,-802.6 480.22,-802.6 480.22,-796.6 486.22,-790.6 492.22,-790.6 492.22,-790.6 633.78,-790.6 633.78,-790.6 639.78,-790.6 645.78,-796.6 645.78,-802.6 645.78,-802.6 645.78,-825.4 645.78,-825.4 645.78,-831.4 639.78,-837.4 633.78,-837.4"/>
-<text xml:space="preserve" text-anchor="start" x="493.81" y="-821.4" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Phase 1: Drain Spawn Queue</text>
-<text xml:space="preserve" text-anchor="start" x="492.22" y="-801.3" font-family="Helvetica,sans-Serif" font-size="9.00">spawn_rx → pool.insert(addr, actor)</text>
-</g>
-<!-- start&#45;&gt;phase1 -->
-<g id="edge1" class="edge">
-<title>start&#45;&gt;phase1</title>
-<path fill="none" stroke="black" d="M519,-889.1C519,-889.1 519,-849.2 519,-849.2"/>
-<polygon fill="black" stroke="black" points="522.5,-849.2 519,-839.2 515.5,-849.2 522.5,-849.2"/>
-</g>
-<!-- end -->
-<g id="node2" class="node">
-<title>end</title>
-<ellipse fill="#333333" stroke="black" cx="447" cy="-14.8" rx="10.8" ry="10.8"/>
-<ellipse fill="none" stroke="black" cx="447" cy="-14.8" rx="14.8" ry="14.8"/>
-</g>
-<!-- idle_check -->
-<g id="node13" class="node">
-<title>idle_check</title>
-<polygon fill="#fef9e7" stroke="black" points="302,-1009.2 249.63,-991.2 302,-973.2 354.37,-991.2 302,-1009.2"/>
-<text xml:space="preserve" text-anchor="middle" x="302" y="-988.2" font-family="Helvetica,sans-Serif" font-size="10.00">did_work?</text>
-</g>
-<!-- end&#45;&gt;idle_check -->
-<g id="edge17" class="edge">
-<title>end&#45;&gt;idle_check</title>
-<path fill="none" stroke="#888888" stroke-dasharray="5,2" d="M442.07,-29.27C442.07,-149.96 442.07,-985 442.07,-985 442.07,-985 349.22,-985 349.22,-985"/>
-<polygon fill="#888888" stroke="#888888" points="349.22,-981.5 339.22,-985 349.22,-988.5 349.22,-981.5"/>
-<text xml:space="preserve" text-anchor="middle" x="436.26" y="-527.7" font-family="Helvetica,sans-Serif" font-size="9.00">run() loop</text>
-</g>
-<!-- phase2 -->
-<g id="node4" class="node">
-<title>phase2</title>
-<path fill="#d5f5e3" stroke="#27ae60" d="M652.54,-735.8C652.54,-735.8 491.46,-735.8 491.46,-735.8 485.46,-735.8 479.46,-729.8 479.46,-723.8 479.46,-723.8 479.46,-701 479.46,-701 479.46,-695 485.46,-689 491.46,-689 491.46,-689 652.54,-689 652.54,-689 658.54,-689 664.54,-695 664.54,-701 664.54,-701 664.54,-723.8 664.54,-723.8 664.54,-729.8 658.54,-735.8 652.54,-735.8"/>
-<text xml:space="preserve" text-anchor="start" x="498.92" y="-719.8" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Phase 2: Drain Transfer Queue</text>
-<text xml:space="preserve" text-anchor="start" x="491.46" y="-699.7" font-family="Helvetica,sans-Serif" font-size="9.00">transfer_rx → pool.deliver(dest, payload)</text>
-</g>
-<!-- phase1&#45;&gt;phase2 -->
-<g id="edge2" class="edge">
-<title>phase1&#45;&gt;phase2</title>
-<path fill="none" stroke="black" d="M563,-790.18C563,-790.18 563,-747.58 563,-747.58"/>
-<polygon fill="black" stroke="black" points="566.5,-747.58 563,-737.58 559.5,-747.59 566.5,-747.58"/>
-<text xml:space="preserve" text-anchor="middle" x="639.28" y="-760.5" font-family="Helvetica,sans-Serif" font-size="9.00">(ActorAddress, Box&lt;dyn AnyActor&gt;)</text>
-</g>
-<!-- phase3 -->
-<g id="node5" class="node">
-<title>phase3</title>
-<path fill="#fdebd0" stroke="#e67e22" d="M691.55,-634.2C691.55,-634.2 484.45,-634.2 484.45,-634.2 478.45,-634.2 472.45,-628.2 472.45,-622.2 472.45,-622.2 472.45,-580.6 472.45,-580.6 472.45,-574.6 478.45,-568.6 484.45,-568.6 484.45,-568.6 691.55,-568.6 691.55,-568.6 697.55,-568.6 703.55,-574.6 703.55,-580.6 703.55,-580.6 703.55,-622.2 703.55,-622.2 703.55,-628.2 697.55,-634.2 691.55,-634.2"/>
-<text xml:space="preserve" text-anchor="start" x="531.03" y="-618.2" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Phase 3: Tick All Actors</text>
-<text xml:space="preserve" text-anchor="start" x="484.45" y="-598.1" font-family="Helvetica,sans-Serif" font-size="9.00">for each actor: pop mailbox → handle_any(ctx, msg)</text>
-<text xml:space="preserve" text-anchor="start" x="513.45" y="-579.3" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">catch_unwind wraps each handle call</text>
-</g>
-<!-- phase2&#45;&gt;phase3 -->
-<g id="edge3" class="edge">
-<title>phase2&#45;&gt;phase3</title>
-<path fill="none" stroke="black" d="M572,-688.59C572,-688.59 572,-645.95 572,-645.95"/>
-<polygon fill="black" stroke="black" points="575.5,-645.95 572,-635.95 568.5,-645.95 575.5,-645.95"/>
-<text xml:space="preserve" text-anchor="middle" x="645.92" y="-658.9" font-family="Helvetica,sans-Serif" font-size="9.00">Envelope → Box&lt;dyn Any + Send&gt;</text>
-</g>
-<!-- phase4 -->
-<g id="node6" class="node">
-<title>phase4</title>
-<path fill="#d6eaf8" stroke="#2980b9" d="M665.97,-478C665.97,-478 492.03,-478 492.03,-478 486.03,-478 480.03,-472 480.03,-466 480.03,-466 480.03,-443.2 480.03,-443.2 480.03,-437.2 486.03,-431.2 492.03,-431.2 492.03,-431.2 665.97,-431.2 665.97,-431.2 671.97,-431.2 677.97,-437.2 677.97,-443.2 677.97,-443.2 677.97,-466 677.97,-466 677.97,-472 671.97,-478 665.97,-478"/>
-<text xml:space="preserve" text-anchor="start" x="492.03" y="-462" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Phase 4: Drain Spawn Queue (again)</text>
-<text xml:space="preserve" text-anchor="start" x="497.45" y="-441.9" font-family="Helvetica,sans-Serif" font-size="9.00">actors spawned during Phase 3 handlers</text>
-</g>
-<!-- phase3&#45;&gt;phase4 -->
-<g id="edge4" class="edge">
-<title>phase3&#45;&gt;phase4</title>
-<path fill="none" stroke="black" d="M579,-568.46C579,-568.46 579,-489.81 579,-489.81"/>
-<polygon fill="black" stroke="black" points="582.5,-489.81 579,-479.81 575.5,-489.81 582.5,-489.81"/>
-</g>
-<!-- route_decision -->
-<g id="node9" class="node">
-<title>route_decision</title>
-<polygon fill="#fef9e7" stroke="#d4ac0d" points="850,-492.2 739.28,-454.6 850,-417 960.72,-454.6 850,-492.2"/>
-<text xml:space="preserve" text-anchor="start" x="808.33" y="-459.4" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">send_any routing</text>
-<text xml:space="preserve" text-anchor="start" x="804.64" y="-444.2" font-family="Helvetica,sans-Serif" font-size="8.00">(inside Phase 3 handlers)</text>
-</g>
-<!-- phase3&#45;&gt;route_decision -->
-<g id="edge8" class="edge">
-<title>phase3&#45;&gt;route_decision</title>
-<path fill="none" stroke="#888888" stroke-dasharray="5,2" d="M690.76,-568.36C690.76,-533.94 690.76,-485 690.76,-485 690.76,-485 816.01,-485 816.01,-485"/>
-<polygon fill="#888888" stroke="#888888" points="816.01,-488.5 826.01,-485 816.01,-481.5 816.01,-488.5"/>
-<text xml:space="preserve" text-anchor="middle" x="681.76" y="-527.7" font-family="Helvetica,sans-Serif" font-size="9.00">ctx.send()</text>
-</g>
-<!-- phase5 -->
-<g id="node7" class="node">
-<title>phase5</title>
-<path fill="#e8daef" stroke="#8e44ad" d="M646.04,-260.6C646.04,-260.6 485.96,-260.6 485.96,-260.6 479.96,-260.6 473.96,-254.6 473.96,-248.6 473.96,-248.6 473.96,-207 473.96,-207 473.96,-201 479.96,-195 485.96,-195 485.96,-195 646.04,-195 646.04,-195 652.04,-195 658.04,-201 658.04,-207 658.04,-207 658.04,-248.6 658.04,-248.6 658.04,-254.6 652.04,-260.6 646.04,-260.6"/>
-<text xml:space="preserve" text-anchor="start" x="495.7" y="-244.6" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Phase 5: Drain Pending Local</text>
-<text xml:space="preserve" text-anchor="start" x="486.46" y="-224.5" font-family="Helvetica,sans-Serif" font-size="9.00">same&#45;worker sends buffered in Phase 3</text>
-<text xml:space="preserve" text-anchor="start" x="485.96" y="-205.7" font-family="Helvetica,sans-Serif" font-size="9.00">pending_local → pool.deliver(addr, msg)</text>
-</g>
-<!-- phase4&#45;&gt;phase5 -->
-<g id="edge5" class="edge">
-<title>phase4&#45;&gt;phase5</title>
-<path fill="none" stroke="black" d="M569.04,-430.76C569.04,-430.76 569.04,-272.3 569.04,-272.3"/>
-<polygon fill="black" stroke="black" points="572.54,-272.3 569.04,-262.3 565.54,-272.3 572.54,-272.3"/>
-<text xml:space="preserve" text-anchor="middle" x="605.03" y="-341.5" font-family="Helvetica,sans-Serif" font-size="9.00">new actors ready for local delivery</text>
-</g>
-<!-- phase6 -->
-<g id="node8" class="node">
-<title>phase6</title>
-<path fill="#d1c4e9" stroke="#283593" d="M648.29,-150C648.29,-150 483.71,-150 483.71,-150 477.71,-150 471.71,-144 471.71,-138 471.71,-138 471.71,-96.4 471.71,-96.4 471.71,-90.4 477.71,-84.4 483.71,-84.4 483.71,-84.4 648.29,-84.4 648.29,-84.4 654.29,-84.4 660.29,-90.4 660.29,-96.4 660.29,-96.4 660.29,-138 660.29,-138 660.29,-144 654.29,-150 648.29,-150"/>
-<text xml:space="preserve" text-anchor="start" x="512.37" y="-134" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Phase 6: Publish Stats</text>
-<text xml:space="preserve" text-anchor="start" x="483.71" y="-113.9" font-family="Helvetica,sans-Serif" font-size="9.00">AtomicStore: num_actors, mailbox_depth</text>
-<text xml:space="preserve" text-anchor="start" x="486.71" y="-95.1" font-family="Helvetica,sans-Serif" font-size="9.00">AtomicFetchAdd: messages_processed</text>
-</g>
-<!-- phase5&#45;&gt;phase6 -->
-<g id="edge6" class="edge">
-<title>phase5&#45;&gt;phase6</title>
-<path fill="none" stroke="black" d="M566,-194.62C566,-194.62 566,-161.87 566,-161.87"/>
-<polygon fill="black" stroke="black" points="569.5,-161.87 566,-151.87 562.5,-161.87 569.5,-161.87"/>
-</g>
-<!-- phase6&#45;&gt;end -->
-<g id="edge7" class="edge">
-<title>phase6&#45;&gt;end</title>
-<path fill="none" stroke="black" d="M471.28,-117C459.75,-117 451.93,-117 451.93,-117 451.93,-117 451.93,-40.52 451.93,-40.52"/>
-<polygon fill="black" stroke="black" points="455.43,-40.52 451.93,-30.52 448.43,-40.52 455.43,-40.52"/>
-<text xml:space="preserve" text-anchor="middle" x="565.27" y="-54.3" font-family="Helvetica,sans-Serif" font-size="9.00">returns did_work: bool</text>
-</g>
-<!-- local_buf -->
-<g id="node10" class="node">
-<title>local_buf</title>
-<polygon fill="#e8daef" stroke="black" points="809.03,-362.2 708.97,-362.2 708.97,-326.2 815.03,-326.2 815.03,-356.2 809.03,-362.2"/>
-<polyline fill="none" stroke="black" points="809.03,-362.2 809.03,-356.2"/>
-<polyline fill="none" stroke="black" points="815.03,-356.2 809.03,-356.2"/>
-<text xml:space="preserve" text-anchor="middle" x="762" y="-347.2" font-family="Helvetica,sans-Serif" font-size="10.00">pending_local buffer</text>
-<text xml:space="preserve" text-anchor="middle" x="762" y="-335.2" font-family="Helvetica,sans-Serif" font-size="10.00">(same worker)</text>
-</g>
-<!-- route_decision&#45;&gt;local_buf -->
-<g id="edge9" class="edge">
-<title>route_decision&#45;&gt;local_buf</title>
-<path fill="none" stroke="#8e44ad" d="M777.16,-441.5C777.16,-441.5 777.16,-373.92 777.16,-373.92"/>
-<polygon fill="#8e44ad" stroke="#8e44ad" points="780.66,-373.92 777.16,-363.92 773.66,-373.92 780.66,-373.92"/>
-<text xml:space="preserve" text-anchor="middle" x="796.76" y="-386.9" font-family="Helvetica,sans-Serif" font-size="9.00">same worker</text>
-</g>
-<!-- cross_q -->
-<g id="node11" class="node">
-<title>cross_q</title>
-<polygon fill="#fadbd8" stroke="black" points="928.9,-362.2 851.1,-362.2 851.1,-326.2 934.9,-326.2 934.9,-356.2 928.9,-362.2"/>
-<polyline fill="none" stroke="black" points="928.9,-362.2 928.9,-356.2"/>
-<polyline fill="none" stroke="black" points="934.9,-356.2 928.9,-356.2"/>
-<text xml:space="preserve" text-anchor="middle" x="893" y="-347.2" font-family="Helvetica,sans-Serif" font-size="10.00">transfer_tx[wid]</text>
-<text xml:space="preserve" text-anchor="middle" x="893" y="-335.2" font-family="Helvetica,sans-Serif" font-size="10.00">(cross worker)</text>
-</g>
-<!-- route_decision&#45;&gt;cross_q -->
-<g id="edge10" class="edge">
-<title>route_decision&#45;&gt;cross_q</title>
-<path fill="none" stroke="#c0392b" d="M893,-431.19C893,-431.19 893,-373.99 893,-373.99"/>
-<polygon fill="#c0392b" stroke="#c0392b" points="896.5,-373.99 893,-363.99 889.5,-373.99 896.5,-373.99"/>
-<text xml:space="preserve" text-anchor="middle" x="905.01" y="-386.9" font-family="Helvetica,sans-Serif" font-size="9.00">different worker</text>
-</g>
-<!-- inbox_reg -->
-<g id="node12" class="node">
-<title>inbox_reg</title>
-<polygon fill="#d1f2eb" stroke="black" points="1049.46,-362.2 970.54,-362.2 970.54,-326.2 1055.46,-326.2 1055.46,-356.2 1049.46,-362.2"/>
-<polyline fill="none" stroke="black" points="1049.46,-362.2 1049.46,-356.2"/>
-<polyline fill="none" stroke="black" points="1055.46,-356.2 1049.46,-356.2"/>
-<text xml:space="preserve" text-anchor="middle" x="1013" y="-347.2" font-family="Helvetica,sans-Serif" font-size="10.00">inbox_registry</text>
-<text xml:space="preserve" text-anchor="middle" x="1013" y="-335.2" font-family="Helvetica,sans-Serif" font-size="10.00">(external inbox)</text>
-</g>
-<!-- route_decision&#45;&gt;inbox_reg -->
-<g id="edge11" class="edge">
-<title>route_decision&#45;&gt;inbox_reg</title>
-<path fill="none" stroke="#148f77" d="M947.81,-449.88C947.81,-428.07 947.81,-338 947.81,-338 947.81,-338 958.73,-338 958.73,-338"/>
-<polygon fill="#148f77" stroke="#148f77" points="958.73,-341.5 968.73,-338 958.73,-334.5 958.73,-341.5"/>
-<text xml:space="preserve" text-anchor="middle" x="1052.52" y="-386.9" font-family="Helvetica,sans-Serif" font-size="9.00">not in address_map</text>
-</g>
-<!-- local_buf&#45;&gt;phase5 -->
-<g id="edge12" class="edge">
-<title>local_buf&#45;&gt;phase5</title>
-<path fill="none" stroke="#8e44ad" stroke-dasharray="5,2" d="M762,-325.79C762,-293.02 762,-228 762,-228 762,-228 669.77,-228 669.77,-228"/>
-<polygon fill="#8e44ad" stroke="#8e44ad" points="669.77,-224.5 659.77,-228 669.77,-231.5 669.77,-224.5"/>
-<text xml:space="preserve" text-anchor="middle" x="701.02" y="-296.1" font-family="Helvetica,sans-Serif" font-size="9.00">delivered</text>
-<text xml:space="preserve" text-anchor="middle" x="701.02" y="-285.3" font-family="Helvetica,sans-Serif" font-size="9.00">next phase</text>
-</g>
-<!-- cross_q&#45;&gt;phase2 -->
-<g id="edge13" class="edge">
-<title>cross_q&#45;&gt;phase2</title>
-<path fill="none" stroke="#c0392b" stroke-dasharray="5,2" d="M935.25,-350C951.23,-350 965.63,-350 965.63,-350 965.63,-350 965.63,-712 965.63,-712 965.63,-712 676.3,-712 676.3,-712"/>
-<polygon fill="#c0392b" stroke="#c0392b" points="676.3,-708.5 666.3,-712 676.3,-715.5 676.3,-708.5"/>
-<text xml:space="preserve" text-anchor="middle" x="781.01" y="-538.5" font-family="Helvetica,sans-Serif" font-size="9.00">delivered</text>
-<text xml:space="preserve" text-anchor="middle" x="781.01" y="-527.7" font-family="Helvetica,sans-Serif" font-size="9.00">next tick</text>
-<text xml:space="preserve" text-anchor="middle" x="781.01" y="-516.9" font-family="Helvetica,sans-Serif" font-size="9.00">(other worker)</text>
-</g>
-<!-- idle_check&#45;&gt;start -->
-<g id="edge18" class="edge">
-<title>idle_check&#45;&gt;start</title>
-<path fill="none" stroke="#888888" stroke-dasharray="5,2" d="M338.81,-997C400.72,-997 519,-997 519,-997 519,-997 519,-922.99 519,-922.99"/>
-<polygon fill="#888888" stroke="#888888" points="522.5,-922.99 519,-912.99 515.5,-922.99 522.5,-922.99"/>
-<text xml:space="preserve" text-anchor="middle" x="534.4" y="-943.1" font-family="Helvetica,sans-Serif" font-size="9.00">yes / idle_count=0</text>
-</g>
-<!-- spinning -->
-<g id="node14" class="node">
-<title>spinning</title>
-<path fill="#d5f5e3" stroke="black" d="M85.52,-918.4C85.52,-918.4 28.48,-918.4 28.48,-918.4 22.48,-918.4 16.48,-912.4 16.48,-906.4 16.48,-906.4 16.48,-894.4 16.48,-894.4 16.48,-888.4 22.48,-882.4 28.48,-882.4 28.48,-882.4 85.52,-882.4 85.52,-882.4 91.52,-882.4 97.52,-888.4 97.52,-894.4 97.52,-894.4 97.52,-906.4 97.52,-906.4 97.52,-912.4 91.52,-918.4 85.52,-918.4"/>
-<text xml:space="preserve" text-anchor="middle" x="57" y="-897.4" font-family="Helvetica,sans-Serif" font-size="10.00">Spin (hot loop)</text>
-</g>
-<!-- idle_check&#45;&gt;spinning -->
-<g id="edge14" class="edge">
-<title>idle_check&#45;&gt;spinning</title>
-<path fill="none" stroke="black" d="M248.84,-991C176.78,-991 57,-991 57,-991 57,-991 57,-930.25 57,-930.25"/>
-<polygon fill="black" stroke="black" points="60.5,-930.25 57,-920.25 53.5,-930.25 60.5,-930.25"/>
-<text xml:space="preserve" text-anchor="middle" x="93.4" y="-943.1" font-family="Helvetica,sans-Serif" font-size="9.00">idle &lt; spin_threshold</text>
-</g>
-<!-- yielding -->
-<g id="node15" class="node">
-<title>yielding</title>
-<path fill="#fdebd0" stroke="black" d="M222.52,-918.4C222.52,-918.4 145.48,-918.4 145.48,-918.4 139.48,-918.4 133.48,-912.4 133.48,-906.4 133.48,-906.4 133.48,-894.4 133.48,-894.4 133.48,-888.4 139.48,-882.4 145.48,-882.4 145.48,-882.4 222.52,-882.4 222.52,-882.4 228.52,-882.4 234.52,-888.4 234.52,-894.4 234.52,-894.4 234.52,-906.4 234.52,-906.4 234.52,-912.4 228.52,-918.4 222.52,-918.4"/>
-<text xml:space="preserve" text-anchor="middle" x="184" y="-897.4" font-family="Helvetica,sans-Serif" font-size="10.00">thread::yield_now()</text>
-</g>
-<!-- idle_check&#45;&gt;yielding -->
-<g id="edge15" class="edge">
-<title>idle_check&#45;&gt;yielding</title>
-<path fill="none" stroke="black" d="M260.06,-987.28C260.06,-969.82 260.06,-900 260.06,-900 260.06,-900 246.24,-900 246.24,-900"/>
-<polygon fill="black" stroke="black" points="246.24,-896.5 236.24,-900 246.24,-903.5 246.24,-896.5"/>
-<text xml:space="preserve" text-anchor="middle" x="218.4" y="-943.1" font-family="Helvetica,sans-Serif" font-size="9.00">idle &lt; yield_threshold</text>
-</g>
-<!-- sleeping -->
-<g id="node16" class="node">
-<title>sleeping</title>
-<path fill="#fadbd8" stroke="black" d="M349.52,-918.4C349.52,-918.4 282.48,-918.4 282.48,-918.4 276.48,-918.4 270.48,-912.4 270.48,-906.4 270.48,-906.4 270.48,-894.4 270.48,-894.4 270.48,-888.4 276.48,-882.4 282.48,-882.4 282.48,-882.4 349.52,-882.4 349.52,-882.4 355.52,-882.4 361.52,-888.4 361.52,-894.4 361.52,-894.4 361.52,-906.4 361.52,-906.4 361.52,-912.4 355.52,-918.4 349.52,-918.4"/>
-<text xml:space="preserve" text-anchor="middle" x="316" y="-897.4" font-family="Helvetica,sans-Serif" font-size="10.00">thread::sleep(μs)</text>
-</g>
-<!-- idle_check&#45;&gt;sleeping -->
-<g id="edge16" class="edge">
-<title>idle_check&#45;&gt;sleeping</title>
-<path fill="none" stroke="black" d="M312.43,-976.61C312.43,-976.61 312.43,-930.23 312.43,-930.23"/>
-<polygon fill="black" stroke="black" points="315.93,-930.23 312.43,-920.23 308.93,-930.23 315.93,-930.23"/>
-<text xml:space="preserve" text-anchor="middle" x="345.53" y="-943.1" font-family="Helvetica,sans-Serif" font-size="9.00">idle ≥ yield_threshold</text>
-</g>
-</g>
-</svg>
diff --git a/docs/diagrams/transport_encode_decode.svg b/docs/diagrams/transport_encode_decode.svg
deleted file mode 100644
index 20da94f..0000000
--- a/docs/diagrams/transport_encode_decode.svg
+++ /dev/null
@@ -1,183 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1100 920" font-family="system-ui, sans-serif">
-  <defs>
-    <filter id="shadow" x="-4%" y="-4%" width="108%" height="108%">
-      <feDropShadow dx="1" dy="2" stdDeviation="3" flood-color="#000" flood-opacity="0.10"/>
-    </filter>
-    <marker id="arrow-gray" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#5f6368">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-green" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#34a853">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-purple" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#9334e6">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-blue" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#4285f4">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-  </defs>
-
-  <!-- Background -->
-  <rect width="1100" height="920" rx="8" fill="#f8f9fb" stroke="#e0e3e8" stroke-width="1.5"/>
-
-  <!-- Title -->
-  <text x="550" y="40" text-anchor="middle" font-size="20" font-weight="bold" fill="#202124">Transport Encode / Decode Flow</text>
-  <text x="550" y="60" text-anchor="middle" font-size="12" fill="#5f6368">src/transport.rs · CodecRegistry · TransportBridge</text>
-
-  <!-- ============================================ -->
-  <!-- ENCODE SIDE (Runtime A) -->
-  <!-- ============================================ -->
-  <rect x="30" y="80" width="500" height="760" rx="6" fill="#e8f0fe" fill-opacity="0.15" stroke="#4285f4" stroke-width="1.5" stroke-opacity="0.5"/>
-  <text x="280" y="102" text-anchor="middle" font-size="15" font-weight="700" fill="#4285f4">SENDING RUNTIME</text>
-  <text x="280" y="118" text-anchor="middle" font-size="11" fill="#5f6368">Encode Path</text>
-
-  <!-- Step: ctx.send -->
-  <rect x="140" y="138" width="280" height="46" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="280" y="158" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">ctx.send(addr, msg)</text>
-  <text x="280" y="174" text-anchor="middle" font-size="10" fill="#5f6368">typed message enters send path</text>
-
-  <line x1="280" y1="184" x2="280" y2="218" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step: type erasure -->
-  <rect x="130" y="222" width="300" height="44" rx="12" fill="#f1f3f4" stroke="#9aa0a6" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="280" y="241" text-anchor="middle" font-size="12" font-weight="600" fill="#5f6368">Box::new(msg) as Box&lt;dyn Any + Send&gt;</text>
-  <text x="280" y="257" text-anchor="middle" font-size="10" fill="#9aa0a6">type erased — concrete type lost</text>
-
-  <line x1="280" y1="266" x2="280" y2="300" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step: routing reaches transport -->
-  <rect x="100" y="304" width="360" height="40" rx="10" fill="none" stroke="#5f6368" stroke-width="1" stroke-dasharray="4,3"/>
-  <text x="280" y="320" text-anchor="middle" font-size="11" fill="#5f6368">routing: AddressMap miss → Inbox miss → Transport</text>
-  <text x="280" y="336" text-anchor="middle" font-size="10" fill="#9aa0a6">see transport_routing.svg</text>
-
-  <line x1="280" y1="344" x2="280" y2="380" stroke="#9334e6" stroke-width="1.8" marker-end="url(#arrow-purple)"/>
-
-  <!-- Step: TypeId lookup -->
-  <rect x="115" y="384" width="330" height="50" rx="12" fill="#f3e8fd" stroke="#9334e6" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="280" y="405" text-anchor="middle" font-size="12" font-weight="600" fill="#7627bb">(*msg).type_id() → TypeId</text>
-  <text x="280" y="423" text-anchor="middle" font-size="10" fill="#5f6368">encoders.get(&amp;type_id) → Arc&lt;ErasedCodec&gt;</text>
-
-  <line x1="280" y1="434" x2="280" y2="468" stroke="#9334e6" stroke-width="1.8" marker-end="url(#arrow-purple)"/>
-
-  <!-- Step: downcast + encode -->
-  <rect x="95" y="472" width="370" height="68" rx="12" fill="#f3e8fd" stroke="#9334e6" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="280" y="492" text-anchor="middle" font-size="13" font-weight="700" fill="#7627bb">TypedCodec&lt;M, C&gt;</text>
-  <text x="280" y="510" text-anchor="middle" font-size="11" fill="#5f6368">msg.downcast::&lt;M&gt;() — recover concrete type</text>
-  <text x="280" y="526" text-anchor="middle" font-size="11" fill="#5f6368">codec.encode(&amp;typed_msg) → Vec&lt;u8&gt;</text>
-
-  <line x1="280" y1="540" x2="280" y2="578" stroke="#9334e6" stroke-width="1.8" marker-end="url(#arrow-purple)"/>
-
-  <!-- Step: WireEnvelope -->
-  <rect x="110" y="582" width="340" height="58" rx="12" fill="#f3e8fd" stroke="#9334e6" stroke-width="2" filter="url(#shadow)"/>
-  <text x="280" y="604" text-anchor="middle" font-size="14" font-weight="700" fill="#7627bb">WireEnvelope</text>
-  <text x="280" y="622" text-anchor="middle" font-size="10" fill="#5f6368">{ dest: addr, type_tag: "app::Ping", payload }</text>
-  <text x="280" y="636" text-anchor="middle" font-size="10" fill="#9aa0a6">type_tag from M::type_tag() — stable string</text>
-
-  <line x1="280" y1="640" x2="280" y2="680" stroke="#9334e6" stroke-width="1.8" marker-end="url(#arrow-purple)"/>
-
-  <!-- Step: transport.send -->
-  <rect x="140" y="684" width="280" height="44" rx="12" fill="#f3e8fd" stroke="#9334e6" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="280" y="703" text-anchor="middle" font-size="12" font-weight="600" fill="#7627bb">transport.send(wire_envelope)</text>
-  <text x="280" y="719" text-anchor="middle" font-size="10" fill="#5f6368">TCP, gRPC, InMemory, etc.</text>
-
-  <!-- Key annotations -->
-  <rect x="60" y="760" width="410" height="60" rx="8" fill="none" stroke="#9aa0a6" stroke-width="1" stroke-dasharray="4,3"/>
-  <text x="265" y="778" text-anchor="middle" font-size="11" font-weight="600" fill="#5f6368">Encode key: TypeId (Rust compiler-assigned)</text>
-  <text x="265" y="795" text-anchor="middle" font-size="10" fill="#9aa0a6">Fast lookup. NOT stable across compilations.</text>
-  <text x="265" y="810" text-anchor="middle" font-size="10" fill="#9aa0a6">Works because encoder runs in the same process as the sender.</text>
-
-  <!-- ============================================ -->
-  <!-- WIRE BOUNDARY -->
-  <!-- ============================================ -->
-  <line x1="540" y1="130" x2="540" y2="790" stroke="#9334e6" stroke-width="2.5" stroke-dasharray="8,6"/>
-  <rect x="519" y="420" width="42" height="80" rx="6" fill="#f3e8fd" stroke="#9334e6" stroke-width="1.5"/>
-  <text x="540" y="450" text-anchor="middle" font-size="11" font-weight="700" fill="#9334e6" transform="rotate(90, 540, 460)">WIRE</text>
-
-  <!-- Arrow across wire -->
-  <path d="M 450 706 Q 540 706 575 706" fill="none" stroke="#9334e6" stroke-width="2.5" marker-end="url(#arrow-purple)"/>
-
-  <!-- ============================================ -->
-  <!-- DECODE SIDE (Runtime B) -->
-  <!-- ============================================ -->
-  <rect x="570" y="80" width="500" height="760" rx="6" fill="#e6f4ea" fill-opacity="0.15" stroke="#34a853" stroke-width="1.5" stroke-opacity="0.5"/>
-  <text x="820" y="102" text-anchor="middle" font-size="15" font-weight="700" fill="#34a853">RECEIVING RUNTIME</text>
-  <text x="820" y="118" text-anchor="middle" font-size="11" fill="#5f6368">Decode Path</text>
-
-  <!-- Step: receive wire envelope -->
-  <rect x="680" y="138" width="280" height="46" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="820" y="158" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">receive WireEnvelope</text>
-  <text x="820" y="174" text-anchor="middle" font-size="10" fill="#5f6368">from TCP, gRPC, InMemory, etc.</text>
-
-  <line x1="820" y1="184" x2="820" y2="218" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- Step: TransportBridge -->
-  <rect x="660" y="222" width="320" height="48" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="820" y="243" text-anchor="middle" font-size="13" font-weight="600" fill="#137333">TransportBridge::receive(envelope)</text>
-  <text x="820" y="259" text-anchor="middle" font-size="10" fill="#5f6368">deserializes wire bytes back to Box&lt;dyn Any&gt;</text>
-
-  <line x1="820" y1="270" x2="820" y2="308" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-
-  <!-- Step: type_tag lookup -->
-  <rect x="655" y="312" width="330" height="50" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="820" y="333" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">decoders.get(type_tag) → DecodeFn</text>
-  <text x="820" y="350" text-anchor="middle" font-size="10" fill="#5f6368">lookup by "app::Ping" → closure</text>
-
-  <line x1="820" y1="362" x2="820" y2="400" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-
-  <!-- Step: codec.decode -->
-  <rect x="635" y="404" width="370" height="68" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="820" y="424" text-anchor="middle" font-size="13" font-weight="700" fill="#137333">DecodeFn (closure)</text>
-  <text x="820" y="442" text-anchor="middle" font-size="11" fill="#5f6368">codec.decode(bytes) → Ping { value: 42, ... }</text>
-  <text x="820" y="458" text-anchor="middle" font-size="11" fill="#5f6368">Box::new(msg) as Box&lt;dyn Any + Send&gt;</text>
-
-  <line x1="820" y1="472" x2="820" y2="510" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-
-  <!-- Step: deliver_raw -->
-  <rect x="680" y="514" width="280" height="46" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="820" y="534" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">runtime.deliver_raw(addr, msg)</text>
-  <text x="820" y="550" text-anchor="middle" font-size="10" fill="#5f6368">→ transfer queue → worker</text>
-
-  <line x1="820" y1="560" x2="820" y2="598" stroke="#4285f4" stroke-width="1.8" marker-end="url(#arrow-blue)"/>
-
-  <!-- Step: normal tick processing -->
-  <rect x="660" y="602" width="320" height="48" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="820" y="622" text-anchor="middle" font-size="12" font-weight="600" fill="#1a73e8">tick → mailbox → handle_any()</text>
-  <text x="820" y="638" text-anchor="middle" font-size="10" fill="#5f6368">downcast Box&lt;dyn Any&gt; → Ping</text>
-
-  <line x1="820" y1="650" x2="820" y2="688" stroke="#4285f4" stroke-width="1.8" marker-end="url(#arrow-blue)"/>
-
-  <!-- Step: user handler -->
-  <rect x="700" y="692" width="240" height="44" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="820" y="711" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">PongActor::handle(Ping)</text>
-  <text x="820" y="727" text-anchor="middle" font-size="10" fill="#5f6368">user code runs</text>
-
-  <!-- Key annotations -->
-  <rect x="610" y="760" width="430" height="60" rx="8" fill="none" stroke="#9aa0a6" stroke-width="1" stroke-dasharray="4,3"/>
-  <text x="825" y="778" text-anchor="middle" font-size="11" font-weight="600" fill="#5f6368">Decode key: type_tag string (user-defined)</text>
-  <text x="825" y="795" text-anchor="middle" font-size="10" fill="#9aa0a6">Stable across compilations, processes, and machines.</text>
-  <text x="825" y="810" text-anchor="middle" font-size="10" fill="#9aa0a6">Carried on the wire inside WireEnvelope.</text>
-
-  <!-- ============================================ -->
-  <!-- Legend -->
-  <!-- ============================================ -->
-  <rect x="50" y="858" width="1000" height="48" rx="8" fill="none" stroke="#e0e3e8" stroke-width="1"/>
-  <text x="70" y="882" font-size="12" font-weight="600" fill="#202124">Legend</text>
-
-  <line x1="140" y1="880" x2="175" y2="880" stroke="#9334e6" stroke-width="1.8" marker-end="url(#arrow-purple)"/>
-  <text x="185" y="884" font-size="11" fill="#9334e6">Encode path</text>
-
-  <line x1="300" y1="880" x2="335" y2="880" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="345" y="884" font-size="11" fill="#34a853">Decode path</text>
-
-  <line x1="460" y1="880" x2="495" y2="880" stroke="#4285f4" stroke-width="1.8" marker-end="url(#arrow-blue)"/>
-  <text x="505" y="884" font-size="11" fill="#4285f4">Local delivery</text>
-
-  <line x1="630" y1="880" x2="665" y2="880" stroke="#9334e6" stroke-width="2.5" stroke-dasharray="8,6"/>
-  <text x="675" y="884" font-size="11" fill="#9334e6">Wire boundary</text>
-
-  <text x="850" y="884" font-size="10" fill="#9aa0a6">transport.rs · runtime.rs · worker.rs</text>
-</svg>
diff --git a/docs/diagrams/transport_routing.svg b/docs/diagrams/transport_routing.svg
deleted file mode 100644
index 125345d..0000000
--- a/docs/diagrams/transport_routing.svg
+++ /dev/null
@@ -1,173 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1100 880" font-family="system-ui, sans-serif">
-  <defs>
-    <filter id="shadow" x="-4%" y="-4%" width="108%" height="108%">
-      <feDropShadow dx="1" dy="2" stdDeviation="3" flood-color="#000" flood-opacity="0.10"/>
-    </filter>
-    <marker id="arrow-gray" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#5f6368">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-green" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#34a853">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-blue" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#4285f4">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-purple" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#9334e6">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-    <marker id="arrow-red" viewBox="0 0 10 7" refX="10" refY="3.5"
-            markerWidth="10" markerHeight="7" orient="auto-start-reverse" fill="#ea4335">
-      <polygon points="0 0, 10 3.5, 0 7"/>
-    </marker>
-  </defs>
-
-  <!-- Background -->
-  <rect width="1100" height="880" rx="8" fill="#f8f9fb" stroke="#e0e3e8" stroke-width="1.5"/>
-
-  <!-- Title -->
-  <text x="550" y="40" text-anchor="middle" font-size="20" font-weight="bold" fill="#202124">Transport Routing Chain</text>
-  <text x="550" y="60" text-anchor="middle" font-size="12" fill="#5f6368">src/runtime.rs · src/worker.rs · src/transport.rs</text>
-
-  <!-- ============================================ -->
-  <!-- ORIGIN -->
-  <!-- ============================================ -->
-  <rect x="30" y="80" width="1040" height="100" rx="6" fill="#e8f0fe" fill-opacity="0.25" stroke="#4285f4" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="100" font-size="13" font-weight="700" fill="#4285f4" letter-spacing="1">ORIGIN</text>
-
-  <rect x="200" y="110" width="220" height="48" rx="12" fill="#e8f0fe" stroke="#4285f4" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="310" y="130" text-anchor="middle" font-size="13" font-weight="600" fill="#1a73e8">runtime.send_to(addr, msg)</text>
-  <text x="310" y="147" text-anchor="middle" font-size="10" fill="#5f6368">or ctx.send(addr, msg)</text>
-
-  <!-- Box<dyn Any + Send> annotation -->
-  <rect x="640" y="110" width="230" height="48" rx="12" fill="#f1f3f4" stroke="#9aa0a6" stroke-width="1.2" filter="url(#shadow)"/>
-  <text x="755" y="132" text-anchor="middle" font-size="11" font-weight="600" fill="#5f6368">msg type-erased to</text>
-  <text x="755" y="148" text-anchor="middle" font-size="12" font-weight="600" fill="#5f6368" font-style="italic">Box&lt;dyn Any + Send&gt;</text>
-
-  <line x1="420" y1="134" x2="630" y2="134" stroke="#9aa0a6" stroke-width="1.2" stroke-dasharray="4,3"/>
-
-  <!-- Arrow down from origin -->
-  <line x1="310" y1="158" x2="310" y2="206" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-
-  <!-- ============================================ -->
-  <!-- STEP 1: AddressMap -->
-  <!-- ============================================ -->
-  <rect x="30" y="195" width="1040" height="130" rx="6" fill="#e6f4ea" fill-opacity="0.2" stroke="#34a853" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="215" font-size="13" font-weight="700" fill="#34a853" letter-spacing="1">STEP 1</text>
-
-  <!-- Decision diamond -->
-  <polygon points="310,218 415,260 310,302 205,260" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="310" y="256" text-anchor="middle" font-size="11" font-weight="600" fill="#137333">AddressMap</text>
-  <text x="310" y="270" text-anchor="middle" font-size="11" font-weight="600" fill="#137333">::lookup(addr)</text>
-
-  <!-- Found → local delivery -->
-  <line x1="415" y1="260" x2="590" y2="260" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="500" y="252" text-anchor="middle" font-size="11" fill="#34a853" font-weight="600">found</text>
-
-  <rect x="600" y="237" width="250" height="46" rx="12" fill="#e6f4ea" stroke="#34a853" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="725" y="257" text-anchor="middle" font-size="12" font-weight="600" fill="#137333">Local Worker Delivery</text>
-  <text x="725" y="273" text-anchor="middle" font-size="10" fill="#5f6368">transfer_txs[wid] — zero-copy, no serialize</text>
-
-  <!-- Not found → continue -->
-  <line x1="310" y1="302" x2="310" y2="348" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="322" y="328" font-size="11" fill="#5f6368" font-weight="600">not found</text>
-
-  <!-- ============================================ -->
-  <!-- STEP 2: InboxRegistry -->
-  <!-- ============================================ -->
-  <rect x="30" y="340" width="1040" height="130" rx="6" fill="#fef7e0" fill-opacity="0.2" stroke="#f9ab00" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="360" font-size="13" font-weight="700" fill="#e37400" letter-spacing="1">STEP 2</text>
-
-  <!-- Decision diamond -->
-  <polygon points="310,363 415,405 310,447 205,405" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="310" y="401" text-anchor="middle" font-size="11" font-weight="600" fill="#e37400">InboxRegistry</text>
-  <text x="310" y="415" text-anchor="middle" font-size="11" font-weight="600" fill="#e37400">::contains(addr)</text>
-
-  <!-- Found → inbox delivery -->
-  <line x1="415" y1="405" x2="590" y2="405" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="500" y="397" text-anchor="middle" font-size="11" fill="#34a853" font-weight="600">found</text>
-
-  <rect x="600" y="382" width="250" height="46" rx="12" fill="#fef7e0" stroke="#f9ab00" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="725" y="402" text-anchor="middle" font-size="12" font-weight="600" fill="#e37400">External Inbox Delivery</text>
-  <text x="725" y="418" text-anchor="middle" font-size="10" fill="#5f6368">inbox_registry.try_deliver(addr, msg)</text>
-
-  <!-- Not found → continue -->
-  <line x1="310" y1="447" x2="310" y2="493" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="322" y="473" font-size="11" fill="#5f6368" font-weight="600">not found</text>
-
-  <!-- ============================================ -->
-  <!-- STEP 3: Transport (NEW) -->
-  <!-- ============================================ -->
-  <rect x="30" y="485" width="1040" height="190" rx="6" fill="#f3e8fd" fill-opacity="0.25" stroke="#9334e6" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="505" font-size="13" font-weight="700" fill="#9334e6" letter-spacing="1">STEP 3 — TRANSPORT (feature-gated)</text>
-
-  <!-- Decision diamond -->
-  <polygon points="310,518 415,560 310,602 205,560" fill="#f3e8fd" stroke="#9334e6" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="310" y="553" text-anchor="middle" font-size="11" font-weight="600" fill="#7627bb">TransportRouter</text>
-  <text x="310" y="567" text-anchor="middle" font-size="11" font-weight="600" fill="#7627bb">::lookup(addr)</text>
-
-  <!-- Found → encode + send -->
-  <line x1="415" y1="560" x2="500" y2="560" stroke="#9334e6" stroke-width="1.8" marker-end="url(#arrow-purple)"/>
-  <text x="455" y="552" text-anchor="middle" font-size="11" fill="#9334e6" font-weight="600">found</text>
-
-  <!-- Encode box -->
-  <rect x="510" y="525" width="210" height="44" rx="12" fill="#f3e8fd" stroke="#9334e6" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="615" y="544" text-anchor="middle" font-size="12" font-weight="600" fill="#7627bb">CodecRegistry::encode()</text>
-  <text x="615" y="560" text-anchor="middle" font-size="10" fill="#5f6368">TypeId → type_tag + Vec&lt;u8&gt;</text>
-
-  <!-- Arrow to transport.send -->
-  <line x1="720" y1="547" x2="780" y2="547" stroke="#9334e6" stroke-width="1.8" marker-end="url(#arrow-purple)"/>
-
-  <!-- Transport send box -->
-  <rect x="790" y="520" width="215" height="55" rx="12" fill="#f3e8fd" stroke="#9334e6" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="897" y="540" text-anchor="middle" font-size="12" font-weight="600" fill="#7627bb">transport.send(</text>
-  <text x="897" y="556" text-anchor="middle" font-size="12" font-weight="600" fill="#7627bb">WireEnvelope)</text>
-  <text x="897" y="570" text-anchor="middle" font-size="10" fill="#5f6368">→ remote runtime</text>
-
-  <!-- WireEnvelope annotation -->
-  <rect x="570" y="590" width="300" height="42" rx="8" fill="none" stroke="#9aa0a6" stroke-width="1" stroke-dasharray="4,3"/>
-  <text x="720" y="607" text-anchor="middle" font-size="10" fill="#9aa0a6">WireEnvelope { dest, type_tag, payload: Vec&lt;u8&gt; }</text>
-  <text x="720" y="623" text-anchor="middle" font-size="10" fill="#9aa0a6">Transport impl decides the wire format</text>
-
-  <!-- Not found → fallback -->
-  <line x1="310" y1="602" x2="310" y2="698" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="322" y="650" font-size="11" fill="#5f6368" font-weight="600">not found</text>
-
-  <!-- ============================================ -->
-  <!-- STEP 4: Fallback -->
-  <!-- ============================================ -->
-  <rect x="30" y="690" width="1040" height="110" rx="6" fill="#fce8e6" fill-opacity="0.2" stroke="#ea4335" stroke-width="1" stroke-opacity="0.4"/>
-  <text x="50" y="710" font-size="13" font-weight="700" fill="#ea4335" letter-spacing="1">FALLBACK</text>
-
-  <rect x="210" y="715" width="200" height="50" rx="12" fill="#fce8e6" stroke="#ea4335" stroke-width="1.8" filter="url(#shadow)"/>
-  <text x="310" y="736" text-anchor="middle" font-size="12" font-weight="600" fill="#c5221f">InboxRegistry</text>
-  <text x="310" y="752" text-anchor="middle" font-size="10" fill="#5f6368">::try_deliver(addr, msg)</text>
-
-  <line x1="410" y1="740" x2="590" y2="740" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-
-  <rect x="600" y="720" width="220" height="40" rx="10" fill="#fce8e6" stroke="#ea4335" stroke-width="1.5" filter="url(#shadow)"/>
-  <text x="710" y="744" text-anchor="middle" font-size="12" font-weight="600" fill="#c5221f">Err("Address not found")</text>
-
-  <!-- ============================================ -->
-  <!-- Legend -->
-  <!-- ============================================ -->
-  <rect x="50" y="820" width="1000" height="45" rx="8" fill="none" stroke="#e0e3e8" stroke-width="1"/>
-  <text x="70" y="842" font-size="12" font-weight="600" fill="#202124">Legend</text>
-
-  <line x1="140" y1="840" x2="175" y2="840" stroke="#34a853" stroke-width="1.8" marker-end="url(#arrow-green)"/>
-  <text x="185" y="844" font-size="11" fill="#34a853">Local delivery</text>
-
-  <line x1="310" y1="840" x2="345" y2="840" stroke="#9334e6" stroke-width="1.8" marker-end="url(#arrow-purple)"/>
-  <text x="355" y="844" font-size="11" fill="#9334e6">Transport path (new)</text>
-
-  <line x1="510" y1="840" x2="545" y2="840" stroke="#ea4335" stroke-width="1.8" marker-end="url(#arrow-red)"/>
-  <text x="555" y="844" font-size="11" fill="#ea4335">Error</text>
-
-  <line x1="630" y1="840" x2="665" y2="840" stroke="#5f6368" stroke-width="1.8" marker-end="url(#arrow-gray)"/>
-  <text x="675" y="844" font-size="11" fill="#5f6368">Fallthrough</text>
-
-  <text x="850" y="844" font-size="10" fill="#9aa0a6">runtime.rs · worker.rs · transport.rs</text>
-</svg>
diff --git a/docs/diagrams/type_erasure.svg b/docs/diagrams/type_erasure.svg
deleted file mode 100644
index 0be2bd1..0000000
--- a/docs/diagrams/type_erasure.svg
+++ /dev/null
@@ -1,222 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
- "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<!-- Generated by graphviz version 14.1.1 (20251213.1925)
- -->
-<!-- Title: type_erasure Pages: 1 -->
-<svg width="516pt" height="1234pt"
- viewBox="0.00 0.00 516.00 1234.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 1230)">
-<title>type_erasure</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-1230 512,-1230 512,4 -4,4"/>
-<g id="clust1" class="cluster">
-<title>cluster_typed</title>
-<path fill="#eafaf1" stroke="#27ae60" d="M123,-988.8C123,-988.8 331,-988.8 331,-988.8 337,-988.8 343,-994.8 343,-1000.8 343,-1000.8 343,-1206 343,-1206 343,-1212 337,-1218 331,-1218 331,-1218 123,-1218 123,-1218 117,-1218 111,-1212 111,-1206 111,-1206 111,-1000.8 111,-1000.8 111,-994.8 117,-988.8 123,-988.8"/>
-<text xml:space="preserve" text-anchor="middle" x="154.14" y="-1204.1" font-family="Helvetica,sans-Serif" font-size="11.00" fill="#27ae60">TYPED ZONE</text>
-</g>
-<g id="clust2" class="cluster">
-<title>cluster_erased</title>
-<path fill="#fdedec" stroke="#c0392b" d="M88,-341.2C88,-341.2 488,-341.2 488,-341.2 494,-341.2 500,-347.2 500,-353.2 500,-353.2 500,-941 500,-941 500,-947 494,-953 488,-953 488,-953 88,-953 88,-953 82,-953 76,-947 76,-941 76,-941 76,-353.2 76,-353.2 76,-347.2 82,-341.2 88,-341.2"/>
-<text xml:space="preserve" text-anchor="middle" x="183.5" y="-939.1" font-family="Helvetica,sans-Serif" font-size="11.00" fill="#c0392b">ERASED ZONE (Box&lt;dyn Any + Send&gt;)</text>
-</g>
-<g id="clust3" class="cluster">
-<title>cluster_recovery</title>
-<path fill="#eafaf1" stroke="#27ae60" d="M20,-8C20,-8 359,-8 359,-8 365,-8 371,-14 371,-20 371,-20 371,-293.4 371,-293.4 371,-299.4 365,-305.4 359,-305.4 359,-305.4 20,-305.4 20,-305.4 14,-305.4 8,-299.4 8,-293.4 8,-293.4 8,-20 8,-20 8,-14 14,-8 20,-8"/>
-<text xml:space="preserve" text-anchor="middle" x="63.67" y="-291.5" font-family="Helvetica,sans-Serif" font-size="11.00" fill="#27ae60">RECOVERY ZONE</text>
-</g>
-<!-- user_send -->
-<g id="node1" class="node">
-<title>user_send</title>
-<path fill="#d5f5e3" stroke="#27ae60" d="M292.27,-1188.8C292.27,-1188.8 161.73,-1188.8 161.73,-1188.8 155.73,-1188.8 149.73,-1182.8 149.73,-1176.8 149.73,-1176.8 149.73,-1135.2 149.73,-1135.2 149.73,-1129.2 155.73,-1123.2 161.73,-1123.2 161.73,-1123.2 292.27,-1123.2 292.27,-1123.2 298.27,-1123.2 304.27,-1129.2 304.27,-1135.2 304.27,-1135.2 304.27,-1176.8 304.27,-1176.8 304.27,-1182.8 298.27,-1188.8 292.27,-1188.8"/>
-<text xml:space="preserve" text-anchor="start" x="166.16" y="-1172.8" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">ctx.send::&lt;M&gt;(addr, msg)</text>
-<text xml:space="preserve" text-anchor="start" x="183.74" y="-1152.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#666666">actor.rs — Ctx::send()</text>
-<text xml:space="preserve" text-anchor="start" x="161.73" y="-1133.9" font-family="Helvetica,sans-Serif" font-size="9.00">M: &#39;static + Clone + Send + Sync</text>
-</g>
-<!-- box_erase -->
-<g id="node2" class="node">
-<title>box_erase</title>
-<path fill="#d5f5e3" stroke="#27ae60" d="M322.99,-1062.4C322.99,-1062.4 131.01,-1062.4 131.01,-1062.4 125.01,-1062.4 119.01,-1056.4 119.01,-1050.4 119.01,-1050.4 119.01,-1008.8 119.01,-1008.8 119.01,-1002.8 125.01,-996.8 131.01,-996.8 131.01,-996.8 322.99,-996.8 322.99,-996.8 328.99,-996.8 334.99,-1002.8 334.99,-1008.8 334.99,-1008.8 334.99,-1050.4 334.99,-1050.4 334.99,-1056.4 328.99,-1062.4 322.99,-1062.4"/>
-<text xml:space="preserve" text-anchor="start" x="131.01" y="-1046.4" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Box::new(msg) → Box&lt;dyn Any + Send&gt;</text>
-<text xml:space="preserve" text-anchor="start" x="169.23" y="-1026.3" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#666666">actor.rs — Ctx::send() line 94</text>
-<text xml:space="preserve" text-anchor="start" x="168.22" y="-1007.5" font-family="Helvetica,sans-Serif" font-size="9.00">Type information erased here</text>
-</g>
-<!-- user_send&#45;&gt;box_erase -->
-<g id="edge1" class="edge">
-<title>user_send&#45;&gt;box_erase</title>
-<path fill="none" stroke="black" d="M227,-1122.96C227,-1108.02 227,-1090.01 227,-1073.87"/>
-<polygon fill="black" stroke="black" points="230.5,-1074.04 227,-1064.04 223.5,-1074.04 230.5,-1074.04"/>
-<text xml:space="preserve" text-anchor="middle" x="230.75" y="-1090.1" font-family="Helvetica,sans-Serif" font-size="9.00">M</text>
-</g>
-<!-- send_any -->
-<g id="node3" class="node">
-<title>send_any</title>
-<path fill="#fadbd8" stroke="#c0392b" d="M311.46,-923.8C311.46,-923.8 142.54,-923.8 142.54,-923.8 136.54,-923.8 130.54,-917.8 130.54,-911.8 130.54,-911.8 130.54,-889 130.54,-889 130.54,-883 136.54,-877 142.54,-877 142.54,-877 311.46,-877 311.46,-877 317.46,-877 323.46,-883 323.46,-889 323.46,-889 323.46,-911.8 323.46,-911.8 323.46,-917.8 317.46,-923.8 311.46,-923.8"/>
-<text xml:space="preserve" text-anchor="start" x="142.54" y="-907.8" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">ContextInner::send_any(addr, msg)</text>
-<text xml:space="preserve" text-anchor="start" x="147.23" y="-887.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#666666">worker.rs — WorkerContext::send_any()</text>
-</g>
-<!-- box_erase&#45;&gt;send_any -->
-<g id="edge12" class="edge">
-<title>box_erase&#45;&gt;send_any</title>
-<path fill="none" stroke="black" d="M227,-996.5C227,-986.72 227,-975.6 227,-964.5"/>
-<polygon fill="black" stroke="black" points="230.5,-964.51 227,-954.51 223.5,-964.51 230.5,-964.51"/>
-<text xml:space="preserve" text-anchor="middle" x="271.91" y="-963.7" font-family="Helvetica,sans-Serif" font-size="9.00">Box&lt;dyn Any + Send&gt;</text>
-</g>
-<!-- route -->
-<g id="node4" class="node">
-<title>route</title>
-<polygon fill="#fef9e7" stroke="#d4ac0d" points="227,-826 111.39,-788.4 227,-750.8 342.61,-788.4 227,-826"/>
-<text xml:space="preserve" text-anchor="start" x="195.06" y="-793.2" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Route lookup</text>
-<text xml:space="preserve" text-anchor="start" x="179.2" y="-778" font-family="Helvetica,sans-Serif" font-size="8.00">address_map.lookup(addr)</text>
-</g>
-<!-- send_any&#45;&gt;route -->
-<g id="edge2" class="edge">
-<title>send_any&#45;&gt;route</title>
-<path fill="none" stroke="black" d="M227,-876.61C227,-865.3 227,-851.19 227,-837.63"/>
-<polygon fill="black" stroke="black" points="230.5,-837.97 227,-827.97 223.5,-837.97 230.5,-837.97"/>
-</g>
-<!-- pending -->
-<g id="node5" class="node">
-<title>pending</title>
-<polygon fill="#e8daef" stroke="black" points="221.65,-569.8 84.35,-569.8 84.35,-533.8 227.65,-533.8 227.65,-563.8 221.65,-569.8"/>
-<polyline fill="none" stroke="black" points="221.65,-569.8 221.65,-563.8"/>
-<polyline fill="none" stroke="black" points="227.65,-563.8 221.65,-563.8"/>
-<text xml:space="preserve" text-anchor="middle" x="156" y="-554.8" font-family="Helvetica,sans-Serif" font-size="10.00">pending_local</text>
-<text xml:space="preserve" text-anchor="middle" x="156" y="-542.8" font-family="Helvetica,sans-Serif" font-size="10.00">Vec&lt;(Addr, Box&lt;dyn Any&gt;)&gt;</text>
-</g>
-<!-- route&#45;&gt;pending -->
-<g id="edge3" class="edge">
-<title>route&#45;&gt;pending</title>
-<path fill="none" stroke="black" d="M196.71,-760.56C177.98,-743.96 157.49,-725.8 157.49,-725.8 157.49,-725.8 107,-679.2 107,-679.2 107,-679.2 107,-594.8 107,-594.8 107,-594.8 116.52,-586.64 127.17,-577.51"/>
-<polygon fill="black" stroke="black" points="129.32,-580.28 134.64,-571.11 124.77,-574.96 129.32,-580.28"/>
-<text xml:space="preserve" text-anchor="middle" x="183.24" y="-717.7" font-family="Helvetica,sans-Serif" font-size="9.00">same worker</text>
-<text xml:space="preserve" text-anchor="middle" x="183.24" y="-706.9" font-family="Helvetica,sans-Serif" font-size="9.00">(wid == self)</text>
-</g>
-<!-- envelope -->
-<g id="node6" class="node">
-<title>envelope</title>
-<path fill="#fadbd8" stroke="#c0392b" d="M283.12,-679.2C283.12,-679.2 140.88,-679.2 140.88,-679.2 134.88,-679.2 128.88,-673.2 128.88,-667.2 128.88,-667.2 128.88,-606.8 128.88,-606.8 128.88,-600.8 134.88,-594.8 140.88,-594.8 140.88,-594.8 283.12,-594.8 283.12,-594.8 289.12,-594.8 295.12,-600.8 295.12,-606.8 295.12,-606.8 295.12,-667.2 295.12,-667.2 295.12,-673.2 289.12,-679.2 283.12,-679.2"/>
-<text xml:space="preserve" text-anchor="start" x="140.88" y="-663.2" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Envelope::new(addr, payload)</text>
-<text xml:space="preserve" text-anchor="start" x="191.5" y="-643.1" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#666666">delivery.rs</text>
-<text xml:space="preserve" text-anchor="start" x="173.98" y="-624.3" font-family="Helvetica,sans-Serif" font-size="9.00">dest: ActorAddress</text>
-<text xml:space="preserve" text-anchor="start" x="148.83" y="-605.5" font-family="Helvetica,sans-Serif" font-size="9.00">payload: Box&lt;dyn Any + Send&gt;</text>
-</g>
-<!-- route&#45;&gt;envelope -->
-<g id="edge4" class="edge">
-<title>route&#45;&gt;envelope</title>
-<path fill="none" stroke="black" d="M223.41,-751.61C221.58,-733.42 219.32,-710.95 217.3,-690.8"/>
-<polygon fill="black" stroke="black" points="220.81,-690.69 216.33,-681.09 213.84,-691.39 220.81,-690.69"/>
-<text xml:space="preserve" text-anchor="middle" x="245.9" y="-717.7" font-family="Helvetica,sans-Serif" font-size="9.00">cross worker</text>
-<text xml:space="preserve" text-anchor="middle" x="245.9" y="-706.9" font-family="Helvetica,sans-Serif" font-size="9.00">(wid != self)</text>
-</g>
-<!-- inbox_send -->
-<g id="node7" class="node">
-<title>inbox_send</title>
-<path fill="#d1f2eb" stroke="#148f77" d="M480.29,-669.8C480.29,-669.8 349.71,-669.8 349.71,-669.8 343.71,-669.8 337.71,-663.8 337.71,-657.8 337.71,-657.8 337.71,-616.2 337.71,-616.2 337.71,-610.2 343.71,-604.2 349.71,-604.2 349.71,-604.2 480.29,-604.2 480.29,-604.2 486.29,-604.2 492.29,-610.2 492.29,-616.2 492.29,-616.2 492.29,-657.8 492.29,-657.8 492.29,-663.8 486.29,-669.8 480.29,-669.8"/>
-<text xml:space="preserve" text-anchor="start" x="349.71" y="-653.8" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">InboxRegistry::try_deliver()</text>
-<text xml:space="preserve" text-anchor="start" x="356.72" y="-633.7" font-family="Helvetica,sans-Serif" font-size="9.00">SenderT::try_send_any(msg)</text>
-<text xml:space="preserve" text-anchor="start" x="354.97" y="-614.9" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">downcast inside SenderT impl</text>
-</g>
-<!-- route&#45;&gt;inbox_send -->
-<g id="edge5" class="edge">
-<title>route&#45;&gt;inbox_send</title>
-<path fill="none" stroke="black" d="M259.75,-761.38C289.01,-738.12 332.3,-703.72 365.73,-677.15"/>
-<polygon fill="black" stroke="black" points="367.61,-680.13 373.26,-671.17 363.25,-674.65 367.61,-680.13"/>
-<text xml:space="preserve" text-anchor="middle" x="357.65" y="-717.7" font-family="Helvetica,sans-Serif" font-size="9.00">not found</text>
-<text xml:space="preserve" text-anchor="middle" x="357.65" y="-706.9" font-family="Helvetica,sans-Serif" font-size="9.00">(external inbox)</text>
-</g>
-<!-- mailbox -->
-<g id="node9" class="node">
-<title>mailbox</title>
-<path fill="#fadbd8" stroke="black" d="M258.71,-389.2C258.71,-391.41 227.47,-393.2 189,-393.2 150.53,-393.2 119.29,-391.41 119.29,-389.2 119.29,-389.2 119.29,-353.2 119.29,-353.2 119.29,-350.99 150.53,-349.2 189,-349.2 227.47,-349.2 258.71,-350.99 258.71,-353.2 258.71,-353.2 258.71,-389.2 258.71,-389.2"/>
-<path fill="none" stroke="black" d="M258.71,-389.2C258.71,-386.99 227.47,-385.2 189,-385.2 150.53,-385.2 119.29,-386.99 119.29,-389.2"/>
-<text xml:space="preserve" text-anchor="middle" x="189" y="-374.2" font-family="Helvetica,sans-Serif" font-size="10.00">ActorSlot::mailbox</text>
-<text xml:space="preserve" text-anchor="middle" x="189" y="-362.2" font-family="Helvetica,sans-Serif" font-size="10.00">VecDeque&lt;Box&lt;dyn Any&gt;&gt;</text>
-</g>
-<!-- pending&#45;&gt;mailbox -->
-<g id="edge8" class="edge">
-<title>pending&#45;&gt;mailbox</title>
-<path fill="none" stroke="black" d="M157.41,-533.4C159.45,-508.27 162.98,-464.8 162.98,-464.8 162.98,-464.8 172.39,-431.29 179.9,-404.59"/>
-<polygon fill="black" stroke="black" points="183.22,-405.71 182.56,-395.13 176.48,-403.81 183.22,-405.71"/>
-<text xml:space="preserve" text-anchor="middle" x="188.99" y="-489.5" font-family="Helvetica,sans-Serif" font-size="9.00">Phase 5</text>
-<text xml:space="preserve" text-anchor="middle" x="188.99" y="-478.7" font-family="Helvetica,sans-Serif" font-size="9.00">local delivery</text>
-</g>
-<!-- channel -->
-<g id="node8" class="node">
-<title>channel</title>
-<path fill="#fadbd8" stroke="black" d="M371.9,-504.8C371.9,-507.01 341.46,-508.8 304,-508.8 266.54,-508.8 236.1,-507.01 236.1,-504.8 236.1,-504.8 236.1,-468.8 236.1,-468.8 236.1,-466.59 266.54,-464.8 304,-464.8 341.46,-464.8 371.9,-466.59 371.9,-468.8 371.9,-468.8 371.9,-504.8 371.9,-504.8"/>
-<path fill="none" stroke="black" d="M371.9,-504.8C371.9,-502.59 341.46,-500.8 304,-500.8 266.54,-500.8 236.1,-502.59 236.1,-504.8"/>
-<text xml:space="preserve" text-anchor="middle" x="304" y="-489.8" font-family="Helvetica,sans-Serif" font-size="10.00">HybridChannel</text>
-<text xml:space="preserve" text-anchor="middle" x="304" y="-477.8" font-family="Helvetica,sans-Serif" font-size="10.00">(ArrayQueue + SegQueue)</text>
-</g>
-<!-- envelope&#45;&gt;channel -->
-<g id="edge6" class="edge">
-<title>envelope&#45;&gt;channel</title>
-<path fill="none" stroke="black" d="M237.87,-594.32C252.74,-570.38 271.1,-540.8 284.7,-518.9"/>
-<polygon fill="black" stroke="black" points="287.67,-520.75 289.97,-510.41 281.72,-517.06 287.67,-520.75"/>
-<text xml:space="preserve" text-anchor="middle" x="291.5" y="-549.1" font-family="Helvetica,sans-Serif" font-size="9.00">try_send</text>
-</g>
-<!-- channel&#45;&gt;mailbox -->
-<g id="edge7" class="edge">
-<title>channel&#45;&gt;mailbox</title>
-<path fill="none" stroke="black" d="M282.37,-464.43C264.38,-446.66 238.59,-421.19 218.67,-401.51"/>
-<polygon fill="black" stroke="black" points="221.18,-399.07 211.61,-394.54 216.26,-404.05 221.18,-399.07"/>
-<text xml:space="preserve" text-anchor="middle" x="290.06" y="-431.7" font-family="Helvetica,sans-Serif" font-size="9.00">transfer_rx.pop()</text>
-<text xml:space="preserve" text-anchor="middle" x="290.06" y="-420.9" font-family="Helvetica,sans-Serif" font-size="9.00">→ pool.deliver()</text>
-</g>
-<!-- handle_any -->
-<g id="node10" class="node">
-<title>handle_any</title>
-<path fill="#d5f5e3" stroke="#27ae60" d="M265.96,-276.2C265.96,-276.2 112.04,-276.2 112.04,-276.2 106.04,-276.2 100.04,-270.2 100.04,-264.2 100.04,-264.2 100.04,-241.4 100.04,-241.4 100.04,-235.4 106.04,-229.4 112.04,-229.4 112.04,-229.4 265.96,-229.4 265.96,-229.4 271.96,-229.4 277.96,-235.4 277.96,-241.4 277.96,-241.4 277.96,-264.2 277.96,-264.2 277.96,-270.2 271.96,-276.2 265.96,-276.2"/>
-<text xml:space="preserve" text-anchor="start" x="112.04" y="-260.2" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Actor&lt;A&gt;::handle_any(ctx, msg)</text>
-<text xml:space="preserve" text-anchor="start" x="152.98" y="-240.1" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#666666">actor.rs line 56&#45;61</text>
-</g>
-<!-- mailbox&#45;&gt;handle_any -->
-<g id="edge13" class="edge">
-<title>mailbox&#45;&gt;handle_any</title>
-<path fill="none" stroke="black" d="M189,-348.85C189,-339.58 189,-328.19 189,-316.56"/>
-<polygon fill="black" stroke="black" points="192.5,-316.91 189,-306.91 185.5,-316.91 192.5,-316.91"/>
-<text xml:space="preserve" text-anchor="middle" x="211.01" y="-316.1" font-family="Helvetica,sans-Serif" font-size="9.00">pop_front()</text>
-</g>
-<!-- downcast -->
-<g id="node11" class="node">
-<title>downcast</title>
-<polygon fill="#fef9e7" stroke="#d4ac0d" points="189,-178.4 25.08,-160.4 189,-142.4 352.92,-160.4 189,-178.4"/>
-<text xml:space="preserve" text-anchor="start" x="112.61" y="-158.4" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">msg.downcast::&lt;A::Incoming&gt;()</text>
-</g>
-<!-- handle_any&#45;&gt;downcast -->
-<g id="edge9" class="edge">
-<title>handle_any&#45;&gt;downcast</title>
-<path fill="none" stroke="black" d="M189,-228.99C189,-217.18 189,-202.64 189,-190.07"/>
-<polygon fill="black" stroke="black" points="192.5,-190.3 189,-180.3 185.5,-190.3 192.5,-190.3"/>
-</g>
-<!-- ok_path -->
-<g id="node12" class="node">
-<title>ok_path</title>
-<path fill="#d5f5e3" stroke="#27ae60" d="M147.53,-72.2C147.53,-72.2 28.47,-72.2 28.47,-72.2 22.47,-72.2 16.47,-66.2 16.47,-60.2 16.47,-60.2 16.47,-37.4 16.47,-37.4 16.47,-31.4 22.47,-25.4 28.47,-25.4 28.47,-25.4 147.53,-25.4 147.53,-25.4 153.53,-25.4 159.53,-31.4 159.53,-37.4 159.53,-37.4 159.53,-60.2 159.53,-60.2 159.53,-66.2 153.53,-72.2 147.53,-72.2"/>
-<text xml:space="preserve" text-anchor="start" x="36.33" y="-56.2" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">A::handle(ctx, *typed)</text>
-<text xml:space="preserve" text-anchor="start" x="28.47" y="-36.1" font-family="Helvetica,sans-Serif" font-size="9.00">Fully typed handler invocation</text>
-</g>
-<!-- downcast&#45;&gt;ok_path -->
-<g id="edge10" class="edge">
-<title>downcast&#45;&gt;ok_path</title>
-<path fill="none" stroke="#27ae60" d="M174.53,-143.7C159.45,-127.33 135.42,-101.26 116.51,-80.73"/>
-<polygon fill="#27ae60" stroke="#27ae60" points="119.13,-78.42 109.78,-73.44 113.98,-83.16 119.13,-78.42"/>
-<text xml:space="preserve" text-anchor="middle" x="167.3" y="-109.3" font-family="Helvetica,sans-Serif" font-size="9.00">Ok(typed)</text>
-</g>
-<!-- err_path -->
-<g id="node13" class="node">
-<title>err_path</title>
-<path fill="#fadbd8" stroke="#c0392b" d="M351.28,-81.6C351.28,-81.6 214.72,-81.6 214.72,-81.6 208.72,-81.6 202.72,-75.6 202.72,-69.6 202.72,-69.6 202.72,-28 202.72,-28 202.72,-22 208.72,-16 214.72,-16 214.72,-16 351.28,-16 351.28,-16 357.28,-16 363.28,-22 363.28,-28 363.28,-28 363.28,-69.6 363.28,-69.6 363.28,-75.6 357.28,-81.6 351.28,-81.6"/>
-<text xml:space="preserve" text-anchor="start" x="256.89" y="-65.6" font-family="Helvetica,sans-Serif" font-weight="bold" font-size="10.00">Silent drop</text>
-<text xml:space="preserve" text-anchor="start" x="214.72" y="-45.5" font-family="Helvetica,sans-Serif" font-size="9.00">Wrong type — message discarded</text>
-<text xml:space="preserve" text-anchor="start" x="226.47" y="-26.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#c0392b">type_mismatches counter++</text>
-</g>
-<!-- downcast&#45;&gt;err_path -->
-<g id="edge11" class="edge">
-<title>downcast&#45;&gt;err_path</title>
-<path fill="none" stroke="#c0392b" d="M202.47,-143.7C214.39,-129.8 232.31,-108.9 248.23,-90.34"/>
-<polygon fill="#c0392b" stroke="#c0392b" points="250.77,-92.76 254.62,-82.89 245.45,-88.2 250.77,-92.76"/>
-<text xml:space="preserve" text-anchor="middle" x="244.68" y="-109.3" font-family="Helvetica,sans-Serif" font-size="9.00">Err(_)</text>
-</g>
-</g>
-</svg>
diff --git a/docs/distribution/distribution.md b/docs/distribution/distribution.md
deleted file mode 100644
index 3b438c8..0000000
--- a/docs/distribution/distribution.md
+++ /dev/null
@@ -1,140 +0,0 @@
-# DistributedNode
-
-`DistributedNode` is the top-level integration type that composes SWIM
-membership, Kademlia routing, the actor directory, location cache, and
-repair infrastructure into a single public API.
-
-## Internal Composition
-
-```
-┌─ DistributedNode ────────────────────────────────────────────────────────┐
-│                                                                          │
-│  keypair: Keypair             ← ed25519 identity + signing               │
-│                                                                          │
-│  ┌── SWIM ─────────────────┐  ┌── Kademlia ────────────────────────────┐ │
-│  │  SwimNode                │  │  RoutingTable  (256 k-buckets, K=20)  │ │
-│  │    ├ MemberList (CRDT)   │  │  DirectoryShard  (local entries)      │ │
-│  │    ├ SwimProbe (FSM)     │  │  RepairQueue  (death-triggered)       │ │
-│  │    └ DisseminationQueue  │  │  RepublishTracker  (periodic)         │ │
-│  └──────────────────────────┘  └────────────────────────────────────────┘ │
-│                                                                          │
-│  cache: LocationCache         ← LRU: ActorAddress → NodeId              │
-│  tick_count: u64              ← monotonic clock                          │
-│                                                                          │
-└──────────────────────────────────────────────────────────────────────────┘
-```
-
-## Node Lifecycle
-
-```
-  new(config)
-      │
-      v
-  Generate Keypair ──► NodeId = public key bytes
-      │
-      v
-  Initialize subsystems (SwimNode, RoutingTable, DirectoryShard, ...)
-      │
-      v
-  join(seeds) ──► SendJoinRequest to each seed
-      │
-      v
-  handle_join_response(members) ──► populate MemberList + RoutingTable
-      │
-      v
-  ┌─────────────┐
-  │  tick() loop │ ──► drives SWIM probes, processes membership changes,
-  │  (caller)    │     runs periodic republish, drains repair queue
-  └─────────────┘
-      │
-      v
-  leave() ──► disseminate Dead for self, graceful shutdown
-```
-
-See [distribution_minor_flows.svg](../diagrams/distribution_minor_flows.svg) for the
-join handshake, dissemination piggybacking, and membership change cascade.
-
-## Actor Registration
-
-`register_actor(addr, generation)`:
-1. Sign a `DirectoryEntry` with the node's keypair.
-2. Store in local `DirectoryShard`.
-3. Insert into `LocationCache` (self is the host).
-4. Register with `RepublishTracker` for periodic re-STORE.
-5. Return the signed entry — caller STOREs to `r`-closest nodes.
-
-See [actor_resolution.svg](../diagrams/actor_resolution.svg) for the full datapath.
-
-## Actor Resolution
-
-`resolve_actor(addr)` implements a 3-tier lookup chain:
-1. **LRU cache** — instant, O(1).
-2. **Local directory shard** — checks entries this node holds.
-3. **Kademlia lookup** — returns `NeedsLookup` with closest known nodes;
-   caller drives iterative FIND_VALUE + quorum read.
-
-On delivery failure, `invalidate_cache(addr)` evicts stale entries.
-
-## Membership Change Cascade
-
-When SWIM detects a state change, `handle_membership_change(node_id, state)`
-propagates effects through all subsystems:
-
-| State | Actions |
-|-------|---------|
-| **Alive** | Insert/update in `RoutingTable` |
-| **Suspect** | Keep in `RoutingTable` (could downprioritize) |
-| **Dead** | Remove from `RoutingTable`, invalidate cache entries for that node, queue affected directory entries in `RepairQueue` |
-
-This cascade ensures that a single SWIM death detection triggers routing
-table cleanup, cache invalidation, and directory repair in one tick.
-
-## NodeDriver — TCP Network Bridge
-
-`NodeDriver` (`driver.rs`) bridges the pure state machine API with real TCP
-networking. It owns a `DistributedNode` plus a `TcpTransport` (connection
-pool) and `TcpAcceptor` (non-blocking listener).
-
-```
-┌─ NodeDriver ─────────────────────────────────────────────────┐
-│                                                               │
-│  node: DistributedNode     ← pure state machine              │
-│  transport: TcpTransport   ← connection pool for outgoing    │
-│  acceptor: TcpAcceptor     ← non-blocking listener           │
-│  streams: Vec<TcpStream>   ← accepted connections            │
-│                                                               │
-│  tick()  ──► node.tick() → map NodeAction → TCP send          │
-│  recv()  ──► acceptor.try_recv() → dispatch → handler calls   │
-│  join()  ──► node.join() → send JoinRequest via TCP           │
-│                                                               │
-└───────────────────────────────────────────────────────────────┘
-```
-
-The caller runs a loop: `recv()` → `tick()` → sleep. The driver handles
-all TCP I/O internally — the caller never touches sockets directly.
-
-See [DOCKER_REALIZATION.md](../development_history/DOCKER_REALIZATION.md)
-for implementation details of the driver, the node binary (`crates/node/`),
-and the Docker cluster integration tests.
-
-## Dashboard REST API
-
-The runtime dashboard exposes `/api/distribution` (feature-gated with
-`distribution`) which returns the `DistributionNodeSnapshot` as JSON.
-This supplements the SSE stream (`/events`) with a synchronous polling
-endpoint used by integration tests.
-
-## Where Things Live
-
-| Type | File | Role |
-|------|------|------|
-| `DistributedNode` | `node.rs` | Top-level integration facade |
-| `DistributedNodeConfig` | `node.rs` | Node configuration |
-| `ResolveResult` | `node.rs` | 3-tier resolution outcomes |
-| `NodeDriver` | `driver.rs` | TCP ↔ NodeAction bridge |
-| `LocationCache` | `cache.rs` | LRU actor→node cache |
-| `Keypair` | `crypto.rs` | Ed25519 keypair + signing |
-| `NodeId` | `types.rs` | 32-byte node identity |
-| `MemberState` | `types.rs` | Alive / Suspect / Dead |
-| `DirectoryEntry` | `types.rs` | Signed actor→node binding |
-| `NodeRecord` | `types.rs` | Wire-format membership record |
diff --git a/docs/distribution/kademlia.md b/docs/distribution/kademlia.md
deleted file mode 100644
index 4b90da5..0000000
--- a/docs/distribution/kademlia.md
+++ /dev/null
@@ -1,136 +0,0 @@
-# Kademlia DHT
-
-The Kademlia layer provides a distributed actor directory. Actors are mapped
-to nodes using XOR-distance routing over a 256-bit keyspace, with iterative
-lookups, quorum reads, and automatic repair on node failure.
-
-## Routing Table
-
-256 k-buckets indexed by `XOR(self_id, target).leading_zeros()`. Each bucket
-holds up to `K` nodes (default 20) in LRU order — most-recently-seen at tail.
-
-```
-┌─ RoutingTable ──────────────────────────────────────────────────────────┐
-│                                                                         │
-│  self_id: NodeId                                                        │
-│  buckets: [KBucket; 256]                                                │
-│                                                                         │
-│  Bucket[i] holds nodes where XOR distance has exactly i leading zeros.  │
-│  Bucket 0 = farthest half of keyspace.                                  │
-│  Bucket 255 = nearest neighbor.                                         │
-│                                                                         │
-│  Each bucket:                                                           │
-│    nodes:        VecDeque<NodeEntry>   (LRU, capacity K)                │
-│    replacements: VecDeque<NodeEntry>   (overflow cache)                 │
-│                                                                         │
-│  On insert into a full bucket:                                          │
-│    → new node goes to replacement cache                                 │
-│    → only promoted when an existing node is evicted                     │
-│    → prefers long-lived nodes (Kademlia stability heuristic)            │
-│                                                                         │
-└─────────────────────────────────────────────────────────────────────────┘
-```
-
-The `closest(target, count)` method scans all buckets, sorts by XOR distance,
-and returns the `count` nearest entries. This is used both for iterative
-lookups and for selecting STORE targets.
-
-## Iterative Lookup
-
-See [actor_resolution.svg](../diagrams/actor_resolution.svg) for the registration and
-resolution datapaths.
-
-The `NodeLookup` state machine drives iterative `FIND_NODE`:
-
-1. Seed with the `K` closest nodes from the local routing table.
-2. Query `alpha` (default 3) closest unqueried nodes in parallel.
-3. Responses bring new closer nodes — incorporate and repeat.
-4. Terminate when all `K` closest nodes have been queried, or max rounds (20).
-
-```
-  Start(target)
-      │
-      v
-  seed = routing_table.closest(target, K)
-      │
-      v
-  ┌───────────────────┐
-  │  next_round()     │◄──────────────────┐
-  │  pick α closest   │                   │
-  │  unqueried nodes  │                   │
-  └────────┬──────────┘                   │
-           │                              │
-           v                              │
-  ┌───────────────────┐      ┌────────────┴───────────┐
-  │ Query(node, addr) │─────►│ handle_response(from,  │
-  │ × α in parallel   │      │   closer_nodes)        │
-  └───────────────────┘      │ incorporate new nodes   │
-                             └────────────────────────┘
-           │
-      all K closest queried
-      or max_rounds exceeded
-           │
-           v
-  Done { closest: Vec<(NodeId, SocketAddr)> }
-```
-
-The lookup is pure — it produces `LookupAction`s and the caller translates
-them into network I/O.
-
-## Directory Shards & Quorum
-
-Each node holds a `DirectoryShard` — a local map from `ActorAddress` to
-`Vec<DirectoryEntry>`. Entries are signed by the spawning node's keypair:
-
-```rust
-pub struct DirectoryEntry {
-    pub actor_addr: ActorAddress,
-    pub node_id: NodeId,          // who spawned the actor
-    pub generation: u64,          // bumped on re-registration
-    pub signature: Signature,     // ed25519 over (actor_addr, node_id, generation)
-}
-```
-
-STORE replicates entries to the `r` closest nodes in XOR space.
-FIND_VALUE does quorum reads with signature verification:
-
-- Entries are grouped by `(node_id, generation)`.
-- Groups meeting quorum (`f + 1` agreement) are candidates.
-- Highest generation among quorum groups wins.
-- Invalid signatures are silently rejected.
-
-Resolution returns `QuorumResult::Resolved(entry)`,
-`QuorumResult::NoQuorum(all)`, or `QuorumResult::NotFound`.
-
-## Repair & Republish
-
-Two mechanisms maintain directory integrity under churn:
-
-**RepairQueue** — On node death, `on_node_death(dead_id, shard)` extracts
-all entries authored by the dead node and queues them for re-STORE to the
-new `r`-closest nodes.
-
-**RepublishTracker** — Each node periodically re-STOREs its locally-spawned
-actor entries at a configurable interval. This counteracts topology drift:
-as nodes join and leave, the "r-closest" set shifts, and republishing ensures
-entries migrate to the current closest nodes.
-
-See `crates/distribution/DESIGN_NOTES.md` for the full rationale behind
-re-replication and republishing.
-
-## Where Things Live
-
-| Type | File | Role |
-|------|------|------|
-| `RoutingTable` | `kademlia/routing_table.rs` | 256 k-buckets, XOR routing |
-| `KBucket` | `kademlia/routing_table.rs` | LRU bucket + replacement cache |
-| `NodeEntry` | `kademlia/routing_table.rs` | Node in routing table |
-| `NodeLookup` | `kademlia/lookup.rs` | Iterative FIND_NODE state machine |
-| `LookupAction` | `kademlia/lookup.rs` | Lookup I/O actions |
-| `DirectoryShard` | `kademlia/directory.rs` | Local directory storage |
-| `QuorumResult` | `kademlia/directory.rs` | Quorum read outcomes |
-| `RepairQueue` | `kademlia/repair.rs` | Death-triggered re-replication |
-| `RepublishTracker` | `kademlia/repair.rs` | Periodic re-STORE |
-| `NodeId` | `types.rs` | 256-bit identity / XOR key |
-| `DirectoryEntry` | `types.rs` | Signed actor→node binding |
-| `Signature` | `types.rs` | Ed25519 signature (64 bytes) |
diff --git a/docs/distribution/swim.md b/docs/distribution/swim.md
deleted file mode 100644
index 9c2eb1c..0000000
--- a/docs/distribution/swim.md
+++ /dev/null
@@ -1,126 +0,0 @@
-# SWIM Membership Protocol
-
-SWIM (Scalable Weakly-consistent Infection-style Membership) handles failure
-detection and membership dissemination. Each node periodically probes a random
-peer; if the peer doesn't respond, indirect probes through relays confirm or
-deny reachability before the node is suspected and eventually declared dead.
-
-## Probe Cycle
-
-See [swim_probe_cycle.svg](../diagrams/swim_probe_cycle.svg) for the full state machine.
-
-The probe cycle is a pure state machine driven by ticks:
-
-```
-    ┌──────────────────────────────────────────────────────────────────────┐
-    │                        ProbePhase                                    │
-    │                                                                      │
-    │   Idle ──probe_interval──► WaitingDirectAck ──timeout──►             │
-    │    ▲                            │                                    │
-    │    │                        ack received                             │
-    │    │                            │                                    │
-    │    └────────────────────────────┘                                    │
-    │                                                                      │
-    │   WaitingDirectAck ──timeout──► WaitingIndirectAck ──timeout──►      │
-    │                                        │                             │
-    │                                    indirect ack                      │
-    │                                        │                             │
-    │                                   back to Idle                       │
-    │                                                                      │
-    │   WaitingIndirectAck ──timeout──► Suspect(target) + start timer      │
-    │                                                                      │
-    │   Suspicion timer ──timeout──► DeclareDead(target)                   │
-    └──────────────────────────────────────────────────────────────────────┘
-```
-
-Probe targets are selected via round-robin over a shuffled member list. Each
-probe cycle picks one target and sends a direct `Ping`. If no `Ack` arrives
-within `probe_timeout` ticks, indirect `PingReq` messages are sent through
-`k` relay nodes. If no indirect ack arrives either, the target enters the
-Suspect state.
-
-A ring buffer of the last 16 probe targets is maintained for dashboard
-visualization.
-
-## Member States & Incarnation
-
-```
-┌─ MemberState ────────────────────────────────────────────────────────────┐
-│                                                                          │
-│  Alive ─────► Suspect ─────► Dead                                        │
-│                                                                          │
-│  Priority ordering: Dead (2) > Suspect (1) > Alive (0)                  │
-│  Within the same incarnation, higher-priority state always wins.         │
-│                                                                          │
-│  Incarnation number: bumped only by the node itself to refute            │
-│  suspicion. Higher incarnation unconditionally overrides any state.      │
-│                                                                          │
-└──────────────────────────────────────────────────────────────────────────┘
-```
-
-The membership list is a CRDT with merge semantics:
-1. Higher incarnation wins unconditionally.
-2. Same incarnation: higher-priority state wins (`Dead > Suspect > Alive`).
-3. Lower incarnation is silently ignored.
-
-When a node receives a `Suspect` about itself, it bumps its incarnation and
-disseminates an `Alive` update — this is self-refutation.
-
-## Dissemination Queue
-
-Membership updates are not sent in dedicated messages. Instead, they are
-**piggybacked** onto existing protocol messages (Pings, Acks, PingReqs).
-
-Each update has a **transmit budget** of `Lambda * ceil(log2(n))` sends, where
-`Lambda` (default 3) is the dissemination multiplier and `n` is the cluster
-size. The budget ensures logarithmic scaling: a 10-node cluster sends each
-update ~12 times; a 1000-node cluster sends it ~30 times.
-
-Updates are sorted by priority when piggybacking, so `Dead` notifications
-propagate faster than routine `Alive` heartbeats.
-
-See `crates/distribution/DESIGN_NOTES.md` for the full rationale.
-
-## Lifeguard Health Multiplier
-
-Inspired by the Hashicorp Lifeguard paper, the `HealthMultiplier` tracks
-the local node's network health:
-
-- Each successful ack decreases the health score.
-- Each nack/timeout increases it (capped at `max_health_score`).
-- The score produces a multiplier `1 + score` that stretches probe intervals
-  and timeouts.
-
-```rust
-// Dynamic suspicion timeout:
-// clamp(base * ceil(log2(n+1)) * multiplier, min, max)
-pub fn dynamic_suspicion_timeout(&self, cluster_size: usize) -> u64
-```
-
-This prevents unhealthy nodes from generating false accusations: a node
-that can't reach peers slows its own probing rather than suspecting everyone.
-
-## Join Protocol
-
-A new node contacts seed addresses with `SendJoinRequest`. The receiving
-node adds the newcomer to its member list, enqueues the event for
-dissemination, and responds with a `SendJoinResponse` containing the full
-membership snapshot. The joiner applies the snapshot, learning about all
-existing cluster members in one round-trip.
-
-## Where Things Live
-
-| Type | File | Role |
-|------|------|------|
-| `SwimProbe` | `swim/probe.rs` | Probe cycle state machine |
-| `SwimConfig` | `swim/probe.rs` | Protocol tuning knobs |
-| `SwimEvent` / `SwimAction` | `swim/probe.rs` | State machine I/O |
-| `MemberList` | `swim/member_list.rs` | Membership CRDT |
-| `MemberEntry` | `swim/member_list.rs` | Single member record |
-| `SwimNode` | `swim/node.rs` | Integrated SWIM facade |
-| `NodeAction` | `swim/node.rs` | High-level network actions |
-| `DisseminationQueue` | `swim/dissemination.rs` | Piggybacked update queue |
-| `HealthMultiplier` | `swim/lifeguard.rs` | Local health tracking |
-| `LifeguardConfig` | `swim/lifeguard.rs` | Lifeguard tuning knobs |
-| `MemberState` | `types.rs` | `Alive` / `Suspect` / `Dead` enum |
-| `NodeRecord` | `types.rs` | Wire-format membership record |
diff --git a/docs/distribution/transport.md b/docs/distribution/transport.md
deleted file mode 100644
index b57c9ba..0000000
--- a/docs/distribution/transport.md
+++ /dev/null
@@ -1,127 +0,0 @@
-# Transport-Agnostic Messaging
-
-Enables actors on different runtimes to communicate transparently via
-pluggable codecs (serialization) and transports (delivery protocol).
-
-**Feature-gated:** `#[cfg(feature = "transport")]`. Without the flag, the
-binary is identical to the baseline runtime.
-
-```bash
-cargo build --features transport
-cargo test  --features transport
-```
-
-## Two Layers of Pluggability
-
-- **`Codec<M>`** — HOW bytes are encoded. gRPC/protobuf, bincode, custom, etc.
-  No serde bounds — the codec defines what it needs from `M`.
-- **`Transport`** — WHERE bytes are sent. InMemory (testing), TCP, gRPC, etc.
-
-See [transport_routing.svg](../diagrams/transport_routing.svg)
-for the extended routing chain, and
-[transport_encode_decode.svg](../diagrams/transport_encode_decode.svg)
-for the encode/decode data flow.
-
-## Core Types
-
-| Type | Role |
-|------|------|
-| `Codec<M>` | User-implemented encode/decode for a message type |
-| `NetworkMessage` | Marker trait: adds `fn type_tag() -> &'static str` for wire routing |
-| `WireEnvelope` | `{ dest: ActorAddress, type_tag: String, payload: Vec<u8> }` |
-| `Transport` | `fn send(WireEnvelope) -> Result<()>` — pluggable delivery |
-| `CodecRegistry` | Maps `TypeId → encoder` (send side) and `type_tag → decoder` (receive side) |
-| `TransportRouter` | Maps `ActorAddress → Arc<dyn Transport>` for remote addresses |
-| `TransportBridge` | Deserializes incoming `WireEnvelope` → `(ActorAddress, Box<dyn Any + Send>)` |
-| `InMemoryTransport` | mpsc-backed transport for testing |
-
-## Routing Chain
-
-Without transport, unresolved addresses fall through to `InboxRegistry`.
-With transport enabled, a third step is inserted:
-
-1. **AddressMap::lookup** → local worker delivery (zero-copy, no serialize)
-2. **InboxRegistry::contains** → external inbox delivery
-3. **TransportRouter::lookup** → codec.encode + transport.send (remote)
-4. **Fallback** → `InboxRegistry::try_deliver` (Err if not found)
-
-This chain runs in `Runtime::send_to`, `ContextInner for Runtime`, and
-`WorkerContext::send_any` — all three follow the same logic.
-
-## Type Erasure Bridge
-
-Messages are `Box<dyn Any + Send>` before routing, but `dyn Any` can't be
-serialized. The bridge:
-
-**Send:** `Box<dyn Any>` → `(*msg).type_id()` → `encoders[TypeId]` →
-downcast to `M` → `Codec<M>::encode` → `(type_tag, Vec<u8>)` → `WireEnvelope`
-
-**Receive:** `WireEnvelope` → `decoders[type_tag]` → `Codec<M>::decode` →
-`Box::new(msg) as Box<dyn Any + Send>` → `runtime.deliver_raw(addr, msg)`
-
-`TypeId` (compiler-assigned, process-local) is used for encoding.
-`type_tag` (user-defined, stable) is used on the wire for decoding.
-
-## Setup
-
-```rust
-// 1. Register codecs
-let mut codecs = CodecRegistry::new();
-codecs.register::<Ping, _>(MyCodec);
-codecs.register::<Pong, _>(MyCodec);
-
-// 2. Create transport + router
-let (transport, rx) = InMemoryTransport::pair();
-let router = TransportRouter::new();
-router.add_route(remote_addr, transport);
-
-// 3. Attach to runtime
-let mut rt = Runtime::new(RuntimeConfig::default());
-rt.set_codec_registry(Arc::new(codecs));
-rt.set_transport_router(Arc::new(router));
-
-// 4. Send transparently
-rt.send_to(remote_addr, Ping { value: 42, reply_to: inbox_addr }).unwrap();
-
-// 5. Receive side: bridge deserializes, deliver_raw injects
-let bridge = TransportBridge::new(codecs_arc);
-let (addr, msg) = bridge.receive(wire_envelope).unwrap();
-rt.deliver_raw(addr, msg).unwrap();
-```
-
-## Address Resolution
-
-Addresses are **not automatically discovered**. Each runtime must be told
-which remote addresses exist via `router.add_route()`. Since addresses are
-32 random bytes, runtimes must exchange them out-of-band (e.g., over the TCP
-connection itself — see `examples/tcp_ping_pong.rs`).
-
-## Distribution Driver
-
-The distribution layer's `NodeDriver` (`crates/distribution/src/driver.rs`)
-is the primary consumer of the TCP transport. It uses `TcpTransport` for
-outgoing SWIM messages and `TcpAcceptor` for incoming, bypassing the
-`Codec<M>` trait in favor of direct `serde_json` serialization (see
-[DOCKER_REALIZATION.md](../development_history/DOCKER_REALIZATION.md)
-§10.2 for rationale).
-
-## Limitations
-
-- **No automatic discovery** — manual address exchange required
-- **Transport::send is synchronous** — blocking transports stall the worker
-- **One route per address** — no wildcard/prefix routing
-- **No ordering guarantees** across transports (depends on transport impl)
-- **No back-pressure** from remote — fire-and-forget delivery
-- **TypeId is not stable** across compilations (only used process-locally; wire uses type_tag)
-
-## Where Things Live
-
-| Concept | File |
-|---------|------|
-| All transport types | `src/transport.rs` |
-| `InboxRegistry::contains()` | `src/delivery.rs` |
-| Transport fields on `TickContext` | `src/delivery.rs` |
-| `Runtime::deliver_raw`, setters | `src/runtime.rs` |
-| Transport fallback in worker | `src/worker.rs` |
-| Integration tests | `tests/transport_api.rs` |
-| TCP example | `examples/tcp_ping_pong.rs` |
diff --git a/docs/render_docs.sh b/docs/render_docs.sh
deleted file mode 100755
index 25c409c..0000000
--- a/docs/render_docs.sh
+++ /dev/null
@@ -1,85 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-ROOT_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
-DOCS_DIR="$SCRIPT_DIR"
-DIAGRAMS_DIR="$DOCS_DIR/diagrams"
-TOOLS_DIR="$ROOT_DIR/tools"
-
-mkdir -p "$DIAGRAMS_DIR"
-
-# --- Phase 1: Generate architecture.dot from source AST ---
-
-echo "==> Generating architecture.dot from source..."
-cargo run --manifest-path "$TOOLS_DIR/depgraph/Cargo.toml" \
-  -- --src-dir "$ROOT_DIR/src/" --output architecture --output-dir "$DOCS_DIR/"
-
-# --- Phase 2: Render all .dot files to .svg ---
-
-dots=("$DOCS_DIR"/*.dot)
-if [ ${#dots[@]} -eq 0 ]; then
-  echo "No .dot files found in $DOCS_DIR"
-  exit 0
-fi
-
-render_with_dot() {
-  for src in "${dots[@]}"; do
-    name="$(basename "$src" .dot)"
-    echo "  dot: $name.dot -> diagrams/$name.svg"
-    dot -Tsvg "$src" -o "$DIAGRAMS_DIR/$name.svg"
-  done
-}
-
-render_with_vizjs() {
-  local tmpfile
-  tmpfile="$(mktemp "${TMPDIR:-/tmp}/render_docs.XXXXXX.mjs")"
-  trap 'rm -f "$tmpfile"' RETURN
-
-  cat > "$tmpfile" <<NODEJS
-import { createRequire } from "module";
-import { readFileSync, writeFileSync, readdirSync } from "fs";
-import { join, basename } from "path";
-
-const require = createRequire("$TOOLS_DIR/package.json");
-const { instance } = require("@viz-js/viz");
-
-const docsDir = "$DOCS_DIR";
-
-const viz = await instance();
-const dots = readdirSync(docsDir).filter(f => f.endsWith(".dot"));
-
-for (const file of dots) {
-  const src  = readFileSync(join(docsDir, file), "utf-8");
-  const name = basename(file, ".dot");
-  const svg  = viz.renderString(src, { format: "svg" });
-  writeFileSync(join(docsDir, "diagrams", \`\${name}.svg\`), svg);
-  console.log(\`  viz-js: \${file} -> diagrams/\${name}.svg\`);
-}
-NODEJS
-
-  node "$tmpfile"
-}
-
-echo "==> Rendering DOT -> SVG..."
-
-if command -v dot &>/dev/null; then
-  render_with_dot
-elif command -v node &>/dev/null; then
-  if [ -f "$TOOLS_DIR/package.json" ]; then
-    if ! [ -d "$TOOLS_DIR/node_modules/@viz-js/viz" ]; then
-      echo "Installing @viz-js/viz..."
-      (cd "$TOOLS_DIR" && npm install --silent)
-    fi
-  else
-    echo "Error: tools/package.json not found at $TOOLS_DIR" >&2
-    exit 1
-  fi
-  render_with_vizjs
-else
-  echo "Error: No renderer available." >&2
-  echo "Install graphviz (apt install graphviz) or Node.js." >&2
-  exit 1
-fi
-
-echo "==> Done. SVGs in $DIAGRAMS_DIR/"
diff --git a/docs/runtime/actor-model.md b/docs/runtime/actor-model.md
deleted file mode 100644
index 8c37dc5..0000000
--- a/docs/runtime/actor-model.md
+++ /dev/null
@@ -1,138 +0,0 @@
-# Actor Model
-
-Swactor's actor model is intentionally minimal. An actor is a struct that
-implements one trait, receives one message type, and communicates only
-through `Ctx`.
-
-## Defining an Actor
-
-```rust
-use swactor::actor::ActorInterface;
-use swactor::runtime::Ctx;
-
-#[derive(Debug, Default, Clone)]
-struct Ping { return_addr: ActorAddress }
-
-#[derive(Debug, Default, Clone)]
-struct Pong;
-
-struct MyActor {
-    count: usize,
-}
-
-impl ActorInterface for MyActor {
-    type Incoming = Ping;
-    type Response = Pong;     // not enforced at runtime — a documentation hint
-
-    fn handle(&mut self, ctx: &Ctx, msg: Ping) {
-        self.count += 1;
-        let _ = ctx.send(msg.return_addr, Pong);
-    }
-}
-```
-
-That's it. No lifecycle hooks, no supervision trees, no async. Just a
-`handle` method.
-
-## The Traits
-
-```
-┌─ Message ─────────────────────────────────────────────────────────────────┐
-│                                                                           │
-│  trait Message: 'static + Sized + Clone + Send + Sync {}                  │
-│                                                                           │
-│  Blanket-implemented for any type that meets the bounds.                  │
-│  You never implement this manually.                                       │
-│                                                                           │
-│  Why Clone + Send + Sync?                                                 │
-│    Clone  — messages may be duplicated (Python bindings, stats, etc.)     │
-│    Send   — messages cross thread boundaries                              │
-│    Sync   — required by the type-erased Any + Send path                   │
-│                                                                           │
-└───────────────────────────────────────────────────────────────────────────┘
-
-┌─ ActorInterface ──────────────────────────────────────────────────────────┐
-│                                                                           │
-│  trait ActorInterface: 'static + Send {                                   │
-│      type Incoming: Message;                                              │
-│      type Response: Message;                                              │
-│      fn handle(&mut self, ctx: &Ctx, msg: Self::Incoming);                │
-│  }                                                                        │
-│                                                                           │
-│  This is what you implement. The actor owns mutable state (&mut self)     │
-│  and receives typed messages.                                             │
-│                                                                           │
-│  Actors are Send but NOT Sync — only one worker thread ever touches       │
-│  a given actor.                                                           │
-│                                                                           │
-└───────────────────────────────────────────────────────────────────────────┘
-```
-
-## Type Erasure
-
-Actors in the runtime are stored as `Box<dyn AnyActor>`, which erases the
-concrete type. Messages are stored as `Box<dyn Any + Send>`. Type checking
-happens at delivery time via `downcast`:
-
-```
-                        compile time                    runtime
-                        ───────────                    ───────
-  ctx.send(addr, msg)
-       │
-       v
-  Box::new(msg) as Box<dyn Any + Send>     -- type erased here
-       │
-       v
-  enqueued in mailbox (VecDeque<Box<dyn Any + Send>>)
-       │
-       v
-  actor.handle_any(ctx, msg)
-       │
-       v
-  msg.downcast::<A::Incoming>()            -- type recovered here
-       │
-  ┌────┴────┐
-  │         │
-  ok        err
-  │         │
-  v         v
-  A.handle  silently dropped
-  (ctx,msg)
-```
-
-Why silent drop? In a dynamic system (especially with Python bindings),
-type mismatches aren't crashes — they're routing errors. The actor simply
-ignores messages it doesn't understand.
-
-## ActorAddress
-
-```
-┌─ ActorAddress ────────────────────────────────────────────────────────────┐
-│                                                                           │
-│  pub struct ActorAddress(pub [u8; 32]);                                   │
-│                                                                           │
-│  32 random bytes — globally unique, no coordination needed.               │
-│  Generated via get_random() (system RNG or deterministic counter          │
-│  for WASM builds).                                                        │
-│                                                                           │
-│  Derives: Debug, Default, Clone, Copy, PartialEq, Eq, Hash               │
-│                                                                           │
-│  Used as keys in:                                                         │
-│    AddressMap  (actor → worker lookup)                                    │
-│    ActorPool   (actor → mailbox + state)                                  │
-│    InboxRegistry (external inbox lookup)                                  │
-│                                                                           │
-└───────────────────────────────────────────────────────────────────────────┘
-```
-
-## Where Things Live in the Code
-
-| Concept | File | Key lines |
-|---------|------|-----------|
-| `Message` trait | `src/actor.rs` | blanket impl |
-| `ActorInterface` trait | `src/actor.rs` | user-facing trait |
-| `ActorAddress` | `src/actor.rs` | 32-byte random ID |
-| `Actor<A>` wrapper | `src/actor.rs` | wraps user state |
-| `AnyActor` trait | `src/actor.rs` | type-erased handler |
-| `ActorPool` | `src/worker/mod.rs` | per-worker storage |
-| `ActorSlot` | `src/worker/mod.rs` | mailbox + actor pair |
diff --git a/docs/runtime/channels.md b/docs/runtime/channels.md
deleted file mode 100644
index e5de864..0000000
--- a/docs/runtime/channels.md
+++ /dev/null
@@ -1,124 +0,0 @@
-# Channels & Shared State
-
-All communication between workers (and between the `Runtime` and workers)
-goes through lock-free channels. There are no mutexes in the hot path.
-
-## HybridChannel
-
-The core primitive. A lock-free MPSC queue with bounded fast path and
-unbounded overflow.
-
-```
-┌─ HybridChannel<T> ───────────────────────────────────────────────────────┐
-│                                                                           │
-│  ┌─ ring: ArrayQueue<T> (crossbeam) ─────────────────────────────────┐   │
-│  │  Pre-allocated, fixed capacity, lock-free CAS                      │   │
-│  │  ┌───┬───┬───┬───┬───┬───┬───┬───┐                                │   │
-│  │  │   │   │   │   │   │   │   │   │                                │   │
-│  │  └───┴───┴───┴───┴───┴───┴───┴───┘                                │   │
-│  └────────────────────────────────────────────────────────────────────┘   │
-│                                                                           │
-│  ┌─ overflow: SegQueue<T> (crossbeam) ───────────────────────────────┐   │
-│  │  Unbounded linked-list queue, lock-free                            │   │
-│  │  Only used when ring is full                                       │   │
-│  └────────────────────────────────────────────────────────────────────┘   │
-│                                                                           │
-│  push(v):                                                                 │
-│    ring.push(v) → Ok:  done                                              │
-│    ring.push(v) → Err: overflow.push(v)                                  │
-│                                                                           │
-│  pop():                                                                   │
-│    ring.pop()     → Some: return it                                      │
-│    overflow.pop() → Some: return it                                      │
-│    otherwise      → None                                                 │
-│                                                                           │
-└───────────────────────────────────────────────────────────────────────────┘
-```
-
-The fast path (ring) avoids allocation. The overflow (SegQueue) acts as a
-safety net — the system never drops messages due to capacity, but
-performance degrades under sustained overflow.
-
-## Sender and Receiver
-
-```
-┌─ Sender<T> ──────────┐          ┌─ Receiver<T> ────────────┐
-│                       │          │                           │
-│  queue: Arc<Hybrid>   │──same──▶│  queue: Arc<Hybrid>       │
-│                       │   Arc    │                           │
-│  try_send(v) → push   │          │  try_recv() → pop         │
-│                       │          │                           │
-│  Clone: new_sender()  │          │  Single consumer          │
-│  (clones the Arc)     │          │  (not Clone)              │
-│                       │          │                           │
-└───────────────────────┘          └───────────────────────────┘
-```
-
-`Sender` is `Clone` — multiple producers can send into the same channel.
-`Receiver` is not `Clone` — exactly one consumer drains it.
-
-## What Channels Exist
-
-Each worker gets two inbound channels, created at `Runtime::new()` time:
-
-```
-  Per Worker:
-
-    transfer channel:  carries Envelope (messages to actors)
-      Senders:   Runtime, other workers (via TickContext)
-      Receiver:  this Worker
-
-    spawn channel:     carries (ActorAddress, Box<dyn AnyActor>)
-      Senders:   Runtime, other workers (via TickContext)
-      Receiver:  this Worker
-```
-
-For N workers, the runtime holds N transfer senders and N spawn senders.
-Every worker can reach every other worker's queues through `TickContext`.
-
-## AddressMap
-
-Global directory mapping actor addresses to the worker that owns them.
-
-```
-┌─ AddressMap ──────────────────────────────────────────────────────────────┐
-│                                                                           │
-│  RwLock< HashMap<ActorAddress, WorkerId> >                                │
-│                                                                           │
-│  Read path (very frequent):                                               │
-│    Every ctx.send() and Runtime.send_to() does a lookup.                  │
-│    RwLock allows concurrent readers — no contention.                      │
-│                                                                           │
-│  Write path (rare):                                                       │
-│    Only on spawn. Takes exclusive lock briefly.                           │
-│                                                                           │
-└───────────────────────────────────────────────────────────────────────────┘
-```
-
-## Placement
-
-Decides which worker gets a newly spawned actor.
-
-```
-┌─ Placement ───────────────────────────────────────────────────────────────┐
-│                                                                           │
-│  next: AtomicUsize                                                        │
-│  num_workers: usize                                                       │
-│                                                                           │
-│  next_worker() → WorkerId( next.fetch_add(1) % num_workers )              │
-│                                                                           │
-│  Simple round-robin. No load balancing, no affinity.                      │
-│  Actors stay on their assigned worker for life.                           │
-│                                                                           │
-└───────────────────────────────────────────────────────────────────────────┘
-```
-
-## Where Things Live in the Code
-
-| Concept | File |
-|---------|------|
-| `HybridChannel`, `Sender`, `Receiver` | `src/channel.rs` |
-| `AddressMap`, `WorkerId`, `Placement` | `src/address_map.rs` |
-| `Envelope` | `src/runtime.rs` |
-| `InboxRegistry` | `src/runtime.rs` |
-| `RuntimeConfig`, `BackoffPolicy` | `src/config.rs` |
diff --git a/docs/runtime/runtime.md b/docs/runtime/runtime.md
deleted file mode 100644
index 02ff659..0000000
--- a/docs/runtime/runtime.md
+++ /dev/null
@@ -1,354 +0,0 @@
-# Runtime Architecture
-
-The `Runtime` is the main entry point. It creates workers, owns the shared
-infrastructure, and provides the public API for spawning actors and sending
-messages.
-
-## Structure
-
-```
-┌─ Runtime ─────────────────────────────────────────────────────────────────┐
-│                                                                           │
-│  config: RuntimeConfig         -- tunable knobs (see config.rs)           │
-│  is_running: AtomicBool        -- shutdown flag, read by all workers      │
-│                                                                           │
-│  ┌─ Shared State (lives on Arc<Runtime>) ──────────────────────────────┐  │
-│  │                                                                     │  │
-│  │  address_map:      Arc<AddressMap>       -- actor -> worker lookup   │  │
-│  │  inbox_registry:   Arc<InboxRegistry>    -- external inbox delivery  │  │
-│  │  placement:        Placement             -- load-aware worker picker │  │
-│  │  worker_stats:     Vec<Arc<WorkerStats>> -- atomic stat counters     │  │
-│  │  extension:        Option<Arc<dyn RuntimeExtension>>                 │  │
-│  │    (StdExtension holds: NameRegistry, MonitorRegistry,              │  │
-│  │     GroupRegistry, WatchRegistry)                                   │  │
-│  │                                                                     │  │
-│  └─────────────────────────────────────────────────────────────────────┘  │
-│                                                                           │
-│  ┌─ Channel Endpoints ─────────────────────────────────────────────────┐  │
-│  │                                                                     │  │
-│  │  transfer_txs: Vec<Sender<Envelope>>  -- one per worker (messages)  │  │
-│  │  spawn_txs:    Vec<Sender<(Addr,Box)>> -- one per worker (spawns)   │  │
-│  │                                                                     │  │
-│  └─────────────────────────────────────────────────────────────────────┘  │
-│                                                                           │
-│  tick_workers: RefCell<Vec<Worker>>  -- for tick(); run() drains these   │
-│  worker_threads: Vec<OnceLock<Thread>>  -- for waking parked workers     │
-│                                                                           │
-└───────────────────────────────────────────────────────────────────────────┘
-```
-
-## Two Modes of Operation
-
-```
-  SINGLE-THREADED                        MULTI-THREADED
-  ──────────────                         ──────────────
-
-  let rt = Runtime::new(config);         let mut config = RuntimeConfig::default();
-                                         config.num_threads = 4;
-                                         let rt = Runtime::new(config);
-
-  rt.spawn(my_actor)?;                   rt.spawn(my_actor)?;
-  rt.send_to(addr, msg)?;               rt.send_to(addr, msg)?;
-
-  loop { rt.tick(); }                    let handle = rt.run()?;
-   ^                                      ^
-   |                                      |
-   caller drives each tick                workers run on their own threads
-                                          handle.join() blocks until shutdown
-```
-
-Single-threaded mode keeps the `Worker` inline and requires the caller to
-call `rt.tick()` to advance the simulation. This is useful for deterministic
-testing, WASM, or game loops where you want frame-level control.
-
-Multi-threaded mode consumes the `Runtime` via `run()`, wraps it in an
-`Arc`, and spawns one OS thread per worker. Returns a `RuntimeHandle`.
-
-## Ctx — the Actor Syscall Interface
-
-When an actor's `handle()` method runs, it receives a `&Ctx`. This is the
-only way for actors to interact with the outside world.
-
-```
-┌─ Ctx<'a> ─────────────────────────────────────────────────────────────────┐
-│                                                                           │
-│  inner:     &dyn ContextInner     -- polymorphic dispatch                 │
-│  self_addr: ActorAddress          -- address of the current actor         │
-│                                                                           │
-│  ┌─ Core API ─────────────────────────────────────────────────────────┐  │
-│  │                                                                     │  │
-│  │  ctx.self_addr()                   -> ActorAddress                  │  │
-│  │  ctx.send(addr, msg)               -> Result<(), Error>            │  │
-│  │  ctx.spawn(actor)                  -> Result<ActorAddress, Error>   │  │
-│  │  ctx.stop_self()                                                    │  │
-│  │  ctx.stop_actor(addr)              -> Result<(), Error>             │  │
-│  │  ctx.extension()                   -> Option<&dyn RuntimeExtension> │  │
-│  │                                                                     │  │
-│  └─────────────────────────────────────────────────────────────────────┘  │
-│                                                                           │
-│  ┌─ Extension Traits (swactor-std) ──────────────────────────────────┐  │
-│  │                                                                     │  │
-│  │  CtxNaming:     spawn_named, where_is                               │  │
-│  │  CtxMonitoring: monitor, demonitor                                  │  │
-│  │  CtxWatching:   watch, unwatch                                      │  │
-│  │  CtxGroups:     join_group, leave_group, publish, group_members     │  │
-│  │  CtxTimers:     send_after_ticks, send_interval_ticks               │  │
-│  │                                                                     │  │
-│  │  These use ctx.extension() + downcast to StdExtension.              │  │
-│  │  Also: spawn_restartable (via CtxNaming)                            │  │
-│  │                                                                     │  │
-│  └─────────────────────────────────────────────────────────────────────┘  │
-│                                                                           │
-│  ┌─ ContextInner dispatch ─────────────────────────────────────────────┐  │
-│  │                                                                     │  │
-│  │  Five methods: send_any, spawn_any, request_stop,                   │  │
-│  │                post_worker_request, extension                       │  │
-│  │                                                                     │  │
-│  │  In single-threaded mode:  inner = &Runtime                         │  │
-│  │    send → transfer_txs[wid], spawn → spawn_txs[wid]                 │  │
-│  │                                                                     │  │
-│  │  In multi-threaded mode:   inner = &WorkerContext                   │  │
-│  │    send → pending_local (same worker) or transfer_txs (cross)       │  │
-│  │    spawn → spawn_txs[target_wid]                                    │  │
-│  │    post_worker_request → worker_requests (drained phase 5.5)        │  │
-│  │                                                                     │  │
-│  └─────────────────────────────────────────────────────────────────────┘  │
-│                                                                           │
-└───────────────────────────────────────────────────────────────────────────┘
-```
-
-The `ContextInner` trait is the object-safe bridge. It's not public — actors
-interact only through the typed `Ctx` wrapper.
-
-## Inbox — Receiving Messages Outside the Runtime
-
-`Inbox<M>` lets external code (the "main" thread, a game loop, an HTTP
-handler, etc.) receive typed messages from actors.
-
-```
-  ┌─ Creation ─────────────────────────────────────────────────────────────┐
-  │                                                                        │
-  │  let inbox = rt.new_inbox::<MyResponse>()?;                            │
-  │                                                                        │
-  │  Under the hood:                                                       │
-  │    addr     = ActorAddress::new_random()                               │
-  │    receiver = Receiver::<M>::new(capacity)                             │
-  │    sender   = receiver.new_sender()                                    │
-  │    inbox_registry.register(addr, Arc::new(sender))                     │
-  │                                                                        │
-  └────────────────────────────────────────────────────────────────────────┘
-
-  ┌─ Usage ────────────────────────────────────────────────────────────────┐
-  │                                                                        │
-  │  // give inbox.addr() to actors so they know where to reply            │
-  │  rt.send_to(greeter, GreetMsg { return_addr: *inbox.addr() })?;       │
-  │                                                                        │
-  │  // poll for responses                                                 │
-  │  if let Some(msg) = inbox.try_recv() { ... }                           │
-  │                                                                        │
-  └────────────────────────────────────────────────────────────────────────┘
-```
-
-## Ask — Typed Request-Response
-
-`Ask<R>` wraps an `Inbox<R>` for convenient request-response:
-
-```
-  let response: Pong = rt.ask(actor, |reply_to| Ping { reply_to })?
-      .recv_ticking(&rt, 10)?;    // tick until response or timeout
-```
-
-## Named Actors
-
-Actors can be spawned with a registered name for discovery:
-
-```
-  let addr = rt.spawn_named("coordinator", my_actor)?;
-  let found = rt.where_is("coordinator");   // -> Some(addr)
-  // Names are auto-unregistered when the actor dies.
-```
-
-## Actor Monitoring (Death Watch)
-
-Subscribe to death notifications via `ctx.monitor()`:
-
-```
-  let mref = ctx.monitor(target_addr);
-  // When target dies, a Down { addr, reason } message arrives in
-  // the watcher's normal handle() method. No special callback needed.
-```
-
-`StopReason`: `Normal` (graceful stop) | `Panicked` (panic, not restartable)
-
-## Actor Groups (Pub-Sub)
-
-Named groups for broadcast messaging:
-
-```
-  ctx.join_group("workers");
-  ctx.publish("workers", StatusUpdate { ... });    // all members receive it
-  // Members auto-removed on death. Groups auto-deleted when empty.
-```
-
-## Lifecycle Hooks
-
-```
-  fn on_start(&mut self, ctx: &Ctx) {}   -- called once before first message
-  fn on_stop(&mut self, ctx: &Ctx) {}    -- called on graceful stop (not panic)
-```
-
-## Actor Recovery
-
-Factory-based restart after panic:
-
-```
-  rt.spawn_restartable(actor, || MyActor::new(), 3)?;
-  // On panic: mailbox cleared, factory creates fresh instance, up to 3 times.
-  // After max_restarts: permanently poisoned.
-```
-
-## Supervision Trees
-
-The `Supervisor` actor manages child actors with configurable restart policies:
-
-```
-  let sup = Supervisor::new(
-      SupervisorStrategy::OneForOne,   // only the failed child is restarted
-      // Also: OneForAll  — all children restarted when one fails
-      //        RestForOne — failed child + all children after it restarted
-      5,                                // max 5 restarts before meltdown
-      vec![
-          ChildSpec::new("worker_a", RestartPolicy::Permanent, |ctx| {
-              ctx.spawn(MyWorker::new())
-          }),
-          ChildSpec::new("worker_b", RestartPolicy::Transient, |ctx| {
-              ctx.spawn(MyOtherWorker::new())
-          }),
-      ],
-  );
-  let sup_addr = rt.spawn(sup)?;
-```
-
-Restart policies:
-- `Permanent`: always restart
-- `Transient`: restart only on panic, not normal stop
-- `Temporary`: never restart
-
-Strategies:
-- `OneForOne`: only the failed child is restarted (default)
-- `OneForAll`: all children are stopped and restarted when one fails
-- `RestForOne`: the failed child and all children after it (in spec order) are restarted
-
-Coordinated restart (OneForAll/RestForOne): the supervisor enters a `Stopping` phase,
-sends stop signals to affected siblings, waits for all `Down` confirmations, then
-restarts the full set in spec order. Already-dead children are handled immediately.
-
-Meltdown: supervisor stops itself when total restarts exceed `max_restarts`.
-Cascading: supervisor stops all children in `on_stop`.
-
-## Router — Actor Pool with Message Routing
-
-The `Router<M>` actor manages a pool of identical workers and distributes
-incoming messages across them. Callers send messages to the router's address,
-and the router forwards them according to the configured strategy.
-
-```
-  let router = Router::new(
-      RoutingStrategy::RoundRobin,
-      5,                                // pool size
-      |ctx| ctx.spawn(MyWorker::new()), // worker factory
-      10,                               // max restarts before meltdown
-  );
-  let router_addr = rt.spawn(router)?;
-  rt.send_to(router_addr, WorkerMsg::DoWork(42))?;
-```
-
-Routing strategies:
-- `RoundRobin`: sequential circular distribution
-- `Random`: random worker selection
-- `Broadcast`: clone message to all workers
-
-Workers are monitored and automatically replaced on failure. Meltdown
-protection stops the router when total restarts exceed `max_restarts`.
-
-### handle_down Callback
-
-Any actor can override `handle_down` to react to monitored actor deaths
-without making `Down` its `Incoming` type:
-
-```
-  impl ActorInterface for MyActor {
-      type Incoming = MyMsg;
-      // ...
-      fn handle_down(&mut self, ctx: &Ctx, down: Down) {
-          // React to monitored actor death
-      }
-  }
-```
-
-### ctx.stop_actor
-
-Actors can stop other actors from handlers:
-
-```
-  ctx.stop_actor(other_addr)?;  // PoisonPill semantics — queued after existing msgs
-```
-
-## Per-Worker Timers (swactor-std)
-
-Deterministic tick-counting timers (not wall-clock). Requires `StdExtension`
-and the `CtxTimers` extension trait:
-
-```
-  use swactor_std::CtxTimers;
-
-  ctx.send_after_ticks(addr, msg, 5);       // one-shot: fires after 5 ticks
-  ctx.send_interval_ticks(addr, msg, 10);   // repeating: every 10 ticks
-```
-
-The `TimerWheel` lives as a per-worker extension (`WorkerExtension`),
-created by `StdExtension::create_worker_extension()`. Timer requests are
-dispatched via `ctx.post_worker_request()` and processed in phase 5.5.
-
-## RuntimeHandle
-
-Returned by `run()`. Holds `Arc<Runtime>` and the thread `JoinHandle`s.
-
-```
-┌─ RuntimeHandle ───────────────────────────────────────────────────────────┐
-│                                                                           │
-│  runtime:  Arc<Runtime>           -- still usable for spawn/send/stats    │
-│  threads:  Vec<JoinHandle<()>>    -- one per worker                       │
-│                                                                           │
-│  handle.shutdown()   →  runtime.is_running.store(false)                   │
-│  handle.join()       →  waits for all worker threads to exit              │
-│                                                                           │
-└───────────────────────────────────────────────────────────────────────────┘
-```
-
-## RuntimeStats
-
-`rt.stats()` (or `handle.runtime.stats()`) returns a snapshot:
-
-```
-┌─ RuntimeStats ────────────────────────────────────────────────────────────┐
-│                                                                           │
-│  num_workers: usize                                                       │
-│  uptime_ms: u64                                                           │
-│  actors: Vec<(ActorAddress, worker_id)>     -- from AddressMap snapshot   │
-│  workers: Vec<WorkerInfo>                                                 │
-│    ├─ id: usize                                                           │
-│    ├─ num_actors: usize                     -- from atomic counter        │
-│    ├─ mailbox_depth: usize                  -- total queued messages      │
-│    ├─ messages_processed: u64               -- cumulative count           │
-│    ├─ messages_dropped: u64                 -- overflow drops             │
-│    ├─ panics: u64                                                         │
-│    ├─ restarts: u64                                                       │
-│    └─ stops: u64                                                          │
-│  tick_timings: Vec<Vec<TickTiming>>         -- per-phase timing data      │
-│                                                                           │
-└───────────────────────────────────────────────────────────────────────────┘
-```
-
-Stats are published by workers via atomic stores at the end of each tick,
-so they're always slightly stale but never block.
diff --git a/docs/runtime/worker-thread.md b/docs/runtime/worker-thread.md
deleted file mode 100644
index 9b6ab3c..0000000
--- a/docs/runtime/worker-thread.md
+++ /dev/null
@@ -1,646 +0,0 @@
-# Worker Thread Architecture
-
-## Structure
-
-```
-┌─ Worker ───────────────────────────────────────────────────────────────┐
-│                                                                        │
-│  id: WorkerId                                                          │
-│                                                                        │
-│  ┌─ spawn_rx ─────────────────────┐  ┌─ transfer_rx ──────────────────┐│
-│  │ Receiver<(Addr, Box<AnyActor>)>│  │ Receiver<Envelope>             ││
-│  │                                │  │                                ││
-│  │ from: Runtime.spawn()          │  │ from: other workers, Runtime   ││
-│  │       ctx.spawn()              │  │       ctx.send()               ││
-│  └────────────────────────────────┘  └────────────────────────────────┘│
-│                                                                        │
-│  ┌─ ActorPool ──────────────────────────────────────────────────────┐  │
-│  │                                                                  │  │
-│  │  actors: HashMap<ActorAddress, ActorSlot>                        │  │
-│  │                                                                  │  │
-│  │  ┌─ ActorSlot [addr_0] ──────────────────────────────────────┐   │  │
-│  │  │                                                           │   │  │
-│  │  │  ┌─ mailbox ──────────────────────────────────────────┐   │   │  │
-│  │  │  │ VecDeque<Box<dyn Any + Send>>                      │   │   │  │
-│  │  │  │                                                    │   │   │  │
-│  │  │  │ ┌─────┐ ┌─────┐ ┌─────┐ ┌─────┐                    │   │   │  │
-│  │  │  │ │ msg │ │ msg │ │ msg │ │ ... │  <- push_back      │   │   │  │
-│  │  │  │ └─────┘ └─────┘ └─────┘ └─────┘                    │   │   │  │
-│  │  │  │ pop_front ->                 untyped; Box<Any>     │   │   │  │
-│  │  │  └────────────────────────────────────────────────────┘   │   │  │
-│  │  │                                                           │   │  │
-│  │  │  ┌─ actor ────────────────────────────────────────────┐   │   │  │
-│  │  │  │ Box<dyn AnyActor>                                  │   │   │  │
-│  │  │  │                                                    │   │   │  │
-│  │  │  │ wraps Actor<A>(A) where A: ActorInterface          │   │   │  │
-│  │  │  │                                                    │   │   │  │
-│  │  │  │ handle_any(ctx, msg):                              │   │   │  │
-│  │  │  │   downcast Box<Any> -> A::Incoming                 │   │   │  │
-│  │  │  │   ok  -> A.handle(ctx, typed_msg)                  │   │   │  │
-│  │  │  │   err -> silently drop                             │   │   │  │
-│  │  │  └────────────────────────────────────────────────────┘   │   │  │
-│  │  │                                                           │   │  │
-│  │  └───────────────────────────────────────────────────────────┘   │  │
-│  │                                                                  │  │
-│  │  ┌─ ActorSlot [addr_1] ──────────────────────────────────────┐   │  │
-│  │  │ ...                                                       │   │  │
-│  │  └───────────────────────────────────────────────────────────┘   │  │
-│  │                                                                  │  │
-│  └──────────────────────────────────────────────────────────────────┘  │
-│                                                                        │
-│  ┌─ worker_ext: Option<Box<dyn WorkerExtension>> ─────────────────┐  │
-│  │  Per-worker extension state, created by RuntimeExtension        │  │
-│  │  factory. StdExtension provides a TimerWheel here.              │  │
-│  │  on_tick() → fire due messages    (phase 2.5)                   │  │
-│  │  handle_request() → schedule timers etc.  (phase 5.5)           │  │
-│  │  gc_dead() → clean up dead actor state    (phase 7)             │  │
-│  └──────────────────────────────────────────────────────────────────┘  │
-│                                                                        │
-└────────────────────────────────────────────────────────────────────────┘
-```
-
-## Shared State (borrowed via TickContext)
-
-Lives on `Arc<Runtime>`, shared read-only across all worker threads.
-
-```
-┌─ TickContext<'a> ──────────────────────────────────────────────────────┐
-│                                                                        │
-│  address_map:       &AddressMap        -- ActorAddress -> WorkerId     │
-│  transfer_txs:      &[Sender]          -- one Sender per worker        │
-│  spawn_txs:         &[Sender]          -- one Sender per worker        │
-│  placement:         &Placement         -- load-aware worker picker     │
-│  inbox_registry:    &InboxRegistry     -- external Inbox<M> receivers  │
-│  config:            &RuntimeConfig     -- budget, backoff, etc.        │
-│  extension:         Option<&dyn RuntimeExtension> -- shared ext        │
-│  stats_hook:        Option<&dyn StatsHook> -- per-tick stats callback  │
-│  worker_threads:    &[OnceLock<Thread>] -- for unpark on send/spawn   │
-│                                                                        │
-└────────────────────────────────────────────────────────────────────────┘
-```
-
-## Run Loop
-
-```
-┌─ Worker::run ──────────────────────────────────────────────────────────┐
-│                                                                        │
-│  ┌────────────────────────────────────┐                                │
-│  │       is_running.load() ?          │                                │
-│  └──────────┬─────────────────────────┘                                │
-│         yes │                                                          │
-│             v                                                          │
-│  ┌────────────────────────────────────┐                                │
-│  │        tick_once(&tc)              │─────────┐                      │
-│  └──────────┬─────────────────────────┘         │                      │
-│             │                                    │                     │
-│        ┌────┴────┐                               │                     │
-│        v         v                               │                     │
-│     did work   no work                           │                     │
-│        │         │                               │                     │
-│        v         v                               │                     │
-│  idle = 0    idle++                              │                     │
-│        │         │                               │                     │
-│        │    ┌────┴──────────────────────────────┐  │                     │
-│        │    │ idle < spin_thr:  spin            │  │                     │
-│        │    │ idle < yield_thr: yield_now       │  │                     │
-│        │    │ else: park_timeout(incr, capped)  │  │                     │
-│        │    │   (instant wake via Thread::unpark │  │                     │
-│        │    │    when send/spawn targets worker) │  │                     │
-│        │    └──────────────────────────────┬─────┘  │                     │
-│        │                              │          │                     │
-│        └──────────┬───────────────────┘          │                     │
-│                   │                              │                     │
-│                   └──── loop back ───────────────┘                     │
-│                                                                        │
-└────────────────────────────────────────────────────────────────────────┘
-```
-
-## Tick Once (eight phases)
-
-```
-┌─ tick_once ────────────────────────────────────────────────────────────┐
-│                                                                        │
-│  PHASE 1 --- Drain Spawn Queue                                         │
-│  ┌────────────────────────────────────────────────────────────────────┐│
-│  │                                                                    ││
-│  │  spawn_rx --try_recv()--> (addr, Box<dyn AnyActor>)                ││
-│  │                                   │                                ││
-│  │                                   v                                ││
-│  │                          pool.insert(addr, actor)                  ││
-│  │                            started: false                          ││
-│  │                            stopping: false                         ││
-│  │                            mailbox_capacity: from config           ││
-│  │                                                                    ││
-│  └────────────────────────────────────────────────────────────────────┘│
-│      │                                                                 │
-│      v                                                                 │
-│  PHASE 2 --- Drain Transfer Queue                                      │
-│  ┌────────────────────────────────────────────────────────────────────┐│
-│  │                                                                    ││
-│  │  transfer_rx --try_recv()--> Envelope { dest, payload }            ││
-│  │                                         │                          ││
-│  │                                         v                          ││
-│  │                             pool.deliver(&dest, payload)           ││
-│  │                               (enforces mailbox_capacity;          ││
-│  │                                drop newest/oldest on overflow)     ││
-│  │                                                                    ││
-│  └────────────────────────────────────────────────────────────────────┘│
-│      │                                                                 │
-│      v                                                                 │
-│  PHASE 2.5 --- Fire Per-Worker Extension                                │
-│  ┌────────────────────────────────────────────────────────────────────┐│
-│  │                                                                    ││
-│  │  worker_ext.on_tick() → Vec<(dest, msg)>                          ││
-│  │    (StdExtension provides TimerWheel: advances tick, fires due)    ││
-│  │       │                                                            ││
-│  │       v                                                            ││
-│  │  for (dest, msg) in ext_msgs:                                      ││
-│  │    route_to_pool_or_remote(pool, tc, dest, msg)                    ││
-│  │      local → pool.deliver | cross → transfer_tx | → inbox_registry ││
-│  │                                                                    ││
-│  └────────────────────────────────────────────────────────────────────┘│
-│      │                                                                 │
-│      v                                                                 │
-│  PHASE 3 --- Tick All Actors                                           │
-│  ┌────────────────────────────────────────────────────────────────────┐│
-│  │                                                                    ││
-│  │  ┌─ WorkerContext (on stack) ─────────────────────────────────┐    ││
-│  │  │  implements ContextInner                                   │    ││
-│  │  │  pending_local:    RefCell<Vec<(Addr, Box<Any>)>>          │    ││
-│  │  │  stop_requests:    RefCell<Vec<ActorAddress>>              │    ││
-│  │  │  worker_requests:  RefCell<Vec<Box<dyn Any + Send>>>       │    ││
-│  │  └────────────────────────────────────────────────────────────┘    ││
-│  │                                                                    ││
-│  │  for each (addr, slot) in pool:                                    ││
-│  │    if poisoned or stopping → clear mailbox, skip                   ││
-│  │                                                                    ││
-│  │    ┌─ on_start (once per actor) ──────────────────────────────┐    ││
-│  │    │  if !slot.started:                                       │    ││
-│  │    │    catch_unwind(actor.on_start(&ctx))                    │    ││
-│  │    │      panic → poisoned (immediate, no messages)           │    ││
-│  │    │      ok    → started = true                              │    ││
-│  │    └──────────────────────────────────────────────────────────┘    ││
-│  │                                                                    ││
-│  │    ┌─ message loop (budget-limited) ──────────────────────────┐    ││
-│  │    │  repeat up to `budget` times (budget=0 → unlimited):     │    ││
-│  │    │    msg = slot.mailbox.pop_front()                        │    ││
-│  │    │                                                          │    ││
-│  │    │    if msg is StopSignal:                                 │    ││
-│  │    │      slot.stopping = true; clear mailbox; break          │    ││
-│  │    │                                                          │    ││
-│  │    │    catch_unwind(actor.handle_any(&ctx, msg))             │    ││
-│  │    │      panic → try_restart (factory) or poison             │    ││
-│  │    │      ok    → count += 1                                  │    ││
-│  │    │                                                          │    ││
-│  │    │    if stop_requests contains addr:                       │    ││
-│  │    │      slot.stopping = true; clear mailbox; break          │    ││
-│  │    └──────────────────────────────────────────────────────────┘    ││
-│  │                                                                    ││
-│  │    ┌─ WorkerContext routes ─────────────────────────────────────┐  ││
-│  │    │                                                            │  ││
-│  │    │  send_any(addr, msg):                                      │  ││
-│  │    │    ┌──────────────┬──────────────┬─────────────────┐       │  ││
-│  │    │    │ same worker  │ other worker │ unknown addr    │       │  ││
-│  │    │    │              │              │                 │       │  ││
-│  │    │    │ pending_     │ transfer_tx  │ inbox_registry  │       │  ││
-│  │    │    │  local.push()│  + unpark    │  .try_deliver() │       │  ││
-│  │    │    └──────────────┴──────────────┴─────────────────┘       │  ││
-│  │    │                                                            │  ││
-│  │    │  spawn_any(addr, actor):                                   │  ││
-│  │    │    wid = placement.next_worker()  (load-aware)             │  ││
-│  │    │    address_map.insert(addr, wid)                           │  ││
-│  │    │    spawn_txs[wid].send((addr, actor)) + unpark             │  ││
-│  │    │                                                            │  ││
-│  │    │  request_stop(addr):      → stop_requests.push(addr)       │  ││
-│  │    │  post_worker_request(r): → worker_requests.push(r)        │  ││
-│  │    │  extension():            → tc.extension                    │  ││
-│  │    │                                                            │  ││
-│  │    └────────────────────────────────────────────────────────────┘  ││
-│  │                                                                    ││
-│  └────────────────────────────────────────────────────────────────────┘│
-│      │                                                                 │
-│      v                                                                 │
-│  PHASE 4 --- Drain Spawn Queue (again)                                 │
-│  ┌────────────────────────────────────────────────────────────────────┐│
-│  │  Actors spawned during phase 3 must be in the pool before         ││
-│  │  pending_local delivery (phase 5).                                ││
-│  └────────────────────────────────────────────────────────────────────┘│
-│      │                                                                 │
-│      v                                                                 │
-│  PHASE 5 --- Drain Pending Local                                       │
-│  ┌────────────────────────────────────────────────────────────────────┐│
-│  │                                                                    ││
-│  │  for (addr, msg) in pending_local.into_inner():                    ││
-│  │      pool.deliver(&addr, msg)                                      ││
-│  │  these sit in the mailbox until NEXT tick                          ││
-│  │                                                                    ││
-│  └────────────────────────────────────────────────────────────────────┘│
-│      │                                                                 │
-│      v                                                                 │
-│  PHASE 5.5 --- Drain Worker Extension Requests                          │
-│  ┌────────────────────────────────────────────────────────────────────┐│
-│  │                                                                    ││
-│  │  for request in worker_requests:                                   ││
-│  │    worker_ext.handle_request(request)                              ││
-│  │    (StdExtension: downcasts to TimerRequest, schedules timers)     ││
-│  │                                                                    ││
-│  └────────────────────────────────────────────────────────────────────┘│
-│      │                                                                 │
-│      v                                                                 │
-│  PHASE 6 --- Publish Stats                                             │
-│  ┌────────────────────────────────────────────────────────────────────┐│
-│  │                                                                    ││
-│  │  if did_work:                                                      ││
-│  │    stats.num_actors, total_mailbox_depth, messages_processed       ││
-│  │    stats.messages_dropped (if any overflow drops)                  ││
-│  │    stats_hook.on_tick(worker_id, snapshots) if configured          ││
-│  │                                                                    ││
-│  │  record TickTiming (6-element phase_us array + processed + flag)   ││
-│  │                                                                    ││
-│  └────────────────────────────────────────────────────────────────────┘│
-│      │                                                                 │
-│      v                                                                 │
-│  PHASE 7 --- Cleanup Dead Actors                                       │
-│  ┌────────────────────────────────────────────────────────────────────┐│
-│  │                                                                    ││
-│  │  pool.cleanup_dead() → Vec<(ActorAddress, StopReason)>            ││
-│  │    stopping actors: call on_stop(&ctx) before removal             ││
-│  │    poisoned actors: skip on_stop (state may be corrupt)           ││
-│  │                                                                    ││
-│  │  for each dead addr:                                                ││
-│  │    address_map.remove(&addr)                                       ││
-│  │                                                                    ││
-│  │  if extension installed:                                           ││
-│  │    notifications = ext.on_actor_death(&dead)                       ││
-│  │      (StdExtension: emits Down/ActorExited, unregisters names,    ││
-│  │       removes from groups, takes monitors)                        ││
-│  │    ext.cleanup_dead(&dead_addrs)                                   ││
-│  │    route notifications via route_to_pool_or_remote()               ││
-│  │                                                                    ││
-│  │  deliver any messages sent during on_stop callbacks                ││
-│  │                                                                    ││
-│  │  worker_ext.gc_dead(&dead_addrs)                                   ││
-│  │    (StdExtension: removes orphaned interval timers)                ││
-│  │                                                                    ││
-│  └────────────────────────────────────────────────────────────────────┘│
-│                                                                        │
-└────────────────────────────────────────────────────────────────────────┘
-```
-
-## External Interactions
-
-Everything the worker talks to, and everything that talks to it.
-
-### Who writes into the worker's queues
-
-```
-┌─ User Code ────────────────────────────────────────────────────────────┐
-│                                                                        │
-│  let rt = Runtime::new(config);                                        │
-│  let addr = rt.spawn(my_actor)?;     // --┐                            │
-│  rt.send_to(addr, MyMsg(42))?;       // --┤                            │
-│                                       // │                             │
-└──────────────────────────────────┼──┼───────────────────────────────────┘
-                                   │  │
-        ┌───────────────────────────┘  │
-        │                              │
-        v                              v
-┌─ Runtime ──────────────────────────────────────────────────────────────┐
-│                                                                        │
-│  spawn():                                                              │
-│    addr = ActorAddress::new_random()                                   │
-│    wid  = placement.next_worker()          -- round-robin pick         │
-│    address_map.insert(addr, wid)           -- register globally        │
-│    spawn_txs[wid].try_send((addr, boxed))  -- push to worker queue     │
-│         │                                                              │
-│         │       ┌────────────────────────────────────────────┐         │
-│         └──────>│ Worker.spawn_rx  (Receiver side)           │         │
-│                 └────────────────────────────────────────────┘         │
-│                                                                        │
-│  send_to():                                                            │
-│    wid = address_map.lookup(&addr)                                     │
-│    transfer_txs[wid].try_send(Envelope::new(addr, msg))                │
-│         │                                                              │
-│         │       ┌────────────────────────────────────────────┐         │
-│         └──────>│ Worker.transfer_rx  (Receiver side)        │         │
-│                 └────────────────────────────────────────────┘         │
-│                                                                        │
-└────────────────────────────────────────────────────────────────────────┘
-```
-
-### Who the worker talks to during a tick
-
-```
-┌─ Worker (during phase 3: tick_all) ────────────────────────────────────┐
-│                                                                        │
-│  An actor calls ctx.send(addr, msg) or ctx.spawn(new_actor).           │
-│  These go through WorkerContext, which implements ContextInner.        │
-│                                                                        │
-│  ctx.send(addr, msg)                                                   │
-│       │                                                                │
-│       v                                                                │
-│  ┌─ WorkerContext.send_any ─────────────────────────────────────────┐  │
-│  │                                                                  │  │
-│  │  address_map.lookup(addr) --> which worker owns this actor?      │  │
-│  │       │                                                          │  │
-│  │  ┌────┴──────────────┬──────────────────┬──────────────────┐     │  │
-│  │  │                   │                  │                  │     │  │
-│  │  v                   v                  v                  │     │  │
-│  │  SAME WORKER         OTHER WORKER       NOT FOUND          │     │  │
-│  │  │                   │                  │                  │     │  │
-│  │  │ pending_local     │ transfer_txs     │ inbox_registry   │     │  │
-│  │  │   .push(addr,msg) │  [wid].send()    │  .try_deliver()  │     │  │
-│  │  │                   │                  │                  │     │  │
-│  │  │ stays in this     │ crosses to       │ goes to an       │     │  │
-│  │  │ worker; delivered │ another worker   │ external         │     │  │
-│  │  │ in phase 4        │ thread's         │ Inbox<M>         │     │  │
-│  │  │                   │ transfer_rx      │ receiver          │    │  │
-│  │  └───────────────────┴──────────────────┴──────────────────┘     │  │
-│  │                                                                  │  │
-│  └──────────────────────────────────────────────────────────────────┘  │
-│                                                                        │
-│  ctx.spawn(new_actor)                                                  │
-│       │                                                                │
-│       v                                                                │
-│  ┌─ WorkerContext.spawn_any ────────────────────────────────────────┐  │
-│  │                                                                  │  │
-│  │  wid = placement.next_worker()  -- round-robin target            │  │
-│  │  address_map.insert(addr, wid)  -- register in global map        │  │
-│  │  spawn_txs[wid].try_send(...)   -- enqueue for target worker     │  │
-│  │                                                                  │  │
-│  │  may land on THIS worker or a DIFFERENT worker                   │  │
-│  │  target picks it up in phase 1 of its next tick                  │  │
-│  │                                                                  │  │
-│  └──────────────────────────────────────────────────────────────────┘  │
-│                                                                        │
-└────────────────────────────────────────────────────────────────────────┘
-```
-
-### The channel connecting everything
-
-Each worker has two inbound channels. The channels are lock-free MPSC queues
-backed by `crossbeam::ArrayQueue` with a `SegQueue` overflow.
-
-```
-┌─ HybridChannel<T> ─────────────────────────────────────────────────────┐
-│                                                                        │
-│  ┌─ ring: ArrayQueue<T> ──────────────────────────────────────┐        │
-│  │  fixed capacity, lock-free, bounded                        │        │
-│  │  ┌───┬───┬───┬───┬───┬───┬───┬───┐                         │        │
-│  │  │   │   │   │   │   │   │   │   │  (pre-allocated)        │        │
-│  │  └───┴───┴───┴───┴───┴───┴───┴───┘                         │        │
-│  └────────────────────────────────────────────────────────────┘        │
-│                                                                        │
-│  ┌─ overflow: SegQueue<T> ────────────────────────────────────┐        │
-│  │  unbounded, lock-free, linked nodes                        │        │
-│  │  used only when ring is full                               │        │
-│  └────────────────────────────────────────────────────────────┘        │
-│                                                                        │
-│  push(v):  try ring first, spill to overflow                           │
-│  pop():    drain ring first, then overflow                             │
-│                                                                        │
-│  ┌─ Sender<T> ─────────┐       ┌─ Receiver<T> ─────────┐               │
-│  │ Arc<HybridChannel<T>>│       │ Arc<HybridChannel<T>>  │             │
-│  │ .try_send(v)         │──────>│ .try_recv() -> Option  │             │
-│  │ clonable (new_sender)│ same  │ single consumer        │             │
-│  └──────────────────────┘ Arc   └────────────────────────┘             │
-│                                                                        │
-└────────────────────────────────────────────────────────────────────────┘
-
-Who holds what:
-
-  transfer channel:
-    Sender   held by: Runtime.transfer_txs[i], workers via TickContext
-    Receiver held by: Worker[i].transfer_rx
-
-  spawn channel:
-    Sender   held by: Runtime.spawn_txs[i], workers via TickContext
-    Receiver held by: Worker[i].spawn_rx
-```
-
-### The AddressMap: global actor directory
-
-```
-┌─ AddressMap ───────────────────────────────────────────────────────────┐
-│                                                                        │
-│  RwLock< HashMap<ActorAddress, WorkerId> >                             │
-│                                                                        │
-│  ┌──────────────────────────────────────────────────────────────────┐  │
-│  │  addr_0 -> WorkerId(0)                                           │  │
-│  │  addr_1 -> WorkerId(2)                                           │  │
-│  │  addr_2 -> WorkerId(0)                                           │  │
-│  │  addr_3 -> WorkerId(1)                                           │  │
-│  │  ...                                                             │  │
-│  └──────────────────────────────────────────────────────────────────┘  │
-│                                                                        │
-│  READERS (concurrent, RwLock read):                                    │
-│    WorkerContext.send_any() -- every message send does a lookup        │
-│    Runtime.send_to()       -- external sends do a lookup               │
-│                                                                        │
-│  WRITERS (rare, exclusive lock):                                       │
-│    Runtime.spawn()          -- registers new actor at spawn time       │
-│    WorkerContext.spawn_any() -- actor spawns another actor             │
-│                                                                        │
-└────────────────────────────────────────────────────────────────────────┘
-```
-
-### The InboxRegistry: escape hatch to user code
-
-```
-┌─ InboxRegistry ────────────────────────────────────────────────────────┐
-│                                                                        │
-│  RwLock< HashMap<ActorAddress, Arc<dyn SenderT>> >                     │
-│                                                                        │
-│  For addresses belonging to external Inbox<M>, not actors.             │
-│                                                                        │
-│  ┌─ Registration ─────────────────────────────────────────────────┐    │
-│  │                                                                │    │
-│  │  Runtime.new_inbox::<M>()                                      │    │
-│  │    addr = ActorAddress::new_random()                           │    │
-│  │    receiver = Receiver::<M>::new(capacity)                     │    │
-│  │    sender   = receiver.new_sender()                            │    │
-│  │    inbox_registry.register(addr, Arc::new(sender))             │    │
-│  │    returns Inbox { addr, inner: receiver }                     │    │
-│  │                                                                │    │
-│  └────────────────────────────────────────────────────────────────┘    │
-│                                                                        │
-│  ┌─ Delivery (when address_map lookup fails) ─────────────────────┐    │
-│  │                                                                │    │
-│  │  WorkerContext.send_any(addr, msg)                             │    │
-│  │    address_map.lookup(addr) -> None                            │    │
-│  │    inbox_registry.try_deliver(addr, msg)                       │    │
-│  │      senders.read().get(addr).try_send_any(msg)                │    │
-│  │        downcast Box<Any> -> M, push into Receiver<M>           │    │
-│  │                                                                │    │
-│  └────────────────────────────────────────────────────────────────┘    │
-│                                                                        │
-│  ┌─ Consumption (user code) ──────────────────────────────────────┐    │
-│  │                                                                │    │
-│  │  let inbox = rt.new_inbox::<MyMsg>()?;                         │    │
-│  │  // later, from any thread:                                    │    │
-│  │  if let Some(msg) = inbox.try_recv() { ... }                   │    │
-│  │                                                                │    │
-│  └────────────────────────────────────────────────────────────────┘    │
-│                                                                        │
-└────────────────────────────────────────────────────────────────────────┘
-```
-
-### Full system topology
-
-```
-┌─ User Code ────────────────────────────────────────────────────────────┐
-│ rt.spawn()       rt.send_to()       inbox.try_recv()   rt.shutdown()  │
-│ rt.spawn_named() rt.ask()           rt.where_is()      rt.stop_actor()│
-│ rt.join_group()  rt.publish_to()    rt.group_members()                │
-└────┬──────────────────┬──────────────────┬──────────────────┬──────────┘
-     │                  │                  ^                  │
-     v                  v                  │                  v
-┌─ Arc<Runtime> ────────────────────────────────────────────────────────────┐
-│                                                                           │
-│ ┌───────────┐ ┌────────────┐ ┌─────────────┐ ┌────────────┐              │
-│ │AddressMap │ │ Placement  │ │InboxRegistry│ │ is_running │              │
-│ │ addr->wid │ │ load-aware │ │ addr->Sender│ │ AtomicBool │              │
-│ └─────┬─────┘ └──────┬─────┘ └──────┬──────┘ └──────┬─────┘              │
-│       │               │              │               │                    │
-│ ┌─ extension: Arc<dyn RuntimeExtension> ──────────────────────────┐      │
-│ │  StdExtension holds: NameRegistry, MonitorRegistry,             │      │
-│ │  GroupRegistry, WatchRegistry (accessed via downcast)            │      │
-│ └─────────────────────────────────┬───────────────────────────────┘      │
-│                                   │                                      │
-│ ┌─────────────────────────────────┴──────────────────────────────────┐   │
-│ │                  TickContext (borrows all above)                     │   │
-│ └──────────────────────────┬──────────────────────────────────────────┘   │
-│                            │                                              │
-│ ┌─ transfer_txs[] ────┐   │   ┌─ spawn_txs[] ──────┐                     │
-│ │ [0]: Sender<Envelope│   │   │ [0]: Sender<(A,Box)>│                     │
-│ │ [1]: Sender<Envelope│   │   │ [1]: Sender<(A,Box)>│                     │
-│ │ [2]: Sender<Envelope│   │   │ [2]: Sender<(A,Box)>│                     │
-│ └──┬──────┬──────┬────┘   │   └──┬──────┬──────┬────┘                     │
-│    │      │      │        │      │      │      │                          │
-└────┼──────┼──────┼────────┼──────┼──────┼──────┼──────────────────────────┘
-     │      │      │        │      │      │      │
-     v      v      v        │      v      v      v
-┌────────┐┌────────┐┌───────┴┐┌────────┐┌────────┐┌────────┐
-│xfer    ││xfer    ││xfer    ││ spawn  ││ spawn  ││ spawn  │
-│_rx[0]  ││_rx[1]  ││_rx[2]  ││ _rx[0] ││ _rx[1] ││ _rx[2] │
-└───┬────┘└───┬────┘└───┬────┘└───┬────┘└───┬────┘└───┬────┘
-    │         │         │         │         │         │
-    v         v         v         v         v         v
-┌─ Worker 0 ──────┐ ┌─ Worker 1 ──────┐ ┌─ Worker 2 ──────┐
-│                  │ │                  │ │                  │
-│ ┌─ pool ──────┐  │ │ ┌─ pool ──────┐  │ │ ┌─ pool ──────┐  │
-│ │ ┌──────────┐│  │ │ │ ┌──────────┐│  │ │ │ ┌──────────┐│  │
-│ │ │ slot:    ││  │ │ │ │ slot:    ││  │ │ │ │ slot:    ││  │
-│ │ │  mailbox ││  │ │ │ │  mailbox ││  │ │ │ │  mailbox ││  │
-│ │ │  actor   ││  │ │ │ │  actor   ││  │ │ │ │  actor   ││  │
-│ │ └──────────┘│  │ │ │ └──────────┘│  │ │ │ └──────────┘│  │
-│ │ ┌──────────┐│  │ │ │ ┌──────────┐│  │ │ │             │  │
-│ │ │ slot:    ││  │ │ │ │ slot:    ││  │ │ └─────────────┘  │
-│ │ │  mailbox ││  │ │ │ │  mailbox ││  │ │                  │
-│ │ │  actor   ││  │ │ │ │  actor   ││  │ │ thread 2         │
-│ │ └──────────┘│  │ │ │ └──────────┘│  │ └──────────────────┘
-│ └─────────────┘  │ │ └─────────────┘  │
-│                  │ │                  │
-│ thread 0         │ │ thread 1         │
-└──────────────────┘ └──────────────────┘
-
-Workers also send to EACH OTHER during phase 3:
-  WorkerContext.send_any()  -> transfer_txs[other_wid].try_send()
-  WorkerContext.spawn_any() -> spawn_txs[target_wid].try_send()
-```
-
-## Message Lifecycle
-
-```
-                       PRODUCERS
-       ┌──────────────────┬──────────────────────┐
-       │                  │                       │
-       v                  v                       v
-┌─────────────┐  ┌──────────────┐  ┌──────────────────────┐
-│ Runtime     │  │ ctx.send()   │  │ ctx.send()           │
-│  .send_to() │  │ same worker  │  │ other worker         │
-└──────┬──────┘  └──────┬───────┘  └──────────┬───────────┘
-       │                │                      │
-       v                v                      v
-┌─────────────┐  ┌─────────────┐  ┌──────────────────────┐
-│ transfer_tx │  │ pending_    │  │ transfer_tx          │
-│ [wid].send()│  │ local.push()│  │ [wid].send()         │
-└──────┬──────┘  └──────┬──────┘  └──────────┬───────────┘
-       │                │                     │
-       │          (end of phase 3)            │
-       │                │                     │
-       │          phase 4:                    │
-       │                │                     │
-       v                v                     v
-┌────────────────────────────────────────────────────┐
-│                                                    │
-│           pool.deliver(&addr, msg)                 │
-│                    │                               │
-│                    v                               │
-│      slot.mailbox.push_back(msg)                   │
-│                                                    │
-└───────────────────────┬────────────────────────────┘
-                        │
-                  next tick_once
-                    phase 3
-                        │
-                        v
-┌────────────────────────────────────────────────────┐
-│                                                    │
-│  msg = slot.mailbox.pop_front()                    │
-│                 │                                  │
-│                 v                                  │
-│  slot.actor.handle_any(&ctx, msg)                  │
-│                 │                                  │
-│                 v                                  │
-│  ┌──────────────────────────────────────────┐      │
-│  │ downcast Box<dyn Any> to A::Incoming     │      │
-│  │                                          │      │
-│  │ ok:  A.handle(ctx, typed_msg)            │      │
-│  │ err: silently dropped                    │      │
-│  └──────────────────────────────────────────┘      │
-│                                                    │
-└────────────────────────────────────────────────────┘
-```
-
-## Shutdown Flow
-
-```
-┌─ User Code ──────┐
-│                   │
-│  rt.shutdown()    │
-│       │           │
-└───────┼───────────┘
-        │
-        v
-┌─ Runtime ──────────────────────────────────────┐
-│                                                 │
-│  is_running.store(false, Release)               │
-│                                                 │
-└────────────────────────┬────────────────────────┘
-                         │
-       ┌─────────────────┼─────────────────┐
-       │                 │                 │
-       v                 v                 v
-┌─ Worker 0 ────┐ ┌─ Worker 1 ────┐ ┌─ Worker 2 ────┐
-│                │ │                │ │                │
-│ is_running     │ │ is_running     │ │ is_running     │
-│  .load(Acquire)│ │  .load(Acquire)│ │  .load(Acquire)│
-│   -> false     │ │   -> false     │ │   -> false     │
-│                │ │                │ │                │
-│ run() returns  │ │ run() returns  │ │ run() returns  │
-│ thread exits   │ │ thread exits   │ │ thread exits   │
-└────────────────┘ └────────────────┘ └────────────────┘
-       │                 │                 │
-       └─────────────────┼─────────────────┘
-                         │
-                         v
-               ┌─ RuntimeHandle ──┐
-               │                   │
-               │  .join()          │
-               │  waits for all    │
-               │  JoinHandles      │
-               │                   │
-               └───────────────────┘
-```
-
diff --git a/examples/dp-mnist/README.md b/examples/dp-mnist/README.md
deleted file mode 100644
index 8dc951f..0000000
--- a/examples/dp-mnist/README.md
+++ /dev/null
@@ -1,9 +0,0 @@
-# swactor-dp-mnist
-Simple demonstration of data parallel training on CPU for MNIST
-
-## usage
-To run, from this directory:
-```bash
-python run_training.py
-# uv run python run_training.py
-```
\ No newline at end of file
diff --git a/examples/dp-mnist/aggregator.py b/examples/dp-mnist/aggregator.py
deleted file mode 100644
index 88302af..0000000
--- a/examples/dp-mnist/aggregator.py
+++ /dev/null
@@ -1,82 +0,0 @@
-import numpy as np
-
-
-class Aggregator:
-    def __init__(self, num_workers, total_rounds, inbox_addr):
-        self.num_workers = num_workers
-        self.total_rounds = total_rounds
-        self.inbox_addr = inbox_addr
-        self.current_round = 0
-
-        self.worker_addrs = []
-        self.grad_buffer = []
-        self.loss_buffer = []
-        self.eval_buffer = []
-
-    def __call__(self, ctx, msg):
-        msg_type = msg["type"]
-
-        if msg_type == "init":
-            self.worker_addrs = msg["worker_addrs"]
-            self.current_round = 0
-            self._start_round(ctx)
-
-        elif msg_type == "gradients":
-            self.grad_buffer.append(msg["data"])
-            self.loss_buffer.append(msg["loss"])
-
-            if len(self.grad_buffer) == self.num_workers:
-                # Average gradients across workers
-                avg_grads = []
-                for layer_grads in zip(*self.grad_buffer):
-                    avg = np.mean(layer_grads, axis=0).tolist()
-                    avg_grads.append(avg)
-
-                avg_loss = sum(self.loss_buffer) / len(self.loss_buffer)
-
-                # Send averaged gradients to all workers
-                for addr in self.worker_addrs:
-                    ctx.send(addr, {"type": "update", "data": avg_grads})
-
-                self.current_round += 1
-
-                # Log progress periodically
-                if self.current_round % 50 == 0 or self.current_round == self.total_rounds:
-                    ctx.send(self.inbox_addr, {
-                        "type": "log",
-                        "round": self.current_round,
-                        "avg_loss": avg_loss,
-                    })
-
-                # Clear buffers
-                self.grad_buffer = []
-                self.loss_buffer = []
-
-                if self.current_round < self.total_rounds:
-                    self._start_round(ctx)
-                else:
-                    # Training done — request evaluation
-                    for addr in self.worker_addrs:
-                        ctx.send(addr, {"type": "evaluate"})
-
-        elif msg_type == "eval_result":
-            self.eval_buffer.append(msg["accuracy"])
-
-            if len(self.eval_buffer) == self.num_workers:
-                avg_acc = sum(self.eval_buffer) / len(self.eval_buffer)
-
-                # Save model from worker 0
-                ctx.send(self.worker_addrs[0], {
-                    "type": "save_model",
-                    "path": "mnist_model.pt",
-                })
-
-                ctx.send(self.inbox_addr, {
-                    "type": "done",
-                    "accuracy": avg_acc,
-                    "accuracies": list(self.eval_buffer),
-                })
-
-    def _start_round(self, ctx):
-        for addr in self.worker_addrs:
-            ctx.send(addr, {"type": "train_batch"})
diff --git a/examples/dp-mnist/pyproject.toml b/examples/dp-mnist/pyproject.toml
deleted file mode 100644
index be9f8fc..0000000
--- a/examples/dp-mnist/pyproject.toml
+++ /dev/null
@@ -1,17 +0,0 @@
-[project]
-name = "dp-mnist"
-version = "0.1.0"
-requires-python = ">=3.9"
-dependencies = [
-    "swactor",
-    "torch",
-    "torchvision",
-    "numpy",
-]
-
-[tool.uv.sources]
-swactor = { path = "../../crates/python", editable = true }
-
-[[tool.uv.index]]
-name = "pytorch-cpu"
-url = "https://download.pytorch.org/whl/cpu"
diff --git a/examples/dp-mnist/run_training.py b/examples/dp-mnist/run_training.py
deleted file mode 100644
index 866f41e..0000000
--- a/examples/dp-mnist/run_training.py
+++ /dev/null
@@ -1,108 +0,0 @@
-#!/usr/bin/env python3
-"""Data-parallel MNIST training using swactor actors.
-
-Spawns an Aggregator and two MnistWorker actors.  Workers each train on
-half the dataset; the Aggregator averages their gradients every round.
-"""
-
-import sys
-import time
-
-import torch
-from swactor import Runtime, RuntimeConfig
-
-from aggregator import Aggregator
-from worker import MnistNet, MnistWorker
-
-NUM_WORKERS = 2
-TOTAL_ROUNDS = 750
-BATCH_SIZE = 64
-LEARNING_RATE = 0.01
-
-
-def extract_weights(model):
-    """Return model parameters as a list of flat Python lists."""
-    return [p.detach().flatten().tolist() for p in model.parameters()]
-
-
-def main():
-    # 1. Create multi-threaded runtime (2 worker threads)
-    rt = Runtime(RuntimeConfig(num_threads=NUM_WORKERS))
-
-    # 2. Create main inbox for log/done messages
-    inbox = rt.inbox()
-
-    # 3. Create reference model and extract initial weights
-    ref_model = MnistNet()
-    initial_weights = extract_weights(ref_model)
-    del ref_model
-
-    # 4. Spawn Aggregator
-    agg_handler = Aggregator(
-        num_workers=NUM_WORKERS,
-        total_rounds=TOTAL_ROUNDS,
-        inbox_addr=inbox.addr,
-    )
-    agg_addr = rt.spawn(agg_handler)
-
-    # 5. Spawn workers (same initial weights, different data shards)
-    worker_addrs = []
-    for wid in range(NUM_WORKERS):
-        worker = MnistWorker(
-            agg_addr=agg_addr,
-            worker_id=wid,
-            initial_weights=initial_weights,
-            batch_size=BATCH_SIZE,
-            lr=LEARNING_RATE,
-        )
-        addr = rt.spawn(worker)
-        worker_addrs.append(addr)
-
-    # 6. Send "init" to aggregator
-    rt.send(agg_addr, {
-        "type": "init",
-        "worker_addrs": worker_addrs,
-    })
-
-    # 7. Start background worker threads
-    handle = rt.run()
-
-    t0 = time.time()
-
-    print(f"Starting data-parallel MNIST training: {TOTAL_ROUNDS} rounds, "
-          f"{NUM_WORKERS} workers, batch_size={BATCH_SIZE}, lr={LEARNING_RATE}")
-    print("-" * 60)
-
-    # 8. Poll inbox until "done"
-    done = False
-    while not done:
-        msg = inbox.try_recv()
-        if msg is None:
-            time.sleep(0.01)
-            continue
-
-        if msg["type"] == "log":
-            elapsed = time.time() - t0
-            print(f"  Round {msg['round']:>4d}/{TOTAL_ROUNDS}  "
-                  f"avg_loss={msg['avg_loss']:.4f}  "
-                  f"elapsed={elapsed:.1f}s")
-
-        elif msg["type"] == "done":
-            elapsed = time.time() - t0
-            print("-" * 60)
-            print(f"Training complete in {elapsed:.1f}s")
-            for i, acc in enumerate(msg["accuracies"]):
-                print(f"  Worker {i} accuracy: {acc:.2%}")
-            print(f"  Average accuracy:  {msg['accuracy']:.2%}")
-            print(f"Model saved to mnist_model.pt")
-            done = True
-
-    # 9. Shutdown worker threads
-    handle.shutdown()
-    handle.join()
-
-    return 0
-
-
-if __name__ == "__main__":
-    sys.exit(main())
diff --git a/examples/dp-mnist/uv.lock b/examples/dp-mnist/uv.lock
deleted file mode 100644
index caa6750..0000000
--- a/examples/dp-mnist/uv.lock
+++ /dev/null
@@ -1,930 +0,0 @@
-version = 1
-revision = 3
-requires-python = ">=3.9"
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform != 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform != 'darwin'",
-    "python_full_version >= '3.12' and sys_platform == 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform == 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform != 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform == 'darwin'",
-    "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')",
-    "python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux'",
-    "python_full_version < '3.10' and sys_platform == 'darwin'",
-]
-
-[[package]]
-name = "filelock"
-version = "3.19.1"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')",
-    "python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux'",
-    "python_full_version < '3.10' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/40/bb/0ab3e58d22305b6f5440629d20683af28959bf793d98d11950e305c1c326/filelock-3.19.1.tar.gz", hash = "sha256:66eda1888b0171c998b35be2bcc0f6d75c388a7ce20c3f3f37aa8e96c2dddf58" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/42/14/42b2651a2f46b022ccd948bca9f2d5af0fd8929c4eec235b8d6d844fbe67/filelock-3.19.1-py3-none-any.whl", hash = "sha256:d38e30481def20772f5baf097c122c3babc4fcdb7e14e57049eb9d88c6dc017d" },
-]
-
-[[package]]
-name = "filelock"
-version = "3.20.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform != 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform != 'darwin'",
-    "python_full_version >= '3.12' and sys_platform == 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform == 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform != 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/58/46/0028a82567109b5ef6e4d2a1f04a583fb513e6cf9527fcdd09afd817deeb/filelock-3.20.0.tar.gz", hash = "sha256:711e943b4ec6be42e1d4e6690b48dc175c822967466bb31c0c293f34334c13f4" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/76/91/7216b27286936c16f5b4d0c530087e4a54eead683e6b0b73dd0c64844af6/filelock-3.20.0-py3-none-any.whl", hash = "sha256:339b4732ffda5cd79b13f4e2711a31b0365ce445d95d243bb996273d072546a2" },
-]
-
-[[package]]
-name = "fsspec"
-version = "2025.10.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')",
-    "python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux'",
-    "python_full_version < '3.10' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/24/7f/2747c0d332b9acfa75dc84447a066fdf812b5a6b8d30472b74d309bfe8cb/fsspec-2025.10.0.tar.gz", hash = "sha256:b6789427626f068f9a83ca4e8a3cc050850b6c0f71f99ddb4f542b8266a26a59" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/eb/02/a6b21098b1d5d6249b7c5ab69dde30108a71e4e819d4a9778f1de1d5b70d/fsspec-2025.10.0-py3-none-any.whl", hash = "sha256:7c7712353ae7d875407f97715f0e1ffcc21e33d5b24556cb1e090ae9409ec61d" },
-]
-
-[[package]]
-name = "fsspec"
-version = "2025.12.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform != 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform != 'darwin'",
-    "python_full_version >= '3.12' and sys_platform == 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform == 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform != 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/b6/27/954057b0d1f53f086f681755207dda6de6c660ce133c829158e8e8fe7895/fsspec-2025.12.0.tar.gz", hash = "sha256:c505de011584597b1060ff778bb664c1bc022e87921b0e4f10cc9c44f9635973" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/51/c7/b64cae5dba3a1b138d7123ec36bb5ccd39d39939f18454407e5468f4763f/fsspec-2025.12.0-py3-none-any.whl", hash = "sha256:8bf1fe301b7d8acfa6e8571e3b1c3d158f909666642431cc78a1b7b4dbc5ec5b" },
-]
-
-[[package]]
-name = "jinja2"
-version = "3.1.6"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-dependencies = [
-    { name = "markupsafe" },
-]
-wheels = [
-    { url = "https://download.pytorch.org/whl/jinja2-3.1.6-py3-none-any.whl" },
-]
-
-[[package]]
-name = "markupsafe"
-version = "3.0.2"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-wheels = [
-    { url = "https://download.pytorch.org/whl/MarkupSafe-3.0.2-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:15ab75ef81add55874e7ab7055e9c397312385bd9ced94920f2802310c930396" },
-]
-
-[[package]]
-name = "mpmath"
-version = "1.3.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-sdist = { url = "https://files.pythonhosted.org/packages/e0/47/dd32fa426cc72114383ac549964eecb20ecfd886d1e5ccf5340b55b02f57/mpmath-1.3.0.tar.gz", hash = "sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/43/e3/7d92a15f894aa0c9c4b49b8ee9ac9850d6e63b03c9c32c0367a13ae62209/mpmath-1.3.0-py3-none-any.whl", hash = "sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c" },
-]
-
-[[package]]
-name = "networkx"
-version = "3.2.1"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')",
-    "python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux'",
-    "python_full_version < '3.10' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/c4/80/a84676339aaae2f1cfdf9f418701dd634aef9cc76f708ef55c36ff39c3ca/networkx-3.2.1.tar.gz", hash = "sha256:9f1bb5cf3409bf324e0a722c20bdb4c20ee39bf1c30ce8ae499c8502b0b5e0c6" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/d5/f0/8fbc882ca80cf077f1b246c0e3c3465f7f415439bdea6b899f6b19f61f70/networkx-3.2.1-py3-none-any.whl", hash = "sha256:f18c69adc97877c42332c170849c96cefa91881c99a7cb3e95b7c659ebdc1ec2" },
-]
-
-[[package]]
-name = "networkx"
-version = "3.4.2"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version == '3.10.*' and sys_platform != 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/fd/1d/06475e1cd5264c0b870ea2cc6fdb3e37177c1e565c43f56ff17a10e3937f/networkx-3.4.2.tar.gz", hash = "sha256:307c3669428c5362aab27c8a1260aa8f47c4e91d3891f48be0141738d8d053e1" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/b9/54/dd730b32ea14ea797530a4479b2ed46a6fb250f682a9cfb997e968bf0261/networkx-3.4.2-py3-none-any.whl", hash = "sha256:df5d4365b724cf81b8c6a7312509d0c22386097011ad1abe274afd5e9d3bbc5f" },
-]
-
-[[package]]
-name = "networkx"
-version = "3.6.1"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform != 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform != 'darwin'",
-    "python_full_version >= '3.12' and sys_platform == 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/6a/51/63fe664f3908c97be9d2e4f1158eb633317598cfa6e1fc14af5383f17512/networkx-3.6.1.tar.gz", hash = "sha256:26b7c357accc0c8cde558ad486283728b65b6a95d85ee1cd66bafab4c8168509" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/9e/c9/b2622292ea83fbb4ec318f5b9ab867d0a28ab43c5717bb85b0a5f6b3b0a4/networkx-3.6.1-py3-none-any.whl", hash = "sha256:d47fbf302e7d9cbbb9e2555a0d267983d2aa476bac30e90dfbe5669bd57f3762" },
-]
-
-[[package]]
-name = "numpy"
-version = "2.0.2"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')",
-    "python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux'",
-    "python_full_version < '3.10' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/a9/75/10dd1f8116a8b796cb2c737b674e02d02e80454bda953fa7e65d8c12b016/numpy-2.0.2.tar.gz", hash = "sha256:883c987dee1880e2a864ab0dc9892292582510604156762362d9326444636e78" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/21/91/3495b3237510f79f5d81f2508f9f13fea78ebfdf07538fc7444badda173d/numpy-2.0.2-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:51129a29dbe56f9ca83438b706e2e69a39892b5eda6cedcb6b0c9fdc9b0d3ece" },
-    { url = "https://files.pythonhosted.org/packages/05/33/26178c7d437a87082d11019292dce6d3fe6f0e9026b7b2309cbf3e489b1d/numpy-2.0.2-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:f15975dfec0cf2239224d80e32c3170b1d168335eaedee69da84fbe9f1f9cd04" },
-    { url = "https://files.pythonhosted.org/packages/ec/31/cc46e13bf07644efc7a4bf68df2df5fb2a1a88d0cd0da9ddc84dc0033e51/numpy-2.0.2-cp310-cp310-macosx_14_0_arm64.whl", hash = "sha256:8c5713284ce4e282544c68d1c3b2c7161d38c256d2eefc93c1d683cf47683e66" },
-    { url = "https://files.pythonhosted.org/packages/6e/16/7bfcebf27bb4f9d7ec67332ffebee4d1bf085c84246552d52dbb548600e7/numpy-2.0.2-cp310-cp310-macosx_14_0_x86_64.whl", hash = "sha256:becfae3ddd30736fe1889a37f1f580e245ba79a5855bff5f2a29cb3ccc22dd7b" },
-    { url = "https://files.pythonhosted.org/packages/f9/a3/561c531c0e8bf082c5bef509d00d56f82e0ea7e1e3e3a7fc8fa78742a6e5/numpy-2.0.2-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:2da5960c3cf0df7eafefd806d4e612c5e19358de82cb3c343631188991566ccd" },
-    { url = "https://files.pythonhosted.org/packages/fa/66/f7177ab331876200ac7563a580140643d1179c8b4b6a6b0fc9838de2a9b8/numpy-2.0.2-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:496f71341824ed9f3d2fd36cf3ac57ae2e0165c143b55c3a035ee219413f3318" },
-    { url = "https://files.pythonhosted.org/packages/25/7f/0b209498009ad6453e4efc2c65bcdf0ae08a182b2b7877d7ab38a92dc542/numpy-2.0.2-cp310-cp310-musllinux_1_1_x86_64.whl", hash = "sha256:a61ec659f68ae254e4d237816e33171497e978140353c0c2038d46e63282d0c8" },
-    { url = "https://files.pythonhosted.org/packages/3e/df/2619393b1e1b565cd2d4c4403bdd979621e2c4dea1f8532754b2598ed63b/numpy-2.0.2-cp310-cp310-musllinux_1_2_aarch64.whl", hash = "sha256:d731a1c6116ba289c1e9ee714b08a8ff882944d4ad631fd411106a30f083c326" },
-    { url = "https://files.pythonhosted.org/packages/22/ad/77e921b9f256d5da36424ffb711ae79ca3f451ff8489eeca544d0701d74a/numpy-2.0.2-cp310-cp310-win32.whl", hash = "sha256:984d96121c9f9616cd33fbd0618b7f08e0cfc9600a7ee1d6fd9b239186d19d97" },
-    { url = "https://files.pythonhosted.org/packages/10/05/3442317535028bc29cf0c0dd4c191a4481e8376e9f0db6bcf29703cadae6/numpy-2.0.2-cp310-cp310-win_amd64.whl", hash = "sha256:c7b0be4ef08607dd04da4092faee0b86607f111d5ae68036f16cc787e250a131" },
-    { url = "https://files.pythonhosted.org/packages/8b/cf/034500fb83041aa0286e0fb16e7c76e5c8b67c0711bb6e9e9737a717d5fe/numpy-2.0.2-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:49ca4decb342d66018b01932139c0961a8f9ddc7589611158cb3c27cbcf76448" },
-    { url = "https://files.pythonhosted.org/packages/4a/d9/32de45561811a4b87fbdee23b5797394e3d1504b4a7cf40c10199848893e/numpy-2.0.2-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:11a76c372d1d37437857280aa142086476136a8c0f373b2e648ab2c8f18fb195" },
-    { url = "https://files.pythonhosted.org/packages/c1/ca/2f384720020c7b244d22508cb7ab23d95f179fcfff33c31a6eeba8d6c512/numpy-2.0.2-cp311-cp311-macosx_14_0_arm64.whl", hash = "sha256:807ec44583fd708a21d4a11d94aedf2f4f3c3719035c76a2bbe1fe8e217bdc57" },
-    { url = "https://files.pythonhosted.org/packages/0e/78/a3e4f9fb6aa4e6fdca0c5428e8ba039408514388cf62d89651aade838269/numpy-2.0.2-cp311-cp311-macosx_14_0_x86_64.whl", hash = "sha256:8cafab480740e22f8d833acefed5cc87ce276f4ece12fdaa2e8903db2f82897a" },
-    { url = "https://files.pythonhosted.org/packages/a0/72/cfc3a1beb2caf4efc9d0b38a15fe34025230da27e1c08cc2eb9bfb1c7231/numpy-2.0.2-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:a15f476a45e6e5a3a79d8a14e62161d27ad897381fecfa4a09ed5322f2085669" },
-    { url = "https://files.pythonhosted.org/packages/ba/a8/c17acf65a931ce551fee11b72e8de63bf7e8a6f0e21add4c937c83563538/numpy-2.0.2-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:13e689d772146140a252c3a28501da66dfecd77490b498b168b501835041f951" },
-    { url = "https://files.pythonhosted.org/packages/ba/86/8767f3d54f6ae0165749f84648da9dcc8cd78ab65d415494962c86fac80f/numpy-2.0.2-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:9ea91dfb7c3d1c56a0e55657c0afb38cf1eeae4544c208dc465c3c9f3a7c09f9" },
-    { url = "https://files.pythonhosted.org/packages/df/87/f76450e6e1c14e5bb1eae6836478b1028e096fd02e85c1c37674606ab752/numpy-2.0.2-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:c1c9307701fec8f3f7a1e6711f9089c06e6284b3afbbcd259f7791282d660a15" },
-    { url = "https://files.pythonhosted.org/packages/5c/ca/0f0f328e1e59f73754f06e1adfb909de43726d4f24c6a3f8805f34f2b0fa/numpy-2.0.2-cp311-cp311-win32.whl", hash = "sha256:a392a68bd329eafac5817e5aefeb39038c48b671afd242710b451e76090e81f4" },
-    { url = "https://files.pythonhosted.org/packages/eb/57/3a3f14d3a759dcf9bf6e9eda905794726b758819df4663f217d658a58695/numpy-2.0.2-cp311-cp311-win_amd64.whl", hash = "sha256:286cd40ce2b7d652a6f22efdfc6d1edf879440e53e76a75955bc0c826c7e64dc" },
-    { url = "https://files.pythonhosted.org/packages/45/40/2e117be60ec50d98fa08c2f8c48e09b3edea93cfcabd5a9ff6925d54b1c2/numpy-2.0.2-cp312-cp312-macosx_10_9_x86_64.whl", hash = "sha256:df55d490dea7934f330006d0f81e8551ba6010a5bf035a249ef61a94f21c500b" },
-    { url = "https://files.pythonhosted.org/packages/46/92/1b8b8dee833f53cef3e0a3f69b2374467789e0bb7399689582314df02651/numpy-2.0.2-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:8df823f570d9adf0978347d1f926b2a867d5608f434a7cff7f7908c6570dcf5e" },
-    { url = "https://files.pythonhosted.org/packages/7f/19/e2793bde475f1edaea6945be141aef6c8b4c669b90c90a300a8954d08f0a/numpy-2.0.2-cp312-cp312-macosx_14_0_arm64.whl", hash = "sha256:9a92ae5c14811e390f3767053ff54eaee3bf84576d99a2456391401323f4ec2c" },
-    { url = "https://files.pythonhosted.org/packages/e3/ff/ddf6dac2ff0dd50a7327bcdba45cb0264d0e96bb44d33324853f781a8f3c/numpy-2.0.2-cp312-cp312-macosx_14_0_x86_64.whl", hash = "sha256:a842d573724391493a97a62ebbb8e731f8a5dcc5d285dfc99141ca15a3302d0c" },
-    { url = "https://files.pythonhosted.org/packages/72/21/67f36eac8e2d2cd652a2e69595a54128297cdcb1ff3931cfc87838874bd4/numpy-2.0.2-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:c05e238064fc0610c840d1cf6a13bf63d7e391717d247f1bf0318172e759e692" },
-    { url = "https://files.pythonhosted.org/packages/39/68/e9f1126d757653496dbc096cb429014347a36b228f5a991dae2c6b6cfd40/numpy-2.0.2-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:0123ffdaa88fa4ab64835dcbde75dcdf89c453c922f18dced6e27c90d1d0ec5a" },
-    { url = "https://files.pythonhosted.org/packages/d1/e9/1f5333281e4ebf483ba1c888b1d61ba7e78d7e910fdd8e6499667041cc35/numpy-2.0.2-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:96a55f64139912d61de9137f11bf39a55ec8faec288c75a54f93dfd39f7eb40c" },
-    { url = "https://files.pythonhosted.org/packages/71/af/a469674070c8d8408384e3012e064299f7a2de540738a8e414dcfd639996/numpy-2.0.2-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:ec9852fb39354b5a45a80bdab5ac02dd02b15f44b3804e9f00c556bf24b4bded" },
-    { url = "https://files.pythonhosted.org/packages/d0/3d/08ea9f239d0e0e939b6ca52ad403c84a2bce1bde301a8eb4888c1c1543f1/numpy-2.0.2-cp312-cp312-win32.whl", hash = "sha256:671bec6496f83202ed2d3c8fdc486a8fc86942f2e69ff0e986140339a63bcbe5" },
-    { url = "https://files.pythonhosted.org/packages/b2/b5/4ac39baebf1fdb2e72585c8352c56d063b6126be9fc95bd2bb5ef5770c20/numpy-2.0.2-cp312-cp312-win_amd64.whl", hash = "sha256:cfd41e13fdc257aa5778496b8caa5e856dc4896d4ccf01841daee1d96465467a" },
-    { url = "https://files.pythonhosted.org/packages/43/c1/41c8f6df3162b0c6ffd4437d729115704bd43363de0090c7f913cfbc2d89/numpy-2.0.2-cp39-cp39-macosx_10_9_x86_64.whl", hash = "sha256:9059e10581ce4093f735ed23f3b9d283b9d517ff46009ddd485f1747eb22653c" },
-    { url = "https://files.pythonhosted.org/packages/39/bc/fd298f308dcd232b56a4031fd6ddf11c43f9917fbc937e53762f7b5a3bb1/numpy-2.0.2-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:423e89b23490805d2a5a96fe40ec507407b8ee786d66f7328be214f9679df6dd" },
-    { url = "https://files.pythonhosted.org/packages/96/ff/06d1aa3eeb1c614eda245c1ba4fb88c483bee6520d361641331872ac4b82/numpy-2.0.2-cp39-cp39-macosx_14_0_arm64.whl", hash = "sha256:2b2955fa6f11907cf7a70dab0d0755159bca87755e831e47932367fc8f2f2d0b" },
-    { url = "https://files.pythonhosted.org/packages/2d/98/121996dcfb10a6087a05e54453e28e58694a7db62c5a5a29cee14c6e047b/numpy-2.0.2-cp39-cp39-macosx_14_0_x86_64.whl", hash = "sha256:97032a27bd9d8988b9a97a8c4d2c9f2c15a81f61e2f21404d7e8ef00cb5be729" },
-    { url = "https://files.pythonhosted.org/packages/15/31/9dffc70da6b9bbf7968f6551967fc21156207366272c2a40b4ed6008dc9b/numpy-2.0.2-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:1e795a8be3ddbac43274f18588329c72939870a16cae810c2b73461c40718ab1" },
-    { url = "https://files.pythonhosted.org/packages/b9/14/78635daab4b07c0930c919d451b8bf8c164774e6a3413aed04a6d95758ce/numpy-2.0.2-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:f26b258c385842546006213344c50655ff1555a9338e2e5e02a0756dc3e803dd" },
-    { url = "https://files.pythonhosted.org/packages/26/4c/0eeca4614003077f68bfe7aac8b7496f04221865b3a5e7cb230c9d055afd/numpy-2.0.2-cp39-cp39-musllinux_1_1_x86_64.whl", hash = "sha256:5fec9451a7789926bcf7c2b8d187292c9f93ea30284802a0ab3f5be8ab36865d" },
-    { url = "https://files.pythonhosted.org/packages/f1/46/ea25b98b13dccaebddf1a803f8c748680d972e00507cd9bc6dcdb5aa2ac1/numpy-2.0.2-cp39-cp39-musllinux_1_2_aarch64.whl", hash = "sha256:9189427407d88ff25ecf8f12469d4d39d35bee1db5d39fc5c168c6f088a6956d" },
-    { url = "https://files.pythonhosted.org/packages/c8/a6/177dd88d95ecf07e722d21008b1b40e681a929eb9e329684d449c36586b2/numpy-2.0.2-cp39-cp39-win32.whl", hash = "sha256:905d16e0c60200656500c95b6b8dca5d109e23cb24abc701d41c02d74c6b3afa" },
-    { url = "https://files.pythonhosted.org/packages/ea/2b/7fc9f4e7ae5b507c1a3a21f0f15ed03e794c1242ea8a242ac158beb56034/numpy-2.0.2-cp39-cp39-win_amd64.whl", hash = "sha256:a3f4ab0caa7f053f6797fcd4e1e25caee367db3112ef2b6ef82d749530768c73" },
-    { url = "https://files.pythonhosted.org/packages/8f/3b/df5a870ac6a3be3a86856ce195ef42eec7ae50d2a202be1f5a4b3b340e14/numpy-2.0.2-pp39-pypy39_pp73-macosx_10_9_x86_64.whl", hash = "sha256:7f0a0c6f12e07fa94133c8a67404322845220c06a9e80e85999afe727f7438b8" },
-    { url = "https://files.pythonhosted.org/packages/2c/97/51af92f18d6f6f2d9ad8b482a99fb74e142d71372da5d834b3a2747a446e/numpy-2.0.2-pp39-pypy39_pp73-macosx_14_0_x86_64.whl", hash = "sha256:312950fdd060354350ed123c0e25a71327d3711584beaef30cdaa93320c392d4" },
-    { url = "https://files.pythonhosted.org/packages/12/46/de1fbd0c1b5ccaa7f9a005b66761533e2f6a3e560096682683a223631fe9/numpy-2.0.2-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:26df23238872200f63518dd2aa984cfca675d82469535dc7162dc2ee52d9dd5c" },
-    { url = "https://files.pythonhosted.org/packages/cc/dc/d330a6faefd92b446ec0f0dfea4c3207bb1fef3c4771d19cf4543efd2c78/numpy-2.0.2-pp39-pypy39_pp73-win_amd64.whl", hash = "sha256:a46288ec55ebbd58947d31d72be2c63cbf839f0a63b49cb755022310792a3385" },
-]
-
-[[package]]
-name = "numpy"
-version = "2.2.6"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version == '3.10.*' and sys_platform != 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/76/21/7d2a95e4bba9dc13d043ee156a356c0a8f0c6309dff6b21b4d71a073b8a8/numpy-2.2.6.tar.gz", hash = "sha256:e29554e2bef54a90aa5cc07da6ce955accb83f21ab5de01a62c8478897b264fd" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/9a/3e/ed6db5be21ce87955c0cbd3009f2803f59fa08df21b5df06862e2d8e2bdd/numpy-2.2.6-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:b412caa66f72040e6d268491a59f2c43bf03eb6c96dd8f0307829feb7fa2b6fb" },
-    { url = "https://files.pythonhosted.org/packages/22/c2/4b9221495b2a132cc9d2eb862e21d42a009f5a60e45fc44b00118c174bff/numpy-2.2.6-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:8e41fd67c52b86603a91c1a505ebaef50b3314de0213461c7a6e99c9a3beff90" },
-    { url = "https://files.pythonhosted.org/packages/fd/77/dc2fcfc66943c6410e2bf598062f5959372735ffda175b39906d54f02349/numpy-2.2.6-cp310-cp310-macosx_14_0_arm64.whl", hash = "sha256:37e990a01ae6ec7fe7fa1c26c55ecb672dd98b19c3d0e1d1f326fa13cb38d163" },
-    { url = "https://files.pythonhosted.org/packages/7a/4f/1cb5fdc353a5f5cc7feb692db9b8ec2c3d6405453f982435efc52561df58/numpy-2.2.6-cp310-cp310-macosx_14_0_x86_64.whl", hash = "sha256:5a6429d4be8ca66d889b7cf70f536a397dc45ba6faeb5f8c5427935d9592e9cf" },
-    { url = "https://files.pythonhosted.org/packages/eb/17/96a3acd228cec142fcb8723bd3cc39c2a474f7dcf0a5d16731980bcafa95/numpy-2.2.6-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:efd28d4e9cd7d7a8d39074a4d44c63eda73401580c5c76acda2ce969e0a38e83" },
-    { url = "https://files.pythonhosted.org/packages/b4/63/3de6a34ad7ad6646ac7d2f55ebc6ad439dbbf9c4370017c50cf403fb19b5/numpy-2.2.6-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:fc7b73d02efb0e18c000e9ad8b83480dfcd5dfd11065997ed4c6747470ae8915" },
-    { url = "https://files.pythonhosted.org/packages/07/b6/89d837eddef52b3d0cec5c6ba0456c1bf1b9ef6a6672fc2b7873c3ec4e2e/numpy-2.2.6-cp310-cp310-musllinux_1_2_aarch64.whl", hash = "sha256:74d4531beb257d2c3f4b261bfb0fc09e0f9ebb8842d82a7b4209415896adc680" },
-    { url = "https://files.pythonhosted.org/packages/01/c8/dc6ae86e3c61cfec1f178e5c9f7858584049b6093f843bca541f94120920/numpy-2.2.6-cp310-cp310-musllinux_1_2_x86_64.whl", hash = "sha256:8fc377d995680230e83241d8a96def29f204b5782f371c532579b4f20607a289" },
-    { url = "https://files.pythonhosted.org/packages/5b/c5/0064b1b7e7c89137b471ccec1fd2282fceaae0ab3a9550f2568782d80357/numpy-2.2.6-cp310-cp310-win32.whl", hash = "sha256:b093dd74e50a8cba3e873868d9e93a85b78e0daf2e98c6797566ad8044e8363d" },
-    { url = "https://files.pythonhosted.org/packages/a3/dd/4b822569d6b96c39d1215dbae0582fd99954dcbcf0c1a13c61783feaca3f/numpy-2.2.6-cp310-cp310-win_amd64.whl", hash = "sha256:f0fd6321b839904e15c46e0d257fdd101dd7f530fe03fd6359c1ea63738703f3" },
-    { url = "https://files.pythonhosted.org/packages/da/a8/4f83e2aa666a9fbf56d6118faaaf5f1974d456b1823fda0a176eff722839/numpy-2.2.6-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:f9f1adb22318e121c5c69a09142811a201ef17ab257a1e66ca3025065b7f53ae" },
-    { url = "https://files.pythonhosted.org/packages/b3/2b/64e1affc7972decb74c9e29e5649fac940514910960ba25cd9af4488b66c/numpy-2.2.6-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:c820a93b0255bc360f53eca31a0e676fd1101f673dda8da93454a12e23fc5f7a" },
-    { url = "https://files.pythonhosted.org/packages/4a/9f/0121e375000b5e50ffdd8b25bf78d8e1a5aa4cca3f185d41265198c7b834/numpy-2.2.6-cp311-cp311-macosx_14_0_arm64.whl", hash = "sha256:3d70692235e759f260c3d837193090014aebdf026dfd167834bcba43e30c2a42" },
-    { url = "https://files.pythonhosted.org/packages/31/0d/b48c405c91693635fbe2dcd7bc84a33a602add5f63286e024d3b6741411c/numpy-2.2.6-cp311-cp311-macosx_14_0_x86_64.whl", hash = "sha256:481b49095335f8eed42e39e8041327c05b0f6f4780488f61286ed3c01368d491" },
-    { url = "https://files.pythonhosted.org/packages/52/b8/7f0554d49b565d0171eab6e99001846882000883998e7b7d9f0d98b1f934/numpy-2.2.6-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:b64d8d4d17135e00c8e346e0a738deb17e754230d7e0810ac5012750bbd85a5a" },
-    { url = "https://files.pythonhosted.org/packages/b3/dd/2238b898e51bd6d389b7389ffb20d7f4c10066d80351187ec8e303a5a475/numpy-2.2.6-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:ba10f8411898fc418a521833e014a77d3ca01c15b0c6cdcce6a0d2897e6dbbdf" },
-    { url = "https://files.pythonhosted.org/packages/83/6c/44d0325722cf644f191042bf47eedad61c1e6df2432ed65cbe28509d404e/numpy-2.2.6-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:bd48227a919f1bafbdda0583705e547892342c26fb127219d60a5c36882609d1" },
-    { url = "https://files.pythonhosted.org/packages/ae/9d/81e8216030ce66be25279098789b665d49ff19eef08bfa8cb96d4957f422/numpy-2.2.6-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:9551a499bf125c1d4f9e250377c1ee2eddd02e01eac6644c080162c0c51778ab" },
-    { url = "https://files.pythonhosted.org/packages/6a/fd/e19617b9530b031db51b0926eed5345ce8ddc669bb3bc0044b23e275ebe8/numpy-2.2.6-cp311-cp311-win32.whl", hash = "sha256:0678000bb9ac1475cd454c6b8c799206af8107e310843532b04d49649c717a47" },
-    { url = "https://files.pythonhosted.org/packages/31/0a/f354fb7176b81747d870f7991dc763e157a934c717b67b58456bc63da3df/numpy-2.2.6-cp311-cp311-win_amd64.whl", hash = "sha256:e8213002e427c69c45a52bbd94163084025f533a55a59d6f9c5b820774ef3303" },
-    { url = "https://files.pythonhosted.org/packages/82/5d/c00588b6cf18e1da539b45d3598d3557084990dcc4331960c15ee776ee41/numpy-2.2.6-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:41c5a21f4a04fa86436124d388f6ed60a9343a6f767fced1a8a71c3fbca038ff" },
-    { url = "https://files.pythonhosted.org/packages/66/ee/560deadcdde6c2f90200450d5938f63a34b37e27ebff162810f716f6a230/numpy-2.2.6-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:de749064336d37e340f640b05f24e9e3dd678c57318c7289d222a8a2f543e90c" },
-    { url = "https://files.pythonhosted.org/packages/3c/65/4baa99f1c53b30adf0acd9a5519078871ddde8d2339dc5a7fde80d9d87da/numpy-2.2.6-cp312-cp312-macosx_14_0_arm64.whl", hash = "sha256:894b3a42502226a1cac872f840030665f33326fc3dac8e57c607905773cdcde3" },
-    { url = "https://files.pythonhosted.org/packages/cc/89/e5a34c071a0570cc40c9a54eb472d113eea6d002e9ae12bb3a8407fb912e/numpy-2.2.6-cp312-cp312-macosx_14_0_x86_64.whl", hash = "sha256:71594f7c51a18e728451bb50cc60a3ce4e6538822731b2933209a1f3614e9282" },
-    { url = "https://files.pythonhosted.org/packages/f8/35/8c80729f1ff76b3921d5c9487c7ac3de9b2a103b1cd05e905b3090513510/numpy-2.2.6-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:f2618db89be1b4e05f7a1a847a9c1c0abd63e63a1607d892dd54668dd92faf87" },
-    { url = "https://files.pythonhosted.org/packages/8c/3d/1e1db36cfd41f895d266b103df00ca5b3cbe965184df824dec5c08c6b803/numpy-2.2.6-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:fd83c01228a688733f1ded5201c678f0c53ecc1006ffbc404db9f7a899ac6249" },
-    { url = "https://files.pythonhosted.org/packages/61/c6/03ed30992602c85aa3cd95b9070a514f8b3c33e31124694438d88809ae36/numpy-2.2.6-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:37c0ca431f82cd5fa716eca9506aefcabc247fb27ba69c5062a6d3ade8cf8f49" },
-    { url = "https://files.pythonhosted.org/packages/b7/25/5761d832a81df431e260719ec45de696414266613c9ee268394dd5ad8236/numpy-2.2.6-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:fe27749d33bb772c80dcd84ae7e8df2adc920ae8297400dabec45f0dedb3f6de" },
-    { url = "https://files.pythonhosted.org/packages/57/0a/72d5a3527c5ebffcd47bde9162c39fae1f90138c961e5296491ce778e682/numpy-2.2.6-cp312-cp312-win32.whl", hash = "sha256:4eeaae00d789f66c7a25ac5f34b71a7035bb474e679f410e5e1a94deb24cf2d4" },
-    { url = "https://files.pythonhosted.org/packages/36/fa/8c9210162ca1b88529ab76b41ba02d433fd54fecaf6feb70ef9f124683f1/numpy-2.2.6-cp312-cp312-win_amd64.whl", hash = "sha256:c1f9540be57940698ed329904db803cf7a402f3fc200bfe599334c9bd84a40b2" },
-    { url = "https://files.pythonhosted.org/packages/f9/5c/6657823f4f594f72b5471f1db1ab12e26e890bb2e41897522d134d2a3e81/numpy-2.2.6-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:0811bb762109d9708cca4d0b13c4f67146e3c3b7cf8d34018c722adb2d957c84" },
-    { url = "https://files.pythonhosted.org/packages/dc/9e/14520dc3dadf3c803473bd07e9b2bd1b69bc583cb2497b47000fed2fa92f/numpy-2.2.6-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:287cc3162b6f01463ccd86be154f284d0893d2b3ed7292439ea97eafa8170e0b" },
-    { url = "https://files.pythonhosted.org/packages/4f/06/7e96c57d90bebdce9918412087fc22ca9851cceaf5567a45c1f404480e9e/numpy-2.2.6-cp313-cp313-macosx_14_0_arm64.whl", hash = "sha256:f1372f041402e37e5e633e586f62aa53de2eac8d98cbfb822806ce4bbefcb74d" },
-    { url = "https://files.pythonhosted.org/packages/73/ed/63d920c23b4289fdac96ddbdd6132e9427790977d5457cd132f18e76eae0/numpy-2.2.6-cp313-cp313-macosx_14_0_x86_64.whl", hash = "sha256:55a4d33fa519660d69614a9fad433be87e5252f4b03850642f88993f7b2ca566" },
-    { url = "https://files.pythonhosted.org/packages/85/c5/e19c8f99d83fd377ec8c7e0cf627a8049746da54afc24ef0a0cb73d5dfb5/numpy-2.2.6-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:f92729c95468a2f4f15e9bb94c432a9229d0d50de67304399627a943201baa2f" },
-    { url = "https://files.pythonhosted.org/packages/19/49/4df9123aafa7b539317bf6d342cb6d227e49f7a35b99c287a6109b13dd93/numpy-2.2.6-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:1bc23a79bfabc5d056d106f9befb8d50c31ced2fbc70eedb8155aec74a45798f" },
-    { url = "https://files.pythonhosted.org/packages/b2/6c/04b5f47f4f32f7c2b0e7260442a8cbcf8168b0e1a41ff1495da42f42a14f/numpy-2.2.6-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:e3143e4451880bed956e706a3220b4e5cf6172ef05fcc397f6f36a550b1dd868" },
-    { url = "https://files.pythonhosted.org/packages/17/0a/5cd92e352c1307640d5b6fec1b2ffb06cd0dabe7d7b8227f97933d378422/numpy-2.2.6-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:b4f13750ce79751586ae2eb824ba7e1e8dba64784086c98cdbbcc6a42112ce0d" },
-    { url = "https://files.pythonhosted.org/packages/f0/3b/5cba2b1d88760ef86596ad0f3d484b1cbff7c115ae2429678465057c5155/numpy-2.2.6-cp313-cp313-win32.whl", hash = "sha256:5beb72339d9d4fa36522fc63802f469b13cdbe4fdab4a288f0c441b74272ebfd" },
-    { url = "https://files.pythonhosted.org/packages/cb/3b/d58c12eafcb298d4e6d0d40216866ab15f59e55d148a5658bb3132311fcf/numpy-2.2.6-cp313-cp313-win_amd64.whl", hash = "sha256:b0544343a702fa80c95ad5d3d608ea3599dd54d4632df855e4c8d24eb6ecfa1c" },
-    { url = "https://files.pythonhosted.org/packages/6b/9e/4bf918b818e516322db999ac25d00c75788ddfd2d2ade4fa66f1f38097e1/numpy-2.2.6-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:0bca768cd85ae743b2affdc762d617eddf3bcf8724435498a1e80132d04879e6" },
-    { url = "https://files.pythonhosted.org/packages/61/66/d2de6b291507517ff2e438e13ff7b1e2cdbdb7cb40b3ed475377aece69f9/numpy-2.2.6-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:fc0c5673685c508a142ca65209b4e79ed6740a4ed6b2267dbba90f34b0b3cfda" },
-    { url = "https://files.pythonhosted.org/packages/e4/25/480387655407ead912e28ba3a820bc69af9adf13bcbe40b299d454ec011f/numpy-2.2.6-cp313-cp313t-macosx_14_0_arm64.whl", hash = "sha256:5bd4fc3ac8926b3819797a7c0e2631eb889b4118a9898c84f585a54d475b7e40" },
-    { url = "https://files.pythonhosted.org/packages/aa/4a/6e313b5108f53dcbf3aca0c0f3e9c92f4c10ce57a0a721851f9785872895/numpy-2.2.6-cp313-cp313t-macosx_14_0_x86_64.whl", hash = "sha256:fee4236c876c4e8369388054d02d0e9bb84821feb1a64dd59e137e6511a551f8" },
-    { url = "https://files.pythonhosted.org/packages/b7/30/172c2d5c4be71fdf476e9de553443cf8e25feddbe185e0bd88b096915bcc/numpy-2.2.6-cp313-cp313t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:e1dda9c7e08dc141e0247a5b8f49cf05984955246a327d4c48bda16821947b2f" },
-    { url = "https://files.pythonhosted.org/packages/12/fb/9e743f8d4e4d3c710902cf87af3512082ae3d43b945d5d16563f26ec251d/numpy-2.2.6-cp313-cp313t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:f447e6acb680fd307f40d3da4852208af94afdfab89cf850986c3ca00562f4fa" },
-    { url = "https://files.pythonhosted.org/packages/12/75/ee20da0e58d3a66f204f38916757e01e33a9737d0b22373b3eb5a27358f9/numpy-2.2.6-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:389d771b1623ec92636b0786bc4ae56abafad4a4c513d36a55dce14bd9ce8571" },
-    { url = "https://files.pythonhosted.org/packages/76/95/bef5b37f29fc5e739947e9ce5179ad402875633308504a52d188302319c8/numpy-2.2.6-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:8e9ace4a37db23421249ed236fdcdd457d671e25146786dfc96835cd951aa7c1" },
-    { url = "https://files.pythonhosted.org/packages/09/04/f2f83279d287407cf36a7a8053a5abe7be3622a4363337338f2585e4afda/numpy-2.2.6-cp313-cp313t-win32.whl", hash = "sha256:038613e9fb8c72b0a41f025a7e4c3f0b7a1b5d768ece4796b674c8f3fe13efff" },
-    { url = "https://files.pythonhosted.org/packages/67/0e/35082d13c09c02c011cf21570543d202ad929d961c02a147493cb0c2bdf5/numpy-2.2.6-cp313-cp313t-win_amd64.whl", hash = "sha256:6031dd6dfecc0cf9f668681a37648373bddd6421fff6c66ec1624eed0180ee06" },
-    { url = "https://files.pythonhosted.org/packages/9e/3b/d94a75f4dbf1ef5d321523ecac21ef23a3cd2ac8b78ae2aac40873590229/numpy-2.2.6-pp310-pypy310_pp73-macosx_10_15_x86_64.whl", hash = "sha256:0b605b275d7bd0c640cad4e5d30fa701a8d59302e127e5f79138ad62762c3e3d" },
-    { url = "https://files.pythonhosted.org/packages/17/f4/09b2fa1b58f0fb4f7c7963a1649c64c4d315752240377ed74d9cd878f7b5/numpy-2.2.6-pp310-pypy310_pp73-macosx_14_0_x86_64.whl", hash = "sha256:7befc596a7dc9da8a337f79802ee8adb30a552a94f792b9c9d18c840055907db" },
-    { url = "https://files.pythonhosted.org/packages/af/30/feba75f143bdc868a1cc3f44ccfa6c4b9ec522b36458e738cd00f67b573f/numpy-2.2.6-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:ce47521a4754c8f4593837384bd3424880629f718d87c5d44f8ed763edd63543" },
-    { url = "https://files.pythonhosted.org/packages/37/48/ac2a9584402fb6c0cd5b5d1a91dcf176b15760130dd386bbafdbfe3640bf/numpy-2.2.6-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:d042d24c90c41b54fd506da306759e06e568864df8ec17ccc17e9e884634fd00" },
-]
-
-[[package]]
-name = "numpy"
-version = "2.3.5"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform != 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform != 'darwin'",
-    "python_full_version >= '3.12' and sys_platform == 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/76/65/21b3bc86aac7b8f2862db1e808f1ea22b028e30a225a34a5ede9bf8678f2/numpy-2.3.5.tar.gz", hash = "sha256:784db1dcdab56bf0517743e746dfb0f885fc68d948aba86eeec2cba234bdf1c0" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/43/77/84dd1d2e34d7e2792a236ba180b5e8fcc1e3e414e761ce0253f63d7f572e/numpy-2.3.5-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:de5672f4a7b200c15a4127042170a694d4df43c992948f5e1af57f0174beed10" },
-    { url = "https://files.pythonhosted.org/packages/2a/ea/25e26fa5837106cde46ae7d0b667e20f69cbbc0efd64cba8221411ab26ae/numpy-2.3.5-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:acfd89508504a19ed06ef963ad544ec6664518c863436306153e13e94605c218" },
-    { url = "https://files.pythonhosted.org/packages/4d/1a/e85f0eea4cf03d6a0228f5c0256b53f2df4bc794706e7df019fc622e47f1/numpy-2.3.5-cp311-cp311-macosx_14_0_arm64.whl", hash = "sha256:ffe22d2b05504f786c867c8395de703937f934272eb67586817b46188b4ded6d" },
-    { url = "https://files.pythonhosted.org/packages/5c/bb/35ef04afd567f4c989c2060cde39211e4ac5357155c1833bcd1166055c61/numpy-2.3.5-cp311-cp311-macosx_14_0_x86_64.whl", hash = "sha256:872a5cf366aec6bb1147336480fef14c9164b154aeb6542327de4970282cd2f5" },
-    { url = "https://files.pythonhosted.org/packages/f2/2b/05bbeb06e2dff5eab512dfc678b1cc5ee94d8ac5956a0885c64b6b26252b/numpy-2.3.5-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:3095bdb8dd297e5920b010e96134ed91d852d81d490e787beca7e35ae1d89cf7" },
-    { url = "https://files.pythonhosted.org/packages/65/fb/2b23769462b34398d9326081fad5655198fcf18966fcb1f1e49db44fbf31/numpy-2.3.5-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:8cba086a43d54ca804ce711b2a940b16e452807acebe7852ff327f1ecd49b0d4" },
-    { url = "https://files.pythonhosted.org/packages/ac/14/085f4cf05fc3f1e8aa95e85404e984ffca9b2275a5dc2b1aae18a67538b8/numpy-2.3.5-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:6cf9b429b21df6b99f4dee7a1218b8b7ffbbe7df8764dc0bd60ce8a0708fed1e" },
-    { url = "https://files.pythonhosted.org/packages/6f/3b/1f73994904142b2aa290449b3bb99772477b5fd94d787093e4f24f5af763/numpy-2.3.5-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:396084a36abdb603546b119d96528c2f6263921c50df3c8fd7cb28873a237748" },
-    { url = "https://files.pythonhosted.org/packages/cd/b9/cf6649b2124f288309ffc353070792caf42ad69047dcc60da85ee85fea58/numpy-2.3.5-cp311-cp311-win32.whl", hash = "sha256:b0c7088a73aef3d687c4deef8452a3ac7c1be4e29ed8bf3b366c8111128ac60c" },
-    { url = "https://files.pythonhosted.org/packages/aa/44/9fe81ae1dcc29c531843852e2874080dc441338574ccc4306b39e2ff6e59/numpy-2.3.5-cp311-cp311-win_amd64.whl", hash = "sha256:a414504bef8945eae5f2d7cb7be2d4af77c5d1cb5e20b296c2c25b61dff2900c" },
-    { url = "https://files.pythonhosted.org/packages/6d/a7/f99a41553d2da82a20a2f22e93c94f928e4490bb447c9ff3c4ff230581d3/numpy-2.3.5-cp311-cp311-win_arm64.whl", hash = "sha256:0cd00b7b36e35398fa2d16af7b907b65304ef8bb4817a550e06e5012929830fa" },
-    { url = "https://files.pythonhosted.org/packages/44/37/e669fe6cbb2b96c62f6bbedc6a81c0f3b7362f6a59230b23caa673a85721/numpy-2.3.5-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:74ae7b798248fe62021dbf3c914245ad45d1a6b0cb4a29ecb4b31d0bfbc4cc3e" },
-    { url = "https://files.pythonhosted.org/packages/c5/65/df0db6c097892c9380851ab9e44b52d4f7ba576b833996e0080181c0c439/numpy-2.3.5-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:ee3888d9ff7c14604052b2ca5535a30216aa0a58e948cdd3eeb8d3415f638769" },
-    { url = "https://files.pythonhosted.org/packages/5b/e1/1ee06e70eb2136797abe847d386e7c0e830b67ad1d43f364dd04fa50d338/numpy-2.3.5-cp312-cp312-macosx_14_0_arm64.whl", hash = "sha256:612a95a17655e213502f60cfb9bf9408efdc9eb1d5f50535cc6eb365d11b42b5" },
-    { url = "https://files.pythonhosted.org/packages/6d/9c/1ca85fb86708724275103b81ec4cf1ac1d08f465368acfc8da7ab545bdae/numpy-2.3.5-cp312-cp312-macosx_14_0_x86_64.whl", hash = "sha256:3101e5177d114a593d79dd79658650fe28b5a0d8abeb8ce6f437c0e6df5be1a4" },
-    { url = "https://files.pythonhosted.org/packages/74/78/fcd41e5a0ce4f3f7b003da85825acddae6d7ecb60cf25194741b036ca7d6/numpy-2.3.5-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:8b973c57ff8e184109db042c842423ff4f60446239bd585a5131cc47f06f789d" },
-    { url = "https://files.pythonhosted.org/packages/b6/23/2a1b231b8ff672b4c450dac27164a8b2ca7d9b7144f9c02d2396518352eb/numpy-2.3.5-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:0d8163f43acde9a73c2a33605353a4f1bc4798745a8b1d73183b28e5b435ae28" },
-    { url = "https://files.pythonhosted.org/packages/a0/c5/5ad26fbfbe2012e190cc7d5003e4d874b88bb18861d0829edc140a713021/numpy-2.3.5-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:51c1e14eb1e154ebd80e860722f9e6ed6ec89714ad2db2d3aa33c31d7c12179b" },
-    { url = "https://files.pythonhosted.org/packages/d2/fa/dd48e225c46c819288148d9d060b047fd2a6fb1eb37eae25112ee4cb4453/numpy-2.3.5-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:b46b4ec24f7293f23adcd2d146960559aaf8020213de8ad1909dba6c013bf89c" },
-    { url = "https://files.pythonhosted.org/packages/05/79/ccbd23a75862d95af03d28b5c6901a1b7da4803181513d52f3b86ed9446e/numpy-2.3.5-cp312-cp312-win32.whl", hash = "sha256:3997b5b3c9a771e157f9aae01dd579ee35ad7109be18db0e85dbdbe1de06e952" },
-    { url = "https://files.pythonhosted.org/packages/2d/57/8aeaf160312f7f489dea47ab61e430b5cb051f59a98ae68b7133ce8fa06a/numpy-2.3.5-cp312-cp312-win_amd64.whl", hash = "sha256:86945f2ee6d10cdfd67bcb4069c1662dd711f7e2a4343db5cecec06b87cf31aa" },
-    { url = "https://files.pythonhosted.org/packages/78/a6/aae5cc2ca78c45e64b9ef22f089141d661516856cf7c8a54ba434576900d/numpy-2.3.5-cp312-cp312-win_arm64.whl", hash = "sha256:f28620fe26bee16243be2b7b874da327312240a7cdc38b769a697578d2100013" },
-    { url = "https://files.pythonhosted.org/packages/db/69/9cde09f36da4b5a505341180a3f2e6fadc352fd4d2b7096ce9778db83f1a/numpy-2.3.5-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:d0f23b44f57077c1ede8c5f26b30f706498b4862d3ff0a7298b8411dd2f043ff" },
-    { url = "https://files.pythonhosted.org/packages/79/fb/f505c95ceddd7027347b067689db71ca80bd5ecc926f913f1a23e65cf09b/numpy-2.3.5-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:aa5bc7c5d59d831d9773d1170acac7893ce3a5e130540605770ade83280e7188" },
-    { url = "https://files.pythonhosted.org/packages/78/da/8c7738060ca9c31b30e9301ee0cf6c5ffdbf889d9593285a1cead337f9a5/numpy-2.3.5-cp313-cp313-macosx_14_0_arm64.whl", hash = "sha256:ccc933afd4d20aad3c00bcef049cb40049f7f196e0397f1109dba6fed63267b0" },
-    { url = "https://files.pythonhosted.org/packages/a4/b4/ee5bb2537fb9430fd2ef30a616c3672b991a4129bb1c7dcc42aa0abbe5d7/numpy-2.3.5-cp313-cp313-macosx_14_0_x86_64.whl", hash = "sha256:afaffc4393205524af9dfa400fa250143a6c3bc646c08c9f5e25a9f4b4d6a903" },
-    { url = "https://files.pythonhosted.org/packages/95/03/dc0723a013c7d7c19de5ef29e932c3081df1c14ba582b8b86b5de9db7f0f/numpy-2.3.5-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:9c75442b2209b8470d6d5d8b1c25714270686f14c749028d2199c54e29f20b4d" },
-    { url = "https://files.pythonhosted.org/packages/f5/10/ca162f45a102738958dcec8023062dad0cbc17d1ab99d68c4e4a6c45fb2b/numpy-2.3.5-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:11e06aa0af8c0f05104d56450d6093ee639e15f24ecf62d417329d06e522e017" },
-    { url = "https://files.pythonhosted.org/packages/2a/51/c1e29be863588db58175175f057286900b4b3327a1351e706d5e0f8dd679/numpy-2.3.5-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:ed89927b86296067b4f81f108a2271d8926467a8868e554eaf370fc27fa3ccaf" },
-    { url = "https://files.pythonhosted.org/packages/83/68/8236589d4dbb87253d28259d04d9b814ec0ecce7cb1c7fed29729f4c3a78/numpy-2.3.5-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:51c55fe3451421f3a6ef9a9c1439e82101c57a2c9eab9feb196a62b1a10b58ce" },
-    { url = "https://files.pythonhosted.org/packages/40/56/2932d75b6f13465239e3b7b7e511be27f1b8161ca2510854f0b6e521c395/numpy-2.3.5-cp313-cp313-win32.whl", hash = "sha256:1978155dd49972084bd6ef388d66ab70f0c323ddee6f693d539376498720fb7e" },
-    { url = "https://files.pythonhosted.org/packages/0c/88/e2eaa6cffb115b85ed7c7c87775cb8bcf0816816bc98ca8dbfa2ee33fe6e/numpy-2.3.5-cp313-cp313-win_amd64.whl", hash = "sha256:00dc4e846108a382c5869e77c6ed514394bdeb3403461d25a829711041217d5b" },
-    { url = "https://files.pythonhosted.org/packages/8f/88/3f41e13a44ebd4034ee17baa384acac29ba6a4fcc2aca95f6f08ca0447d1/numpy-2.3.5-cp313-cp313-win_arm64.whl", hash = "sha256:0472f11f6ec23a74a906a00b48a4dcf3849209696dff7c189714511268d103ae" },
-    { url = "https://files.pythonhosted.org/packages/13/cb/71744144e13389d577f867f745b7df2d8489463654a918eea2eeb166dfc9/numpy-2.3.5-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:414802f3b97f3c1eef41e530aaba3b3c1620649871d8cb38c6eaff034c2e16bd" },
-    { url = "https://files.pythonhosted.org/packages/71/80/ba9dc6f2a4398e7f42b708a7fdc841bb638d353be255655498edbf9a15a8/numpy-2.3.5-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:5ee6609ac3604fa7780e30a03e5e241a7956f8e2fcfe547d51e3afa5247ac47f" },
-    { url = "https://files.pythonhosted.org/packages/2e/6d/db2151b9f64264bcceccd51741aa39b50150de9b602d98ecfe7e0c4bff39/numpy-2.3.5-cp313-cp313t-macosx_14_0_arm64.whl", hash = "sha256:86d835afea1eaa143012a2d7a3f45a3adce2d7adc8b4961f0b362214d800846a" },
-    { url = "https://files.pythonhosted.org/packages/80/ae/429bacace5ccad48a14c4ae5332f6aa8ab9f69524193511d60ccdfdc65fa/numpy-2.3.5-cp313-cp313t-macosx_14_0_x86_64.whl", hash = "sha256:30bc11310e8153ca664b14c5f1b73e94bd0503681fcf136a163de856f3a50139" },
-    { url = "https://files.pythonhosted.org/packages/74/5b/1919abf32d8722646a38cd527bc3771eb229a32724ee6ba340ead9b92249/numpy-2.3.5-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:1062fde1dcf469571705945b0f221b73928f34a20c904ffb45db101907c3454e" },
-    { url = "https://files.pythonhosted.org/packages/a5/87/6831980559434973bebc30cd9c1f21e541a0f2b0c280d43d3afd909b66d0/numpy-2.3.5-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:ce581db493ea1a96c0556360ede6607496e8bf9b3a8efa66e06477267bc831e9" },
-    { url = "https://files.pythonhosted.org/packages/dd/91/c797f544491ee99fd00495f12ebb7802c440c1915811d72ac5b4479a3356/numpy-2.3.5-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:cc8920d2ec5fa99875b670bb86ddeb21e295cb07aa331810d9e486e0b969d946" },
-    { url = "https://files.pythonhosted.org/packages/74/a6/54da03253afcbe7a72785ec4da9c69fb7a17710141ff9ac5fcb2e32dbe64/numpy-2.3.5-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:9ee2197ef8c4f0dfe405d835f3b6a14f5fee7782b5de51ba06fb65fc9b36e9f1" },
-    { url = "https://files.pythonhosted.org/packages/80/e9/aff53abbdd41b0ecca94285f325aff42357c6b5abc482a3fcb4994290b18/numpy-2.3.5-cp313-cp313t-win32.whl", hash = "sha256:70b37199913c1bd300ff6e2693316c6f869c7ee16378faf10e4f5e3275b299c3" },
-    { url = "https://files.pythonhosted.org/packages/d5/81/50613fec9d4de5480de18d4f8ef59ad7e344d497edbef3cfd80f24f98461/numpy-2.3.5-cp313-cp313t-win_amd64.whl", hash = "sha256:b501b5fa195cc9e24fe102f21ec0a44dffc231d2af79950b451e0d99cea02234" },
-    { url = "https://files.pythonhosted.org/packages/bb/ab/08fd63b9a74303947f34f0bd7c5903b9c5532c2d287bead5bdf4c556c486/numpy-2.3.5-cp313-cp313t-win_arm64.whl", hash = "sha256:a80afd79f45f3c4a7d341f13acbe058d1ca8ac017c165d3fa0d3de6bc1a079d7" },
-    { url = "https://files.pythonhosted.org/packages/ba/97/1a914559c19e32d6b2e233cf9a6a114e67c856d35b1d6babca571a3e880f/numpy-2.3.5-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:bf06bc2af43fa8d32d30fae16ad965663e966b1a3202ed407b84c989c3221e82" },
-    { url = "https://files.pythonhosted.org/packages/57/d4/51233b1c1b13ecd796311216ae417796b88b0616cfd8a33ae4536330748a/numpy-2.3.5-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:052e8c42e0c49d2575621c158934920524f6c5da05a1d3b9bab5d8e259e045f0" },
-    { url = "https://files.pythonhosted.org/packages/45/98/2fe46c5c2675b8306d0b4a3ec3494273e93e1226a490f766e84298576956/numpy-2.3.5-cp314-cp314-macosx_14_0_arm64.whl", hash = "sha256:1ed1ec893cff7040a02c8aa1c8611b94d395590d553f6b53629a4461dc7f7b63" },
-    { url = "https://files.pythonhosted.org/packages/ce/0e/0698378989bb0ac5f1660c81c78ab1fe5476c1a521ca9ee9d0710ce54099/numpy-2.3.5-cp314-cp314-macosx_14_0_x86_64.whl", hash = "sha256:2dcd0808a421a482a080f89859a18beb0b3d1e905b81e617a188bd80422d62e9" },
-    { url = "https://files.pythonhosted.org/packages/5e/a6/9ca0eecc489640615642a6cbc0ca9e10df70df38c4d43f5a928ff18d8827/numpy-2.3.5-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:727fd05b57df37dc0bcf1a27767a3d9a78cbbc92822445f32cc3436ba797337b" },
-    { url = "https://files.pythonhosted.org/packages/c8/f6/07ec185b90ec9d7217a00eeeed7383b73d7e709dae2a9a021b051542a708/numpy-2.3.5-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:fffe29a1ef00883599d1dc2c51aa2e5d80afe49523c261a74933df395c15c520" },
-    { url = "https://files.pythonhosted.org/packages/75/37/164071d1dde6a1a84c9b8e5b414fa127981bad47adf3a6b7e23917e52190/numpy-2.3.5-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:8f7f0e05112916223d3f438f293abf0727e1181b5983f413dfa2fefc4098245c" },
-    { url = "https://files.pythonhosted.org/packages/08/3c/f18b82a406b04859eb026d204e4e1773eb41c5be58410f41ffa511d114ae/numpy-2.3.5-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:2e2eb32ddb9ccb817d620ac1d8dae7c3f641c1e5f55f531a33e8ab97960a75b8" },
-    { url = "https://files.pythonhosted.org/packages/40/79/f82f572bf44cf0023a2fe8588768e23e1592585020d638999f15158609e1/numpy-2.3.5-cp314-cp314-win32.whl", hash = "sha256:66f85ce62c70b843bab1fb14a05d5737741e74e28c7b8b5a064de10142fad248" },
-    { url = "https://files.pythonhosted.org/packages/a3/2e/235b4d96619931192c91660805e5e49242389742a7a82c27665021db690c/numpy-2.3.5-cp314-cp314-win_amd64.whl", hash = "sha256:e6a0bc88393d65807d751a614207b7129a310ca4fe76a74e5c7da5fa5671417e" },
-    { url = "https://files.pythonhosted.org/packages/07/2b/29fd75ce45d22a39c61aad74f3d718e7ab67ccf839ca8b60866054eb15f8/numpy-2.3.5-cp314-cp314-win_arm64.whl", hash = "sha256:aeffcab3d4b43712bb7a60b65f6044d444e75e563ff6180af8f98dd4b905dfd2" },
-    { url = "https://files.pythonhosted.org/packages/17/e1/f6a721234ebd4d87084cfa68d081bcba2f5cfe1974f7de4e0e8b9b2a2ba1/numpy-2.3.5-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:17531366a2e3a9e30762c000f2c43a9aaa05728712e25c11ce1dbe700c53ad41" },
-    { url = "https://files.pythonhosted.org/packages/5c/1c/baf7ffdc3af9c356e1c135e57ab7cf8d247931b9554f55c467efe2c69eff/numpy-2.3.5-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:d21644de1b609825ede2f48be98dfde4656aefc713654eeee280e37cadc4e0ad" },
-    { url = "https://files.pythonhosted.org/packages/74/91/f7f0295151407ddc9ba34e699013c32c3c91944f9b35fcf9281163dc1468/numpy-2.3.5-cp314-cp314t-macosx_14_0_arm64.whl", hash = "sha256:c804e3a5aba5460c73955c955bdbd5c08c354954e9270a2c1565f62e866bdc39" },
-    { url = "https://files.pythonhosted.org/packages/2e/3b/78aebf345104ec50dd50a4d06ddeb46a9ff5261c33bcc58b1c4f12f85ec2/numpy-2.3.5-cp314-cp314t-macosx_14_0_x86_64.whl", hash = "sha256:cc0a57f895b96ec78969c34f682c602bf8da1a0270b09bc65673df2e7638ec20" },
-    { url = "https://files.pythonhosted.org/packages/02/c6/7c34b528740512e57ef1b7c8337ab0b4f0bddf34c723b8996c675bc2bc91/numpy-2.3.5-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:900218e456384ea676e24ea6a0417f030a3b07306d29d7ad843957b40a9d8d52" },
-    { url = "https://files.pythonhosted.org/packages/80/35/09d433c5262bc32d725bafc619e095b6a6651caf94027a03da624146f655/numpy-2.3.5-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:09a1bea522b25109bf8e6f3027bd810f7c1085c64a0c7ce050c1676ad0ba010b" },
-    { url = "https://files.pythonhosted.org/packages/7a/ab/6a7b259703c09a88804fa2430b43d6457b692378f6b74b356155283566ac/numpy-2.3.5-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:04822c00b5fd0323c8166d66c701dc31b7fbd252c100acd708c48f763968d6a3" },
-    { url = "https://files.pythonhosted.org/packages/c2/88/330da2071e8771e60d1038166ff9d73f29da37b01ec3eb43cb1427464e10/numpy-2.3.5-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:d6889ec4ec662a1a37eb4b4fb26b6100841804dac55bd9df579e326cdc146227" },
-    { url = "https://files.pythonhosted.org/packages/51/41/851c4b4082402d9ea860c3626db5d5df47164a712cb23b54be028b184c1c/numpy-2.3.5-cp314-cp314t-win32.whl", hash = "sha256:93eebbcf1aafdf7e2ddd44c2923e2672e1010bddc014138b229e49725b4d6be5" },
-    { url = "https://files.pythonhosted.org/packages/90/30/d48bde1dfd93332fa557cff1972fbc039e055a52021fbef4c2c4b1eefd17/numpy-2.3.5-cp314-cp314t-win_amd64.whl", hash = "sha256:c8a9958e88b65c3b27e22ca2a076311636850b612d6bbfb76e8d156aacde2aaf" },
-    { url = "https://files.pythonhosted.org/packages/2d/fd/4b5eb0b3e888d86aee4d198c23acec7d214baaf17ea93c1adec94c9518b9/numpy-2.3.5-cp314-cp314t-win_arm64.whl", hash = "sha256:6203fdf9f3dc5bdaed7319ad8698e685c7a3be10819f41d32a0723e611733b42" },
-    { url = "https://files.pythonhosted.org/packages/c6/65/f9dea8e109371ade9c782b4e4756a82edf9d3366bca495d84d79859a0b79/numpy-2.3.5-pp311-pypy311_pp73-macosx_10_15_x86_64.whl", hash = "sha256:f0963b55cdd70fad460fa4c1341f12f976bb26cb66021a5580329bd498988310" },
-    { url = "https://files.pythonhosted.org/packages/00/4f/edb00032a8fb92ec0a679d3830368355da91a69cab6f3e9c21b64d0bb986/numpy-2.3.5-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:f4255143f5160d0de972d28c8f9665d882b5f61309d8362fdd3e103cf7bf010c" },
-    { url = "https://files.pythonhosted.org/packages/16/a4/e8a53b5abd500a63836a29ebe145fc1ab1f2eefe1cfe59276020373ae0aa/numpy-2.3.5-pp311-pypy311_pp73-macosx_14_0_arm64.whl", hash = "sha256:a4b9159734b326535f4dd01d947f919c6eefd2d9827466a696c44ced82dfbc18" },
-    { url = "https://files.pythonhosted.org/packages/a3/2f/37eeb9014d9c8b3e9c55bc599c68263ca44fdbc12a93e45a21d1d56df737/numpy-2.3.5-pp311-pypy311_pp73-macosx_14_0_x86_64.whl", hash = "sha256:2feae0d2c91d46e59fcd62784a3a83b3fb677fead592ce51b5a6fbb4f95965ff" },
-    { url = "https://files.pythonhosted.org/packages/7d/e4/68d2f474df2cb671b2b6c2986a02e520671295647dad82484cde80ca427b/numpy-2.3.5-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:ffac52f28a7849ad7576293c0cb7b9f08304e8f7d738a8cb8a90ec4c55a998eb" },
-    { url = "https://files.pythonhosted.org/packages/b8/50/94ccd8a2b141cb50651fddd4f6a48874acb3c91c8f0842b08a6afc4b0b21/numpy-2.3.5-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:63c0e9e7eea69588479ebf4a8a270d5ac22763cc5854e9a7eae952a3908103f7" },
-    { url = "https://files.pythonhosted.org/packages/2d/ee/346fa473e666fe14c52fcdd19ec2424157290a032d4c41f98127bfb31ac7/numpy-2.3.5-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:f16417ec91f12f814b10bafe79ef77e70113a2f5f7018640e7425ff979253425" },
-]
-
-[[package]]
-name = "pillow"
-version = "11.3.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')",
-    "python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux'",
-    "python_full_version < '3.10' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/f3/0d/d0d6dea55cd152ce3d6767bb38a8fc10e33796ba4ba210cbab9354b6d238/pillow-11.3.0.tar.gz", hash = "sha256:3828ee7586cd0b2091b6209e5ad53e20d0649bbe87164a459d0676e035e8f523" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/4c/5d/45a3553a253ac8763f3561371432a90bdbe6000fbdcf1397ffe502aa206c/pillow-11.3.0-cp310-cp310-macosx_10_10_x86_64.whl", hash = "sha256:1b9c17fd4ace828b3003dfd1e30bff24863e0eb59b535e8f80194d9cc7ecf860" },
-    { url = "https://files.pythonhosted.org/packages/7c/c8/67c12ab069ef586a25a4a79ced553586748fad100c77c0ce59bb4983ac98/pillow-11.3.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:65dc69160114cdd0ca0f35cb434633c75e8e7fad4cf855177a05bf38678f73ad" },
-    { url = "https://files.pythonhosted.org/packages/2f/bd/6741ebd56263390b382ae4c5de02979af7f8bd9807346d068700dd6d5cf9/pillow-11.3.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:7107195ddc914f656c7fc8e4a5e1c25f32e9236ea3ea860f257b0436011fddd0" },
-    { url = "https://files.pythonhosted.org/packages/ca/0b/c412a9e27e1e6a829e6ab6c2dca52dd563efbedf4c9c6aa453d9a9b77359/pillow-11.3.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:cc3e831b563b3114baac7ec2ee86819eb03caa1a2cef0b481a5675b59c4fe23b" },
-    { url = "https://files.pythonhosted.org/packages/59/9d/9b7076aaf30f5dd17e5e5589b2d2f5a5d7e30ff67a171eb686e4eecc2adf/pillow-11.3.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:f1f182ebd2303acf8c380a54f615ec883322593320a9b00438eb842c1f37ae50" },
-    { url = "https://files.pythonhosted.org/packages/f0/16/1a6bf01fb622fb9cf5c91683823f073f053005c849b1f52ed613afcf8dae/pillow-11.3.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:4445fa62e15936a028672fd48c4c11a66d641d2c05726c7ec1f8ba6a572036ae" },
-    { url = "https://files.pythonhosted.org/packages/7b/e6/6ff7077077eb47fde78739e7d570bdcd7c10495666b6afcd23ab56b19a43/pillow-11.3.0-cp310-cp310-musllinux_1_2_aarch64.whl", hash = "sha256:71f511f6b3b91dd543282477be45a033e4845a40278fa8dcdbfdb07109bf18f9" },
-    { url = "https://files.pythonhosted.org/packages/c3/3a/b13f36832ea6d279a697231658199e0a03cd87ef12048016bdcc84131601/pillow-11.3.0-cp310-cp310-musllinux_1_2_x86_64.whl", hash = "sha256:040a5b691b0713e1f6cbe222e0f4f74cd233421e105850ae3b3c0ceda520f42e" },
-    { url = "https://files.pythonhosted.org/packages/6c/e4/61b2e1a7528740efbc70b3d581f33937e38e98ef3d50b05007267a55bcb2/pillow-11.3.0-cp310-cp310-win32.whl", hash = "sha256:89bd777bc6624fe4115e9fac3352c79ed60f3bb18651420635f26e643e3dd1f6" },
-    { url = "https://files.pythonhosted.org/packages/a9/d3/60c781c83a785d6afbd6a326ed4d759d141de43aa7365725cbcd65ce5e54/pillow-11.3.0-cp310-cp310-win_amd64.whl", hash = "sha256:19d2ff547c75b8e3ff46f4d9ef969a06c30ab2d4263a9e287733aa8b2429ce8f" },
-    { url = "https://files.pythonhosted.org/packages/9f/28/4f4a0203165eefb3763939c6789ba31013a2e90adffb456610f30f613850/pillow-11.3.0-cp310-cp310-win_arm64.whl", hash = "sha256:819931d25e57b513242859ce1876c58c59dc31587847bf74cfe06b2e0cb22d2f" },
-    { url = "https://files.pythonhosted.org/packages/db/26/77f8ed17ca4ffd60e1dcd220a6ec6d71210ba398cfa33a13a1cd614c5613/pillow-11.3.0-cp311-cp311-macosx_10_10_x86_64.whl", hash = "sha256:1cd110edf822773368b396281a2293aeb91c90a2db00d78ea43e7e861631b722" },
-    { url = "https://files.pythonhosted.org/packages/cb/39/ee475903197ce709322a17a866892efb560f57900d9af2e55f86db51b0a5/pillow-11.3.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:9c412fddd1b77a75aa904615ebaa6001f169b26fd467b4be93aded278266b288" },
-    { url = "https://files.pythonhosted.org/packages/d5/90/442068a160fd179938ba55ec8c97050a612426fae5ec0a764e345839f76d/pillow-11.3.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:7d1aa4de119a0ecac0a34a9c8bde33f34022e2e8f99104e47a3ca392fd60e37d" },
-    { url = "https://files.pythonhosted.org/packages/13/92/dcdd147ab02daf405387f0218dcf792dc6dd5b14d2573d40b4caeef01059/pillow-11.3.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:91da1d88226663594e3f6b4b8c3c8d85bd504117d043740a8e0ec449087cc494" },
-    { url = "https://files.pythonhosted.org/packages/6e/db/839d6ba7fd38b51af641aa904e2960e7a5644d60ec754c046b7d2aee00e5/pillow-11.3.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:643f189248837533073c405ec2f0bb250ba54598cf80e8c1e043381a60632f58" },
-    { url = "https://files.pythonhosted.org/packages/f2/2f/d7675ecae6c43e9f12aa8d58b6012683b20b6edfbdac7abcb4e6af7a3784/pillow-11.3.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:106064daa23a745510dabce1d84f29137a37224831d88eb4ce94bb187b1d7e5f" },
-    { url = "https://files.pythonhosted.org/packages/45/ad/931694675ede172e15b2ff03c8144a0ddaea1d87adb72bb07655eaffb654/pillow-11.3.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:cd8ff254faf15591e724dc7c4ddb6bf4793efcbe13802a4ae3e863cd300b493e" },
-    { url = "https://files.pythonhosted.org/packages/3a/04/ba8f2b11fc80d2dd462d7abec16351b45ec99cbbaea4387648a44190351a/pillow-11.3.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:932c754c2d51ad2b2271fd01c3d121daaa35e27efae2a616f77bf164bc0b3e94" },
-    { url = "https://files.pythonhosted.org/packages/48/59/8cd06d7f3944cc7d892e8533c56b0acb68399f640786313275faec1e3b6f/pillow-11.3.0-cp311-cp311-win32.whl", hash = "sha256:b4b8f3efc8d530a1544e5962bd6b403d5f7fe8b9e08227c6b255f98ad82b4ba0" },
-    { url = "https://files.pythonhosted.org/packages/f1/cc/29c0f5d64ab8eae20f3232da8f8571660aa0ab4b8f1331da5c2f5f9a938e/pillow-11.3.0-cp311-cp311-win_amd64.whl", hash = "sha256:1a992e86b0dd7aeb1f053cd506508c0999d710a8f07b4c791c63843fc6a807ac" },
-    { url = "https://files.pythonhosted.org/packages/c6/df/90bd886fabd544c25addd63e5ca6932c86f2b701d5da6c7839387a076b4a/pillow-11.3.0-cp311-cp311-win_arm64.whl", hash = "sha256:30807c931ff7c095620fe04448e2c2fc673fcbb1ffe2a7da3fb39613489b1ddd" },
-    { url = "https://files.pythonhosted.org/packages/40/fe/1bc9b3ee13f68487a99ac9529968035cca2f0a51ec36892060edcc51d06a/pillow-11.3.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:fdae223722da47b024b867c1ea0be64e0df702c5e0a60e27daad39bf960dd1e4" },
-    { url = "https://files.pythonhosted.org/packages/2c/32/7e2ac19b5713657384cec55f89065fb306b06af008cfd87e572035b27119/pillow-11.3.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:921bd305b10e82b4d1f5e802b6850677f965d8394203d182f078873851dada69" },
-    { url = "https://files.pythonhosted.org/packages/8e/1e/b9e12bbe6e4c2220effebc09ea0923a07a6da1e1f1bfbc8d7d29a01ce32b/pillow-11.3.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:eb76541cba2f958032d79d143b98a3a6b3ea87f0959bbe256c0b5e416599fd5d" },
-    { url = "https://files.pythonhosted.org/packages/8d/33/e9200d2bd7ba00dc3ddb78df1198a6e80d7669cce6c2bdbeb2530a74ec58/pillow-11.3.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:67172f2944ebba3d4a7b54f2e95c786a3a50c21b88456329314caaa28cda70f6" },
-    { url = "https://files.pythonhosted.org/packages/41/f1/6f2427a26fc683e00d985bc391bdd76d8dd4e92fac33d841127eb8fb2313/pillow-11.3.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:97f07ed9f56a3b9b5f49d3661dc9607484e85c67e27f3e8be2c7d28ca032fec7" },
-    { url = "https://files.pythonhosted.org/packages/e4/c9/06dd4a38974e24f932ff5f98ea3c546ce3f8c995d3f0985f8e5ba48bba19/pillow-11.3.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:676b2815362456b5b3216b4fd5bd89d362100dc6f4945154ff172e206a22c024" },
-    { url = "https://files.pythonhosted.org/packages/40/e7/848f69fb79843b3d91241bad658e9c14f39a32f71a301bcd1d139416d1be/pillow-11.3.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:3e184b2f26ff146363dd07bde8b711833d7b0202e27d13540bfe2e35a323a809" },
-    { url = "https://files.pythonhosted.org/packages/0b/1a/7cff92e695a2a29ac1958c2a0fe4c0b2393b60aac13b04a4fe2735cad52d/pillow-11.3.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:6be31e3fc9a621e071bc17bb7de63b85cbe0bfae91bb0363c893cbe67247780d" },
-    { url = "https://files.pythonhosted.org/packages/26/7d/73699ad77895f69edff76b0f332acc3d497f22f5d75e5360f78cbcaff248/pillow-11.3.0-cp312-cp312-win32.whl", hash = "sha256:7b161756381f0918e05e7cb8a371fff367e807770f8fe92ecb20d905d0e1c149" },
-    { url = "https://files.pythonhosted.org/packages/8c/ce/e7dfc873bdd9828f3b6e5c2bbb74e47a98ec23cc5c74fc4e54462f0d9204/pillow-11.3.0-cp312-cp312-win_amd64.whl", hash = "sha256:a6444696fce635783440b7f7a9fc24b3ad10a9ea3f0ab66c5905be1c19ccf17d" },
-    { url = "https://files.pythonhosted.org/packages/16/8f/b13447d1bf0b1f7467ce7d86f6e6edf66c0ad7cf44cf5c87a37f9bed9936/pillow-11.3.0-cp312-cp312-win_arm64.whl", hash = "sha256:2aceea54f957dd4448264f9bf40875da0415c83eb85f55069d89c0ed436e3542" },
-    { url = "https://files.pythonhosted.org/packages/1e/93/0952f2ed8db3a5a4c7a11f91965d6184ebc8cd7cbb7941a260d5f018cd2d/pillow-11.3.0-cp313-cp313-ios_13_0_arm64_iphoneos.whl", hash = "sha256:1c627742b539bba4309df89171356fcb3cc5a9178355b2727d1b74a6cf155fbd" },
-    { url = "https://files.pythonhosted.org/packages/4b/e8/100c3d114b1a0bf4042f27e0f87d2f25e857e838034e98ca98fe7b8c0a9c/pillow-11.3.0-cp313-cp313-ios_13_0_arm64_iphonesimulator.whl", hash = "sha256:30b7c02f3899d10f13d7a48163c8969e4e653f8b43416d23d13d1bbfdc93b9f8" },
-    { url = "https://files.pythonhosted.org/packages/aa/86/3f758a28a6e381758545f7cdb4942e1cb79abd271bea932998fc0db93cb6/pillow-11.3.0-cp313-cp313-ios_13_0_x86_64_iphonesimulator.whl", hash = "sha256:7859a4cc7c9295f5838015d8cc0a9c215b77e43d07a25e460f35cf516df8626f" },
-    { url = "https://files.pythonhosted.org/packages/01/f4/91d5b3ffa718df2f53b0dc109877993e511f4fd055d7e9508682e8aba092/pillow-11.3.0-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:ec1ee50470b0d050984394423d96325b744d55c701a439d2bd66089bff963d3c" },
-    { url = "https://files.pythonhosted.org/packages/f9/0e/37d7d3eca6c879fbd9dba21268427dffda1ab00d4eb05b32923d4fbe3b12/pillow-11.3.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:7db51d222548ccfd274e4572fdbf3e810a5e66b00608862f947b163e613b67dd" },
-    { url = "https://files.pythonhosted.org/packages/ff/b0/3426e5c7f6565e752d81221af9d3676fdbb4f352317ceafd42899aaf5d8a/pillow-11.3.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:2d6fcc902a24ac74495df63faad1884282239265c6839a0a6416d33faedfae7e" },
-    { url = "https://files.pythonhosted.org/packages/fc/c1/c6c423134229f2a221ee53f838d4be9d82bab86f7e2f8e75e47b6bf6cd77/pillow-11.3.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:f0f5d8f4a08090c6d6d578351a2b91acf519a54986c055af27e7a93feae6d3f1" },
-    { url = "https://files.pythonhosted.org/packages/ba/c9/09e6746630fe6372c67c648ff9deae52a2bc20897d51fa293571977ceb5d/pillow-11.3.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:c37d8ba9411d6003bba9e518db0db0c58a680ab9fe5179f040b0463644bc9805" },
-    { url = "https://files.pythonhosted.org/packages/d5/1c/a2a29649c0b1983d3ef57ee87a66487fdeb45132df66ab30dd37f7dbe162/pillow-11.3.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:13f87d581e71d9189ab21fe0efb5a23e9f28552d5be6979e84001d3b8505abe8" },
-    { url = "https://files.pythonhosted.org/packages/36/de/d5cc31cc4b055b6c6fd990e3e7f0f8aaf36229a2698501bcb0cdf67c7146/pillow-11.3.0-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:023f6d2d11784a465f09fd09a34b150ea4672e85fb3d05931d89f373ab14abb2" },
-    { url = "https://files.pythonhosted.org/packages/d5/ea/502d938cbaeec836ac28a9b730193716f0114c41325db428e6b280513f09/pillow-11.3.0-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:45dfc51ac5975b938e9809451c51734124e73b04d0f0ac621649821a63852e7b" },
-    { url = "https://files.pythonhosted.org/packages/45/9c/9c5e2a73f125f6cbc59cc7087c8f2d649a7ae453f83bd0362ff7c9e2aee2/pillow-11.3.0-cp313-cp313-win32.whl", hash = "sha256:a4d336baed65d50d37b88ca5b60c0fa9d81e3a87d4a7930d3880d1624d5b31f3" },
-    { url = "https://files.pythonhosted.org/packages/23/85/397c73524e0cd212067e0c969aa245b01d50183439550d24d9f55781b776/pillow-11.3.0-cp313-cp313-win_amd64.whl", hash = "sha256:0bce5c4fd0921f99d2e858dc4d4d64193407e1b99478bc5cacecba2311abde51" },
-    { url = "https://files.pythonhosted.org/packages/17/d2/622f4547f69cd173955194b78e4d19ca4935a1b0f03a302d655c9f6aae65/pillow-11.3.0-cp313-cp313-win_arm64.whl", hash = "sha256:1904e1264881f682f02b7f8167935cce37bc97db457f8e7849dc3a6a52b99580" },
-    { url = "https://files.pythonhosted.org/packages/dd/80/a8a2ac21dda2e82480852978416cfacd439a4b490a501a288ecf4fe2532d/pillow-11.3.0-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:4c834a3921375c48ee6b9624061076bc0a32a60b5532b322cc0ea64e639dd50e" },
-    { url = "https://files.pythonhosted.org/packages/44/d6/b79754ca790f315918732e18f82a8146d33bcd7f4494380457ea89eb883d/pillow-11.3.0-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:5e05688ccef30ea69b9317a9ead994b93975104a677a36a8ed8106be9260aa6d" },
-    { url = "https://files.pythonhosted.org/packages/49/20/716b8717d331150cb00f7fdd78169c01e8e0c219732a78b0e59b6bdb2fd6/pillow-11.3.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:1019b04af07fc0163e2810167918cb5add8d74674b6267616021ab558dc98ced" },
-    { url = "https://files.pythonhosted.org/packages/74/cf/a9f3a2514a65bb071075063a96f0a5cf949c2f2fce683c15ccc83b1c1cab/pillow-11.3.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:f944255db153ebb2b19c51fe85dd99ef0ce494123f21b9db4877ffdfc5590c7c" },
-    { url = "https://files.pythonhosted.org/packages/98/3c/da78805cbdbee9cb43efe8261dd7cc0b4b93f2ac79b676c03159e9db2187/pillow-11.3.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:1f85acb69adf2aaee8b7da124efebbdb959a104db34d3a2cb0f3793dbae422a8" },
-    { url = "https://files.pythonhosted.org/packages/6c/fa/ce044b91faecf30e635321351bba32bab5a7e034c60187fe9698191aef4f/pillow-11.3.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:05f6ecbeff5005399bb48d198f098a9b4b6bdf27b8487c7f38ca16eeb070cd59" },
-    { url = "https://files.pythonhosted.org/packages/7b/51/90f9291406d09bf93686434f9183aba27b831c10c87746ff49f127ee80cb/pillow-11.3.0-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:a7bc6e6fd0395bc052f16b1a8670859964dbd7003bd0af2ff08342eb6e442cfe" },
-    { url = "https://files.pythonhosted.org/packages/cd/5a/6fec59b1dfb619234f7636d4157d11fb4e196caeee220232a8d2ec48488d/pillow-11.3.0-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:83e1b0161c9d148125083a35c1c5a89db5b7054834fd4387499e06552035236c" },
-    { url = "https://files.pythonhosted.org/packages/49/6b/00187a044f98255225f172de653941e61da37104a9ea60e4f6887717e2b5/pillow-11.3.0-cp313-cp313t-win32.whl", hash = "sha256:2a3117c06b8fb646639dce83694f2f9eac405472713fcb1ae887469c0d4f6788" },
-    { url = "https://files.pythonhosted.org/packages/e8/5c/6caaba7e261c0d75bab23be79f1d06b5ad2a2ae49f028ccec801b0e853d6/pillow-11.3.0-cp313-cp313t-win_amd64.whl", hash = "sha256:857844335c95bea93fb39e0fa2726b4d9d758850b34075a7e3ff4f4fa3aa3b31" },
-    { url = "https://files.pythonhosted.org/packages/f3/7e/b623008460c09a0cb38263c93b828c666493caee2eb34ff67f778b87e58c/pillow-11.3.0-cp313-cp313t-win_arm64.whl", hash = "sha256:8797edc41f3e8536ae4b10897ee2f637235c94f27404cac7297f7b607dd0716e" },
-    { url = "https://files.pythonhosted.org/packages/73/f4/04905af42837292ed86cb1b1dabe03dce1edc008ef14c473c5c7e1443c5d/pillow-11.3.0-cp314-cp314-macosx_10_13_x86_64.whl", hash = "sha256:d9da3df5f9ea2a89b81bb6087177fb1f4d1c7146d583a3fe5c672c0d94e55e12" },
-    { url = "https://files.pythonhosted.org/packages/41/b0/33d79e377a336247df6348a54e6d2a2b85d644ca202555e3faa0cf811ecc/pillow-11.3.0-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:0b275ff9b04df7b640c59ec5a3cb113eefd3795a8df80bac69646ef699c6981a" },
-    { url = "https://files.pythonhosted.org/packages/49/2d/ed8bc0ab219ae8768f529597d9509d184fe8a6c4741a6864fea334d25f3f/pillow-11.3.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:0743841cabd3dba6a83f38a92672cccbd69af56e3e91777b0ee7f4dba4385632" },
-    { url = "https://files.pythonhosted.org/packages/b5/3d/b932bb4225c80b58dfadaca9d42d08d0b7064d2d1791b6a237f87f661834/pillow-11.3.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:2465a69cf967b8b49ee1b96d76718cd98c4e925414ead59fdf75cf0fd07df673" },
-    { url = "https://files.pythonhosted.org/packages/09/b5/0487044b7c096f1b48f0d7ad416472c02e0e4bf6919541b111efd3cae690/pillow-11.3.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:41742638139424703b4d01665b807c6468e23e699e8e90cffefe291c5832b027" },
-    { url = "https://files.pythonhosted.org/packages/a8/2d/524f9318f6cbfcc79fbc004801ea6b607ec3f843977652fdee4857a7568b/pillow-11.3.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:93efb0b4de7e340d99057415c749175e24c8864302369e05914682ba642e5d77" },
-    { url = "https://files.pythonhosted.org/packages/6f/d2/a9a4f280c6aefedce1e8f615baaa5474e0701d86dd6f1dede66726462bbd/pillow-11.3.0-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:7966e38dcd0fa11ca390aed7c6f20454443581d758242023cf36fcb319b1a874" },
-    { url = "https://files.pythonhosted.org/packages/fe/54/86b0cd9dbb683a9d5e960b66c7379e821a19be4ac5810e2e5a715c09a0c0/pillow-11.3.0-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:98a9afa7b9007c67ed84c57c9e0ad86a6000da96eaa638e4f8abe5b65ff83f0a" },
-    { url = "https://files.pythonhosted.org/packages/e7/95/88efcaf384c3588e24259c4203b909cbe3e3c2d887af9e938c2022c9dd48/pillow-11.3.0-cp314-cp314-win32.whl", hash = "sha256:02a723e6bf909e7cea0dac1b0e0310be9d7650cd66222a5f1c571455c0a45214" },
-    { url = "https://files.pythonhosted.org/packages/2e/cc/934e5820850ec5eb107e7b1a72dd278140731c669f396110ebc326f2a503/pillow-11.3.0-cp314-cp314-win_amd64.whl", hash = "sha256:a418486160228f64dd9e9efcd132679b7a02a5f22c982c78b6fc7dab3fefb635" },
-    { url = "https://files.pythonhosted.org/packages/d6/e9/9c0a616a71da2a5d163aa37405e8aced9a906d574b4a214bede134e731bc/pillow-11.3.0-cp314-cp314-win_arm64.whl", hash = "sha256:155658efb5e044669c08896c0c44231c5e9abcaadbc5cd3648df2f7c0b96b9a6" },
-    { url = "https://files.pythonhosted.org/packages/1a/33/c88376898aff369658b225262cd4f2659b13e8178e7534df9e6e1fa289f6/pillow-11.3.0-cp314-cp314t-macosx_10_13_x86_64.whl", hash = "sha256:59a03cdf019efbfeeed910bf79c7c93255c3d54bc45898ac2a4140071b02b4ae" },
-    { url = "https://files.pythonhosted.org/packages/1f/70/d376247fb36f1844b42910911c83a02d5544ebd2a8bad9efcc0f707ea774/pillow-11.3.0-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:f8a5827f84d973d8636e9dc5764af4f0cf2318d26744b3d902931701b0d46653" },
-    { url = "https://files.pythonhosted.org/packages/eb/1c/537e930496149fbac69efd2fc4329035bbe2e5475b4165439e3be9cb183b/pillow-11.3.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:ee92f2fd10f4adc4b43d07ec5e779932b4eb3dbfbc34790ada5a6669bc095aa6" },
-    { url = "https://files.pythonhosted.org/packages/bd/57/80f53264954dcefeebcf9dae6e3eb1daea1b488f0be8b8fef12f79a3eb10/pillow-11.3.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:c96d333dcf42d01f47b37e0979b6bd73ec91eae18614864622d9b87bbd5bbf36" },
-    { url = "https://files.pythonhosted.org/packages/70/ff/4727d3b71a8578b4587d9c276e90efad2d6fe0335fd76742a6da08132e8c/pillow-11.3.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:4c96f993ab8c98460cd0c001447bff6194403e8b1d7e149ade5f00594918128b" },
-    { url = "https://files.pythonhosted.org/packages/05/ae/716592277934f85d3be51d7256f3636672d7b1abfafdc42cf3f8cbd4b4c8/pillow-11.3.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:41342b64afeba938edb034d122b2dda5db2139b9a4af999729ba8818e0056477" },
-    { url = "https://files.pythonhosted.org/packages/e7/bb/7fe6cddcc8827b01b1a9766f5fdeb7418680744f9082035bdbabecf1d57f/pillow-11.3.0-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:068d9c39a2d1b358eb9f245ce7ab1b5c3246c7c8c7d9ba58cfa5b43146c06e50" },
-    { url = "https://files.pythonhosted.org/packages/8b/f5/06bfaa444c8e80f1a8e4bff98da9c83b37b5be3b1deaa43d27a0db37ef84/pillow-11.3.0-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:a1bc6ba083b145187f648b667e05a2534ecc4b9f2784c2cbe3089e44868f2b9b" },
-    { url = "https://files.pythonhosted.org/packages/f0/77/bc6f92a3e8e6e46c0ca78abfffec0037845800ea38c73483760362804c41/pillow-11.3.0-cp314-cp314t-win32.whl", hash = "sha256:118ca10c0d60b06d006be10a501fd6bbdfef559251ed31b794668ed569c87e12" },
-    { url = "https://files.pythonhosted.org/packages/4a/82/3a721f7d69dca802befb8af08b7c79ebcab461007ce1c18bd91a5d5896f9/pillow-11.3.0-cp314-cp314t-win_amd64.whl", hash = "sha256:8924748b688aa210d79883357d102cd64690e56b923a186f35a82cbc10f997db" },
-    { url = "https://files.pythonhosted.org/packages/89/c7/5572fa4a3f45740eaab6ae86fcdf7195b55beac1371ac8c619d880cfe948/pillow-11.3.0-cp314-cp314t-win_arm64.whl", hash = "sha256:79ea0d14d3ebad43ec77ad5272e6ff9bba5b679ef73375ea760261207fa8e0aa" },
-    { url = "https://files.pythonhosted.org/packages/9e/8e/9c089f01677d1264ab8648352dcb7773f37da6ad002542760c80107da816/pillow-11.3.0-cp39-cp39-macosx_10_10_x86_64.whl", hash = "sha256:48d254f8a4c776de343051023eb61ffe818299eeac478da55227d96e241de53f" },
-    { url = "https://files.pythonhosted.org/packages/b5/a9/5749930caf674695867eb56a581e78eb5f524b7583ff10b01b6e5048acb3/pillow-11.3.0-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:7aee118e30a4cf54fdd873bd3a29de51e29105ab11f9aad8c32123f58c8f8081" },
-    { url = "https://files.pythonhosted.org/packages/43/46/0b85b763eb292b691030795f9f6bb6fcaf8948c39413c81696a01c3577f7/pillow-11.3.0-cp39-cp39-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:23cff760a9049c502721bdb743a7cb3e03365fafcdfc2ef9784610714166e5a4" },
-    { url = "https://files.pythonhosted.org/packages/5e/c6/1a230ec0067243cbd60bc2dad5dc3ab46a8a41e21c15f5c9b52b26873069/pillow-11.3.0-cp39-cp39-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:6359a3bc43f57d5b375d1ad54a0074318a0844d11b76abccf478c37c986d3cfc" },
-    { url = "https://files.pythonhosted.org/packages/63/dd/f296c27ffba447bfad76c6a0c44c1ea97a90cb9472b9304c94a732e8dbfb/pillow-11.3.0-cp39-cp39-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:092c80c76635f5ecb10f3f83d76716165c96f5229addbd1ec2bdbbda7d496e06" },
-    { url = "https://files.pythonhosted.org/packages/a5/a0/98a3630f0b57f77bae67716562513d3032ae70414fcaf02750279c389a9e/pillow-11.3.0-cp39-cp39-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:cadc9e0ea0a2431124cde7e1697106471fc4c1da01530e679b2391c37d3fbb3a" },
-    { url = "https://files.pythonhosted.org/packages/de/e6/83dfba5646a290edd9a21964da07674409e410579c341fc5b8f7abd81620/pillow-11.3.0-cp39-cp39-musllinux_1_2_aarch64.whl", hash = "sha256:6a418691000f2a418c9135a7cf0d797c1bb7d9a485e61fe8e7722845b95ef978" },
-    { url = "https://files.pythonhosted.org/packages/bc/41/15ab268fe6ee9a2bc7391e2bbb20a98d3974304ab1a406a992dcb297a370/pillow-11.3.0-cp39-cp39-musllinux_1_2_x86_64.whl", hash = "sha256:97afb3a00b65cc0804d1c7abddbf090a81eaac02768af58cbdcaaa0a931e0b6d" },
-    { url = "https://files.pythonhosted.org/packages/64/79/6d4f638b288300bed727ff29f2a3cb63db054b33518a95f27724915e3fbc/pillow-11.3.0-cp39-cp39-win32.whl", hash = "sha256:ea944117a7974ae78059fcc1800e5d3295172bb97035c0c1d9345fca1419da71" },
-    { url = "https://files.pythonhosted.org/packages/46/05/4106422f45a05716fd34ed21763f8ec182e8ea00af6e9cb05b93a247361a/pillow-11.3.0-cp39-cp39-win_amd64.whl", hash = "sha256:e5c5858ad8ec655450a7c7df532e9842cf8df7cc349df7225c60d5d348c8aada" },
-    { url = "https://files.pythonhosted.org/packages/63/c6/287fd55c2c12761d0591549d48885187579b7c257bef0c6660755b0b59ae/pillow-11.3.0-cp39-cp39-win_arm64.whl", hash = "sha256:6abdbfd3aea42be05702a8dd98832329c167ee84400a1d1f61ab11437f1717eb" },
-    { url = "https://files.pythonhosted.org/packages/6f/8b/209bd6b62ce8367f47e68a218bffac88888fdf2c9fcf1ecadc6c3ec1ebc7/pillow-11.3.0-pp310-pypy310_pp73-macosx_10_15_x86_64.whl", hash = "sha256:3cee80663f29e3843b68199b9d6f4f54bd1d4a6b59bdd91bceefc51238bcb967" },
-    { url = "https://files.pythonhosted.org/packages/2e/e6/231a0b76070c2cfd9e260a7a5b504fb72da0a95279410fa7afd99d9751d6/pillow-11.3.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl", hash = "sha256:b5f56c3f344f2ccaf0dd875d3e180f631dc60a51b314295a3e681fe8cf851fbe" },
-    { url = "https://files.pythonhosted.org/packages/13/f4/10cf94fda33cb12765f2397fc285fa6d8eb9c29de7f3185165b702fc7386/pillow-11.3.0-pp310-pypy310_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:e67d793d180c9df62f1f40aee3accca4829d3794c95098887edc18af4b8b780c" },
-    { url = "https://files.pythonhosted.org/packages/72/c9/583821097dc691880c92892e8e2d41fe0a5a3d6021f4963371d2f6d57250/pillow-11.3.0-pp310-pypy310_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:d000f46e2917c705e9fb93a3606ee4a819d1e3aa7a9b442f6444f07e77cf5e25" },
-    { url = "https://files.pythonhosted.org/packages/3b/8e/5c9d410f9217b12320efc7c413e72693f48468979a013ad17fd690397b9a/pillow-11.3.0-pp310-pypy310_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:527b37216b6ac3a12d7838dc3bd75208ec57c1c6d11ef01902266a5a0c14fc27" },
-    { url = "https://files.pythonhosted.org/packages/62/bb/78347dbe13219991877ffb3a91bf09da8317fbfcd4b5f9140aeae020ad71/pillow-11.3.0-pp310-pypy310_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:be5463ac478b623b9dd3937afd7fb7ab3d79dd290a28e2b6df292dc75063eb8a" },
-    { url = "https://files.pythonhosted.org/packages/d9/28/1000353d5e61498aaeaaf7f1e4b49ddb05f2c6575f9d4f9f914a3538b6e1/pillow-11.3.0-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:8dc70ca24c110503e16918a658b869019126ecfe03109b754c402daff12b3d9f" },
-    { url = "https://files.pythonhosted.org/packages/9e/e3/6fa84033758276fb31da12e5fb66ad747ae83b93c67af17f8c6ff4cc8f34/pillow-11.3.0-pp311-pypy311_pp73-macosx_10_15_x86_64.whl", hash = "sha256:7c8ec7a017ad1bd562f93dbd8505763e688d388cde6e4a010ae1486916e713e6" },
-    { url = "https://files.pythonhosted.org/packages/5b/ee/e8d2e1ab4892970b561e1ba96cbd59c0d28cf66737fc44abb2aec3795a4e/pillow-11.3.0-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:9ab6ae226de48019caa8074894544af5b53a117ccb9d3b3dcb2871464c829438" },
-    { url = "https://files.pythonhosted.org/packages/f2/6d/17f80f4e1f0761f02160fc433abd4109fa1548dcfdca46cfdadaf9efa565/pillow-11.3.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:fe27fb049cdcca11f11a7bfda64043c37b30e6b91f10cb5bab275806c32f6ab3" },
-    { url = "https://files.pythonhosted.org/packages/de/5f/c22340acd61cef960130585bbe2120e2fd8434c214802f07e8c03596b17e/pillow-11.3.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:465b9e8844e3c3519a983d58b80be3f668e2a7a5db97f2784e7079fbc9f9822c" },
-    { url = "https://files.pythonhosted.org/packages/31/5e/03966aedfbfcbb4d5f8aa042452d3361f325b963ebbadddac05b122e47dd/pillow-11.3.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:5418b53c0d59b3824d05e029669efa023bbef0f3e92e75ec8428f3799487f361" },
-    { url = "https://files.pythonhosted.org/packages/cc/2d/e082982aacc927fc2cab48e1e731bdb1643a1406acace8bed0900a61464e/pillow-11.3.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:504b6f59505f08ae014f724b6207ff6222662aab5cc9542577fb084ed0676ac7" },
-    { url = "https://files.pythonhosted.org/packages/34/e7/ae39f538fd6844e982063c3a5e4598b8ced43b9633baa3a85ef33af8c05c/pillow-11.3.0-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:c84d689db21a1c397d001aa08241044aa2069e7587b398c8cc63020390b1c1b8" },
-]
-
-[[package]]
-name = "pillow"
-version = "12.0.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform != 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform != 'darwin'",
-    "python_full_version >= '3.12' and sys_platform == 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform == 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform != 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform == 'darwin'",
-]
-sdist = { url = "https://files.pythonhosted.org/packages/5a/b0/cace85a1b0c9775a9f8f5d5423c8261c858760e2466c79b2dd184638b056/pillow-12.0.0.tar.gz", hash = "sha256:87d4f8125c9988bfbed67af47dd7a953e2fc7b0cc1e7800ec6d2080d490bb353" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/5d/08/26e68b6b5da219c2a2cb7b563af008b53bb8e6b6fcb3fa40715fcdb2523a/pillow-12.0.0-cp310-cp310-macosx_10_10_x86_64.whl", hash = "sha256:3adfb466bbc544b926d50fe8f4a4e6abd8c6bffd28a26177594e6e9b2b76572b" },
-    { url = "https://files.pythonhosted.org/packages/cb/e9/4e58fb097fb74c7b4758a680aacd558810a417d1edaa7000142976ef9d2f/pillow-12.0.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:1ac11e8ea4f611c3c0147424eae514028b5e9077dd99ab91e1bd7bc33ff145e1" },
-    { url = "https://files.pythonhosted.org/packages/4b/e0/1fa492aa9f77b3bc6d471c468e62bfea1823056bf7e5e4f1914d7ab2565e/pillow-12.0.0-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:d49e2314c373f4c2b39446fb1a45ed333c850e09d0c59ac79b72eb3b95397363" },
-    { url = "https://files.pythonhosted.org/packages/c1/09/4de7cd03e33734ccd0c876f0251401f1314e819cbfd89a0fcb6e77927cc6/pillow-12.0.0-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:c7b2a63fd6d5246349f3d3f37b14430d73ee7e8173154461785e43036ffa96ca" },
-    { url = "https://files.pythonhosted.org/packages/2e/69/0688e7c1390666592876d9d474f5e135abb4acb39dcb583c4dc5490f1aff/pillow-12.0.0-cp310-cp310-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:d64317d2587c70324b79861babb9c09f71fbb780bad212018874b2c013d8600e" },
-    { url = "https://files.pythonhosted.org/packages/ed/1c/880921e98f525b9b44ce747ad1ea8f73fd7e992bafe3ca5e5644bf433dea/pillow-12.0.0-cp310-cp310-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:d77153e14b709fd8b8af6f66a3afbb9ed6e9fc5ccf0b6b7e1ced7b036a228782" },
-    { url = "https://files.pythonhosted.org/packages/28/03/96f718331b19b355610ef4ebdbbde3557c726513030665071fd025745671/pillow-12.0.0-cp310-cp310-musllinux_1_2_aarch64.whl", hash = "sha256:32ed80ea8a90ee3e6fa08c21e2e091bba6eda8eccc83dbc34c95169507a91f10" },
-    { url = "https://files.pythonhosted.org/packages/3a/a0/6a193b3f0cc9437b122978d2c5cbce59510ccf9a5b48825096ed7472da2f/pillow-12.0.0-cp310-cp310-musllinux_1_2_x86_64.whl", hash = "sha256:c828a1ae702fc712978bda0320ba1b9893d99be0badf2647f693cc01cf0f04fa" },
-    { url = "https://files.pythonhosted.org/packages/a7/c4/043192375eaa4463254e8e61f0e2ec9a846b983929a8d0a7122e0a6d6fff/pillow-12.0.0-cp310-cp310-win32.whl", hash = "sha256:bd87e140e45399c818fac4247880b9ce719e4783d767e030a883a970be632275" },
-    { url = "https://files.pythonhosted.org/packages/92/c6/c2f2fc7e56301c21827e689bb8b0b465f1b52878b57471a070678c0c33cd/pillow-12.0.0-cp310-cp310-win_amd64.whl", hash = "sha256:455247ac8a4cfb7b9bc45b7e432d10421aea9fc2e74d285ba4072688a74c2e9d" },
-    { url = "https://files.pythonhosted.org/packages/b2/d2/5f675067ba82da7a1c238a73b32e3fd78d67f9d9f80fbadd33a40b9c0481/pillow-12.0.0-cp310-cp310-win_arm64.whl", hash = "sha256:6ace95230bfb7cd79ef66caa064bbe2f2a1e63d93471c3a2e1f1348d9f22d6b7" },
-    { url = "https://files.pythonhosted.org/packages/0e/5a/a2f6773b64edb921a756eb0729068acad9fc5208a53f4a349396e9436721/pillow-12.0.0-cp311-cp311-macosx_10_10_x86_64.whl", hash = "sha256:0fd00cac9c03256c8b2ff58f162ebcd2587ad3e1f2e397eab718c47e24d231cc" },
-    { url = "https://files.pythonhosted.org/packages/2e/05/069b1f8a2e4b5a37493da6c5868531c3f77b85e716ad7a590ef87d58730d/pillow-12.0.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:a3475b96f5908b3b16c47533daaa87380c491357d197564e0ba34ae75c0f3257" },
-    { url = "https://files.pythonhosted.org/packages/61/e3/2c820d6e9a36432503ead175ae294f96861b07600a7156154a086ba7111a/pillow-12.0.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:110486b79f2d112cf6add83b28b627e369219388f64ef2f960fef9ebaf54c642" },
-    { url = "https://files.pythonhosted.org/packages/4f/89/63427f51c64209c5e23d4d52071c8d0f21024d3a8a487737caaf614a5795/pillow-12.0.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:5269cc1caeedb67e6f7269a42014f381f45e2e7cd42d834ede3c703a1d915fe3" },
-    { url = "https://files.pythonhosted.org/packages/f6/1b/c9711318d4901093c15840f268ad649459cd81984c9ec9887756cca049a5/pillow-12.0.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:aa5129de4e174daccbc59d0a3b6d20eaf24417d59851c07ebb37aeb02947987c" },
-    { url = "https://files.pythonhosted.org/packages/41/1e/db9470f2d030b4995083044cd8738cdd1bf773106819f6d8ba12597d5352/pillow-12.0.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:bee2a6db3a7242ea309aa7ee8e2780726fed67ff4e5b40169f2c940e7eb09227" },
-    { url = "https://files.pythonhosted.org/packages/cc/b0/6177a8bdd5ee4ed87cba2de5a3cc1db55ffbbec6176784ce5bb75aa96798/pillow-12.0.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:90387104ee8400a7b4598253b4c406f8958f59fcf983a6cea2b50d59f7d63d0b" },
-    { url = "https://files.pythonhosted.org/packages/bc/5e/61537aa6fa977922c6a03253a0e727e6e4a72381a80d63ad8eec350684f2/pillow-12.0.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:bc91a56697869546d1b8f0a3ff35224557ae7f881050e99f615e0119bf934b4e" },
-    { url = "https://files.pythonhosted.org/packages/1f/3d/d5033539344ee3cbd9a4d69e12e63ca3a44a739eb2d4c8da350a3d38edd7/pillow-12.0.0-cp311-cp311-win32.whl", hash = "sha256:27f95b12453d165099c84f8a8bfdfd46b9e4bda9e0e4b65f0635430027f55739" },
-    { url = "https://files.pythonhosted.org/packages/4d/42/aaca386de5cc8bd8a0254516957c1f265e3521c91515b16e286c662854c4/pillow-12.0.0-cp311-cp311-win_amd64.whl", hash = "sha256:b583dc9070312190192631373c6c8ed277254aa6e6084b74bdd0a6d3b221608e" },
-    { url = "https://files.pythonhosted.org/packages/ba/f1/9197c9c2d5708b785f631a6dfbfa8eb3fb9672837cb92ae9af812c13b4ed/pillow-12.0.0-cp311-cp311-win_arm64.whl", hash = "sha256:759de84a33be3b178a64c8ba28ad5c135900359e85fb662bc6e403ad4407791d" },
-    { url = "https://files.pythonhosted.org/packages/2c/90/4fcce2c22caf044e660a198d740e7fbc14395619e3cb1abad12192c0826c/pillow-12.0.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:53561a4ddc36facb432fae7a9d8afbfaf94795414f5cdc5fc52f28c1dca90371" },
-    { url = "https://files.pythonhosted.org/packages/fd/e0/ed960067543d080691d47d6938ebccbf3976a931c9567ab2fbfab983a5dd/pillow-12.0.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:71db6b4c1653045dacc1585c1b0d184004f0d7e694c7b34ac165ca70c0838082" },
-    { url = "https://files.pythonhosted.org/packages/e7/a1/f81fdeddcb99c044bf7d6faa47e12850f13cee0849537a7d27eeab5534d4/pillow-12.0.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:2fa5f0b6716fc88f11380b88b31fe591a06c6315e955c096c35715788b339e3f" },
-    { url = "https://files.pythonhosted.org/packages/88/e1/9098d3ce341a8750b55b0e00c03f1630d6178f38ac191c81c97a3b047b44/pillow-12.0.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:82240051c6ca513c616f7f9da06e871f61bfd7805f566275841af15015b8f98d" },
-    { url = "https://files.pythonhosted.org/packages/a7/62/a22e8d3b602ae8cc01446d0c57a54e982737f44b6f2e1e019a925143771d/pillow-12.0.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:55f818bd74fe2f11d4d7cbc65880a843c4075e0ac7226bc1a23261dbea531953" },
-    { url = "https://files.pythonhosted.org/packages/4f/87/424511bdcd02c8d7acf9f65caa09f291a519b16bd83c3fb3374b3d4ae951/pillow-12.0.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:b87843e225e74576437fd5b6a4c2205d422754f84a06942cfaf1dc32243e45a8" },
-    { url = "https://files.pythonhosted.org/packages/dc/4d/435c8ac688c54d11755aedfdd9f29c9eeddf68d150fe42d1d3dbd2365149/pillow-12.0.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:c607c90ba67533e1b2355b821fef6764d1dd2cbe26b8c1005ae84f7aea25ff79" },
-    { url = "https://files.pythonhosted.org/packages/2b/f2/ad34167a8059a59b8ad10bc5c72d4d9b35acc6b7c0877af8ac885b5f2044/pillow-12.0.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:21f241bdd5080a15bc86d3466a9f6074a9c2c2b314100dd896ac81ee6db2f1ba" },
-    { url = "https://files.pythonhosted.org/packages/0c/b1/a7391df6adacf0a5c2cf6ac1cf1fcc1369e7d439d28f637a847f8803beb3/pillow-12.0.0-cp312-cp312-win32.whl", hash = "sha256:dd333073e0cacdc3089525c7df7d39b211bcdf31fc2824e49d01c6b6187b07d0" },
-    { url = "https://files.pythonhosted.org/packages/a2/0b/d87733741526541c909bbf159e338dcace4f982daac6e5a8d6be225ca32d/pillow-12.0.0-cp312-cp312-win_amd64.whl", hash = "sha256:9fe611163f6303d1619bbcb653540a4d60f9e55e622d60a3108be0d5b441017a" },
-    { url = "https://files.pythonhosted.org/packages/bc/96/aaa61ce33cc98421fb6088af2a03be4157b1e7e0e87087c888e2370a7f45/pillow-12.0.0-cp312-cp312-win_arm64.whl", hash = "sha256:7dfb439562f234f7d57b1ac6bc8fe7f838a4bd49c79230e0f6a1da93e82f1fad" },
-    { url = "https://files.pythonhosted.org/packages/62/f2/de993bb2d21b33a98d031ecf6a978e4b61da207bef02f7b43093774c480d/pillow-12.0.0-cp313-cp313-ios_13_0_arm64_iphoneos.whl", hash = "sha256:0869154a2d0546545cde61d1789a6524319fc1897d9ee31218eae7a60ccc5643" },
-    { url = "https://files.pythonhosted.org/packages/0e/b6/bc8d0c4c9f6f111a783d045310945deb769b806d7574764234ffd50bc5ea/pillow-12.0.0-cp313-cp313-ios_13_0_arm64_iphonesimulator.whl", hash = "sha256:a7921c5a6d31b3d756ec980f2f47c0cfdbce0fc48c22a39347a895f41f4a6ea4" },
-    { url = "https://files.pythonhosted.org/packages/5d/57/d60d343709366a353dc56adb4ee1e7d8a2cc34e3fbc22905f4167cfec119/pillow-12.0.0-cp313-cp313-ios_13_0_x86_64_iphonesimulator.whl", hash = "sha256:1ee80a59f6ce048ae13cda1abf7fbd2a34ab9ee7d401c46be3ca685d1999a399" },
-    { url = "https://files.pythonhosted.org/packages/a4/a4/a0a31467e3f83b94d37568294b01d22b43ae3c5d85f2811769b9c66389dd/pillow-12.0.0-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:c50f36a62a22d350c96e49ad02d0da41dbd17ddc2e29750dbdba4323f85eb4a5" },
-    { url = "https://files.pythonhosted.org/packages/83/06/48eab21dd561de2914242711434c0c0eb992ed08ff3f6107a5f44527f5e9/pillow-12.0.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:5193fde9a5f23c331ea26d0cf171fbf67e3f247585f50c08b3e205c7aeb4589b" },
-    { url = "https://files.pythonhosted.org/packages/fc/bd/69ed99fd46a8dba7c1887156d3572fe4484e3f031405fcc5a92e31c04035/pillow-12.0.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:bde737cff1a975b70652b62d626f7785e0480918dece11e8fef3c0cf057351c3" },
-    { url = "https://files.pythonhosted.org/packages/ea/94/8fad659bcdbf86ed70099cb60ae40be6acca434bbc8c4c0d4ef356d7e0de/pillow-12.0.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:a6597ff2b61d121172f5844b53f21467f7082f5fb385a9a29c01414463f93b07" },
-    { url = "https://files.pythonhosted.org/packages/20/39/c685d05c06deecfd4e2d1950e9a908aa2ca8bc4e6c3b12d93b9cafbd7837/pillow-12.0.0-cp313-cp313-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:0b817e7035ea7f6b942c13aa03bb554fc44fea70838ea21f8eb31c638326584e" },
-    { url = "https://files.pythonhosted.org/packages/38/57/755dbd06530a27a5ed74f8cb0a7a44a21722ebf318edbe67ddbd7fb28f88/pillow-12.0.0-cp313-cp313-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:f4f1231b7dec408e8670264ce63e9c71409d9583dd21d32c163e25213ee2a344" },
-    { url = "https://files.pythonhosted.org/packages/ca/b6/7e94f4c41d238615674d06ed677c14883103dce1c52e4af16f000338cfd7/pillow-12.0.0-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:6e51b71417049ad6ab14c49608b4a24d8fb3fe605e5dfabfe523b58064dc3d27" },
-    { url = "https://files.pythonhosted.org/packages/9c/14/4448bb0b5e0f22dd865290536d20ec8a23b64e2d04280b89139f09a36bb6/pillow-12.0.0-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:d120c38a42c234dc9a8c5de7ceaaf899cf33561956acb4941653f8bdc657aa79" },
-    { url = "https://files.pythonhosted.org/packages/dd/ca/16c6926cc1c015845745d5c16c9358e24282f1e588237a4c36d2b30f182f/pillow-12.0.0-cp313-cp313-win32.whl", hash = "sha256:4cc6b3b2efff105c6a1656cfe59da4fdde2cda9af1c5e0b58529b24525d0a098" },
-    { url = "https://files.pythonhosted.org/packages/6d/2a/dd43dcfd6dae9b6a49ee28a8eedb98c7d5ff2de94a5d834565164667b97b/pillow-12.0.0-cp313-cp313-win_amd64.whl", hash = "sha256:4cf7fed4b4580601c4345ceb5d4cbf5a980d030fd5ad07c4d2ec589f95f09905" },
-    { url = "https://files.pythonhosted.org/packages/77/f0/72ea067f4b5ae5ead653053212af05ce3705807906ba3f3e8f58ddf617e6/pillow-12.0.0-cp313-cp313-win_arm64.whl", hash = "sha256:9f0b04c6b8584c2c193babcccc908b38ed29524b29dd464bc8801bf10d746a3a" },
-    { url = "https://files.pythonhosted.org/packages/f5/5e/9046b423735c21f0487ea6cb5b10f89ea8f8dfbe32576fe052b5ba9d4e5b/pillow-12.0.0-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:7fa22993bac7b77b78cae22bad1e2a987ddf0d9015c63358032f84a53f23cdc3" },
-    { url = "https://files.pythonhosted.org/packages/12/66/982ceebcdb13c97270ef7a56c3969635b4ee7cd45227fa707c94719229c5/pillow-12.0.0-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:f135c702ac42262573fe9714dfe99c944b4ba307af5eb507abef1667e2cbbced" },
-    { url = "https://files.pythonhosted.org/packages/16/b3/81e625524688c31859450119bf12674619429cab3119eec0e30a7a1029cb/pillow-12.0.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:c85de1136429c524e55cfa4e033b4a7940ac5c8ee4d9401cc2d1bf48154bbc7b" },
-    { url = "https://files.pythonhosted.org/packages/98/59/dfb38f2a41240d2408096e1a76c671d0a105a4a8471b1871c6902719450c/pillow-12.0.0-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:38df9b4bfd3db902c9c2bd369bcacaf9d935b2fff73709429d95cc41554f7b3d" },
-    { url = "https://files.pythonhosted.org/packages/dc/3d/378dbea5cd1874b94c312425ca77b0f47776c78e0df2df751b820c8c1d6c/pillow-12.0.0-cp313-cp313t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:7d87ef5795da03d742bf49439f9ca4d027cde49c82c5371ba52464aee266699a" },
-    { url = "https://files.pythonhosted.org/packages/84/b0/d525ef47d71590f1621510327acec75ae58c721dc071b17d8d652ca494d8/pillow-12.0.0-cp313-cp313t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:aff9e4d82d082ff9513bdd6acd4f5bd359f5b2c870907d2b0a9c5e10d40c88fe" },
-    { url = "https://files.pythonhosted.org/packages/61/2c/aced60e9cf9d0cde341d54bf7932c9ffc33ddb4a1595798b3a5150c7ec4e/pillow-12.0.0-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:8d8ca2b210ada074d57fcee40c30446c9562e542fc46aedc19baf758a93532ee" },
-    { url = "https://files.pythonhosted.org/packages/ef/26/69dcb9b91f4e59f8f34b2332a4a0a951b44f547c4ed39d3e4dcfcff48f89/pillow-12.0.0-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:99a7f72fb6249302aa62245680754862a44179b545ded638cf1fef59befb57ef" },
-    { url = "https://files.pythonhosted.org/packages/61/2b/726235842220ca95fa441ddf55dd2382b52ab5b8d9c0596fe6b3f23dafe8/pillow-12.0.0-cp313-cp313t-win32.whl", hash = "sha256:4078242472387600b2ce8d93ade8899c12bf33fa89e55ec89fe126e9d6d5d9e9" },
-    { url = "https://files.pythonhosted.org/packages/c0/3d/2afaf4e840b2df71344ababf2f8edd75a705ce500e5dc1e7227808312ae1/pillow-12.0.0-cp313-cp313t-win_amd64.whl", hash = "sha256:2c54c1a783d6d60595d3514f0efe9b37c8808746a66920315bfd34a938d7994b" },
-    { url = "https://files.pythonhosted.org/packages/6f/75/3fa09aa5cf6ed04bee3fa575798ddf1ce0bace8edb47249c798077a81f7f/pillow-12.0.0-cp313-cp313t-win_arm64.whl", hash = "sha256:26d9f7d2b604cd23aba3e9faf795787456ac25634d82cd060556998e39c6fa47" },
-    { url = "https://files.pythonhosted.org/packages/54/2a/9a8c6ba2c2c07b71bec92cf63e03370ca5e5f5c5b119b742bcc0cde3f9c5/pillow-12.0.0-cp314-cp314-ios_13_0_arm64_iphoneos.whl", hash = "sha256:beeae3f27f62308f1ddbcfb0690bf44b10732f2ef43758f169d5e9303165d3f9" },
-    { url = "https://files.pythonhosted.org/packages/84/54/836fdbf1bfb3d66a59f0189ff0b9f5f666cee09c6188309300df04ad71fa/pillow-12.0.0-cp314-cp314-ios_13_0_arm64_iphonesimulator.whl", hash = "sha256:d4827615da15cd59784ce39d3388275ec093ae3ee8d7f0c089b76fa87af756c2" },
-    { url = "https://files.pythonhosted.org/packages/0d/cd/16aec9f0da4793e98e6b54778a5fbce4f375c6646fe662e80600b8797379/pillow-12.0.0-cp314-cp314-ios_13_0_x86_64_iphonesimulator.whl", hash = "sha256:3e42edad50b6909089750e65c91aa09aaf1e0a71310d383f11321b27c224ed8a" },
-    { url = "https://files.pythonhosted.org/packages/f6/b7/13957fda356dc46339298b351cae0d327704986337c3c69bb54628c88155/pillow-12.0.0-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:e5d8efac84c9afcb40914ab49ba063d94f5dbdf5066db4482c66a992f47a3a3b" },
-    { url = "https://files.pythonhosted.org/packages/fc/f5/eae31a306341d8f331f43edb2e9122c7661b975433de5e447939ae61c5da/pillow-12.0.0-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:266cd5f2b63ff316d5a1bba46268e603c9caf5606d44f38c2873c380950576ad" },
-    { url = "https://files.pythonhosted.org/packages/86/62/2a88339aa40c4c77e79108facbd307d6091e2c0eb5b8d3cf4977cfca2fe6/pillow-12.0.0-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:58eea5ebe51504057dd95c5b77d21700b77615ab0243d8152793dc00eb4faf01" },
-    { url = "https://files.pythonhosted.org/packages/c7/33/5425a8992bcb32d1cb9fa3dd39a89e613d09a22f2c8083b7bf43c455f760/pillow-12.0.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:f13711b1a5ba512d647a0e4ba79280d3a9a045aaf7e0cc6fbe96b91d4cdf6b0c" },
-    { url = "https://files.pythonhosted.org/packages/d8/61/3f5d3b35c5728f37953d3eec5b5f3e77111949523bd2dd7f31a851e50690/pillow-12.0.0-cp314-cp314-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:6846bd2d116ff42cba6b646edf5bf61d37e5cbd256425fa089fee4ff5c07a99e" },
-    { url = "https://files.pythonhosted.org/packages/3a/be/ee90a3d79271227e0f0a33c453531efd6ed14b2e708596ba5dd9be948da3/pillow-12.0.0-cp314-cp314-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:c98fa880d695de164b4135a52fd2e9cd7b7c90a9d8ac5e9e443a24a95ef9248e" },
-    { url = "https://files.pythonhosted.org/packages/44/34/a16b6a4d1ad727de390e9bd9f19f5f669e079e5826ec0f329010ddea492f/pillow-12.0.0-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:fa3ed2a29a9e9d2d488b4da81dcb54720ac3104a20bf0bd273f1e4648aff5af9" },
-    { url = "https://files.pythonhosted.org/packages/b6/39/1aa5850d2ade7d7ba9f54e4e4c17077244ff7a2d9e25998c38a29749eb3f/pillow-12.0.0-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:d034140032870024e6b9892c692fe2968493790dd57208b2c37e3fb35f6df3ab" },
-    { url = "https://files.pythonhosted.org/packages/bf/db/4fae862f8fad0167073a7733973bfa955f47e2cac3dc3e3e6257d10fab4a/pillow-12.0.0-cp314-cp314-win32.whl", hash = "sha256:1b1b133e6e16105f524a8dec491e0586d072948ce15c9b914e41cdadd209052b" },
-    { url = "https://files.pythonhosted.org/packages/2b/24/b350c31543fb0107ab2599464d7e28e6f856027aadda995022e695313d94/pillow-12.0.0-cp314-cp314-win_amd64.whl", hash = "sha256:8dc232e39d409036af549c86f24aed8273a40ffa459981146829a324e0848b4b" },
-    { url = "https://files.pythonhosted.org/packages/0f/9b/0ba5a6fd9351793996ef7487c4fdbde8d3f5f75dbedc093bb598648fddf0/pillow-12.0.0-cp314-cp314-win_arm64.whl", hash = "sha256:d52610d51e265a51518692045e372a4c363056130d922a7351429ac9f27e70b0" },
-    { url = "https://files.pythonhosted.org/packages/f5/7a/ceee0840aebc579af529b523d530840338ecf63992395842e54edc805987/pillow-12.0.0-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:1979f4566bb96c1e50a62d9831e2ea2d1211761e5662afc545fa766f996632f6" },
-    { url = "https://files.pythonhosted.org/packages/44/76/20776057b4bfd1aef4eeca992ebde0f53a4dce874f3ae693d0ec90a4f79b/pillow-12.0.0-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:b2e4b27a6e15b04832fe9bf292b94b5ca156016bbc1ea9c2c20098a0320d6cf6" },
-    { url = "https://files.pythonhosted.org/packages/82/3f/d9ff92ace07be8836b4e7e87e6a4c7a8318d47c2f1463ffcf121fc57d9cb/pillow-12.0.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:fb3096c30df99fd01c7bf8e544f392103d0795b9f98ba71a8054bcbf56b255f1" },
-    { url = "https://files.pythonhosted.org/packages/9f/7a/4f7ff87f00d3ad33ba21af78bfcd2f032107710baf8280e3722ceec28cda/pillow-12.0.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:7438839e9e053ef79f7112c881cef684013855016f928b168b81ed5835f3e75e" },
-    { url = "https://files.pythonhosted.org/packages/75/87/fcea108944a52dad8cca0715ae6247e271eb80459364a98518f1e4f480c1/pillow-12.0.0-cp314-cp314t-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:5d5c411a8eaa2299322b647cd932586b1427367fd3184ffbb8f7a219ea2041ca" },
-    { url = "https://files.pythonhosted.org/packages/91/52/0d31b5e571ef5fd111d2978b84603fce26aba1b6092f28e941cb46570745/pillow-12.0.0-cp314-cp314t-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:d7e091d464ac59d2c7ad8e7e08105eaf9dafbc3883fd7265ffccc2baad6ac925" },
-    { url = "https://files.pythonhosted.org/packages/7b/f4/2dd3d721f875f928d48e83bb30a434dee75a2531bca839bb996bb0aa5a91/pillow-12.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:792a2c0be4dcc18af9d4a2dfd8a11a17d5e25274a1062b0ec1c2d79c76f3e7f8" },
-    { url = "https://files.pythonhosted.org/packages/30/4b/667dfcf3d61fc309ba5a15b141845cece5915e39b99c1ceab0f34bf1d124/pillow-12.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:afbefa430092f71a9593a99ab6a4e7538bc9eabbf7bf94f91510d3503943edc4" },
-    { url = "https://files.pythonhosted.org/packages/a2/2f/16cabcc6426c32218ace36bf0d55955e813f2958afddbf1d391849fee9d1/pillow-12.0.0-cp314-cp314t-win32.whl", hash = "sha256:3830c769decf88f1289680a59d4f4c46c72573446352e2befec9a8512104fa52" },
-    { url = "https://files.pythonhosted.org/packages/35/73/e29aa0c9c666cf787628d3f0dcf379f4791fba79f4936d02f8b37165bdf8/pillow-12.0.0-cp314-cp314t-win_amd64.whl", hash = "sha256:905b0365b210c73afb0ebe9101a32572152dfd1c144c7e28968a331b9217b94a" },
-    { url = "https://files.pythonhosted.org/packages/c1/70/6b41bdcddf541b437bbb9f47f94d2db5d9ddef6c37ccab8c9107743748a4/pillow-12.0.0-cp314-cp314t-win_arm64.whl", hash = "sha256:99353a06902c2e43b43e8ff74ee65a7d90307d82370604746738a1e0661ccca7" },
-    { url = "https://files.pythonhosted.org/packages/1d/b3/582327e6c9f86d037b63beebe981425d6811104cb443e8193824ef1a2f27/pillow-12.0.0-pp311-pypy311_pp73-macosx_10_15_x86_64.whl", hash = "sha256:b22bd8c974942477156be55a768f7aa37c46904c175be4e158b6a86e3a6b7ca8" },
-    { url = "https://files.pythonhosted.org/packages/fd/d6/67748211d119f3b6540baf90f92fae73ae51d5217b171b0e8b5f7e5d558f/pillow-12.0.0-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:805ebf596939e48dbb2e4922a1d3852cfc25c38160751ce02da93058b48d252a" },
-    { url = "https://files.pythonhosted.org/packages/2d/e1/f8281e5d844c41872b273b9f2c34a4bf64ca08905668c8ae730eedc7c9fa/pillow-12.0.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:cae81479f77420d217def5f54b5b9d279804d17e982e0f2fa19b1d1e14ab5197" },
-    { url = "https://files.pythonhosted.org/packages/94/5a/0d8ab8ffe8a102ff5df60d0de5af309015163bf710c7bb3e8311dd3b3ad0/pillow-12.0.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:aeaefa96c768fc66818730b952a862235d68825c178f1b3ffd4efd7ad2edcb7c" },
-    { url = "https://files.pythonhosted.org/packages/20/2e/3434380e8110b76cd9eb00a363c484b050f949b4bbe84ba770bb8508a02c/pillow-12.0.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:09f2d0abef9e4e2f349305a4f8cc784a8a6c2f58a8c4892eea13b10a943bd26e" },
-    { url = "https://files.pythonhosted.org/packages/57/ca/5a9d38900d9d74785141d6580950fe705de68af735ff6e727cb911b64740/pillow-12.0.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:bdee52571a343d721fb2eb3b090a82d959ff37fc631e3f70422e0c2e029f3e76" },
-    { url = "https://files.pythonhosted.org/packages/95/7e/f896623c3c635a90537ac093c6a618ebe1a90d87206e42309cb5d98a1b9e/pillow-12.0.0-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:b290fd8aa38422444d4b50d579de197557f182ef1068b75f5aa8558638b8d0a5" },
-]
-
-[[package]]
-name = "setuptools"
-version = "70.2.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-wheels = [
-    { url = "https://download.pytorch.org/whl/setuptools-70.2.0-py3-none-any.whl", hash = "sha256:b8b8060bb426838fbe942479c90296ce976249451118ef566a5a0b7d8b78fb05" },
-]
-
-[[package]]
-name = "swactor"
-version = "0.1.0"
-source = { editable = "../swactor-python" }
-
-[package.metadata]
-
-[package.metadata.requires-dev]
-dev = [
-    { name = "ipykernel" },
-    { name = "jupyter" },
-]
-
-[[package]]
-name = "swactor-dp-mnist"
-version = "0.1.0"
-source = { virtual = "." }
-dependencies = [
-    { name = "numpy", version = "2.0.2", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10'" },
-    { name = "numpy", version = "2.2.6", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version == '3.10.*'" },
-    { name = "numpy", version = "2.3.5", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.11'" },
-    { name = "swactor" },
-    { name = "torch", version = "2.8.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10' and sys_platform == 'darwin'" },
-    { name = "torch", version = "2.8.0+cpu", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10' and sys_platform != 'darwin'" },
-    { name = "torch", version = "2.10.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform == 'darwin'" },
-    { name = "torch", version = "2.10.0+cpu", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform != 'darwin'" },
-    { name = "torchvision", version = "0.23.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "(python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform == 'darwin')" },
-    { name = "torchvision", version = "0.23.0+cpu", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')" },
-    { name = "torchvision", version = "0.25.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform == 'darwin'" },
-    { name = "torchvision", version = "0.25.0+cpu", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform != 'darwin'" },
-]
-
-[package.metadata]
-requires-dist = [
-    { name = "numpy" },
-    { name = "swactor", editable = "../swactor-python" },
-    { name = "torch" },
-    { name = "torchvision" },
-]
-
-[[package]]
-name = "sympy"
-version = "1.14.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-dependencies = [
-    { name = "mpmath" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/83/d3/803453b36afefb7c2bb238361cd4ae6125a569b4db67cd9e79846ba2d68c/sympy-1.14.0.tar.gz", hash = "sha256:d3d3fe8df1e5a0b42f0e7bdf50541697dbe7d23746e894990c030e2b05e72517" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/a2/09/77d55d46fd61b4a135c444fc97158ef34a095e5681d0a6c10b75bf356191/sympy-1.14.0-py3-none-any.whl", hash = "sha256:e091cc3e99d2141a0ba2847328f5479b05d94a6635cb96148ccb3f34671bd8f5" },
-]
-
-[[package]]
-name = "torch"
-version = "2.8.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version < '3.10' and sys_platform == 'darwin'",
-]
-dependencies = [
-    { name = "filelock", version = "3.19.1", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10' and sys_platform == 'darwin'" },
-    { name = "fsspec", version = "2025.10.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10' and sys_platform == 'darwin'" },
-    { name = "jinja2", marker = "python_full_version < '3.10' and sys_platform == 'darwin'" },
-    { name = "networkx", version = "3.2.1", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10' and sys_platform == 'darwin'" },
-    { name = "sympy", marker = "python_full_version < '3.10' and sys_platform == 'darwin'" },
-    { name = "typing-extensions", marker = "python_full_version < '3.10' and sys_platform == 'darwin'" },
-]
-wheels = [
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0-cp310-none-macosx_11_0_arm64.whl", hash = "sha256:a467b49fe893a6a6cce89e3aee556edfdc64a722d7195fdfdd75cec9dea13779" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0-cp311-none-macosx_11_0_arm64.whl", hash = "sha256:3d05017d19bc99741288e458888283a44b0ee881d53f05f72f8b1cfea8998122" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0-cp312-none-macosx_11_0_arm64.whl", hash = "sha256:a47b7986bee3f61ad217d8a8ce24605809ab425baf349f97de758815edd2ef54" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0-cp313-cp313t-macosx_14_0_arm64.whl", hash = "sha256:fbe2e149c5174ef90d29a5f84a554dfaf28e003cb4f61fa2c8c024c17ec7ca58" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0-cp313-none-macosx_11_0_arm64.whl", hash = "sha256:057efd30a6778d2ee5e2374cd63a63f63311aa6f33321e627c655df60abdd390" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0-cp39-none-macosx_11_0_arm64.whl", hash = "sha256:6bec1f240968749e23bbb7ea8f6617a08fc3db1b4c766b5cceadf8a28b4197d9" },
-]
-
-[[package]]
-name = "torch"
-version = "2.8.0+cpu"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')",
-    "python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux'",
-]
-dependencies = [
-    { name = "filelock", version = "3.19.1", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10' and sys_platform != 'darwin'" },
-    { name = "fsspec", version = "2025.10.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10' and sys_platform != 'darwin'" },
-    { name = "jinja2", marker = "python_full_version < '3.10' and sys_platform != 'darwin'" },
-    { name = "networkx", version = "3.2.1", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10' and sys_platform != 'darwin'" },
-    { name = "sympy", marker = "python_full_version < '3.10' and sys_platform != 'darwin'" },
-    { name = "typing-extensions", marker = "python_full_version < '3.10' and sys_platform != 'darwin'" },
-]
-wheels = [
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp310-cp310-linux_s390x.whl", hash = "sha256:5d255d259fbc65439b671580e40fdb8faea4644761b64fed90d6904ffe71bbc1" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp310-cp310-manylinux_2_28_aarch64.whl", hash = "sha256:b2149858b8340aeeb1f3056e0bff5b82b96e43b596fe49a9dba3184522261213" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp310-cp310-manylinux_2_28_x86_64.whl", hash = "sha256:16d75fa4e96ea28a785dfd66083ca55eb1058b6d6c5413f01656ca965ee2077e" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp310-cp310-win_amd64.whl", hash = "sha256:7cc4af6ba954f36c2163eab98cf113c137fc25aa8bbf1b06ef155968627beed2" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp311-cp311-linux_s390x.whl", hash = "sha256:2bfc013dd6efdc8f8223a0241d3529af9f315dffefb53ffa3bf14d3f10127da6" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp311-cp311-manylinux_2_28_aarch64.whl", hash = "sha256:680129efdeeec3db5da3f88ee5d28c1b1e103b774aef40f9d638e2cce8f8d8d8" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp311-cp311-manylinux_2_28_x86_64.whl", hash = "sha256:cb06175284673a581dd91fb1965662ae4ecaba6e5c357aa0ea7bb8b84b6b7eeb" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp311-cp311-win_amd64.whl", hash = "sha256:7631ef49fbd38d382909525b83696dc12a55d68492ade4ace3883c62b9fc140f" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp311-cp311-win_arm64.whl", hash = "sha256:41e6fc5ec0914fcdce44ccf338b1d19a441b55cafdd741fd0bf1af3f9e4cfd14" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp312-cp312-linux_s390x.whl", hash = "sha256:0e34e276722ab7dd0dffa9e12fe2135a9b34a0e300c456ed7ad6430229404eb5" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp312-cp312-manylinux_2_28_aarch64.whl", hash = "sha256:610f600c102386e581327d5efc18c0d6edecb9820b4140d26163354a99cd800d" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp312-cp312-manylinux_2_28_x86_64.whl", hash = "sha256:cb9a8ba8137ab24e36bf1742cb79a1294bd374db570f09fc15a5e1318160db4e" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp312-cp312-win_amd64.whl", hash = "sha256:2be20b2c05a0cce10430cc25f32b689259640d273232b2de357c35729132256d" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp312-cp312-win_arm64.whl", hash = "sha256:99fc421a5d234580e45957a7b02effbf3e1c884a5dd077afc85352c77bf41434" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp313-cp313-linux_s390x.whl", hash = "sha256:8b5882276633cf91fe3d2d7246c743b94d44a7e660b27f1308007fdb1bb89f7d" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp313-cp313-manylinux_2_28_aarch64.whl", hash = "sha256:a5064b5e23772c8d164068cc7c12e01a75faf7b948ecd95a0d4007d7487e5f25" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp313-cp313-manylinux_2_28_x86_64.whl", hash = "sha256:8f81dedb4c6076ec325acc3b47525f9c550e5284a18eae1d9061c543f7b6e7de" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp313-cp313-win_amd64.whl", hash = "sha256:e1ee1b2346ade3ea90306dfbec7e8ff17bc220d344109d189ae09078333b0856" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp313-cp313-win_arm64.whl", hash = "sha256:64c187345509f2b1bb334feed4666e2c781ca381874bde589182f81247e61f88" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp313-cp313t-manylinux_2_28_aarch64.whl", hash = "sha256:af81283ac671f434b1b25c95ba295f270e72db1fad48831eb5e4748ff9840041" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp313-cp313t-manylinux_2_28_x86_64.whl", hash = "sha256:a9dbb6f64f63258bc811e2c0c99640a81e5af93c531ad96e95c5ec777ea46dab" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp313-cp313t-win_amd64.whl", hash = "sha256:6d93a7165419bc4b2b907e859ccab0dea5deeab261448ae9a5ec5431f14c0e64" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp39-cp39-linux_s390x.whl", hash = "sha256:5239ef35402000844b676a9b79ed76d5ae6b028a6762bbdfebdf8421a0f4d2aa" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp39-cp39-manylinux_2_28_aarch64.whl", hash = "sha256:eac8b7ef5c7ca106daec5e829dfa8ca56ca47601db13b402d2608861ad3ab926" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp39-cp39-manylinux_2_28_x86_64.whl", hash = "sha256:bda4f93d64dcd9ae5d51844bbccc6fcb7d603522bcc95d256b5fe3bdb9dccca3" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.8.0%2Bcpu-cp39-cp39-win_amd64.whl", hash = "sha256:e3c3fce24ebaac954b837d1498e36d484ad0d93e2a1ed5b6b0c55a02ea748fab" },
-]
-
-[[package]]
-name = "torch"
-version = "2.10.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform == 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform == 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform == 'darwin'",
-]
-dependencies = [
-    { name = "filelock", version = "3.20.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform == 'darwin'" },
-    { name = "fsspec", version = "2025.12.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform == 'darwin'" },
-    { name = "jinja2", marker = "python_full_version >= '3.10' and sys_platform == 'darwin'" },
-    { name = "networkx", version = "3.4.2", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version == '3.10.*' and sys_platform == 'darwin'" },
-    { name = "networkx", version = "3.6.1", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.11' and sys_platform == 'darwin'" },
-    { name = "setuptools", marker = "python_full_version >= '3.12' and sys_platform == 'darwin'" },
-    { name = "sympy", marker = "python_full_version >= '3.10' and sys_platform == 'darwin'" },
-    { name = "typing-extensions", marker = "python_full_version >= '3.10' and sys_platform == 'darwin'" },
-]
-wheels = [
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-1-cp310-none-macosx_11_0_arm64.whl", hash = "sha256:4db72a4d257c45c3502f11764ee41460a87312fdc3dff47a8957812efe961725" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-1-cp311-none-macosx_11_0_arm64.whl", hash = "sha256:0826ac8e409551e12b2360ac18b4161a838cbd111933e694752f351191331d09" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-1-cp312-none-macosx_11_0_arm64.whl", hash = "sha256:7fbbf409143a4fe0812a40c0b46a436030a7e1d14fe8c5234dfbe44df47f617e" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-1-cp313-none-macosx_11_0_arm64.whl", hash = "sha256:b39cafff7229699f9d6e172cac74d85fd71b568268e439e08d9c540e54732a3e" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-cp310-none-macosx_11_0_arm64.whl", hash = "sha256:2d16abfce6c92584ceeb00c3b2665d5798424dd9ed235ea69b72e045cd53ae97" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-cp311-none-macosx_11_0_arm64.whl", hash = "sha256:4584ab167995c0479f6821e3dceaf199c8166c811d3adbba5d8eedbbfa6764fd" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-cp312-none-macosx_11_0_arm64.whl", hash = "sha256:45a1c5057629444aeb1c452c18298fa7f30f2f7aeadd4dc41f9d340980294407" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-cp313-cp313t-macosx_14_0_arm64.whl", hash = "sha256:339e05502b6c839db40e88720cb700f5a3b50cda332284873e851772d41b2c1e" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-cp313-none-macosx_11_0_arm64.whl", hash = "sha256:840351da59cedb7bcbc51981880050813c19ef6b898a7fecf73a3afc71aff3fe" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-cp314-cp314-macosx_14_0_arm64.whl", hash = "sha256:c88b1129fd4e14f0f882963c6728315caae35d2f47374d17edeed1edc7697497" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0-cp314-cp314t-macosx_14_0_arm64.whl", hash = "sha256:f4bea7dc451267c028593751612ad559299589304e68df54ae7672427893ff2c" },
-]
-
-[[package]]
-name = "torch"
-version = "2.10.0+cpu"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform != 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform != 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform != 'darwin'",
-]
-dependencies = [
-    { name = "filelock", version = "3.20.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform != 'darwin'" },
-    { name = "fsspec", version = "2025.12.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform != 'darwin'" },
-    { name = "jinja2", marker = "python_full_version >= '3.10' and sys_platform != 'darwin'" },
-    { name = "networkx", version = "3.4.2", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version == '3.10.*' and sys_platform != 'darwin'" },
-    { name = "networkx", version = "3.6.1", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.11' and sys_platform != 'darwin'" },
-    { name = "setuptools", marker = "python_full_version >= '3.12' and sys_platform != 'darwin'" },
-    { name = "sympy", marker = "python_full_version >= '3.10' and sys_platform != 'darwin'" },
-    { name = "typing-extensions", marker = "python_full_version >= '3.10' and sys_platform != 'darwin'" },
-]
-wheels = [
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp310-cp310-linux_aarch64.whl", hash = "sha256:31ae44836c8b9bbd1a3943d29c7c7457709ddf7c6173aa34aefe9d2203e4c405" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp310-cp310-linux_s390x.whl", hash = "sha256:beadc2a6a1785b09a46daad378de91ef274b8d3eea7af0bc2d017d97f115afdf" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp310-cp310-manylinux_2_28_aarch64.whl", hash = "sha256:d63ee6a80982fd73fe44bb70d97d2976e010312ff6db81d7bfb9167b06dd45b9" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp310-cp310-manylinux_2_28_x86_64.whl", hash = "sha256:a280ffaea7b9c828e0c1b9b3bd502d9b6a649dc9416997b69b84544bd469f215" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp310-cp310-win_amd64.whl", hash = "sha256:6c6f0df770144907092a0d067048d96ed4f278a6c840376d2ff0e27e7579b925" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp311-cp311-linux_aarch64.whl", hash = "sha256:ce5c113d1f55f8c1f5af05047a24e50d11d293e0cbbb5bf7a75c6c761edd6eaa" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp311-cp311-linux_s390x.whl", hash = "sha256:0e286fcf6ce0cc7b204396c9b4ea0d375f1f0c3e752f68ce3d3aeb265511db8c" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp311-cp311-manylinux_2_28_aarch64.whl", hash = "sha256:1cfcb9b1558c6e52dffd0d4effce83b13c5ae5d97338164c372048c21f9cfccb" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp311-cp311-manylinux_2_28_x86_64.whl", hash = "sha256:b7cb1ec66cefb90fd7b676eac72cfda3b8d4e4d0cacd7a531963bc2e0a9710ab" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp311-cp311-win_amd64.whl", hash = "sha256:17a09465bab2aab8f0f273410297133d8d8fb6dd84dccbd252ca4a4f3a111847" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp311-cp311-win_arm64.whl", hash = "sha256:c35c0de592941d4944698dbfa87271ab85d3370eca3b694943a2ab307ac34b3f" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp312-cp312-linux_aarch64.whl", hash = "sha256:8de5a36371b775e2d4881ed12cc7f2de400b1ad3d728aa74a281f649f87c9b8c" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp312-cp312-linux_s390x.whl", hash = "sha256:9accc30b56cb6756d4a9d04fcb8ebc0bb68c7d55c1ed31a8657397d316d31596" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp312-cp312-manylinux_2_28_aarch64.whl", hash = "sha256:179451716487f8cb09b56459667fa1f5c4c0946c1e75fbeae77cfc40a5768d87" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp312-cp312-manylinux_2_28_x86_64.whl", hash = "sha256:ee40b8a4b4b2cf0670c6fd4f35a7ef23871af956fecb238fbf5da15a72650b1d" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp312-cp312-win_amd64.whl", hash = "sha256:21cb5436978ef47c823b7a813ff0f8c2892e266cfe0f1d944879b5fba81bf4e1" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp312-cp312-win_arm64.whl", hash = "sha256:3eaa727e6a73affa61564d86b9d03191df45c8650d0666bd3d57c8597ef61e78" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313-linux_aarch64.whl", hash = "sha256:fd215f3d0f681905c5b56b0630a3d666900a37fcc3ca5b937f95275c66f9fd9c" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313-linux_s390x.whl", hash = "sha256:170a0623108055be5199370335cf9b41ba6875b3cb6f086db4aee583331a4899" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313-manylinux_2_28_aarch64.whl", hash = "sha256:e51994492cdb76edce29da88de3672a3022f9ef0ffd90345436948d4992be2c7" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313-manylinux_2_28_x86_64.whl", hash = "sha256:8d316e5bf121f1eab1147e49ad0511a9d92e4c45cc357d1ab0bee440da71a095" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313-win_amd64.whl", hash = "sha256:b719da5af01b59126ac13eefd6ba3dd12d002dc0e8e79b8b365e55267a8189d3" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313-win_arm64.whl", hash = "sha256:b67d91326e4ed9eccbd6b7d84ed7ffa43f93103aa3f0b24145f3001f3b11b714" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313t-linux_aarch64.whl", hash = "sha256:5af75e5f49de21b0bdf7672bc27139bd285f9e8dbcabe2d617a2eb656514ac36" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313t-linux_s390x.whl", hash = "sha256:ba51ef01a510baf8fff576174f702c47e1aa54389a9f1fba323bb1a5003ff0bf" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313t-manylinux_2_28_aarch64.whl", hash = "sha256:0fedcb1a77e8f2aaf7bfd21591bf6d1e0b207473268c9be16b17cb7783253969" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313t-manylinux_2_28_x86_64.whl", hash = "sha256:106dd1930cb30a4a337366ba3f9b25318ebf940f51fd46f789281dd9e736bdc4" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp313-cp313t-win_amd64.whl", hash = "sha256:eb1bde1ce198f05c8770017de27e001d404499cf552aaaa014569eff56ca25c0" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp314-cp314-linux_aarch64.whl", hash = "sha256:ea2bcc9d1fca66974a71d4bf9a502539283f35d61fcab5a799b4e120846f1e02" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp314-cp314-linux_s390x.whl", hash = "sha256:f8294fd2fc6dd8f4435a891a0122307a043b14b21f0dac1bca63c85bfb59e586" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp314-cp314-manylinux_2_28_aarch64.whl", hash = "sha256:a28fdbcfa2fbacffec81300f24dd1bed2b0ccfdbed107a823cff12bc1db070f6" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp314-cp314-manylinux_2_28_x86_64.whl", hash = "sha256:aada8afc068add586464b2a55adb7cc9091eec55caf5320447204741cb6a0604" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp314-cp314-win_amd64.whl", hash = "sha256:2adc71fe471e98a608723bfc837f7e1929885ebb912c693597711e139c1cda41" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp314-cp314t-linux_aarch64.whl", hash = "sha256:9412bd37b70f5ebd1205242c4ba4cabae35a605947f2b30806d5c9b467936db9" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp314-cp314t-linux_s390x.whl", hash = "sha256:e71c476517c33e7db69825a9ff46c7f47a723ec4dac5b2481cff4246d1c632be" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp314-cp314t-manylinux_2_28_aarch64.whl", hash = "sha256:23882f8d882460aca809882fc42f5e343bf07585274f929ced00177d1be1eb67" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp314-cp314t-manylinux_2_28_x86_64.whl", hash = "sha256:4fcd8b4cc2ae20f2b7749fb275349c55432393868778c2d50a08e81d5ee5591e" },
-    { url = "https://download.pytorch.org/whl/cpu/torch-2.10.0%2Bcpu-cp314-cp314t-win_amd64.whl", hash = "sha256:ffc8da9a1341092d6a90cb5b1c1a33cd61abf0fb43f0cd88443c27fa372c26ae" },
-]
-
-[[package]]
-name = "torchvision"
-version = "0.23.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux'",
-    "python_full_version < '3.10' and sys_platform == 'darwin'",
-]
-dependencies = [
-    { name = "numpy", version = "2.0.2", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "(python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform == 'darwin')" },
-    { name = "pillow", version = "11.3.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "(python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform == 'darwin')" },
-    { name = "torch", version = "2.8.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10' and sys_platform == 'darwin'" },
-    { name = "torch", version = "2.8.0+cpu", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version < '3.10' and platform_machine == 'aarch64' and platform_python_implementation == 'CPython' and sys_platform == 'linux'" },
-]
-wheels = [
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:7266871daca00ad46d1c073e55d972179d12a58fa5c9adec9a3db9bbed71284a" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp310-cp310-manylinux_2_28_aarch64.whl", hash = "sha256:31c583ba27426a3a04eca8c05450524105c1564db41be6632f7536ef405a6de2" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:49aa20e21f0c2bd458c71d7b449776cbd5f16693dd5807195a820612b8a229b7" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp311-cp311-manylinux_2_28_aarch64.whl", hash = "sha256:01dc33ee24c79148aee7cdbcf34ae8a3c9da1674a591e781577b716d233b1fa6" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:e0e2c04a91403e8dd3af9756c6a024a1d9c0ed9c0d592a8314ded8f4fe30d440" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp312-cp312-manylinux_2_28_aarch64.whl", hash = "sha256:6dd7c4d329a0e03157803031bc856220c6155ef08c26d4f5bbac938acecf0948" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:1c37e325e09a184b730c3ef51424f383ec5745378dc0eca244520aca29722600" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp313-cp313-manylinux_2_28_aarch64.whl", hash = "sha256:2f7fd6c15f3697e80627b77934f77705f3bc0e98278b989b2655de01f6903e1d" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:2df618e1143805a7673aaf82cb5720dd9112d4e771983156aaf2ffff692eebf9" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp313-cp313t-manylinux_2_28_aarch64.whl", hash = "sha256:2a3299d2b1d5a7aed2d3b6ffb69c672ca8830671967eb1cee1497bacd82fe47b" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:b190db205f90206c230fc2f91cbdfd5733334babc0e0d19bddb90a40b8cf26c2" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0-cp39-cp39-manylinux_2_28_aarch64.whl", hash = "sha256:6c74cbc1cbee26dd4f35f989cd80dccc40411f258dee476b29871dee4b483af0" },
-]
-
-[[package]]
-name = "torchvision"
-version = "0.23.0+cpu"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')",
-]
-dependencies = [
-    { name = "numpy", version = "2.0.2", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')" },
-    { name = "pillow", version = "11.3.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')" },
-    { name = "torch", version = "2.8.0+cpu", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "(python_full_version < '3.10' and platform_machine != 'aarch64' and sys_platform == 'linux') or (python_full_version < '3.10' and platform_python_implementation != 'CPython' and sys_platform == 'linux') or (python_full_version < '3.10' and sys_platform != 'darwin' and sys_platform != 'linux')" },
-]
-wheels = [
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp310-cp310-manylinux_2_28_x86_64.whl", hash = "sha256:bc6cee94bcc145d59426fd5289ca91e42cdb60e9886590f29d88f9f03c6bdea3" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp310-cp310-win_amd64.whl", hash = "sha256:758fa965628ec53712fffdd866401329e8a5f2c5d36325b17aad771d2d2e3495" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp311-cp311-manylinux_2_28_x86_64.whl", hash = "sha256:d83d8075db43b8ca89680bdeb2f100c832e2a3aa61ee42c038b1a146e5e511b6" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp311-cp311-win_amd64.whl", hash = "sha256:51603eb071d0681abc4db98b10ff394ace31f425852e8de249b91c09c60eb19a" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp312-cp312-manylinux_2_28_x86_64.whl", hash = "sha256:ae459d4509d3b837b978dc6c66106601f916b6d2cda75c137e3f5f48324ce1da" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp312-cp312-win_amd64.whl", hash = "sha256:a651ccc540cf4c87eb988730c59c2220c52b57adc276f044e7efb9830fa65a1d" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp313-cp313-manylinux_2_28_x86_64.whl", hash = "sha256:dea90a67d60a5366b0358a0b8d6bf267805278697d6fd950cf0e31139e56d1be" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp313-cp313-win_amd64.whl", hash = "sha256:82928788025170c62e7df1120dcdc0cd175bfc31c08374613ce6d1a040bc0cda" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp313-cp313t-manylinux_2_28_x86_64.whl", hash = "sha256:474d77adbbbed5166db3e5636b4b4ae3399c66ef5bfa12536e254b32259c90c0" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp313-cp313t-win_amd64.whl", hash = "sha256:8d6a47e23d7896f0ef9aa7ea7179eb6324e82438aa66d19884c2020d0646b104" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp39-cp39-manylinux_2_28_x86_64.whl", hash = "sha256:c879590294471ffa6dca8ae2115c08351dde3b674fa271dd3b175f2de508a80a" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.23.0%2Bcpu-cp39-cp39-win_amd64.whl", hash = "sha256:d72ee52a73ca0a44f7d61729eb9de1b90b67230b71a496ff0d58b4255e6b88a9" },
-]
-
-[[package]]
-name = "torchvision"
-version = "0.25.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform == 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform == 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform == 'darwin'",
-]
-dependencies = [
-    { name = "numpy", version = "2.2.6", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version == '3.10.*' and sys_platform == 'darwin'" },
-    { name = "numpy", version = "2.3.5", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.11' and sys_platform == 'darwin'" },
-    { name = "pillow", version = "12.0.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform == 'darwin'" },
-    { name = "torch", version = "2.10.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform == 'darwin'" },
-]
-wheels = [
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:7810841916a2a870cbfb581f4084b59479908fb9db6edfdf78139931392d8677" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:a76ce7b8d4fce291a25721ee2f921c783acc6dbd4fc32dc741ed2a1d5a8dde2f" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:724f212a58a0d0d758649ce288601056b5f46a01de545702f42bccc5b25cb0cc" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0-cp313-cp313-macosx_12_0_arm64.whl", hash = "sha256:6c444119c6af8fa48b79c59f1529fc15a45a2bbf823cf85f851e7203d84f727f" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:80895a40faa5783ce19ed5a692a54062c7888a385490e866324355f8d59b2eb3" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:a64ae543fe0a057a93954af94c239629723db196ed65090e6775f136726b22f8" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:b7df71942e31b74a5161dea3452da35e5fb1d36c752aedf61f2dd3c7be35739a" },
-]
-
-[[package]]
-name = "torchvision"
-version = "0.25.0+cpu"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform != 'darwin'",
-    "python_full_version == '3.11.*' and sys_platform != 'darwin'",
-    "python_full_version == '3.10.*' and sys_platform != 'darwin'",
-]
-dependencies = [
-    { name = "numpy", version = "2.2.6", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version == '3.10.*' and sys_platform != 'darwin'" },
-    { name = "numpy", version = "2.3.5", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.11' and sys_platform != 'darwin'" },
-    { name = "pillow", version = "12.0.0", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform != 'darwin'" },
-    { name = "torch", version = "2.10.0+cpu", source = { registry = "https://download.pytorch.org/whl/cpu" }, marker = "python_full_version >= '3.10' and sys_platform != 'darwin'" },
-]
-wheels = [
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp310-cp310-manylinux_2_28_aarch64.whl", hash = "sha256:73ce04dea64914ff1110008311204c366107d651d3b04faa0dbee77efb7133b7" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp310-cp310-manylinux_2_28_x86_64.whl", hash = "sha256:7f851245a2687743742157988ed9c42c6e312b95bbe6cfcac9e7d0d0c28ae62f" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp310-cp310-win_amd64.whl", hash = "sha256:3e2ae9981e32a5b9db685659d5c7af0f04b159ff20394650a90124baf6ada51a" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp311-cp311-manylinux_2_28_aarch64.whl", hash = "sha256:59be99d1c470ef470b134468aa6afa6f968081a503acb4ee883d70332f822e35" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp311-cp311-manylinux_2_28_x86_64.whl", hash = "sha256:aa016ab73e06a886f72edc8929ed2ed4c85aaaa6e10500ecdef921b03129b19e" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp311-cp311-win_amd64.whl", hash = "sha256:c7eb5f219fdfaf1f65e68c00eb81172ab4fa08a9874dae9dad2bca360da34d0f" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp312-cp312-manylinux_2_28_aarch64.whl", hash = "sha256:727334e9a721cfc1ac296ce0bf9e69d9486821bfa5b1e75a8feb6f78041db481" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp312-cp312-manylinux_2_28_x86_64.whl", hash = "sha256:c1be164e93c68b2dbf460fd58975377c892dbcf3358fb72941709c3857351bba" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp312-cp312-win_amd64.whl", hash = "sha256:2d444009c0956669ada149f61ed78f257c1cc96d259efa6acf3929ca96ceb3f0" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp313-cp313-manylinux_2_28_aarch64.whl", hash = "sha256:fe54cbd5942cd0b26a90f1748f0d4421caf67be35c281c6c3b8573733a03d630" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp313-cp313-manylinux_2_28_x86_64.whl", hash = "sha256:90eec299e1f82cfaf080ccb789df3838cb9a54b57e2ebe33852cd392c692de5c" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp313-cp313-win_amd64.whl", hash = "sha256:783c8fc580bbfc159bff52f4f72cdd538e42b32956e70dffa42b940db114e151" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp313-cp313t-manylinux_2_28_aarch64.whl", hash = "sha256:e985e12a9a232618e5a43476de5689e4b14989f5da6b93909c57afa57ec27012" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp313-cp313t-manylinux_2_28_x86_64.whl", hash = "sha256:813f0106eb3e268f3783da67b882458e544c6fb72f946e6ca64b5ed4e62c6a77" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp313-cp313t-win_amd64.whl", hash = "sha256:9212210f417888e6261c040495180f053084812cf873dedba9fc51ff4b24b2d3" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp314-cp314-manylinux_2_28_aarch64.whl", hash = "sha256:0c2d0da9bc011a0fde1d125af396a8fbe94d99becf9d313764f24ca7657a3448" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp314-cp314-manylinux_2_28_x86_64.whl", hash = "sha256:4d72a57a8f0b5146e26dac1fbfa2c905280cd04f5fcb23b9c56253506b683aeb" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp314-cp314-win_amd64.whl", hash = "sha256:499eae1e535766391b6ee2d1e6e841239c20e2e6d88203a15b8f9f8d60a1f8bd" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp314-cp314t-manylinux_2_28_aarch64.whl", hash = "sha256:7d47d544899fabac52ebe0d4812975608fd7ab79a3d7fb6383275eb667e33f53" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp314-cp314t-manylinux_2_28_x86_64.whl", hash = "sha256:9511339b3b5eb75229e0b5041202e8aed9bef3b1de3a715b9fb319c9e97688fd" },
-    { url = "https://download.pytorch.org/whl/cpu/torchvision-0.25.0%2Bcpu-cp314-cp314t-win_amd64.whl", hash = "sha256:fb9f07f6a10f0ac24ac482ae68c6df99110b74a0d80a4c64fddc9753267d8815" },
-]
-
-[[package]]
-name = "typing-extensions"
-version = "4.15.0"
-source = { registry = "https://download.pytorch.org/whl/cpu" }
-wheels = [
-    { url = "https://download.pytorch.org/whl/typing_extensions-4.15.0-py3-none-any.whl" },
-]
diff --git a/examples/dp-mnist/worker.py b/examples/dp-mnist/worker.py
deleted file mode 100644
index b0e8092..0000000
--- a/examples/dp-mnist/worker.py
+++ /dev/null
@@ -1,108 +0,0 @@
-import torch
-import torch.nn as nn
-import torch.nn.functional as F
-from torch.utils.data import DataLoader, Subset
-from torchvision import datasets, transforms
-
-
-class MnistNet(nn.Module):
-    def __init__(self):
-        super().__init__()
-        self.fc1 = nn.Linear(784, 128)
-        self.fc2 = nn.Linear(128, 10)
-
-    def forward(self, x):
-        x = x.view(-1, 784)
-        x = F.relu(self.fc1(x))
-        x = self.fc2(x)
-        return F.log_softmax(x, dim=1)
-
-
-class MnistWorker:
-    def __init__(self, agg_addr, worker_id, initial_weights, batch_size, lr):
-        self.agg_addr = agg_addr
-        self.worker_id = worker_id
-        self.batch_size = batch_size
-
-        self.model = MnistNet()
-        # Apply initial weights so all workers start from the same point
-        for param, w in zip(self.model.parameters(), initial_weights):
-            param.data = torch.tensor(w, dtype=param.dtype).reshape(param.shape)
-
-        self.optimizer = torch.optim.SGD(self.model.parameters(), lr=lr)
-
-        transform = transforms.Compose([
-            transforms.ToTensor(),
-            transforms.Normalize((0.1307,), (0.3081,)),
-        ])
-        full_train = datasets.MNIST("./data", train=True, download=True, transform=transform)
-
-        # Shard: worker 0 gets first half, worker 1 gets second half
-        n = len(full_train)
-        half = n // 2
-        if worker_id == 0:
-            indices = list(range(0, half))
-        else:
-            indices = list(range(half, n))
-        shard = Subset(full_train, indices)
-        self.train_loader = DataLoader(shard, batch_size=batch_size, shuffle=True)
-        self.train_iter = iter(self.train_loader)
-
-        self.test_loader = DataLoader(
-            datasets.MNIST("./data", train=False, download=True, transform=transform),
-            batch_size=1000,
-            shuffle=False,
-        )
-
-    def _next_batch(self):
-        try:
-            return next(self.train_iter)
-        except StopIteration:
-            self.train_iter = iter(self.train_loader)
-            return next(self.train_iter)
-
-    def __call__(self, ctx, msg):
-        msg_type = msg["type"]
-
-        if msg_type == "train_batch":
-            self.optimizer.zero_grad()
-            data, target = self._next_batch()
-            output = self.model(data)
-            loss = F.nll_loss(output, target)
-            loss.backward()
-
-            # Extract gradients as flat lists
-            grads = [p.grad.detach().flatten().tolist() for p in self.model.parameters()]
-            ctx.send(self.agg_addr, {
-                "type": "gradients",
-                "worker_id": self.worker_id,
-                "data": grads,
-                "loss": loss.item(),
-            })
-
-        elif msg_type == "update":
-            avg_grads = msg["data"]
-            for param, g in zip(self.model.parameters(), avg_grads):
-                param.grad = torch.tensor(g, dtype=param.dtype).reshape(param.shape)
-            self.optimizer.step()
-
-        elif msg_type == "evaluate":
-            self.model.eval()
-            correct = 0
-            total = 0
-            with torch.no_grad():
-                for data, target in self.test_loader:
-                    output = self.model(data)
-                    pred = output.argmax(dim=1)
-                    correct += pred.eq(target).sum().item()
-                    total += len(target)
-            self.model.train()
-            ctx.send(self.agg_addr, {
-                "type": "eval_result",
-                "worker_id": self.worker_id,
-                "accuracy": correct / total,
-            })
-
-        elif msg_type == "save_model":
-            path = msg.get("path", "mnist_model.pt")
-            torch.save(self.model.state_dict(), path)
diff --git a/examples/hello.rs b/examples/hello.rs
deleted file mode 100644
index 7f9b483..0000000
--- a/examples/hello.rs
+++ /dev/null
@@ -1,65 +0,0 @@
-use swactor::{
-    actor::{ActorAddress, ActorInterface},
-    runtime::{Ctx, Runtime, RuntimeConfig},
-};
-
-#[derive(Debug, Default)]
-struct Greeter {
-    pub num_greeted: usize,
-}
-
-#[derive(Debug, Default, Clone)]
-struct GreetMessage {
-    /// who do we greet?
-    who: String,
-
-    /// who do we send out greeting back to?
-    return_addr: ActorAddress,
-}
-
-#[derive(Debug, Default, Clone)]
-struct GreetResponse(String);
-
-impl ActorInterface for Greeter {
-    type Incoming = GreetMessage;
-    type Response = GreetResponse;
-
-    fn handle(&mut self, ctx: &Ctx, msg: GreetMessage) {
-        let res = GreetResponse(format!("Hello, {}!", msg.who));
-        self.num_greeted += 1;
-        if let Err(_) = ctx.send(msg.return_addr, res) {
-            // no error handling
-            self.num_greeted -= 1;
-        }
-    }
-}
-
-fn main() {
-    let rt = Runtime::new(RuntimeConfig::default());
-
-    // spawn a `Greeter` in the runtime, returning an address to contact it with
-    let addr = rt
-        .spawn(Greeter::default())
-        .expect("failed to spawn greeter");
-
-    // create an `Inbox` that allows us to receive messages from the runtime
-    let inbox = rt.new_inbox::<GreetResponse>().unwrap();
-
-    // send a message to the `Greeter` we spawned
-    rt.send_to(
-        addr,
-        GreetMessage {
-            who: "world".into(),
-            return_addr: *inbox.addr(),
-        },
-    )
-    .unwrap();
-
-    // default runtime is single threaded, and requires the parent process to drive
-    for _ in 0..3 {
-        rt.tick();
-    }
-    let resp = inbox.try_recv().expect("greeter should have said hello");
-
-    println!("{}", resp.0);
-}
diff --git a/examples/python/.ipynb_checkpoints/getting_started-checkpoint.ipynb b/examples/python/.ipynb_checkpoints/getting_started-checkpoint.ipynb
deleted file mode 100644
index 23261c7..0000000
--- a/examples/python/.ipynb_checkpoints/getting_started-checkpoint.ipynb
+++ /dev/null
@@ -1,98 +0,0 @@
-{
- "cells": [
-  {
-   "cell_type": "markdown",
-   "metadata": {},
-   "source": [
-    "# Swactor — Getting Started\n",
-    "\n",
-    "This notebook walks through the basics of the swactor actor runtime from Python."
-   ]
-  },
-  {
-   "cell_type": "code",
-   "execution_count": null,
-   "metadata": {},
-   "outputs": [],
-   "source": [
-    "from swactor import Runtime"
-   ]
-  },
-  {
-   "cell_type": "markdown",
-   "metadata": {},
-   "source": [
-    "## Single-threaded: spawn, send, tick\n",
-    "\n",
-    "The simplest way to use swactor is with `tick()` — manually stepping the runtime one tick at a time."
-   ]
-  },
-  {
-   "cell_type": "code",
-   "execution_count": null,
-   "metadata": {},
-   "outputs": [],
-   "source": [
-    "def echo(ctx, msg):\n",
-    "    ctx.send(msg[\"reply_to\"], f\"hello, {msg['name']}!\")\n",
-    "\n",
-    "rt = Runtime()\n",
-    "addr = rt.spawn(echo)\n",
-    "inbox = rt.inbox()\n",
-    "\n",
-    "rt.send(addr, {\"name\": \"world\", \"reply_to\": inbox.addr})\n",
-    "rt.tick()\n",
-    "\n",
-    "print(inbox.try_recv())"
-   ]
-  },
-  {
-   "cell_type": "markdown",
-   "metadata": {},
-   "source": [
-    "## Multi-threaded: background runtime\n",
-    "\n",
-    "For real workloads you can run the runtime on background threads with `RuntimeConfig`."
-   ]
-  },
-  {
-   "cell_type": "code",
-   "execution_count": null,
-   "metadata": {},
-   "outputs": [],
-   "source": [
-    "import time\n",
-    "from swactor import Runtime, RuntimeConfig\n",
-    "\n",
-    "def echo(ctx, msg):\n",
-    "    ctx.send(msg[\"reply_to\"], f\"hello, {msg['name']}!\")\n",
-    "\n",
-    "rt = Runtime(RuntimeConfig(num_threads=2))\n",
-    "addr = rt.spawn(echo)\n",
-    "inbox = rt.inbox()\n",
-    "handle = rt.run()\n",
-    "\n",
-    "for name in [\"alice\", \"bob\", \"charlie\"]:\n",
-    "    handle.send(addr, {\"name\": name, \"reply_to\": inbox.addr})\n",
-    "    time.sleep(0.05)  # give the runtime a moment\n",
-    "    print(inbox.try_recv())\n",
-    "\n",
-    "handle.shutdown()\n",
-    "handle.join()"
-   ]
-  }
- ],
- "metadata": {
-  "kernelspec": {
-   "display_name": "Python 3",
-   "language": "python",
-   "name": "python3"
-  },
-  "language_info": {
-   "name": "python",
-   "version": "3.9.0"
-  }
- },
- "nbformat": 4,
- "nbformat_minor": 4
-}
diff --git a/examples/python/getting_started.ipynb b/examples/python/getting_started.ipynb
deleted file mode 100644
index 23261c7..0000000
--- a/examples/python/getting_started.ipynb
+++ /dev/null
@@ -1,98 +0,0 @@
-{
- "cells": [
-  {
-   "cell_type": "markdown",
-   "metadata": {},
-   "source": [
-    "# Swactor — Getting Started\n",
-    "\n",
-    "This notebook walks through the basics of the swactor actor runtime from Python."
-   ]
-  },
-  {
-   "cell_type": "code",
-   "execution_count": null,
-   "metadata": {},
-   "outputs": [],
-   "source": [
-    "from swactor import Runtime"
-   ]
-  },
-  {
-   "cell_type": "markdown",
-   "metadata": {},
-   "source": [
-    "## Single-threaded: spawn, send, tick\n",
-    "\n",
-    "The simplest way to use swactor is with `tick()` — manually stepping the runtime one tick at a time."
-   ]
-  },
-  {
-   "cell_type": "code",
-   "execution_count": null,
-   "metadata": {},
-   "outputs": [],
-   "source": [
-    "def echo(ctx, msg):\n",
-    "    ctx.send(msg[\"reply_to\"], f\"hello, {msg['name']}!\")\n",
-    "\n",
-    "rt = Runtime()\n",
-    "addr = rt.spawn(echo)\n",
-    "inbox = rt.inbox()\n",
-    "\n",
-    "rt.send(addr, {\"name\": \"world\", \"reply_to\": inbox.addr})\n",
-    "rt.tick()\n",
-    "\n",
-    "print(inbox.try_recv())"
-   ]
-  },
-  {
-   "cell_type": "markdown",
-   "metadata": {},
-   "source": [
-    "## Multi-threaded: background runtime\n",
-    "\n",
-    "For real workloads you can run the runtime on background threads with `RuntimeConfig`."
-   ]
-  },
-  {
-   "cell_type": "code",
-   "execution_count": null,
-   "metadata": {},
-   "outputs": [],
-   "source": [
-    "import time\n",
-    "from swactor import Runtime, RuntimeConfig\n",
-    "\n",
-    "def echo(ctx, msg):\n",
-    "    ctx.send(msg[\"reply_to\"], f\"hello, {msg['name']}!\")\n",
-    "\n",
-    "rt = Runtime(RuntimeConfig(num_threads=2))\n",
-    "addr = rt.spawn(echo)\n",
-    "inbox = rt.inbox()\n",
-    "handle = rt.run()\n",
-    "\n",
-    "for name in [\"alice\", \"bob\", \"charlie\"]:\n",
-    "    handle.send(addr, {\"name\": name, \"reply_to\": inbox.addr})\n",
-    "    time.sleep(0.05)  # give the runtime a moment\n",
-    "    print(inbox.try_recv())\n",
-    "\n",
-    "handle.shutdown()\n",
-    "handle.join()"
-   ]
-  }
- ],
- "metadata": {
-  "kernelspec": {
-   "display_name": "Python 3",
-   "language": "python",
-   "name": "python3"
-  },
-  "language_info": {
-   "name": "python",
-   "version": "3.9.0"
-  }
- },
- "nbformat": 4,
- "nbformat_minor": 4
-}
diff --git a/examples/python/hello_async.py b/examples/python/hello_async.py
deleted file mode 100644
index 684a746..0000000
--- a/examples/python/hello_async.py
+++ /dev/null
@@ -1,39 +0,0 @@
-"""Async hello world: runtime runs in background threads, driven from asyncio."""
-
-import asyncio
-from swactor import Runtime, RuntimeConfig
-
-
-async def recv(inbox, timeout=1.0):
-    """Poll an inbox until a message arrives."""
-    while timeout > 0:
-        msg = inbox.try_recv()
-        if msg is not None:
-            return msg
-        await asyncio.sleep(0.01)
-        timeout -= 0.01
-    return None
-
-
-async def main():
-    rt = Runtime(RuntimeConfig(num_threads=2))
-
-    def echo(ctx, msg):
-        ctx.send(msg["reply_to"], f"hello, {msg['name']}!")
-
-    addr = rt.spawn(echo)
-    inbox = rt.inbox()
-    handle = rt.run()
-
-    for name in ["alice", "bob", "charlie"]:
-        handle.send(addr, {"name": name, "reply_to": inbox.addr})
-        reply = await recv(inbox)
-        print(reply)
-
-     # show us our actors!
-    print(handle.stats())
-    handle.shutdown()
-    handle.join()
-
-
-asyncio.run(main())
diff --git a/examples/python/hello_single_thread.py b/examples/python/hello_single_thread.py
deleted file mode 100644
index 6c27c8e..0000000
--- a/examples/python/hello_single_thread.py
+++ /dev/null
@@ -1,13 +0,0 @@
-"""Hello world: spawn an echo actor, send a message, get it back."""
-
-from swactor import Runtime
-
-def echo(ctx, msg):
-    ctx.send(msg["reply_to"], f"hello, {msg['name']}!")
-
-rt = Runtime()
-addr = rt.spawn(echo)
-inbox = rt.inbox()
-rt.send(addr, {"name": "world", "reply_to": inbox.addr})
-rt.tick()
-print(inbox.try_recv())
diff --git a/examples/ring.rs b/examples/ring.rs
deleted file mode 100644
index dd4e87b..0000000
--- a/examples/ring.rs
+++ /dev/null
@@ -1,71 +0,0 @@
-use swactor::{
-    actor::{ActorAddress, ActorInterface},
-    runtime::{Ctx, Inbox, Runtime, RuntimeConfig},
-};
-
-#[derive(Debug, Default, Clone)]
-pub struct RingMessage {
-    count: usize,
-}
-
-impl RingMessage {
-    pub fn next(self) -> Self {
-        Self {
-            count: self.count + 1,
-        }
-    }
-}
-
-#[derive(Debug, Default)]
-struct RingActor {
-    next: ActorAddress,
-}
-
-impl RingActor {
-    pub fn new(next: ActorAddress) -> Self {
-        Self { next }
-    }
-}
-
-impl ActorInterface for RingActor {
-    type Incoming = RingMessage;
-    type Response = ();
-    fn handle(&mut self, ctx: &Ctx, msg: Self::Incoming) {
-        if let Err(_) = ctx.send(self.next, msg.next()) {
-            // do nothing
-        }
-    }
-}
-
-fn main() {
-    let config = RuntimeConfig::default();
-    let rt = Runtime::new(config);
-    let inbox: Inbox<RingMessage> = rt.new_inbox().unwrap();
-
-    let mut next = rt
-        .spawn(RingActor::new(*inbox.addr()))
-        .expect("failed to spawn");
-    let num_passes = 500;
-    for _ in 0..num_passes {
-        let new = rt.spawn(RingActor::new(next)).expect("failed to spawn");
-        next = new;
-    }
-    rt.send_to(next, RingMessage { count: 0 })
-        .expect("failed to start message ring");
-
-    let msg: RingMessage;
-    loop {
-        match inbox.try_recv() {
-            Some(m) => {
-                msg = m;
-                break;
-            }
-            None => {
-                rt.tick();
-            }
-        }
-    }
-    assert_eq!(msg.count, num_passes + 1); // count should equal the number of passes plus the return to main process inbox
-
-    println!("{msg:?}");
-}
diff --git a/examples/tcp_ping_pong.rs b/examples/tcp_ping_pong.rs
deleted file mode 100644
index 29227a6..0000000
--- a/examples/tcp_ping_pong.rs
+++ /dev/null
@@ -1,336 +0,0 @@
-//! Two-process transport demo.
-//!
-//! Run in two terminals:
-//!
-//! ```bash
-//! # Terminal 1 — starts the receiver (has the actor)
-//! cargo run --example tcp_ping_pong --features transport -- receiver
-//!
-//! # Terminal 2 — sends pings across TCP
-//! cargo run --example tcp_ping_pong --features transport -- sender
-//! ```
-
-use std::io::{Read, Write};
-use std::net::{TcpListener, TcpStream};
-use std::sync::{Arc, Mutex};
-
-use swactor::{
-    actor::{ActorAddress, ActorInterface},
-    runtime::{Ctx, Runtime, RuntimeConfig},
-    transport::{
-        Codec, CodecRegistry, NetworkMessage, Transport, TransportRouter,
-        WireEnvelope,
-    },
-    Error,
-};
-
-// ─── Messages ───────────────────────────────────────────────────────────────
-
-#[derive(Clone, Debug)]
-struct Ping {
-    value: u32,
-    reply_to: ActorAddress,
-}
-
-impl NetworkMessage for Ping {
-    fn type_tag() -> &'static str {
-        "example::Ping"
-    }
-}
-
-#[derive(Clone, Debug, PartialEq)]
-struct Pong {
-    value: u32,
-}
-
-impl NetworkMessage for Pong {
-    fn type_tag() -> &'static str {
-        "example::Pong"
-    }
-}
-
-// ─── Codec (hand-rolled, no serde needed) ───────────────────────────────────
-
-struct ExampleCodec;
-
-impl Codec<Ping> for ExampleCodec {
-    fn encode(&self, msg: &Ping) -> Result<Vec<u8>, Error> {
-        let mut buf = Vec::with_capacity(36);
-        buf.extend_from_slice(&msg.value.to_be_bytes());
-        buf.extend_from_slice(&msg.reply_to.0);
-        Ok(buf)
-    }
-    fn decode(&self, bytes: &[u8]) -> Result<Ping, Error> {
-        if bytes.len() < 36 {
-            return Err(Error::from("Ping: short read"));
-        }
-        let value = u32::from_be_bytes(bytes[0..4].try_into().unwrap());
-        let mut addr = [0u8; 32];
-        addr.copy_from_slice(&bytes[4..36]);
-        Ok(Ping {
-            value,
-            reply_to: ActorAddress(addr),
-        })
-    }
-}
-
-impl Codec<Pong> for ExampleCodec {
-    fn encode(&self, msg: &Pong) -> Result<Vec<u8>, Error> {
-        Ok(msg.value.to_be_bytes().to_vec())
-    }
-    fn decode(&self, bytes: &[u8]) -> Result<Pong, Error> {
-        if bytes.len() < 4 {
-            return Err(Error::from("Pong: short read"));
-        }
-        Ok(Pong {
-            value: u32::from_be_bytes(bytes[0..4].try_into().unwrap()),
-        })
-    }
-}
-
-// ─── TCP Transport ──────────────────────────────────────────────────────────
-
-/// Simple length-prefixed TCP transport.
-///
-/// Wire format per envelope:
-///   [4 bytes: total frame len (BE u32)]
-///   [32 bytes: dest address]
-///   [4 bytes: type_tag len (BE u32)]
-///   [N bytes: type_tag UTF-8]
-///   [remaining: payload bytes]
-struct TcpTransport {
-    stream: Mutex<TcpStream>,
-}
-
-impl Transport for TcpTransport {
-    fn send(&self, envelope: WireEnvelope) -> Result<(), Error> {
-        let tag_bytes = envelope.type_tag.as_bytes();
-        let frame_len: u32 = (32 + 4 + tag_bytes.len() + envelope.payload.len()) as u32;
-
-        let mut buf = Vec::with_capacity(4 + frame_len as usize);
-        buf.extend_from_slice(&frame_len.to_be_bytes());
-        buf.extend_from_slice(&envelope.dest.0);
-        buf.extend_from_slice(&(tag_bytes.len() as u32).to_be_bytes());
-        buf.extend_from_slice(tag_bytes);
-        buf.extend_from_slice(&envelope.payload);
-
-        self.stream
-            .lock()
-            .unwrap()
-            .write_all(&buf)
-            .map_err(|e| Error::from(format!("TCP send: {e}")))
-    }
-}
-
-/// Read one WireEnvelope from a TCP stream.
-fn read_envelope(stream: &mut TcpStream) -> std::io::Result<WireEnvelope> {
-    // Frame length
-    let mut len_buf = [0u8; 4];
-    stream.read_exact(&mut len_buf)?;
-    let frame_len = u32::from_be_bytes(len_buf) as usize;
-
-    // Read entire frame
-    let mut frame = vec![0u8; frame_len];
-    stream.read_exact(&mut frame)?;
-
-    // Parse
-    let mut dest = [0u8; 32];
-    dest.copy_from_slice(&frame[0..32]);
-
-    let tag_len = u32::from_be_bytes(frame[32..36].try_into().unwrap()) as usize;
-    let type_tag = String::from_utf8_lossy(&frame[36..36 + tag_len]).to_string();
-    let payload = frame[36 + tag_len..].to_vec();
-
-    Ok(WireEnvelope {
-        dest: ActorAddress(dest),
-        type_tag,
-        payload,
-    })
-}
-
-// ─── Actor ──────────────────────────────────────────────────────────────────
-
-struct PongActor;
-
-impl ActorInterface for PongActor {
-    type Incoming = Ping;
-    type Response = Pong;
-
-    fn handle(&mut self, ctx: &Ctx, msg: Ping) {
-        println!(
-            "  PongActor received Ping({}), replying with Pong({})",
-            msg.value,
-            msg.value + 1
-        );
-        let _ = ctx.send(msg.reply_to, Pong { value: msg.value + 1 });
-    }
-}
-
-// ─── Codec registry (shared) ───────────────────────────────────────────────
-
-fn build_codecs() -> CodecRegistry {
-    let mut cr = CodecRegistry::new();
-    cr.register::<Ping, _>(ExampleCodec);
-    cr.register::<Pong, _>(ExampleCodec);
-    cr
-}
-
-// ─── Main ───────────────────────────────────────────────────────────────────
-
-const ADDR: &str = "127.0.0.1:9100";
-
-fn main() {
-    let args: Vec<String> = std::env::args().collect();
-    let role = args.get(1).map(|s| s.as_str()).unwrap_or("help");
-
-    match role {
-        "receiver" => run_receiver(),
-        "sender" => run_sender(),
-        _ => {
-            eprintln!("Usage: two_process <receiver|sender>");
-            eprintln!();
-            eprintln!("  Terminal 1: cargo run --example two_process --features transport -- receiver");
-            eprintln!("  Terminal 2: cargo run --example two_process --features transport -- sender");
-            std::process::exit(1);
-        }
-    }
-}
-
-/// Receiver process: hosts the PongActor, listens for incoming envelopes on TCP.
-fn run_receiver() {
-    println!("[receiver] Starting on {ADDR}...");
-
-    let codecs = Arc::new(build_codecs());
-    let codecs_recv = codecs.clone();
-
-    // Build runtime with PongActor at the well-known address
-    let mut rt = Runtime::new(RuntimeConfig::default());
-
-    // We need the actor at the agreed address. Since spawn() generates a random
-    // address, we'll use a workaround: spawn normally, then register a route
-    // for replies going back to the sender (those will be Pong messages).
-    // But actually, the sender's inbox address is dynamic, so the receiver
-    // needs a transport to send Pong back.
-
-    // For this demo: the receiver accepts a TCP connection, and uses that same
-    // connection (reversed) to send replies.
-
-    let pong_addr = rt.spawn(PongActor).unwrap();
-    rt.tick(); // drain spawn queue
-
-    println!("[receiver] PongActor spawned at {pong_addr}");
-    println!("[receiver] Listening for connections...");
-
-    let listener =
-        TcpListener::bind(ADDR).expect("failed to bind");
-
-    // Accept one connection
-    let (mut stream, peer) = listener.accept().expect("accept failed");
-    println!("[receiver] Connection from {peer}");
-
-    // Read the sender's inbox address (first 32 bytes)
-    let mut inbox_bytes = [0u8; 32];
-    stream.read_exact(&mut inbox_bytes).unwrap();
-    let sender_inbox_addr = ActorAddress(inbox_bytes);
-    println!("[receiver] Sender inbox: {sender_inbox_addr}");
-
-    // Send back the actual PongActor address (so sender can address messages)
-    stream.write_all(&pong_addr.0).unwrap();
-
-    // Set up transport for replies back to sender
-    let reply_transport = Arc::new(TcpTransport {
-        stream: Mutex::new(stream.try_clone().unwrap()),
-    });
-    let router = TransportRouter::new();
-    router.add_route(sender_inbox_addr, reply_transport);
-    rt.set_codec_registry(codecs.clone());
-    rt.set_transport_router(Arc::new(router));
-
-    // Event loop: read envelopes from TCP, deliver, tick
-    println!("[receiver] Ready — waiting for pings...\n");
-    loop {
-        match read_envelope(&mut stream) {
-            Ok(envelope) => {
-                let (addr, msg) = codecs_recv.receive(envelope).unwrap();
-                rt.deliver_raw(addr, msg).unwrap();
-                rt.tick();
-            }
-            Err(e) if e.kind() == std::io::ErrorKind::UnexpectedEof => {
-                println!("\n[receiver] Sender disconnected.");
-                break;
-            }
-            Err(e) => {
-                eprintln!("[receiver] Read error: {e}");
-                break;
-            }
-        }
-    }
-}
-
-/// Sender process: connects to receiver, sends Pings, reads Pong replies.
-fn run_sender() {
-    println!("[sender] Connecting to {ADDR}...");
-
-    let codecs = Arc::new(build_codecs());
-    let codecs_recv = codecs.clone();
-
-    let mut rt = Runtime::new(RuntimeConfig::default());
-    let inbox = rt.new_inbox::<Pong>().unwrap();
-    let inbox_addr = *inbox.addr();
-
-    // Connect and exchange addresses
-    let mut stream =
-        TcpStream::connect(ADDR).expect("failed to connect — is the receiver running?");
-
-    // Send our inbox address
-    stream.write_all(&inbox_addr.0).unwrap();
-
-    // Read the PongActor's address
-    let mut pong_bytes = [0u8; 32];
-    stream.read_exact(&mut pong_bytes).unwrap();
-    let pong_addr = ActorAddress(pong_bytes);
-    println!("[sender] Connected. PongActor is at {pong_addr}\n");
-
-    // Set up transport to send Pings to receiver
-    let send_transport = Arc::new(TcpTransport {
-        stream: Mutex::new(stream.try_clone().unwrap()),
-    });
-    let router = TransportRouter::new();
-    router.add_route(pong_addr, send_transport);
-    rt.set_codec_registry(codecs.clone());
-    rt.set_transport_router(Arc::new(router));
-
-    // Send 5 pings
-    for i in 1..=5 {
-        println!("[sender] Sending Ping({i})...");
-        rt.send_to(
-            pong_addr,
-            Ping {
-                value: i,
-                reply_to: inbox_addr,
-            },
-        )
-        .unwrap();
-
-        // Read the reply from TCP
-        match read_envelope(&mut stream) {
-            Ok(envelope) => {
-                let (addr, msg) = codecs_recv.receive(envelope).unwrap();
-                rt.deliver_raw(addr, msg).unwrap();
-            }
-            Err(e) => {
-                eprintln!("[sender] Read error: {e}");
-                break;
-            }
-        }
-
-        // Check inbox
-        if let Some(pong) = inbox.try_recv() {
-            println!("[sender] Got Pong({})!", pong.value);
-        }
-
-        std::thread::sleep(std::time::Duration::from_millis(500));
-    }
-
-    println!("\n[sender] Done.");
-}
diff --git a/fuzz/Cargo.toml b/fuzz/Cargo.toml
index c9a04d2..a43cf35 100644
--- a/fuzz/Cargo.toml
+++ b/fuzz/Cargo.toml
@@ -11,7 +11,6 @@ cargo-fuzz = true
 libfuzzer-sys = { version = "0.4", features = ["arbitrary-derive"] }
 arbitrary = { version = "1", features = ["derive"] }
 swactor = { path = "..", default-features = true }
-swactor-std = { path = "../crates/std" }
 
 # Prevent this from interfering with workspaces
 [workspace]
diff --git a/fuzz/fuzz_targets/fuzz_runtime.rs b/fuzz/fuzz_targets/fuzz_runtime.rs
index 6b3e303..60c8091 100644
--- a/fuzz/fuzz_targets/fuzz_runtime.rs
+++ b/fuzz/fuzz_targets/fuzz_runtime.rs
@@ -12,7 +12,7 @@ use std::sync::Arc;
 use swactor::actor::{ActorAddress, ActorInterface};
 use swactor::config::RuntimeConfig;
 use swactor::runtime::{Ctx, Inbox, Runtime};
-use swactor_std::{CtxTimers, StdExtension};
+use swactor::std::{CtxTimers, StdExtension};
 
 // ─── Run Logging ────────────────────────────────────────────────────────────
 //   FUZZ_LOG=1   → trace every run
diff --git a/src/actor.rs b/src/actor.rs
index ddee803..0493ff3 100644
--- a/src/actor.rs
+++ b/src/actor.rs
@@ -639,11 +639,10 @@ impl<'a> Ctx<'a> {
 
     /// Send a typed message to an actor address.
     pub fn send<M: Message>(&self, addr: ActorAddress, msg: M) -> Result<(), Error> {
-        if let Some(caps) = self.capabilities() {
-            if addr != self.self_addr {
+        if let Some(caps) = self.capabilities()
+            && addr != self.self_addr {
                 caps.check_send::<M>(addr)?;
             }
-        }
         self.inner.send_any(addr, Box::new(msg))
     }
 
diff --git a/src/lib.rs b/src/lib.rs
index a1dd14d..4b32d66 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -21,12 +21,15 @@ pub mod runtime;
 #[cfg(feature = "transport")]
 pub mod transport;
 
+#[cfg(feature = "std")]
+pub mod std;
+
 // Platform-aware Instant: web_time on wasm, std::time on native.
 // web_time is a no-op re-export of std::time::Instant on non-wasm targets.
 #[cfg(feature = "wasm")]
 pub(crate) use web_time::Instant;
 #[cfg(not(feature = "wasm"))]
-pub(crate) use std::time::Instant;
+pub(crate) use ::std::time::Instant;
 
 #[cfg(feature = "getrandom")]
 pub(crate) fn get_random(buf: &mut [u8]) {
diff --git a/src/runtime.rs b/src/runtime.rs
index 069388c..a15b693 100644
--- a/src/runtime.rs
+++ b/src/runtime.rs
@@ -368,7 +368,7 @@ impl Runtime {
     pub fn create_sender(&self) -> ExternalSender {
         ExternalSender {
             address_map: self.address_map.clone(),
-            transfer_txs: self.transfer_txs.iter().map(|tx| tx.clone()).collect(),
+            transfer_txs: self.transfer_txs.iter().cloned().collect(),
             worker_threads: self.worker_threads.clone(),
         }
     }
diff --git a/src/stats.rs b/src/stats.rs
index 3f3b5fa..436e869 100644
--- a/src/stats.rs
+++ b/src/stats.rs
@@ -40,6 +40,12 @@ pub struct WorkerStats {
     tick_timings: ArrayQueue<TickTiming>,
 }
 
+impl Default for WorkerStats {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl WorkerStats {
     pub fn new() -> Self {
         Self {
diff --git a/crates/std/src/children_registry.rs b/src/std/children_registry.rs
similarity index 91%
rename from crates/std/src/children_registry.rs
rename to src/std/children_registry.rs
index 2b4f930..e8f14aa 100644
--- a/crates/std/src/children_registry.rs
+++ b/src/std/children_registry.rs
@@ -1,7 +1,7 @@
 use std::sync::RwLock;
 
-use swactor::actor::ActorAddress;
-use swactor::{AddrMap, AddrSet};
+use crate::actor::ActorAddress;
+use crate::{AddrMap, AddrSet};
 
 /// Tracks parent → children relationships for orphan cleanup.
 ///
@@ -12,6 +12,12 @@ pub struct ChildrenRegistry {
     children: RwLock<AddrMap<AddrSet>>,
 }
 
+impl Default for ChildrenRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl ChildrenRegistry {
     pub fn new() -> Self {
         Self {
diff --git a/crates/std/src/ctx_ext.rs b/src/std/ctx_ext.rs
similarity index 93%
rename from crates/std/src/ctx_ext.rs
rename to src/std/ctx_ext.rs
index 5716d83..4f06ed0 100644
--- a/crates/std/src/ctx_ext.rs
+++ b/src/std/ctx_ext.rs
@@ -1,9 +1,9 @@
-use swactor::actor::{ActorAddress, ActorInterface, Ctx, Environment, LogicalName, Message, MonitorRef, SystemInfo};
-use swactor::Error;
+use crate::actor::{ActorAddress, ActorInterface, Ctx, Environment, LogicalName, Message, MonitorRef, SystemInfo};
+use crate::Error;
 
-use crate::resource_handle::ResourceHandle;
-use crate::StdExtension;
-use crate::timer_wheel::{CloneMsg, TimerRequest};
+use super::resource_handle::ResourceHandle;
+use super::StdExtension;
+use super::timer_wheel::{CloneMsg, TimerRequest};
 
 pub(crate) fn get_ext<'a>(ctx: &'a Ctx) -> &'a StdExtension {
     ctx.extension()
@@ -27,7 +27,7 @@ pub trait CtxMonitoring {
 
 impl CtxMonitoring for Ctx<'_> {
     fn monitor(&self, target: ActorAddress) -> Result<MonitorRef, Error> {
-        if let Some(caps) = self.env::<swactor::CapabilitySet>() {
+        if let Some(caps) = self.env::<crate::CapabilitySet>() {
             caps.check_monitor(target)?;
         }
         Ok(get_ext(self).monitor_registry.register(self.self_addr(), target))
@@ -104,7 +104,7 @@ impl CtxWatching for Ctx<'_> {
 /// Timer extension for [`Ctx`].
 ///
 /// Provides `send_after_ticks` / `send_interval_ticks` via the per-worker
-/// [`TimerWheel`](crate::timer_wheel::TimerWheel).
+/// [`TimerWheel`](super::timer_wheel::TimerWheel).
 pub trait CtxTimers {
     /// Schedule a one-shot timer: deliver `msg` to `addr` after `ticks` worker ticks.
     ///
@@ -295,12 +295,11 @@ pub trait CtxResources {
 
 impl CtxResources for Ctx<'_> {
     fn resource<S: 'static + Send + Sync>(&self) -> Option<ActorAddress> {
-        if let Some(caps) = self.env::<swactor::CapabilitySet>() {
-            if caps.check_service::<S>().is_err() {
+        if let Some(caps) = self.env::<crate::CapabilitySet>()
+            && caps.check_service::<S>().is_err() {
                 return None;
             }
-        }
-        self.env::<swactor::ServiceBinding<S>>().map(|b| b.addr)
+        self.env::<crate::ServiceBinding<S>>().map(|b| b.addr)
     }
 }
 
@@ -341,7 +340,7 @@ pub trait CtxHandles {
 
 impl CtxHandles for Ctx<'_> {
     fn handle<H: ResourceHandle>(&self) -> Option<H> {
-        let binding = self.env::<swactor::ServiceBinding<H::Service>>()?;
+        let binding = self.env::<crate::ServiceBinding<H::Service>>()?;
         Some(H::from_parts(binding.addr, self.self_addr()))
     }
 }
@@ -383,15 +382,15 @@ impl CtxLifecycle for Ctx<'_> {
 
 /// Capability introspection extension for [`Ctx`].
 pub trait CtxCapabilities {
-    fn capabilities(&self) -> Option<&swactor::CapabilitySet>;
+    fn capabilities(&self) -> Option<&crate::CapabilitySet>;
     fn is_restricted(&self) -> bool;
 }
 
 impl CtxCapabilities for Ctx<'_> {
-    fn capabilities(&self) -> Option<&swactor::CapabilitySet> {
+    fn capabilities(&self) -> Option<&crate::CapabilitySet> {
         Ctx::env(self)
     }
     fn is_restricted(&self) -> bool {
-        self.env::<swactor::CapabilitySet>().is_some()
+        self.env::<crate::CapabilitySet>().is_some()
     }
 }
diff --git a/crates/std/src/extension.rs b/src/std/extension.rs
similarity index 87%
rename from crates/std/src/extension.rs
rename to src/std/extension.rs
index f462598..0b3bf33 100644
--- a/crates/std/src/extension.rs
+++ b/src/std/extension.rs
@@ -1,16 +1,16 @@
 use std::any::Any;
 
-use swactor::actor::{ActorAddress, Down, Environment, EnvironmentBuilder, ExitReason, ExitValue, SpawnTimestamp, StopReason, StopSignal};
-use swactor::extension::{RuntimeExtension, WorkerExtension};
+use crate::actor::{ActorAddress, Down, Environment, EnvironmentBuilder, ExitReason, ExitValue, SpawnTimestamp, StopReason, StopSignal};
+use crate::extension::{RuntimeExtension, WorkerExtension};
 
-use crate::children_registry::ChildrenRegistry;
-use crate::group_registry::GroupRegistry;
-use crate::monitor_registry::MonitorRegistry;
-use crate::name_registry::NameRegistry;
-use crate::service_registry::ServiceRegistry;
-use crate::supervisor_registry::SupervisorRegistry;
-use crate::timer_wheel::TimerWheel;
-use crate::watch_registry::WatchRegistry;
+use super::children_registry::ChildrenRegistry;
+use super::group_registry::GroupRegistry;
+use super::monitor_registry::MonitorRegistry;
+use super::name_registry::NameRegistry;
+use super::service_registry::ServiceRegistry;
+use super::supervisor_registry::SupervisorRegistry;
+use super::timer_wheel::TimerWheel;
+use super::watch_registry::WatchRegistry;
 
 /// Standard library extension — provides naming, monitoring, watching, and group registries.
 ///
@@ -45,7 +45,7 @@ impl StdExtension {
 
     /// Register a supervisor → child relationship.
     ///
-    /// This is used by the built-in [`Supervisor`](crate::Supervisor) and can
+    /// This is used by the built-in [`Supervisor`](super::Supervisor) and can
     /// also be called by custom supervisor implementations.
     pub fn register_supervisor(&self, supervisor: ActorAddress, child: ActorAddress) {
         self.supervisor_registry.register(supervisor, child);
diff --git a/crates/std/src/group_registry.rs b/src/std/group_registry.rs
similarity index 94%
rename from crates/std/src/group_registry.rs
rename to src/std/group_registry.rs
index 5b2ee9b..03a5468 100644
--- a/crates/std/src/group_registry.rs
+++ b/src/std/group_registry.rs
@@ -1,8 +1,8 @@
 use std::collections::{HashMap, HashSet};
 use std::sync::RwLock;
 
-use swactor::actor::ActorAddress;
-use swactor::{AddrBuildHasher, AddrMap, AddrSet};
+use crate::actor::ActorAddress;
+use crate::{AddrBuildHasher, AddrMap, AddrSet};
 
 /// Actor groups (pub-sub). Actors join/leave named groups; messages can be
 /// broadcast to all members of a group.
@@ -15,6 +15,12 @@ pub struct GroupRegistry {
     memberships: RwLock<AddrMap<HashSet<String>>>,
 }
 
+impl Default for GroupRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl GroupRegistry {
     pub fn new() -> Self {
         Self {
diff --git a/crates/std/src/lib.rs b/src/std/mod.rs
similarity index 100%
rename from crates/std/src/lib.rs
rename to src/std/mod.rs
diff --git a/crates/std/src/monitor_registry.rs b/src/std/monitor_registry.rs
similarity index 94%
rename from crates/std/src/monitor_registry.rs
rename to src/std/monitor_registry.rs
index 9a0b848..6c3023b 100644
--- a/crates/std/src/monitor_registry.rs
+++ b/src/std/monitor_registry.rs
@@ -2,8 +2,8 @@ use std::collections::HashMap;
 use std::sync::atomic::{AtomicU64, Ordering};
 use std::sync::RwLock;
 
-use swactor::actor::{ActorAddress, MonitorRef};
-use swactor::{AddrBuildHasher, AddrMap};
+use crate::actor::{ActorAddress, MonitorRef};
+use crate::{AddrBuildHasher, AddrMap};
 
 /// Tracks monitor subscriptions: watched actor → list of (MonitorRef, watcher address).
 ///
@@ -16,6 +16,12 @@ pub struct MonitorRegistry {
     next_ref: AtomicU64,
 }
 
+impl Default for MonitorRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl MonitorRegistry {
     pub fn new() -> Self {
         Self {
diff --git a/crates/std/src/name_registry.rs b/src/std/name_registry.rs
similarity index 89%
rename from crates/std/src/name_registry.rs
rename to src/std/name_registry.rs
index 97cce0d..6bca01e 100644
--- a/crates/std/src/name_registry.rs
+++ b/src/std/name_registry.rs
@@ -1,8 +1,8 @@
 use std::collections::HashMap;
 use std::sync::RwLock;
 
-use swactor::actor::ActorAddress;
-use swactor::{AddrBuildHasher, AddrMap};
+use crate::actor::ActorAddress;
+use crate::{AddrBuildHasher, AddrMap};
 
 /// Named actor registry — maps human-readable names to actor addresses.
 ///
@@ -13,6 +13,12 @@ pub struct NameRegistry {
     reverse: RwLock<AddrMap<String>>,
 }
 
+impl Default for NameRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl NameRegistry {
     pub fn new() -> Self {
         Self {
@@ -22,10 +28,10 @@ impl NameRegistry {
     }
 
     /// Register a name → address mapping. Returns `Err` if the name is already taken.
-    pub fn register(&self, name: String, addr: ActorAddress) -> Result<(), swactor::Error> {
+    pub fn register(&self, name: String, addr: ActorAddress) -> Result<(), crate::Error> {
         let mut names = self.names.write().unwrap();
         if names.contains_key(&name) {
-            return Err(swactor::Error::from("Name already registered"));
+            return Err(crate::Error::from("Name already registered"));
         }
         names.insert(name.clone(), addr);
         drop(names);
diff --git a/crates/std/src/resource_handle.rs b/src/std/resource_handle.rs
similarity index 97%
rename from crates/std/src/resource_handle.rs
rename to src/std/resource_handle.rs
index fdec51a..83d9dd8 100644
--- a/crates/std/src/resource_handle.rs
+++ b/src/std/resource_handle.rs
@@ -1,4 +1,4 @@
-use swactor::actor::ActorAddress;
+use crate::actor::ActorAddress;
 
 /// Typed proxy wrapping a service address for ergonomic domain-specific APIs.
 ///
diff --git a/crates/std/src/router.rs b/src/std/router.rs
similarity index 95%
rename from crates/std/src/router.rs
rename to src/std/router.rs
index c35d8bf..a9c1ae1 100644
--- a/crates/std/src/router.rs
+++ b/src/std/router.rs
@@ -1,11 +1,11 @@
 use std::marker::PhantomData;
 use std::sync::Arc;
 
-use swactor::actor::{ActorAddress, ActorInterface, Ctx, Down, Message};
-use swactor::Error;
+use crate::actor::{ActorAddress, ActorInterface, Ctx, Down, Message};
+use crate::Error;
 
-use crate::supervisor::ActiveChild;
-use crate::CtxMonitoring;
+use super::supervisor::ActiveChild;
+use super::CtxMonitoring;
 
 /// Strategy for distributing messages across pool workers.
 #[derive(Debug, Clone)]
@@ -80,7 +80,7 @@ impl<M: Message> Router<M> {
     fn find_worker_idx(&self, addr: ActorAddress) -> Option<usize> {
         self.workers
             .iter()
-            .position(|w| w.as_ref().map_or(false, |ac| ac.addr == addr))
+            .position(|w| w.as_ref().is_some_and(|ac| ac.addr == addr))
     }
 
     fn live_workers(&self) -> Vec<ActorAddress> {
diff --git a/crates/std/src/runtime_ext.rs b/src/std/runtime_ext.rs
similarity index 96%
rename from crates/std/src/runtime_ext.rs
rename to src/std/runtime_ext.rs
index 3f0d2b9..68a2a26 100644
--- a/crates/std/src/runtime_ext.rs
+++ b/src/std/runtime_ext.rs
@@ -1,8 +1,8 @@
-use swactor::actor::{ActorAddress, ActorInterface, EnvironmentBuilder, LogicalName, Message};
-use swactor::runtime::Runtime;
-use swactor::Error;
+use crate::actor::{ActorAddress, ActorInterface, EnvironmentBuilder, LogicalName, Message};
+use crate::runtime::Runtime;
+use crate::Error;
 
-use crate::StdExtension;
+use super::StdExtension;
 
 fn get_ext(rt: &Runtime) -> &StdExtension {
     rt.extension()
diff --git a/crates/std/src/service_registry.rs b/src/std/service_registry.rs
similarity index 80%
rename from crates/std/src/service_registry.rs
rename to src/std/service_registry.rs
index 90a2aa5..3c27fa2 100644
--- a/crates/std/src/service_registry.rs
+++ b/src/std/service_registry.rs
@@ -2,7 +2,7 @@ use std::any::{Any, TypeId};
 use std::collections::HashMap;
 use std::sync::{Arc, RwLock};
 
-use swactor::actor::{Environment, EnvironmentBuilder};
+use crate::actor::{Environment, EnvironmentBuilder};
 
 /// Stores typed service bindings for injection into actor environments.
 ///
@@ -14,6 +14,12 @@ pub struct ServiceRegistry {
     bindings: RwLock<HashMap<TypeId, Arc<dyn Any + Send + Sync>>>,
 }
 
+impl Default for ServiceRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl ServiceRegistry {
     pub fn new() -> Self {
         Self {
@@ -24,9 +30,9 @@ impl ServiceRegistry {
     /// Register a service binding by marker type `S`.
     ///
     /// Overwrites any previous binding for the same marker type.
-    pub fn register<S: 'static + Send + Sync>(&self, addr: swactor::actor::ActorAddress) {
-        let binding = swactor::actor::ServiceBinding::<S>::new(addr);
-        let type_id = TypeId::of::<swactor::actor::ServiceBinding<S>>();
+    pub fn register<S: 'static + Send + Sync>(&self, addr: crate::actor::ActorAddress) {
+        let binding = crate::actor::ServiceBinding::<S>::new(addr);
+        let type_id = TypeId::of::<crate::actor::ServiceBinding<S>>();
         self.bindings
             .write()
             .unwrap()
diff --git a/crates/std/src/supervisor.rs b/src/std/supervisor.rs
similarity index 97%
rename from crates/std/src/supervisor.rs
rename to src/std/supervisor.rs
index de081dc..8b743c3 100644
--- a/crates/std/src/supervisor.rs
+++ b/src/std/supervisor.rs
@@ -1,10 +1,10 @@
 use std::sync::Arc;
 
-use swactor::actor::{ActorAddress, ActorInterface, Ctx, Down, MonitorRef, StopReason};
-use swactor::Error;
+use crate::actor::{ActorAddress, ActorInterface, Ctx, Down, MonitorRef, StopReason};
+use crate::Error;
 
-use crate::ctx_ext::get_ext;
-use crate::CtxMonitoring;
+use super::ctx_ext::get_ext;
+use super::CtxMonitoring;
 
 /// How a child should be restarted when it dies.
 #[derive(Debug, Clone, Copy, PartialEq, Eq)]
@@ -153,7 +153,7 @@ impl Supervisor {
     fn find_child_idx(&self, addr: ActorAddress) -> Option<usize> {
         self.children
             .iter()
-            .position(|c| c.as_ref().map_or(false, |ac| ac.addr == addr))
+            .position(|c| c.as_ref().is_some_and(|ac| ac.addr == addr))
     }
 
     /// Check meltdown intensity — returns true if we should stop.
diff --git a/crates/std/src/supervisor_registry.rs b/src/std/supervisor_registry.rs
similarity index 89%
rename from crates/std/src/supervisor_registry.rs
rename to src/std/supervisor_registry.rs
index 5e161d2..12c9155 100644
--- a/crates/std/src/supervisor_registry.rs
+++ b/src/std/supervisor_registry.rs
@@ -1,7 +1,7 @@
 use std::sync::RwLock;
 
-use swactor::actor::ActorAddress;
-use swactor::AddrMap;
+use crate::actor::ActorAddress;
+use crate::AddrMap;
 
 /// Maps supervised children to their supervisor.
 ///
@@ -12,6 +12,12 @@ pub struct SupervisorRegistry {
     children: RwLock<AddrMap<ActorAddress>>,
 }
 
+impl Default for SupervisorRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl SupervisorRegistry {
     pub fn new() -> Self {
         Self {
diff --git a/crates/std/src/timer_wheel.rs b/src/std/timer_wheel.rs
similarity index 96%
rename from crates/std/src/timer_wheel.rs
rename to src/std/timer_wheel.rs
index 6ca4e94..b0af03a 100644
--- a/crates/std/src/timer_wheel.rs
+++ b/src/std/timer_wheel.rs
@@ -1,7 +1,7 @@
 use std::any::Any;
 
-use swactor::actor::{ActorAddress, Message};
-use swactor::extension::WorkerExtension;
+use crate::actor::{ActorAddress, Message};
+use crate::extension::WorkerExtension;
 
 // ─── Cloneable Message Trait ────────────────────────────────────────────────
 
@@ -104,7 +104,7 @@ impl TimerWheel {
             return;
         }
         self.interval_timers
-            .retain(|t| !dead.iter().any(|d| *d == t.dest));
+            .retain(|t| !dead.contains(&t.dest));
     }
 
     fn add_once(&mut self, dest: ActorAddress, msg: Box<dyn Any + Send>, ticks: u64) {
diff --git a/crates/std/src/watch_registry.rs b/src/std/watch_registry.rs
similarity index 95%
rename from crates/std/src/watch_registry.rs
rename to src/std/watch_registry.rs
index 21e08dd..d21f8e9 100644
--- a/crates/std/src/watch_registry.rs
+++ b/src/std/watch_registry.rs
@@ -1,7 +1,7 @@
 use std::collections::{HashMap, HashSet};
 use std::sync::Mutex;
 
-use swactor::actor::{ActorAddress, ActorExited, ExitReason, ExitValue};
+use crate::actor::{ActorAddress, ActorExited, ExitReason, ExitValue};
 
 /// Tracks watch relationships between actors.
 ///
@@ -18,6 +18,12 @@ struct WatchState {
     watching: HashMap<ActorAddress, HashSet<ActorAddress>>,
 }
 
+impl Default for WatchRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl WatchRegistry {
     pub fn new() -> Self {
         Self {
diff --git a/src/transport.rs b/src/transport.rs
index 0955276..f5f6026 100644
--- a/src/transport.rs
+++ b/src/transport.rs
@@ -16,6 +16,65 @@ use crate::actor::{ActorAddress, Message};
 use crate::delivery::{AddrBuildHasher, AddrMap};
 use crate::Error;
 
+// ─── NodeId ─────────────────────────────────────────────────────────────────
+
+/// A node's identity — 32 opaque bytes.
+///
+/// Typically the raw bytes of an ed25519 public key, but this type
+/// carries no cryptographic semantics.
+#[derive(Clone, Copy, PartialEq, Eq, Hash)]
+#[cfg_attr(feature = "serde", derive(serde::Serialize, serde::Deserialize))]
+pub struct NodeId(pub [u8; 32]);
+
+impl core::fmt::Debug for NodeId {
+    fn fmt(&self, f: &mut core::fmt::Formatter<'_>) -> core::fmt::Result {
+        write!(f, "NodeId(")?;
+        for b in &self.0[..4] {
+            write!(f, "{:02x}", b)?;
+        }
+        write!(f, "\u{2026})")
+    }
+}
+
+impl core::fmt::Display for NodeId {
+    fn fmt(&self, f: &mut core::fmt::Formatter<'_>) -> core::fmt::Result {
+        for b in &self.0[..8] {
+            write!(f, "{:02x}", b)?;
+        }
+        write!(f, "\u{2026}")
+    }
+}
+
+// ─── Hex encoding ───────────────────────────────────────────────────────────
+
+/// Hex-encode a byte slice.
+pub fn hex_encode(bytes: &[u8]) -> String {
+    bytes.iter().map(|b| format!("{b:02x}")).collect()
+}
+
+/// Hex-decode a string into bytes. Returns `None` on invalid input.
+pub fn hex_decode(hex: &str) -> Option<Vec<u8>> {
+    if hex.len() % 2 != 0 {
+        return None;
+    }
+    let mut bytes = Vec::with_capacity(hex.len() / 2);
+    for chunk in hex.as_bytes().chunks(2) {
+        let hi = hex_digit(chunk[0])?;
+        let lo = hex_digit(chunk[1])?;
+        bytes.push((hi << 4) | lo);
+    }
+    Some(bytes)
+}
+
+fn hex_digit(b: u8) -> Option<u8> {
+    match b {
+        b'0'..=b'9' => Some(b - b'0'),
+        b'a'..=b'f' => Some(b - b'a' + 10),
+        b'A'..=b'F' => Some(b - b'A' + 10),
+        _ => None,
+    }
+}
+
 // ─── Codec ──────────────────────────────────────────────────────────────────
 
 /// User-implemented codec for a specific message type.
@@ -80,6 +139,12 @@ pub struct CodecRegistry {
     decoders: HashMap<String, DecodeFn>,
 }
 
+impl Default for CodecRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl CodecRegistry {
     pub fn new() -> Self {
         Self {
@@ -154,6 +219,12 @@ pub struct TransportRouter {
     routes: RwLock<AddrMap<Arc<dyn Transport>>>,
 }
 
+impl Default for TransportRouter {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl TransportRouter {
     pub fn new() -> Self {
         Self {
diff --git a/tests/common/mod.rs b/tests/common/mod.rs
index 53321a3..3da1171 100644
--- a/tests/common/mod.rs
+++ b/tests/common/mod.rs
@@ -11,7 +11,7 @@ pub use swactor::actor::{
     StopReason,
 };
 pub use swactor::runtime::{Ctx, Inbox, MailboxOverflow, Runtime, RuntimeConfig};
-pub use swactor_std::{
+pub use swactor::std::{
     ChildSpec, CtxCapabilities, CtxEnvironment, CtxGroups, CtxHandles, CtxLifecycle, CtxLineage,
     CtxMonitoring, CtxNaming, CtxResources, CtxSelfStats, CtxSystem, CtxTimers, CtxWatching,
     ResourceHandle, RestartPolicy, Router, RoutingStrategy, RuntimeGroups, RuntimeNaming,
diff --git a/tests/integration/Cargo.toml b/tests/integration/Cargo.toml
new file mode 100644
index 0000000..f5e0d58
--- /dev/null
+++ b/tests/integration/Cargo.toml
@@ -0,0 +1,14 @@
+[package]
+name = "integration-tests"
+version = "0.1.0"
+edition = "2024"
+publish = false
+
+[dev-dependencies]
+swactor-datastore = { path = "../../crates/datastore", features = ["node"] }
+distribution = { path = "../../crates/distribution", features = ["iroh"] }
+dashboard = { path = "../../crates/dashboard" }
+swactor = { path = "../..", features = ["serde", "transport"] }
+iroh = "0.96"
+ureq = { version = "2", features = ["json"] }
+serde_json = "1"
diff --git a/crates/datastore/tests/api_integration_test.rs b/tests/integration/tests/api_integration_test.rs
similarity index 99%
rename from crates/datastore/tests/api_integration_test.rs
rename to tests/integration/tests/api_integration_test.rs
index 280a7c4..b1243ab 100644
--- a/crates/datastore/tests/api_integration_test.rs
+++ b/tests/integration/tests/api_integration_test.rs
@@ -14,7 +14,7 @@ use swactor_datastore::metrics::DatastoreMetrics;
 use swactor_datastore::storage::InMemoryBackend;
 use swactor_datastore::DatastoreConfig;
 
-use distribution::types::NodeId;
+use swactor::transport::NodeId;
 
 fn find_free_port() -> u16 {
     std::net::TcpListener::bind("127.0.0.1:0")
diff --git a/crates/datastore/tests/stream_integration.rs b/tests/integration/tests/stream_integration.rs
similarity index 95%
rename from crates/datastore/tests/stream_integration.rs
rename to tests/integration/tests/stream_integration.rs
index 110ff46..1cb1a6c 100644
--- a/crates/datastore/tests/stream_integration.rs
+++ b/tests/integration/tests/stream_integration.rs
@@ -11,7 +11,7 @@ use swactor::config::RuntimeConfig;
 use swactor::runtime::Runtime;
 use swactor_datastore::bridge::{DatastoreGroup, DatastoreGroupConfig};
 use swactor_datastore::messages::{DatastoreNodeMsg, DatastoreResponse};
-use swactor_std::RuntimeNaming;
+use swactor::std::RuntimeNaming;
 
 fn make_driver_with_streams() -> IrohDriver {
     IrohDriver::new(IrohDriverConfig {
@@ -19,7 +19,7 @@ fn make_driver_with_streams() -> IrohDriver {
         relay_mode: RelayMode::Disabled,
         node: DistributedNodeConfig::default(),
         peer_auth: None,
-        additional_alpns: vec![swactor_streams::ALPN.to_vec()],
+        additional_alpns: vec![swactor_datastore::streams::ALPN.to_vec()],
     })
     .expect("create iroh driver")
 }
@@ -31,7 +31,7 @@ fn make_runtime() -> Arc<Runtime> {
         channel_buffer_size: 2000,
         ..Default::default()
     })
-    .with_extension(Arc::new(swactor_std::StdExtension::new()));
+    .with_extension(Arc::new(swactor::std::StdExtension::new()));
 
     let handle = rt.run().expect("start runtime");
     handle.runtime
@@ -41,14 +41,14 @@ fn spawn_stream_manager(
     runtime: &Arc<Runtime>,
     driver: &IrohDriver,
 ) -> swactor::actor::ActorAddress {
-    let mgr = swactor_streams::StreamManager::new(
+    let mgr = swactor_datastore::streams::StreamManager::new(
         driver.endpoint().clone(),
         driver.tokio_handle(),
         Arc::clone(runtime),
     );
     let addr = runtime.spawn(mgr).expect("spawn StreamManager");
     runtime
-        .register_name(swactor_streams::STREAM_MANAGER_NAME, addr)
+        .register_name(swactor_datastore::streams::STREAM_MANAGER_NAME, addr)
         .expect("register StreamManager");
     addr
 }
@@ -104,7 +104,7 @@ fn pump_until_response(
             let mgr = mgr_a;
             let node_bytes = node_id.0;
             tokio_handle.spawn(async move {
-                let _ = swactor_streams::accept::handle_incoming(node_bytes, conn, &rt, mgr).await;
+                let _ = swactor_datastore::streams::accept::handle_incoming(node_bytes, conn, &rt, mgr).await;
             });
         }
 
@@ -114,7 +114,7 @@ fn pump_until_response(
             let mgr = mgr_b;
             let node_bytes = node_id.0;
             tokio_handle.spawn(async move {
-                let _ = swactor_streams::accept::handle_incoming(node_bytes, conn, &rt, mgr).await;
+                let _ = swactor_datastore::streams::accept::handle_incoming(node_bytes, conn, &rt, mgr).await;
             });
         }
 
diff --git a/tests/proptest_runtime.rs b/tests/proptest_runtime.rs
index 96cacbe..dffd170 100644
--- a/tests/proptest_runtime.rs
+++ b/tests/proptest_runtime.rs
@@ -13,7 +13,7 @@ use std::sync::Arc;
 use swactor::actor::{ActorAddress, ActorInterface};
 use swactor::config::{MailboxOverflow, RuntimeConfig};
 use swactor::runtime::{Ctx, Inbox, Runtime};
-use swactor_std::{CtxTimers, StdExtension};
+use swactor::std::{CtxTimers, StdExtension};
 
 // ─── Shared Actor Types ────────────────────────────────────────────────────
 
diff --git a/tools/analyze.sh b/tools/analyze.sh
deleted file mode 100755
index 535c929..0000000
--- a/tools/analyze.sh
+++ /dev/null
@@ -1,15 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-# Usage: ./tools/analyze.sh <crate-src-dir> [output-dir]
-# Example: ./tools/analyze.sh crates/swactor-gossip/src
-
-SRC_DIR="${1:?Usage: $0 <crate-src-dir> [output-dir]}"
-OUT_DIR="${2:-$(dirname "$SRC_DIR")/docs/connectome}"
-
-cargo run --manifest-path tools/depgraph/Cargo.toml -- \
-  --src-dir "$SRC_DIR" --output-dir "$OUT_DIR"
-
-uv run --with numpy --with scipy \
-  python tools/spectral/spectral_analysis.py \
-  "$OUT_DIR/deps.dot" --json --no-plots -o "$OUT_DIR"
diff --git a/tools/depgraph/Cargo.lock b/tools/depgraph/Cargo.lock
deleted file mode 100644
index 96a0c68..0000000
--- a/tools/depgraph/Cargo.lock
+++ /dev/null
@@ -1,46 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "depgraph"
-version = "0.1.0"
-dependencies = [
- "quote",
- "syn",
-]
-
-[[package]]
-name = "proc-macro2"
-version = "1.0.106"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "quote"
-version = "1.0.44"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "21b2ebcf727b7760c461f091f9f0f539b77b8e87f2fd88131e7f1b433b3cece4"
-dependencies = [
- "proc-macro2",
-]
-
-[[package]]
-name = "syn"
-version = "2.0.114"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
-
-[[package]]
-name = "unicode-ident"
-version = "1.0.22"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5"
diff --git a/tools/depgraph/Cargo.toml b/tools/depgraph/Cargo.toml
deleted file mode 100644
index 92138cf..0000000
--- a/tools/depgraph/Cargo.toml
+++ /dev/null
@@ -1,10 +0,0 @@
-[workspace]
-
-[package]
-name = "depgraph"
-version = "0.1.0"
-edition = "2021"
-
-[dependencies]
-syn = { version = "2", features = ["full", "visit"] }
-quote = "1"
diff --git a/tools/depgraph/src/main.rs b/tools/depgraph/src/main.rs
deleted file mode 100644
index 2b95073..0000000
--- a/tools/depgraph/src/main.rs
+++ /dev/null
@@ -1,1352 +0,0 @@
-//! Deterministic dependency graph generator for the swactor crate.
-//!
-//! Parses all `.rs` source files using `syn`, extracts type definitions,
-//! imports, and cross-module dependencies, then outputs `deps.dot` and
-//! `deps.html` files.
-
-use std::collections::HashMap;
-use std::fmt::Write as FmtWrite;
-use std::fs;
-use std::path::{Path, PathBuf};
-
-// ─── Data structures ─────────────────────────────────────────────────────────
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-enum TypeKind {
-    Struct,
-    Trait,
-    Enum,
-}
-
-#[derive(Debug, Clone)]
-struct TypeInfo {
-    name: String,
-    kind: TypeKind,
-    fields: Vec<(String, String)>, // (field_name, type_description)
-}
-
-#[derive(Debug)]
-struct ModuleInfo {
-    name: String,
-    feature_gate: Option<String>,
-    types: Vec<TypeInfo>,
-    /// local_name → (source_module, original_name)
-    imports: HashMap<String, (String, String)>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Hash)]
-#[allow(dead_code)]
-enum EdgeKind {
-    Field,
-    TraitImpl,
-    TraitObject,
-}
-
-#[derive(Debug, Clone)]
-struct Edge {
-    from_module: String,
-    from_type: String,
-    to_module: String,
-    to_type: String,
-    kind: EdgeKind,
-    label: String,
-}
-
-// ─── Module colors ───────────────────────────────────────────────────────────
-
-/// 8-color pastel palette for module clusters.
-/// Each entry: (cluster_fill, cluster_border, node_fill)
-const PALETTE: &[(&str, &str, &str)] = &[
-    ("#e3f2fd", "#1565c0", "#bbdefb"),
-    ("#fce4ec", "#c62828", "#ffcdd2"),
-    ("#fff3e0", "#e65100", "#ffe0b2"),
-    ("#f3e5f5", "#7b1fa2", "#e1bee7"),
-    ("#e8f5e9", "#2e7d32", "#c8e6c9"),
-    ("#fff9c4", "#f9a825", "#fff59d"),
-    ("#e0f7fa", "#00838f", "#b2ebf2"),
-    ("#fbe9e7", "#d84315", "#ffccbc"),
-];
-
-fn module_colors_by_index(index: usize) -> (&'static str, &'static str, &'static str) {
-    PALETTE[index % PALETTE.len()]
-}
-
-fn module_edge_color_by_index(index: usize) -> &'static str {
-    PALETTE[index % PALETTE.len()].1
-}
-
-// ─── Phase 1: Module discovery ───────────────────────────────────────────────
-
-fn discover_modules(src_dir: &Path) -> Vec<(String, Option<String>, PathBuf)> {
-    let lib_path = src_dir.join("lib.rs");
-    let content = fs::read_to_string(&lib_path).expect("Failed to read src/lib.rs");
-    let syntax = syn::parse_file(&content).expect("Failed to parse src/lib.rs");
-
-    let mut modules = Vec::new();
-    let mut i = 0;
-    let items: Vec<&syn::Item> = syntax.items.iter().collect();
-
-    while i < items.len() {
-        // Check for #[cfg(feature = "...")] on the next item
-        let feature_gate = if let syn::Item::Mod(item_mod) = items[i] {
-            extract_feature_gate(&item_mod.attrs)
-        } else {
-            None
-        };
-
-        if let syn::Item::Mod(item_mod) = items[i] {
-            let mod_name = item_mod.ident.to_string();
-            let mod_path = src_dir.join(format!("{}.rs", mod_name));
-            if mod_path.exists() {
-                modules.push((mod_name, feature_gate, mod_path));
-            }
-        }
-
-        i += 1;
-    }
-
-    modules
-}
-
-fn extract_feature_gate(attrs: &[syn::Attribute]) -> Option<String> {
-    for attr in attrs {
-        if attr.path().is_ident("cfg") {
-            let tokens = attr.meta.require_list().ok()?.tokens.to_string();
-            // Parse: feature = "python"
-            if let Some(pos) = tokens.find("feature") {
-                let rest = &tokens[pos..];
-                if let Some(start) = rest.find('"') {
-                    let rest = &rest[start + 1..];
-                    if let Some(end) = rest.find('"') {
-                        return Some(rest[..end].to_string());
-                    }
-                }
-            }
-        }
-    }
-    None
-}
-
-// ─── Phase 2: Parse & index ──────────────────────────────────────────────────
-
-fn parse_module(name: &str, path: &Path) -> ModuleInfo {
-    let content = fs::read_to_string(path)
-        .unwrap_or_else(|e| panic!("Failed to read {}: {}", path.display(), e));
-    let syntax = syn::parse_file(&content)
-        .unwrap_or_else(|e| panic!("Failed to parse {}: {}", path.display(), e));
-
-    let mut types = Vec::new();
-
-    for item in &syntax.items {
-        match item {
-            syn::Item::Struct(s) => {
-                let fields = extract_struct_fields(s);
-                types.push(TypeInfo {
-                    name: s.ident.to_string(),
-                    kind: TypeKind::Struct,
-                    fields,
-                });
-            }
-            syn::Item::Trait(t) => {
-                let fields = extract_trait_items(t);
-                types.push(TypeInfo {
-                    name: t.ident.to_string(),
-                    kind: TypeKind::Trait,
-                    fields,
-                });
-            }
-            syn::Item::Enum(e) => {
-                let fields = extract_enum_variants(e);
-                types.push(TypeInfo {
-                    name: e.ident.to_string(),
-                    kind: TypeKind::Enum,
-                    fields,
-                });
-            }
-            _ => {}
-        }
-    }
-
-    ModuleInfo {
-        name: name.to_string(),
-        feature_gate: None, // filled in later
-        types,
-        imports: HashMap::new(), // filled in phase 3
-    }
-}
-
-fn extract_struct_fields(s: &syn::ItemStruct) -> Vec<(String, String)> {
-    let mut fields = Vec::new();
-    match &s.fields {
-        syn::Fields::Named(named) => {
-            for f in &named.named {
-                if let Some(ident) = &f.ident {
-                    let ty = type_to_short_string(&f.ty);
-                    fields.push((ident.to_string(), ty));
-                }
-            }
-        }
-        syn::Fields::Unnamed(unnamed) => {
-            for (i, f) in unnamed.unnamed.iter().enumerate() {
-                let ty = type_to_short_string(&f.ty);
-                fields.push((format!("{}", i), ty));
-            }
-        }
-        syn::Fields::Unit => {}
-    }
-    fields
-}
-
-fn extract_trait_items(t: &syn::ItemTrait) -> Vec<(String, String)> {
-    let mut items = Vec::new();
-
-    // Extract associated types
-    for item in &t.items {
-        if let syn::TraitItem::Type(assoc) = item {
-            let bounds: Vec<String> = assoc.bounds.iter().map(|b| quote_to_string(b)).collect();
-            items.push((assoc.ident.to_string(), bounds.join(" + ")));
-        }
-    }
-
-    // Extract method signatures (just name + simplified sig)
-    for item in &t.items {
-        if let syn::TraitItem::Fn(method) = item {
-            let sig = method_sig_short(&method.sig);
-            items.push((method.sig.ident.to_string(), sig));
-        }
-    }
-
-    items
-}
-
-fn extract_enum_variants(e: &syn::ItemEnum) -> Vec<(String, String)> {
-    let mut variants = Vec::new();
-    for v in &e.variants {
-        let fields_desc = match &v.fields {
-            syn::Fields::Named(named) => {
-                let parts: Vec<String> = named
-                    .named
-                    .iter()
-                    .filter_map(|f| {
-                        f.ident
-                            .as_ref()
-                            .map(|id| format!("{}: {}", id, type_to_short_string(&f.ty)))
-                    })
-                    .collect();
-                format!("{{ {} }}", parts.join(", "))
-            }
-            syn::Fields::Unnamed(unnamed) => {
-                let parts: Vec<String> = unnamed
-                    .unnamed
-                    .iter()
-                    .map(|f| type_to_short_string(&f.ty))
-                    .collect();
-                format!("({})", parts.join(", "))
-            }
-            syn::Fields::Unit => String::new(),
-        };
-        variants.push((v.ident.to_string(), fields_desc));
-    }
-    variants
-}
-
-fn method_sig_short(sig: &syn::Signature) -> String {
-    let params: Vec<String> = sig
-        .inputs
-        .iter()
-        .filter_map(|arg| match arg {
-            syn::FnArg::Receiver(_) => Some("&self".to_string()),
-            syn::FnArg::Typed(pat) => Some(type_to_short_string(&pat.ty)),
-        })
-        .collect();
-    let ret = match &sig.output {
-        syn::ReturnType::Default => String::new(),
-        syn::ReturnType::Type(_, ty) => format!(" → {}", type_to_short_string(ty)),
-    };
-    format!("({}){}", params.join(", "), ret)
-}
-
-fn type_to_short_string(ty: &syn::Type) -> String {
-    // Produce a compact but readable type representation
-    match ty {
-        syn::Type::Path(tp) => {
-            let segments: Vec<String> = tp
-                .path
-                .segments
-                .iter()
-                .map(|seg| {
-                    let name = seg.ident.to_string();
-                    match &seg.arguments {
-                        syn::PathArguments::None => name,
-                        syn::PathArguments::AngleBracketed(args) => {
-                            let inner: Vec<String> = args
-                                .args
-                                .iter()
-                                .map(|a| match a {
-                                    syn::GenericArgument::Type(t) => type_to_short_string(t),
-                                    syn::GenericArgument::Lifetime(lt) => {
-                                        format!("'{}", lt.ident)
-                                    }
-                                    _ => quote_to_string(a),
-                                })
-                                .collect();
-                            format!("{}<{}>", name, inner.join(", "))
-                        }
-                        syn::PathArguments::Parenthesized(args) => {
-                            let inner: Vec<String> =
-                                args.inputs.iter().map(type_to_short_string).collect();
-                            format!("{}({})", name, inner.join(", "))
-                        }
-                    }
-                })
-                .collect();
-            segments.join("::")
-        }
-        syn::Type::Reference(r) => {
-            let lt = r
-                .lifetime
-                .as_ref()
-                .map(|l| format!("&'{} ", l.ident))
-                .unwrap_or_else(|| "&".to_string());
-            let mutability = if r.mutability.is_some() { "mut " } else { "" };
-            format!("{}{}{}", lt, mutability, type_to_short_string(&r.elem))
-        }
-        syn::Type::TraitObject(to) => {
-            let bounds: Vec<String> = to.bounds.iter().map(|b| quote_to_string(b)).collect();
-            format!("dyn {}", bounds.join(" + "))
-        }
-        syn::Type::Tuple(t) => {
-            let inner: Vec<String> = t.elems.iter().map(type_to_short_string).collect();
-            format!("({})", inner.join(", "))
-        }
-        syn::Type::Slice(s) => {
-            format!("[{}]", type_to_short_string(&s.elem))
-        }
-        syn::Type::Array(a) => {
-            format!("[{}; ..]", type_to_short_string(&a.elem))
-        }
-        _ => quote_to_string(ty),
-    }
-}
-
-fn quote_to_string<T: quote::ToTokens>(t: &T) -> String {
-    t.to_token_stream().to_string()
-}
-
-// ─── Phase 3: Import resolution ──────────────────────────────────────────────
-
-fn resolve_imports(modules: &mut [ModuleInfo], src_dir: &Path) {
-    // Build type_name → module_name lookup from all modules
-    let mut type_to_module: HashMap<String, String> = HashMap::new();
-    for module in modules.iter() {
-        for ty in &module.types {
-            type_to_module.insert(ty.name.clone(), module.name.clone());
-        }
-    }
-
-    // For each module, parse its use items and resolve imports
-    for module in modules.iter_mut() {
-        let path = src_dir.join(format!("{}.rs", module.name));
-        let content = fs::read_to_string(&path).unwrap();
-        let syntax = syn::parse_file(&content).unwrap();
-
-        for item in &syntax.items {
-            if let syn::Item::Use(use_item) = item {
-                collect_use_imports(&use_item.tree, &[], &mut module.imports);
-            }
-        }
-    }
-}
-
-fn collect_use_imports(
-    tree: &syn::UseTree,
-    prefix: &[String],
-    imports: &mut HashMap<String, (String, String)>,
-) {
-    match tree {
-        syn::UseTree::Path(p) => {
-            let mut new_prefix = prefix.to_vec();
-            new_prefix.push(p.ident.to_string());
-            collect_use_imports(&p.tree, &new_prefix, imports);
-        }
-        syn::UseTree::Name(n) => {
-            let name = n.ident.to_string();
-            if let Some(module) = extract_crate_module(prefix) {
-                imports.insert(name.clone(), (module, name));
-            }
-        }
-        syn::UseTree::Rename(r) => {
-            let original = r.ident.to_string();
-            let alias = r.rename.to_string();
-            if let Some(module) = extract_crate_module(prefix) {
-                imports.insert(alias, (module, original));
-            }
-        }
-        syn::UseTree::Glob(_) => {
-            // `use crate::foo::*` — we skip glob imports
-        }
-        syn::UseTree::Group(g) => {
-            for tree in &g.items {
-                collect_use_imports(tree, prefix, imports);
-            }
-        }
-    }
-}
-
-/// Given a use path prefix like ["crate", "actor"], return the module name "actor".
-/// Returns None for non-crate paths (std, external crates).
-fn extract_crate_module(prefix: &[String]) -> Option<String> {
-    if prefix.first().map(|s| s.as_str()) == Some("crate") {
-        prefix.get(1).cloned()
-    } else {
-        None
-    }
-}
-
-// ─── Phase 4: Dependency extraction ──────────────────────────────────────────
-
-fn extract_edges(modules: &[ModuleInfo], src_dir: &Path) -> Vec<Edge> {
-    let mut edges = Vec::new();
-
-    // Build type_name → module_name lookup
-    let mut type_to_module: HashMap<String, String> = HashMap::new();
-    for module in modules {
-        for ty in &module.types {
-            type_to_module.insert(ty.name.clone(), module.name.clone());
-        }
-    }
-
-    for module in modules {
-        // Parse file again for impl blocks
-        let path = src_dir.join(format!("{}.rs", module.name));
-        let content = fs::read_to_string(&path).unwrap();
-        let syntax = syn::parse_file(&content).unwrap();
-
-        // Extract edges from struct/trait/enum fields
-        for ty in &module.types {
-            for (_field_name, field_type) in &ty.fields {
-                let referenced = extract_type_names_from_string(field_type);
-                for ref_name in &referenced {
-                    if ref_name == &ty.name {
-                        continue; // skip self-references
-                    }
-                    if let Some(target_module) = resolve_type(ref_name, module, &type_to_module) {
-                        edges.push(Edge {
-                            from_module: module.name.clone(),
-                            from_type: ty.name.clone(),
-                            to_module: target_module.clone(),
-                            to_type: ref_name.clone(),
-                            kind: EdgeKind::Field,
-                            label: _field_name.clone(),
-                        });
-                    }
-                }
-            }
-        }
-
-        // Extract edges from impl blocks
-        for item in &syntax.items {
-            if let syn::Item::Impl(impl_block) = item {
-                let self_type = extract_base_type_name(&impl_block.self_ty);
-                if self_type.is_none() {
-                    continue;
-                }
-                let self_type = self_type.unwrap();
-                let self_module = type_to_module.get(&self_type).cloned();
-
-                // Skip generic/blanket impls (self type is a type parameter, not a known type)
-                if self_module.is_none() {
-                    continue;
-                }
-
-                // Trait impl: `impl Trait for Type`
-                if let Some((_, trait_path, _)) = &impl_block.trait_ {
-                    let trait_name = path_to_name(trait_path);
-                    if trait_name == self_type {
-                        // skip self-impl (e.g. blanket impls)
-                    } else if is_std_type(&trait_name) {
-                        // skip std trait impls (Send, Sync, Clone, etc.)
-                    } else if let Some(target_module) =
-                        resolve_type(&trait_name, module, &type_to_module)
-                    {
-                        // Attribute to the module where the self type lives
-                        let from_mod = self_module.clone().unwrap_or(module.name.clone());
-                        edges.push(Edge {
-                            from_module: from_mod,
-                            from_type: self_type.clone(),
-                            to_module: target_module,
-                            to_type: trait_name.clone(),
-                            kind: EdgeKind::TraitImpl,
-                            label: "impl".to_string(),
-                        });
-                    }
-                }
-
-                // Only process method signatures for types belonging to this module
-                if self_module.as_deref() != Some(&module.name) {
-                    continue;
-                }
-
-                // Method signatures — extract types from params/return types
-                for impl_item in &impl_block.items {
-                    if let syn::ImplItem::Fn(method) = impl_item {
-                        let sig_types = extract_types_from_sig(&method.sig);
-                        for ref_name in &sig_types {
-                            if ref_name == &self_type {
-                                continue;
-                            }
-                            if let Some(target_module) =
-                                resolve_type(ref_name, module, &type_to_module)
-                            {
-                                let label = format!(
-                                    "{}() param",
-                                    method.sig.ident
-                                );
-                                edges.push(Edge {
-                                    from_module: module.name.clone(),
-                                    from_type: self_type.clone(),
-                                    to_module: target_module,
-                                    to_type: ref_name.clone(),
-                                    kind: EdgeKind::Field,
-                                    label,
-                                });
-                            }
-                        }
-                    }
-                }
-            }
-        }
-
-        // Extract edges from trait definitions (method params referencing other types)
-        for item in &syntax.items {
-            if let syn::Item::Trait(trait_def) = item {
-                let trait_name = trait_def.ident.to_string();
-                if type_to_module.get(&trait_name) != Some(&module.name) {
-                    continue;
-                }
-
-                for trait_item in &trait_def.items {
-                    if let syn::TraitItem::Fn(method) = trait_item {
-                        let sig_types = extract_types_from_sig(&method.sig);
-                        for ref_name in &sig_types {
-                            if ref_name == &trait_name {
-                                continue;
-                            }
-                            if let Some(target_module) =
-                                resolve_type(ref_name, module, &type_to_module)
-                            {
-                                let label = format!(
-                                    "{}() param",
-                                    method.sig.ident
-                                );
-                                edges.push(Edge {
-                                    from_module: module.name.clone(),
-                                    from_type: trait_name.clone(),
-                                    to_module: target_module,
-                                    to_type: ref_name.clone(),
-                                    kind: EdgeKind::Field,
-                                    label,
-                                });
-                            }
-                        }
-                    }
-                }
-            }
-        }
-    }
-
-    // Deduplicate edges
-    dedup_edges(&mut edges);
-    edges
-}
-
-fn dedup_edges(edges: &mut Vec<Edge>) {
-    let mut seen = std::collections::HashSet::new();
-    edges.retain(|e| {
-        let key = (
-            e.from_module.clone(),
-            e.from_type.clone(),
-            e.to_module.clone(),
-            e.to_type.clone(),
-            e.kind.clone(),
-        );
-        seen.insert(key)
-    });
-}
-
-/// Extract all type names referenced in a method signature
-fn extract_types_from_sig(sig: &syn::Signature) -> Vec<String> {
-    let mut types = Vec::new();
-    for arg in &sig.inputs {
-        match arg {
-            syn::FnArg::Typed(pat_type) => {
-                collect_type_names(&pat_type.ty, &mut types);
-            }
-            _ => {}
-        }
-    }
-    if let syn::ReturnType::Type(_, ty) = &sig.output {
-        collect_type_names(ty, &mut types);
-    }
-    types
-}
-
-/// Recursively collect type names from a syn::Type
-fn collect_type_names(ty: &syn::Type, names: &mut Vec<String>) {
-    match ty {
-        syn::Type::Path(tp) => {
-            for seg in &tp.path.segments {
-                let name = seg.ident.to_string();
-                // Skip standard library / primitive wrappers
-                if !is_std_wrapper(&name) && !is_primitive(&name) {
-                    names.push(name.clone());
-                }
-                if let syn::PathArguments::AngleBracketed(args) = &seg.arguments {
-                    for arg in &args.args {
-                        if let syn::GenericArgument::Type(inner) = arg {
-                            collect_type_names(inner, names);
-                        }
-                    }
-                }
-            }
-        }
-        syn::Type::Reference(r) => {
-            collect_type_names(&r.elem, names);
-        }
-        syn::Type::TraitObject(to) => {
-            for bound in &to.bounds {
-                if let syn::TypeParamBound::Trait(t) = bound {
-                    if let Some(seg) = t.path.segments.last() {
-                        let name = seg.ident.to_string();
-                        if !is_std_type(&name) {
-                            names.push(name);
-                        }
-                    }
-                }
-            }
-        }
-        syn::Type::Tuple(t) => {
-            for elem in &t.elems {
-                collect_type_names(elem, names);
-            }
-        }
-        syn::Type::Slice(s) => {
-            collect_type_names(&s.elem, names);
-        }
-        syn::Type::Paren(p) => {
-            collect_type_names(&p.elem, names);
-        }
-        _ => {}
-    }
-}
-
-/// Given a short type name and a module's import map, resolve to the source module.
-fn resolve_type(
-    name: &str,
-    module: &ModuleInfo,
-    type_to_module: &HashMap<String, String>,
-) -> Option<String> {
-    // Check import map first
-    if let Some((src_module, _original)) = module.imports.get(name) {
-        // Verify the type actually exists in that module
-        if type_to_module.contains_key(name) {
-            return Some(src_module.clone());
-        }
-        // The import pointed to a module, but the type name from the import
-        // might be the original name
-        if type_to_module.contains_key(_original) {
-            return Some(src_module.clone());
-        }
-    }
-
-    // Check if type is defined in any module
-    type_to_module.get(name).cloned()
-}
-
-fn extract_base_type_name(ty: &syn::Type) -> Option<String> {
-    match ty {
-        syn::Type::Path(tp) => {
-            tp.path.segments.last().map(|s| s.ident.to_string())
-        }
-        _ => None,
-    }
-}
-
-fn path_to_name(path: &syn::Path) -> String {
-    path.segments
-        .last()
-        .map(|s| s.ident.to_string())
-        .unwrap_or_default()
-}
-
-fn extract_type_names_from_string(type_str: &str) -> Vec<String> {
-    // Extract PascalCase type names from a type string
-    let mut names = Vec::new();
-    let mut current = String::new();
-
-    for ch in type_str.chars() {
-        if ch.is_alphanumeric() || ch == '_' {
-            current.push(ch);
-        } else {
-            if !current.is_empty() {
-                if is_pascal_case(&current)
-                    && !is_std_wrapper(&current)
-                    && !is_primitive(&current)
-                    && !is_std_type(&current)
-                {
-                    names.push(current.clone());
-                }
-                current.clear();
-            }
-        }
-    }
-    if !current.is_empty()
-        && is_pascal_case(&current)
-        && !is_std_wrapper(&current)
-        && !is_primitive(&current)
-        && !is_std_type(&current)
-    {
-        names.push(current);
-    }
-
-    names
-}
-
-fn is_pascal_case(s: &str) -> bool {
-    s.len() > 1 && s.chars().next().map(|c| c.is_uppercase()).unwrap_or(false)
-}
-
-fn is_std_wrapper(name: &str) -> bool {
-    matches!(
-        name,
-        "Arc" | "Box"
-            | "Option"
-            | "Vec"
-            | "HashMap"
-            | "HashSet"
-            | "RwLock"
-            | "Mutex"
-            | "RefCell"
-            | "Cell"
-            | "Rc"
-            | "Result"
-            | "VecDeque"
-            | "BTreeMap"
-            | "BTreeSet"
-            | "AtomicBool"
-            | "AtomicUsize"
-            | "AtomicI64"
-            | "JoinHandle"
-            | "Ordering"
-    )
-}
-
-fn is_primitive(name: &str) -> bool {
-    matches!(
-        name,
-        "bool" | "u8"
-            | "u16"
-            | "u32"
-            | "u64"
-            | "u128"
-            | "usize"
-            | "i8"
-            | "i16"
-            | "i32"
-            | "i64"
-            | "i128"
-            | "isize"
-            | "f32"
-            | "f64"
-            | "str"
-            | "String"
-            | "Self"
-    )
-}
-
-fn is_std_type(name: &str) -> bool {
-    matches!(
-        name,
-        "Any" | "Send"
-            | "Sync"
-            | "Sized"
-            | "Clone"
-            | "Copy"
-            | "Debug"
-            | "Display"
-            | "Default"
-            | "Hash"
-            | "Eq"
-            | "PartialEq"
-            | "Ord"
-            | "PartialOrd"
-            | "From"
-            | "Into"
-            | "AsRef"
-            | "Iterator"
-            | "IntoIterator"
-            | "ToString"
-            | "Hasher"
-            | "PyObject"
-            | "PyResult"
-            | "PyErr"
-            | "PyModule"
-            | "Python"
-            | "Bound"
-            | "PyAny"
-            | "ArrayQueue"
-            | "SegQueue"
-    )
-}
-
-// ─── Phase 5: DOT output ─────────────────────────────────────────────────────
-
-fn generate_dot(modules: &[ModuleInfo], edges: &[Edge]) -> String {
-    let mut out = String::new();
-
-    writeln!(out, "digraph swactor {{").unwrap();
-    writeln!(out, "    rankdir=LR;").unwrap();
-    writeln!(out, "    fontname=\"Helvetica\";").unwrap();
-    writeln!(out, "    fontsize=14;").unwrap();
-    writeln!(
-        out,
-        "    node [fontname=\"Helvetica\", fontsize=11, style=filled, shape=record];"
-    )
-    .unwrap();
-    writeln!(out, "    edge [fontname=\"Helvetica\", fontsize=9];").unwrap();
-    writeln!(out, "    label=\"swactor — internal dependency DAG\";").unwrap();
-    writeln!(out, "    labelloc=t;").unwrap();
-    writeln!(out, "    compound=true;").unwrap();
-    writeln!(out, "    newrank=true;").unwrap();
-    writeln!(out, "    splines=ortho;").unwrap();
-    writeln!(out).unwrap();
-
-    // Use actual module names in discovery order for consistent output
-    let module_order: Vec<&str> = modules.iter().map(|m| m.name.as_str()).collect();
-
-    // Build module_name → index lookup for palette rotation
-    let module_index: HashMap<&str, usize> = module_order
-        .iter()
-        .enumerate()
-        .map(|(i, &name)| (name, i))
-        .collect();
-
-    // Emit subgraph clusters
-    for (i, mod_name) in module_order.iter().enumerate() {
-        if let Some(module) = modules.iter().find(|m| m.name == *mod_name) {
-            let (cluster_fill, cluster_border, node_fill) = module_colors_by_index(i);
-            emit_cluster(&mut out, module, cluster_fill, cluster_border, node_fill);
-        }
-    }
-
-    // Emit intra-module edges (within same cluster)
-    writeln!(out).unwrap();
-    writeln!(
-        out,
-        "    // ═══════════════════════════════════════════════════════════════════"
-    )
-    .unwrap();
-    writeln!(
-        out,
-        "    //  INTRA-MODULE EDGES (within same cluster)"
-    )
-    .unwrap();
-    writeln!(
-        out,
-        "    // ═══════════════════════════════════════════════════════════════════"
-    )
-    .unwrap();
-    writeln!(out).unwrap();
-
-    for edge in edges.iter().filter(|e| e.from_module == e.to_module) {
-        let idx = module_index.get(edge.from_module.as_str()).copied().unwrap_or(0);
-        emit_edge(&mut out, edge, true, module_edge_color_by_index(idx));
-    }
-
-    // Emit cross-module edges
-    writeln!(out).unwrap();
-    writeln!(
-        out,
-        "    // ═══════════════════════════════════════════════════════════════════"
-    )
-    .unwrap();
-    writeln!(
-        out,
-        "    //  CROSS-MODULE EDGES  (the real dependency DAG)"
-    )
-    .unwrap();
-    writeln!(
-        out,
-        "    // ═══════════════════════════════════════════════════════════════════"
-    )
-    .unwrap();
-
-    // Group cross-module edges by (from_module, to_module)
-    let mut grouped: HashMap<(String, String), Vec<&Edge>> = HashMap::new();
-    for edge in edges.iter().filter(|e| e.from_module != e.to_module) {
-        grouped
-            .entry((edge.from_module.clone(), edge.to_module.clone()))
-            .or_default()
-            .push(edge);
-    }
-
-    // Sort groups by module order for deterministic output
-    let mut group_keys: Vec<(String, String)> = grouped.keys().cloned().collect();
-    group_keys.sort_by(|a, b| {
-        let ai = module_order
-            .iter()
-            .position(|m| *m == a.0)
-            .unwrap_or(99);
-        let bi = module_order
-            .iter()
-            .position(|m| *m == b.0)
-            .unwrap_or(99);
-        let aj = module_order
-            .iter()
-            .position(|m| *m == a.1)
-            .unwrap_or(99);
-        let bj = module_order
-            .iter()
-            .position(|m| *m == b.1)
-            .unwrap_or(99);
-        (ai, aj).cmp(&(bi, bj))
-    });
-
-    for key in &group_keys {
-        let edges_group = &grouped[key];
-        writeln!(out).unwrap();
-        writeln!(
-            out,
-            "    // --- {} depends on {} ---",
-            key.0, key.1
-        )
-        .unwrap();
-        for edge in edges_group {
-            let idx = module_index.get(edge.from_module.as_str()).copied().unwrap_or(0);
-            emit_edge(&mut out, edge, false, module_edge_color_by_index(idx));
-        }
-    }
-
-    writeln!(out, "}}").unwrap();
-    out
-}
-
-fn emit_cluster(out: &mut String, module: &ModuleInfo, cluster_fill: &str, cluster_border: &str, node_fill: &str) {
-
-    let style = if module.feature_gate.is_some() {
-        "rounded,dashed,filled"
-    } else {
-        "rounded,filled"
-    };
-
-    let label = if module.feature_gate.is_some() {
-        format!("{}  (feature-gated)", module.name)
-    } else {
-        module.name.clone()
-    };
-
-    writeln!(
-        out,
-        "    subgraph cluster_{} {{",
-        module.name
-    )
-    .unwrap();
-    writeln!(out, "        label=\"{}\";", label).unwrap();
-    writeln!(
-        out,
-        "        style=\"{}\"; fillcolor=\"{}\"; color=\"{}\";",
-        style, cluster_fill, cluster_border
-    )
-    .unwrap();
-
-    for ty in &module.types {
-        let prefix = match ty.kind {
-            TypeKind::Trait => "«trait» ",
-            TypeKind::Enum => "«enum» ",
-            TypeKind::Struct => "",
-        };
-
-        let fields_str = if ty.fields.is_empty() {
-            String::new()
-        } else {
-            let field_lines: Vec<String> = ty
-                .fields
-                .iter()
-                .map(|(name, ty_desc)| {
-                    if ty_desc.is_empty() {
-                        escape_dot(name)
-                    } else if ty.kind == TypeKind::Trait {
-                        // For traits, show method signatures
-                        format!("{}({})", escape_dot(name), escape_dot(ty_desc))
-                    } else if ty.kind == TypeKind::Enum {
-                        // For enum variants, show variant name and fields
-                        if ty_desc.is_empty() {
-                            escape_dot(name)
-                        } else {
-                            format!("{} {}", escape_dot(name), escape_dot(ty_desc))
-                        }
-                    } else {
-                        format!("{}: {}", escape_dot(name), escape_dot(ty_desc))
-                    }
-                })
-                .collect();
-            format!("|{}", field_lines.join("\\n"))
-        };
-
-        writeln!(
-            out,
-            "        {} [label=\"{{{}{}{}}}\", fillcolor=\"{}\"];",
-            ty.name, prefix, ty.name, fields_str, node_fill
-        )
-        .unwrap();
-    }
-
-    writeln!(out, "    }}").unwrap();
-}
-
-fn emit_edge(out: &mut String, edge: &Edge, intra: bool, color: &str) {
-
-    let (style, penwidth) = match edge.kind {
-        EdgeKind::TraitImpl => {
-            if intra {
-                ("dotted", "1")
-            } else {
-                ("dotted", "1.5")
-            }
-        }
-        EdgeKind::TraitObject => {
-            if intra {
-                ("dashed", "1")
-            } else {
-                ("dashed", "1.5")
-            }
-        }
-        EdgeKind::Field => {
-            if intra {
-                ("dashed", "1")
-            } else {
-                ("solid", "1.5")
-            }
-        }
-    };
-
-    let label_escaped = escape_dot(&edge.label);
-
-    writeln!(
-        out,
-        "    {} -> {} [label=\"{}\", style={}, color=\"{}\", penwidth={}];",
-        edge.from_type, edge.to_type, label_escaped, style, color, penwidth
-    )
-    .unwrap();
-}
-
-fn escape_dot(s: &str) -> String {
-    s.replace('\\', "\\\\")
-        .replace('"', "\\\"")
-        .replace('<', "\\<")
-        .replace('>', "\\>")
-        .replace('{', "\\{")
-        .replace('}', "\\}")
-        .replace('|', "\\|")
-}
-
-// ─── Phase 6: HTML output ────────────────────────────────────────────────────
-
-fn generate_html(dot_source: &str) -> String {
-    // Escape the DOT source for embedding in a JS template literal
-    let dot_escaped = dot_source
-        .replace('\\', "\\\\")
-        .replace('`', "\\`")
-        .replace("${", "\\${");
-
-    format!(
-        r##"<!DOCTYPE html>
-<html><head>
-<meta charset='utf-8'>
-<title>swactor dependency DAG</title>
-<style>
-  * {{ margin:0; padding:0; box-sizing:border-box; }}
-  body {{ background:#1a1a2e; overflow:hidden; font-family:system-ui; }}
-  #controls {{ position:fixed; top:12px; left:12px; z-index:10;
-              background:rgba(30,30,60,0.9); border-radius:8px; padding:12px;
-              color:#ccc; font-size:13px; backdrop-filter:blur(8px); }}
-  #controls button {{ background:#333; color:#fff; border:1px solid #555;
-                     border-radius:4px; padding:4px 10px; cursor:pointer; margin:0 3px; }}
-  #controls button:hover {{ background:#555; }}
-  #viewport {{ width:100vw; height:100vh; cursor:grab; }}
-  #viewport:active {{ cursor:grabbing; }}
-  #loading {{ position:fixed; top:50%; left:50%; transform:translate(-50%,-50%);
-              color:#ccc; font-size:18px; }}
-  svg {{ display:block; }}
-</style>
-</head><body>
-<div id='controls'>
-  <strong>swactor dep graph</strong> &nbsp;
-  <button onclick='zoomIn()'>+</button>
-  <button onclick='zoomOut()'>&minus;</button>
-  <button onclick='resetView()'>fit</button>
-  <span style='margin-left:8px;opacity:0.6'>scroll to zoom · drag to pan · click node to focus</span>
-</div>
-<div id='viewport'></div>
-<div id='loading'>Loading Graphviz…</div>
-<script type="module">
-import {{ instance }} from 'https://cdn.jsdelivr.net/npm/@viz-js/viz@3.11.0/lib/viz-standalone.mjs';
-
-const dot = `{dot_escaped}`;
-
-const viz = await instance();
-const svg = viz.renderSVGElement(dot);
-document.getElementById('loading').remove();
-
-const vp = document.getElementById('viewport');
-vp.appendChild(svg);
-
-// invert colors for dark mode
-svg.querySelectorAll('polygon[fill="white"]').forEach(el => el.setAttribute('fill','#1a1a2e'));
-
-// Recolor text: node text stays dark (readable on light fills), everything else goes light
-svg.querySelectorAll('.graph > text, .cluster > text, .edge text').forEach(el => el.setAttribute('fill','#e0e0e0'));
-// Node text (inside record shapes): keep dark for readability on pastel fills
-svg.querySelectorAll('.node text').forEach(el => el.setAttribute('fill','#1a1a1a'));
-
-// ─── Click-to-focus ────────────────────────────────────────────────────────
-// Build adjacency: for each edge, record which node titles it connects.
-const edges = svg.querySelectorAll('.edge');
-const nodes = svg.querySelectorAll('.node');
-// Cluster chrome = the path + text that draw the cluster box/label (not child nodes)
-const clusterChrome = [];
-svg.querySelectorAll('.cluster').forEach(c => {{
-  c.querySelectorAll(':scope > path, :scope > polygon, :scope > text').forEach(el => clusterChrome.push(el));
-}});
-
-// Map: node title → DOM element
-const nodeByTitle = new Map();
-nodes.forEach(n => {{
-  const t = n.querySelector('title');
-  if (t) nodeByTitle.set(t.textContent.trim(), n);
-}});
-
-// Which cluster contains which node titles
-const nodeToClusterEls = new Map();
-svg.querySelectorAll('.cluster').forEach(cluster => {{
-  const chrome = [...cluster.querySelectorAll(':scope > path, :scope > polygon, :scope > text')];
-  cluster.querySelectorAll('.node title').forEach(t => {{
-    nodeToClusterEls.set(t.textContent.trim(), chrome);
-  }});
-}});
-
-// Map: node title → set of connected edge elements + set of neighbor titles
-const adj = new Map();
-edges.forEach(edge => {{
-  const t = edge.querySelector('title');
-  if (!t) return;
-  const parts = t.textContent.trim().split('->').map(s => s.trim());
-  if (parts.length !== 2) return;
-  const [src, dst] = parts;
-  if (!adj.has(src)) adj.set(src, {{ edges: [], neighbors: new Set() }});
-  if (!adj.has(dst)) adj.set(dst, {{ edges: [], neighbors: new Set() }});
-  adj.get(src).edges.push(edge);
-  adj.get(src).neighbors.add(dst);
-  adj.get(dst).edges.push(edge);
-  adj.get(dst).neighbors.add(src);
-}});
-
-const DIM = 0.08;
-let focused = null;
-
-function clearFocus() {{
-  focused = null;
-  nodes.forEach(n => n.style.opacity = '');
-  edges.forEach(e => e.style.opacity = '');
-  clusterChrome.forEach(el => el.style.opacity = '');
-}}
-
-function focusNode(title) {{
-  if (focused === title) {{ clearFocus(); return; }}
-  focused = title;
-  const info = adj.get(title) || {{ edges: [], neighbors: new Set() }};
-  const connected = new Set([title, ...info.neighbors]);
-
-  // Dim all nodes, edges, and cluster chrome individually (not the cluster <g>)
-  nodes.forEach(n => n.style.opacity = DIM);
-  edges.forEach(e => e.style.opacity = DIM);
-  clusterChrome.forEach(el => el.style.opacity = DIM);
-
-  // Highlight connected nodes
-  connected.forEach(name => {{
-    const el = nodeByTitle.get(name);
-    if (el) el.style.opacity = 1;
-  }});
-
-  // Highlight connected edges
-  info.edges.forEach(e => e.style.opacity = 1);
-
-  // Highlight cluster chrome for clusters that contain a connected node
-  const seen = new Set();
-  connected.forEach(name => {{
-    const chrome = nodeToClusterEls.get(name);
-    if (chrome) chrome.forEach(el => {{
-      if (!seen.has(el)) {{ seen.add(el); el.style.opacity = 1; }}
-    }});
-  }});
-}}
-
-// Attach click handlers to nodes
-nodes.forEach(node => {{
-  node.style.cursor = 'pointer';
-  node.addEventListener('click', e => {{
-    e.stopPropagation();
-    const t = node.querySelector('title');
-    if (t) focusNode(t.textContent.trim());
-  }});
-}});
-
-// pan & zoom
-let scale = 1, tx = 0, ty = 0, dragging = false, didDrag = false, sx = 0, sy = 0;
-function applyTransform() {{ svg.style.transform = `translate(${{tx}}px,${{ty}}px) scale(${{scale}})`; svg.style.transformOrigin = '0 0'; }}
-function resetView() {{
-  const vw = window.innerWidth, vh = window.innerHeight;
-  const bb = svg.getBBox();
-  scale = Math.min(vw / bb.width, vh / bb.height) * 0.92;
-  tx = (vw - bb.width * scale) / 2;
-  ty = (vh - bb.height * scale) / 2;
-  applyTransform();
-}}
-resetView();
-
-vp.addEventListener('wheel', e => {{ e.preventDefault(); const f = e.deltaY < 0 ? 1.12 : 0.89; const rect = vp.getBoundingClientRect(); const mx = e.clientX - rect.left; const my = e.clientY - rect.top; tx = mx - f * (mx - tx); ty = my - f * (my - ty); scale *= f; applyTransform(); }}, {{ passive:false }});
-vp.addEventListener('pointerdown', e => {{ dragging=true; didDrag=false; sx=e.clientX-tx; sy=e.clientY-ty; vp.setPointerCapture(e.pointerId); }});
-vp.addEventListener('pointermove', e => {{ if(!dragging) return; didDrag=true; tx=e.clientX-sx; ty=e.clientY-sy; applyTransform(); }});
-vp.addEventListener('pointerup', () => dragging=false);
-// Click background to clear focus (only if it wasn't a drag)
-vp.addEventListener('click', e => {{ if (!didDrag && !e.target.closest('.node')) clearFocus(); }});
-
-function zoomIn() {{ scale*=1.3; applyTransform(); }}
-function zoomOut() {{ scale*=0.7; applyTransform(); }}
-</script>
-</body></html>
-"##
-    )
-}
-
-// ─── Main ────────────────────────────────────────────────────────────────────
-
-fn main() {
-    let args: Vec<String> = std::env::args().collect();
-
-    let mut src_dir = PathBuf::from("src");
-    let mut output_prefix = String::from("deps");
-    let mut output_dir: Option<PathBuf> = None;
-
-    let mut i = 1;
-    while i < args.len() {
-        match args[i].as_str() {
-            "--src-dir" => {
-                i += 1;
-                src_dir = PathBuf::from(&args[i]);
-            }
-            "--output" => {
-                i += 1;
-                output_prefix = args[i].clone();
-            }
-            "--output-dir" => {
-                i += 1;
-                output_dir = Some(PathBuf::from(&args[i]));
-            }
-            "--help" | "-h" => {
-                eprintln!("Usage: depgraph [--src-dir src/] [--output deps] [--output-dir DIR]");
-                eprintln!("  --src-dir DIR     Source directory (default: src/)");
-                eprintln!("  --output PREFIX   Output prefix (default: deps)");
-                eprintln!("  --output-dir DIR  Directory for output files (default: cwd)");
-                eprintln!("                    Produces PREFIX.dot and PREFIX.html");
-                std::process::exit(0);
-            }
-            other => {
-                eprintln!("Unknown argument: {}", other);
-                std::process::exit(1);
-            }
-        }
-        i += 1;
-    }
-
-    // Ensure output directory exists.
-    if let Some(ref dir) = output_dir {
-        fs::create_dir_all(dir).expect("Failed to create output directory");
-    }
-
-    eprintln!("Scanning source directory: {}", src_dir.display());
-
-    // Phase 1: Module discovery
-    let module_defs = discover_modules(&src_dir);
-    eprintln!(
-        "Found {} modules: {}",
-        module_defs.len(),
-        module_defs
-            .iter()
-            .map(|(n, _, _)| n.as_str())
-            .collect::<Vec<_>>()
-            .join(", ")
-    );
-
-    // Phase 2: Parse & index
-    let mut modules: Vec<ModuleInfo> = module_defs
-        .iter()
-        .map(|(name, feature, path)| {
-            let mut m = parse_module(name, path);
-            m.feature_gate = feature.clone();
-            m
-        })
-        .collect();
-
-    for m in &modules {
-        eprintln!(
-            "  {} — {} types: {}",
-            m.name,
-            m.types.len(),
-            m.types
-                .iter()
-                .map(|t| t.name.as_str())
-                .collect::<Vec<_>>()
-                .join(", ")
-        );
-    }
-
-    // Phase 3: Import resolution
-    resolve_imports(&mut modules, &src_dir);
-
-    // Phase 4: Dependency extraction
-    let edges = extract_edges(&modules, &src_dir);
-    eprintln!("Found {} dependency edges", edges.len());
-
-    let cross_module = edges
-        .iter()
-        .filter(|e| e.from_module != e.to_module)
-        .count();
-    let intra_module = edges.len() - cross_module;
-    eprintln!(
-        "  {} cross-module, {} intra-module",
-        cross_module, intra_module
-    );
-
-    // Phase 5: DOT output
-    let dot = generate_dot(&modules, &edges);
-    let dot_file = format!("{}.dot", output_prefix);
-    let dot_path = match &output_dir {
-        Some(dir) => dir.join(&dot_file),
-        None => PathBuf::from(&dot_file),
-    };
-    fs::write(&dot_path, &dot).expect("Failed to write .dot file");
-    eprintln!("Wrote {}", dot_path.display());
-
-    // Phase 6: HTML output
-    let html = generate_html(&dot);
-    let html_file = format!("{}.html", output_prefix);
-    let html_path = match &output_dir {
-        Some(dir) => dir.join(&html_file),
-        None => PathBuf::from(&html_file),
-    };
-    fs::write(&html_path, &html).expect("Failed to write .html file");
-    eprintln!("Wrote {}", html_path.display());
-
-    eprintln!("Done!");
-}
diff --git a/tools/fn_complexity.py b/tools/fn_complexity.py
deleted file mode 100755
index 84212cb..0000000
--- a/tools/fn_complexity.py
+++ /dev/null
@@ -1,181 +0,0 @@
-#!/usr/bin/env python3
-"""Analyze per-function complexity metrics for Rust source files.
-
-Reports: function name, line count, max nesting depth, and file location.
-Sorted by line count (descending) to surface the largest functions first.
-
-Usage:
-    python3 tools/fn_complexity.py src/worker.rs
-    python3 tools/fn_complexity.py src/           # recurse into directory
-    python3 tools/fn_complexity.py src/ --json     # JSON output
-    python3 tools/fn_complexity.py src/ --min-lines 20  # filter small fns
-"""
-
-import argparse
-import json
-import os
-import re
-import sys
-from dataclasses import dataclass, asdict
-from pathlib import Path
-
-
-@dataclass
-class FnMetric:
-    file: str
-    name: str
-    start_line: int
-    end_line: int
-    lines: int
-    max_depth: int
-    has_unsafe: bool
-
-    @property
-    def location(self) -> str:
-        return f"{self.file}:{self.start_line}"
-
-
-# Matches fn declarations (free functions, methods, trait impls)
-FN_PATTERN = re.compile(
-    r'^\s*(?:pub(?:\(crate\))?\s+)?(?:async\s+)?fn\s+(\w+)'
-)
-
-# Matches impl blocks to qualify method names
-IMPL_PATTERN = re.compile(
-    r'^\s*impl(?:<[^>]*>)?\s+(?:(\w+(?:<[^>]*>)?)\s+for\s+)?(\w+)'
-)
-
-
-def analyze_file(path: str) -> list[FnMetric]:
-    """Parse a single Rust file and extract function metrics."""
-    with open(path) as f:
-        lines = f.readlines()
-
-    metrics = []
-    current_impl = None
-    brace_depth = 0
-    fn_stack: list[tuple[str, int, int, bool]] = []  # (name, start_line, start_depth, has_unsafe)
-
-    for i, line in enumerate(lines, 1):
-        stripped = line.rstrip()
-
-        # Track impl blocks for method qualification
-        impl_match = IMPL_PATTERN.match(stripped)
-        if impl_match and '{' in stripped:
-            trait_name = impl_match.group(1)
-            type_name = impl_match.group(2)
-            if trait_name:
-                current_impl = f"{trait_name} for {type_name}"
-            else:
-                current_impl = type_name
-
-        # Detect function start
-        fn_match = FN_PATTERN.match(stripped)
-        if fn_match and '{' in stripped:
-            fn_name = fn_match.group(1)
-            if current_impl:
-                fn_name = f"{current_impl}::{fn_name}"
-            has_unsafe = 'unsafe' in stripped
-            fn_stack.append((fn_name, i, brace_depth, has_unsafe))
-
-        # Track brace depth
-        # Simple brace counting (ignores braces in strings/comments, good enough)
-        opens = stripped.count('{')
-        closes = stripped.count('}')
-        brace_depth += opens - closes
-
-        # Check for unsafe blocks within functions
-        if fn_stack and 'unsafe' in stripped and fn_match is None:
-            name, start, depth, _ = fn_stack[-1]
-            fn_stack[-1] = (name, start, depth, True)
-
-        # When a function's brace depth returns to entry level, it's done
-        while fn_stack and brace_depth <= fn_stack[-1][2]:
-            fn_name, start_line, _, has_unsafe = fn_stack.pop()
-            end_line = i
-            fn_lines = end_line - start_line + 1
-
-            # Calculate max nesting depth within this function
-            max_depth = 0
-            local_depth = 0
-            for j in range(start_line - 1, end_line):
-                if j < len(lines):
-                    local_depth += lines[j].count('{') - lines[j].count('}')
-                    max_depth = max(max_depth, local_depth)
-
-            # Reset impl context if we've left the impl block
-            if brace_depth == 0:
-                current_impl = None
-
-            metrics.append(FnMetric(
-                file=path,
-                name=fn_name,
-                start_line=start_line,
-                end_line=end_line,
-                lines=fn_lines,
-                max_depth=max_depth,
-                has_unsafe=has_unsafe,
-            ))
-
-    return metrics
-
-
-def collect_files(path: str) -> list[str]:
-    """Collect .rs files from a path (file or directory)."""
-    p = Path(path)
-    if p.is_file():
-        return [str(p)]
-    elif p.is_dir():
-        return sorted(str(f) for f in p.rglob('*.rs'))
-    else:
-        print(f"Error: {path} is not a file or directory", file=sys.stderr)
-        sys.exit(1)
-
-
-def main():
-    parser = argparse.ArgumentParser(description='Rust function complexity analyzer')
-    parser.add_argument('paths', nargs='+', help='Rust source files or directories')
-    parser.add_argument('--json', action='store_true', help='Output as JSON')
-    parser.add_argument('--min-lines', type=int, default=0,
-                       help='Only show functions with at least N lines')
-    parser.add_argument('--top', type=int, default=0,
-                       help='Show only the top N largest functions')
-    args = parser.parse_args()
-
-    all_metrics: list[FnMetric] = []
-    for path in args.paths:
-        for file in collect_files(path):
-            all_metrics.extend(analyze_file(file))
-
-    # Filter and sort
-    if args.min_lines:
-        all_metrics = [m for m in all_metrics if m.lines >= args.min_lines]
-    all_metrics.sort(key=lambda m: m.lines, reverse=True)
-    if args.top:
-        all_metrics = all_metrics[:args.top]
-
-    if args.json:
-        output = [asdict(m) for m in all_metrics]
-        print(json.dumps(output, indent=2))
-    else:
-        # Summary stats
-        if all_metrics:
-            total_fns = len(all_metrics)
-            avg_lines = sum(m.lines for m in all_metrics) / total_fns
-            max_fn = all_metrics[0]
-
-            print(f"Functions: {total_fns}, avg lines: {avg_lines:.1f}, "
-                  f"largest: {max_fn.name} ({max_fn.lines} lines)")
-            print()
-
-        # Table output
-        print(f"{'Lines':>5}  {'Depth':>5}  {'Location':<45}  {'Function'}")
-        print(f"{'─'*5}  {'─'*5}  {'─'*45}  {'─'*40}")
-        for m in all_metrics:
-            loc = f"{m.file}:{m.start_line}"
-            unsafe_marker = " [unsafe]" if m.has_unsafe else ""
-            print(f"{m.lines:>5}  {m.max_depth:>5}  {loc:<45}  {m.name}{unsafe_marker}")
-
-
-if __name__ == '__main__':
-    main()
diff --git a/tools/loc_analysis.py b/tools/loc_analysis.py
deleted file mode 100755
index c7e6de2..0000000
--- a/tools/loc_analysis.py
+++ /dev/null
@@ -1,164 +0,0 @@
-#!/usr/bin/env python3
-"""Analyze line-of-code breakdown for Rust source files.
-
-Reports: logic, comments, blank, and string-literal lines per file.
-Helps track code reduction progress and identify embedded content.
-
-Usage:
-    python3 tools/loc_analysis.py src/
-    python3 tools/loc_analysis.py src/ crates/std/src/ --json
-    python3 tools/loc_analysis.py src/ --sort-by logic
-"""
-
-import argparse
-import json
-import re
-import sys
-from dataclasses import dataclass, asdict
-from pathlib import Path
-
-
-@dataclass
-class FileMetrics:
-    file: str
-    total: int
-    logic: int
-    comment: int
-    blank: int
-    string_literal: int
-
-    @property
-    def logic_pct(self) -> float:
-        return (self.logic / self.total * 100) if self.total else 0.0
-
-
-def analyze_file(path: str) -> FileMetrics:
-    """Count line types in a Rust source file."""
-    with open(path) as f:
-        lines = f.readlines()
-
-    total = len(lines)
-    blank = 0
-    comment = 0
-    string_lit = 0
-    logic = 0
-
-    in_block_comment = False
-    in_raw_string = False
-
-    for line in lines:
-        stripped = line.strip()
-
-        if not stripped:
-            blank += 1
-            continue
-
-        # Track block comments
-        if in_block_comment:
-            comment += 1
-            if '*/' in stripped:
-                in_block_comment = False
-            continue
-
-        if stripped.startswith('/*'):
-            comment += 1
-            if '*/' not in stripped:
-                in_block_comment = True
-            continue
-
-        # Line comments
-        if stripped.startswith('//'):
-            comment += 1
-            continue
-
-        # Raw string literals (r#"..."#, r##"..."##, etc.) and regular strings
-        # Heuristic: line is predominantly a string if it's inside a raw string
-        # or contains a long string literal (>60 chars of quoted content)
-        if in_raw_string:
-            string_lit += 1
-            if '"#' in stripped or '"##' in stripped:
-                in_raw_string = False
-            continue
-
-        if 'r#"' in stripped or 'r##"' in stripped:
-            if '"#' not in stripped.split('r#"', 1)[-1] if 'r#"' in stripped else True:
-                in_raw_string = True
-                string_lit += 1
-                continue
-
-        # Heuristic: if the line has a long string literal, count it
-        string_content = re.findall(r'"([^"]*)"', stripped)
-        total_string_chars = sum(len(s) for s in string_content)
-        if total_string_chars > 60:
-            string_lit += 1
-        else:
-            logic += 1
-
-    return FileMetrics(
-        file=path,
-        total=total,
-        logic=logic,
-        comment=comment,
-        blank=blank,
-        string_literal=string_lit,
-    )
-
-
-def collect_files(path: str) -> list[str]:
-    """Collect .rs files from a path (file or directory)."""
-    p = Path(path)
-    if p.is_file():
-        return [str(p)]
-    elif p.is_dir():
-        return sorted(str(f) for f in p.rglob('*.rs'))
-    else:
-        print(f"Error: {path} is not a file or directory", file=sys.stderr)
-        sys.exit(1)
-
-
-def main():
-    parser = argparse.ArgumentParser(description='Rust LOC breakdown analyzer')
-    parser.add_argument('paths', nargs='+', help='Rust source files or directories')
-    parser.add_argument('--json', action='store_true', help='Output as JSON')
-    parser.add_argument('--sort-by', choices=['total', 'logic', 'comment', 'string_literal'],
-                       default='total', help='Sort column')
-    args = parser.parse_args()
-
-    all_metrics: list[FileMetrics] = []
-    for path in args.paths:
-        for file in collect_files(path):
-            all_metrics.extend([analyze_file(file)])
-
-    all_metrics.sort(key=lambda m: getattr(m, args.sort_by), reverse=True)
-
-    if args.json:
-        print(json.dumps([asdict(m) for m in all_metrics], indent=2))
-    else:
-        # Summary
-        totals = FileMetrics(
-            file="TOTAL",
-            total=sum(m.total for m in all_metrics),
-            logic=sum(m.logic for m in all_metrics),
-            comment=sum(m.comment for m in all_metrics),
-            blank=sum(m.blank for m in all_metrics),
-            string_literal=sum(m.string_literal for m in all_metrics),
-        )
-
-        print(f"Files: {len(all_metrics)}, Total: {totals.total}, "
-              f"Logic: {totals.logic} ({totals.logic_pct:.1f}%), "
-              f"Comment: {totals.comment}, Blank: {totals.blank}, "
-              f"Strings: {totals.string_literal}")
-        print()
-
-        print(f"{'Total':>6}  {'Logic':>6}  {'Cmt':>5}  {'Blank':>5}  {'Str':>5}  {'%Logic':>6}  {'File'}")
-        print(f"{'─'*6}  {'─'*6}  {'─'*5}  {'─'*5}  {'─'*5}  {'─'*6}  {'─'*45}")
-        for m in all_metrics:
-            print(f"{m.total:>6}  {m.logic:>6}  {m.comment:>5}  {m.blank:>5}  "
-                  f"{m.string_literal:>5}  {m.logic_pct:>5.1f}%  {m.file}")
-        print(f"{'─'*6}  {'─'*6}  {'─'*5}  {'─'*5}  {'─'*5}  {'─'*6}  {'─'*45}")
-        print(f"{totals.total:>6}  {totals.logic:>6}  {totals.comment:>5}  {totals.blank:>5}  "
-              f"{totals.string_literal:>5}  {totals.logic_pct:>5.1f}%  TOTAL")
-
-
-if __name__ == '__main__':
-    main()
diff --git a/tools/package-lock.json b/tools/package-lock.json
deleted file mode 100644
index 62ab53d..0000000
--- a/tools/package-lock.json
+++ /dev/null
@@ -1,18 +0,0 @@
-{
-  "name": "tools",
-  "lockfileVersion": 3,
-  "requires": true,
-  "packages": {
-    "": {
-      "dependencies": {
-        "@viz-js/viz": "^3.24.0"
-      }
-    },
-    "node_modules/@viz-js/viz": {
-      "version": "3.24.0",
-      "resolved": "https://registry.npmjs.org/@viz-js/viz/-/viz-3.24.0.tgz",
-      "integrity": "sha512-sTRz2cFN6PwICVC7GVlF2aYNAZ/LwF7Y1mp3B+8LXQ7otyHrzQYSzNBwJ4lctL/aS3x97ppw59z6zIW+wPs6bQ==",
-      "license": "MIT"
-    }
-  }
-}
diff --git a/tools/package.json b/tools/package.json
deleted file mode 100644
index 5d39814..0000000
--- a/tools/package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "dependencies": {
-    "@viz-js/viz": "^3.24.0"
-  }
-}
diff --git a/tools/spectral/.gitignore b/tools/spectral/.gitignore
deleted file mode 100644
index 60c9b1c..0000000
--- a/tools/spectral/.gitignore
+++ /dev/null
@@ -1,2 +0,0 @@
-__pycache__
-output/*
\ No newline at end of file
diff --git a/tools/spectral/spectral_analysis.py b/tools/spectral/spectral_analysis.py
deleted file mode 100644
index bb9948b..0000000
--- a/tools/spectral/spectral_analysis.py
+++ /dev/null
@@ -1,1565 +0,0 @@
-#!/usr/bin/env python3
-"""Spectral analysis tool for dependency DAGs.
-
-Reads a GraphViz DOT file (produced by the depgraph tool) and applies spectral
-graph theory (Laplacian eigenvalues, Fiedler vectors) to derive quantitative
-complexity metrics and visual analysis of codebase structural coupling.
-
-Usage:
-    python spectral_analysis.py deps.dot [-o OUTPUT_DIR] [--no-plots] [--json]
-"""
-
-from __future__ import annotations
-
-import argparse
-import json
-import math
-import os
-import re
-import sys
-from dataclasses import dataclass, field
-from typing import Any
-
-import numpy as np
-from scipy import sparse
-
-
-# ─── Data Structures ──────────────────────────────────────────────────────────
-
-@dataclass
-class Node:
-    name: str
-    module: str
-
-
-@dataclass
-class Edge:
-    source: str
-    target: str
-    label: str
-    edge_type: str  # "field" or "trait_impl"
-    cross_module: bool
-
-
-@dataclass
-class DependencyGraph:
-    nodes: list[Node] = field(default_factory=list)
-    edges: list[Edge] = field(default_factory=list)
-    modules: list[str] = field(default_factory=list)  # ordered module names
-    node_to_module: dict[str, str] = field(default_factory=dict)
-
-
-@dataclass
-class SpectralResults:
-    eigenvalues: np.ndarray
-    eigenvectors: np.ndarray
-    fiedler_value: float
-    fiedler_vector: np.ndarray
-    adjacency: np.ndarray
-    adjacency_sym: np.ndarray
-    laplacian: np.ndarray
-    node_names: list[str]
-    node_modules: list[str]
-
-
-@dataclass
-class ModuleCouplingResult:
-    module_names: list[str]
-    coupling_matrix: np.ndarray  # directed
-    cross_module_edges: int
-    total_edges: int
-
-
-@dataclass
-class ComplexityMetrics:
-    algebraic_connectivity: float
-    normalized_algebraic_connectivity: float
-    spectral_entropy: float
-    normalized_spectral_entropy: float
-    edge_density: float
-    cross_module_ratio: float
-    spectral_radius: float
-    normalized_spectral_radius: float
-    cci: float
-    n_nodes: int
-    n_edges: int
-    n_modules: int
-    connected_components: int
-
-
-@dataclass
-class StructuralProperties:
-    avg_degree: float
-    max_fan_in: int
-    max_fan_in_node: str
-    max_fan_out: int
-    max_fan_out_node: str
-    dag_depth: int
-    clustering_coeff: float
-    module_cohesion: dict[str, float]
-    avg_module_cohesion: float
-    avg_module_size: float
-
-
-# ─── DOT Parser ───────────────────────────────────────────────────────────────
-
-def parse_dot(text: str) -> DependencyGraph:
-    """Parse a depgraph-generated DOT file into a DependencyGraph.
-
-    Uses a line-by-line state machine to extract:
-    - subgraph cluster_<module> blocks -> nodes with module membership
-    - A -> B [label="...", style=..., ...] -> edges with classification
-    """
-    graph = DependencyGraph()
-    current_module: str | None = None
-    module_order: list[str] = []
-    seen_nodes: set[str] = set()
-
-    for line in text.splitlines():
-        stripped = line.strip()
-
-        # Entering a subgraph cluster
-        m = re.match(r'subgraph\s+cluster_(\w+)\s*\{', stripped)
-        if m:
-            current_module = m.group(1)
-            if current_module not in module_order:
-                module_order.append(current_module)
-            continue
-
-        # Closing brace - exit current subgraph if we're in one
-        if stripped == '}' and current_module is not None:
-            current_module = None
-            continue
-
-        # Node definition inside a subgraph: NodeName [label="...", ...]
-        if current_module is not None:
-            node_match = re.match(r'(\w+)\s*\[', stripped)
-            if node_match:
-                node_name = node_match.group(1)
-                # Skip DOT keywords
-                if node_name in ('label', 'style', 'node', 'edge', 'graph',
-                                 'subgraph', 'digraph', 'rankdir', 'fontname',
-                                 'fontsize', 'labelloc', 'compound', 'newrank',
-                                 'splines', 'fillcolor', 'color'):
-                    continue
-                if node_name not in seen_nodes:
-                    seen_nodes.add(node_name)
-                    graph.nodes.append(Node(name=node_name, module=current_module))
-                    graph.node_to_module[node_name] = current_module
-                continue
-
-        # Edge definition: A -> B [label="...", style=..., ...]
-        edge_match = re.match(
-            r'(\w+)\s*->\s*(\w+)\s*\[(.+)\];', stripped
-        )
-        if edge_match:
-            src = edge_match.group(1)
-            tgt = edge_match.group(2)
-            attrs_str = edge_match.group(3)
-
-            # Extract label
-            label_match = re.search(r'label="([^"]*)"', attrs_str)
-            label = label_match.group(1) if label_match else ""
-
-            # Classify edge type
-            style_match = re.search(r'style=(\w+)', attrs_str)
-            style = style_match.group(1) if style_match else "solid"
-            edge_type = "trait_impl" if style == "dotted" else "field"
-
-            # Determine cross-module status
-            src_mod = graph.node_to_module.get(src)
-            tgt_mod = graph.node_to_module.get(tgt)
-            cross = src_mod is not None and tgt_mod is not None and src_mod != tgt_mod
-
-            graph.edges.append(Edge(
-                source=src, target=tgt, label=label,
-                edge_type=edge_type, cross_module=cross,
-            ))
-            continue
-
-    graph.modules = module_order
-    return graph
-
-
-# ─── Matrix Construction ──────────────────────────────────────────────────────
-
-def get_node_ordering(graph: DependencyGraph) -> list[str]:
-    """Order nodes by module order, then alphabetical within module."""
-    module_index = {m: i for i, m in enumerate(graph.modules)}
-    return sorted(
-        [n.name for n in graph.nodes],
-        key=lambda name: (
-            module_index.get(graph.node_to_module.get(name, ""), 999),
-            name,
-        ),
-    )
-
-
-def build_adjacency(graph: DependencyGraph, node_order: list[str]) -> np.ndarray:
-    """Build directed binary adjacency matrix."""
-    n = len(node_order)
-    idx = {name: i for i, name in enumerate(node_order)}
-    A = np.zeros((n, n), dtype=float)
-    for edge in graph.edges:
-        i = idx.get(edge.source)
-        j = idx.get(edge.target)
-        if i is not None and j is not None:
-            A[i, j] = 1.0
-    return A
-
-
-def symmetrize(A: np.ndarray) -> np.ndarray:
-    """OR-symmetrize: A_sym[i,j] = 1 if A[i,j] or A[j,i]."""
-    return np.clip(A + A.T, 0, 1)
-
-
-def build_laplacian(A_sym: np.ndarray) -> np.ndarray:
-    """Build graph Laplacian L = D - A_sym."""
-    D = np.diag(A_sym.sum(axis=1))
-    return D - A_sym
-
-
-# ─── Spectral Analysis ────────────────────────────────────────────────────────
-
-def compute_spectral(graph: DependencyGraph) -> SpectralResults:
-    """Compute full spectral analysis of the dependency graph."""
-    node_order = get_node_ordering(graph)
-    n = len(node_order)
-
-    A = build_adjacency(graph, node_order)
-    A_sym = symmetrize(A)
-    L = build_laplacian(A_sym)
-
-    if n == 0:
-        return SpectralResults(
-            eigenvalues=np.array([]),
-            eigenvectors=np.array([[]]),
-            fiedler_value=0.0,
-            fiedler_vector=np.array([]),
-            adjacency=A, adjacency_sym=A_sym, laplacian=L,
-            node_names=node_order,
-            node_modules=[graph.node_to_module.get(name, "") for name in node_order],
-        )
-
-    eigenvalues, eigenvectors = np.linalg.eigh(L)
-
-    # Clean up near-zero eigenvalues
-    eigenvalues = np.where(np.abs(eigenvalues) < 1e-10, 0.0, eigenvalues)
-
-    if n == 1:
-        fiedler_value = 0.0
-        fiedler_vector = np.array([0.0])
-    elif n >= 2:
-        fiedler_value = float(eigenvalues[1])
-        fiedler_vector = eigenvectors[:, 1]
-    else:
-        fiedler_value = 0.0
-        fiedler_vector = np.array([])
-
-    return SpectralResults(
-        eigenvalues=eigenvalues,
-        eigenvectors=eigenvectors,
-        fiedler_value=fiedler_value,
-        fiedler_vector=fiedler_vector,
-        adjacency=A,
-        adjacency_sym=A_sym,
-        laplacian=L,
-        node_names=node_order,
-        node_modules=[graph.node_to_module.get(name, "") for name in node_order],
-    )
-
-
-# ─── Module Coupling ──────────────────────────────────────────────────────────
-
-def compute_module_coupling(graph: DependencyGraph) -> ModuleCouplingResult:
-    """Compute directed module-level coupling matrix."""
-    modules = graph.modules
-    n = len(modules)
-    mod_idx = {m: i for i, m in enumerate(modules)}
-    M = np.zeros((n, n), dtype=float)
-
-    cross = 0
-    total = len(graph.edges)
-
-    for edge in graph.edges:
-        src_mod = graph.node_to_module.get(edge.source)
-        tgt_mod = graph.node_to_module.get(edge.target)
-        if src_mod is not None and tgt_mod is not None:
-            i = mod_idx.get(src_mod)
-            j = mod_idx.get(tgt_mod)
-            if i is not None and j is not None:
-                M[i, j] += 1.0
-                if src_mod != tgt_mod:
-                    cross += 1
-
-    return ModuleCouplingResult(
-        module_names=modules,
-        coupling_matrix=M,
-        cross_module_edges=cross,
-        total_edges=total,
-    )
-
-
-# ─── Complexity Metrics ───────────────────────────────────────────────────────
-
-def count_connected_components(A_sym: np.ndarray) -> int:
-    """Count connected components using BFS on the symmetrized adjacency."""
-    n = A_sym.shape[0]
-    if n == 0:
-        return 0
-    visited = set()
-    components = 0
-    for start in range(n):
-        if start in visited:
-            continue
-        components += 1
-        queue = [start]
-        visited.add(start)
-        while queue:
-            node = queue.pop(0)
-            for neighbor in range(n):
-                if A_sym[node, neighbor] > 0 and neighbor not in visited:
-                    visited.add(neighbor)
-                    queue.append(neighbor)
-    return components
-
-
-def compute_spectral_entropy(eigenvalues: np.ndarray) -> float:
-    """Compute spectral entropy from positive Laplacian eigenvalues.
-
-    H(lambda) = -sum(p_i * log2(p_i)) where p_i = lambda_i / sum(lambdas)
-    over positive eigenvalues.
-    """
-    positive = eigenvalues[eigenvalues > 1e-10]
-    if len(positive) == 0:
-        return 0.0
-    p = positive / positive.sum()
-    # Avoid log(0)
-    p = p[p > 0]
-    return float(-np.sum(p * np.log2(p)))
-
-
-def compute_complexity_metrics(
-    spectral: SpectralResults,
-    coupling: ModuleCouplingResult,
-) -> ComplexityMetrics:
-    """Compute the Connectome Complexity Index (CCI) and all sub-metrics."""
-    n = len(spectral.node_names)
-    n_edges = int(spectral.adjacency.sum())  # directed edge count
-    n_modules = len(coupling.module_names)
-    components = count_connected_components(spectral.adjacency_sym)
-
-    if n <= 1:
-        return ComplexityMetrics(
-            algebraic_connectivity=0.0,
-            normalized_algebraic_connectivity=0.0,
-            spectral_entropy=0.0,
-            normalized_spectral_entropy=0.0,
-            edge_density=0.0,
-            cross_module_ratio=0.0,
-            spectral_radius=0.0,
-            normalized_spectral_radius=0.0,
-            cci=0.0,
-            n_nodes=n,
-            n_edges=n_edges,
-            n_modules=n_modules,
-            connected_components=components,
-        )
-
-    # Sub-metric 1: Normalized algebraic connectivity (lambda_2 / n)
-    algebraic_connectivity = spectral.fiedler_value
-    norm_alg_conn = algebraic_connectivity / n
-
-    # Sub-metric 2: Spectral entropy
-    raw_entropy = compute_spectral_entropy(spectral.eigenvalues)
-    positive_count = int(np.sum(spectral.eigenvalues > 1e-10))
-    max_entropy = math.log2(positive_count) if positive_count > 1 else 1.0
-    norm_entropy = raw_entropy / max_entropy if max_entropy > 0 else 0.0
-
-    # Sub-metric 3: Edge density |E| / (n*(n-1))
-    edge_density = n_edges / (n * (n - 1)) if n > 1 else 0.0
-
-    # Sub-metric 4: Cross-module coupling ratio
-    cross_ratio = (coupling.cross_module_edges / coupling.total_edges
-                   if coupling.total_edges > 0 else 0.0)
-
-    # Sub-metric 5: Normalized spectral radius (max eigenvalue of A_sym / (n-1))
-    if spectral.adjacency_sym.shape[0] > 0:
-        eig_A = np.linalg.eigvalsh(spectral.adjacency_sym)
-        spectral_radius = float(np.max(np.abs(eig_A)))
-    else:
-        spectral_radius = 0.0
-    norm_spec_radius = spectral_radius / (n - 1) if n > 1 else 0.0
-
-    # CCI = weighted sum
-    cci = (
-        0.25 * norm_alg_conn
-        + 0.25 * norm_entropy
-        + 0.15 * edge_density
-        + 0.20 * cross_ratio
-        + 0.15 * norm_spec_radius
-    )
-
-    return ComplexityMetrics(
-        algebraic_connectivity=algebraic_connectivity,
-        normalized_algebraic_connectivity=norm_alg_conn,
-        spectral_entropy=raw_entropy,
-        normalized_spectral_entropy=norm_entropy,
-        edge_density=edge_density,
-        cross_module_ratio=cross_ratio,
-        spectral_radius=spectral_radius,
-        normalized_spectral_radius=norm_spec_radius,
-        cci=cci,
-        n_nodes=n,
-        n_edges=n_edges,
-        n_modules=n_modules,
-        connected_components=components,
-    )
-
-
-# ─── Structural Properties ───────────────────────────────────────────────────
-
-def _compute_dag_depth(A: np.ndarray) -> int:
-    """Longest directed path in the graph."""
-    n = A.shape[0]
-    if n == 0:
-        return 0
-    UNVISITED, VISITING, DONE = 0, 1, 2
-    state = [UNVISITED] * n
-    depth = [0] * n
-
-    def dfs(node: int) -> int:
-        if state[node] == DONE:
-            return depth[node]
-        if state[node] == VISITING:
-            return 0  # cycle — treat as leaf
-        state[node] = VISITING
-        best = 0
-        for j in range(n):
-            if A[node, j] > 0:
-                best = max(best, 1 + dfs(j))
-        state[node] = DONE
-        depth[node] = best
-        return best
-
-    return max(dfs(i) for i in range(n))
-
-
-def _compute_clustering_coefficient(A_sym: np.ndarray) -> float:
-    """Global clustering coefficient (transitivity) on the undirected graph.
-
-    Uses the matrix identity: C = trace(A³) / (||A²||₁ - trace(A²))
-    where ||·||₁ is the sum of all elements.
-    """
-    n = A_sym.shape[0]
-    if n < 3:
-        return 0.0
-    A2 = A_sym @ A_sym
-    A3 = A2 @ A_sym
-    numerator = np.trace(A3)
-    denominator = A2.sum() - np.trace(A2)
-    if denominator == 0:
-        return 0.0
-    return float(numerator / denominator)
-
-
-def compute_structural_properties(
-    graph: DependencyGraph,
-    spectral: SpectralResults,
-) -> StructuralProperties:
-    """Compute graph-theoretic structural properties."""
-    n = len(graph.nodes)
-    n_edges = len(graph.edges)
-    node_names = spectral.node_names
-    A = spectral.adjacency
-
-    avg_degree = n_edges / n if n > 0 else 0.0
-
-    in_degrees = A.sum(axis=0)
-    out_degrees = A.sum(axis=1)
-
-    if n > 0:
-        fi_idx = int(np.argmax(in_degrees))
-        fo_idx = int(np.argmax(out_degrees))
-        max_fan_in = int(in_degrees[fi_idx])
-        max_fan_out = int(out_degrees[fo_idx])
-        max_fan_in_node = node_names[fi_idx]
-        max_fan_out_node = node_names[fo_idx]
-    else:
-        max_fan_in = max_fan_out = 0
-        max_fan_in_node = max_fan_out_node = ""
-
-    dag_depth = _compute_dag_depth(A)
-    clustering_coeff = _compute_clustering_coefficient(spectral.adjacency_sym)
-
-    # Per-module cohesion: intra-edges / max-possible-intra-edges
-    module_cohesion: dict[str, float] = {}
-    module_sizes: dict[str, int] = {}
-    for mod in graph.modules:
-        mod_nodes = [i for i, name in enumerate(node_names)
-                     if graph.node_to_module.get(name) == mod]
-        k = len(mod_nodes)
-        module_sizes[mod] = k
-        if k <= 1:
-            module_cohesion[mod] = float("nan")
-            continue
-        max_possible = k * (k - 1)
-        actual = sum(1 for i in mod_nodes for j in mod_nodes
-                     if i != j and A[i, j] > 0)
-        module_cohesion[mod] = actual / max_possible
-
-    valid = [v for v in module_cohesion.values() if not math.isnan(v)]
-    avg_cohesion = sum(valid) / len(valid) if valid else 0.0
-
-    sizes = list(module_sizes.values())
-    avg_size = sum(sizes) / len(sizes) if sizes else 0.0
-
-    return StructuralProperties(
-        avg_degree=avg_degree,
-        max_fan_in=max_fan_in,
-        max_fan_in_node=max_fan_in_node,
-        max_fan_out=max_fan_out,
-        max_fan_out_node=max_fan_out_node,
-        dag_depth=dag_depth,
-        clustering_coeff=clustering_coeff,
-        module_cohesion=module_cohesion,
-        avg_module_cohesion=avg_cohesion,
-        avg_module_size=avg_size,
-    )
-
-
-# ─── Full Pipeline ────────────────────────────────────────────────────────────
-
-@dataclass
-class AnalysisResult:
-    graph: DependencyGraph
-    spectral: SpectralResults
-    coupling: ModuleCouplingResult
-    metrics: ComplexityMetrics
-    structural: StructuralProperties
-
-
-def run_analysis(graph: DependencyGraph) -> AnalysisResult:
-    """Run the full spectral analysis pipeline on a DependencyGraph."""
-    spectral = compute_spectral(graph)
-    coupling = compute_module_coupling(graph)
-    metrics = compute_complexity_metrics(spectral, coupling)
-    structural = compute_structural_properties(graph, spectral)
-    return AnalysisResult(
-        graph=graph,
-        spectral=spectral,
-        coupling=coupling,
-        metrics=metrics,
-        structural=structural,
-    )
-
-
-# ─── Text Report ──────────────────────────────────────────────────────────────
-
-def generate_report(result: AnalysisResult) -> str:
-    """Generate a text report of the spectral analysis."""
-    s = result.spectral
-    m = result.metrics
-    c = result.coupling
-    p = result.structural
-    lines: list[str] = []
-
-    def w(text: str = "") -> None:
-        lines.append(text)
-
-    w("=" * 72)
-    w("  SPECTRAL ANALYSIS REPORT — Dependency DAG")
-    w("=" * 72)
-    w()
-
-    # Graph summary
-    w("GRAPH SUMMARY")
-    w("-" * 40)
-    w(f"  Nodes:                {m.n_nodes}")
-    w(f"  Directed edges:       {m.n_edges}")
-    w(f"  Modules:              {m.n_modules}")
-    w(f"  Connected components: {m.connected_components}")
-    w(f"  Modules:              {', '.join(c.module_names)}")
-    w()
-
-    # Structural properties
-    w("STRUCTURAL PROPERTIES")
-    w("-" * 40)
-    w(f"  Edges/node (avg degree):   {p.avg_degree:.2f}")
-    w(f"  Max fan-in:                {p.max_fan_in:<4d} ({p.max_fan_in_node})")
-    w(f"  Max fan-out:               {p.max_fan_out:<4d} ({p.max_fan_out_node})")
-    w(f"  DAG depth:                 {p.dag_depth}")
-    w(f"  Clustering coefficient:    {p.clustering_coeff:.4f}")
-    w()
-
-    # Module cohesion
-    w("MODULE COHESION")
-    w("-" * 40)
-    w(f"  {'Module':<16s} {'Size':>5s}  {'Cohesion':>8s}")
-    for mod in c.module_names:
-        coh = p.module_cohesion.get(mod, float("nan"))
-        size = sum(1 for n in result.graph.nodes if n.module == mod)
-        coh_str = f"{coh:.3f}" if not math.isnan(coh) else "    —"
-        w(f"  {mod:<16s} {size:>5d}  {coh_str:>8s}")
-    w(f"  {'─' * 32}")
-    w(f"  {'Average cohesion:':<22s}  {p.avg_module_cohesion:8.3f}")
-    w(f"  {'Avg module size:':<22s}  {p.avg_module_size:8.1f}")
-    w()
-
-    # Module coupling
-    w("MODULE COUPLING MATRIX (directed edge counts)")
-    w("-" * 40)
-    header = "  " + " " * 14 + "".join(f"{name:>10s}" for name in c.module_names)
-    w(header)
-    for i, row_name in enumerate(c.module_names):
-        row = f"  {row_name:12s}  " + "".join(
-            f"{int(c.coupling_matrix[i, j]):10d}" for j in range(len(c.module_names))
-        )
-        w(row)
-    w()
-    w(f"  Cross-module edges: {c.cross_module_edges} / {c.total_edges} "
-      f"({m.cross_module_ratio:.1%})")
-    w()
-
-    # Complexity metrics
-    w("CONNECTOME COMPLEXITY INDEX (CCI)")
-    w("-" * 40)
-    w(f"  {'Sub-metric':<40s} {'Raw':>10s} {'Normalized':>10s} {'Weight':>8s} {'Contrib':>8s}")
-    w(f"  {'─' * 40} {'─' * 10} {'─' * 10} {'─' * 8} {'─' * 8}")
-
-    rows = [
-        ("Algebraic connectivity (lambda_2/n)",
-         f"{m.algebraic_connectivity:.4f}", f"{m.normalized_algebraic_connectivity:.4f}",
-         "0.25", f"{0.25 * m.normalized_algebraic_connectivity:.4f}"),
-        ("Spectral entropy (H/log2(k))",
-         f"{m.spectral_entropy:.4f}", f"{m.normalized_spectral_entropy:.4f}",
-         "0.25", f"{0.25 * m.normalized_spectral_entropy:.4f}"),
-        ("Edge density (|E|/n(n-1))",
-         f"{m.edge_density:.4f}", f"{m.edge_density:.4f}",
-         "0.15", f"{0.15 * m.edge_density:.4f}"),
-        ("Cross-module coupling ratio",
-         f"{m.cross_module_ratio:.4f}", f"{m.cross_module_ratio:.4f}",
-         "0.20", f"{0.20 * m.cross_module_ratio:.4f}"),
-        ("Spectral radius (rho/(n-1))",
-         f"{m.spectral_radius:.4f}", f"{m.normalized_spectral_radius:.4f}",
-         "0.15", f"{0.15 * m.normalized_spectral_radius:.4f}"),
-    ]
-    for label, raw, norm, weight, contrib in rows:
-        w(f"  {label:<40s} {raw:>10s} {norm:>10s} {weight:>8s} {contrib:>8s}")
-    w(f"  {'─' * 40} {'─' * 10} {'─' * 10} {'─' * 8} {'─' * 8}")
-    w(f"  {'CCI (weighted sum)':<40s} {'':>10s} {'':>10s} {'1.00':>8s} {m.cci:8.4f}")
-    w()
-
-    # Interpretation
-    if m.cci < 0.3:
-        interp = "LOW complexity — well-decomposed architecture"
-    elif m.cci < 0.6:
-        interp = "MODERATE complexity — typical well-structured codebase"
-    else:
-        interp = "HIGH complexity — consider reviewing module boundaries"
-    w(f"  Interpretation: {interp}")
-    w()
-    w("=" * 72)
-
-    return "\n".join(lines)
-
-
-# ─── Dashboard Visualization ─────────────────────────────────────────────────
-
-# Module border colors from the depgraph palette (used as the accent color).
-# These rotate by discovery-order index; the palette has 8 entries.
-_PALETTE_BORDER = [
-    "#1565c0",  # 0 — blue
-    "#c62828",  # 1 — red
-    "#e65100",  # 2 — orange
-    "#7b1fa2",  # 3 — purple
-    "#2e7d32",  # 4 — green
-    "#f9a825",  # 5 — yellow
-    "#00838f",  # 6 — teal
-    "#d84315",  # 7 — deep orange
-]
-
-# Module index assigned at analysis time (populated by generate_dashboard_html)
-_module_index: dict[str, int] = {}
-
-
-def get_module_color(module: str) -> str:
-    idx = _module_index.get(module)
-    if idx is not None:
-        return _PALETTE_BORDER[idx % len(_PALETTE_BORDER)]
-    return "#9e9e9e"
-
-
-def generate_dashboard(result: AnalysisResult, output_path: str) -> None:
-    """Generate spectral dashboard PNG (16x12, 150 DPI, dark theme)."""
-    import matplotlib
-    matplotlib.use("Agg")
-    import matplotlib.pyplot as plt
-    from matplotlib.gridspec import GridSpec
-
-    # Ensure module palette indices are populated
-    _module_index.clear()
-    for i, mod in enumerate(result.graph.modules):
-        _module_index[mod] = i
-
-    s = result.spectral
-    m = result.metrics
-    c = result.coupling
-
-    # Dark theme
-    plt.rcParams.update({
-        "figure.facecolor": "#1a1a2e",
-        "axes.facecolor": "#16213e",
-        "axes.edgecolor": "#e0e0e0",
-        "axes.labelcolor": "#e0e0e0",
-        "text.color": "#e0e0e0",
-        "xtick.color": "#e0e0e0",
-        "ytick.color": "#e0e0e0",
-        "grid.color": "#2a2a4a",
-        "grid.alpha": 0.5,
-    })
-
-    fig = plt.figure(figsize=(16, 12), dpi=150)
-    gs = GridSpec(2, 2, figure=fig, hspace=0.35, wspace=0.3,
-                  left=0.07, right=0.95, top=0.92, bottom=0.06)
-
-    fig.suptitle("Spectral Analysis Dashboard — Dependency DAG",
-                 fontsize=16, fontweight="bold", color="#e0e0e0")
-
-    p = result.structural
-
-    # ── Top-left: Structural properties ──
-    ax1 = fig.add_subplot(gs[0, 0])
-    ax1.axis("off")
-    ax1.set_title("Structural Properties", fontsize=12, fontweight="bold")
-    props = [
-        ("Edges/node (avg degree)", f"{p.avg_degree:.2f}"),
-        ("Max fan-in", f"{p.max_fan_in}  ({p.max_fan_in_node})"),
-        ("Max fan-out", f"{p.max_fan_out}  ({p.max_fan_out_node})"),
-        ("DAG depth", f"{p.dag_depth}"),
-        ("Clustering coefficient", f"{p.clustering_coeff:.4f}"),
-        ("Avg module size", f"{p.avg_module_size:.1f}"),
-        ("Avg module cohesion", f"{p.avg_module_cohesion:.3f}"),
-    ]
-    y = 0.88
-    for label, value in props:
-        ax1.text(0.05, y, label, transform=ax1.transAxes, fontsize=10,
-                 color="#aaa", fontfamily="monospace", va="top")
-        ax1.text(0.95, y, value, transform=ax1.transAxes, fontsize=10,
-                 fontweight="bold", color="#e0e0e0", fontfamily="monospace",
-                 va="top", ha="right")
-        y -= 0.12
-
-    # ── Top-right: Module cohesion ──
-    ax2 = fig.add_subplot(gs[0, 1])
-    cohesion_mods = [mod for mod in c.module_names
-                     if not math.isnan(p.module_cohesion.get(mod, float("nan")))]
-    if cohesion_mods:
-        cohesion_vals = [p.module_cohesion[mod] for mod in cohesion_mods]
-        bar_colors = [get_module_color(mod) for mod in cohesion_mods]
-        bars = ax2.barh(range(len(cohesion_mods)), cohesion_vals,
-                        color=bar_colors, edgecolor="none", height=0.6)
-        ax2.set_yticks(range(len(cohesion_mods)))
-        ax2.set_yticklabels(cohesion_mods, fontsize=9)
-        ax2.set_xlim(0, 1.05)
-        ax2.set_xlabel("Cohesion (intra-edges / max possible)")
-        ax2.axvline(x=p.avg_module_cohesion, color="#ff4444", linewidth=1.5,
-                    linestyle="--", alpha=0.7, label=f"avg = {p.avg_module_cohesion:.3f}")
-        ax2.legend(fontsize=9, loc="lower right",
-                   facecolor="#16213e", edgecolor="#444")
-        ax2.grid(True, axis="x", alpha=0.3)
-    else:
-        ax2.text(0.5, 0.5, "No modules with 2+ types",
-                 ha="center", va="center", fontsize=14, transform=ax2.transAxes)
-    ax2.set_title("Module Cohesion", fontsize=12, fontweight="bold")
-
-    # ── Bottom-left: Module coupling heatmap ──
-    ax3 = fig.add_subplot(gs[1, 0])
-    if len(c.module_names) > 0:
-        im = ax3.imshow(c.coupling_matrix, cmap="YlOrRd", aspect="auto")
-        ax3.set_xticks(range(len(c.module_names)))
-        ax3.set_xticklabels(c.module_names, rotation=45, ha="right", fontsize=8)
-        ax3.set_yticks(range(len(c.module_names)))
-        ax3.set_yticklabels(c.module_names, fontsize=8)
-        ax3.set_title("Module Coupling (directed edge counts)", fontsize=12,
-                       fontweight="bold")
-        ax3.set_xlabel("Target module")
-        ax3.set_ylabel("Source module")
-
-        # Annotate cells
-        for i in range(len(c.module_names)):
-            for j in range(len(c.module_names)):
-                val = int(c.coupling_matrix[i, j])
-                if val > 0:
-                    text_color = "white" if val > c.coupling_matrix.max() * 0.6 else "black"
-                    ax3.text(j, i, str(val), ha="center", va="center",
-                             fontsize=8, color=text_color, fontweight="bold")
-
-        plt.colorbar(im, ax=ax3, shrink=0.8)
-    else:
-        ax3.text(0.5, 0.5, "No modules", ha="center", va="center",
-                 fontsize=14, transform=ax3.transAxes)
-        ax3.set_title("Module Coupling", fontsize=12, fontweight="bold")
-
-    # ── Bottom-right: Metrics panel ──
-    ax4 = fig.add_subplot(gs[1, 1])
-    ax4.axis("off")
-
-    # CCI interpretation
-    if m.cci < 0.3:
-        cci_color = "#4caf50"
-        cci_label = "LOW"
-    elif m.cci < 0.6:
-        cci_color = "#ff9800"
-        cci_label = "MODERATE"
-    else:
-        cci_color = "#f44336"
-        cci_label = "HIGH"
-
-    text_lines = [
-        ("GRAPH", "", False),
-        (f"  Nodes: {m.n_nodes}   Edges: {m.n_edges}   "
-         f"Modules: {m.n_modules}   Components: {m.connected_components}", "", False),
-        ("", "", False),
-        ("SPECTRAL METRICS", "", False),
-        (f"  Algebraic connectivity (lambda_2):  {m.algebraic_connectivity:.4f}", "", False),
-        (f"  Normalized (lambda_2/n):            {m.normalized_algebraic_connectivity:.4f}", "", False),
-        (f"  Spectral entropy:                   {m.spectral_entropy:.4f}", "", False),
-        (f"  Normalized entropy:                 {m.normalized_spectral_entropy:.4f}", "", False),
-        (f"  Spectral radius:                    {m.spectral_radius:.4f}", "", False),
-        (f"  Normalized radius:                  {m.normalized_spectral_radius:.4f}", "", False),
-        ("", "", False),
-        ("COUPLING METRICS", "", False),
-        (f"  Edge density:                       {m.edge_density:.4f}", "", False),
-        (f"  Cross-module ratio:                 {m.cross_module_ratio:.1%}", "", False),
-        ("", "", False),
-        (f"  CCI = {m.cci:.4f}  [{cci_label}]", cci_color, True),
-    ]
-
-    y = 0.95
-    for text, color, bold in text_lines:
-        if not text:
-            y -= 0.04
-            continue
-        fontsize = 11 if bold else 9
-        weight = "bold" if bold else "normal"
-        c_val = color if color else "#e0e0e0"
-        ax4.text(0.05, y, text, transform=ax4.transAxes, fontsize=fontsize,
-                 fontweight=weight, color=c_val, fontfamily="monospace",
-                 verticalalignment="top")
-        y -= 0.055
-
-    ax4.set_title("Complexity Metrics", fontsize=12, fontweight="bold")
-
-    plt.savefig(output_path, dpi=150, facecolor=fig.get_facecolor(),
-                edgecolor="none", bbox_inches="tight")
-    plt.close(fig)
-
-
-# ─── Interactive HTML Dashboard ───────────────────────────────────────────────
-
-def generate_dashboard_html(
-    result: AnalysisResult, output_path: str, *, dot_source: str = ""
-) -> None:
-    """Generate an interactive HTML dashboard with GraphViz DAG + spectral panels."""
-    s = result.spectral
-    m = result.metrics
-    c = result.coupling
-
-    p = result.structural
-
-    # Prepare data as JSON for embedding
-    structural_data = {
-        "avg_degree": round(p.avg_degree, 2),
-        "max_fan_in": p.max_fan_in,
-        "max_fan_in_node": p.max_fan_in_node,
-        "max_fan_out": p.max_fan_out,
-        "max_fan_out_node": p.max_fan_out_node,
-        "dag_depth": p.dag_depth,
-        "clustering_coeff": round(p.clustering_coeff, 4),
-        "avg_module_cohesion": round(p.avg_module_cohesion, 3),
-        "avg_module_size": round(p.avg_module_size, 1),
-    }
-
-    cohesion_data = []
-    for mod in c.module_names:
-        coh = p.module_cohesion.get(mod, float("nan"))
-        if not math.isnan(coh):
-            cohesion_data.append({
-                "module": mod,
-                "cohesion": round(coh, 3),
-                "size": sum(1 for n in result.graph.nodes if n.module == mod),
-            })
-
-    coupling_data = {
-        "modules": c.module_names,
-        "matrix": c.coupling_matrix.tolist(),
-    }
-
-    # Module colors — populate index from discovery order so palette rotates
-    _module_index.clear()
-    for i, mod in enumerate(result.graph.modules):
-        _module_index[mod] = i
-    all_modules = list(dict.fromkeys(n.module for n in result.graph.nodes))
-    module_colors_json = {mod: get_module_color(mod) for mod in all_modules}
-
-    # CCI interpretation
-    if m.cci < 0.3:
-        cci_color = "#4caf50"
-        cci_label = "LOW"
-        cci_desc = "well-decomposed architecture"
-    elif m.cci < 0.6:
-        cci_color = "#ff9800"
-        cci_label = "MODERATE"
-        cci_desc = "typical well-structured codebase"
-    else:
-        cci_color = "#f44336"
-        cci_label = "HIGH"
-        cci_desc = "consider reviewing module boundaries"
-
-    metrics_json = {
-        "n_nodes": m.n_nodes,
-        "n_edges": m.n_edges,
-        "n_modules": m.n_modules,
-        "connected_components": m.connected_components,
-        "algebraic_connectivity": round(m.algebraic_connectivity, 4),
-        "normalized_algebraic_connectivity": round(m.normalized_algebraic_connectivity, 4),
-        "spectral_entropy": round(m.spectral_entropy, 4),
-        "normalized_spectral_entropy": round(m.normalized_spectral_entropy, 4),
-        "edge_density": round(m.edge_density, 4),
-        "cross_module_ratio": round(m.cross_module_ratio, 4),
-        "spectral_radius": round(m.spectral_radius, 4),
-        "normalized_spectral_radius": round(m.normalized_spectral_radius, 4),
-        "cci": round(m.cci, 4),
-        "cci_label": cci_label,
-        "cci_color": cci_color,
-        "cci_desc": cci_desc,
-    }
-
-    data_blob = json.dumps({
-        "structural": structural_data,
-        "cohesion": cohesion_data,
-        "coupling": coupling_data,
-        "metrics": metrics_json,
-        "module_colors": module_colors_json,
-    })
-
-    # Escape DOT source for embedding in a JS template literal
-    dot_escaped = (dot_source
-                   .replace("\\", "\\\\")
-                   .replace("`", "\\`")
-                   .replace("${", "\\${"))
-
-    html = _DASHBOARD_HTML_TEMPLATE.replace("__DATA_BLOB__", data_blob)
-    html = html.replace("__DOT_BLOB__", dot_escaped)
-
-    with open(output_path, "w") as f:
-        f.write(html)
-
-
-_DASHBOARD_HTML_TEMPLATE = r"""<!DOCTYPE html>
-<html><head>
-<meta charset="utf-8">
-<title>swactor — dependency analysis</title>
-<style>
-* { margin:0; padding:0; box-sizing:border-box; }
-body { background:#1a1a2e; color:#e0e0e0; font-family:system-ui,-apple-system,sans-serif; overflow:hidden; }
-
-/* ─── Tab bar ───────────────────────────────────────────────────────────── */
-.tab-bar { display:flex; align-items:center; height:42px; background:#12122a;
-           border-bottom:1px solid #2a2a5a; padding:0 16px; gap:8px; }
-.tab-bar .title { font-size:14px; font-weight:700; letter-spacing:0.5px; margin-right:18px;
-                  color:#8ab4f8; white-space:nowrap; }
-.tab { background:none; border:none; color:#888; font-size:13px; padding:8px 16px;
-       cursor:pointer; border-bottom:2px solid transparent; transition:color 0.15s; }
-.tab:hover { color:#ccc; }
-.tab.active { color:#e0e0e0; border-bottom-color:#4fc3f7; }
-
-/* ─── Tab content ───────────────────────────────────────────────────────── */
-.tab-content { display:none; }
-.tab-content.active { display:block; }
-
-/* ─── DAG tab ───────────────────────────────────────────────────────────── */
-#tab-dag { height:calc(100vh - 42px); overflow:hidden; position:relative; }
-#dag-viewport { width:100%; height:100%; cursor:grab; }
-#dag-viewport:active { cursor:grabbing; }
-#dag-viewport svg { display:block; }
-#dag-controls { position:absolute; top:12px; left:12px; z-index:10;
-                background:rgba(30,30,60,0.9); border-radius:8px; padding:10px 14px;
-                color:#ccc; font-size:13px; backdrop-filter:blur(8px); }
-#dag-controls button { background:#333; color:#fff; border:1px solid #555;
-                       border-radius:4px; padding:4px 10px; cursor:pointer; margin:0 3px; }
-#dag-controls button:hover { background:#555; }
-#dag-loading { position:absolute; top:50%; left:50%; transform:translate(-50%,-50%);
-               color:#ccc; font-size:18px; }
-
-/* ─── Spectral tab ──────────────────────────────────────────────────────── */
-#tab-spectral { overflow-y:auto; max-height:calc(100vh - 42px); }
-
-.grid { display:grid; grid-template-columns:1fr 1fr; grid-template-rows:auto auto;
-        gap:16px; padding:16px 20px 20px; max-width:1600px; margin:0 auto; }
-
-.panel { background:#16213e; border-radius:10px; border:1px solid #2a2a5a;
-         padding:16px; position:relative; min-height:100px; }
-.panel h2 { font-size:14px; font-weight:600; margin-bottom:10px; color:#8ab4f8;
-            display:flex; align-items:center; gap:8px; }
-.panel h2 .icon { font-size:16px; }
-.panel svg { width:100%; display:block; }
-
-.tooltip { position:fixed; background:rgba(22,33,62,0.96); border:1px solid #4fc3f7;
-           border-radius:6px; padding:8px 12px; font-size:12px; pointer-events:none;
-           z-index:100; backdrop-filter:blur(8px); max-width:300px;
-           box-shadow:0 4px 20px rgba(0,0,0,0.4); display:none; }
-.tooltip .tt-label { font-weight:600; color:#4fc3f7; }
-.tooltip .tt-val { color:#e0e0e0; }
-
-svg text { user-select:none; }
-
-/* Metrics panel */
-.metrics-grid { display:grid; grid-template-columns:1fr 1fr; gap:8px 20px; }
-.metric-item { display:flex; justify-content:space-between; font-size:12px;
-               padding:4px 8px; border-radius:4px; }
-.metric-item:hover { background:rgba(79,195,247,0.08); }
-.metric-label { opacity:0.7; }
-.metric-value { font-weight:600; font-family:'SF Mono',monospace; }
-.cci-box { grid-column:1/-1; text-align:center; margin-top:10px; padding:14px;
-           border-radius:8px; background:rgba(0,0,0,0.25); border:1px solid #333; }
-.cci-score { font-size:32px; font-weight:700; }
-.cci-label { font-size:14px; margin-top:2px; }
-.cci-desc { font-size:11px; opacity:0.6; margin-top:4px; }
-
-.sub-header { font-size:11px; font-weight:600; text-transform:uppercase;
-              letter-spacing:1px; opacity:0.4; margin:8px 0 4px; grid-column:1/-1; }
-
-/* Heatmap */
-.hm-cell { cursor:pointer; transition:opacity 0.15s; }
-.hm-cell:hover { opacity:0.8; stroke:#4fc3f7; stroke-width:2; }
-
-/* Cohesion / heatmap bars */
-.fi-bar { cursor:pointer; transition:opacity 0.15s; }
-.fi-bar:hover { opacity:0.85; }
-</style>
-</head>
-<body>
-
-<div class="tab-bar">
-  <div class="title">swactor &mdash; dependency analysis</div>
-  <button class="tab active" data-tab="spectral">Spectral Analysis</button>
-  <button class="tab" data-tab="dag">Dependency DAG</button>
-</div>
-
-<div class="tab-content" id="tab-dag">
-  <div id="dag-controls">
-    <button onclick="zoomIn()">+</button>
-    <button onclick="zoomOut()">&minus;</button>
-    <button onclick="resetView()">fit</button>
-    <span style="margin-left:8px;opacity:0.6">scroll to zoom &middot; drag to pan &middot; click node to focus</span>
-  </div>
-  <div id="dag-viewport"></div>
-  <div id="dag-loading">Loading Graphviz&hellip;</div>
-</div>
-
-<div class="tab-content active" id="tab-spectral">
-  <div class="grid">
-    <div class="panel" id="panel-structural">
-      <h2><span class="icon">&#x25C9;</span> Structural Properties</h2>
-      <div id="structural-content"></div>
-    </div>
-
-    <div class="panel" id="panel-cohesion">
-      <h2><span class="icon">&#x25A8;</span> Module Cohesion</h2>
-      <svg id="svg-cohesion"></svg>
-    </div>
-
-    <div class="panel" id="panel-heatmap">
-      <h2><span class="icon">&#x25A6;</span> Module Coupling (directed edge counts)</h2>
-      <svg id="svg-heatmap"></svg>
-    </div>
-
-    <div class="panel" id="panel-metrics">
-      <h2><span class="icon">&#x2211;</span> Complexity Metrics</h2>
-      <div id="metrics-content"></div>
-    </div>
-  </div>
-</div>
-
-<div class="tooltip" id="tooltip"></div>
-
-<!-- ─── Script 1: synchronous — data + tab switching + spectral panels ─── -->
-<script>
-// ─── Data ──────────────────────────────────────────────────────────────────
-const DATA = __DATA_BLOB__;
-const { structural, cohesion, coupling, metrics, module_colors } = DATA;
-
-// ─── Tab switching ─────────────────────────────────────────────────────────
-document.querySelectorAll('.tab').forEach(btn => {
-  btn.addEventListener('click', () => {
-    document.querySelectorAll('.tab').forEach(b => b.classList.remove('active'));
-    document.querySelectorAll('.tab-content').forEach(c => c.classList.remove('active'));
-    btn.classList.add('active');
-    document.getElementById('tab-' + btn.dataset.tab).classList.add('active');
-    if (btn.dataset.tab === 'dag') {
-      window.dispatchEvent(new Event('dag-visible'));
-    }
-  });
-});
-
-// ─── Tooltip ───────────────────────────────────────────────────────────────
-const TT = document.getElementById('tooltip');
-function showTip(evt, html) {
-  TT.innerHTML = html;
-  TT.style.display = 'block';
-  const x = evt.clientX + 14, y = evt.clientY - 10;
-  TT.style.left = Math.min(x, window.innerWidth - TT.offsetWidth - 20) + 'px';
-  TT.style.top = Math.min(y, window.innerHeight - TT.offsetHeight - 20) + 'px';
-}
-function hideTip() { TT.style.display = 'none'; }
-
-function modColor(mod) { return module_colors[mod] || '#9e9e9e'; }
-
-// ─── Structural Properties ────────────────────────────────────────────────
-(function() {
-  const c = document.getElementById('structural-content');
-  const s = structural;
-  c.innerHTML = `
-    <div class="metrics-grid">
-      <div class="sub-header">Density &amp; Depth</div>
-      <div class="metric-item"><span class="metric-label">Edges/node (avg degree)</span><span class="metric-value">${s.avg_degree}</span></div>
-      <div class="metric-item"><span class="metric-label">DAG depth</span><span class="metric-value">${s.dag_depth}</span></div>
-      <div class="metric-item"><span class="metric-label">Clustering coefficient</span><span class="metric-value">${s.clustering_coeff}</span></div>
-      <div class="metric-item"><span class="metric-label">Avg module size</span><span class="metric-value">${s.avg_module_size}</span></div>
-
-      <div class="sub-header">Dependency Hotspots</div>
-      <div class="metric-item"><span class="metric-label">Max fan-in</span><span class="metric-value">${s.max_fan_in} &larr; ${s.max_fan_in_node}</span></div>
-      <div class="metric-item"><span class="metric-label">Max fan-out</span><span class="metric-value">${s.max_fan_out} &rarr; ${s.max_fan_out_node}</span></div>
-
-      <div class="sub-header">Cohesion</div>
-      <div class="metric-item"><span class="metric-label">Avg module cohesion</span><span class="metric-value">${s.avg_module_cohesion}</span></div>
-      <div class="metric-item"><span class="metric-label">Cross-module ratio</span><span class="metric-value">${(metrics.cross_module_ratio*100).toFixed(1)}%</span></div>
-    </div>
-  `;
-})();
-
-// ─── Module Cohesion ──────────────────────────────────────────────────────
-(function() {
-  const svg = document.getElementById('svg-cohesion');
-  const n = cohesion.length;
-  if (n === 0) return;
-  const barH = Math.max(20, Math.min(36, 300/n));
-  const W = 560, H = Math.max(200, n*barH + 60), M = {t:10,r:30,b:30,l:120};
-  const w = W-M.l-M.r, h = H-M.t-M.b;
-  svg.setAttribute('viewBox', `0 0 ${W} ${H}`);
-
-  const xScale = v => M.l + v * w;
-  const yScale = i => M.t + (i/n) * h + barH/2;
-
-  // Background grid
-  for (const tick of [0.25, 0.5, 0.75, 1.0]) {
-    const x = xScale(tick);
-    const line = document.createElementNS('http://www.w3.org/2000/svg','line');
-    Object.entries({x1:x,x2:x,y1:M.t,y2:M.t+h,stroke:'#2a2a5a','stroke-width':0.5}).forEach(([k,v])=>line.setAttribute(k,v));
-    svg.appendChild(line);
-    const txt = document.createElementNS('http://www.w3.org/2000/svg','text');
-    txt.setAttribute('x', x); txt.setAttribute('y', H-8);
-    txt.setAttribute('text-anchor','middle'); txt.setAttribute('fill','#666'); txt.setAttribute('font-size','10');
-    txt.textContent = (tick*100).toFixed(0) + '%';
-    svg.appendChild(txt);
-  }
-
-  // Average line
-  const avgX = xScale(structural.avg_module_cohesion);
-  const avgLine = document.createElementNS('http://www.w3.org/2000/svg','line');
-  Object.entries({x1:avgX,x2:avgX,y1:M.t,y2:M.t+h,stroke:'#ff4444','stroke-width':1.5,'stroke-dasharray':'5,3','stroke-opacity':0.7}).forEach(([k,v])=>avgLine.setAttribute(k,v));
-  svg.appendChild(avgLine);
-  const avgLbl = document.createElementNS('http://www.w3.org/2000/svg','text');
-  avgLbl.setAttribute('x', avgX+4); avgLbl.setAttribute('y', M.t+10);
-  avgLbl.setAttribute('fill','#ff4444'); avgLbl.setAttribute('font-size','9'); avgLbl.setAttribute('opacity','0.8');
-  avgLbl.textContent = 'avg';
-  svg.appendChild(avgLbl);
-
-  cohesion.forEach((d, i) => {
-    const barW = Math.max(d.cohesion * w, 2);
-    const y = yScale(i) - barH*0.35;
-    const rect = document.createElementNS('http://www.w3.org/2000/svg','rect');
-    rect.setAttribute('x', M.l); rect.setAttribute('y', y);
-    rect.setAttribute('width', barW); rect.setAttribute('height', barH*0.7);
-    rect.setAttribute('rx', 3);
-    rect.setAttribute('fill', modColor(d.module));
-    rect.setAttribute('opacity', 0.85);
-    rect.classList.add('fi-bar');
-    rect.addEventListener('mousemove', e => showTip(e,
-      `<span class="tt-label">${d.module}</span><br>` +
-      `Types: <span class="tt-val">${d.size}</span><br>` +
-      `Cohesion: <span class="tt-val">${(d.cohesion*100).toFixed(1)}%</span>`
-    ));
-    rect.addEventListener('mouseleave', hideTip);
-    svg.appendChild(rect);
-
-    // Value label on bar
-    const valTxt = document.createElementNS('http://www.w3.org/2000/svg','text');
-    valTxt.setAttribute('x', M.l + barW + 6); valTxt.setAttribute('y', yScale(i)+4);
-    valTxt.setAttribute('fill','#ccc'); valTxt.setAttribute('font-size','10'); valTxt.setAttribute('font-weight','600');
-    valTxt.textContent = (d.cohesion*100).toFixed(0) + '%';
-    svg.appendChild(valTxt);
-
-    // Module label
-    const txt = document.createElementNS('http://www.w3.org/2000/svg','text');
-    txt.setAttribute('x', M.l-8); txt.setAttribute('y', yScale(i)+4);
-    txt.setAttribute('text-anchor','end'); txt.setAttribute('fill', modColor(d.module));
-    txt.setAttribute('font-size','11'); txt.setAttribute('font-weight','600');
-    txt.textContent = `${d.module} (${d.size})`;
-    svg.appendChild(txt);
-  });
-})();
-
-// ─── Module Coupling Heatmap ───────────────────────────────────────────────
-(function() {
-  const mods = coupling.modules;
-  const mat = coupling.matrix;
-  const n = mods.length;
-  const svg = document.getElementById('svg-heatmap');
-  const cellSz = Math.min(55, 400/n);
-  const M = {t:10,r:60,b:80,l:100};
-  const W = M.l + n*cellSz + M.r, H = M.t + n*cellSz + M.b;
-  svg.setAttribute('viewBox', `0 0 ${W} ${H}`);
-
-  const maxVal = Math.max(...mat.flat(), 1);
-
-  // Color scale: 0=transparent dark, max=deep red
-  function heatColor(v) {
-    if (v === 0) return '#1a1a2e';
-    const t = v / maxVal;
-    const r = Math.round(40 + 215*t);
-    const g = Math.round(30 + 40*(1-t));
-    const b = Math.round(50*(1-t));
-    return `rgb(${r},${g},${b})`;
-  }
-
-  for (let i = 0; i < n; i++) {
-    // Row labels
-    const rl = document.createElementNS('http://www.w3.org/2000/svg','text');
-    rl.setAttribute('x', M.l-8); rl.setAttribute('y', M.t + i*cellSz + cellSz/2 + 4);
-    rl.setAttribute('text-anchor','end'); rl.setAttribute('fill', modColor(mods[i]));
-    rl.setAttribute('font-size','11'); rl.setAttribute('font-weight','600');
-    rl.textContent = mods[i];
-    svg.appendChild(rl);
-
-    // Column labels
-    const cl = document.createElementNS('http://www.w3.org/2000/svg','text');
-    cl.setAttribute('x', M.l + i*cellSz + cellSz/2);
-    cl.setAttribute('y', M.t + n*cellSz + 16);
-    cl.setAttribute('text-anchor','end'); cl.setAttribute('fill', modColor(mods[i]));
-    cl.setAttribute('font-size','11'); cl.setAttribute('font-weight','600');
-    cl.setAttribute('transform', `rotate(-45, ${M.l + i*cellSz + cellSz/2}, ${M.t + n*cellSz + 16})`);
-    cl.textContent = mods[i];
-    svg.appendChild(cl);
-
-    for (let j = 0; j < n; j++) {
-      const v = mat[i][j];
-      const rect = document.createElementNS('http://www.w3.org/2000/svg','rect');
-      rect.setAttribute('x', M.l + j*cellSz + 1);
-      rect.setAttribute('y', M.t + i*cellSz + 1);
-      rect.setAttribute('width', cellSz-2); rect.setAttribute('height', cellSz-2);
-      rect.setAttribute('rx', 3);
-      rect.setAttribute('fill', heatColor(v));
-      rect.classList.add('hm-cell');
-      rect.addEventListener('mousemove', e => showTip(e,
-        `<span class="tt-label">${mods[i]} &rarr; ${mods[j]}</span><br>` +
-        `Edges: <span class="tt-val">${v}</span>` +
-        (i !== j ? '<br><span style="opacity:0.6">cross-module</span>' : '<br><span style="opacity:0.6">intra-module</span>')
-      ));
-      rect.addEventListener('mouseleave', hideTip);
-      svg.appendChild(rect);
-
-      // Cell text
-      if (v > 0) {
-        const txt = document.createElementNS('http://www.w3.org/2000/svg','text');
-        txt.setAttribute('x', M.l + j*cellSz + cellSz/2);
-        txt.setAttribute('y', M.t + i*cellSz + cellSz/2 + 4);
-        txt.setAttribute('text-anchor','middle'); txt.setAttribute('font-size','11');
-        txt.setAttribute('font-weight','700'); txt.setAttribute('pointer-events','none');
-        txt.setAttribute('fill', v > maxVal*0.5 ? '#fff' : '#ccc');
-        txt.textContent = v;
-        svg.appendChild(txt);
-      }
-    }
-  }
-
-  // Axis labels
-  const srcL = document.createElementNS('http://www.w3.org/2000/svg','text');
-  srcL.setAttribute('x', 10); srcL.setAttribute('y', M.t + n*cellSz/2);
-  srcL.setAttribute('text-anchor','middle'); srcL.setAttribute('fill','#666');
-  srcL.setAttribute('font-size','10');
-  srcL.setAttribute('transform', `rotate(-90,10,${M.t + n*cellSz/2})`);
-  srcL.textContent = 'source module';
-  svg.appendChild(srcL);
-})();
-
-// ─── Metrics Panel ─────────────────────────────────────────────────────────
-(function() {
-  const c = document.getElementById('metrics-content');
-  const mm = metrics;
-  c.innerHTML = `
-    <div class="metrics-grid">
-      <div class="sub-header">Graph</div>
-      <div class="metric-item"><span class="metric-label">Nodes</span><span class="metric-value">${mm.n_nodes}</span></div>
-      <div class="metric-item"><span class="metric-label">Directed edges</span><span class="metric-value">${mm.n_edges}</span></div>
-      <div class="metric-item"><span class="metric-label">Modules</span><span class="metric-value">${mm.n_modules}</span></div>
-      <div class="metric-item"><span class="metric-label">Components</span><span class="metric-value">${mm.connected_components}</span></div>
-
-      <div class="sub-header">Spectral</div>
-      <div class="metric-item"><span class="metric-label">&lambda;<sub>2</sub> (alg. connectivity)</span><span class="metric-value">${mm.algebraic_connectivity}</span></div>
-      <div class="metric-item"><span class="metric-label">&lambda;<sub>2</sub>/n (normalized)</span><span class="metric-value">${mm.normalized_algebraic_connectivity}</span></div>
-      <div class="metric-item"><span class="metric-label">Spectral entropy</span><span class="metric-value">${mm.spectral_entropy}</span></div>
-      <div class="metric-item"><span class="metric-label">Norm. entropy</span><span class="metric-value">${mm.normalized_spectral_entropy}</span></div>
-      <div class="metric-item"><span class="metric-label">Spectral radius</span><span class="metric-value">${mm.spectral_radius}</span></div>
-      <div class="metric-item"><span class="metric-label">Norm. radius</span><span class="metric-value">${mm.normalized_spectral_radius}</span></div>
-
-      <div class="sub-header">Coupling</div>
-      <div class="metric-item"><span class="metric-label">Edge density</span><span class="metric-value">${mm.edge_density}</span></div>
-      <div class="metric-item"><span class="metric-label">Cross-module ratio</span><span class="metric-value">${(mm.cross_module_ratio*100).toFixed(1)}%</span></div>
-
-      <div class="cci-box">
-        <div class="cci-score" style="color:${mm.cci_color}">CCI = ${mm.cci}</div>
-        <div class="cci-label" style="color:${mm.cci_color}">${mm.cci_label}</div>
-        <div class="cci-desc">${mm.cci_desc}</div>
-      </div>
-    </div>
-  `;
-})();
-</script>
-
-<!-- ─── Script 2: module — viz-js DAG rendering (async) ─────────────────── -->
-<script type="module">
-import { instance } from 'https://cdn.jsdelivr.net/npm/@viz-js/viz@3.11.0/lib/viz-standalone.mjs';
-
-const DOT_SOURCE = `__DOT_BLOB__`;
-
-const viz = await instance();
-const svg = viz.renderSVGElement(DOT_SOURCE);
-document.getElementById('dag-loading').remove();
-
-const vp = document.getElementById('dag-viewport');
-vp.appendChild(svg);
-
-// ─── Dark-mode SVG recoloring ──────────────────────────────────────────────
-svg.querySelectorAll('polygon[fill="white"]').forEach(el => el.setAttribute('fill','#1a1a2e'));
-svg.querySelectorAll('.graph > text').forEach(el => el.setAttribute('fill','#e0e0e0'));
-svg.querySelectorAll('.cluster > text').forEach(el => el.setAttribute('fill','#1a1a1a'));
-svg.querySelectorAll('.edge text').forEach(el => el.setAttribute('fill','#ffb74d'));
-svg.querySelectorAll('.node text').forEach(el => el.setAttribute('fill','#1a1a1a'));
-
-// ─── Click-to-focus ────────────────────────────────────────────────────────
-const edges = svg.querySelectorAll('.edge');
-const nodes = svg.querySelectorAll('.node');
-const clusterChrome = [];
-svg.querySelectorAll('.cluster').forEach(c => {
-  c.querySelectorAll(':scope > path, :scope > polygon, :scope > text').forEach(el => clusterChrome.push(el));
-});
-
-const nodeByTitle = new Map();
-nodes.forEach(n => {
-  const t = n.querySelector('title');
-  if (t) nodeByTitle.set(t.textContent.trim(), n);
-});
-
-const nodeToClusterEls = new Map();
-svg.querySelectorAll('.cluster').forEach(cluster => {
-  const chrome = [...cluster.querySelectorAll(':scope > path, :scope > polygon, :scope > text')];
-  cluster.querySelectorAll('.node title').forEach(t => {
-    nodeToClusterEls.set(t.textContent.trim(), chrome);
-  });
-});
-
-const adj = new Map();
-edges.forEach(edge => {
-  const t = edge.querySelector('title');
-  if (!t) return;
-  const parts = t.textContent.trim().split('->').map(s => s.trim());
-  if (parts.length !== 2) return;
-  const [src, dst] = parts;
-  if (!adj.has(src)) adj.set(src, { edges: [], neighbors: new Set() });
-  if (!adj.has(dst)) adj.set(dst, { edges: [], neighbors: new Set() });
-  adj.get(src).edges.push(edge);
-  adj.get(src).neighbors.add(dst);
-  adj.get(dst).edges.push(edge);
-  adj.get(dst).neighbors.add(src);
-});
-
-const DIM = 0.08;
-let focused = null;
-
-function clearFocus() {
-  focused = null;
-  nodes.forEach(n => n.style.opacity = '');
-  edges.forEach(e => e.style.opacity = '');
-  clusterChrome.forEach(el => el.style.opacity = '');
-}
-
-function focusNode(title) {
-  if (focused === title) { clearFocus(); return; }
-  focused = title;
-  const info = adj.get(title) || { edges: [], neighbors: new Set() };
-  const connected = new Set([title, ...info.neighbors]);
-
-  nodes.forEach(n => n.style.opacity = DIM);
-  edges.forEach(e => e.style.opacity = DIM);
-  clusterChrome.forEach(el => el.style.opacity = DIM);
-
-  connected.forEach(name => {
-    const el = nodeByTitle.get(name);
-    if (el) el.style.opacity = 1;
-  });
-
-  info.edges.forEach(e => e.style.opacity = 1);
-
-  const seen = new Set();
-  connected.forEach(name => {
-    const chrome = nodeToClusterEls.get(name);
-    if (chrome) chrome.forEach(el => {
-      if (!seen.has(el)) { seen.add(el); el.style.opacity = 1; }
-    });
-  });
-}
-
-nodes.forEach(node => {
-  node.style.cursor = 'pointer';
-  node.addEventListener('click', e => {
-    e.stopPropagation();
-    const t = node.querySelector('title');
-    if (t) focusNode(t.textContent.trim());
-  });
-});
-
-// ─── Pan & zoom ────────────────────────────────────────────────────────────
-let scale = 1, tx = 0, ty = 0, dragging = false, didDrag = false, sx = 0, sy = 0;
-function applyTransform() { svg.style.transform = `translate(${tx}px,${ty}px) scale(${scale})`; svg.style.transformOrigin = '0 0'; }
-
-window.resetView = function() {
-  const vw = vp.clientWidth, vh = vp.clientHeight;
-  const bb = svg.getBBox();
-  scale = Math.min(vw / bb.width, vh / bb.height) * 0.92;
-  tx = (vw - bb.width * scale) / 2;
-  ty = (vh - bb.height * scale) / 2;
-  applyTransform();
-};
-let dagFitted = false;
-window.addEventListener('dag-visible', () => {
-  if (!dagFitted) { dagFitted = true; requestAnimationFrame(resetView); }
-});
-
-window.zoomIn = function() { scale *= 1.3; applyTransform(); };
-window.zoomOut = function() { scale *= 0.7; applyTransform(); };
-
-vp.addEventListener('wheel', e => { e.preventDefault(); const f = e.deltaY < 0 ? 1.12 : 0.89; const rect = vp.getBoundingClientRect(); const mx = e.clientX - rect.left; const my = e.clientY - rect.top; tx = mx - f * (mx - tx); ty = my - f * (my - ty); scale *= f; applyTransform(); }, { passive:false });
-vp.addEventListener('pointerdown', e => { dragging=true; didDrag=false; sx=e.clientX-tx; sy=e.clientY-ty; vp.setPointerCapture(e.pointerId); });
-vp.addEventListener('pointermove', e => { if(!dragging) return; didDrag=true; tx=e.clientX-sx; ty=e.clientY-sy; applyTransform(); });
-vp.addEventListener('pointerup', () => dragging=false);
-vp.addEventListener('click', e => { if (!didDrag && !e.target.closest('.node')) clearFocus(); });
-</script>
-</body></html>
-"""
-
-
-# ─── JSON Output ──────────────────────────────────────────────────────────────
-
-def metrics_to_dict(result: AnalysisResult) -> dict[str, Any]:
-    """Convert analysis results to a JSON-serializable dict."""
-    m = result.metrics
-    c = result.coupling
-    p = result.structural
-
-    return {
-        "graph": {
-            "n_nodes": m.n_nodes,
-            "n_edges": m.n_edges,
-            "n_modules": m.n_modules,
-            "connected_components": m.connected_components,
-            "modules": c.module_names,
-        },
-        "structural": {
-            "avg_degree": p.avg_degree,
-            "max_fan_in": {"count": p.max_fan_in, "node": p.max_fan_in_node},
-            "max_fan_out": {"count": p.max_fan_out, "node": p.max_fan_out_node},
-            "dag_depth": p.dag_depth,
-            "clustering_coefficient": p.clustering_coeff,
-            "avg_module_size": p.avg_module_size,
-        },
-        "module_coupling": {
-            "module_names": c.module_names,
-            "coupling_matrix": c.coupling_matrix.tolist(),
-            "cross_module_edges": c.cross_module_edges,
-            "total_edges": c.total_edges,
-        },
-        "module_cohesion": {
-            mod: None if math.isnan(v) else v
-            for mod, v in p.module_cohesion.items()
-        },
-        "metrics": {
-            "algebraic_connectivity": m.algebraic_connectivity,
-            "spectral_entropy": m.spectral_entropy,
-            "edge_density": m.edge_density,
-            "cross_module_ratio": m.cross_module_ratio,
-            "spectral_radius": m.spectral_radius,
-            "avg_module_cohesion": p.avg_module_cohesion,
-            "cci": m.cci,
-        },
-    }
-
-
-# ─── CLI ──────────────────────────────────────────────────────────────────────
-
-def main() -> None:
-    parser = argparse.ArgumentParser(
-        description="Spectral analysis of dependency DAGs"
-    )
-    parser.add_argument("dot_file", help="Path to DOT file (from depgraph)")
-    parser.add_argument("-o", "--output-dir", default="docs/connectome",
-                        help="Output directory (default: docs/connectome)")
-    parser.add_argument("--no-plots", action="store_true",
-                        help="Text report only (no matplotlib dependency)")
-    parser.add_argument("--json", action="store_true",
-                        help="Also output spectral_metrics.json")
-    args = parser.parse_args()
-
-    # Read and parse DOT
-    dot_text = open(args.dot_file).read()
-    graph = parse_dot(dot_text)
-    print(f"Parsed {len(graph.nodes)} nodes, {len(graph.edges)} edges, "
-          f"{len(graph.modules)} modules")
-
-    # Run analysis
-    result = run_analysis(graph)
-
-    # Ensure output directory exists
-    os.makedirs(args.output_dir, exist_ok=True)
-
-    # Generate report
-    report = generate_report(result)
-    print(report)
-    report_path = os.path.join(args.output_dir, "connectome_report.txt")
-    with open(report_path, "w") as f:
-        f.write(report)
-    print(f"\nReport saved to {report_path}")
-
-    # Generate interactive HTML dashboard
-    html_path = os.path.join(args.output_dir, "connectome_dashboard.html")
-    generate_dashboard_html(result, html_path, dot_source=dot_text)
-    print(f"Interactive dashboard saved to {html_path}")
-
-    # Generate static PNG dashboard
-    if not args.no_plots:
-        dashboard_path = os.path.join(args.output_dir, "connectome_dashboard.png")
-        generate_dashboard(result, dashboard_path)
-        print(f"Static dashboard saved to {dashboard_path}")
-
-    # Generate JSON
-    if args.json:
-        json_path = os.path.join(args.output_dir, "connectome_metrics.json")
-        with open(json_path, "w") as f:
-            json.dump(metrics_to_dict(result), f, indent=2)
-        print(f"JSON saved to {json_path}")
-
-
-if __name__ == "__main__":
-    main()
diff --git a/tools/spectral/test_spectral.py b/tools/spectral/test_spectral.py
deleted file mode 100644
index b3c8c99..0000000
--- a/tools/spectral/test_spectral.py
+++ /dev/null
@@ -1,728 +0,0 @@
-#!/usr/bin/env python3
-"""Comprehensive tests for the spectral analysis tool."""
-
-from __future__ import annotations
-
-import copy
-import json
-import math
-import os
-import random
-import tempfile
-import unittest
-
-import numpy as np
-
-from spectral_analysis import (
-    AnalysisResult,
-    ComplexityMetrics,
-    DependencyGraph,
-    Edge,
-    ModuleCouplingResult,
-    Node,
-    SpectralResults,
-    build_adjacency,
-    build_laplacian,
-    compute_complexity_metrics,
-    compute_module_coupling,
-    compute_spectral,
-    compute_spectral_entropy,
-    count_connected_components,
-    generate_report,
-    get_node_ordering,
-    metrics_to_dict,
-    parse_dot,
-    run_analysis,
-    symmetrize,
-)
-
-
-# ─── Helpers ──────────────────────────────────────────────────────────────────
-
-def _make_graph(
-    names: list[str],
-    modules: list[str],
-    edge_pairs: list[tuple[str, str]],
-    module_order: list[str] | None = None,
-) -> DependencyGraph:
-    """Build a DependencyGraph from names, module assignments, and edges."""
-    assert len(names) == len(modules)
-    graph = DependencyGraph()
-    seen_modules: list[str] = []
-    for name, mod in zip(names, modules):
-        graph.nodes.append(Node(name=name, module=mod))
-        graph.node_to_module[name] = mod
-        if mod not in seen_modules:
-            seen_modules.append(mod)
-    if module_order is not None:
-        graph.modules = module_order
-    else:
-        graph.modules = seen_modules
-    for src, tgt in edge_pairs:
-        src_mod = graph.node_to_module.get(src, "")
-        tgt_mod = graph.node_to_module.get(tgt, "")
-        cross = src_mod != tgt_mod
-        graph.edges.append(Edge(
-            source=src, target=tgt, label="dep",
-            edge_type="field", cross_module=cross,
-        ))
-    return graph
-
-
-# ─── DOT Parser Tests ─────────────────────────────────────────────────────────
-
-class TestDotParser(unittest.TestCase):
-    def test_minimal_dot(self):
-        dot = '''digraph test {
-    subgraph cluster_mod1 {
-        label="mod1";
-        A [label="A", fillcolor="#fff"];
-    }
-    A -> A [label="self", style=dashed, color="#666", penwidth=1];
-}'''
-        g = parse_dot(dot)
-        self.assertEqual(len(g.nodes), 1)
-        self.assertEqual(g.nodes[0].name, "A")
-        self.assertEqual(g.nodes[0].module, "mod1")
-        self.assertEqual(len(g.edges), 1)
-
-    def test_two_module_dot(self):
-        dot = '''digraph test {
-    subgraph cluster_alpha {
-        label="alpha";
-        X [label="X"];
-        Y [label="Y"];
-    }
-    subgraph cluster_beta {
-        label="beta";
-        Z [label="Z"];
-    }
-    X -> Y [label="dep", style=dashed, color="#666", penwidth=1];
-    X -> Z [label="dep", style=solid, color="#00f", penwidth=1.5];
-}'''
-        g = parse_dot(dot)
-        self.assertEqual(len(g.nodes), 3)
-        self.assertEqual(len(g.modules), 2)
-        self.assertEqual(g.modules, ["alpha", "beta"])
-        self.assertEqual(g.node_to_module["X"], "alpha")
-        self.assertEqual(g.node_to_module["Z"], "beta")
-
-        # Edge classification
-        intra = [e for e in g.edges if not e.cross_module]
-        cross = [e for e in g.edges if e.cross_module]
-        self.assertEqual(len(intra), 1)
-        self.assertEqual(len(cross), 1)
-
-    def test_trait_impl_classification(self):
-        dot = '''digraph test {
-    subgraph cluster_m {
-        label="m";
-        A [label="A"];
-        B [label="B"];
-    }
-    A -> B [label="impl", style=dotted, color="#666", penwidth=1];
-}'''
-        g = parse_dot(dot)
-        self.assertEqual(g.edges[0].edge_type, "trait_impl")
-
-    def test_real_deps_dot(self):
-        """Parse the real deps.dot and verify expected counts."""
-        dot_path = os.path.join(os.path.dirname(__file__), "..", "..", "deps.dot")
-        if not os.path.exists(dot_path):
-            self.skipTest("deps.dot not found")
-        with open(dot_path) as f:
-            dot = f.read()
-        g = parse_dot(dot)
-        self.assertEqual(len(g.nodes), 36, f"Expected 36 nodes, got {len(g.nodes)}")
-        self.assertEqual(len(g.edges), 89, f"Expected 89 edges, got {len(g.edges)}")
-        self.assertEqual(len(g.modules), 8, f"Expected 8 modules, got {len(g.modules)}")
-
-    def test_empty_dot(self):
-        dot = "digraph empty {}"
-        g = parse_dot(dot)
-        self.assertEqual(len(g.nodes), 0)
-        self.assertEqual(len(g.edges), 0)
-
-
-# ─── Matrix Construction Tests ────────────────────────────────────────────────
-
-class TestMatrixConstruction(unittest.TestCase):
-    def test_two_node_adjacency(self):
-        g = _make_graph(["A", "B"], ["m", "m"], [("A", "B")])
-        order = get_node_ordering(g)
-        A = build_adjacency(g, order)
-        self.assertEqual(A.shape, (2, 2))
-        idx_a = order.index("A")
-        idx_b = order.index("B")
-        self.assertEqual(A[idx_a, idx_b], 1.0)
-        self.assertEqual(A[idx_b, idx_a], 0.0)
-
-    def test_symmetrize_directed(self):
-        A = np.array([[0, 1, 0],
-                      [0, 0, 1],
-                      [0, 0, 0]], dtype=float)
-        S = symmetrize(A)
-        expected = np.array([[0, 1, 0],
-                             [1, 0, 1],
-                             [0, 1, 0]], dtype=float)
-        np.testing.assert_array_equal(S, expected)
-
-    def test_symmetrize_idempotent(self):
-        """Symmetrizing an already-symmetric matrix should not change it."""
-        A = np.array([[0, 1, 1],
-                      [1, 0, 1],
-                      [1, 1, 0]], dtype=float)
-        S = symmetrize(A)
-        np.testing.assert_array_equal(S, A)
-
-    def test_laplacian_p3(self):
-        """Path graph P3: A-B-C."""
-        A_sym = np.array([[0, 1, 0],
-                          [1, 0, 1],
-                          [0, 1, 0]], dtype=float)
-        L = build_laplacian(A_sym)
-        expected = np.array([[1, -1, 0],
-                             [-1, 2, -1],
-                             [0, -1, 1]], dtype=float)
-        np.testing.assert_array_equal(L, expected)
-
-    def test_laplacian_k3(self):
-        """Complete graph K3."""
-        A_sym = np.array([[0, 1, 1],
-                          [1, 0, 1],
-                          [1, 1, 0]], dtype=float)
-        L = build_laplacian(A_sym)
-        expected = np.array([[2, -1, -1],
-                             [-1, 2, -1],
-                             [-1, -1, 2]], dtype=float)
-        np.testing.assert_array_equal(L, expected)
-
-
-# ─── Spectral Analysis Tests ─────────────────────────────────────────────────
-
-class TestSpectralAnalysis(unittest.TestCase):
-    def test_p3_eigenvalues(self):
-        """Path P3 should have eigenvalues {0, 1, 3}."""
-        g = _make_graph(["A", "B", "C"], ["m", "m", "m"],
-                        [("A", "B"), ("B", "C")])
-        s = compute_spectral(g)
-        np.testing.assert_allclose(sorted(s.eigenvalues), [0, 1, 3], atol=1e-10)
-
-    def test_k4_eigenvalues(self):
-        """Complete K4 should have eigenvalues {0, 4, 4, 4}."""
-        names = ["A", "B", "C", "D"]
-        edges = [(a, b) for a in names for b in names if a != b]
-        g = _make_graph(names, ["m"] * 4, edges)
-        s = compute_spectral(g)
-        np.testing.assert_allclose(sorted(s.eigenvalues), [0, 4, 4, 4], atol=1e-10)
-
-    def test_star_s4_fiedler(self):
-        """Star graph S4 (center + 3 leaves): lambda_2 = 1."""
-        g = _make_graph(
-            ["C", "L1", "L2", "L3"], ["m"] * 4,
-            [("C", "L1"), ("C", "L2"), ("C", "L3")],
-        )
-        s = compute_spectral(g)
-        self.assertAlmostEqual(s.fiedler_value, 1.0, places=10)
-
-    def test_disconnected_graph(self):
-        """Disconnected graph should have lambda_2 = 0."""
-        g = _make_graph(
-            ["A", "B", "C", "D"], ["m1", "m1", "m2", "m2"],
-            [("A", "B"), ("C", "D")],
-            module_order=["m1", "m2"],
-        )
-        s = compute_spectral(g)
-        self.assertAlmostEqual(s.fiedler_value, 0.0, places=10)
-
-    def test_barbell_fiedler_separation(self):
-        """Barbell graph: two K3 cliques connected by a bridge.
-
-        Fiedler vector should separate the two cliques (different signs).
-        """
-        # Clique 1: A, B, C fully connected
-        # Clique 2: D, E, F fully connected
-        # Bridge: C-D
-        names = ["A", "B", "C", "D", "E", "F"]
-        edges = [
-            ("A", "B"), ("A", "C"), ("B", "C"),
-            ("D", "E"), ("D", "F"), ("E", "F"),
-            ("C", "D"),
-        ]
-        g = _make_graph(names, ["m1", "m1", "m1", "m2", "m2", "m2"], edges,
-                        module_order=["m1", "m2"])
-        s = compute_spectral(g)
-
-        # Clique 1 nodes should have same sign, clique 2 opposite
-        order = s.node_names
-        fv = s.fiedler_vector
-        idx = {name: i for i, name in enumerate(order)}
-
-        clique1_signs = [np.sign(fv[idx[n]]) for n in ["A", "B", "C"]]
-        clique2_signs = [np.sign(fv[idx[n]]) for n in ["D", "E", "F"]]
-
-        # All in clique 1 should have the same sign
-        self.assertTrue(all(s == clique1_signs[0] for s in clique1_signs),
-                        f"Clique 1 signs should be uniform: {clique1_signs}")
-        # All in clique 2 should have the same sign
-        self.assertTrue(all(s == clique2_signs[0] for s in clique2_signs),
-                        f"Clique 2 signs should be uniform: {clique2_signs}")
-        # The two cliques should have opposite signs
-        self.assertNotEqual(clique1_signs[0], clique2_signs[0],
-                            "Cliques should have opposite Fiedler signs")
-
-    def test_single_node(self):
-        g = _make_graph(["A"], ["m"], [])
-        s = compute_spectral(g)
-        self.assertEqual(s.fiedler_value, 0.0)
-        self.assertEqual(len(s.eigenvalues), 1)
-
-    def test_empty_graph(self):
-        g = DependencyGraph()
-        s = compute_spectral(g)
-        self.assertEqual(s.fiedler_value, 0.0)
-        self.assertEqual(len(s.eigenvalues), 0)
-
-
-# ─── Module Coupling Tests ────────────────────────────────────────────────────
-
-class TestModuleCoupling(unittest.TestCase):
-    def test_directed_counts(self):
-        g = _make_graph(
-            ["A", "B", "C"], ["m1", "m1", "m2"],
-            [("A", "C"), ("B", "C"), ("C", "A")],
-            module_order=["m1", "m2"],
-        )
-        c = compute_module_coupling(g)
-        # m1->m2: 2 edges (A->C, B->C)
-        # m2->m1: 1 edge (C->A)
-        idx_m1 = c.module_names.index("m1")
-        idx_m2 = c.module_names.index("m2")
-        self.assertEqual(c.coupling_matrix[idx_m1, idx_m2], 2.0)
-        self.assertEqual(c.coupling_matrix[idx_m2, idx_m1], 1.0)
-
-    def test_cross_module_ratio(self):
-        g = _make_graph(
-            ["A", "B", "C", "D"], ["m1", "m1", "m2", "m2"],
-            [("A", "B"), ("A", "C"), ("C", "D")],
-            module_order=["m1", "m2"],
-        )
-        c = compute_module_coupling(g)
-        # 1 cross-module edge (A->C) out of 3 total
-        self.assertEqual(c.cross_module_edges, 1)
-        self.assertEqual(c.total_edges, 3)
-
-    def test_intra_only(self):
-        g = _make_graph(
-            ["A", "B"], ["m1", "m1"],
-            [("A", "B")],
-            module_order=["m1"],
-        )
-        c = compute_module_coupling(g)
-        self.assertEqual(c.cross_module_edges, 0)
-        self.assertEqual(c.coupling_matrix[0, 0], 1.0)
-
-
-# ─── Complexity Metrics Tests ─────────────────────────────────────────────────
-
-class TestComplexityMetrics(unittest.TestCase):
-    def test_k4_spectral_entropy(self):
-        """K4 has uniform positive eigenvalues {4,4,4} -> entropy = log2(3)."""
-        evals = np.array([0.0, 4.0, 4.0, 4.0])
-        H = compute_spectral_entropy(evals)
-        self.assertAlmostEqual(H, math.log2(3), places=10)
-
-    def test_star_entropy_less_than_complete(self):
-        """Star graph has less uniform eigenvalues than complete graph."""
-        # Star S4: eigenvalues are 0, 1, 1, 4
-        star_evals = np.array([0.0, 1.0, 1.0, 4.0])
-        k4_evals = np.array([0.0, 4.0, 4.0, 4.0])
-        H_star = compute_spectral_entropy(star_evals)
-        H_k4 = compute_spectral_entropy(k4_evals)
-        self.assertLess(H_star, H_k4)
-
-    def test_cci_in_range(self):
-        """CCI should always be in [0, 1]."""
-        for _ in range(20):
-            n = random.randint(2, 10)
-            names = [f"N{i}" for i in range(n)]
-            mods = [f"m{i % 3}" for i in range(n)]
-            edges = []
-            for _ in range(random.randint(1, n * 2)):
-                a, b = random.sample(names, 2)
-                edges.append((a, b))
-            g = _make_graph(names, mods, edges,
-                            module_order=sorted(set(mods)))
-            result = run_analysis(g)
-            self.assertGreaterEqual(result.metrics.cci, 0.0,
-                                    "CCI should be >= 0")
-            self.assertLessEqual(result.metrics.cci, 1.0,
-                                 "CCI should be <= 1")
-
-    def test_cci_increases_with_coupling(self):
-        """Adding cross-module edges should increase CCI."""
-        # Base graph: two modules, minimal coupling
-        g1 = _make_graph(
-            ["A", "B", "C", "D"], ["m1", "m1", "m2", "m2"],
-            [("A", "B"), ("C", "D"), ("A", "C")],
-            module_order=["m1", "m2"],
-        )
-        # More coupling
-        g2 = _make_graph(
-            ["A", "B", "C", "D"], ["m1", "m1", "m2", "m2"],
-            [("A", "B"), ("C", "D"), ("A", "C"), ("A", "D"),
-             ("B", "C"), ("B", "D"), ("C", "A"), ("D", "B")],
-            module_order=["m1", "m2"],
-        )
-        r1 = run_analysis(g1)
-        r2 = run_analysis(g2)
-        self.assertLess(r1.metrics.cci, r2.metrics.cci)
-
-    def test_connected_components(self):
-        A_sym = np.array([
-            [0, 1, 0, 0],
-            [1, 0, 0, 0],
-            [0, 0, 0, 1],
-            [0, 0, 1, 0],
-        ], dtype=float)
-        self.assertEqual(count_connected_components(A_sym), 2)
-
-    def test_single_component(self):
-        A_sym = np.array([
-            [0, 1, 1],
-            [1, 0, 1],
-            [1, 1, 0],
-        ], dtype=float)
-        self.assertEqual(count_connected_components(A_sym), 1)
-
-
-# ─── Complexity Ladder ────────────────────────────────────────────────────────
-
-class TestComplexityLadder(unittest.TestCase):
-    """Verify CCI correctly orders synthetic codebases of increasing complexity."""
-
-    def _rung1_linear_chain(self) -> DependencyGraph:
-        """5 nodes in a single module, linear chain A->B->C->D->E."""
-        return _make_graph(
-            ["A", "B", "C", "D", "E"],
-            ["m1"] * 5,
-            [("A", "B"), ("B", "C"), ("C", "D"), ("D", "E")],
-            module_order=["m1"],
-        )
-
-    def _rung2_clean_tree(self) -> DependencyGraph:
-        """6 nodes across 2 modules, tree with mostly intra-module edges."""
-        return _make_graph(
-            ["R", "A", "B", "C", "D", "E"],
-            ["core", "core", "core", "util", "util", "util"],
-            [
-                ("R", "A"), ("A", "B"), ("R", "C"),  # intra core
-                ("D", "E"),  # intra util
-                ("R", "D"), ("C", "E"),  # 2 cross edges
-            ],
-            module_order=["core", "util"],
-        )
-
-    def _rung3_layered_dag(self) -> DependencyGraph:
-        """8 nodes across 3 modules in a layered architecture."""
-        return _make_graph(
-            ["C1", "C2", "S1", "S2", "S3", "D1", "D2", "D3"],
-            ["ctrl", "ctrl", "svc", "svc", "svc", "data", "data", "data"],
-            [
-                ("C1", "C2"),  # intra ctrl
-                ("S1", "S2"), ("S2", "S3"),  # intra svc
-                ("D1", "D2"), ("D2", "D3"),  # intra data
-                ("C1", "S1"), ("C1", "S2"), ("C2", "S3"),  # ctrl->svc
-                ("S1", "D1"), ("S2", "D2"), ("S3", "D3"),  # svc->data
-            ],
-            module_order=["ctrl", "svc", "data"],
-        )
-
-    def _rung4_diamond_cross(self) -> DependencyGraph:
-        """10 nodes across 5 modules with diamond patterns and cross-coupling."""
-        return _make_graph(
-            ["A1", "A2", "B1", "B2", "C1", "C2", "D1", "D2", "E1", "E2"],
-            ["ma", "ma", "mb", "mb", "mc", "mc", "md", "md", "me", "me"],
-            [
-                ("A1", "A2"), ("B1", "B2"), ("C1", "C2"),  # intra
-                ("D1", "D2"), ("E1", "E2"),  # intra
-                # Diamonds across modules
-                ("A1", "B1"), ("A1", "C1"), ("B1", "D1"), ("C1", "D1"),
-                ("A2", "B2"), ("A2", "C2"), ("B2", "D2"), ("C2", "D2"),
-                # Extra cross-coupling
-                ("D1", "E1"), ("D2", "E2"), ("B1", "E1"),
-            ],
-            module_order=["ma", "mb", "mc", "md", "me"],
-        )
-
-    def _rung5_hub_backlinks(self) -> DependencyGraph:
-        """10 nodes across 5 modules, hub-dominated with back-edges."""
-        return _make_graph(
-            ["Hub", "A1", "A2", "B1", "B2", "C1", "C2", "D1", "D2", "D3"],
-            ["core", "sa", "sa", "sb", "sb", "sc", "sc", "sd", "sd", "sd"],
-            [
-                ("A1", "A2"), ("B1", "B2"), ("C1", "C2"),  # intra
-                ("D1", "D2"), ("D2", "D3"),  # intra
-                # Hub connections (cross-module)
-                ("Hub", "A1"), ("Hub", "B1"), ("Hub", "C1"), ("Hub", "D1"),
-                ("A1", "Hub"), ("B1", "Hub"), ("C1", "Hub"),
-                # Additional cross-module
-                ("A1", "B1"), ("B1", "C1"), ("C1", "D1"),
-                ("A2", "B2"), ("B2", "C2"), ("C2", "D2"),
-                ("A1", "D1"), ("B2", "D3"),
-            ],
-            module_order=["core", "sa", "sb", "sc", "sd"],
-        )
-
-    def _rung6_dense_mesh(self) -> DependencyGraph:
-        """10 nodes across 4 modules with heavy cross-module coupling."""
-        names = ["X1", "X2", "X3", "Y1", "Y2", "Y3", "Z1", "Z2", "W1", "W2"]
-        mods = ["mx", "mx", "mx", "my", "my", "my", "mz", "mz", "mw", "mw"]
-        # Dense cross-module edges
-        edges = [
-            # intra
-            ("X1", "X2"), ("X2", "X3"), ("Y1", "Y2"), ("Y2", "Y3"),
-            ("Z1", "Z2"), ("W1", "W2"),
-            # cross - nearly every module to every other
-            ("X1", "Y1"), ("X1", "Z1"), ("X1", "W1"),
-            ("X2", "Y2"), ("X2", "Z2"), ("X2", "W2"),
-            ("X3", "Y3"), ("X3", "Z1"),
-            ("Y1", "X1"), ("Y1", "Z1"), ("Y1", "W1"),
-            ("Y2", "X2"), ("Y2", "Z2"),
-            ("Y3", "X3"), ("Y3", "W2"),
-            ("Z1", "X1"), ("Z1", "Y1"), ("Z1", "W1"),
-            ("Z2", "X2"), ("Z2", "Y2"), ("Z2", "W2"),
-            ("W1", "X1"), ("W1", "Y1"), ("W1", "Z1"),
-            ("W2", "X2"), ("W2", "Y2"), ("W2", "Z2"),
-        ]
-        return _make_graph(names, mods, edges,
-                           module_order=["mx", "my", "mz", "mw"])
-
-    def test_complexity_ladder(self):
-        """CCI must strictly increase across the ladder rungs."""
-        ladder = [
-            self._rung1_linear_chain(),
-            self._rung2_clean_tree(),
-            self._rung3_layered_dag(),
-            self._rung4_diamond_cross(),
-            self._rung5_hub_backlinks(),
-            self._rung6_dense_mesh(),
-        ]
-        ccis = [run_analysis(g).metrics.cci for g in ladder]
-        for i in range(len(ccis) - 1):
-            self.assertLess(
-                ccis[i], ccis[i + 1],
-                f"Rung {i + 1} (CCI={ccis[i]:.4f}) should be less complex "
-                f"than rung {i + 2} (CCI={ccis[i + 1]:.4f})"
-            )
-
-
-# ─── Perturbation Tests ──────────────────────────────────────────────────────
-
-class TestPerturbation(unittest.TestCase):
-    """Test that CCI responds correctly to architectural changes on the real graph."""
-
-    def _load_real_graph(self) -> DependencyGraph:
-        dot_path = os.path.join(os.path.dirname(__file__), "..", "..", "deps.dot")
-        if not os.path.exists(dot_path):
-            self.skipTest("deps.dot not found")
-        with open(dot_path) as f:
-            return parse_dot(f.read())
-
-    def test_remove_most_coupled_module(self):
-        """Removing the runtime module should decrease CCI."""
-        g = self._load_real_graph()
-        original_cci = run_analysis(g).metrics.cci
-
-        # Remove runtime nodes and their edges
-        g2 = DependencyGraph()
-        g2.modules = [m for m in g.modules if m != "runtime"]
-        for node in g.nodes:
-            if node.module != "runtime":
-                g2.nodes.append(node)
-                g2.node_to_module[node.name] = node.module
-        runtime_nodes = {n.name for n in g.nodes if n.module == "runtime"}
-        for edge in g.edges:
-            if edge.source not in runtime_nodes and edge.target not in runtime_nodes:
-                src_mod = g2.node_to_module.get(edge.source, "")
-                tgt_mod = g2.node_to_module.get(edge.target, "")
-                g2.edges.append(Edge(
-                    source=edge.source, target=edge.target, label=edge.label,
-                    edge_type=edge.edge_type,
-                    cross_module=src_mod != tgt_mod,
-                ))
-
-        reduced_cci = run_analysis(g2).metrics.cci
-        self.assertLess(reduced_cci, original_cci,
-                        f"Removing runtime should decrease CCI: "
-                        f"{reduced_cci:.4f} vs {original_cci:.4f}")
-
-    def test_add_random_cross_edges(self):
-        """Adding 10 random cross-module edges should increase CCI."""
-        g = self._load_real_graph()
-        original_cci = run_analysis(g).metrics.cci
-
-        g2 = copy.deepcopy(g)
-        random.seed(42)
-        node_names = [n.name for n in g2.nodes]
-        added = 0
-        attempts = 0
-        while added < 10 and attempts < 100:
-            src, tgt = random.sample(node_names, 2)
-            src_mod = g2.node_to_module[src]
-            tgt_mod = g2.node_to_module[tgt]
-            if src_mod != tgt_mod:
-                g2.edges.append(Edge(
-                    source=src, target=tgt, label="added",
-                    edge_type="field", cross_module=True,
-                ))
-                added += 1
-            attempts += 1
-
-        augmented_cci = run_analysis(g2).metrics.cci
-        self.assertGreater(augmented_cci, original_cci,
-                           f"Adding cross-module edges should increase CCI: "
-                           f"{augmented_cci:.4f} vs {original_cci:.4f}")
-
-    def test_merge_modules_decreases_cci(self):
-        """Merging two small modules into one should decrease CCI.
-
-        Merging error + config into a single module reduces cross-module
-        edges (their mutual and outward coupling consolidates), lowering CCI.
-        """
-        g = self._load_real_graph()
-        original_cci = run_analysis(g).metrics.cci
-
-        # Merge error and config into "error_config"
-        merge_set = {"error", "config"}
-        merged_name = "error_config"
-
-        g2 = DependencyGraph()
-        g2.modules = [merged_name if m in merge_set else m
-                       for m in g.modules if m not in merge_set]
-        if merged_name not in g2.modules:
-            g2.modules.insert(0, merged_name)
-        # Deduplicate
-        seen = set()
-        g2.modules = [m for m in g2.modules if not (m in seen or seen.add(m))]
-
-        for node in g.nodes:
-            new_mod = merged_name if node.module in merge_set else node.module
-            g2.nodes.append(Node(name=node.name, module=new_mod))
-            g2.node_to_module[node.name] = new_mod
-
-        for edge in g.edges:
-            src_mod = g2.node_to_module.get(edge.source, "")
-            tgt_mod = g2.node_to_module.get(edge.target, "")
-            g2.edges.append(Edge(
-                source=edge.source, target=edge.target, label=edge.label,
-                edge_type=edge.edge_type,
-                cross_module=src_mod != tgt_mod,
-            ))
-
-        merged_cci = run_analysis(g2).metrics.cci
-        self.assertLess(merged_cci, original_cci,
-                        f"Merging error+config should decrease CCI: "
-                        f"{merged_cci:.4f} vs {original_cci:.4f}")
-
-
-# ─── Integration Tests ────────────────────────────────────────────────────────
-
-class TestIntegration(unittest.TestCase):
-    def test_full_pipeline_real_graph(self):
-        """Run full pipeline on real deps.dot and sanity-check outputs."""
-        dot_path = os.path.join(os.path.dirname(__file__), "..", "..", "deps.dot")
-        if not os.path.exists(dot_path):
-            self.skipTest("deps.dot not found")
-        with open(dot_path) as f:
-            graph = parse_dot(f.read())
-
-        result = run_analysis(graph)
-
-        # Basic sanity checks
-        self.assertEqual(result.metrics.n_nodes, 36)
-        self.assertEqual(result.metrics.n_edges, 89)
-        self.assertEqual(result.metrics.n_modules, 8)
-
-        # Connected graph -> lambda_2 > 0
-        self.assertGreater(result.spectral.fiedler_value, 0,
-                           "Connected graph should have lambda_2 > 0")
-
-        # CCI should be in a reasonable range for a well-structured codebase
-        self.assertGreater(result.metrics.cci, 0.05)
-        self.assertLess(result.metrics.cci, 0.9)
-
-        # Eigenvalues should be non-negative (Laplacian property)
-        self.assertTrue(np.all(result.spectral.eigenvalues >= -1e-10),
-                        "Laplacian eigenvalues should be non-negative")
-
-        # First eigenvalue should be 0
-        self.assertAlmostEqual(result.spectral.eigenvalues[0], 0.0, places=8)
-
-    def test_report_generation(self):
-        """Verify report contains expected sections."""
-        dot_path = os.path.join(os.path.dirname(__file__), "..", "..", "deps.dot")
-        if not os.path.exists(dot_path):
-            self.skipTest("deps.dot not found")
-        with open(dot_path) as f:
-            graph = parse_dot(f.read())
-        result = run_analysis(graph)
-        report = generate_report(result)
-
-        self.assertIn("GRAPH SUMMARY", report)
-        self.assertIn("LAPLACIAN EIGENVALUE SPECTRUM", report)
-        self.assertIn("FIEDLER VECTOR", report)
-        self.assertIn("MODULE COUPLING MATRIX", report)
-        self.assertIn("CONNECTOME COMPLEXITY INDEX", report)
-
-    def test_json_output(self):
-        """Verify JSON output is well-formed and contains expected keys."""
-        g = _make_graph(
-            ["A", "B", "C"], ["m1", "m1", "m2"],
-            [("A", "B"), ("A", "C")],
-            module_order=["m1", "m2"],
-        )
-        result = run_analysis(g)
-        d = metrics_to_dict(result)
-
-        self.assertIn("graph", d)
-        self.assertIn("structural", d)
-        self.assertIn("module_coupling", d)
-        self.assertIn("module_cohesion", d)
-        self.assertIn("metrics", d)
-        self.assertEqual(d["graph"]["n_nodes"], 3)
-        self.assertIsInstance(d["structural"]["dag_depth"], int)
-        self.assertIsInstance(d["metrics"]["cci"], float)
-
-        # Should be JSON-serializable
-        json_str = json.dumps(d)
-        self.assertIsInstance(json_str, str)
-
-    def test_dashboard_generation(self):
-        """Verify dashboard PNG can be generated without errors."""
-        try:
-            import matplotlib
-        except ImportError:
-            self.skipTest("matplotlib not available")
-
-        g = _make_graph(
-            ["A", "B", "C", "D"], ["m1", "m1", "m2", "m2"],
-            [("A", "B"), ("A", "C"), ("C", "D")],
-            module_order=["m1", "m2"],
-        )
-        result = run_analysis(g)
-
-        with tempfile.NamedTemporaryFile(suffix=".png", delete=False) as f:
-            path = f.name
-        try:
-            from spectral_analysis import generate_dashboard
-            generate_dashboard(result, path)
-            self.assertTrue(os.path.exists(path))
-            self.assertGreater(os.path.getsize(path), 1000,
-                               "Dashboard should be a non-trivial PNG")
-        finally:
-            os.unlink(path)
-
-
-if __name__ == "__main__":
-    unittest.main()
diff --git a/xtask/Cargo.toml b/xtask/Cargo.toml
index 29eb9e2..d62790c 100644
--- a/xtask/Cargo.toml
+++ b/xtask/Cargo.toml
@@ -5,10 +5,3 @@ edition = "2024"
 
 [dependencies]
 clap = { version = "4", features = ["derive"] }
-toml = "0.8"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
-libc = "0.2"
-reqwest = { version = "0.12", features = ["blocking", "json"] }
-tokio = { version = "1", features = ["rt-multi-thread"] }
-iroh-relay = { version = "0.96", features = ["server"] }
diff --git a/xtask/src/deploy.rs b/xtask/src/deploy.rs
deleted file mode 100644
index 4ba280d..0000000
--- a/xtask/src/deploy.rs
+++ /dev/null
@@ -1,1069 +0,0 @@
-use std::path::Path;
-use std::process::Command;
-use std::thread;
-use std::time::{Duration, Instant};
-
-use serde::Deserialize;
-
-// ── Config structs ──────────────────────────────────────────────────────────
-
-#[derive(Deserialize)]
-pub struct DeployConfig {
-    pub defaults: DeployDefaults,
-    pub machines: Vec<MachineConfig>,
-}
-
-#[derive(Deserialize, Clone)]
-pub struct DeployDefaults {
-    #[serde(default)]
-    pub image: String,
-    #[serde(default)]
-    pub container: String,
-    pub dashboard_port: u16,
-    #[serde(default = "default_relay_port")]
-    pub relay_port: u16,
-    #[serde(default)]
-    pub swactor_flags: Vec<String>,
-    #[serde(default)]
-    pub relay_hosts: Vec<String>,
-    #[serde(default = "default_true")]
-    pub introduce_peers: bool,
-    #[serde(default = "default_health_timeout")]
-    pub health_timeout_secs: u64,
-    #[serde(default = "default_convergence_timeout")]
-    pub convergence_timeout_secs: u64,
-}
-
-fn default_true() -> bool { true }
-fn default_relay_port() -> u16 { 3340 }
-fn default_health_timeout() -> u64 { 30 }
-fn default_convergence_timeout() -> u64 { 60 }
-
-#[derive(Deserialize, Clone)]
-pub struct MachineConfig {
-    pub name: String,
-    /// SSH destination — an alias from ~/.ssh/config (e.g. "thinkpad") or a hostname/IP.
-    /// Ignored when `local = true`.
-    #[serde(default)]
-    pub ssh: String,
-    /// When true, run docker commands directly instead of over SSH.
-    #[serde(default)]
-    pub local: bool,
-    pub dashboard_port: Option<u16>,
-    pub relay_port: Option<u16>,
-    pub container: Option<String>,
-    pub swactor_flags: Option<Vec<String>>,
-}
-
-impl MachineConfig {
-    fn effective_port(&self, defaults: &DeployDefaults) -> u16 {
-        self.dashboard_port.unwrap_or(defaults.dashboard_port)
-    }
-
-    fn effective_relay_port(&self, defaults: &DeployDefaults) -> u16 {
-        self.relay_port.unwrap_or(defaults.relay_port)
-    }
-
-    fn effective_container(&self, defaults: &DeployDefaults) -> String {
-        self.container.clone().unwrap_or_else(|| defaults.container.clone())
-    }
-
-    fn effective_flags(&self, defaults: &DeployDefaults) -> Vec<String> {
-        self.swactor_flags.clone().unwrap_or_else(|| defaults.swactor_flags.clone())
-    }
-}
-
-// ── SSH helpers ─────────────────────────────────────────────────────────────
-
-fn ssh_cmd(machine: &MachineConfig, remote_cmd: &str) -> Command {
-    let mut cmd = Command::new("ssh");
-    cmd.arg(&machine.ssh);
-    cmd.arg(remote_cmd);
-    cmd
-}
-
-fn transfer_image(machine: &MachineConfig, archive: &Path) -> Result<(), String> {
-    if machine.local {
-        println!("  Loading image locally on {}...", machine.name);
-        let pipe_cmd = format!("gunzip < {} | docker load", archive.display());
-        let status = Command::new("sh")
-            .arg("-c")
-            .arg(&pipe_cmd)
-            .status()
-            .map_err(|e| format!("failed to run docker load: {e}"))?;
-        if !status.success() {
-            return Err(format!("local docker load on {} failed", machine.name));
-        }
-    } else {
-        println!("  Copying image to {}...", machine.name);
-        let status = Command::new("scp")
-            .arg(archive.as_os_str())
-            .arg(format!("{}:/tmp/swactor-deploy.tar.gz", machine.ssh))
-            .status()
-            .map_err(|e| format!("scp failed: {e}"))?;
-        if !status.success() {
-            return Err(format!("scp to {} failed", machine.name));
-        }
-
-        println!("  Loading image on {}...", machine.name);
-        let status = Command::new("ssh")
-            .arg(&machine.ssh)
-            .arg("gunzip < /tmp/swactor-deploy.tar.gz | docker load")
-            .status()
-            .map_err(|e| format!("docker load on {} failed: {e}", machine.name))?;
-        if !status.success() {
-            return Err(format!("docker load on {} failed", machine.name));
-        }
-    }
-    println!("  Image loaded on {}", machine.name);
-    Ok(())
-}
-
-// ── HTTP helpers (via curl, optionally over SSH) ────────────────────────────
-
-/// Build a curl GET url, running locally or over SSH depending on the machine.
-fn machine_curl_get(machine: &MachineConfig, defaults: &DeployDefaults, path: &str) -> Option<String> {
-    let port = machine.effective_port(defaults);
-    let url = format!("http://localhost:{port}{path}");
-
-    let output = if machine.local {
-        Command::new("curl")
-            .args(["-s", "--max-time", "3", &url])
-            .output()
-            .ok()?
-    } else {
-        let curl_cmd = format!("curl -s --max-time 3 '{url}'");
-        Command::new("ssh")
-            .arg(&machine.ssh)
-            .arg(&curl_cmd)
-            .output()
-            .ok()?
-    };
-
-    if !output.status.success() {
-        return None;
-    }
-    let body = String::from_utf8_lossy(&output.stdout).to_string();
-    if body.is_empty() || body == "{}" {
-        return None;
-    }
-    Some(body)
-}
-
-fn machine_curl_post(machine: &MachineConfig, defaults: &DeployDefaults, path: &str, json_body: &str) -> Result<String, String> {
-    let port = machine.effective_port(defaults);
-    let url = format!("http://localhost:{port}{path}");
-
-    let output = if machine.local {
-        let mut cmd = Command::new("curl");
-        cmd.args(["-s", "--max-time", "5", "-X", "POST"]);
-        cmd.args(["-H", "Content-Type: application/json"]);
-        cmd.arg("-d").arg(json_body);
-        cmd.arg(&url);
-        cmd.output().map_err(|e| format!("curl failed: {e}"))?
-    } else {
-        // Escape single quotes in json_body for the shell
-        let escaped = json_body.replace('\'', "'\\''");
-        let curl_cmd = format!(
-            "curl -s --max-time 5 -X POST -H 'Content-Type: application/json' -d '{escaped}' '{url}'"
-        );
-        Command::new("ssh")
-            .arg(&machine.ssh)
-            .arg(&curl_cmd)
-            .output()
-            .map_err(|e| format!("ssh curl failed: {e}"))?
-    };
-
-    if !output.status.success() {
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        return Err(format!("POST {url} failed: {stderr}"));
-    }
-    Ok(String::from_utf8_lossy(&output.stdout).to_string())
-}
-
-// ── Deploy orchestration ────────────────────────────────────────────────────
-
-pub fn run_deploy(
-    root: &Path,
-    config_path: &str,
-    skip_build: bool,
-    skip_verify: bool,
-    skip_peers: bool,
-) {
-    // Phase 1: Load config
-    println!("=== Phase 1: Loading config ===\n");
-    let config = load_deploy_config(root, config_path);
-    println!("  Loaded {} machine(s): {}", config.machines.len(),
-        config.machines.iter().map(|m| m.name.as_str()).collect::<Vec<_>>().join(", "));
-
-    println!();
-
-    // Phase 2: Build image
-    let archive = std::env::temp_dir().join("swactor-deploy.tar.gz");
-    if !skip_build {
-        println!("=== Phase 2: Building Docker image ===\n");
-        build_image(root, &config.defaults.image, &archive);
-        println!();
-    } else {
-        println!("=== Phase 2: Skipping build ===\n");
-        if !archive.exists() {
-            eprintln!("Warning: --skip-build but {} does not exist", archive.display());
-            eprintln!("  Run without --skip-build first, or ensure the archive exists.\n");
-        }
-    }
-
-    // Phase 3: Deploy to each machine
-    println!("=== Phase 3: Deploying to machines ===\n");
-    for machine in &config.machines {
-        deploy_to_machine(machine, &config.defaults, &archive);
-    }
-    println!();
-
-    // Phase 4: Health check
-    if !skip_verify {
-        println!("=== Phase 4: Health check ===\n");
-        for machine in &config.machines {
-            health_check(machine, &config.defaults);
-        }
-        println!();
-    }
-
-    // Phase 4b: Inject relay_hosts into container configs
-    if !config.defaults.relay_hosts.is_empty() {
-        println!("=== Phase 4b: Injecting relay_hosts config ===\n");
-        inject_relay_hosts(&config.machines, &config.defaults);
-        println!();
-    }
-
-    // Phase 5: Peer introduction + convergence
-    if !skip_verify && !skip_peers && config.defaults.introduce_peers {
-        println!("=== Phase 5: Peer introduction ===\n");
-        let (node_info, seed_index) = introduce_peers(&config.machines, &config.defaults);
-
-        println!("\n=== Phase 5b: Waiting for convergence ===\n");
-        wait_for_cluster_convergence(&config.machines, &config.defaults, &node_info, seed_index);
-        println!();
-    }
-
-    // Phase 6: Report
-    println!("=== Phase 6: Cluster status ===\n");
-    print_cluster_status(&config.machines, &config.defaults);
-}
-
-fn load_deploy_config(root: &Path, config_path: &str) -> DeployConfig {
-    let path = if Path::new(config_path).is_absolute() {
-        config_path.to_string()
-    } else {
-        root.join(config_path).to_string_lossy().to_string()
-    };
-
-    let content = std::fs::read_to_string(&path).unwrap_or_else(|e| {
-        eprintln!("Failed to read config '{}': {e}", path);
-        eprintln!("Create a deploy.toml in the workspace root. See the plan for the format.");
-        std::process::exit(1);
-    });
-
-    let config: DeployConfig = toml::from_str(&content).unwrap_or_else(|e| {
-        eprintln!("Failed to parse config '{}': {e}", path);
-        std::process::exit(1);
-    });
-
-    if config.machines.is_empty() {
-        eprintln!("Error: deploy config has no [[machines]] entries");
-        std::process::exit(1);
-    }
-
-    config
-}
-
-fn build_binary(root: &Path) -> std::path::PathBuf {
-    println!("  Building swactor-node (musl, static, release)...");
-    let status = Command::new("cargo")
-        .args(["build", "--release", "-p", "swactor-node", "--target", "x86_64-unknown-linux-musl"])
-        .current_dir(root)
-        .status()
-        .unwrap_or_else(|e| {
-            eprintln!("Failed to run cargo build: {e}");
-            std::process::exit(1);
-        });
-    if !status.success() {
-        eprintln!("cargo build failed");
-        std::process::exit(1);
-    }
-    root.join("target/x86_64-unknown-linux-musl/release/swactor")
-}
-
-fn build_image(root: &Path, image: &str, archive: &Path) {
-    if image.is_empty() {
-        eprintln!("Error: 'image' must be set in deploy.toml [defaults] for --docker mode");
-        std::process::exit(1);
-    }
-    build_binary(root);
-
-    println!("  Packaging Docker image '{image}'...");
-    let status = Command::new("docker")
-        .args(["build", "-t", image, "."])
-        .current_dir(root)
-        .status()
-        .unwrap_or_else(|e| {
-            eprintln!("Failed to run docker build: {e}");
-            std::process::exit(1);
-        });
-    if !status.success() {
-        eprintln!("docker build failed");
-        std::process::exit(1);
-    }
-
-    println!("  Saving image to {}...", archive.display());
-    let pipe_cmd = format!(
-        "docker save {} | gzip > {}",
-        image,
-        archive.display()
-    );
-    let status = Command::new("sh")
-        .arg("-c")
-        .arg(&pipe_cmd)
-        .status()
-        .unwrap_or_else(|e| {
-            eprintln!("Failed to save docker image: {e}");
-            std::process::exit(1);
-        });
-    if !status.success() {
-        eprintln!("docker save | gzip failed");
-        std::process::exit(1);
-    }
-
-    let size = std::fs::metadata(archive).map(|m| m.len()).unwrap_or(0);
-    println!("  Image archive: {:.1} MB", size as f64 / 1_048_576.0);
-}
-
-fn deploy_to_machine(machine: &MachineConfig, defaults: &DeployDefaults, archive: &Path) {
-    if defaults.image.is_empty() || defaults.container.is_empty() {
-        eprintln!("Error: 'image' and 'container' must be set in deploy.toml [defaults] for --docker mode");
-        std::process::exit(1);
-    }
-    let container = machine.effective_container(defaults);
-    let port = machine.effective_port(defaults);
-    let relay_port = machine.effective_relay_port(defaults);
-    let flags = machine.effective_flags(defaults);
-    let image = &defaults.image;
-
-    println!("  Deploying to {}...", machine.name);
-
-    // Step 1: Transfer image
-    if let Err(e) = transfer_image(machine, archive) {
-        eprintln!("    Error: {e}");
-        std::process::exit(1);
-    }
-
-    // Step 2: Stop + remove existing containers
-    // Kill the named container and any other containers from the same image
-    // so stale instances don't hold ports (e.g. relay port 3340).
-    let stop_cmd = format!(
-        concat!(
-            "docker kill {container} 2>/dev/null; docker rm {container} 2>/dev/null; ",
-            "for cid in $(docker ps -q --filter ancestor={image} 2>/dev/null); do ",
-            "docker kill $cid 2>/dev/null; docker rm $cid 2>/dev/null; ",
-            "done; sleep 1; true",
-        ),
-        container = container,
-        image = image,
-    );
-    if machine.local {
-        let _ = Command::new("sh").arg("-c").arg(&stop_cmd).status();
-    } else {
-        let status = ssh_cmd(machine, &stop_cmd).status();
-        if let Err(e) = status {
-            eprintln!("    Warning: failed to stop/rm old container: {e}");
-        }
-    }
-
-    // Step 3: Start new container
-    let mut run_parts = vec![
-        "docker".to_string(), "run".to_string(), "-d".to_string(),
-        "--name".to_string(), container.clone(),
-        "--network".to_string(), "host".to_string(),
-        "--restart".to_string(), "unless-stopped".to_string(),
-        image.clone(),
-        "--dashboard-port".to_string(), port.to_string(),
-        "--relay-port".to_string(), relay_port.to_string(),
-    ];
-    run_parts.extend(flags);
-
-    let status = if machine.local {
-        Command::new(&run_parts[0])
-            .args(&run_parts[1..])
-            .status()
-            .unwrap_or_else(|e| {
-                eprintln!("    Failed to start container on {}: {e}", machine.name);
-                std::process::exit(1);
-            })
-    } else {
-        let run_cmd = run_parts.iter()
-            .map(|a| if a.contains(' ') { format!("'{a}'") } else { a.clone() })
-            .collect::<Vec<_>>()
-            .join(" ");
-        ssh_cmd(machine, &run_cmd)
-            .status()
-            .unwrap_or_else(|e| {
-                eprintln!("    Failed to start container on {}: {e}", machine.name);
-                std::process::exit(1);
-            })
-    };
-    if !status.success() {
-        eprintln!("    Container start failed on {}", machine.name);
-        std::process::exit(1);
-    }
-
-    println!("  {} deployed (container: {container}, dashboard: {port}, relay: {relay_port})", machine.name);
-}
-
-fn health_check(machine: &MachineConfig, defaults: &DeployDefaults) {
-    let timeout = Duration::from_secs(defaults.health_timeout_secs);
-    let start = Instant::now();
-
-    print!("  Checking {}...", machine.name);
-
-    loop {
-        if start.elapsed() > timeout {
-            println!(" TIMEOUT");
-            eprintln!("    Health check failed for {} ({}s timeout)", machine.name, defaults.health_timeout_secs);
-            std::process::exit(1);
-        }
-
-        if let Some(body) = machine_curl_get(machine, defaults, "/api/stats") {
-            if serde_json::from_str::<serde_json::Value>(&body).is_ok() {
-                println!(" OK");
-                return;
-            }
-        }
-
-        thread::sleep(Duration::from_secs(2));
-    }
-}
-
-fn inject_relay_hosts(machines: &[MachineConfig], defaults: &DeployDefaults) {
-    // Format the TOML line to append
-    let hosts_toml = format!(
-        "relay_hosts = [{}]\n",
-        defaults.relay_hosts.iter()
-            .map(|h| format!("\"{h}\""))
-            .collect::<Vec<_>>()
-            .join(", ")
-    );
-
-    // The container has no shell, so we use docker cp to modify the config:
-    //   1. docker cp container:/.swactor/node.toml /tmp/...
-    //   2. append relay_hosts line
-    //   3. docker cp /tmp/... container:/.swactor/node.toml
-    for machine in machines {
-        let container = machine.effective_container(defaults);
-        let tmp_file = format!("/tmp/swactor-relay-inject-{}.toml", machine.name);
-
-        let result = if machine.local {
-            inject_relay_hosts_local(&container, &tmp_file, &hosts_toml)
-        } else {
-            inject_relay_hosts_remote(machine, &container, &hosts_toml)
-        };
-
-        match result {
-            Ok(()) => println!("  {} relay_hosts injected", machine.name),
-            Err(e) => eprintln!("  Warning: inject on {} failed: {e}", machine.name),
-        }
-    }
-
-    // Restart containers to pick up the new config
-    println!("  Restarting containers...");
-    for machine in machines {
-        let container = machine.effective_container(defaults);
-        let restart_cmd = format!("docker restart {container}");
-
-        let status = if machine.local {
-            Command::new("sh").arg("-c").arg(&restart_cmd).status()
-        } else {
-            ssh_cmd(machine, &restart_cmd).status()
-        };
-
-        match status {
-            Ok(s) if s.success() => println!("  {} restarted", machine.name),
-            Ok(s) => eprintln!("  Warning: restart {} exited {}", machine.name, s),
-            Err(e) => eprintln!("  Warning: restart {} failed: {e}", machine.name),
-        }
-    }
-
-    // Brief pause for containers to come back up
-    println!("  Waiting for containers to restart...");
-    thread::sleep(Duration::from_secs(5));
-
-    // Re-run health checks after restart
-    for machine in machines {
-        health_check(machine, defaults);
-    }
-}
-
-fn inject_relay_hosts_local(container: &str, tmp_file: &str, hosts_toml: &str) -> Result<(), String> {
-    // Copy config out of container
-    let cp_out = format!("docker cp {container}:/.swactor/node.toml {tmp_file}");
-    let status = Command::new("sh").arg("-c").arg(&cp_out)
-        .status().map_err(|e| format!("docker cp out: {e}"))?;
-    if !status.success() {
-        return Err("docker cp out failed".into());
-    }
-
-    // Replace or append relay_hosts
-    let contents = std::fs::read_to_string(tmp_file)
-        .map_err(|e| format!("read tmp: {e}"))?;
-    let updated = if contents.contains("relay_hosts") {
-        contents.lines()
-            .map(|line| {
-                if line.trim_start().starts_with("relay_hosts") {
-                    hosts_toml.trim_end()
-                } else {
-                    line
-                }
-            })
-            .collect::<Vec<_>>()
-            .join("\n") + "\n"
-    } else {
-        let mut s = contents;
-        if !s.ends_with('\n') && !s.is_empty() { s.push('\n'); }
-        s.push_str(hosts_toml);
-        s
-    };
-    std::fs::write(tmp_file, &updated)
-        .map_err(|e| format!("write tmp: {e}"))?;
-
-    // Copy config back into container
-    let cp_in = format!("docker cp {tmp_file} {container}:/.swactor/node.toml");
-    let status = Command::new("sh").arg("-c").arg(&cp_in)
-        .status().map_err(|e| format!("docker cp in: {e}"))?;
-    if !status.success() {
-        return Err("docker cp in failed".into());
-    }
-
-    let _ = std::fs::remove_file(tmp_file);
-    Ok(())
-}
-
-fn inject_relay_hosts_remote(machine: &MachineConfig, container: &str, hosts_toml: &str) -> Result<(), String> {
-    // Write the desired line to a local temp file, scp it, then use a simple
-    // shell script on the remote to merge it into the container's config.
-    let local_tmp = format!("/tmp/swactor-relay-line-{}.txt", machine.name);
-    std::fs::write(&local_tmp, hosts_toml)
-        .map_err(|e| format!("write local tmp: {e}"))?;
-
-    // scp the line file to the remote
-    let scp_status = Command::new("scp")
-        .args([&local_tmp, &format!("{}:/tmp/swactor-relay-line.txt", machine.ssh)])
-        .status().map_err(|e| format!("scp: {e}"))?;
-    if !scp_status.success() {
-        let _ = std::fs::remove_file(&local_tmp);
-        return Err("scp relay line failed".into());
-    }
-    let _ = std::fs::remove_file(&local_tmp);
-
-    // On the remote: docker cp out, filter+append, docker cp back
-    let remote_cmd = format!(
-        concat!(
-            "docker cp {container}:/.swactor/node.toml /tmp/swactor-inject.toml && ",
-            "grep -v '^relay_hosts' /tmp/swactor-inject.toml > /tmp/swactor-inject2.toml && ",
-            "cat /tmp/swactor-relay-line.txt >> /tmp/swactor-inject2.toml && ",
-            "docker cp /tmp/swactor-inject2.toml {container}:/.swactor/node.toml && ",
-            "rm -f /tmp/swactor-inject.toml /tmp/swactor-inject2.toml /tmp/swactor-relay-line.txt"
-        ),
-        container = container,
-    );
-    let status = ssh_cmd(machine, &remote_cmd)
-        .status().map_err(|e| format!("ssh: {e}"))?;
-    if !status.success() {
-        return Err("remote inject failed".into());
-    }
-    Ok(())
-}
-
-/// Collected node info for peer sync.
-struct NodeInfo {
-    name: String,
-    node_id: String,
-    relay_url: Option<String>,
-}
-
-/// Collect node_id and relay_url from each machine (O(n) GETs).
-fn collect_node_info(machines: &[MachineConfig], defaults: &DeployDefaults) -> Vec<NodeInfo> {
-    let mut node_info = Vec::new();
-
-    for machine in machines {
-        let body = machine_curl_get(machine, defaults, "/api/distribution").unwrap_or_else(|| {
-            eprintln!("  Failed to get node_id from {}", machine.name);
-            std::process::exit(1);
-        });
-
-        let snap: serde_json::Value = serde_json::from_str(&body).unwrap_or_else(|e| {
-            eprintln!("  Invalid JSON from {}: {e}", machine.name);
-            std::process::exit(1);
-        });
-
-        let node_id = snap.get("node_id")
-            .and_then(|v| v.as_str())
-            .unwrap_or_else(|| {
-                eprintln!("  No node_id in response from {}", machine.name);
-                std::process::exit(1);
-            })
-            .to_string();
-
-        let relay_url = snap.get("relay_url")
-            .and_then(|v| v.as_str())
-            .map(|s| s.to_string());
-
-        println!("  {} node_id: {}...{}{}", machine.name, &node_id[..8], &node_id[node_id.len()-8..],
-            relay_url.as_ref().map(|u| format!(" relay: {u}")).unwrap_or_default());
-        node_info.push(NodeInfo { name: machine.name.clone(), node_id, relay_url });
-    }
-
-    node_info
-}
-
-/// Pick a seed node index: first machine with a relay_url, or index 0.
-fn pick_seed(node_info: &[NodeInfo]) -> usize {
-    node_info.iter().position(|n| n.relay_url.is_some()).unwrap_or(0)
-}
-
-/// POST /api/peers/sync to each machine with all other peers + join_seed (O(n) POSTs).
-fn sync_peers(
-    machines: &[MachineConfig],
-    defaults: &DeployDefaults,
-    node_info: &[NodeInfo],
-    seed_index: usize,
-) {
-    for (i, machine) in machines.iter().enumerate() {
-        // Build peers array: all nodes except self
-        let peers: Vec<serde_json::Value> = node_info.iter().enumerate()
-            .filter(|(j, _)| *j != i)
-            .map(|(_, info)| {
-                let mut p = serde_json::json!({
-                    "node_id": info.node_id,
-                    "label": info.name,
-                });
-                if let Some(url) = &info.relay_url {
-                    p["relay_url"] = serde_json::json!(url);
-                }
-                p
-            })
-            .collect();
-
-        let payload = serde_json::json!({
-            "peers": peers,
-            "join_seed": node_info[seed_index].node_id,
-        });
-        let body = payload.to_string();
-
-        match machine_curl_post(machine, defaults, "/api/peers/sync", &body) {
-            Ok(_) => println!("  {} <- synced {} peers (seed: {})", machine.name, peers.len(), node_info[seed_index].name),
-            Err(e) => {
-                eprintln!("  Warning: failed to sync peers on {}: {e}", machine.name);
-            }
-        }
-    }
-}
-
-/// Full introduction flow: collect info, pick seed, sync all peers.
-/// Returns (node_info, seed_index) for reuse by convergence retry.
-fn introduce_peers(machines: &[MachineConfig], defaults: &DeployDefaults) -> (Vec<NodeInfo>, usize) {
-    let node_info = collect_node_info(machines, defaults);
-    let seed_index = pick_seed(&node_info);
-
-    println!("  Seed: {} (index {})", node_info[seed_index].name, seed_index);
-    println!();
-
-    sync_peers(machines, defaults, &node_info, seed_index);
-
-    (node_info, seed_index)
-}
-
-fn wait_for_cluster_convergence(
-    machines: &[MachineConfig],
-    defaults: &DeployDefaults,
-    node_info: &[NodeInfo],
-    seed_index: usize,
-) {
-    let expected_alive = machines.len() - 1;
-    let max_attempts = 3;
-
-    for attempt in 1..=max_attempts {
-        let timeout = Duration::from_secs(defaults.convergence_timeout_secs);
-        let start = Instant::now();
-
-        println!("  Attempt {attempt}/{max_attempts}: waiting for all nodes to see >= {expected_alive} alive peers...");
-
-        loop {
-            if start.elapsed() > timeout {
-                println!("  TIMEOUT after {}s", defaults.convergence_timeout_secs);
-                for machine in machines {
-                    match machine_curl_get(machine, defaults, "/api/distribution") {
-                        Some(body) => {
-                            if let Ok(snap) = serde_json::from_str::<serde_json::Value>(&body) {
-                                let alive = snap.get("alive_count")
-                                    .and_then(|v| v.as_u64())
-                                    .unwrap_or(0);
-                                eprintln!("    {}: alive_count={}", machine.name, alive);
-                            }
-                        }
-                        None => eprintln!("    {}: unreachable", machine.name),
-                    }
-                }
-
-                if attempt < max_attempts {
-                    println!("\n  Re-syncing peers (attempt {}/{max_attempts})...\n", attempt + 1);
-                    sync_peers(machines, defaults, node_info, seed_index);
-                }
-                break;
-            }
-
-            let all_converged = machines.iter().all(|m| {
-                machine_curl_get(m, defaults, "/api/distribution")
-                    .and_then(|body| serde_json::from_str::<serde_json::Value>(&body).ok())
-                    .and_then(|snap| snap.get("alive_count").and_then(|v| v.as_u64()))
-                    .map(|alive| alive as usize >= expected_alive)
-                    .unwrap_or(false)
-            });
-
-            if all_converged {
-                println!("  Converged! All nodes see >= {expected_alive} alive peers.");
-                return;
-            }
-
-            thread::sleep(Duration::from_secs(3));
-        }
-    }
-
-    eprintln!("\n  Convergence failed after {max_attempts} attempts.");
-    std::process::exit(1);
-}
-
-// ── Native (non-Docker) deploy ───────────────────────────────────────────
-
-/// Convert CLI-style swactor_flags into (key, value) pairs for node.toml.
-fn parse_swactor_flags(flags: &[String]) -> Vec<(String, String)> {
-    let mut pairs = Vec::new();
-    let mut i = 0;
-    while i < flags.len() {
-        let flag = &flags[i];
-        match flag.as_str() {
-            // Boolean flags
-            "--auth" => pairs.push(("auth".into(), "true".into())),
-            "--no-datastore" => pairs.push(("no_datastore".into(), "true".into())),
-            "--no-relay" => pairs.push(("relay".into(), "false".into())),
-            // String/numeric value flags
-            "--storage-path" | "--identity-dir" | "--auth-dir" | "--peers-file"
-            | "--node-name" | "--transport" | "--relay-bind" | "--listen"
-            | "--seed" | "--seed-node-id"
-            | "--dashboard-port" | "--relay-port" | "--chunk-size"
-            | "--gc-interval" | "--disseminate-interval" | "--actors" => {
-                let key = flag.trim_start_matches("--").replace('-', "_");
-                i += 1;
-                let value = flags.get(i).cloned().unwrap_or_default();
-                pairs.push((key, value));
-            }
-            other => {
-                eprintln!("  Warning: unknown swactor_flag '{other}', skipping");
-            }
-        }
-        i += 1;
-    }
-    pairs
-}
-
-/// Get the absolute $HOME path on a machine (local or remote).
-fn resolve_remote_home(machine: &MachineConfig) -> Result<String, String> {
-    let output = if machine.local {
-        std::env::var("HOME").map_err(|e| format!("$HOME not set: {e}"))?
-    } else {
-        let out = Command::new("ssh")
-            .arg(&machine.ssh)
-            .arg("echo $HOME")
-            .output()
-            .map_err(|e| format!("ssh failed: {e}"))?;
-        if !out.status.success() {
-            return Err(format!("ssh echo $HOME failed on {}", machine.name));
-        }
-        String::from_utf8_lossy(&out.stdout).trim().to_string()
-    };
-    if output.is_empty() {
-        return Err(format!("empty $HOME on {}", machine.name));
-    }
-    Ok(output)
-}
-
-/// Generate node.toml content for a machine.
-fn generate_node_toml(machine: &MachineConfig, defaults: &DeployDefaults, home_dir: &str) -> String {
-    let swactor_dir = format!("{home_dir}/.swactor");
-    let port = machine.effective_port(defaults);
-    let relay_port = machine.effective_relay_port(defaults);
-    let flags = machine.effective_flags(defaults);
-    let overrides = parse_swactor_flags(&flags);
-
-    // Collect all key-value pairs; overrides from flags take precedence.
-    let mut kv: Vec<(String, String)> = Vec::new();
-
-    // Base config
-    kv.push(("transport".into(), "\"iroh\"".into()));
-    kv.push(("dashboard_port".into(), port.to_string()));
-    kv.push(("relay_port".into(), relay_port.to_string()));
-    kv.push(("relay".into(), "true".into()));
-    kv.push(("auth".into(), "true".into()));
-
-    // Absolute paths
-    kv.push(("storage_path".into(), format!("\"{swactor_dir}/data\"")));
-    kv.push(("identity_dir".into(), format!("\"{swactor_dir}/identity\"")));
-    kv.push(("peers_file".into(), format!("\"{swactor_dir}/peers.json\"")));
-    kv.push(("auth_dir".into(), format!("\"{swactor_dir}/auth\"")));
-
-    // relay_hosts from defaults
-    if !defaults.relay_hosts.is_empty() {
-        let hosts = defaults.relay_hosts.iter()
-            .map(|h| format!("\"{h}\""))
-            .collect::<Vec<_>>()
-            .join(", ");
-        kv.push(("relay_hosts".into(), format!("[{hosts}]")));
-    }
-
-    // Apply flag overrides — replace existing keys or add new ones
-    for (key, value) in &overrides {
-        let toml_value = match key.as_str() {
-            // These are already bare values (true/false/numbers)
-            "auth" | "relay" | "no_datastore"
-            | "dashboard_port" | "relay_port" | "chunk_size"
-            | "gc_interval" | "disseminate_interval" | "actors" => value.clone(),
-            // Everything else is a string
-            _ => {
-                if value.starts_with('"') { value.clone() } else { format!("\"{value}\"") }
-            }
-        };
-        if let Some(existing) = kv.iter_mut().find(|(k, _)| k == key) {
-            existing.1 = toml_value;
-        } else {
-            kv.push((key.clone(), toml_value));
-        }
-    }
-
-    let mut toml = String::new();
-    for (k, v) in &kv {
-        toml.push_str(&format!("{k} = {v}\n"));
-    }
-    toml
-}
-
-/// Create ~/.swactor/ and write node.toml on the target machine.
-fn write_remote_config(machine: &MachineConfig, toml_content: &str) -> Result<(), String> {
-    // Use a heredoc with a unique delimiter to avoid shell expansion
-    let cmd = format!(
-        "mkdir -p ~/.swactor/identity ~/.swactor/data ~/.swactor/auth && cat > ~/.swactor/node.toml << 'SWACTOR_TOML_EOF'\n{toml_content}SWACTOR_TOML_EOF"
-    );
-
-    let status = if machine.local {
-        Command::new("sh")
-            .arg("-c")
-            .arg(&cmd)
-            .status()
-            .map_err(|e| format!("failed to write config: {e}"))?
-    } else {
-        Command::new("ssh")
-            .arg(&machine.ssh)
-            .arg(&cmd)
-            .status()
-            .map_err(|e| format!("ssh failed: {e}"))?
-    };
-
-    if !status.success() {
-        return Err(format!("writing node.toml on {} failed", machine.name));
-    }
-    Ok(())
-}
-
-/// Copy the musl binary to /tmp/swactor-deploy on the target machine.
-fn transfer_binary(machine: &MachineConfig, binary_path: &Path) -> Result<(), String> {
-    if machine.local {
-        std::fs::copy(binary_path, "/tmp/swactor-deploy")
-            .map_err(|e| format!("copy binary failed: {e}"))?;
-        #[cfg(unix)]
-        {
-            use std::os::unix::fs::PermissionsExt;
-            std::fs::set_permissions("/tmp/swactor-deploy", std::fs::Permissions::from_mode(0o755))
-                .map_err(|e| format!("chmod failed: {e}"))?;
-        }
-    } else {
-        let status = Command::new("scp")
-            .arg(binary_path.as_os_str())
-            .arg(format!("{}:/tmp/swactor-deploy", machine.ssh))
-            .status()
-            .map_err(|e| format!("scp failed: {e}"))?;
-        if !status.success() {
-            return Err(format!("scp to {} failed", machine.name));
-        }
-    }
-    Ok(())
-}
-
-/// Deploy to a single machine via native install (no Docker).
-fn native_deploy_to_machine(machine: &MachineConfig, defaults: &DeployDefaults, binary_path: &Path) {
-    println!("  Deploying to {}...", machine.name);
-
-    // Step 1: Resolve remote $HOME
-    let home_dir = resolve_remote_home(machine).unwrap_or_else(|e| {
-        eprintln!("    Error resolving HOME on {}: {e}", machine.name);
-        std::process::exit(1);
-    });
-    println!("    home: {home_dir}");
-
-    // Step 2: Transfer binary
-    println!("    transferring binary...");
-    if let Err(e) = transfer_binary(machine, binary_path) {
-        eprintln!("    Error: {e}");
-        std::process::exit(1);
-    }
-
-    // Step 3: Generate and write config
-    let toml_content = generate_node_toml(machine, defaults, &home_dir);
-    println!("    writing node.toml...");
-    if let Err(e) = write_remote_config(machine, &toml_content) {
-        eprintln!("    Error: {e}");
-        std::process::exit(1);
-    }
-
-    // Step 4: Write empty peers.json if it doesn't exist
-    let peers_cmd = format!(
-        r#"test -f {home_dir}/.swactor/peers.json || echo '{{"version":1,"peers":[]}}' > {home_dir}/.swactor/peers.json"#
-    );
-    let _ = if machine.local {
-        Command::new("sh").arg("-c").arg(&peers_cmd).status()
-    } else {
-        ssh_cmd(machine, &peers_cmd).status()
-    };
-
-    // Step 5: Run `swactor install` on the target
-    println!("    running swactor install...");
-    let install_cmd = "/tmp/swactor-deploy install";
-    let status = if machine.local {
-        Command::new("sh")
-            .arg("-c")
-            .arg(install_cmd)
-            .status()
-            .unwrap_or_else(|e| {
-                eprintln!("    Failed to run install on {}: {e}", machine.name);
-                std::process::exit(1);
-            })
-    } else {
-        ssh_cmd(machine, install_cmd)
-            .status()
-            .unwrap_or_else(|e| {
-                eprintln!("    Failed to run install on {}: {e}", machine.name);
-                std::process::exit(1);
-            })
-    };
-    if !status.success() {
-        eprintln!("    Install failed on {}", machine.name);
-        std::process::exit(1);
-    }
-
-    // Step 6: Clean up
-    let cleanup_cmd = "rm -f /tmp/swactor-deploy";
-    let _ = if machine.local {
-        Command::new("sh").arg("-c").arg(cleanup_cmd).status()
-    } else {
-        ssh_cmd(machine, cleanup_cmd).status()
-    };
-
-    let port = machine.effective_port(defaults);
-    let relay_port = machine.effective_relay_port(defaults);
-    println!("  {} deployed (native, dashboard: {port}, relay: {relay_port})", machine.name);
-}
-
-pub fn run_native_deploy(
-    root: &Path,
-    config_path: &str,
-    skip_build: bool,
-    skip_verify: bool,
-    skip_peers: bool,
-) {
-    // Phase 1: Load config
-    println!("=== Phase 1: Loading config ===\n");
-    let config = load_deploy_config(root, config_path);
-    println!("  Loaded {} machine(s): {}", config.machines.len(),
-        config.machines.iter().map(|m| m.name.as_str()).collect::<Vec<_>>().join(", "));
-    println!();
-
-    // Phase 2: Build binary
-    let binary_path = if !skip_build {
-        println!("=== Phase 2: Building binary ===\n");
-        let p = build_binary(root);
-        println!("  Binary: {}", p.display());
-        println!();
-        p
-    } else {
-        println!("=== Phase 2: Skipping build ===\n");
-        let p = root.join("target/x86_64-unknown-linux-musl/release/swactor");
-        if !p.exists() {
-            eprintln!("Warning: --skip-build but {} does not exist", p.display());
-            eprintln!("  Run without --skip-build first, or ensure the binary exists.\n");
-        }
-        p
-    };
-
-    // Phase 3: Deploy to each machine
-    println!("=== Phase 3: Deploying to machines ===\n");
-    for machine in &config.machines {
-        native_deploy_to_machine(machine, &config.defaults, &binary_path);
-    }
-    println!();
-
-    // Phase 4: Health check
-    if !skip_verify {
-        println!("=== Phase 4: Health check ===\n");
-        for machine in &config.machines {
-            health_check(machine, &config.defaults);
-        }
-        println!();
-    }
-
-    // Phase 5: Peer introduction + convergence
-    if !skip_verify && !skip_peers && config.defaults.introduce_peers {
-        println!("=== Phase 5: Peer introduction ===\n");
-        let (node_info, seed_index) = introduce_peers(&config.machines, &config.defaults);
-
-        println!("\n=== Phase 5b: Waiting for convergence ===\n");
-        wait_for_cluster_convergence(&config.machines, &config.defaults, &node_info, seed_index);
-        println!();
-    }
-
-    // Phase 6: Report
-    println!("=== Phase 6: Cluster status ===\n");
-    print_cluster_status(&config.machines, &config.defaults);
-}
-
-fn print_cluster_status(machines: &[MachineConfig], defaults: &DeployDefaults) {
-    println!("  {:<12} {:>5} {:>7} {:>5} {:>5}",
-        "NAME", "ALIVE", "ROUTING", "DIR", "CACHE");
-    println!("  {}", "-".repeat(45));
-
-    for machine in machines {
-        match machine_curl_get(machine, defaults, "/api/distribution") {
-            Some(body) => {
-                if let Ok(snap) = serde_json::from_str::<serde_json::Value>(&body) {
-                    let alive = snap.get("alive_count").and_then(|v| v.as_u64()).unwrap_or(0);
-                    let routing = snap.get("routing_table_size").and_then(|v| v.as_u64()).unwrap_or(0);
-                    let dir = snap.get("directory_entry_count").and_then(|v| v.as_u64()).unwrap_or(0);
-                    let cache = snap.get("cache_size").and_then(|v| v.as_u64()).unwrap_or(0);
-
-                    println!("  {:<12} {:>5} {:>7} {:>5} {:>5}",
-                        machine.name, alive, routing, dir, cache);
-                } else {
-                    println!("  {:<12} -- invalid JSON --", machine.name);
-                }
-            }
-            None => {
-                println!("  {:<12} -- unreachable --", machine.name);
-            }
-        }
-    }
-    println!();
-}
diff --git a/xtask/src/main.rs b/xtask/src/main.rs
index 6533dd2..b9b3c70 100644
--- a/xtask/src/main.rs
+++ b/xtask/src/main.rs
@@ -1,22 +1,7 @@
-use std::path::{Path, PathBuf};
 use std::process::Command;
 use std::time::Instant;
 
 use clap::{Parser, Subcommand};
-use serde::Deserialize;
-
-// ── Signal handling ─────────────────────────────────────────────────
-
-/// Ignore SIGINT in this process so the child handles Ctrl-C.
-/// Without this, xtask dies immediately on Ctrl-C and the shell
-/// shows a prompt before the child's shutdown messages finish.
-#[cfg(unix)]
-fn ignore_sigint() {
-    unsafe { libc::signal(libc::SIGINT, libc::SIG_IGN); }
-}
-
-#[cfg(not(unix))]
-fn ignore_sigint() {}
 
 // ── CLI ─────────────────────────────────────────────────────────────
 
@@ -24,115 +9,32 @@ fn ignore_sigint() {}
 #[command(name = "xtask", about = "Development task runner")]
 struct Cli {
     #[command(subcommand)]
-    command: Cmd,
+    command: Option<Cmd>,
+
+    /// (Legacy) Test group to run directly without subcommand
+    #[arg(hide = true)]
+    group: Option<String>,
+
+    /// Show all groups and the cargo commands they run
+    #[arg(long)]
+    list: bool,
 }
 
 #[derive(Subcommand)]
 enum Cmd {
-    /// Run test groups
-    Test {
-        /// Test group to run (core, distribution, cluster-sims, integrated, kani, stateright, essential, all)
-        group: Option<String>,
-
-        /// Show all groups and the cargo commands they run
-        #[arg(long)]
-        list: bool,
-    },
-
-    /// Start a datastore node
-    #[command(trailing_var_arg = true)]
+    /// Run a local swactor node with datastore + distribution on localhost
     Node {
-        /// Port for the node
-        #[arg(long)]
-        port: Option<u16>,
+        /// Dashboard HTTP port
+        #[arg(long, default_value = "9090")]
+        dashboard_port: u16,
 
-        /// Storage path
-        #[arg(long)]
-        storage_path: Option<String>,
-
-        /// Enable auth (bare --auth → true, --auth=false → false)
-        #[arg(long, num_args = 0..=1, default_missing_value = "true")]
-        auth: Option<bool>,
-
-        /// Auth directory
-        #[arg(long)]
-        auth_dir: Option<String>,
-
-        /// Extra arguments forwarded to the underlying binary
-        #[arg(allow_hyphen_values = true)]
-        extra: Vec<String>,
-    },
-
-    /// Build the crypto WASM module
-    Wasm,
-
-    /// Run a datastore CLI command
-    #[command(trailing_var_arg = true)]
-    Cli {
-        /// Node URL
-        #[arg(long)]
-        url: Option<String>,
-
-        /// Path to key file
-        #[arg(long)]
-        key: Option<String>,
-
-        /// Extra arguments forwarded to the underlying binary
-        #[arg(allow_hyphen_values = true)]
-        extra: Vec<String>,
+        /// Pass extra args to the swactor binary
+        #[arg(trailing_var_arg = true, allow_hyphen_values = true)]
+        args: Vec<String>,
     },
 }
 
-// ── Config file ─────────────────────────────────────────────────────
-
-#[derive(Deserialize, Default)]
-struct Config {
-    #[serde(default)]
-    node: NodeConfig,
-    #[serde(default)]
-    cli: CliConfig,
-}
-
-#[derive(Deserialize, Default)]
-struct NodeConfig {
-    port: Option<u16>,
-    storage_path: Option<String>,
-    auth: Option<bool>,
-    auth_dir: Option<String>,
-}
-
-#[derive(Deserialize, Default)]
-struct CliConfig {
-    url: Option<String>,
-    key: Option<String>,
-}
-
-fn load_config(root: &Path) -> Config {
-    let path = root.join("xtask/config.toml");
-    match std::fs::read_to_string(&path) {
-        Ok(content) => toml::from_str(&content).unwrap_or_else(|e| {
-            eprintln!("Warning: failed to parse {}: {e}", path.display());
-            Config::default()
-        }),
-        Err(_) => Config::default(),
-    }
-}
-
-// ── Workspace root ──────────────────────────────────────────────────
-
-fn workspace_root() -> PathBuf {
-    let mut dir = std::env::current_dir().expect("cannot determine current directory");
-    loop {
-        if dir.join("Cargo.toml").exists() && dir.join("xtask").is_dir() {
-            return dir;
-        }
-        if !dir.pop() {
-            panic!("could not find workspace root (Cargo.toml + xtask/ dir)");
-        }
-    }
-}
-
-// ── Test infrastructure (unchanged) ─────────────────────────────────
+// ── Test infrastructure ─────────────────────────────────────────────
 
 struct TestStep {
     label: &'static str,
@@ -154,23 +56,8 @@ const CORE: Group = Group {
     }],
 };
 
-const DISTRIBUTION: Group = Group {
-    name: "distribution",
-    description: "Distribution protocol + datastore",
-    steps: &[
-        TestStep {
-            label: "distribution protocol",
-            args: &["test", "-p", "distribution"],
-        },
-        TestStep {
-            label: "datastore",
-            args: &["test", "-p", "swactor-datastore"],
-        },
-    ],
-};
-
-const CLUSTER_SIMS: Group = Group {
-    name: "cluster-sims",
+const SIMULATION: Group = Group {
+    name: "simulation",
     description: "Deterministic cluster simulations",
     steps: &[TestStep {
         label: "cluster simulations",
@@ -178,59 +65,36 @@ const CLUSTER_SIMS: Group = Group {
     }],
 };
 
-const KANI: Group = Group {
-    name: "kani",
-    description: "Kani formal verification proofs (requires cargo-kani)",
-    steps: &[TestStep {
-        label: "authz engine proofs",
-        args: &["kani", "-p", "swactor-datastore"],
-    }],
-};
-
-const STATERIGHT: Group = Group {
-    name: "stateright",
-    description: "Stateright model checking (gateway dispatch)",
-    steps: &[TestStep {
-        label: "gateway dispatch model check",
-        args: &["test", "-p", "swactor-datastore", "--test", "gateway_model_check"],
-    }],
-};
-
-const INTEGRATED: Group = Group {
-    name: "integrated",
-    description: "HTTP API + dashboard end-to-end tests",
+const FORMAL_VERIFICATION: Group = Group {
+    name: "formal-verification",
+    description: "Kani proofs + Stateright model checking",
     steps: &[
         TestStep {
-            label: "datastore integration (node features)",
+            label: "kani proofs",
+            args: &["kani", "-p", "swactor-datastore"],
+        },
+        TestStep {
+            label: "gateway dispatch model check",
             args: &[
                 "test",
                 "-p",
                 "swactor-datastore",
-                "--features",
-                "node",
                 "--test",
-                "api_integration_test",
-                "--test",
-                "dashboard_integration_test",
+                "gateway_model_check",
             ],
         },
-        TestStep {
-            label: "runtime dashboard",
-            args: &["test", "-p", "runtime-dashboard"],
-        },
     ],
 };
 
+const GROUPS: &[&Group] = &[&CORE, &SIMULATION, &FORMAL_VERIFICATION];
+
 fn groups_for(name: &str) -> Option<Vec<&'static Group>> {
     match name {
         "core" => Some(vec![&CORE]),
-        "distribution" => Some(vec![&DISTRIBUTION]),
-        "cluster-sims" => Some(vec![&CLUSTER_SIMS]),
-        "integrated" => Some(vec![&INTEGRATED]),
-        "kani" => Some(vec![&KANI]),
-        "stateright" => Some(vec![&STATERIGHT]),
-        "essential" => Some(vec![&CORE, &DISTRIBUTION, &INTEGRATED]),
-        "all" => Some(vec![&CORE, &DISTRIBUTION, &CLUSTER_SIMS, &INTEGRATED]),
+        "simulation" => Some(vec![&SIMULATION]),
+        "formal-verification" => Some(vec![&FORMAL_VERIFICATION]),
+        "essential" => Some(vec![&CORE, &SIMULATION]),
+        "all" => Some(vec![&CORE, &SIMULATION, &FORMAL_VERIFICATION]),
         _ => None,
     }
 }
@@ -240,9 +104,7 @@ fn run_step(group_name: &str, step: &TestStep) -> bool {
     println!("    cargo {}", step.args.join(" "));
     println!();
 
-    let status = Command::new("cargo")
-        .args(step.args)
-        .status();
+    let status = Command::new("cargo").args(step.args).status();
 
     match status {
         Ok(s) => s.success(),
@@ -256,67 +118,97 @@ fn run_step(group_name: &str, step: &TestStep) -> bool {
 fn print_usage() {
     println!(
         "\
-USAGE: cargo xtask test <GROUP>
+USAGE: cargo xtask <COMMAND|GROUP>
 
-GROUPS:
-  core          Actor runtime, message delivery, property tests
-  distribution  Distribution protocol + datastore
-  cluster-sims  Deterministic cluster simulations
-  integrated    HTTP API + dashboard end-to-end tests
-  kani          Kani formal verification proofs (requires cargo-kani)
-  stateright    Stateright model checking (gateway dispatch)
-  essential     core + distribution + integrated (merge gate)
-  all           Every test group
+COMMANDS:
+  node                 Run a local swactor node (datastore + distribution, localhost)
+
+TEST GROUPS:
+  core                 Actor runtime, message delivery, property tests
+  simulation           Deterministic cluster simulations
+  formal-verification  Kani proofs + Stateright model checking
+  essential            core + simulation
+  all                  Every test group
 
 FLAGS:
-  --list        Show all groups and the cargo commands they run"
+  --list               Show all groups and the cargo commands they run"
     );
 }
 
 fn print_list() {
-    let all_groups: &[(&[&str], &Group)] = &[
-        (&[], &CORE),
-        (&[], &DISTRIBUTION),
-        (&[], &CLUSTER_SIMS),
-        (&[], &INTEGRATED),
-        (&[], &KANI),
-        (&[], &STATERIGHT),
-    ];
-
     println!("Available test groups:\n");
 
-    for &(_, group) in all_groups {
-        println!("  {:<14}{}", group.name, group.description);
+    for group in GROUPS {
+        println!("  {:<22}{}", group.name, group.description);
         for step in group.steps {
-            println!("                → cargo {}", step.args.join(" "));
+            println!("                        → cargo {}", step.args.join(" "));
         }
         println!();
     }
 
-    println!("  {:<14}core + distribution + integrated (merge gate)", "essential");
-    println!("  {:<14}Every test group", "all");
+    println!("  {:<22}core + simulation", "essential");
+    println!("  {:<22}Every test group", "all");
+}
+
+// ── Node runner ─────────────────────────────────────────────────────
+
+fn run_node(dashboard_port: u16, extra_args: &[String]) {
+    // Build the node binary first
+    eprintln!("Building swactor node...");
+    let build = Command::new("cargo")
+        .args(["build", "-p", "node"])
+        .status();
+
+    match build {
+        Ok(s) if s.success() => {}
+        Ok(s) => {
+            eprintln!("Build failed");
+            std::process::exit(s.code().unwrap_or(1));
+        }
+        Err(e) => {
+            eprintln!("Failed to execute cargo build: {e}");
+            std::process::exit(1);
+        }
+    }
+
+    // Use a temp directory for identity/auth so we don't pollute the repo
+    let tmp = std::env::temp_dir().join("swactor-dev-node");
+    std::fs::create_dir_all(&tmp).expect("failed to create temp dir");
+
+    let identity_dir = tmp.join("identity");
+    let auth_dir = tmp.join("auth");
+
+    eprintln!();
+
+    let mut cmd = Command::new("target/debug/swactor");
+    cmd.args([
+        "--transport", "iroh",
+        "--dashboard-port", &dashboard_port.to_string(),
+        "--identity-dir", &identity_dir.to_string_lossy(),
+        "--auth-dir", &auth_dir.to_string_lossy(),
+        "--no-relay",
+    ]);
+    // Don't pass --config so it doesn't touch ~/.swactor
+    cmd.env("HOME", tmp.to_string_lossy().as_ref());
+    cmd.args(extra_args);
+
+    let status = cmd.status();
+    match status {
+        Ok(s) => std::process::exit(s.code().unwrap_or(0)),
+        Err(e) => {
+            eprintln!("Failed to execute swactor: {e}");
+            std::process::exit(1);
+        }
+    }
 }
 
 // ── Dispatch ────────────────────────────────────────────────────────
 
-fn run_test(group: Option<String>, list: bool) {
-    if list {
-        print_list();
-        return;
-    }
-
-    let group_name = match group {
+fn run_test_groups(group_name: &str) {
+    let groups = match groups_for(group_name) {
         Some(g) => g,
         None => {
-            print_usage();
-            std::process::exit(1);
-        }
-    };
-
-    let groups = match groups_for(&group_name) {
-        Some(g) => g,
-        None => {
-            eprintln!("Unknown test group: {group_name}\n");
+            eprintln!("Unknown command or test group: {group_name}\n");
             print_usage();
             std::process::exit(1);
         }
@@ -349,200 +241,28 @@ fn run_test(group: Option<String>, list: bool) {
     );
 }
 
-fn run_node(
-    port: Option<u16>,
-    storage_path: Option<String>,
-    auth: Option<bool>,
-    auth_dir: Option<String>,
-    extra: Vec<String>,
-    cfg: &NodeConfig,
-) {
-    ignore_sigint();
-    let port = port.or(cfg.port).unwrap_or(9091);
-    let storage_path = storage_path
-        .or_else(|| cfg.storage_path.clone())
-        .unwrap_or_else(|| "./datastore".into());
-    let auth_enabled = auth.or(cfg.auth).unwrap_or(true);
-    let auth_dir = auth_dir
-        .or_else(|| cfg.auth_dir.clone())
-        .unwrap_or_else(|| "./auth".into());
-
-    // Build first, then run the binary directly (not via `cargo run`).
-    // This avoids cargo sitting in the middle of the process chain and
-    // dying from SIGINT before the node finishes its shutdown.
-    let build_status = Command::new("cargo")
-        .args([
-            "build", "-p", "swactor-datastore", "--features", "node",
-            "--bin", "swactor-store-node",
-        ])
-        .status();
-    match build_status {
-        Ok(s) if !s.success() => std::process::exit(s.code().unwrap_or(1)),
-        Err(e) => {
-            eprintln!("Failed to execute cargo build: {e}");
-            std::process::exit(1);
-        }
-        _ => {}
-    }
-
-    // Locate the built binary
-    let root = workspace_root();
-    let binary = root.join("target/debug/swactor-store-node");
-    if !binary.exists() {
-        eprintln!("Binary not found at {}", binary.display());
-        std::process::exit(1);
-    }
-
-    let mut bin_args: Vec<String> = vec![
-        "--port".into(),
-        port.to_string(),
-        "--storage-path".into(),
-        storage_path,
-    ];
-
-    if auth_enabled {
-        bin_args.push("--auth".into());
-        bin_args.push("--auth-dir".into());
-        bin_args.push(auth_dir);
-    }
-
-    bin_args.extend(extra);
-
-    let status = Command::new(&binary).args(&bin_args).status();
-    match status {
-        Ok(s) if !s.success() => std::process::exit(s.code().unwrap_or(1)),
-        Err(e) => {
-            eprintln!("Failed to execute {}: {e}", binary.display());
-            std::process::exit(1);
-        }
-        _ => {}
-    }
-}
-
-fn run_cli(
-    url: Option<String>,
-    key: Option<String>,
-    extra: Vec<String>,
-    cfg: &CliConfig,
-) {
-    ignore_sigint();
-    let url = url
-        .or_else(|| cfg.url.clone())
-        .unwrap_or_else(|| "http://localhost:9091".into());
-    let key = key.or_else(|| cfg.key.clone()).or_else(|| {
-        // Only default to owner.key.json if the file exists
-        let default_path = "./auth/owner.key.json";
-        if Path::new(default_path).exists() {
-            Some(default_path.into())
-        } else {
-            None
-        }
-    });
-
-    // Build first, then run the binary directly.
-    let build_status = Command::new("cargo")
-        .args([
-            "build", "-p", "swactor-datastore", "--features", "cli",
-            "--bin", "swactor-store",
-        ])
-        .status();
-    match build_status {
-        Ok(s) if !s.success() => std::process::exit(s.code().unwrap_or(1)),
-        Err(e) => {
-            eprintln!("Failed to execute cargo build: {e}");
-            std::process::exit(1);
-        }
-        _ => {}
-    }
-
-    let root = workspace_root();
-    let binary = root.join("target/debug/swactor-store");
-
-    let mut bin_args: Vec<String> = vec![
-        "--url".into(),
-        url,
-    ];
-
-    if let Some(key) = key {
-        bin_args.push("--key".into());
-        bin_args.push(key);
-    }
-
-    bin_args.extend(extra);
-
-    let status = Command::new(&binary).args(&bin_args).status();
-    match status {
-        Ok(s) if !s.success() => std::process::exit(s.code().unwrap_or(1)),
-        Err(e) => {
-            eprintln!("Failed to execute {}: {e}", binary.display());
-            std::process::exit(1);
-        }
-        _ => {}
-    }
-}
-
-fn run_wasm() {
-    let root = workspace_root();
-
-    println!("Building crypto WASM module...");
-    let status = Command::new("cargo")
-        .args([
-            "build",
-            "--target", "wasm32-unknown-unknown",
-            "--release",
-            "-p", "swactor-crypto-wasm",
-        ])
-        .status();
-
-    match status {
-        Ok(s) if !s.success() => {
-            eprintln!("WASM build failed");
-            std::process::exit(s.code().unwrap_or(1));
-        }
-        Err(e) => {
-            eprintln!("Failed to execute cargo build: {e}");
-            std::process::exit(1);
-        }
-        _ => {}
-    }
-
-    let src = root.join("target/wasm32-unknown-unknown/release/swactor_crypto_wasm.wasm");
-    let dst = root.join("crates/datastore/src/crypto_wasm.wasm");
-
-    std::fs::copy(&src, &dst).unwrap_or_else(|e| {
-        eprintln!("Failed to copy {} → {}: {e}", src.display(), dst.display());
-        std::process::exit(1);
-    });
-
-    let size = std::fs::metadata(&dst).map(|m| m.len()).unwrap_or(0);
-    println!("Copied {} ({} bytes)", dst.display(), size);
-
-    // Try wasm-strip if available (optional optimization)
-    if Command::new("wasm-strip").arg(&dst).status().is_ok() {
-        let stripped_size = std::fs::metadata(&dst).map(|m| m.len()).unwrap_or(0);
-        println!("Stripped to {} bytes", stripped_size);
-    }
-}
-
 fn main() {
     let cli = Cli::parse();
-    let root = workspace_root();
-    let config = load_config(&root);
 
-    match cli.command {
-        Cmd::Test { group, list } => run_test(group, list),
-        Cmd::Wasm => run_wasm(),
-        Cmd::Node {
-            port,
-            storage_path,
-            auth,
-            auth_dir,
-            extra,
-        } => run_node(port, storage_path, auth, auth_dir, extra, &config.node),
-        Cmd::Cli {
-            url,
-            key,
-            extra,
-        } => run_cli(url, key, extra, &config.cli),
+    if cli.list {
+        print_list();
+        return;
+    }
+
+    // Explicit subcommand takes priority
+    if let Some(cmd) = cli.command {
+        match cmd {
+            Cmd::Node { dashboard_port, args } => run_node(dashboard_port, &args),
+        }
+        return;
+    }
+
+    // Fall back to positional group name (backward compat: `cargo xtask essential`)
+    match cli.group {
+        Some(name) => run_test_groups(&name),
+        None => {
+            print_usage();
+            std::process::exit(1);
+        }
     }
 }
diff --git a/xtask/src/sim_cluster.rs b/xtask/src/sim_cluster.rs
deleted file mode 100644
index 11cad7e..0000000
--- a/xtask/src/sim_cluster.rs
+++ /dev/null
@@ -1,701 +0,0 @@
-//! sim-cluster: multi-process cluster tests using iroh transport.
-//!
-//! Spawns 5 swactor nodes with iroh transport connected through a local
-//! relay server, then runs the same scenarios as `tests/docker/tests/cluster.rs`
-//! without Docker.
-
-use std::fs;
-use std::net::Ipv4Addr;
-use std::path::{Path, PathBuf};
-use std::process::{Child, Command, Stdio};
-use std::thread;
-use std::time::{Duration, Instant};
-
-use crate::workspace_root;
-
-// ── Constants ───────────────────────────────────────────────────────────
-
-const NODE_COUNT: usize = 5;
-const ACTORS_PER_NODE: usize = 2;
-const TIMEOUT: Duration = Duration::from_secs(30);
-
-/// Dashboard HTTP ports — high ports to avoid conflicts.
-fn dashboard_port(index: usize) -> u16 {
-    19091 + index as u16
-}
-
-fn all_dashboard_ports(node_count: usize) -> Vec<u16> {
-    (0..node_count).map(dashboard_port).collect()
-}
-
-// ── Local relay server ──────────────────────────────────────────────────
-
-/// Owns a tokio runtime + iroh-relay server. RAII cleanup on drop.
-struct RelayServer {
-    _server: iroh_relay::server::Server,
-    _rt: tokio::runtime::Runtime,
-    port: u16,
-}
-
-impl RelayServer {
-    fn start() -> Self {
-        let rt = tokio::runtime::Builder::new_multi_thread()
-            .worker_threads(1)
-            .enable_all()
-            .build()
-            .expect("failed to create tokio runtime for relay");
-
-        let server = rt.block_on(async {
-            iroh_relay::server::Server::spawn(iroh_relay::server::ServerConfig::<(), ()> {
-                relay: Some(iroh_relay::server::RelayConfig {
-                    http_bind_addr: (Ipv4Addr::LOCALHOST, 0).into(),
-                    tls: None,
-                    limits: Default::default(),
-                    key_cache_capacity: Some(256),
-                    access: iroh_relay::server::AccessConfig::Everyone,
-                }),
-                quic: None,
-                metrics_addr: None,
-            })
-            .await
-        })
-        .expect("failed to spawn relay server");
-
-        let addr = server.http_addr().expect("relay has no HTTP address");
-        let port = addr.port();
-
-        RelayServer {
-            _server: server,
-            _rt: rt,
-            port,
-        }
-    }
-}
-
-// ── Build ───────────────────────────────────────────────────────────────
-
-fn build_swactor(root: &Path) -> PathBuf {
-    let status = Command::new("cargo")
-        .args(["build", "-p", "swactor-node"])
-        .current_dir(root)
-        .status()
-        .expect("failed to run cargo build");
-    if !status.success() {
-        eprintln!("cargo build failed");
-        std::process::exit(1);
-    }
-
-    let binary = root.join("target/debug/swactor");
-    if !binary.exists() {
-        eprintln!("binary not found at {}", binary.display());
-        std::process::exit(1);
-    }
-    binary
-}
-
-// ── Config generation ───────────────────────────────────────────────────
-
-fn write_node_config(
-    dir: &Path,
-    index: usize,
-    relay_port: u16,
-    seed_public_key: Option<&str>,
-) -> PathBuf {
-    let identity_dir = dir.join("identity");
-    fs::create_dir_all(&identity_dir).expect("failed to create identity dir");
-
-    let config_path = dir.join("node.toml");
-    let dashboard = dashboard_port(index);
-
-    let mut config = format!(
-        r#"dashboard_port = {dashboard}
-actors = {ACTORS_PER_NODE}
-no_datastore = true
-identity_dir = "{identity}"
-relay = false
-relay_port = {relay_port}
-relay_hosts = ["127.0.0.1"]
-"#,
-        identity = identity_dir.display(),
-    );
-
-    if let Some(seed_id) = seed_public_key {
-        config.push_str(&format!("seed_node_id = \"{seed_id}\"\n"));
-    }
-
-    fs::write(&config_path, &config).expect("failed to write node config");
-    config_path
-}
-
-// ── Seed key discovery ──────────────────────────────────────────────────
-
-fn read_seed_public_key(run_dir: &Path) -> String {
-    let key_path = run_dir.join("node-0/identity/node.key.json");
-    let deadline = Instant::now() + Duration::from_secs(10);
-
-    loop {
-        if Instant::now() > deadline {
-            panic!(
-                "timed out waiting for seed key file: {}",
-                key_path.display()
-            );
-        }
-
-        if key_path.exists() {
-            if let Ok(data) = fs::read_to_string(&key_path) {
-                if let Ok(json) = serde_json::from_str::<serde_json::Value>(&data) {
-                    if let Some(pk) = json.get("public_key").and_then(|v| v.as_str()) {
-                        return pk.to_string();
-                    }
-                }
-            }
-        }
-
-        thread::sleep(Duration::from_millis(100));
-    }
-}
-
-// ── Dashboard readiness ─────────────────────────────────────────────────
-
-fn wait_for_dashboard(port: u16, timeout: Duration) {
-    let start = Instant::now();
-    loop {
-        if start.elapsed() > timeout {
-            panic!("timed out waiting for dashboard on port {port}");
-        }
-        if poll_distribution(port).is_some() {
-            return;
-        }
-        thread::sleep(Duration::from_millis(200));
-    }
-}
-
-// ── Cluster handle (RAII) ───────────────────────────────────────────────
-
-struct SimCluster {
-    children: Vec<(usize, Child)>,
-    run_dir: PathBuf,
-    binary: PathBuf,
-    relay: RelayServer,
-    seed_public_key: String,
-    _node_count: usize,
-}
-
-impl SimCluster {
-    fn spawn(binary: &Path, run_dir: &Path, node_count: usize) -> Self {
-        fs::create_dir_all(run_dir).expect("failed to create run dir");
-
-        // Phase 0: start relay
-        let relay = RelayServer::start();
-        println!(
-            "    relay at http://127.0.0.1:{}/ (port {})",
-            relay.port, relay.port
-        );
-
-        let mut children = Vec::new();
-
-        // Phase 1: spawn seed node (index 0) — no seed_node_id
-        let child = spawn_node(binary, run_dir, 0, relay.port, None);
-        children.push((0, child));
-
-        // Phase 2: wait for seed's key file
-        let seed_public_key = read_seed_public_key(run_dir);
-        println!("    seed key: {seed_public_key}");
-
-        // Wait for seed's dashboard to be ready before spawning joiners
-        wait_for_dashboard(dashboard_port(0), Duration::from_secs(15));
-
-        // Phase 3: spawn remaining nodes with seed_node_id
-        for i in 1..node_count {
-            let child = spawn_node(binary, run_dir, i, relay.port, Some(&seed_public_key));
-            children.push((i, child));
-        }
-
-        SimCluster {
-            children,
-            run_dir: run_dir.to_path_buf(),
-            binary: binary.to_path_buf(),
-            relay,
-            seed_public_key,
-            _node_count: node_count,
-        }
-    }
-
-    fn kill_node(&mut self, index: usize) {
-        if let Some(pos) = self.children.iter().position(|(i, _)| *i == index) {
-            let (_, mut child) = self.children.remove(pos);
-            let _ = signal_term(child.id());
-            let _ = child.wait();
-        }
-    }
-
-    fn restart_node(&mut self, index: usize) {
-        // Non-seed nodes need the seed's public key; the seed itself doesn't
-        let seed_id = if index != 0 {
-            Some(self.seed_public_key.as_str())
-        } else {
-            None
-        };
-        let child = spawn_node(
-            &self.binary,
-            &self.run_dir,
-            index,
-            self.relay.port,
-            seed_id,
-        );
-        self.children.push((index, child));
-    }
-}
-
-impl Drop for SimCluster {
-    fn drop(&mut self) {
-        for (_, child) in &self.children {
-            let _ = signal_term(child.id());
-        }
-        for (_, child) in &mut self.children {
-            let _ = child.wait();
-        }
-        // relay drops automatically via RelayServer Drop
-        // NOTE: leaving run_dir for debugging; uncomment below for production
-        // let _ = fs::remove_dir_all(&self.run_dir);
-    }
-}
-
-fn spawn_node(
-    binary: &Path,
-    run_dir: &Path,
-    index: usize,
-    relay_port: u16,
-    seed_public_key: Option<&str>,
-) -> Child {
-    let node_dir = run_dir.join(format!("node-{index}"));
-    let config_path = write_node_config(&node_dir, index, relay_port, seed_public_key);
-
-    let log_path = node_dir.join("stderr.log");
-    let log_file = fs::File::create(&log_path)
-        .unwrap_or_else(|e| panic!("failed to create log for node {index}: {e}"));
-
-    Command::new(binary)
-        .args(["--config", &config_path.to_string_lossy()])
-        .stdout(Stdio::null())
-        .stderr(Stdio::from(log_file))
-        .spawn()
-        .unwrap_or_else(|e| panic!("failed to spawn node {index}: {e}"))
-}
-
-fn signal_term(pid: u32) -> std::io::Result<()> {
-    unsafe { libc::kill(pid as i32, libc::SIGTERM) };
-    Ok(())
-}
-
-// ── HTTP polling (decoupled from distribution crate) ────────────────────
-
-fn poll_distribution(port: u16) -> Option<serde_json::Value> {
-    let url = format!("http://127.0.0.1:{port}/api/distribution");
-    let client = reqwest::blocking::Client::builder()
-        .timeout(Duration::from_secs(2))
-        .build()
-        .ok()?;
-    let resp = client.get(&url).send().ok()?;
-    if !resp.status().is_success() {
-        return None;
-    }
-    let text = resp.text().ok()?;
-    if text == "{}" {
-        return None;
-    }
-    serde_json::from_str(&text).ok()
-}
-
-fn get_usize(val: &serde_json::Value, key: &str) -> Option<usize> {
-    val.get(key).and_then(|v| v.as_u64()).map(|n| n as usize)
-}
-
-fn wait_for_convergence(
-    ports: &[u16],
-    expected_alive: usize,
-    timeout: Duration,
-) -> Result<Duration, String> {
-    let start = Instant::now();
-    loop {
-        if start.elapsed() > timeout {
-            let mut diag = String::from("Convergence timeout. Last seen: ");
-            for &port in ports {
-                match poll_distribution(port) {
-                    Some(snap) => {
-                        let alive = get_usize(&snap, "alive_count").unwrap_or(0);
-                        diag.push_str(&format!("port {port}={alive}, "));
-                    }
-                    None => diag.push_str(&format!("port {port}=unreachable, ")),
-                }
-            }
-            return Err(diag);
-        }
-
-        let all_converged = ports.iter().all(|&port| {
-            poll_distribution(port)
-                .and_then(|snap| get_usize(&snap, "alive_count"))
-                .map(|alive| alive >= expected_alive)
-                .unwrap_or(false)
-        });
-
-        if all_converged {
-            return Ok(start.elapsed());
-        }
-
-        thread::sleep(Duration::from_secs(1));
-    }
-}
-
-fn wait_for_death_detection(
-    ports: &[u16],
-    max_alive: usize,
-    timeout: Duration,
-) -> Result<Duration, String> {
-    let start = Instant::now();
-    loop {
-        if start.elapsed() > timeout {
-            let mut diag = String::from("Death detection timeout. Last seen: ");
-            for &port in ports {
-                match poll_distribution(port) {
-                    Some(snap) => {
-                        let alive = get_usize(&snap, "alive_count").unwrap_or(0);
-                        diag.push_str(&format!("port {port}={alive} alive, "));
-                    }
-                    None => diag.push_str(&format!("port {port}=unreachable, ")),
-                }
-            }
-            return Err(diag);
-        }
-
-        let all_detected = ports.iter().all(|&port| {
-            poll_distribution(port)
-                .and_then(|snap| get_usize(&snap, "alive_count"))
-                .map(|alive| alive <= max_alive)
-                .unwrap_or(false)
-        });
-
-        if all_detected {
-            return Ok(start.elapsed());
-        }
-
-        thread::sleep(Duration::from_secs(1));
-    }
-}
-
-fn wait_for_dead_count(ports: &[u16], min_dead: usize, timeout: Duration) -> bool {
-    let start = Instant::now();
-    loop {
-        if start.elapsed() > timeout {
-            return false;
-        }
-
-        let any_sees_dead = ports.iter().any(|&port| {
-            poll_distribution(port)
-                .and_then(|snap| get_usize(&snap, "dead_count"))
-                .map(|dead| dead >= min_dead)
-                .unwrap_or(false)
-        });
-
-        if any_sees_dead {
-            return true;
-        }
-
-        thread::sleep(Duration::from_secs(1));
-    }
-}
-
-// ── Scenarios ───────────────────────────────────────────────────────────
-
-fn scenario_cluster_convergence(binary: &Path, base_dir: &Path) -> Result<(), String> {
-    let run_dir = base_dir.join("scenario-1");
-    let cluster = SimCluster::spawn(binary, &run_dir, NODE_COUNT);
-    let ports = all_dashboard_ports(NODE_COUNT);
-
-    // alive_count excludes self, so each node sees NODE_COUNT - 1 peers
-    let expected_alive = NODE_COUNT - 1;
-    let elapsed = wait_for_convergence(&ports, expected_alive, TIMEOUT)?;
-    println!("    converged in {:.1}s", elapsed.as_secs_f64());
-
-    // Verify each node's snapshot
-    for (i, &port) in ports.iter().enumerate() {
-        let snap = poll_distribution(port)
-            .ok_or_else(|| format!("node {i} (port {port}) unreachable after convergence"))?;
-        let alive = get_usize(&snap, "alive_count").unwrap_or(0);
-        let routing = get_usize(&snap, "routing_table_size").unwrap_or(0);
-        if alive < expected_alive {
-            return Err(format!("node {i} sees {alive} alive, expected >= {expected_alive}"));
-        }
-        if routing < NODE_COUNT - 1 {
-            return Err(format!(
-                "node {i} has routing_table_size {routing}, expected >= {}",
-                NODE_COUNT - 1
-            ));
-        }
-    }
-
-    drop(cluster);
-    Ok(())
-}
-
-fn scenario_node_death_detection(binary: &Path, base_dir: &Path) -> Result<(), String> {
-    let run_dir = base_dir.join("scenario-2");
-    let mut cluster = SimCluster::spawn(binary, &run_dir, NODE_COUNT);
-    let ports = all_dashboard_ports(NODE_COUNT);
-
-    let expected_alive = NODE_COUNT - 1;
-    wait_for_convergence(&ports, expected_alive, TIMEOUT)
-        .map_err(|e| format!("pre-kill convergence failed: {e}"))?;
-
-    // Kill node 2
-    cluster.kill_node(2);
-
-    // Survivors: all except index 2
-    let survivor_ports: Vec<u16> = (0..NODE_COUNT)
-        .filter(|&i| i != 2)
-        .map(dashboard_port)
-        .collect();
-
-    // Wait for alive count to drop (alive_count excludes self, so 5-node cluster
-    // sees 4 alive; after killing 1, survivors should see <= 3)
-    let elapsed = wait_for_death_detection(&survivor_ports, NODE_COUNT - 2, TIMEOUT)?;
-    println!("    detected in {:.1}s", elapsed.as_secs_f64());
-
-    // Poll for dead_count — SWIM transitions suspect→dead with a delay
-    let dead_detected = wait_for_dead_count(&survivor_ports, 1, TIMEOUT);
-    if !dead_detected {
-        return Err("no survivor detected a dead member".into());
-    }
-
-    drop(cluster);
-    Ok(())
-}
-
-fn scenario_killed_node_rejoins(binary: &Path, base_dir: &Path) -> Result<(), String> {
-    let run_dir = base_dir.join("scenario-3");
-    let mut cluster = SimCluster::spawn(binary, &run_dir, NODE_COUNT);
-    let ports = all_dashboard_ports(NODE_COUNT);
-
-    let expected_alive = NODE_COUNT - 1;
-    wait_for_convergence(&ports, expected_alive, TIMEOUT)
-        .map_err(|e| format!("pre-kill convergence failed: {e}"))?;
-
-    // Kill node 2
-    cluster.kill_node(2);
-
-    let survivor_ports: Vec<u16> = (0..NODE_COUNT)
-        .filter(|&i| i != 2)
-        .map(dashboard_port)
-        .collect();
-    wait_for_death_detection(&survivor_ports, NODE_COUNT - 2, TIMEOUT)
-        .map_err(|e| format!("death detection failed: {e}"))?;
-
-    // Restart node 2 — identity persists, so cluster recognizes it
-    cluster.restart_node(2);
-
-    let rejoined_port = dashboard_port(2);
-    let elapsed = wait_for_convergence(&[rejoined_port], 1, TIMEOUT)?;
-    println!("    rejoined in {:.1}s", elapsed.as_secs_f64());
-
-    let snap = poll_distribution(rejoined_port)
-        .ok_or("rejoined node unreachable")?;
-    let alive = get_usize(&snap, "alive_count").unwrap_or(0);
-    if alive < 1 {
-        return Err(format!("rejoined node sees {alive} alive, expected >= 1"));
-    }
-
-    drop(cluster);
-    Ok(())
-}
-
-fn scenario_actors_resolvable(binary: &Path, base_dir: &Path) -> Result<(), String> {
-    let run_dir = base_dir.join("scenario-4");
-    let cluster = SimCluster::spawn(binary, &run_dir, NODE_COUNT);
-    let ports = all_dashboard_ports(NODE_COUNT);
-
-    let expected_alive = NODE_COUNT - 1;
-    wait_for_convergence(&ports, expected_alive, TIMEOUT)
-        .map_err(|e| format!("convergence failed: {e}"))?;
-
-    let mut total_directory_entries = 0usize;
-
-    for (i, &port) in ports.iter().enumerate() {
-        let snap = poll_distribution(port)
-            .ok_or_else(|| format!("node {i} unreachable"))?;
-        let dir_count = get_usize(&snap, "directory_entry_count").unwrap_or(0);
-        if dir_count < ACTORS_PER_NODE {
-            return Err(format!(
-                "node {i} has {dir_count} directory entries, expected >= {ACTORS_PER_NODE}"
-            ));
-        }
-        total_directory_entries += dir_count;
-    }
-
-    let expected_total = NODE_COUNT * ACTORS_PER_NODE;
-    if total_directory_entries < expected_total {
-        return Err(format!(
-            "total directory entries {total_directory_entries}, expected >= {expected_total}"
-        ));
-    }
-    println!("    total: {total_directory_entries} directory entries");
-
-    drop(cluster);
-    Ok(())
-}
-
-// ── Interactive mode ─────────────────────────────────────────────────────
-
-pub fn run_interactive(node_count: usize) {
-    use std::sync::atomic::{AtomicBool, Ordering};
-    use std::sync::{Arc, Condvar, Mutex};
-
-    let root = workspace_root();
-
-    println!("=== sim-cluster: building swactor (iroh) ===");
-    let binary = build_swactor(&root);
-
-    let base_dir = root.join(".sim-cluster");
-    let _ = fs::remove_dir_all(&base_dir);
-
-    let run_dir = base_dir.join("interactive");
-    println!("=== sim-cluster: spawning {node_count} nodes ===");
-    let cluster = SimCluster::spawn(&binary, &run_dir, node_count);
-
-    let ports = all_dashboard_ports(node_count);
-
-    // Wait for all dashboards
-    println!("=== sim-cluster: waiting for dashboards ===");
-    for &port in &ports {
-        wait_for_dashboard(port, Duration::from_secs(30));
-    }
-
-    // Wait for convergence
-    println!("=== sim-cluster: waiting for convergence ===");
-    let expected_alive = node_count - 1;
-    let convergence = wait_for_convergence(&ports, expected_alive, TIMEOUT);
-
-    let converged_msg = match &convergence {
-        Ok(elapsed) => format!("{node_count} nodes, all converged in {:.1}s", elapsed.as_secs_f64()),
-        Err(e) => format!("{node_count} nodes, convergence issue: {e}"),
-    };
-
-    // Print summary
-    println!();
-    println!("=== sim-cluster ready ===");
-    println!("  relay:  http://127.0.0.1:{}/", cluster.relay.port);
-    for i in 0..node_count {
-        let port = dashboard_port(i);
-        let label = if i == 0 { "  (seed)" } else { "" };
-        println!("  node-{i}: http://127.0.0.1:{port}/{label}");
-    }
-    println!("  cluster: {converged_msg}");
-    println!();
-    println!("  Logs: .sim-cluster/interactive/node-N/stderr.log");
-    println!("  Press Ctrl-C to shut down.");
-
-    // Block on Ctrl-C
-    let shutdown = Arc::new((Mutex::new(false), Condvar::new()));
-    let shutdown2 = Arc::clone(&shutdown);
-    let flag = Arc::new(AtomicBool::new(false));
-    let flag2 = Arc::clone(&flag);
-
-    unsafe {
-        let shutdown_ptr = Arc::into_raw(shutdown2) as usize;
-        let flag_ptr = Arc::into_raw(flag2) as usize;
-        libc::signal(libc::SIGINT, handler as *const () as libc::sighandler_t);
-        SHUTDOWN_PTR.store(shutdown_ptr, Ordering::SeqCst);
-        FLAG_PTR.store(flag_ptr, Ordering::SeqCst);
-    }
-
-    let (lock, cvar) = &*shutdown;
-    let mut stopped = lock.lock().unwrap();
-    while !*stopped {
-        stopped = cvar.wait(stopped).unwrap();
-    }
-
-    println!("\n=== sim-cluster: shutting down ===");
-    drop(cluster);
-    println!("=== sim-cluster: stopped ===");
-}
-
-// Signal handler support for run_interactive
-use std::sync::atomic::{AtomicUsize, Ordering};
-
-static SHUTDOWN_PTR: AtomicUsize = AtomicUsize::new(0);
-static FLAG_PTR: AtomicUsize = AtomicUsize::new(0);
-
-extern "C" fn handler(_sig: libc::c_int) {
-    use std::sync::atomic::AtomicBool;
-    use std::sync::{Condvar, Mutex};
-
-    let flag_ptr = FLAG_PTR.load(Ordering::SeqCst);
-    if flag_ptr != 0 {
-        let flag = unsafe { &*(flag_ptr as *const AtomicBool) };
-        if flag.swap(true, Ordering::SeqCst) {
-            // Second Ctrl-C — force exit
-            std::process::exit(1);
-        }
-    }
-
-    let ptr = SHUTDOWN_PTR.load(Ordering::SeqCst);
-    if ptr != 0 {
-        let pair = unsafe { &*(ptr as *const (Mutex<bool>, Condvar)) };
-        if let Ok(mut stopped) = pair.0.lock() {
-            *stopped = true;
-            pair.1.notify_one();
-        }
-    }
-}
-
-// ── Entry point (test mode) ─────────────────────────────────────────────
-
-pub fn run() {
-    let root = workspace_root();
-    let overall_start = Instant::now();
-
-    println!("=== sim-cluster: building swactor (iroh) ===");
-    let binary = build_swactor(&root);
-
-    let base_dir = root.join(".sim-cluster");
-    // Clean any stale runs
-    let _ = fs::remove_dir_all(&base_dir);
-
-    let scenarios: &[(&str, fn(&Path, &Path) -> Result<(), String>)] = &[
-        ("cluster convergence", scenario_cluster_convergence),
-        ("node death detection", scenario_node_death_detection),
-        ("killed node rejoins", scenario_killed_node_rejoins),
-        ("actors resolvable", scenario_actors_resolvable),
-    ];
-
-    let total = scenarios.len();
-    let mut passed = 0usize;
-
-    for (i, (name, func)) in scenarios.iter().enumerate() {
-        println!(
-            "=== sim-cluster: scenario {}/{total} \u{2014} {name} ===",
-            i + 1
-        );
-        match func(&binary, &base_dir) {
-            Ok(()) => passed += 1,
-            Err(e) => {
-                let elapsed = overall_start.elapsed();
-                eprintln!("    FAILED: {e}");
-                eprintln!(
-                    "\n--- FAILED after {:.1}s ({passed}/{total} passed) ---",
-                    elapsed.as_secs_f64()
-                );
-                // Leave .sim-cluster for debugging
-                std::process::exit(1);
-            }
-        }
-    }
-
-    // Clean up base dir
-    let _ = fs::remove_dir_all(&base_dir);
-
-    let elapsed = overall_start.elapsed();
-    println!(
-        "\n--- All {total} scenario(s) passed in {:.1}s ---",
-        elapsed.as_secs_f64()
-    );
-}