diff --git a/.cargo/config.toml b/.cargo/config.toml
new file mode 100644
index 0000000..92e5956
--- /dev/null
+++ b/.cargo/config.toml
@@ -0,0 +1,16 @@
+# WIT_WORLD is consumed at COMPILE time by:
+#   - hyperlight_wasm_macro (proc-macro)         -> std::env::var_os("WIT_WORLD").unwrap()
+#   - hyperlight_wasm/build.rs                   -> rerun-if-env-changed=WIT_WORLD
+#   - hyperlight_wasm_runtime/build.rs           -> emits cfg(component) IFF WIT_WORLD is set
+#
+# Without it, hyperlight_wasm_runtime falls back to the legacy flatbuffer-based
+# host-function ABI, while hyperlight-wasm-sandbox (built with WIT_WORLD via the
+# proc-macro's host_bindgen!) uses the component-model ABI. Mixing the two yields
+# "GuestError: Host function vector parameter missing length" at sandbox start.
+#
+# `just wasm test` exports WIT_WORLD via its recipe, but bare `cargo` invocations
+# (e.g. from an IDE or a developer running `cargo test --manifest-path ...`)
+# would otherwise miss it. Cargo looks for `.cargo/config.toml` by walking up the
+# CWD tree, so we put it at the repo root to cover every workspace cargo call.
+[env]
+WIT_WORLD = { value = "src/wasm_sandbox/wit/sandbox-world.wasm", relative = true }
diff --git a/.copilot/skills/justfile-ci/SKILL.md b/.copilot/skills/justfile-ci/SKILL.md
index 38f6b28..d71069e 100644
--- a/.copilot/skills/justfile-ci/SKILL.md
+++ b/.copilot/skills/justfile-ci/SKILL.md
@@ -20,7 +20,6 @@ This repo uses a **hierarchical Justfile** structure with a matching **GitHub Ac
 Justfile (root)                    ← orchestrates everything
 ├── mod wasm 'src/wasm_sandbox/Justfile'
 ├── mod js 'src/javascript_sandbox/Justfile'
-├── mod nanvix 'src/nanvix_sandbox/Justfile'
 ├── mod python 'src/sdk/python/Justfile'
 └── mod examples_mod 'examples/Justfile'
 ```
diff --git a/.copilot/skills/justfile-ci/references/architecture.md b/.copilot/skills/justfile-ci/references/architecture.md
index 2f60e6e..e686e7b 100644
--- a/.copilot/skills/justfile-ci/references/architecture.md
+++ b/.copilot/skills/justfile-ci/references/architecture.md
@@ -4,7 +4,7 @@
 
 | Recipe | Delegates to | Purpose |
 |--------|-------------|---------|
-| `build` | `wasm::build`, `jss::build`, `nanvix::build`, `python::build` | Build everything |
+| `build` | `wasm::build`, `jss::build`, `python::build` | Build everything |
 | `test` | `test-rust`, `wasm::test`, `python::python-test` | All tests |
 | `test-rust` | (direct cargo) | Core crate unit + integration tests |
 | `lint` | `lint-rust`, `wasm::lint`, `js::lint`, `python::lint` | All linters |
@@ -21,8 +21,7 @@
 ci.yml
 ├── rust           — fmt-check-rust, lint-rust, test-rust
 ├── wasm-sandbox   — wasm build, lint, test, examples + python fmt-check/lint/build/examples/python-test/fuzz/benchmark/integration-examples
-├── javascript-sandbox — js build, lint, test, examples
-└── nanvix-sandbox — nanvix build (examples skipped pending upstream)
+└── javascript-sandbox — js build, lint, test, examples
 ```
 
 ## Subproject Justfile Responsibilities
@@ -39,10 +38,6 @@ ci.yml
 - Recipes: `build`, `test`, `examples`, `lint`
 - `examples` is a flat recipe listing all `cargo run` commands
 
-### nanvix (`src/nanvix_sandbox/Justfile`)
-- Standalone build, excluded from workspace
-- Recipes: `build`, `examples` (currently skipped)
-
 ### python (`src/sdk/python/Justfile`)
 - Manages `uv`, `maturin`, `ruff` tooling
 - Recipes: `build`, `fmt`, `fmt-check`, `lint`, `examples`, `python-test`, `python-fuzz`, `python-sandbox-benchmark`, `python-publish`
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5666acb..3cd079a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -87,6 +87,15 @@ jobs:
           sudo udevadm trigger --name-match=kvm
           sudo chmod 666 /dev/kvm
 
+      - name: Check WIT artifact is in sync with .wit source
+        # sandbox-world.wasm is the compiled WIT used by host_bindgen!. It
+        # is consumed by transitive deps (hyperlight-wasm-runtime) before
+        # our crate's build scripts run, so it must live in git. Detect any
+        # drift between the committed artifact and the .wit source.
+        run: |
+          just wasm guest-compile-wit
+          git diff --exit-code -- src/wasm_sandbox/wit/sandbox-world.wasm
+
       - name: Build
         run: just wasm build
 
@@ -411,26 +420,3 @@ jobs:
 
       - name: Run examples
         run: just js examples
-
-  nanvix-sandbox:
-    name: Nanvix Sandbox · build
-    runs-on: ubuntu-latest #current linux only
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
-
-      - uses: actions-rust-lang/setup-rust-toolchain@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7  # v1.16.0
-        with:
-          toolchain: nightly
-          rustflags: ""
-
-      - name: Install just
-        run: cargo install --locked just
-
-      - name: Build
-        run: just nanvix build
-
-      # NOTE: nanvix examples are skipped until hyperlight-nanvix updates to
-      # the new nanvix registry API (qjs/python3 are now separate packages).
-      # See: https://github.com/hyperlight-dev/hyperlight-nanvix
-      # - name: Run examples
-      #   run: just nanvix examples
diff --git a/.gitignore b/.gitignore
index d7b3fbb..8a9146e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,6 +2,11 @@ target/
 .venv/
 *.aot
 *.wasm
+# Exception: the compiled WIT artifact is checked in as a build input.
+# host_bindgen! reads this file *before* our build scripts can run (it is
+# consumed by transitive deps like hyperlight-wasm-runtime), so the file
+# must exist from `git clone` time. CI regenerates and diffs to catch drift.
+!src/wasm_sandbox/wit/sandbox-world.wasm
 __pycache__/
 *.so
 *.pyd
diff --git a/Cargo.toml b/Cargo.toml
index e1d715b..3c2c827 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -8,10 +8,6 @@ members = [
 	"src/sdk/python/hyperlight_js_backend",
 	"src/sdk/dotnet/ffi",
 ]
-# nanvix_sandbox requires nightly Rust (nanvix uses #![feature(never_type)])
-exclude = [
-	"src/nanvix_sandbox",
-]
 resolver = "2"
 
 [workspace.package]
diff --git a/Justfile b/Justfile
index b6294b3..bdad65f 100644
--- a/Justfile
+++ b/Justfile
@@ -2,7 +2,6 @@ set unstable := true
 
 mod wasm 'src/wasm_sandbox/Justfile'
 mod js 'src/javascript_sandbox/Justfile'
-mod nanvix 'src/nanvix_sandbox/Justfile'
 mod python 'src/sdk/python/Justfile'
 mod dotnet 'src/sdk/dotnet/Justfile'
 mod examples_mod 'examples/Justfile'
@@ -14,7 +13,7 @@ clean: wasm::clean python::clean dotnet::clean
 
 #### BUILD TARGETS ####
 
-build target=default-target: (wasm::build target) (js::build target) nanvix::build python::build (dotnet::build target)
+build target=default-target: (wasm::build target) (js::build target) python::build (dotnet::build target)
 
 lint: lint-rust wasm::lint js::lint python::lint
 
diff --git a/README.md b/README.md
index 6086d95..4e9e953 100644
--- a/README.md
+++ b/README.md
@@ -12,7 +12,6 @@ Supported backends:
 
 - [Wasm Component Sandbox](#wasm-component-sandbox) (Python/Javascript or provide your own)
 - [HyperlightJS Sandbox](#hyperlightjs-sandbox)
-- [Nanvix Sandbox](#nanvix-sandbox)
 
 ## Overview
 
@@ -195,35 +194,6 @@ console.log('10 + 20 = ' + sum);
 
 See [examples](./src/javascript_sandbox/examples/) for file I/O and network demos.
 
-### Nanvix Sandbox
-
-A microkernel-based backend built on [hyperlight-nanvix](https://github.com/hyperlight-dev/hyperlight-nanvix) that runs JavaScript or Python inside a Nanvix VM. Currently limited to basic code execution with stdout capture -- no host tools, file I/O, networking, or snapshot support yet.
-
-```rust
-use hyperlight_nanvix_sandbox::{NanvixJavaScript, NanvixPython};
-use hyperlight_sandbox::Sandbox;
-
-fn main() {
-    // JavaScript
-    let mut js = Sandbox::builder()
-        .guest(NanvixJavaScript)
-        .build()
-        .expect("failed to create JS sandbox");
-
-    let result = js.run(r#"console.log("Hello from Nanvix JS!");"#).unwrap();
-    print!("{}", result.stdout);
-
-    // Python
-    let mut py = Sandbox::builder()
-        .guest(NanvixPython)
-        .build()
-        .expect("failed to create Python sandbox");
-
-    let result = py.run(r#"print("Hello from Nanvix Python!")"#).unwrap();
-    print!("{}", result.stdout);
-}
-```
-
 ## Building
 
 Tool requirements:
diff --git a/RELEASE.md b/RELEASE.md
index 42f7d96..9baa245 100644
--- a/RELEASE.md
+++ b/RELEASE.md
@@ -7,7 +7,6 @@ Bump the version in **all** manifest files. For example, to go from `0.1.0` →
 ### Rust (Cargo)
 
 - `Cargo.toml` — `[workspace.package] version`
-- `src/nanvix_sandbox/Cargo.toml` — `[package] version` (excluded from workspace, must be updated manually)
 
 All other workspace member crates inherit the version automatically.
 
diff --git a/docs/end-user-overview-slides.md b/docs/end-user-overview-slides.md
index bcff6a5..eb48c8b 100644
--- a/docs/end-user-overview-slides.md
+++ b/docs/end-user-overview-slides.md
@@ -111,19 +111,7 @@ result = sandbox.run('console.log(2 + 3)')
 
 ---
 
-# Guest Support: Nanvix & Extensibility
-
-## Nanvix guests (Rust API)
-
-```rust
-// JavaScript via QuickJS in a Nanvix microkernel
-let mut sandbox = SandboxBuilder::new().guest(NanvixJavaScript).build()?;
-let result = sandbox.run(r#"console.log("Hello from Nanvix!")"#)?;
-
-// Python via Python in a Nanvix microkernel
-let mut sandbox = SandboxBuilder::new().guest(NanvixPython).build()?;
-let result = sandbox.run(r#"print("Hello from Nanvix!")"#)?;
-```
+# Guest Support & Extensibility
 
 ## Broader Wasm/WASI guest model
 
diff --git a/src/hyperlight_sandbox/src/credentials.rs b/src/hyperlight_sandbox/src/credentials.rs
new file mode 100644
index 0000000..b36ab8e
--- /dev/null
+++ b/src/hyperlight_sandbox/src/credentials.rs
@@ -0,0 +1,105 @@
+//! Scoped-credential registry for outgoing HTTP requests.
+//!
+//! A [`CredentialEntry`] binds a logical credential identifier to the
+//! metadata required to inject a token header at request time:
+//!
+//! * `target` — URL-prefix scope. The outgoing-handler only injects
+//!   the credential when the request URL starts with this prefix.
+//! * `header` — HTTP header name (e.g. `"Authorization"`).
+//! * `prefix` — Value prefix prepended to the resolved token
+//!   (e.g. `"Bearer "`).
+//! * `resolver` — A host-side callback invoked on every credentialed
+//!   outgoing request to produce a fresh secret value. The host calls
+//!   the resolver synchronously from the WASI HTTP dispatch path, so
+//!   implementations should be fast and (where appropriate) memoise
+//!   internally. Errors returned by the resolver surface to the guest
+//!   as a request-level dispatch failure with a host-redacted message.
+//!
+//! The registry is populated by the host before the guest runs.
+//! Guests bind a credential to a specific outgoing request via WIT
+//! `attach`.
+
+use std::collections::HashMap;
+use std::fmt;
+use std::sync::{Arc, Mutex};
+
+/// Host-side callback that produces the secret token value for a
+/// credential at request-dispatch time.
+///
+/// The returned `String` is treated as the literal token; the host
+/// prepends [`CredentialEntry::prefix`] to it to form the outgoing
+/// header value.
+///
+/// On error, the returned diagnostic string is **dropped** by the
+/// outgoing-handler before any guest-visible error is produced — it
+/// is neither sent to the guest nor logged by this crate. The wire
+/// path surfaces only a fixed `"credential resolver failed"`
+/// indication. Resolver authors who need diagnostics should record
+/// them inside the resolver itself (e.g. via the host's own logger)
+/// before returning the `Err`.
+pub type ResolverFn = Arc<dyn Fn() -> Result<String, String> + Send + Sync>;
+
+/// Metadata for a single scoped credential.
+#[derive(Clone)]
+pub struct CredentialEntry {
+    /// URL-prefix scope. Only requests whose URL starts with this
+    /// value are eligible for credential injection.
+    pub target: String,
+
+    /// HTTP header name to set (e.g. `"Authorization"`).
+    pub header: String,
+
+    /// Value prefix prepended to the resolved token
+    /// (e.g. `"Bearer "`). May be empty.
+    pub prefix: String,
+
+    /// Resolver callback. Invoked on every credentialed outgoing
+    /// request; see [`ResolverFn`] for the contract.
+    pub resolver: ResolverFn,
+}
+
+impl fmt::Debug for CredentialEntry {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        // The resolver is a function pointer that may close over secret
+        // material; we never want it (or its captures) to appear in a
+        // log line, panic message, or `dbg!` output.
+        f.debug_struct("CredentialEntry")
+            .field("target", &self.target)
+            .field("header", &self.header)
+            .field("prefix", &self.prefix)
+            .field("resolver", &"<callback>")
+            .finish()
+    }
+}
+
+impl CredentialEntry {
+    /// Build a [`CredentialEntry`] whose resolver returns a fixed
+    /// token string on every invocation.
+    ///
+    /// Convenience constructor for tests, examples, and trivially
+    /// short-lived secrets. Production callers that need refresh
+    /// behaviour (managed identities, OAuth, …) should construct
+    /// the entry directly with a custom [`ResolverFn`].
+    pub fn with_static_resolver(
+        target: impl Into<String>,
+        header: impl Into<String>,
+        prefix: impl Into<String>,
+        token: impl Into<String>,
+    ) -> Self {
+        let token = token.into();
+        Self {
+            target: target.into(),
+            header: header.into(),
+            prefix: prefix.into(),
+            resolver: Arc::new(move || Ok(token.clone())),
+        }
+    }
+}
+
+/// Shared, thread-safe credential registry keyed by credential id.
+pub type CredentialRegistry = Arc<Mutex<HashMap<String, CredentialEntry>>>;
+
+/// Creates an empty credential registry.
+pub fn empty_registry() -> CredentialRegistry {
+    Arc::new(Mutex::new(HashMap::new()))
+}
diff --git a/src/hyperlight_sandbox/src/lib.rs b/src/hyperlight_sandbox/src/lib.rs
index d00e139..8472962 100644
--- a/src/hyperlight_sandbox/src/lib.rs
+++ b/src/hyperlight_sandbox/src/lib.rs
@@ -3,6 +3,7 @@
 extern crate alloc;
 
 pub mod cap_fs;
+pub mod credentials;
 pub mod http;
 pub mod network;
 pub mod runtime;
@@ -17,6 +18,7 @@ pub use cap_fs::{
     CapFs, DescriptorFlags, DescriptorStat, DescriptorType, Dir, DirPerms, FilePerms, FsError,
     OpenFlags,
 };
+pub use credentials::{CredentialEntry, CredentialRegistry, ResolverFn};
 pub use network::{HttpMethod, MethodFilter, NetworkPermission, NetworkPermissions};
 use serde::{Deserialize, Serialize};
 pub use tools::{ArgType, ToolRegistry, ToolSchema};
@@ -114,6 +116,7 @@ pub trait Guest: Sized {
         tools: ToolRegistry,
         network: std::sync::Arc<std::sync::Mutex<NetworkPermissions>>,
         fs: std::sync::Arc<std::sync::Mutex<CapFs>>,
+        credentials: CredentialRegistry,
     ) -> Result<Self::Sandbox>;
 }
 
@@ -138,6 +141,7 @@ pub struct Sandbox<G: Guest> {
     inner: G::Sandbox,
     network: std::sync::Arc<std::sync::Mutex<NetworkPermissions>>,
     fs: std::sync::Arc<std::sync::Mutex<CapFs>>,
+    credentials: CredentialRegistry,
 }
 
 impl<G: Guest> Sandbox<G> {
@@ -145,8 +149,20 @@ impl<G: Guest> Sandbox<G> {
     pub fn new(guest: G, config: SandboxConfig, tools: ToolRegistry) -> Result<Self> {
         let network = std::sync::Arc::new(std::sync::Mutex::new(NetworkPermissions::new()));
         let fs = std::sync::Arc::new(std::sync::Mutex::new(CapFs::new()));
-        let inner = guest.build(config, tools, network.clone(), fs.clone())?;
-        Ok(Self { inner, network, fs })
+        let credentials = credentials::empty_registry();
+        let inner = guest.build(
+            config,
+            tools,
+            network.clone(),
+            fs.clone(),
+            credentials.clone(),
+        )?;
+        Ok(Self {
+            inner,
+            network,
+            fs,
+            credentials,
+        })
     }
 
     /// Create a sandbox with a read-only input directory.
@@ -159,8 +175,20 @@ impl<G: Guest> Sandbox<G> {
         let network = std::sync::Arc::new(std::sync::Mutex::new(NetworkPermissions::new()));
         let fs = CapFs::new().with_input(input_dir)?;
         let fs = std::sync::Arc::new(std::sync::Mutex::new(fs));
-        let inner = guest.build(config, tools, network.clone(), fs.clone())?;
-        Ok(Self { inner, network, fs })
+        let credentials = credentials::empty_registry();
+        let inner = guest.build(
+            config,
+            tools,
+            network.clone(),
+            fs.clone(),
+            credentials.clone(),
+        )?;
+        Ok(Self {
+            inner,
+            network,
+            fs,
+            credentials,
+        })
     }
 
     /// Execute guest code.
@@ -212,6 +240,24 @@ impl<G: Guest> Sandbox<G> {
             .map_err(|_| anyhow::anyhow!("network mutex poisoned"))?
             .allow_domain(target, methods)
     }
+
+    /// Register a scoped credential that guests can later `attach` to
+    /// outgoing requests.
+    ///
+    /// Must be called before `run()`. Credentials are immutable once
+    /// registered and persist for the lifetime of the sandbox.
+    pub fn register_credential(&self, id: impl Into<String>, entry: CredentialEntry) -> Result<()> {
+        let id = id.into();
+        let mut registry = self
+            .credentials
+            .lock()
+            .map_err(|_| anyhow::anyhow!("credential registry mutex poisoned"))?;
+        if registry.contains_key(&id) {
+            anyhow::bail!("credential '{}' already registered", id);
+        }
+        registry.insert(id, entry);
+        Ok(())
+    }
 }
 
 // ---------------------------------------------------------------------------
@@ -350,9 +396,19 @@ where
             None => vfs,
         };
         let fs = std::sync::Arc::new(std::sync::Mutex::new(vfs));
-        let inner = self
-            .guest
-            .build(self.config, self.tools, network.clone(), fs.clone())?;
-        Ok(Sandbox { inner, network, fs })
+        let credentials = credentials::empty_registry();
+        let inner = self.guest.build(
+            self.config,
+            self.tools,
+            network.clone(),
+            fs.clone(),
+            credentials.clone(),
+        )?;
+        Ok(Sandbox {
+            inner,
+            network,
+            fs,
+            credentials,
+        })
     }
 }
diff --git a/src/javascript_sandbox/src/lib.rs b/src/javascript_sandbox/src/lib.rs
index 01f0e5c..1984418 100644
--- a/src/javascript_sandbox/src/lib.rs
+++ b/src/javascript_sandbox/src/lib.rs
@@ -125,6 +125,7 @@ impl Guest for HyperlightJs {
         tools: ToolRegistry,
         network: std::sync::Arc<std::sync::Mutex<NetworkPermissions>>,
         fs: std::sync::Arc<std::sync::Mutex<CapFs>>,
+        _credentials: hyperlight_sandbox::CredentialRegistry,
     ) -> Result<JsGuestSandbox> {
         JsGuestSandbox::new(config, tools, network, fs)
     }
diff --git a/src/nanvix_sandbox/Cargo.lock b/src/nanvix_sandbox/Cargo.lock
deleted file mode 100644
index e098017..0000000
--- a/src/nanvix_sandbox/Cargo.lock
+++ /dev/null
@@ -1,4454 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "addr2line"
-version = "0.26.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59317f77929f0e679d39364702289274de2f0f0b22cbf50b2b8cff2169a0b27a"
-dependencies = [
- "gimli",
-]
-
-[[package]]
-name = "ahash"
-version = "0.8.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
-dependencies = [
- "cfg-if",
- "once_cell",
- "version_check",
- "zerocopy",
-]
-
-[[package]]
-name = "aho-corasick"
-version = "1.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "allocator-api2"
-version = "0.2.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
-
-[[package]]
-name = "ambient-authority"
-version = "0.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e9d4ee0d472d1cd2e28c97dfa124b3d8d992e10eb0a035f33f5d12e3a177ba3b"
-
-[[package]]
-name = "android_system_properties"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "anstream"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
-dependencies = [
- "anstyle",
- "anstyle-parse",
- "anstyle-query",
- "anstyle-wincon",
- "colorchoice",
- "is_terminal_polyfill",
- "utf8parse",
-]
-
-[[package]]
-name = "anstyle"
-version = "1.0.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
-
-[[package]]
-name = "anstyle-parse"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
-dependencies = [
- "utf8parse",
-]
-
-[[package]]
-name = "anstyle-query"
-version = "1.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
-dependencies = [
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "anstyle-wincon"
-version = "3.0.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
-dependencies = [
- "anstyle",
- "once_cell_polyfill",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "anyhow"
-version = "1.0.102"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
-
-[[package]]
-name = "arbitrary"
-version = "1.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3d036a3c4ab069c7b410a2ce876bd74808d2d0888a82667669f8e783a898bf1"
-
-[[package]]
-name = "arch"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "cfg-if",
- "config",
- "error",
- "static_assert",
- "sys",
-]
-
-[[package]]
-name = "arrayref"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
-
-[[package]]
-name = "arrayvec"
-version = "0.7.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
-
-[[package]]
-name = "async-trait"
-version = "0.1.89"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "atomic-waker"
-version = "1.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
-
-[[package]]
-name = "autocfg"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
-
-[[package]]
-name = "aws-lc-rs"
-version = "1.16.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a054912289d18629dc78375ba2c3726a3afe3ff71b4edba9dedfca0e3446d1fc"
-dependencies = [
- "aws-lc-sys",
- "zeroize",
-]
-
-[[package]]
-name = "aws-lc-sys"
-version = "0.39.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fa7e52a4c5c547c741610a2c6f123f3881e409b714cd27e6798ef020c514f0a"
-dependencies = [
- "cc",
- "cmake",
- "dunce",
- "fs_extra",
-]
-
-[[package]]
-name = "base64"
-version = "0.22.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
-
-[[package]]
-name = "bitflags"
-version = "1.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
-
-[[package]]
-name = "bitflags"
-version = "2.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af"
-
-[[package]]
-name = "blake3"
-version = "1.8.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2468ef7d57b3fb7e16b576e8377cdbde2320c60e1491e961d11da40fc4f02a2d"
-dependencies = [
- "arrayref",
- "arrayvec",
- "cc",
- "cfg-if",
- "constant_time_eq",
- "cpufeatures",
-]
-
-[[package]]
-name = "block-buffer"
-version = "0.10.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
-dependencies = [
- "generic-array",
-]
-
-[[package]]
-name = "bstr"
-version = "1.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "63044e1ae8e69f3b5a92c736ca6269b8d12fa7efe39bf34ddb06d102cf0e2cab"
-dependencies = [
- "memchr",
- "serde",
-]
-
-[[package]]
-name = "bumpalo"
-version = "3.20.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb"
-dependencies = [
- "allocator-api2",
-]
-
-[[package]]
-name = "bytes"
-version = "1.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
-
-[[package]]
-name = "cap-fs-ext"
-version = "3.4.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d5528f85b1e134ae811704e41ef80930f56e795923f866813255bc342cc20654"
-dependencies = [
- "cap-primitives 3.4.5",
- "cap-std 3.4.5",
- "io-lifetimes 2.0.4",
- "windows-sys 0.52.0",
-]
-
-[[package]]
-name = "cap-net-ext"
-version = "3.4.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "20a158160765c6a7d0d8c072a53d772e4cb243f38b04bfcf6b4939cfbe7482e7"
-dependencies = [
- "cap-primitives 3.4.5",
- "cap-std 3.4.5",
- "rustix 1.1.4",
- "smallvec",
-]
-
-[[package]]
-name = "cap-primitives"
-version = "3.4.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6cf3aea8a5081171859ef57bc1606b1df6999df4f1110f8eef68b30098d1d3a"
-dependencies = [
- "ambient-authority",
- "fs-set-times",
- "io-extras 0.18.4",
- "io-lifetimes 2.0.4",
- "ipnet",
- "maybe-owned",
- "rustix 1.1.4",
- "rustix-linux-procfs",
- "windows-sys 0.52.0",
- "winx",
-]
-
-[[package]]
-name = "cap-primitives"
-version = "4.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cdadbd7c002d3a484b35243669abdae85a0ebaded5a61117169dc3400f9a7ff0"
-dependencies = [
- "ambient-authority",
- "fs-set-times",
- "io-extras 0.19.0",
- "io-lifetimes 3.0.1",
- "ipnet",
- "maybe-owned",
- "rustix 1.1.4",
- "rustix-linux-procfs",
- "windows-sys 0.61.2",
- "winx",
-]
-
-[[package]]
-name = "cap-rand"
-version = "3.4.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d8144c22e24bbcf26ade86cb6501a0916c46b7e4787abdb0045a467eb1645a1d"
-dependencies = [
- "ambient-authority",
- "rand 0.8.6",
-]
-
-[[package]]
-name = "cap-std"
-version = "3.4.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6dc3090992a735d23219de5c204927163d922f42f575a0189b005c62d37549a"
-dependencies = [
- "cap-primitives 3.4.5",
- "io-extras 0.18.4",
- "io-lifetimes 2.0.4",
- "rustix 1.1.4",
-]
-
-[[package]]
-name = "cap-std"
-version = "4.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7281235d6e96d3544ca18bba9049be92f4190f8d923e3caef1b5f66cfa752608"
-dependencies = [
- "cap-primitives 4.0.2",
- "io-extras 0.19.0",
- "io-lifetimes 3.0.1",
- "rustix 1.1.4",
-]
-
-[[package]]
-name = "cap-time-ext"
-version = "3.4.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "def102506ce40c11710a9b16e614af0cde8e76ae51b1f48c04b8d79f4b671a80"
-dependencies = [
- "ambient-authority",
- "cap-primitives 3.4.5",
- "iana-time-zone",
- "once_cell",
- "rustix 1.1.4",
- "winx",
-]
-
-[[package]]
-name = "cc"
-version = "1.2.57"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7a0dd1ca384932ff3641c8718a02769f1698e7563dc6974ffd03346116310423"
-dependencies = [
- "find-msvc-tools",
- "jobserver",
- "libc",
- "shlex",
-]
-
-[[package]]
-name = "cesu8"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6d43a04d8753f35258c91f8ec639f792891f748a1edbd759cf1dcea3382ad83c"
-
-[[package]]
-name = "cfg-if"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
-
-[[package]]
-name = "cfg_aliases"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
-
-[[package]]
-name = "chrono"
-version = "0.4.44"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c673075a2e0e5f4a1dde27ce9dee1ea4558c7ffe648f576438a20ca1d2acc4b0"
-dependencies = [
- "iana-time-zone",
- "num-traits",
- "windows-link",
-]
-
-[[package]]
-name = "clap"
-version = "4.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b193af5b67834b676abd72466a96c1024e6a6ad978a1f484bd90b85c94041351"
-dependencies = [
- "clap_builder",
- "clap_derive",
-]
-
-[[package]]
-name = "clap_builder"
-version = "4.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
-dependencies = [
- "anstream",
- "anstyle",
- "clap_lex",
- "strsim",
-]
-
-[[package]]
-name = "clap_derive"
-version = "4.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1110bd8a634a1ab8cb04345d8d878267d57c3cf1b38d91b71af6686408bbca6a"
-dependencies = [
- "heck",
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "clap_lex"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
-
-[[package]]
-name = "cmake"
-version = "0.1.57"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75443c44cd6b379beb8c5b45d85d0773baf31cce901fe7bb252f4eff3008ef7d"
-dependencies = [
- "cc",
-]
-
-[[package]]
-name = "cobs"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fa961b519f0b462e3a3b4a34b64d119eeaca1d59af726fe450bbba07a9fc0a1"
-dependencies = [
- "thiserror 2.0.18",
-]
-
-[[package]]
-name = "colorchoice"
-version = "1.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
-
-[[package]]
-name = "combine"
-version = "4.6.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ba5a308b75df32fe02788e748662718f03fde005016435c444eea572398219fd"
-dependencies = [
- "bytes",
- "memchr",
-]
-
-[[package]]
-name = "config"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "constant_time_eq"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
-
-[[package]]
-name = "control-plane-api"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "config",
- "num_enum",
- "syslog",
- "tokio",
-]
-
-[[package]]
-name = "core-foundation"
-version = "0.9.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
-dependencies = [
- "core-foundation-sys",
- "libc",
-]
-
-[[package]]
-name = "core-foundation"
-version = "0.10.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
-dependencies = [
- "core-foundation-sys",
- "libc",
-]
-
-[[package]]
-name = "core-foundation-sys"
-version = "0.8.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
-
-[[package]]
-name = "cpp_demangle"
-version = "0.4.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2bb79cb74d735044c972aae58ed0aaa9a837e85b01106a54c39e42e97f62253"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "cpufeatures"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "cranelift-assembler-x64"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6edb5bdd1af46714e3224a017fabbbd57f70df4e840eb5ad6a7429dc456119d6"
-dependencies = [
- "cranelift-assembler-x64-meta",
-]
-
-[[package]]
-name = "cranelift-assembler-x64-meta"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a819599186e1b1a1f88d464e06045696afc7aa3e0cc018aa0b2999cb63d1d088"
-dependencies = [
- "cranelift-srcgen",
-]
-
-[[package]]
-name = "cranelift-bforest"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "36e2c152d488e03c87b913bc2ed3414416eb1e0d66d61b49af60bf456a9665c7"
-dependencies = [
- "cranelift-entity",
- "wasmtime-internal-core",
-]
-
-[[package]]
-name = "cranelift-bitset"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6559d4fbc253d1396e1f6beeae57fa88a244f02aaf0cde2a735afd3492d9b2e"
-dependencies = [
- "serde",
- "serde_derive",
- "wasmtime-internal-core",
-]
-
-[[package]]
-name = "cranelift-codegen"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "96d9315d98d6e0a64454d4c83be2ee0e8055c3f80c3b2d7bcad7079f281a06ff"
-dependencies = [
- "bumpalo",
- "cranelift-assembler-x64",
- "cranelift-bforest",
- "cranelift-bitset",
- "cranelift-codegen-meta",
- "cranelift-codegen-shared",
- "cranelift-control",
- "cranelift-entity",
- "cranelift-isle",
- "gimli",
- "hashbrown 0.16.1",
- "libm",
- "log",
- "pulley-interpreter",
- "regalloc2",
- "rustc-hash",
- "serde",
- "smallvec",
- "target-lexicon",
- "wasmtime-internal-core",
-]
-
-[[package]]
-name = "cranelift-codegen-meta"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d89c00a88081c55e3087c45bebc77e0cc973de2d7b44ef6a943c7122647b89f5"
-dependencies = [
- "cranelift-assembler-x64-meta",
- "cranelift-codegen-shared",
- "cranelift-srcgen",
- "heck",
- "pulley-interpreter",
-]
-
-[[package]]
-name = "cranelift-codegen-shared"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "879f77c497a1eb6273482aa1ac3b23cb8563ff04edb39ed5dfcfd28c8deff8f5"
-
-[[package]]
-name = "cranelift-control"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "498dc1f17a6910c88316d49c7176d8fa97cf10c30859c32a266040449317f963"
-dependencies = [
- "arbitrary",
-]
-
-[[package]]
-name = "cranelift-entity"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c2acba797f6a46042ce82aaf7680d0c3567fe2001e238db9df649fd104a2727f"
-dependencies = [
- "cranelift-bitset",
- "serde",
- "serde_derive",
- "wasmtime-internal-core",
-]
-
-[[package]]
-name = "cranelift-frontend"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4dca3df1d107d98d88f159ad1d5eaa2d5cdb678b3d5bcfadc6fc83d8ebb448ea"
-dependencies = [
- "cranelift-codegen",
- "log",
- "smallvec",
- "target-lexicon",
-]
-
-[[package]]
-name = "cranelift-isle"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f62dd18116d88bed649871feceda79dad7b59cc685ea8998c2b3e64d0e689602"
-
-[[package]]
-name = "cranelift-native"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f843b80360d7fdf61a6124642af7597f6d55724cf521210c34af8a1c66daca6e"
-dependencies = [
- "cranelift-codegen",
- "libc",
- "target-lexicon",
-]
-
-[[package]]
-name = "cranelift-srcgen"
-version = "0.131.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "090ee5de58c6f17eb5e3a5ae8cf1695c7efea04ec4dd0ecba6a5b996c9bad7dc"
-
-[[package]]
-name = "crc32fast"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "crossbeam-channel"
-version = "0.5.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "82b8f8f868b36967f9606790d1903570de9ceaf870a7bf9fbbd3016d636a2cb2"
-dependencies = [
- "crossbeam-utils",
-]
-
-[[package]]
-name = "crossbeam-utils"
-version = "0.8.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
-
-[[package]]
-name = "crypto-common"
-version = "0.1.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
-dependencies = [
- "generic-array",
- "typenum",
-]
-
-[[package]]
-name = "digest"
-version = "0.10.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
-dependencies = [
- "block-buffer",
- "crypto-common",
-]
-
-[[package]]
-name = "dirs"
-version = "6.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3e8aa94d75141228480295a7d0e7feb620b1a5ad9f12bc40be62411e38cce4e"
-dependencies = [
- "dirs-sys",
-]
-
-[[package]]
-name = "dirs-sys"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e01a3366d27ee9890022452ee61b2b63a67e6f13f58900b651ff5665f0bb1fab"
-dependencies = [
- "libc",
- "option-ext",
- "redox_users",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "displaydoc"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "dunce"
-version = "1.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
-
-[[package]]
-name = "either"
-version = "1.15.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
-
-[[package]]
-name = "elfcore"
-version = "2.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fdaa3d1c27119b3394513f4596894a40cd53cb4acec7fce636a9ca0c4abb171"
-dependencies = [
- "libc",
- "nix",
- "smallvec",
- "thiserror 2.0.18",
- "tracing",
- "zerocopy",
-]
-
-[[package]]
-name = "embedded-io"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ef1a6892d9eef45c8fa6b9e0086428a2cca8491aca8f787c534a3d6d0bcb3ced"
-
-[[package]]
-name = "embedded-io"
-version = "0.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "edd0f118536f44f5ccd48bcb8b111bdc3de888b58c74639dfb034a357d0f206d"
-
-[[package]]
-name = "encoding_rs"
-version = "0.8.35"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75030f3c4f45dafd7586dd6780965a8c7e8e285a5ecb86713e63a79c5b2766f3"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "equivalent"
-version = "1.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
-
-[[package]]
-name = "errno"
-version = "0.3.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
-dependencies = [
- "libc",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "error"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "sysapi",
-]
-
-[[package]]
-name = "fastrand"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
-
-[[package]]
-name = "fd-lock"
-version = "4.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ce92ff622d6dadf7349484f42c93271a0d49b7cc4d466a936405bacbe10aa78"
-dependencies = [
- "cfg-if",
- "rustix 1.1.4",
- "windows-sys 0.52.0",
-]
-
-[[package]]
-name = "find-msvc-tools"
-version = "0.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
-
-[[package]]
-name = "flatbuffers"
-version = "25.12.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "35f6839d7b3b98adde531effaf34f0c2badc6f4735d26fe74709d8e513a96ef3"
-dependencies = [
- "bitflags 2.11.0",
- "rustc_version",
-]
-
-[[package]]
-name = "flexi_logger"
-version = "0.31.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aea7feddba9b4e83022270d49a58d4a1b3fdad04b34f78cf1ce471f698e42672"
-dependencies = [
- "chrono",
- "log",
- "nu-ansi-term",
- "regex",
- "thiserror 2.0.18",
-]
-
-[[package]]
-name = "fnv"
-version = "1.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
-
-[[package]]
-name = "foldhash"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
-
-[[package]]
-name = "foldhash"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
-
-[[package]]
-name = "form_urlencoded"
-version = "1.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
-dependencies = [
- "percent-encoding",
-]
-
-[[package]]
-name = "fs-set-times"
-version = "0.20.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94e7099f6313ecacbe1256e8ff9d617b75d1bcb16a6fddef94866d225a01a14a"
-dependencies = [
- "io-lifetimes 2.0.4",
- "rustix 1.1.4",
- "windows-sys 0.52.0",
-]
-
-[[package]]
-name = "fs_extra"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42703706b716c37f96a77aea830392ad231f44c9e9a67872fa5548707e11b11c"
-
-[[package]]
-name = "futures"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b147ee9d1f6d097cef9ce628cd2ee62288d963e16fb287bd9286455b241382d"
-dependencies = [
- "futures-channel",
- "futures-core",
- "futures-io",
- "futures-sink",
- "futures-task",
- "futures-util",
-]
-
-[[package]]
-name = "futures-channel"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
-dependencies = [
- "futures-core",
- "futures-sink",
-]
-
-[[package]]
-name = "futures-core"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
-
-[[package]]
-name = "futures-io"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
-
-[[package]]
-name = "futures-sink"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
-
-[[package]]
-name = "futures-task"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
-
-[[package]]
-name = "futures-util"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
-dependencies = [
- "futures-core",
- "futures-sink",
- "futures-task",
- "pin-project-lite",
- "slab",
-]
-
-[[package]]
-name = "generic-array"
-version = "0.14.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
-dependencies = [
- "typenum",
- "version_check",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
-dependencies = [
- "cfg-if",
- "js-sys",
- "libc",
- "wasi",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
-dependencies = [
- "cfg-if",
- "js-sys",
- "libc",
- "r-efi 5.3.0",
- "wasip2",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
-dependencies = [
- "cfg-if",
- "libc",
- "r-efi 6.0.0",
- "wasip2",
- "wasip3",
-]
-
-[[package]]
-name = "gimli"
-version = "0.33.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "19e16c5073773ccf057c282be832a59ee53ef5ff98db3aeff7f8314f52ffc196"
-dependencies = [
- "fnv",
- "hashbrown 0.16.1",
- "indexmap",
- "stable_deref_trait",
-]
-
-[[package]]
-name = "globset"
-version = "0.4.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52dfc19153a48bde0cbd630453615c8151bce3a5adfac7a0aebfbf0a1e1f57e3"
-dependencies = [
- "aho-corasick",
- "bstr",
- "log",
- "regex-automata",
- "regex-syntax",
-]
-
-[[package]]
-name = "goblin"
-version = "0.10.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "983a6aafb3b12d4c41ea78d39e189af4298ce747353945ff5105b54a056e5cd9"
-dependencies = [
- "log",
- "plain",
- "scroll",
-]
-
-[[package]]
-name = "h2"
-version = "0.4.13"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2f44da3a8150a6703ed5d34e164b875fd14c2cdab9af1252a9a1020bde2bdc54"
-dependencies = [
- "atomic-waker",
- "bytes",
- "fnv",
- "futures-core",
- "futures-sink",
- "http",
- "indexmap",
- "slab",
- "tokio",
- "tokio-util",
- "tracing",
-]
-
-[[package]]
-name = "half"
-version = "1.8.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b43ede17f21864e81be2fa654110bf1e793774238d86ef8555c37e6519c0403"
-
-[[package]]
-name = "hashbrown"
-version = "0.15.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
-dependencies = [
- "foldhash 0.1.5",
-]
-
-[[package]]
-name = "hashbrown"
-version = "0.16.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
-dependencies = [
- "foldhash 0.2.0",
- "serde",
- "serde_core",
-]
-
-[[package]]
-name = "hashbrown"
-version = "0.17.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4f467dd6dccf739c208452f8014c75c18bb8301b050ad1cfb27153803edb0f51"
-dependencies = [
- "foldhash 0.2.0",
-]
-
-[[package]]
-name = "heck"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
-
-[[package]]
-name = "hex"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
-
-[[package]]
-name = "http"
-version = "1.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
-dependencies = [
- "bytes",
- "itoa",
-]
-
-[[package]]
-name = "http-body"
-version = "1.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
-dependencies = [
- "bytes",
- "http",
-]
-
-[[package]]
-name = "http-body-util"
-version = "0.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a"
-dependencies = [
- "bytes",
- "futures-core",
- "http",
- "http-body",
- "pin-project-lite",
-]
-
-[[package]]
-name = "httparse"
-version = "1.10.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
-
-[[package]]
-name = "httpdate"
-version = "1.0.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
-
-[[package]]
-name = "hwloc"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "anyhow",
- "libc",
- "serde",
- "syslog",
-]
-
-[[package]]
-name = "hyper"
-version = "1.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2ab2d4f250c3d7b1c9fcdff1cece94ea4e2dfbec68614f7b87cb205f24ca9d11"
-dependencies = [
- "atomic-waker",
- "bytes",
- "futures-channel",
- "futures-core",
- "h2",
- "http",
- "http-body",
- "httparse",
- "httpdate",
- "itoa",
- "pin-project-lite",
- "pin-utils",
- "smallvec",
- "tokio",
- "want",
-]
-
-[[package]]
-name = "hyper-rustls"
-version = "0.27.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58"
-dependencies = [
- "http",
- "hyper",
- "hyper-util",
- "rustls",
- "rustls-pki-types",
- "tokio",
- "tokio-rustls",
- "tower-service",
-]
-
-[[package]]
-name = "hyper-util"
-version = "0.1.20"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
-dependencies = [
- "base64",
- "bytes",
- "futures-channel",
- "futures-util",
- "http",
- "http-body",
- "hyper",
- "ipnet",
- "libc",
- "percent-encoding",
- "pin-project-lite",
- "socket2",
- "system-configuration",
- "tokio",
- "tower-layer",
- "tower-service",
- "tracing",
- "windows-registry",
-]
-
-[[package]]
-name = "hyperlight-common"
-version = "0.12.0"
-source = "git+https://github.com/nanvix/hyperlight?branch=nanvix%2Fv0.12.0#fd41035ec5218fe13a0feeb5e1649ec112b810c9"
-dependencies = [
- "anyhow",
- "flatbuffers",
- "log",
- "spin 0.10.0 (registry+https://github.com/rust-lang/crates.io-index)",
- "thiserror 2.0.18",
- "tracing",
-]
-
-[[package]]
-name = "hyperlight-host"
-version = "0.12.0"
-source = "git+https://github.com/nanvix/hyperlight?branch=nanvix%2Fv0.12.0#fd41035ec5218fe13a0feeb5e1649ec112b810c9"
-dependencies = [
- "anyhow",
- "bitflags 2.11.0",
- "blake3",
- "cfg-if",
- "cfg_aliases",
- "crossbeam-channel",
- "elfcore",
- "flatbuffers",
- "goblin",
- "hyperlight-common",
- "kvm-bindings",
- "kvm-ioctls",
- "lazy_static",
- "libc",
- "log",
- "metrics",
- "mshv-bindings",
- "mshv-ioctls",
- "page_size",
- "rand 0.9.2",
- "rust-embed",
- "serde_json",
- "sha256",
- "termcolor",
- "thiserror 2.0.18",
- "tracing",
- "tracing-core",
- "tracing-log",
- "uuid",
- "vmm-sys-util",
- "windows",
- "windows-result",
- "windows-sys 0.61.2",
- "windows-version",
-]
-
-[[package]]
-name = "hyperlight-nanvix"
-version = "0.1.0"
-source = "git+https://github.com/hyperlight-dev/hyperlight-nanvix?rev=f4bc205a40ed072cbb5f26b141498477985782f7#f4bc205a40ed072cbb5f26b141498477985782f7"
-dependencies = [
- "anyhow",
- "clap",
- "dirs",
- "libc",
- "nanvix",
- "tokio",
-]
-
-[[package]]
-name = "hyperlight-nanvix-sandbox"
-version = "0.3.0"
-dependencies = [
- "anyhow",
- "hyperlight-nanvix",
- "hyperlight-sandbox",
- "tempfile",
- "tokio",
-]
-
-[[package]]
-name = "hyperlight-sandbox"
-version = "0.3.0"
-dependencies = [
- "anyhow",
- "bitflags 2.11.0",
- "bytes",
- "cap-std 4.0.2",
- "http",
- "http-body-util",
- "hyper",
- "hyper-util",
- "log",
- "serde",
- "serde_json",
- "tempfile",
- "tokio",
- "url",
- "wasmtime-wasi-http",
-]
-
-[[package]]
-name = "iana-time-zone"
-version = "0.1.65"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
-dependencies = [
- "android_system_properties",
- "core-foundation-sys",
- "iana-time-zone-haiku",
- "js-sys",
- "log",
- "wasm-bindgen",
- "windows-core",
-]
-
-[[package]]
-name = "iana-time-zone-haiku"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
-dependencies = [
- "cc",
-]
-
-[[package]]
-name = "icu_collections"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
-dependencies = [
- "displaydoc",
- "potential_utf",
- "yoke",
- "zerofrom",
- "zerovec",
-]
-
-[[package]]
-name = "icu_locale_core"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
-dependencies = [
- "displaydoc",
- "litemap",
- "tinystr",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "icu_normalizer"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
-dependencies = [
- "icu_collections",
- "icu_normalizer_data",
- "icu_properties",
- "icu_provider",
- "smallvec",
- "zerovec",
-]
-
-[[package]]
-name = "icu_normalizer_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
-
-[[package]]
-name = "icu_properties"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
-dependencies = [
- "icu_collections",
- "icu_locale_core",
- "icu_properties_data",
- "icu_provider",
- "zerotrie",
- "zerovec",
-]
-
-[[package]]
-name = "icu_properties_data"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
-
-[[package]]
-name = "icu_provider"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
-dependencies = [
- "displaydoc",
- "icu_locale_core",
- "writeable",
- "yoke",
- "zerofrom",
- "zerotrie",
- "zerovec",
-]
-
-[[package]]
-name = "id-arena"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d3067d79b975e8844ca9eb072e16b31c3c1c36928edf9c6789548c524d0d954"
-
-[[package]]
-name = "idna"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
-dependencies = [
- "idna_adapter",
- "smallvec",
- "utf8_iter",
-]
-
-[[package]]
-name = "idna_adapter"
-version = "1.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3acae9609540aa318d1bc588455225fb2085b9ed0c4f6bd0d9d5bcd86f1a0344"
-dependencies = [
- "icu_normalizer",
- "icu_properties",
-]
-
-[[package]]
-name = "indexmap"
-version = "2.14.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"
-dependencies = [
- "equivalent",
- "hashbrown 0.17.0",
- "serde",
- "serde_core",
-]
-
-[[package]]
-name = "io-extras"
-version = "0.18.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2285ddfe3054097ef4b2fe909ef8c3bcd1ea52a8f0d274416caebeef39f04a65"
-dependencies = [
- "io-lifetimes 2.0.4",
- "windows-sys 0.52.0",
-]
-
-[[package]]
-name = "io-extras"
-version = "0.19.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "20fd6de4ccfcc187e38bc21cfa543cb5a302cb86a8b114eb7f0bf0dc9f8ac00f"
-dependencies = [
- "io-lifetimes 3.0.1",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "io-lifetimes"
-version = "2.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06432fb54d3be7964ecd3649233cddf80db2832f47fec34c01f65b3d9d774983"
-
-[[package]]
-name = "io-lifetimes"
-version = "3.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2f0fb0570afe1fed943c5c3d4102d5358592d8625fda6a0007fdbe65a92fba96"
-
-[[package]]
-name = "ipnet"
-version = "2.12.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d98f6fed1fde3f8c21bc40a1abb88dd75e67924f9cffc3ef95607bad8017f8e2"
-
-[[package]]
-name = "iri-string"
-version = "0.7.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c91338f0783edbd6195decb37bae672fd3b165faffb89bf7b9e6942f8b1a731a"
-dependencies = [
- "memchr",
- "serde",
-]
-
-[[package]]
-name = "is_terminal_polyfill"
-version = "1.70.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
-
-[[package]]
-name = "itertools"
-version = "0.14.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
-dependencies = [
- "either",
-]
-
-[[package]]
-name = "itoa"
-version = "1.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
-
-[[package]]
-name = "jni"
-version = "0.21.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a87aa2bb7d2af34197c04845522473242e1aa17c12f4935d5856491a7fb8c97"
-dependencies = [
- "cesu8",
- "cfg-if",
- "combine",
- "jni-sys",
- "log",
- "thiserror 1.0.69",
- "walkdir",
- "windows-sys 0.45.0",
-]
-
-[[package]]
-name = "jni-sys"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8eaf4bc02d17cbdd7ff4c7438cafcdf7fb9a4613313ad11b4f8fefe7d3fa0130"
-
-[[package]]
-name = "jobserver"
-version = "0.1.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9afb3de4395d6b3e67a780b6de64b51c978ecf11cb9a462c66be7d4ca9039d33"
-dependencies = [
- "getrandom 0.3.4",
- "libc",
-]
-
-[[package]]
-name = "js-sys"
-version = "0.3.91"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b49715b7073f385ba4bc528e5747d02e66cb39c6146efb66b781f131f0fb399c"
-dependencies = [
- "once_cell",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "kvm-bindings"
-version = "0.14.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4b3c06ff73c7ce03e780887ec2389d62d2a2a9ddf471ab05c2ff69207cd3f3b4"
-dependencies = [
- "serde",
- "vmm-sys-util",
- "zerocopy",
-]
-
-[[package]]
-name = "kvm-ioctls"
-version = "0.24.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "333f77a20344a448f3f70664918135fddeb804e938f28a99d685bd92926e0b19"
-dependencies = [
- "bitflags 2.11.0",
- "kvm-bindings",
- "libc",
- "vmm-sys-util",
-]
-
-[[package]]
-name = "lazy_static"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
-
-[[package]]
-name = "leb128fmt"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2"
-
-[[package]]
-name = "libc"
-version = "0.2.183"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b5b646652bf6661599e1da8901b3b9522896f01e736bad5f723fe7a3a27f899d"
-
-[[package]]
-name = "libm"
-version = "0.2.16"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6d2cec3eae94f9f509c767b45932f1ada8350c4bdb85af2fcab4a3c14807981"
-
-[[package]]
-name = "libredox"
-version = "0.1.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1744e39d1d6a9948f4f388969627434e31128196de472883b39f148769bfe30a"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "linux-raw-sys"
-version = "0.4.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
-
-[[package]]
-name = "linux-raw-sys"
-version = "0.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
-
-[[package]]
-name = "linuxd"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "anyhow",
- "config",
- "control-plane-api",
- "libc",
- "profiler",
- "rand 0.9.2",
- "signal-hook",
- "static_assert",
- "sys",
- "sysapi",
- "syscall",
- "syscomm",
- "syslog",
- "tokio",
- "user-vm-api",
-]
-
-[[package]]
-name = "litemap"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
-
-[[package]]
-name = "lock_api"
-version = "0.4.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
-dependencies = [
- "scopeguard",
-]
-
-[[package]]
-name = "log"
-version = "0.4.29"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
-
-[[package]]
-name = "lru-slab"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
-
-[[package]]
-name = "mach2"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d640282b302c0bb0a2a8e0233ead9035e3bed871f0b7e81fe4a1ec829765db44"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "maybe-owned"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4facc753ae494aeb6e3c22f839b158aebd4f9270f55cd3c79906c45476c47ab4"
-
-[[package]]
-name = "memchr"
-version = "2.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
-
-[[package]]
-name = "memfd"
-version = "0.6.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ad38eb12aea514a0466ea40a80fd8cc83637065948eb4a426e4aa46261175227"
-dependencies = [
- "rustix 1.1.4",
-]
-
-[[package]]
-name = "metrics"
-version = "0.24.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d5312e9ba3771cfa961b585728215e3d972c950a3eed9252aa093d6301277e8"
-dependencies = [
- "ahash",
- "portable-atomic",
-]
-
-[[package]]
-name = "mio"
-version = "1.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc"
-dependencies = [
- "libc",
- "wasi",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "mshv-bindings"
-version = "0.6.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3cbfd4f32d185152003679339751839da77c17e18fa8882a11051a236f841426"
-dependencies = [
- "libc",
- "num_enum",
- "vmm-sys-util",
- "zerocopy",
-]
-
-[[package]]
-name = "mshv-ioctls"
-version = "0.6.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f035616abe1e4cbc026a1a8094ff8d3900f5063fe6608309098bc745926fdfd8"
-dependencies = [
- "libc",
- "mshv-bindings",
- "thiserror 2.0.18",
- "vmm-sys-util",
-]
-
-[[package]]
-name = "nanvix"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "anyhow",
- "config",
- "hwloc",
- "linuxd",
- "nanvix-http",
- "nanvix-registry",
- "nanvix-sandbox",
- "nanvix-sandbox-cache",
- "nanvix-terminal",
- "syscomm",
- "syslog",
- "uservm",
-]
-
-[[package]]
-name = "nanvix-http"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "anyhow",
- "config",
- "http",
- "http-body-util",
- "hyper",
- "hyper-util",
- "linuxd",
- "nanvix-registry",
- "nanvix-sandbox-cache",
- "nanvix-terminal",
- "serde",
- "serde_json",
- "syscomm",
- "syslog",
- "tokio",
- "user-vm-api",
- "uservm",
-]
-
-[[package]]
-name = "nanvix-registry"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "anyhow",
- "bytes",
- "dirs",
- "reqwest",
- "serde",
- "serde_json",
- "sha2",
- "syslog",
- "tokio",
- "uuid",
-]
-
-[[package]]
-name = "nanvix-sandbox"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "anyhow",
- "cfg-if",
- "config",
- "control-plane-api",
- "hwloc",
- "libc",
- "linuxd",
- "rand 0.9.2",
- "sys",
- "syscomm",
- "syslog",
- "tokio",
- "user-vm-api",
- "uservm",
-]
-
-[[package]]
-name = "nanvix-sandbox-cache"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "anyhow",
- "config",
- "nanvix-sandbox",
- "rand 0.9.2",
- "syslog",
- "tokio",
-]
-
-[[package]]
-name = "nanvix-terminal"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "anyhow",
- "libc",
- "nanvix-sandbox-cache",
- "syslog",
- "tokio",
- "user-vm-api",
-]
-
-[[package]]
-name = "nix"
-version = "0.31.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d6d0705320c1e6ba1d912b5e37cf18071b6c2e9b7fa8215a1e8a7651966f5d3"
-dependencies = [
- "bitflags 2.11.0",
- "cfg-if",
- "cfg_aliases",
- "libc",
-]
-
-[[package]]
-name = "nu-ansi-term"
-version = "0.50.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
-dependencies = [
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "num-traits"
-version = "0.2.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
-dependencies = [
- "autocfg",
-]
-
-[[package]]
-name = "num_enum"
-version = "0.7.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d0bca838442ec211fa11de3a8b0e0e8f3a4522575b5c4c06ed722e005036f26"
-dependencies = [
- "num_enum_derive",
- "rustversion",
-]
-
-[[package]]
-name = "num_enum_derive"
-version = "0.7.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "680998035259dcfcafe653688bf2aa6d3e2dc05e98be6ab46afb089dc84f1df8"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "object"
-version = "0.39.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2e5a6c098c7a3b6547378093f5cc30bc54fd361ce711e05293a5cc589562739b"
-dependencies = [
- "crc32fast",
- "hashbrown 0.17.0",
- "indexmap",
- "memchr",
-]
-
-[[package]]
-name = "once_cell"
-version = "1.21.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
-
-[[package]]
-name = "once_cell_polyfill"
-version = "1.70.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
-
-[[package]]
-name = "openssl-probe"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c87def4c32ab89d880effc9e097653c8da5d6ef28e6b539d313baaacfbafcbe"
-
-[[package]]
-name = "option-ext"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
-
-[[package]]
-name = "page_size"
-version = "0.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "30d5b2194ed13191c1999ae0704b7839fb18384fa22e49b57eeaa97d79ce40da"
-dependencies = [
- "libc",
- "winapi",
-]
-
-[[package]]
-name = "parking_lot"
-version = "0.12.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
-dependencies = [
- "lock_api",
- "parking_lot_core",
-]
-
-[[package]]
-name = "parking_lot_core"
-version = "0.9.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
-dependencies = [
- "cfg-if",
- "libc",
- "redox_syscall",
- "smallvec",
- "windows-link",
-]
-
-[[package]]
-name = "percent-encoding"
-version = "2.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
-
-[[package]]
-name = "pin-project-lite"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
-
-[[package]]
-name = "pin-utils"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
-
-[[package]]
-name = "plain"
-version = "0.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b4596b6d070b27117e987119b4dac604f3c58cfb0b191112e24771b2faeac1a6"
-
-[[package]]
-name = "portable-atomic"
-version = "1.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49"
-
-[[package]]
-name = "postcard"
-version = "1.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6764c3b5dd454e283a30e6dfe78e9b31096d9e32036b5d1eaac7a6119ccb9a24"
-dependencies = [
- "cobs",
- "embedded-io 0.4.0",
- "embedded-io 0.6.1",
- "serde",
-]
-
-[[package]]
-name = "potential_utf"
-version = "0.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
-dependencies = [
- "zerovec",
-]
-
-[[package]]
-name = "ppv-lite86"
-version = "0.2.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
-dependencies = [
- "zerocopy",
-]
-
-[[package]]
-name = "prettyplease"
-version = "0.2.37"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
-dependencies = [
- "proc-macro2",
- "syn",
-]
-
-[[package]]
-name = "proc-macro2"
-version = "1.0.106"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "profiler"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "cfg-if",
- "syslog",
-]
-
-[[package]]
-name = "pulley-interpreter"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df866b7fd522992ccc6682e58b2741cc7972b163b661db24c4328f4c914cb09d"
-dependencies = [
- "cranelift-bitset",
- "log",
- "pulley-macros",
- "wasmtime-internal-core",
-]
-
-[[package]]
-name = "pulley-macros"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f7dfa8354acc622b3857e1bb1a4e4315d3bc1a44ad31d5653c3e87c0da9306d7"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "quinn"
-version = "0.11.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
-dependencies = [
- "bytes",
- "cfg_aliases",
- "pin-project-lite",
- "quinn-proto",
- "quinn-udp",
- "rustc-hash",
- "rustls",
- "socket2",
- "thiserror 2.0.18",
- "tokio",
- "tracing",
- "web-time",
-]
-
-[[package]]
-name = "quinn-proto"
-version = "0.11.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
-dependencies = [
- "aws-lc-rs",
- "bytes",
- "getrandom 0.3.4",
- "lru-slab",
- "rand 0.9.2",
- "ring",
- "rustc-hash",
- "rustls",
- "rustls-pki-types",
- "slab",
- "thiserror 2.0.18",
- "tinyvec",
- "tracing",
- "web-time",
-]
-
-[[package]]
-name = "quinn-udp"
-version = "0.5.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
-dependencies = [
- "cfg_aliases",
- "libc",
- "once_cell",
- "socket2",
- "tracing",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "quote"
-version = "1.0.45"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
-dependencies = [
- "proc-macro2",
-]
-
-[[package]]
-name = "r-efi"
-version = "5.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
-
-[[package]]
-name = "r-efi"
-version = "6.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
-
-[[package]]
-name = "rand"
-version = "0.8.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
-dependencies = [
- "libc",
- "rand_chacha 0.3.1",
- "rand_core 0.6.4",
-]
-
-[[package]]
-name = "rand"
-version = "0.9.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
-dependencies = [
- "rand_chacha 0.9.0",
- "rand_core 0.9.5",
-]
-
-[[package]]
-name = "rand_chacha"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
-dependencies = [
- "ppv-lite86",
- "rand_core 0.6.4",
-]
-
-[[package]]
-name = "rand_chacha"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
-dependencies = [
- "ppv-lite86",
- "rand_core 0.9.5",
-]
-
-[[package]]
-name = "rand_core"
-version = "0.6.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
-dependencies = [
- "getrandom 0.2.17",
-]
-
-[[package]]
-name = "rand_core"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
-dependencies = [
- "getrandom 0.3.4",
-]
-
-[[package]]
-name = "redox_syscall"
-version = "0.5.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
-dependencies = [
- "bitflags 2.11.0",
-]
-
-[[package]]
-name = "redox_users"
-version = "0.5.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a4e608c6638b9c18977b00b475ac1f28d14e84b27d8d42f70e0bf1e3dec127ac"
-dependencies = [
- "getrandom 0.2.17",
- "libredox",
- "thiserror 2.0.18",
-]
-
-[[package]]
-name = "regalloc2"
-version = "0.15.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "952ddbfc6f9f64d006c3efd8c9851a6ba2f2b944ba94730db255d55006e0ffda"
-dependencies = [
- "allocator-api2",
- "bumpalo",
- "hashbrown 0.15.5",
- "log",
- "rustc-hash",
- "smallvec",
-]
-
-[[package]]
-name = "regex"
-version = "1.12.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e10754a14b9137dd7b1e3e5b0493cc9171fdd105e0ab477f51b72e7f3ac0e276"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-automata",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-automata"
-version = "0.4.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-syntax"
-version = "0.8.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
-
-[[package]]
-name = "reqwest"
-version = "0.13.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ab3f43e3283ab1488b624b44b0e988d0acea0b3214e694730a055cb6b2efa801"
-dependencies = [
- "base64",
- "bytes",
- "futures-core",
- "http",
- "http-body",
- "http-body-util",
- "hyper",
- "hyper-rustls",
- "hyper-util",
- "js-sys",
- "log",
- "percent-encoding",
- "pin-project-lite",
- "quinn",
- "rustls",
- "rustls-pki-types",
- "rustls-platform-verifier",
- "serde",
- "serde_json",
- "sync_wrapper",
- "tokio",
- "tokio-rustls",
- "tower",
- "tower-http",
- "tower-service",
- "url",
- "wasm-bindgen",
- "wasm-bindgen-futures",
- "web-sys",
-]
-
-[[package]]
-name = "ring"
-version = "0.17.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
-dependencies = [
- "cc",
- "cfg-if",
- "getrandom 0.2.17",
- "libc",
- "untrusted",
- "windows-sys 0.52.0",
-]
-
-[[package]]
-name = "rust-embed"
-version = "8.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "04113cb9355a377d83f06ef1f0a45b8ab8cd7d8b1288160717d66df5c7988d27"
-dependencies = [
- "rust-embed-impl",
- "rust-embed-utils",
- "walkdir",
-]
-
-[[package]]
-name = "rust-embed-impl"
-version = "8.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "da0902e4c7c8e997159ab384e6d0fc91c221375f6894346ae107f47dd0f3ccaa"
-dependencies = [
- "proc-macro2",
- "quote",
- "rust-embed-utils",
- "shellexpand",
- "syn",
- "walkdir",
-]
-
-[[package]]
-name = "rust-embed-utils"
-version = "8.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5bcdef0be6fe7f6fa333b1073c949729274b05f123a0ad7efcb8efd878e5c3b1"
-dependencies = [
- "globset",
- "sha2",
- "walkdir",
-]
-
-[[package]]
-name = "rustc-demangle"
-version = "0.1.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b50b8869d9fc858ce7266cce0194bd74df58b9d0e3f6df3a9fc8eb470d95c09d"
-
-[[package]]
-name = "rustc-hash"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
-
-[[package]]
-name = "rustc_version"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
-dependencies = [
- "semver",
-]
-
-[[package]]
-name = "rustix"
-version = "0.38.44"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"
-dependencies = [
- "bitflags 2.11.0",
- "errno",
- "libc",
- "linux-raw-sys 0.4.15",
- "windows-sys 0.52.0",
-]
-
-[[package]]
-name = "rustix"
-version = "1.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
-dependencies = [
- "bitflags 2.11.0",
- "errno",
- "libc",
- "linux-raw-sys 0.12.1",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "rustix-linux-procfs"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2fc84bf7e9aa16c4f2c758f27412dc9841341e16aa682d9c7ac308fe3ee12056"
-dependencies = [
- "once_cell",
- "rustix 1.1.4",
-]
-
-[[package]]
-name = "rustls"
-version = "0.23.37"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "758025cb5fccfd3bc2fd74708fd4682be41d99e5dff73c377c0646c6012c73a4"
-dependencies = [
- "aws-lc-rs",
- "log",
- "once_cell",
- "ring",
- "rustls-pki-types",
- "rustls-webpki",
- "subtle",
- "zeroize",
-]
-
-[[package]]
-name = "rustls-native-certs"
-version = "0.8.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "612460d5f7bea540c490b2b6395d8e34a953e52b491accd6c86c8164c5932a63"
-dependencies = [
- "openssl-probe",
- "rustls-pki-types",
- "schannel",
- "security-framework",
-]
-
-[[package]]
-name = "rustls-pki-types"
-version = "1.14.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "be040f8b0a225e40375822a563fa9524378b9d63112f53e19ffff34df5d33fdd"
-dependencies = [
- "web-time",
- "zeroize",
-]
-
-[[package]]
-name = "rustls-platform-verifier"
-version = "0.6.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d99feebc72bae7ab76ba994bb5e121b8d83d910ca40b36e0921f53becc41784"
-dependencies = [
- "core-foundation 0.10.1",
- "core-foundation-sys",
- "jni",
- "log",
- "once_cell",
- "rustls",
- "rustls-native-certs",
- "rustls-platform-verifier-android",
- "rustls-webpki",
- "security-framework",
- "security-framework-sys",
- "webpki-root-certs",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "rustls-platform-verifier-android"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f"
-
-[[package]]
-name = "rustls-webpki"
-version = "0.103.13"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
-dependencies = [
- "aws-lc-rs",
- "ring",
- "rustls-pki-types",
- "untrusted",
-]
-
-[[package]]
-name = "rustversion"
-version = "1.0.22"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
-
-[[package]]
-name = "same-file"
-version = "1.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
-dependencies = [
- "winapi-util",
-]
-
-[[package]]
-name = "schannel"
-version = "0.1.29"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "91c1b7e4904c873ef0710c1f407dde2e6287de2bebc1bbbf7d430bb7cbffd939"
-dependencies = [
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "scopeguard"
-version = "1.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
-
-[[package]]
-name = "scroll"
-version = "0.13.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c1257cd4248b4132760d6524d6dda4e053bc648c9070b960929bf50cfb1e7add"
-dependencies = [
- "scroll_derive",
-]
-
-[[package]]
-name = "scroll_derive"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed76efe62313ab6610570951494bdaa81568026e0318eaa55f167de70eeea67d"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "security-framework"
-version = "3.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
-dependencies = [
- "bitflags 2.11.0",
- "core-foundation 0.10.1",
- "core-foundation-sys",
- "libc",
- "security-framework-sys",
-]
-
-[[package]]
-name = "security-framework-sys"
-version = "2.17.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ce2691df843ecc5d231c0b14ece2acc3efb62c0a398c7e1d875f3983ce020e3"
-dependencies = [
- "core-foundation-sys",
- "libc",
-]
-
-[[package]]
-name = "semver"
-version = "1.0.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
-dependencies = [
- "serde",
- "serde_core",
-]
-
-[[package]]
-name = "serde"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
-dependencies = [
- "serde_core",
- "serde_derive",
-]
-
-[[package]]
-name = "serde_cbor"
-version = "0.11.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2bef2ebfde456fb76bbcf9f59315333decc4fda0b2b44b420243c11e0f5ec1f5"
-dependencies = [
- "half",
- "serde",
-]
-
-[[package]]
-name = "serde_core"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
-dependencies = [
- "serde_derive",
-]
-
-[[package]]
-name = "serde_derive"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "serde_json"
-version = "1.0.149"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
-dependencies = [
- "itoa",
- "memchr",
- "serde",
- "serde_core",
- "zmij",
-]
-
-[[package]]
-name = "sha2"
-version = "0.10.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
-dependencies = [
- "cfg-if",
- "cpufeatures",
- "digest",
-]
-
-[[package]]
-name = "sha256"
-version = "1.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f880fc8562bdeb709793f00eb42a2ad0e672c4f883bbe59122b926eca935c8f6"
-dependencies = [
- "async-trait",
- "bytes",
- "hex",
- "sha2",
- "tokio",
-]
-
-[[package]]
-name = "shellexpand"
-version = "3.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32824fab5e16e6c4d86dc1ba84489390419a39f97699852b66480bb87d297ed8"
-dependencies = [
- "dirs",
-]
-
-[[package]]
-name = "shlex"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
-
-[[package]]
-name = "signal-hook"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b57709da74f9ff9f4a27dce9526eec25ca8407c45a7887243b031a58935fb8e"
-dependencies = [
- "libc",
- "signal-hook-registry",
-]
-
-[[package]]
-name = "signal-hook-registry"
-version = "1.4.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
-dependencies = [
- "errno",
- "libc",
-]
-
-[[package]]
-name = "slab"
-version = "0.4.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
-
-[[package]]
-name = "smallvec"
-version = "1.15.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "socket2"
-version = "0.6.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e"
-dependencies = [
- "libc",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "spin"
-version = "0.10.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d5fe4ccb98d9c292d56fec89a5e07da7fc4cf0dc11e156b41793132775d3e591"
-dependencies = [
- "lock_api",
-]
-
-[[package]]
-name = "spin"
-version = "0.10.0"
-source = "git+https://github.com/nanvix/spin-rs?branch=nanvix%2Fv0.10.0#ec00ed314406d2cc8313ef72c06178619ee0b48c"
-
-[[package]]
-name = "stable_deref_trait"
-version = "1.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
-
-[[package]]
-name = "static_assert"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-
-[[package]]
-name = "strsim"
-version = "0.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
-
-[[package]]
-name = "subtle"
-version = "2.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
-
-[[package]]
-name = "syn"
-version = "2.0.117"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
-
-[[package]]
-name = "sync_wrapper"
-version = "1.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
-dependencies = [
- "futures-core",
-]
-
-[[package]]
-name = "synstructure"
-version = "0.13.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "sys"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "config",
- "error",
- "static_assert",
-]
-
-[[package]]
-name = "sysapi"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "config",
- "static_assert",
-]
-
-[[package]]
-name = "syscall"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "arch",
- "cfg-if",
- "config",
- "spin 0.10.0 (git+https://github.com/nanvix/spin-rs?branch=nanvix%2Fv0.10.0)",
- "static_assert",
- "sys",
- "sysapi",
- "type-safe",
-]
-
-[[package]]
-name = "syscomm"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "config",
- "libc",
- "num_enum",
- "syslog",
- "tokio",
-]
-
-[[package]]
-name = "syslog"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "flexi_logger",
- "log",
- "syslog-macros",
-]
-
-[[package]]
-name = "syslog-macros"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "system-configuration"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a13f3d0daba03132c0aa9767f98351b3488edc2c100cda2d2ec2b04f3d8d3c8b"
-dependencies = [
- "bitflags 2.11.0",
- "core-foundation 0.9.4",
- "system-configuration-sys",
-]
-
-[[package]]
-name = "system-configuration-sys"
-version = "0.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
-dependencies = [
- "core-foundation-sys",
- "libc",
-]
-
-[[package]]
-name = "system-interface"
-version = "0.27.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cc4592f674ce18521c2a81483873a49596655b179f71c5e05d10c1fe66c78745"
-dependencies = [
- "bitflags 2.11.0",
- "cap-fs-ext",
- "cap-std 3.4.5",
- "fd-lock",
- "io-lifetimes 2.0.4",
- "rustix 0.38.44",
- "windows-sys 0.52.0",
- "winx",
-]
-
-[[package]]
-name = "target-lexicon"
-version = "0.13.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
-
-[[package]]
-name = "tempfile"
-version = "3.27.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
-dependencies = [
- "fastrand",
- "getrandom 0.4.2",
- "once_cell",
- "rustix 1.1.4",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "termcolor"
-version = "1.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06794f8f6c5c898b3275aebefa6b8a1cb24cd2c6c79397ab15774837a0bc5755"
-dependencies = [
- "winapi-util",
-]
-
-[[package]]
-name = "thiserror"
-version = "1.0.69"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
-dependencies = [
- "thiserror-impl 1.0.69",
-]
-
-[[package]]
-name = "thiserror"
-version = "2.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
-dependencies = [
- "thiserror-impl 2.0.18",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "1.0.69"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "2.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "tinystr"
-version = "0.8.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
-dependencies = [
- "displaydoc",
- "zerovec",
-]
-
-[[package]]
-name = "tinyvec"
-version = "1.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3e61e67053d25a4e82c844e8424039d9745781b3fc4f32b8d55ed50f5f667ef3"
-dependencies = [
- "tinyvec_macros",
-]
-
-[[package]]
-name = "tinyvec_macros"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
-
-[[package]]
-name = "tokio"
-version = "1.50.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "27ad5e34374e03cfffefc301becb44e9dc3c17584f414349ebe29ed26661822d"
-dependencies = [
- "bytes",
- "libc",
- "mio",
- "parking_lot",
- "pin-project-lite",
- "signal-hook-registry",
- "socket2",
- "tokio-macros",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "tokio-macros"
-version = "2.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c55a2eff8b69ce66c84f85e1da1c233edc36ceb85a2058d11b0d6a3c7e7569c"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "tokio-rustls"
-version = "0.26.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
-dependencies = [
- "rustls",
- "tokio",
-]
-
-[[package]]
-name = "tokio-util"
-version = "0.7.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
-dependencies = [
- "bytes",
- "futures-core",
- "futures-sink",
- "pin-project-lite",
- "tokio",
-]
-
-[[package]]
-name = "tower"
-version = "0.5.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
-dependencies = [
- "futures-core",
- "futures-util",
- "pin-project-lite",
- "sync_wrapper",
- "tokio",
- "tower-layer",
- "tower-service",
-]
-
-[[package]]
-name = "tower-http"
-version = "0.6.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4e6559d53cc268e5031cd8429d05415bc4cb4aefc4aa5d6cc35fbf5b924a1f8"
-dependencies = [
- "bitflags 2.11.0",
- "bytes",
- "futures-util",
- "http",
- "http-body",
- "iri-string",
- "pin-project-lite",
- "tower",
- "tower-layer",
- "tower-service",
-]
-
-[[package]]
-name = "tower-layer"
-version = "0.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
-
-[[package]]
-name = "tower-service"
-version = "0.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
-
-[[package]]
-name = "tracing"
-version = "0.1.44"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
-dependencies = [
- "log",
- "pin-project-lite",
- "tracing-attributes",
- "tracing-core",
-]
-
-[[package]]
-name = "tracing-attributes"
-version = "0.1.31"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "tracing-core"
-version = "0.1.36"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
-dependencies = [
- "once_cell",
- "valuable",
-]
-
-[[package]]
-name = "tracing-log"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
-dependencies = [
- "log",
- "once_cell",
- "tracing-core",
-]
-
-[[package]]
-name = "try-lock"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
-
-[[package]]
-name = "type-safe"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-
-[[package]]
-name = "typenum"
-version = "1.19.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
-
-[[package]]
-name = "unicode-ident"
-version = "1.0.24"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
-
-[[package]]
-name = "unicode-xid"
-version = "0.2.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
-
-[[package]]
-name = "untrusted"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
-
-[[package]]
-name = "url"
-version = "2.5.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
-dependencies = [
- "form_urlencoded",
- "idna",
- "percent-encoding",
- "serde",
-]
-
-[[package]]
-name = "user-vm-api"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "config",
- "serde",
- "syscomm",
- "syslog",
- "tokio",
-]
-
-[[package]]
-name = "uservm"
-version = "0.11.133"
-source = "git+https://github.com/nanvix/nanvix?rev=cc9c508918bd17678e9d790f10a6a7c20b7902da#cc9c508918bd17678e9d790f10a6a7c20b7902da"
-dependencies = [
- "anyhow",
- "arch",
- "cfg-if",
- "config",
- "control-plane-api",
- "hyperlight-host",
- "kvm-bindings",
- "kvm-ioctls",
- "libc",
- "profiler",
- "serde",
- "serde_cbor",
- "static_assert",
- "sys",
- "syscall",
- "syscomm",
- "syslog",
- "tokio",
- "user-vm-api",
- "vmm-sys-util",
-]
-
-[[package]]
-name = "utf8_iter"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
-
-[[package]]
-name = "utf8parse"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
-
-[[package]]
-name = "uuid"
-version = "1.22.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a68d3c8f01c0cfa54a75291d83601161799e4a89a39e0929f4b0354d88757a37"
-dependencies = [
- "getrandom 0.4.2",
- "js-sys",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "valuable"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
-
-[[package]]
-name = "version_check"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
-
-[[package]]
-name = "vmm-sys-util"
-version = "0.15.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "506c62fdf617a5176827c2f9afbcf1be155b03a9b4bf9617a60dbc07e3a1642f"
-dependencies = [
- "bitflags 1.3.2",
- "libc",
-]
-
-[[package]]
-name = "walkdir"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
-dependencies = [
- "same-file",
- "winapi-util",
-]
-
-[[package]]
-name = "want"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
-dependencies = [
- "try-lock",
-]
-
-[[package]]
-name = "wasi"
-version = "0.11.1+wasi-snapshot-preview1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
-
-[[package]]
-name = "wasip2"
-version = "1.0.2+wasi-0.2.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5"
-dependencies = [
- "wit-bindgen",
-]
-
-[[package]]
-name = "wasip3"
-version = "0.4.0+wasi-0.3.0-rc-2026-01-06"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5428f8bf88ea5ddc08faddef2ac4a67e390b88186c703ce6dbd955e1c145aca5"
-dependencies = [
- "wit-bindgen",
-]
-
-[[package]]
-name = "wasm-bindgen"
-version = "0.2.114"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6532f9a5c1ece3798cb1c2cfdba640b9b3ba884f5db45973a6f442510a87d38e"
-dependencies = [
- "cfg-if",
- "once_cell",
- "rustversion",
- "wasm-bindgen-macro",
- "wasm-bindgen-shared",
-]
-
-[[package]]
-name = "wasm-bindgen-futures"
-version = "0.4.64"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e9c5522b3a28661442748e09d40924dfb9ca614b21c00d3fd135720e48b67db8"
-dependencies = [
- "cfg-if",
- "futures-util",
- "js-sys",
- "once_cell",
- "wasm-bindgen",
- "web-sys",
-]
-
-[[package]]
-name = "wasm-bindgen-macro"
-version = "0.2.114"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "18a2d50fcf105fb33bb15f00e7a77b772945a2ee45dcf454961fd843e74c18e6"
-dependencies = [
- "quote",
- "wasm-bindgen-macro-support",
-]
-
-[[package]]
-name = "wasm-bindgen-macro-support"
-version = "0.2.114"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "03ce4caeaac547cdf713d280eda22a730824dd11e6b8c3ca9e42247b25c631e3"
-dependencies = [
- "bumpalo",
- "proc-macro2",
- "quote",
- "syn",
- "wasm-bindgen-shared",
-]
-
-[[package]]
-name = "wasm-bindgen-shared"
-version = "0.2.114"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75a326b8c223ee17883a4251907455a2431acc2791c98c26279376490c378c16"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "wasm-encoder"
-version = "0.244.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
-dependencies = [
- "leb128fmt",
- "wasmparser 0.244.0",
-]
-
-[[package]]
-name = "wasm-encoder"
-version = "0.246.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61fb705ce81adde29d2a8e99d87995e39a6e927358c91398f374474746070ef7"
-dependencies = [
- "leb128fmt",
- "wasmparser 0.246.2",
-]
-
-[[package]]
-name = "wasm-metadata"
-version = "0.244.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
-dependencies = [
- "anyhow",
- "indexmap",
- "wasm-encoder 0.244.0",
- "wasmparser 0.244.0",
-]
-
-[[package]]
-name = "wasmparser"
-version = "0.244.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe"
-dependencies = [
- "bitflags 2.11.0",
- "hashbrown 0.15.5",
- "indexmap",
- "semver",
-]
-
-[[package]]
-name = "wasmparser"
-version = "0.246.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "71cde4757396defafd25417cfb36aa3161027d06d865b0c24baaae229aac005d"
-dependencies = [
- "bitflags 2.11.0",
- "hashbrown 0.16.1",
- "indexmap",
- "semver",
- "serde",
-]
-
-[[package]]
-name = "wasmprinter"
-version = "0.246.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e41f7493ba994b8a779430a4c25ff550fd5a40d291693af43a6ef48688f00e3"
-dependencies = [
- "anyhow",
- "termcolor",
- "wasmparser 0.246.2",
-]
-
-[[package]]
-name = "wasmtime"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fca3f777dfb4db45915f95eeb25cac7f2eeb268797a27e5eb78b072618135c7f"
-dependencies = [
- "addr2line",
- "async-trait",
- "bitflags 2.11.0",
- "bumpalo",
- "cc",
- "cfg-if",
- "encoding_rs",
- "libc",
- "log",
- "mach2",
- "memfd",
- "object",
- "once_cell",
- "postcard",
- "pulley-interpreter",
- "rustix 1.1.4",
- "semver",
- "serde",
- "serde_derive",
- "smallvec",
- "target-lexicon",
- "wasmparser 0.246.2",
- "wasmtime-environ",
- "wasmtime-internal-component-macro",
- "wasmtime-internal-component-util",
- "wasmtime-internal-core",
- "wasmtime-internal-cranelift",
- "wasmtime-internal-fiber",
- "wasmtime-internal-jit-debug",
- "wasmtime-internal-jit-icache-coherence",
- "wasmtime-internal-unwinder",
- "wasmtime-internal-versioned-export-macros",
- "wasmtime-internal-winch",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "wasmtime-environ"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c5ca1af838cec374931242d07af5d354aedf63f297f95b3625ac863e516ef67"
-dependencies = [
- "anyhow",
- "cpp_demangle",
- "cranelift-bforest",
- "cranelift-bitset",
- "cranelift-entity",
- "gimli",
- "hashbrown 0.16.1",
- "indexmap",
- "log",
- "object",
- "postcard",
- "rustc-demangle",
- "semver",
- "serde",
- "serde_derive",
- "sha2",
- "smallvec",
- "target-lexicon",
- "wasm-encoder 0.246.2",
- "wasmparser 0.246.2",
- "wasmprinter",
- "wasmtime-internal-component-util",
- "wasmtime-internal-core",
-]
-
-[[package]]
-name = "wasmtime-internal-component-macro"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "58b31927f7b613d8fe019609744e226f6458d8aa5e6289e92fbbc60e521cd026"
-dependencies = [
- "anyhow",
- "proc-macro2",
- "quote",
- "syn",
- "wasmtime-internal-component-util",
- "wasmtime-internal-wit-bindgen",
- "wit-parser 0.246.2",
-]
-
-[[package]]
-name = "wasmtime-internal-component-util"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc29e3478928b93979831ba02a997ce7f707c673ce47180d643091cf4fa4f561"
-
-[[package]]
-name = "wasmtime-internal-core"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "816a61a75275c6be435131fc625a4f5956daf24d9f9f59443e81cbef228929b3"
-dependencies = [
- "hashbrown 0.16.1",
- "libm",
- "serde",
-]
-
-[[package]]
-name = "wasmtime-internal-cranelift"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "69ceb5e079877e7e4565c1e2d86d9db889175d55f7ca0001315576d08c71e634"
-dependencies = [
- "cfg-if",
- "cranelift-codegen",
- "cranelift-control",
- "cranelift-entity",
- "cranelift-frontend",
- "cranelift-native",
- "gimli",
- "itertools",
- "log",
- "object",
- "pulley-interpreter",
- "smallvec",
- "target-lexicon",
- "thiserror 2.0.18",
- "wasmparser 0.246.2",
- "wasmtime-environ",
- "wasmtime-internal-core",
- "wasmtime-internal-unwinder",
- "wasmtime-internal-versioned-export-macros",
-]
-
-[[package]]
-name = "wasmtime-internal-fiber"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e18f8bb05d25e0d4cca7278147c9f9e2f26f66886ef754b562bf729128f1e537"
-dependencies = [
- "cc",
- "cfg-if",
- "libc",
- "rustix 1.1.4",
- "wasmtime-environ",
- "wasmtime-internal-versioned-export-macros",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "wasmtime-internal-jit-debug"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "357f1070b31154ee463937b477ca0b2962bf450b40fc59799bef2f656b15da73"
-dependencies = [
- "cc",
- "wasmtime-internal-versioned-export-macros",
-]
-
-[[package]]
-name = "wasmtime-internal-jit-icache-coherence"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2fd683a94490bf755d016a09697b0955602c50106b1ded97d16983ab2ded9fed"
-dependencies = [
- "cfg-if",
- "libc",
- "wasmtime-internal-core",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "wasmtime-internal-unwinder"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4471746ce113c3c1862ce2c0674acb35399a4b3ed3ef4531dc087f333c74f064"
-dependencies = [
- "cfg-if",
- "cranelift-codegen",
- "log",
- "object",
- "wasmtime-environ",
-]
-
-[[package]]
-name = "wasmtime-internal-versioned-export-macros"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6af582ec18b674bf7a17775d6fbfbddfcc143f0edbd89c9c1778239c8aa92ed"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "wasmtime-internal-winch"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d31be8916bb60ea756d2f0ae1f634d9258442aa71e773c893e2f4cead30501b5"
-dependencies = [
- "cranelift-codegen",
- "gimli",
- "log",
- "object",
- "target-lexicon",
- "wasmparser 0.246.2",
- "wasmtime-environ",
- "wasmtime-internal-cranelift",
- "winch-codegen",
-]
-
-[[package]]
-name = "wasmtime-internal-wit-bindgen"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e2150e63d502ab2d64754e5abe8eb737ae674b7dd4ad53144fd16bbeceaf4a19"
-dependencies = [
- "anyhow",
- "bitflags 2.11.0",
- "heck",
- "indexmap",
- "wit-parser 0.246.2",
-]
-
-[[package]]
-name = "wasmtime-wasi"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83f5109b4fd619b9796b9c9901de59d83e3575cd1226c1a36d1901371f43db28"
-dependencies = [
- "async-trait",
- "bitflags 2.11.0",
- "bytes",
- "cap-fs-ext",
- "cap-net-ext",
- "cap-rand",
- "cap-std 3.4.5",
- "cap-time-ext",
- "fs-set-times",
- "futures",
- "io-extras 0.18.4",
- "io-lifetimes 2.0.4",
- "rustix 1.1.4",
- "system-interface",
- "thiserror 2.0.18",
- "tokio",
- "tracing",
- "url",
- "wasmtime",
- "wasmtime-wasi-io",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "wasmtime-wasi-http"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5798e6e48005406983ba6a7b27f3832f1571e53f1401ef2d60111c96eab534b4"
-dependencies = [
- "async-trait",
- "bytes",
- "futures",
- "http",
- "http-body",
- "http-body-util",
- "hyper",
- "rustls",
- "tokio",
- "tokio-rustls",
- "tracing",
- "wasmtime",
- "wasmtime-wasi",
- "wasmtime-wasi-io",
- "webpki-roots 0.26.11",
-]
-
-[[package]]
-name = "wasmtime-wasi-io"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "74ebe14c586e98d2fdc32c76ca0005ef28348e98ed737e776d378b3b0cc2afd0"
-dependencies = [
- "async-trait",
- "bytes",
- "futures",
- "tracing",
- "wasmtime",
-]
-
-[[package]]
-name = "web-sys"
-version = "0.3.91"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "854ba17bb104abfb26ba36da9729addc7ce7f06f5c0f90f3c391f8461cca21f9"
-dependencies = [
- "js-sys",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "web-time"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
-dependencies = [
- "js-sys",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "webpki-root-certs"
-version = "1.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "804f18a4ac2676ffb4e8b5b5fa9ae38af06df08162314f96a68d2a363e21a8ca"
-dependencies = [
- "rustls-pki-types",
-]
-
-[[package]]
-name = "webpki-roots"
-version = "0.26.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9"
-dependencies = [
- "webpki-roots 1.0.6",
-]
-
-[[package]]
-name = "webpki-roots"
-version = "1.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22cfaf3c063993ff62e73cb4311efde4db1efb31ab78a3e5c457939ad5cc0bed"
-dependencies = [
- "rustls-pki-types",
-]
-
-[[package]]
-name = "winapi"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
-dependencies = [
- "winapi-i686-pc-windows-gnu",
- "winapi-x86_64-pc-windows-gnu",
-]
-
-[[package]]
-name = "winapi-i686-pc-windows-gnu"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
-
-[[package]]
-name = "winapi-util"
-version = "0.1.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
-dependencies = [
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "winapi-x86_64-pc-windows-gnu"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
-
-[[package]]
-name = "winch-codegen"
-version = "44.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9339858ad222412200fd8b1af9e270712201aaec440c7618991443af3446481f"
-dependencies = [
- "cranelift-assembler-x64",
- "cranelift-codegen",
- "gimli",
- "regalloc2",
- "smallvec",
- "target-lexicon",
- "thiserror 2.0.18",
- "wasmparser 0.246.2",
- "wasmtime-environ",
- "wasmtime-internal-core",
- "wasmtime-internal-cranelift",
-]
-
-[[package]]
-name = "windows"
-version = "0.62.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
-dependencies = [
- "windows-collections",
- "windows-core",
- "windows-future",
- "windows-numerics",
-]
-
-[[package]]
-name = "windows-collections"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
-dependencies = [
- "windows-core",
-]
-
-[[package]]
-name = "windows-core"
-version = "0.62.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
-dependencies = [
- "windows-implement",
- "windows-interface",
- "windows-link",
- "windows-result",
- "windows-strings",
-]
-
-[[package]]
-name = "windows-future"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
-dependencies = [
- "windows-core",
- "windows-link",
- "windows-threading",
-]
-
-[[package]]
-name = "windows-implement"
-version = "0.60.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "windows-interface"
-version = "0.59.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "windows-link"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
-
-[[package]]
-name = "windows-numerics"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
-dependencies = [
- "windows-core",
- "windows-link",
-]
-
-[[package]]
-name = "windows-registry"
-version = "0.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "02752bf7fbdcce7f2a27a742f798510f3e5ad88dbe84871e5168e2120c3d5720"
-dependencies = [
- "windows-link",
- "windows-result",
- "windows-strings",
-]
-
-[[package]]
-name = "windows-result"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-strings"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.45.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75283be5efb2831d37ea142365f009c02ec203cd29a3ebecbc093d52315b66d0"
-dependencies = [
- "windows-targets 0.42.2",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.52.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
-dependencies = [
- "windows-targets 0.52.6",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.60.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
-dependencies = [
- "windows-targets 0.53.5",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.61.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e5180c00cd44c9b1c88adb3693291f1cd93605ded80c250a75d472756b4d071"
-dependencies = [
- "windows_aarch64_gnullvm 0.42.2",
- "windows_aarch64_msvc 0.42.2",
- "windows_i686_gnu 0.42.2",
- "windows_i686_msvc 0.42.2",
- "windows_x86_64_gnu 0.42.2",
- "windows_x86_64_gnullvm 0.42.2",
- "windows_x86_64_msvc 0.42.2",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
-dependencies = [
- "windows_aarch64_gnullvm 0.52.6",
- "windows_aarch64_msvc 0.52.6",
- "windows_i686_gnu 0.52.6",
- "windows_i686_gnullvm 0.52.6",
- "windows_i686_msvc 0.52.6",
- "windows_x86_64_gnu 0.52.6",
- "windows_x86_64_gnullvm 0.52.6",
- "windows_x86_64_msvc 0.52.6",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.53.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
-dependencies = [
- "windows-link",
- "windows_aarch64_gnullvm 0.53.1",
- "windows_aarch64_msvc 0.53.1",
- "windows_i686_gnu 0.53.1",
- "windows_i686_gnullvm 0.53.1",
- "windows_i686_msvc 0.53.1",
- "windows_x86_64_gnu 0.53.1",
- "windows_x86_64_gnullvm 0.53.1",
- "windows_x86_64_msvc 0.53.1",
-]
-
-[[package]]
-name = "windows-threading"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-version"
-version = "0.1.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e4060a1da109b9d0326b7262c8e12c84df67cc0dbc9e33cf49e01ccc2eb63631"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "597a5118570b68bc08d8d59125332c54f1ba9d9adeedeef5b99b02ba2b0698f8"
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e08e8864a60f06ef0d0ff4ba04124db8b0fb3be5776a5cd47641e942e58c4d43"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c61d927d8da41da96a81f029489353e68739737d3beca43145c8afec9a31a84f"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
-
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
-
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "44d840b6ec649f480a41c8d80f9c65108b92d89345dd94027bfe06ac444d1060"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8de912b8b8feb55c064867cf047dda097f92d51efad5b491dfb98f6bbb70cb36"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "26d41b46a36d453748aedef1486d5c7a85db22e56aff34643984ea85514e94a3"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9aec5da331524158c6d1a4ac0ab1541149c0b9505fde06423b02f5ef0106b9f0"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
-
-[[package]]
-name = "winx"
-version = "0.36.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f3fd376f71958b862e7afb20cfe5a22830e1963462f3a17f49d82a6c1d1f42d"
-dependencies = [
- "bitflags 2.11.0",
- "windows-sys 0.52.0",
-]
-
-[[package]]
-name = "wit-bindgen"
-version = "0.51.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
-dependencies = [
- "wit-bindgen-rust-macro",
-]
-
-[[package]]
-name = "wit-bindgen-core"
-version = "0.51.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"
-dependencies = [
- "anyhow",
- "heck",
- "wit-parser 0.244.0",
-]
-
-[[package]]
-name = "wit-bindgen-rust"
-version = "0.51.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b7c566e0f4b284dd6561c786d9cb0142da491f46a9fbed79ea69cdad5db17f21"
-dependencies = [
- "anyhow",
- "heck",
- "indexmap",
- "prettyplease",
- "syn",
- "wasm-metadata",
- "wit-bindgen-core",
- "wit-component",
-]
-
-[[package]]
-name = "wit-bindgen-rust-macro"
-version = "0.51.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0c0f9bfd77e6a48eccf51359e3ae77140a7f50b1e2ebfe62422d8afdaffab17a"
-dependencies = [
- "anyhow",
- "prettyplease",
- "proc-macro2",
- "quote",
- "syn",
- "wit-bindgen-core",
- "wit-bindgen-rust",
-]
-
-[[package]]
-name = "wit-component"
-version = "0.244.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2"
-dependencies = [
- "anyhow",
- "bitflags 2.11.0",
- "indexmap",
- "log",
- "serde",
- "serde_derive",
- "serde_json",
- "wasm-encoder 0.244.0",
- "wasm-metadata",
- "wasmparser 0.244.0",
- "wit-parser 0.244.0",
-]
-
-[[package]]
-name = "wit-parser"
-version = "0.244.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ecc8ac4bc1dc3381b7f59c34f00b67e18f910c2c0f50015669dde7def656a736"
-dependencies = [
- "anyhow",
- "id-arena",
- "indexmap",
- "log",
- "semver",
- "serde",
- "serde_derive",
- "serde_json",
- "unicode-xid",
- "wasmparser 0.244.0",
-]
-
-[[package]]
-name = "wit-parser"
-version = "0.246.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fd979042b5ff288607ccf3b314145435453f20fc67173195f91062d2289b204d"
-dependencies = [
- "anyhow",
- "hashbrown 0.16.1",
- "id-arena",
- "indexmap",
- "log",
- "semver",
- "serde",
- "serde_derive",
- "serde_json",
- "unicode-xid",
- "wasmparser 0.246.2",
-]
-
-[[package]]
-name = "writeable"
-version = "0.6.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
-
-[[package]]
-name = "yoke"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
-dependencies = [
- "stable_deref_trait",
- "yoke-derive",
- "zerofrom",
-]
-
-[[package]]
-name = "yoke-derive"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
- "synstructure",
-]
-
-[[package]]
-name = "zerocopy"
-version = "0.8.47"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "efbb2a062be311f2ba113ce66f697a4dc589f85e78a4aea276200804cea0ed87"
-dependencies = [
- "zerocopy-derive",
-]
-
-[[package]]
-name = "zerocopy-derive"
-version = "0.8.47"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0e8bc7269b54418e7aeeef514aa68f8690b8c0489a06b0136e5f57c4c5ccab89"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "zerofrom"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
-dependencies = [
- "zerofrom-derive",
-]
-
-[[package]]
-name = "zerofrom-derive"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
- "synstructure",
-]
-
-[[package]]
-name = "zeroize"
-version = "1.8.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
-
-[[package]]
-name = "zerotrie"
-version = "0.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
-dependencies = [
- "displaydoc",
- "yoke",
- "zerofrom",
-]
-
-[[package]]
-name = "zerovec"
-version = "0.11.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
-dependencies = [
- "yoke",
- "zerofrom",
- "zerovec-derive",
-]
-
-[[package]]
-name = "zerovec-derive"
-version = "0.11.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "zmij"
-version = "1.0.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
diff --git a/src/nanvix_sandbox/Cargo.toml b/src/nanvix_sandbox/Cargo.toml
deleted file mode 100644
index 0d01b50..0000000
--- a/src/nanvix_sandbox/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "hyperlight-nanvix-sandbox"
-version = "0.4.0"
-edition = "2021"
-license = "Apache-2.0"
-description = "Nanvix microkernel sandbox backend for hyperlight-sandbox"
-
-[dependencies]
-hyperlight-sandbox = { path = "../hyperlight_sandbox" }
-hyperlight-nanvix = { git = "https://github.com/hyperlight-dev/hyperlight-nanvix", rev = "f4bc205a40ed072cbb5f26b141498477985782f7" }
-anyhow = "1"
-tokio = { version = "1", features = ["rt-multi-thread"] }
-tempfile = "3"
diff --git a/src/nanvix_sandbox/Justfile b/src/nanvix_sandbox/Justfile
deleted file mode 100644
index a2d0d37..0000000
--- a/src/nanvix_sandbox/Justfile
+++ /dev/null
@@ -1,16 +0,0 @@
-repo-root := invocation_directory_native()
-nanvix-rev := "f4bc205a40ed072cbb5f26b141498477985782f7"
-skip-msg := "echo 'Skipping nanvix (not supported on Windows)'"
-
-build:
-    {{ if os() == "windows" { skip-msg } else { "cd " + repo-root + "/src/nanvix_sandbox && cargo +nightly build" } }}
-
-setup-registry:
-    {{ if os() == "windows" { skip-msg } else { "@command -v hyperlight-nanvix >/dev/null 2>&1 || cargo +nightly install --git https://github.com/hyperlight-dev/hyperlight-nanvix --rev " + nanvix-rev + "\n    hyperlight-nanvix setup-registry" } }}
-
-#### EXAMPLES ####
-
-nanvix-sandbox-example: setup-registry
-    {{ if os() == "windows" { skip-msg } else { "cd " + repo-root + "/src/nanvix_sandbox && cargo +nightly run --example hello" } }}
-
-examples: nanvix-sandbox-example
diff --git a/src/nanvix_sandbox/examples/hello.rs b/src/nanvix_sandbox/examples/hello.rs
deleted file mode 100644
index 5fb3e87..0000000
--- a/src/nanvix_sandbox/examples/hello.rs
+++ /dev/null
@@ -1,91 +0,0 @@
-//! Example: run JavaScript and Python code in a Nanvix microkernel sandbox.
-
-use hyperlight_nanvix_sandbox::{NanvixJavaScript, NanvixPython};
-use hyperlight_sandbox::{Sandbox, SandboxBuilder};
-
-fn main() {
-    // --- JavaScript ---
-    println!("=== Nanvix JavaScript Sandbox ===\n");
-    let mut js_sandbox = match SandboxBuilder::new()
-        .guest(NanvixJavaScript)
-        .build()
-    {
-        Ok(s) => s,
-        Err(e) => {
-            eprintln!("Failed to create JS sandbox: {e:#}");
-            std::process::exit(1);
-        }
-    };
-
-    println!("--- Test 1: Basic JS execution ---");
-    match js_sandbox.run(
-        r#"
-console.log("Hello from JavaScript in Nanvix!");
-console.log("2 + 3 =", 2 + 3);
-"#,
-    ) {
-        Ok(result) => {
-            assert_eq!(result.exit_code, 0, "stderr: {}", result.stderr);
-            assert!(
-                result.stdout.contains("Hello from JavaScript in Nanvix!"),
-                "stdout was {:?}",
-                result.stdout
-            );
-            assert!(
-                result.stdout.contains("2 + 3 = 5"),
-                "stdout was {:?}",
-                result.stdout
-            );
-            println!("stdout: {:?}", result.stdout);
-            println!("exit_code: {}", result.exit_code);
-        }
-        Err(e) => panic!("Test 1 failed: {e}"),
-    }
-
-    // --- Python ---
-    println!("\n=== Nanvix Python Sandbox ===\n");
-    let mut py_sandbox = match SandboxBuilder::new()
-        .guest(NanvixPython)
-        .build()
-    {
-        Ok(s) => s,
-        Err(e) => {
-            eprintln!("Failed to create Python sandbox: {e:#}");
-            std::process::exit(1);
-        }
-    };
-
-    println!("--- Test 2: Basic Python execution ---");
-    match py_sandbox.run(
-        r#"
-print("Hello from Python in Nanvix!")
-print(f"2 + 3 = {2 + 3}")
-"#,
-    ) {
-        Ok(result) => {
-            assert_eq!(result.exit_code, 0, "stderr: {}", result.stderr);
-            assert!(
-                result.stdout.contains("Hello from Python in Nanvix!"),
-                "stdout was {:?}",
-                result.stdout
-            );
-            assert!(
-                result.stdout.contains("2 + 3 = 5"),
-                "stdout was {:?}",
-                result.stdout
-            );
-            println!("stdout: {:?}", result.stdout);
-            println!("exit_code: {}", result.exit_code);
-        }
-        Err(e) => panic!("Test 2 failed: {e}"),
-    }
-
-    // --- Snapshot (unsupported) ---
-    println!("\n--- Test 3: Snapshot (expected to fail) ---");
-    match js_sandbox.snapshot() {
-        Ok(_) => panic!("Snapshot should not succeed on Nanvix!"),
-        Err(e) => println!("Snapshot correctly unsupported: {e}"),
-    }
-
-    println!("\n\u{2705} All tests passed!");
-}
diff --git a/src/nanvix_sandbox/src/lib.rs b/src/nanvix_sandbox/src/lib.rs
deleted file mode 100644
index abe4626..0000000
--- a/src/nanvix_sandbox/src/lib.rs
+++ /dev/null
@@ -1,154 +0,0 @@
-//! Nanvix microkernel sandbox backend for hyperlight-sandbox.
-//!
-//! Runs JavaScript or Python workloads inside a Nanvix microkernel VM.
-//!
-//! **Limitations** compared to the Wasm/JS sandbox backends:
-//! - No host function / tool dispatch (guest code cannot call `call_tool`)
-//! - No snapshot/restore
-//! - File I/O and network are not available through the sandbox API
-//! - Output is captured from a guest console log file, not from WASI streams
-//!
-//! Supported:
-//! - Basic code execution (JS via QuickJS, Python via CPython)
-//! - stdout capture from the guest console log
-
-use std::io::Write;
-
-use anyhow::{Context, Result};
-use hyperlight_nanvix::{RuntimeConfig, Sandbox as NanvixSandboxInner, WorkloadType};
-use hyperlight_sandbox::{
-    ExecutionResult, Guest, GuestSandbox, SandboxConfig, Snapshot, ToolRegistry,
-};
-
-// ---------------------------------------------------------------------------
-// Guest types
-// ---------------------------------------------------------------------------
-
-/// Guest type for running JavaScript via QuickJS in a Nanvix microkernel.
-#[derive(Debug, Clone, Copy, Default)]
-pub struct NanvixJavaScript;
-
-impl Guest for NanvixJavaScript {
-    type Sandbox = NanvixSandbox;
-    fn build(
-        self,
-        _config: SandboxConfig,
-        _tools: ToolRegistry,
-        _network: std::sync::Arc<std::sync::Mutex<hyperlight_sandbox::NetworkPermissions>>,
-        _fs: std::sync::Arc<std::sync::Mutex<hyperlight_sandbox::CapFs>>,
-    ) -> Result<NanvixSandbox> {
-        NanvixSandbox::new(WorkloadType::JavaScript)
-    }
-}
-
-/// Guest type for running Python via CPython in a Nanvix microkernel.
-#[derive(Debug, Clone, Copy, Default)]
-pub struct NanvixPython;
-
-impl Guest for NanvixPython {
-    type Sandbox = NanvixSandbox;
-    fn build(
-        self,
-        _config: SandboxConfig,
-        _tools: ToolRegistry,
-        _network: std::sync::Arc<std::sync::Mutex<hyperlight_sandbox::NetworkPermissions>>,
-        _fs: std::sync::Arc<std::sync::Mutex<hyperlight_sandbox::CapFs>>,
-    ) -> Result<NanvixSandbox> {
-        NanvixSandbox::new(WorkloadType::Python)
-    }
-}
-
-// ---------------------------------------------------------------------------
-// Sandbox implementation
-// ---------------------------------------------------------------------------
-
-pub struct NanvixSandbox {
-    workload_type: WorkloadType,
-    runtime_config: RuntimeConfig,
-    /// Tokio runtime for async nanvix API
-    rt: tokio::runtime::Runtime,
-}
-
-impl NanvixSandbox {
-    fn new(workload_type: WorkloadType) -> Result<Self> {
-        let rt = tokio::runtime::Builder::new_multi_thread()
-            .enable_all()
-            .build()
-            .context("failed to create tokio runtime")?;
-
-        Ok(Self {
-            workload_type,
-            runtime_config: RuntimeConfig::default(),
-            rt,
-        })
-    }
-
-    fn file_extension(&self) -> &'static str {
-        match self.workload_type {
-            WorkloadType::JavaScript => "js",
-            WorkloadType::Python => "py",
-            WorkloadType::Binary => "elf",
-        }
-    }
-}
-
-/// Unit type used as snapshot data for backends that don't support snapshotting.
-pub struct NoSnapshot;
-
-impl GuestSandbox for NanvixSandbox {
-    type SnapshotData = NoSnapshot;
-
-    fn run(&mut self, code: &str) -> Result<ExecutionResult> {
-        // Write code to a temporary file
-        let mut tmp = tempfile::Builder::new()
-            .suffix(&format!(".{}", self.file_extension()))
-            .tempfile()
-            .context("failed to create temp file for guest code")?;
-        tmp.write_all(code.as_bytes())
-            .context("failed to write guest code")?;
-        tmp.flush()?;
-
-        let tmp_path = tmp.path().to_path_buf();
-        let config = self.runtime_config.clone();
-        let console_log_path = format!("{}/guest-console.log", &config.log_directory);
-
-        // Run the workload
-        let run_result = self.rt.block_on(async {
-            let mut sandbox = NanvixSandboxInner::new(config)?;
-            sandbox.run(&tmp_path).await
-        });
-
-        // Read captured console output
-        let stdout = std::fs::read_to_string(&console_log_path).unwrap_or_default();
-
-        // Clean up log directory
-        let _ = std::fs::remove_dir_all(&self.runtime_config.log_directory);
-        // Rotate to a fresh config for the next run
-        self.runtime_config = RuntimeConfig::default();
-
-        match run_result {
-            Ok(()) => Ok(ExecutionResult {
-                stdout,
-                stderr: String::new(),
-                exit_code: 0,
-            }),
-            Err(e) => Ok(ExecutionResult {
-                stdout,
-                stderr: format!("{e:#}"),
-                exit_code: 1,
-            }),
-        }
-    }
-
-    fn snapshot(&mut self) -> Result<Snapshot<NoSnapshot>> {
-        Err(anyhow::anyhow!(
-            "snapshot is not supported by the Nanvix sandbox"
-        ))
-    }
-
-    fn restore(&mut self, _snapshot: &Snapshot<NoSnapshot>) -> Result<()> {
-        Err(anyhow::anyhow!(
-            "restore is not supported by the Nanvix sandbox"
-        ))
-    }
-}
diff --git a/src/sdk/python/core/hyperlight_sandbox/__init__.py b/src/sdk/python/core/hyperlight_sandbox/__init__.py
index f8f25cc..2429e42 100644
--- a/src/sdk/python/core/hyperlight_sandbox/__init__.py
+++ b/src/sdk/python/core/hyperlight_sandbox/__init__.py
@@ -180,6 +180,39 @@ def output_path(self) -> str | None:
     def allow_domain(self, target: str, methods: list[str] | None = None) -> None:
         self._inner.allow_domain(target, methods)
 
+    def register_credential(
+        self,
+        id: str,
+        *,
+        target: str,
+        header: str = "Authorization",
+        prefix: str = "Bearer ",
+        resolver: Callable[[], str],
+    ) -> None:
+        """Register a scoped credential for outgoing HTTP requests.
+
+        Must be called before ``run()``.  Guest code can then bind the
+        credential to an individual request via WIT ``attach``.
+
+        Args:
+            id: Unique identifier for this credential.
+            target: URL-prefix scope.  Only requests whose URL starts
+                with this value are eligible for injection.
+            header: HTTP header name to set (default ``Authorization``).
+            prefix: Value prefix prepended to the resolved token
+                (default ``Bearer ``).
+            resolver: A callable invoked with no arguments on every
+                credentialed outgoing request to produce a fresh token
+                value as a ``str``.  Called synchronously from the host
+                HTTP dispatch path, so it must be fast and thread-safe;
+                long-running fetches (e.g. IMDS, OAuth) should be
+                memoised by the caller.  Any exception raised by the
+                callable surfaces to guest code as a host-redacted
+                request-level error (only the exception **type name**
+                is propagated; the message body is dropped).
+        """
+        self._inner.register_credential(id, target, header, prefix, resolver)
+
     def snapshot(self):
         """Capture the current sandbox state.
 
diff --git a/src/sdk/python/pyo3_common/src/lib.rs b/src/sdk/python/pyo3_common/src/lib.rs
index 4176e72..e20f9d1 100644
--- a/src/sdk/python/pyo3_common/src/lib.rs
+++ b/src/sdk/python/pyo3_common/src/lib.rs
@@ -92,9 +92,8 @@ pub fn resolve_maybe_coroutine<'py>(
     }
 
     let asyncio = py.import("asyncio")?;
-    match asyncio.call_method1("run", (obj,)) {
-        Ok(result) => return Ok(result.unbind()),
-        Err(_) => {}
+    if let Ok(result) = asyncio.call_method1("run", (obj,)) {
+        return Ok(result.unbind());
     }
 
     let resolver = PyModule::from_code(
@@ -348,20 +347,14 @@ fn infer_type_from_annotation(
     // Handle Annotated[T, ...] — unwrap to get the base type T.
     // typing.get_origin(ann) is typing.Annotated → typing.get_args(ann)[0] is T.
     let py = annotation.py();
-    if let Ok(typing) = py.import("typing") {
-        if let Ok(origin) = typing.call_method1("get_origin", (&annotation,)) {
-            // Check if origin is typing.Annotated (available as typing.Annotated since 3.9+)
-            if let Ok(annotated_type) = typing.getattr("Annotated") {
-                if origin.is(&annotated_type) {
-                    if let Ok(args) = typing.call_method1("get_args", (&annotation,)) {
-                        // args is a tuple; first element is the base type.
-                        if let Ok(base_type) = args.get_item(0) {
-                            return type_obj_to_arg_type(&base_type);
-                        }
-                    }
-                }
-            }
-        }
+    if let Ok(typing) = py.import("typing")
+        && let Ok(origin) = typing.call_method1("get_origin", (&annotation,))
+        && let Ok(annotated_type) = typing.getattr("Annotated")
+        && origin.is(&annotated_type)
+        && let Ok(args) = typing.call_method1("get_args", (&annotation,))
+        && let Ok(base_type) = args.get_item(0)
+    {
+        return type_obj_to_arg_type(&base_type);
     }
 
     None
diff --git a/src/sdk/python/wasm_backend/.cargo/config.toml b/src/sdk/python/wasm_backend/.cargo/config.toml
deleted file mode 100644
index 27b7acc..0000000
--- a/src/sdk/python/wasm_backend/.cargo/config.toml
+++ /dev/null
@@ -1,2 +0,0 @@
-[env]
-WIT_WORLD = { value = "../../../../wasm_sandbox/wit/sandbox-world.wasm", relative = true }
\ No newline at end of file
diff --git a/src/sdk/python/wasm_backend/src/lib.rs b/src/sdk/python/wasm_backend/src/lib.rs
index 4f862a2..b58ae2f 100644
--- a/src/sdk/python/wasm_backend/src/lib.rs
+++ b/src/sdk/python/wasm_backend/src/lib.rs
@@ -1,7 +1,8 @@
 use std::collections::HashMap;
+use std::sync::Arc;
 
 use hyperlight_sandbox::{
-    DEFAULT_HEAP_SIZE, DEFAULT_STACK_SIZE, DirPerms, FilePerms, HttpMethod, Sandbox,
+    DEFAULT_HEAP_SIZE, DEFAULT_STACK_SIZE, DirPerms, FilePerms, HttpMethod, ResolverFn, Sandbox,
     SandboxBuilder, SandboxConfig,
 };
 use hyperlight_sandbox_pyo3_common::{
@@ -16,6 +17,45 @@ type WasmSnapshotInner = hyperlight_sandbox::Snapshot<<
     <Wasm as hyperlight_sandbox::Guest>::Sandbox as hyperlight_sandbox::GuestSandbox
 >::SnapshotData>;
 
+/// Buffered credential registration for lazy sandbox init.
+struct PendingCredential {
+    id: String,
+    target: String,
+    header: String,
+    prefix: String,
+    resolver: ResolverFn,
+}
+
+/// Wrap a Python callable as a [`ResolverFn`] suitable for storage in
+/// the credential registry.
+///
+/// On each invocation the wrapper re-acquires the Python GIL, calls
+/// the supplied callable with no arguments, and extracts the result
+/// as a Python `str`.  Exceptions are mapped to a redacted Rust error
+/// — only the exception **type name** is surfaced, never the message
+/// (which may contain secret material assembled by user code).
+fn python_callable_to_resolver(callable: Py<PyAny>) -> ResolverFn {
+    Arc::new(move || -> Result<String, String> {
+        Python::attach(|py| {
+            let bound = callable.bind(py);
+            match bound.call0() {
+                Ok(result) => result
+                    .extract::<String>()
+                    .map_err(|_| "credential resolver did not return a str".to_string()),
+                Err(err) => {
+                    let type_name = err
+                        .get_type(py)
+                        .qualname()
+                        .ok()
+                        .and_then(|n| n.extract::<String>().ok())
+                        .unwrap_or_else(|| "Exception".to_string());
+                    Err(format!("python resolver raised {type_name}"))
+                }
+            }
+        })
+    })
+}
+
 #[pyclass]
 pub struct PySnapshot {
     inner: WasmSnapshotInner,
@@ -26,6 +66,7 @@ pub struct WasmSandbox {
     inner: Option<WasmSandboxInner>,
     tools: HashMap<String, Py<PyAny>>,
     pending_networks: Vec<(String, Option<Vec<String>>)>,
+    pending_credentials: Vec<PendingCredential>,
     config: SandboxConfig,
     input_dir: Option<String>,
     output_dir: Option<String>,
@@ -48,6 +89,7 @@ impl WasmSandbox {
             inner: None,
             tools: HashMap::new(),
             pending_networks: Vec::new(),
+            pending_credentials: Vec::new(),
             config: SandboxConfig {
                 module_path: module_path.to_string(),
                 heap_size: match heap_size {
@@ -115,6 +157,19 @@ impl WasmSandbox {
                     .allow_domain(&target, methods)
                     .map_err(|e| PyRuntimeError::new_err(format!("{e}")))?;
             }
+            for cred in std::mem::take(&mut self.pending_credentials) {
+                sandbox
+                    .register_credential(
+                        cred.id,
+                        hyperlight_sandbox::CredentialEntry {
+                            target: cred.target,
+                            header: cred.header,
+                            prefix: cred.prefix,
+                            resolver: cred.resolver,
+                        },
+                    )
+                    .map_err(|e| PyRuntimeError::new_err(format!("{e}")))?;
+            }
             self.inner = Some(sandbox);
         }
         let sandbox = self.inner.as_mut().unwrap();
@@ -164,6 +219,52 @@ impl WasmSandbox {
         Ok(())
     }
 
+    /// Register a scoped credential for outgoing HTTP requests.
+    ///
+    /// Must be called before `run()`. The credential can then be
+    /// attached to individual requests by guest code via WIT `attach`.
+    ///
+    /// `resolver` is a Python callable that takes no arguments and
+    /// returns the secret token as a `str`. It is invoked synchronously
+    /// from the WASI HTTP dispatch path on every credentialed request,
+    /// so it must be fast and thread-safe; long-running token fetches
+    /// should be memoised by the caller.
+    #[pyo3(signature = (id, target, header, prefix, resolver))]
+    fn register_credential(
+        &mut self,
+        id: &str,
+        target: &str,
+        header: &str,
+        prefix: &str,
+        resolver: Py<PyAny>,
+    ) -> PyResult<()> {
+        let resolver_fn = python_callable_to_resolver(resolver);
+        if let Some(sandbox) = self.inner.as_ref() {
+            // Register directly on the live sandbox.
+            sandbox
+                .register_credential(
+                    id,
+                    hyperlight_sandbox::CredentialEntry {
+                        target: target.to_string(),
+                        header: header.to_string(),
+                        prefix: prefix.to_string(),
+                        resolver: resolver_fn,
+                    },
+                )
+                .map_err(|e| PyRuntimeError::new_err(format!("{e}")))?;
+        } else {
+            // Buffer for later — will be applied when sandbox initialises.
+            self.pending_credentials.push(PendingCredential {
+                id: id.to_string(),
+                target: target.to_string(),
+                header: header.to_string(),
+                prefix: prefix.to_string(),
+                resolver: resolver_fn,
+            });
+        }
+        Ok(())
+    }
+
     fn get_output_files(&self) -> PyResult<Vec<String>> {
         let sandbox = self
             .inner
diff --git a/src/wasm_sandbox/Justfile b/src/wasm_sandbox/Justfile
index 2a47213..5c97398 100644
--- a/src/wasm_sandbox/Justfile
+++ b/src/wasm_sandbox/Justfile
@@ -53,14 +53,38 @@ invalidate-wit-caches:
     -{{rmrf}} {{repo-root}}/src/sdk/python/wasm_backend/target/release/build/hyperlight-wasm-*
     -{{rmrf}} {{repo-root}}/src/sdk/python/wasm_backend/target/release/.fingerprint/hyperlight-wasm-*
 
-# Only clean when rust-cache left stale state (fingerprints exist but runtime binary missing).
+# Clean stale hyperlight-wasm caches when ANY of:
+#   1. fingerprints exist but the guest runtime binary is missing (rust-cache restored
+#      .fingerprint/ without the corresponding target/hyperlight-wasm-runtime/ output), OR
+#   2. the WIT source file is newer than the cached host bindings/fingerprints.
+#      hyperlight-wasm-sandbox calls `hyperlight_component_macro::host_bindgen!("wit/sandbox-world.wasm")`
+#      at compile time. Proc-macros cannot emit `cargo:rerun-if-changed`, so when the WIT
+#      changes cargo doesn't notice and the SDKs fail at runtime with
+#      "Host function vector parameter missing length".
 [unix]
 _clean-stale-wasm:
     #!/usr/bin/env bash
+    wit_src="{{repo-root}}/src/wasm_sandbox/wit/hyperlight-sandbox.wit"
     for profile in debug release; do
-        if compgen -G "{{repo-root}}/target/$profile/build/hyperlight-wasm-*" > /dev/null && \
-           [ ! -f "{{repo-root}}/target/hyperlight-wasm-runtime/x86_64-hyperlight-none/$profile/hyperlight-wasm-runtime" ]; then
-            echo "Cleaning stale hyperlight-wasm $profile build artifacts..."
+        if ! compgen -G "{{repo-root}}/target/$profile/build/hyperlight-wasm-*" > /dev/null; then
+            continue
+        fi
+        reason=""
+        runtime="{{repo-root}}/target/hyperlight-wasm-runtime/x86_64-hyperlight-none/$profile/hyperlight-wasm-runtime"
+        if [ ! -f "$runtime" ]; then
+            reason="runtime binary missing"
+        elif [ -f "$wit_src" ]; then
+            for fp in "{{repo-root}}/target/$profile/.fingerprint/hyperlight-wasm-"* \
+                      "{{repo-root}}/target/$profile/.fingerprint/hyperlight-host-"*; do
+                [ -e "$fp" ] || continue
+                if [ "$wit_src" -nt "$fp" ]; then
+                    reason="WIT source newer than cached host bindings"
+                    break
+                fi
+            done
+        fi
+        if [ -n "$reason" ]; then
+            echo "Cleaning stale hyperlight-wasm $profile build artifacts ($reason)..."
             rm -rf {{repo-root}}/target/hyperlight-wasm-runtime {{repo-root}}/target/hls \
                    {{repo-root}}/target/*/build/hyperlight-wasm-* {{repo-root}}/target/*/.fingerprint/hyperlight-wasm-* \
                    {{repo-root}}/target/*/build/hyperlight-host-* {{repo-root}}/target/*/.fingerprint/hyperlight-host-* \
@@ -73,12 +97,26 @@ _clean-stale-wasm:
 
 [windows]
 _clean-stale-wasm:
+    $witSrc = '{{repo-root}}/src/wasm_sandbox/wit/hyperlight-sandbox.wit'; \
+    $witMtime = if (Test-Path $witSrc) { (Get-Item $witSrc).LastWriteTimeUtc } else { $null }; \
     foreach ($profile in @('debug', 'release')) { \
+        $fpDir = '{{repo-root}}/target/' + $profile + '/.fingerprint'; \
         $bp = '{{repo-root}}/target/' + $profile + '/build'; \
         $rp = '{{repo-root}}/target/hyperlight-wasm-runtime/x86_64-hyperlight-none/' + $profile + '/hyperlight-wasm-runtime'; \
-        if ((Get-ChildItem -Path $bp -Filter 'hyperlight-wasm-*' -ErrorAction SilentlyContinue) -and \
-            -not (Test-Path $rp)) { \
-            Write-Host ('Cleaning stale hyperlight-wasm ' + $profile + ' build artifacts...'); \
+        $hlwBuild = @(Get-ChildItem -Path $bp -Filter 'hyperlight-wasm-*' -ErrorAction SilentlyContinue); \
+        if ($hlwBuild.Count -eq 0) { continue }; \
+        $reason = $null; \
+        if (-not (Test-Path $rp)) { \
+            $reason = 'runtime binary missing'; \
+        } elseif ($witMtime) { \
+            $hostFps = @(Get-ChildItem -Path $fpDir -Filter 'hyperlight-wasm-*' -ErrorAction SilentlyContinue) + \
+                       @(Get-ChildItem -Path $fpDir -Filter 'hyperlight-host-*' -ErrorAction SilentlyContinue); \
+            foreach ($fp in $hostFps) { \
+                if ($witMtime -gt $fp.LastWriteTimeUtc) { $reason = 'WIT source newer than cached host bindings'; break }; \
+            }; \
+        }; \
+        if ($reason) { \
+            Write-Host ('Cleaning stale hyperlight-wasm ' + $profile + ' build artifacts (' + $reason + ')...'); \
             Remove-Item -Recurse -Force -ErrorAction SilentlyContinue '{{repo-root}}/target/hyperlight-wasm-runtime','{{repo-root}}/target/hls'; \
             foreach ($t in @('{{repo-root}}/target', '{{repo-root}}/src/sdk/python/wasm_backend/target')) { \
                 foreach ($p in @('debug', 'release')) { \
@@ -91,7 +129,8 @@ _clean-stale-wasm:
             }; \
             break; \
         } \
-    }
+    }; \
+    exit 0
 
 guest-build-aot target=default-target: guest-build-wasm ensure-tools
     hyperlight-wasm-aot compile --component \
diff --git a/src/wasm_sandbox/guests/javascript/package-lock.json b/src/wasm_sandbox/guests/javascript/package-lock.json
index 817f597..a1f070b 100644
--- a/src/wasm_sandbox/guests/javascript/package-lock.json
+++ b/src/wasm_sandbox/guests/javascript/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "hyperlight-sandbox-js-guest",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "hyperlight-sandbox-js-guest",
-      "version": "0.3.0",
+      "version": "0.4.0",
       "devDependencies": {
         "@bytecodealliance/componentize-js": "^0.20.0",
         "@bytecodealliance/jco": "^1.19.0"
@@ -216,6 +216,29 @@
         "wizer-win32-x64": "wizer"
       }
     },
+    "node_modules/@emnapi/core": {
+      "version": "1.10.0",
+      "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.10.0.tgz",
+      "integrity": "sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/wasi-threads": "1.2.1",
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@emnapi/runtime": {
+      "version": "1.10.0",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.10.0.tgz",
+      "integrity": "sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
     "node_modules/@emnapi/wasi-threads": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz",
diff --git a/src/wasm_sandbox/guests/python/hyperlight.py b/src/wasm_sandbox/guests/python/hyperlight.py
index a225fda..57da675 100644
--- a/src/wasm_sandbox/guests/python/hyperlight.py
+++ b/src/wasm_sandbox/guests/python/hyperlight.py
@@ -1,6 +1,6 @@
 """Hyperlight guest-side helpers, available to user code via `from hyperlight import call_tool`."""
 
 from sandbox_executor import _call_tool as call_tool
-from sandbox_executor import http_get, http_post
+from sandbox_executor import attach_credential, http_get, http_post
 
-__all__ = ["call_tool", "http_get", "http_post"]
+__all__ = ["call_tool", "http_get", "http_post", "attach_credential"]
diff --git a/src/wasm_sandbox/guests/python/sandbox_executor.py b/src/wasm_sandbox/guests/python/sandbox_executor.py
index 83b30c9..e59b9dc 100644
--- a/src/wasm_sandbox/guests/python/sandbox_executor.py
+++ b/src/wasm_sandbox/guests/python/sandbox_executor.py
@@ -15,6 +15,7 @@
 import wit_world.imports.tools as tools
 import wit_world.imports.outgoing_handler as outgoing_handler
 import wit_world.imports.wasi_http_types as http_types
+import wit_world.imports.credentials as credentials
 
 
 def _call_tool(tool_name: str, **kwargs):
@@ -26,17 +27,30 @@ def _call_tool(tool_name: str, **kwargs):
     return json.loads(result_json)
 
 
-def http_get(url: str) -> dict:
-    """Make an HTTP GET request via WASI-HTTP. Returns {"status": int, "body": str}."""
-    return _http_request("GET", url)
+def http_get(url: str, credential: str = None) -> dict:
+    """Make an HTTP GET request via WASI-HTTP. Returns {"status": int, "body": str}.
 
+    If credential is set, attaches the named credential to the request.
+    The host will inject the credential's header at dispatch time — the
+    guest never sees the secret value.
+    """
+    return _http_request("GET", url, credential=credential)
 
-def http_post(url: str, body: str = "", content_type: str = "application/json") -> dict:
-    """Make an HTTP POST request via WASI-HTTP. Returns {"status": int, "body": str}."""
-    return _http_request("POST", url, body=body, content_type=content_type)
 
+def http_post(url: str, body: str = "", content_type: str = "application/json",
+              credential: str = None) -> dict:
+    """Make an HTTP POST request via WASI-HTTP. Returns {"status": int, "body": str}.
 
-def _http_request(method: str, url: str, body: str = "", content_type: str = "") -> dict:
+    If credential is set, attaches the named credential to the request.
+    The host will inject the credential's header at dispatch time — the
+    guest never sees the secret value.
+    """
+    return _http_request("POST", url, body=body, content_type=content_type,
+                         credential=credential)
+
+
+def _http_request(method: str, url: str, body: str = "", content_type: str = "",
+                  credential: str = None) -> dict:
     """Internal: make an HTTP request via WASI-HTTP outgoing-handler."""
     # Parse URL into scheme, authority, path
     scheme_str, rest = url.split("://", 1) if "://" in url else ("https", url)
@@ -81,6 +95,16 @@ def _http_request(method: str, url: str, body: str = "", content_type: str = "")
     req.set_authority(authority)
     req.set_path_with_query(path)
 
+    # Attach credential if specified — the host resolves the secret
+    # and injects the header at dispatch time.
+    if credential is not None:
+        try:
+            credentials.attach(req, credential)
+        except Exception as e:
+            raise RuntimeError(
+                f"Failed to attach credential '{credential}': {e}"
+            ) from e
+
     # Write body if present
     if body:
         outgoing_body = req.body()
@@ -138,6 +162,23 @@ def _http_request(method: str, url: str, body: str = "", content_type: str = "")
     return {"status": status, "body": body_text}
 
 
+def attach_credential(request, credential_id: str):
+    """Attach a registered credential to an outgoing-request by name.
+
+    Low-level helper for guests building WASI-HTTP requests manually.
+    Most callers should use the `credential=` kwarg on `http_get`/`http_post`
+    instead.
+
+    Raises RuntimeError if the credential is unknown or already attached.
+    """
+    try:
+        credentials.attach(request, credential_id)
+    except Exception as e:
+        raise RuntimeError(
+            f"Failed to attach credential '{credential_id}': {e}"
+        ) from e
+
+
 class Executor:
     """Implements the WIT executor interface for componentize-py."""
 
@@ -152,7 +193,13 @@ def run(self, code: str) -> ExecutionResult:
 
         exit_code = 0
         try:
-            exec(code, {"__builtins__": __builtins__, "call_tool": _call_tool, "http_get": http_get, "http_post": http_post})
+            exec(code, {
+                "__builtins__": __builtins__,
+                "call_tool": _call_tool,
+                "http_get": http_get,
+                "http_post": http_post,
+                "attach_credential": attach_credential,
+            })
         except SystemExit as e:
             exit_code = e.code if isinstance(e.code, int) else 1
         except Exception as e:
diff --git a/src/wasm_sandbox/src/credentials.rs b/src/wasm_sandbox/src/credentials.rs
new file mode 100644
index 0000000..4831777
--- /dev/null
+++ b/src/wasm_sandbox/src/credentials.rs
@@ -0,0 +1,4 @@
+//! Re-exports from [hyperlight_sandbox::credentials] for use within
+//! the Wasm backend.
+
+pub use hyperlight_sandbox::credentials::*;
diff --git a/src/wasm_sandbox/src/lib.rs b/src/wasm_sandbox/src/lib.rs
index 4d5b681..10a8015 100644
--- a/src/wasm_sandbox/src/lib.rs
+++ b/src/wasm_sandbox/src/lib.rs
@@ -14,6 +14,7 @@ use hyperlight_wasm::{
     LoadedWasmSandbox, SandboxBuilder as HyperlightSandboxBuilder, Snapshot as WasmSnapshot,
 };
 
+pub mod credentials;
 mod wasi_impl;
 
 pub(crate) mod bindings {
@@ -31,8 +32,9 @@ impl Guest for Wasm {
         tools: ToolRegistry,
         network: std::sync::Arc<std::sync::Mutex<NetworkPermissions>>,
         fs: std::sync::Arc<std::sync::Mutex<CapFs>>,
+        credentials: credentials::CredentialRegistry,
     ) -> Result<WasmComponentSandbox> {
-        WasmComponentSandbox::with_tools(config, tools, network, fs)
+        WasmComponentSandbox::with_tools(config, tools, network, fs, credentials)
     }
 }
 
@@ -41,6 +43,7 @@ pub struct HostState {
     pub(crate) fs: Arc<Mutex<CapFs>>,
     pub(crate) network: Arc<Mutex<NetworkPermissions>>,
     pub(crate) active_requests: Arc<AtomicUsize>,
+    pub(crate) credential_registry: credentials::CredentialRegistry,
 }
 
 #[allow(refining_impl_trait)]
@@ -50,6 +53,11 @@ impl bindings::root::component::RootImports for HostState {
         self
     }
 
+    type Credentials = HostState;
+    fn credentials(&mut self) -> &mut Self {
+        self
+    }
+
     type Environment = HostState;
     fn environment(&mut self) -> &mut Self {
         self
@@ -216,6 +224,68 @@ impl bindings::hyperlight::sandbox::Tools for HostState {
     }
 }
 
+// ---------------------------------------------------------------------------
+// Scoped credentials — `attach` implementation (commit C).
+//
+// The guest calls `attach(request, credential_id)` to bind a
+// previously-registered credential to an outgoing HTTP request.
+// This records the binding inside the `OutgoingRequest` itself so
+// the outgoing-handler dispatch path can later resolve and inject
+// the token header.
+//
+// Error semantics:
+//   * `Unknown`         — credential id not found in the registry.
+//   * `AlreadyAttached` — the request already has a credential.
+//   * `ScopeMismatch` / `ResolverFailed` — reserved for the
+//     outgoing-handler (commit D/E).
+// ---------------------------------------------------------------------------
+impl
+    bindings::hyperlight::sandbox::Credentials<
+        crate::wasi_impl::resource::Resource<
+            crate::wasi_impl::types::http_outgoing_request::OutgoingRequest,
+        >,
+    > for HostState
+{
+    fn attach(
+        &mut self,
+        request: hyperlight_common::resource::BorrowedResourceGuard<
+            '_,
+            crate::wasi_impl::resource::Resource<
+                crate::wasi_impl::types::http_outgoing_request::OutgoingRequest,
+            >,
+        >,
+        credential: String,
+    ) -> Result<
+        Result<(), bindings::hyperlight::sandbox::credentials::CredentialError>,
+        hyperlight_host::HyperlightError,
+    > {
+        use bindings::hyperlight::sandbox::credentials::CredentialError;
+
+        use crate::wasi_impl::resource::BlockOn;
+
+        // Verify the credential exists in the host-side registry.
+        {
+            let registry = self.credential_registry.lock().map_err(|_| {
+                hyperlight_host::HyperlightError::Error(
+                    "credential registry mutex poisoned".to_string(),
+                )
+            })?;
+            if !registry.contains_key(&credential) {
+                return Ok(Err(CredentialError::Unknown));
+            }
+        }
+
+        // Write the credential binding into the request.
+        let mut guard = request.write().block_on();
+        if guard.attached_credential.is_some() {
+            return Ok(Err(CredentialError::AlreadyAttached));
+        }
+        guard.attached_credential = Some(credential);
+
+        Ok(Ok(()))
+    }
+}
+
 pub struct WasmComponentSandbox {
     sandbox: bindings::RootSandbox<HostState, LoadedWasmSandbox>,
     fs: Arc<Mutex<CapFs>>,
@@ -227,6 +297,7 @@ impl WasmComponentSandbox {
         tools: ToolRegistry,
         network: Arc<Mutex<NetworkPermissions>>,
         fs: Arc<Mutex<CapFs>>,
+        credentials: credentials::CredentialRegistry,
     ) -> Result<Self> {
         // Verify the shared tokio runtime is available before proceeding.
         hyperlight_sandbox::runtime::RUNTIME
@@ -244,6 +315,7 @@ impl WasmComponentSandbox {
             fs: fs.clone(),
             network: network.clone(),
             active_requests: Arc::new(AtomicUsize::new(0)),
+            credential_registry: credentials,
         };
 
         let mut proto = HyperlightSandboxBuilder::new()
diff --git a/src/wasm_sandbox/src/wasi_impl/http_handler.rs b/src/wasm_sandbox/src/wasi_impl/http_handler.rs
index 47df79a..375727b 100644
--- a/src/wasm_sandbox/src/wasi_impl/http_handler.rs
+++ b/src/wasm_sandbox/src/wasi_impl/http_handler.rs
@@ -80,6 +80,67 @@ impl
         let request_url = url::Url::parse(&format!("{scheme_str}://{authority}{path}"))
             .map_err(|e| HyperlightError::Error(format!("invalid request URL: {e}")))?;
 
+        // -----------------------------------------------------------------
+        // Scoped credential — scope check & token resolution.
+        //
+        // If a credential is attached to this request, verify that the
+        // request URL falls within the credential's target scope and
+        // resolve the token now so we can inject the header later.
+        //
+        // Scope is enforced BEFORE the network permission check so a
+        // mis-scoped credential is rejected immediately with a clear
+        // error rather than leaking through to the allow-list gate.
+        //
+        // The credential-registry mutex is dropped before the resolver
+        // is invoked — resolvers may perform slow I/O (e.g. an IMDS
+        // round-trip on cache miss) and we do not want to serialise
+        // unrelated credentialed requests behind one slow resolver.
+        // -----------------------------------------------------------------
+        let credential_header: Option<(String, String)> =
+            if let Some(ref cred_id) = request_data.attached_credential {
+                let entry = {
+                    let registry = self.credential_registry.lock().map_err(|_| {
+                        HyperlightError::Error("credential registry mutex poisoned".to_string())
+                    })?;
+                    match registry.get(cred_id) {
+                        Some(e) => e.clone(),
+                        // Defensive: attach() validated this, but the registry
+                        // could have been cleared between attach and dispatch.
+                        None => {
+                            return Ok(Err(ErrorCode::InternalError(Some(
+                                "attached credential not found in registry".to_string(),
+                            ))));
+                        }
+                    }
+                };
+
+                // Scope check: request URL must start with the
+                // credential's target prefix.
+                if !request_url.as_str().starts_with(&entry.target) {
+                    return Ok(Err(ErrorCode::HTTPRequestDenied));
+                }
+
+                // Resolve the token by invoking the registered
+                // callback.  The resolver returns the literal secret
+                // value on success; on failure we surface a fixed,
+                // host-redacted message so the guest never sees the
+                // resolver's diagnostic text (which could contain
+                // secret material).
+                let token = match (entry.resolver)() {
+                    Ok(t) => t,
+                    Err(_diag) => {
+                        return Ok(Err(ErrorCode::InternalError(Some(
+                            "credential resolver failed".to_string(),
+                        ))));
+                    }
+                };
+
+                let header_value = format!("{}{}", entry.prefix, token);
+                Some((entry.header.clone(), header_value))
+            } else {
+                None
+            };
+
         {
             let Ok(network) = self.network.lock() else {
                 return Ok(Err(ErrorCode::HTTPRequestDenied));
@@ -100,7 +161,7 @@ impl
         let active_requests = self.active_requests.clone();
 
         // Collect guest headers eagerly in sync context.
-        let guest_headers: Vec<(String, String)> = request_data
+        let mut guest_headers: Vec<(String, String)> = request_data
             .headers
             .read()
             .block_on()
@@ -109,6 +170,14 @@ impl
             .map(|(k, v)| (k, String::from_utf8_lossy(&v).into_owned()))
             .collect();
 
+        // Inject the credential header, replacing any guest-set header
+        // with the same name so the guest cannot override the
+        // host-injected token.
+        if let Some((ref name, ref value)) = credential_header {
+            guest_headers.retain(|(k, _)| !k.eq_ignore_ascii_case(name));
+            guest_headers.push((name.clone(), value.clone()));
+        }
+
         let future_response = Resource::new(FutureIncomingResponse::default());
         let future_response_clone = future_response.clone();
         let future_response_panic = future_response.clone();
diff --git a/src/wasm_sandbox/src/wasi_impl/types/http_outgoing_request.rs b/src/wasm_sandbox/src/wasi_impl/types/http_outgoing_request.rs
index 621e8f3..701aab5 100644
--- a/src/wasm_sandbox/src/wasi_impl/types/http_outgoing_request.rs
+++ b/src/wasm_sandbox/src/wasi_impl/types/http_outgoing_request.rs
@@ -11,6 +11,9 @@ pub struct OutgoingRequest {
     pub headers: Resource<Headers>,
     pub body: Resource<OutgoingBody>,
     body_taken: bool,
+    /// Credential identifier bound via `attach()`. Consumed by the
+    /// outgoing-handler dispatch path to inject the resolved token.
+    pub attached_credential: Option<String>,
 }
 
 impl OutgoingRequest {
@@ -23,6 +26,7 @@ impl OutgoingRequest {
             headers,
             body: Resource::default(),
             body_taken: false,
+            attached_credential: None,
         }
     }
 
diff --git a/src/wasm_sandbox/tests/credential_integration.rs b/src/wasm_sandbox/tests/credential_integration.rs
new file mode 100644
index 0000000..6423275
--- /dev/null
+++ b/src/wasm_sandbox/tests/credential_integration.rs
@@ -0,0 +1,721 @@
+//! Integration tests: scoped-credential injection end-to-end.
+//!
+//! Each test spins up a local [`EchoServer`], registers one or more
+//! credentials, then runs guest Python code that exercises the
+//! `credential=` kwarg on `http_get`/`http_post`.  The echo server
+//! reflects all received headers so we can assert exactly what the
+//! host injected (or blocked).
+
+use std::path::Path;
+use std::sync::Arc;
+use std::sync::atomic::{AtomicUsize, Ordering};
+
+use hyperlight_sandbox::test_utils::EchoServer;
+use hyperlight_sandbox::{CredentialEntry, HttpMethod, ResolverFn, SandboxBuilder};
+use hyperlight_wasm_sandbox::Wasm;
+
+fn python_guest_path() -> String {
+    Path::new(env!("CARGO_MANIFEST_DIR"))
+        .join("guests/python/python-sandbox.aot")
+        .display()
+        .to_string()
+}
+
+/// Helper to build a [`CredentialEntry`] with sensible defaults and a
+/// static token value.  Tests that need rotation or fault injection
+/// build a custom [`ResolverFn`] inline instead.
+fn cred(target: &str, token: &str) -> CredentialEntry {
+    CredentialEntry::with_static_resolver(target, "authorization", "Bearer ", token)
+}
+
+// -----------------------------------------------------------------------
+// Happy path: credential header is injected
+// -----------------------------------------------------------------------
+
+#[tokio::test]
+async fn credential_header_injected_on_get() {
+    let server = EchoServer::start().await;
+    let base_url = server.url("");
+
+    let result = tokio::task::spawn_blocking(move || {
+        let mut sandbox = SandboxBuilder::new()
+            .guest(Wasm)
+            .module_path(python_guest_path())
+            .build()
+            .expect("failed to create sandbox");
+
+        sandbox
+            .register_credential("test_cred", cred(&base_url, "secret-token-42"))
+            .expect("register_credential failed");
+
+        sandbox
+            .allow_domain(&base_url, vec![HttpMethod::Get])
+            .expect("allow_domain failed");
+
+        let code = format!(
+            r#"
+resp = http_get("{base_url}/api/data", credential="test_cred")
+print(resp["body"])
+"#,
+            base_url = base_url.trim_end_matches('/')
+        );
+
+        sandbox.run(&code).expect("sandbox run failed")
+    })
+    .await
+    .unwrap();
+
+    assert_eq!(result.exit_code, 0, "stderr: {}", result.stderr);
+
+    let echo: serde_json::Value =
+        serde_json::from_str(result.stdout.trim()).expect("failed to parse echo response");
+    let headers = echo["headers"].as_object().expect("missing headers");
+    assert_eq!(
+        headers.get("authorization").and_then(|v| v.as_str()),
+        Some("Bearer secret-token-42"),
+        "credential header not injected or has wrong value"
+    );
+}
+
+#[tokio::test]
+async fn credential_header_injected_on_post() {
+    let server = EchoServer::start().await;
+    let base_url = server.url("");
+
+    let result = tokio::task::spawn_blocking(move || {
+        let mut sandbox = SandboxBuilder::new()
+            .guest(Wasm)
+            .module_path(python_guest_path())
+            .build()
+            .expect("failed to create sandbox");
+
+        sandbox
+            .register_credential("post_cred", cred(&base_url, "post-token-99"))
+            .expect("register_credential failed");
+
+        sandbox
+            .allow_domain(&base_url, vec![HttpMethod::Post])
+            .expect("allow_domain failed");
+
+        let code = format!(
+            r#"
+resp = http_post("{base_url}/submit", body='{{"key": "val"}}', credential="post_cred")
+print(resp["body"])
+"#,
+            base_url = base_url.trim_end_matches('/')
+        );
+
+        sandbox.run(&code).expect("sandbox run failed")
+    })
+    .await
+    .unwrap();
+
+    assert_eq!(result.exit_code, 0, "stderr: {}", result.stderr);
+
+    let echo: serde_json::Value =
+        serde_json::from_str(result.stdout.trim()).expect("failed to parse echo response");
+    let headers = echo["headers"].as_object().expect("missing headers");
+    assert_eq!(
+        headers.get("authorization").and_then(|v| v.as_str()),
+        Some("Bearer post-token-99"),
+    );
+}
+
+// -----------------------------------------------------------------------
+// Error: unknown credential name → guest RuntimeError
+// -----------------------------------------------------------------------
+
+#[tokio::test]
+async fn unknown_credential_raises_error() {
+    let server = EchoServer::start().await;
+    let base_url = server.url("");
+
+    let result = tokio::task::spawn_blocking(move || {
+        let mut sandbox = SandboxBuilder::new()
+            .guest(Wasm)
+            .module_path(python_guest_path())
+            .build()
+            .expect("failed to create sandbox");
+
+        sandbox
+            .allow_domain(&base_url, vec![HttpMethod::Get])
+            .expect("allow_domain failed");
+
+        // Note: no credential registered — guest tries to attach "ghost"
+        let code = format!(
+            r#"
+resp = http_get("{base_url}/api", credential="ghost")
+print(resp["body"])
+"#,
+            base_url = base_url.trim_end_matches('/')
+        );
+
+        sandbox.run(&code).expect("sandbox run failed")
+    })
+    .await
+    .unwrap();
+
+    assert_ne!(result.exit_code, 0, "expected non-zero exit code");
+    assert!(
+        result.stderr.contains("credential") || result.stderr.contains("RuntimeError"),
+        "stderr should mention credential error, got: {}",
+        result.stderr
+    );
+}
+
+// -----------------------------------------------------------------------
+// Error: scope mismatch — credential bound to different URL prefix
+// -----------------------------------------------------------------------
+
+#[tokio::test]
+async fn scope_mismatch_denied() {
+    let server = EchoServer::start().await;
+    let base_url = server.url("");
+
+    let result = tokio::task::spawn_blocking(move || {
+        let mut sandbox = SandboxBuilder::new()
+            .guest(Wasm)
+            .module_path(python_guest_path())
+            .build()
+            .expect("failed to create sandbox");
+
+        // Credential scoped to https://example.com — won't match the local server
+        sandbox
+            .register_credential("wrong_scope", cred("https://example.com/api", "nope"))
+            .expect("register_credential failed");
+
+        sandbox
+            .allow_domain(&base_url, vec![HttpMethod::Get])
+            .expect("allow_domain failed");
+
+        let code = format!(
+            r#"
+resp = http_get("{base_url}/api/data", credential="wrong_scope")
+print(resp["body"])
+"#,
+            base_url = base_url.trim_end_matches('/')
+        );
+
+        sandbox.run(&code).expect("sandbox run failed")
+    })
+    .await
+    .unwrap();
+
+    assert_ne!(
+        result.exit_code, 0,
+        "expected non-zero exit code for scope mismatch"
+    );
+    let stderr_lc = result.stderr.to_ascii_lowercase();
+    assert!(
+        stderr_lc.contains("denied") || stderr_lc.contains("failed"),
+        "stderr should indicate request was denied, got: {}",
+        result.stderr
+    );
+}
+
+// -----------------------------------------------------------------------
+// Error: double-attach — attaching a second credential to the same req
+// -----------------------------------------------------------------------
+
+#[tokio::test]
+async fn double_attach_rejected() {
+    let server = EchoServer::start().await;
+    let base_url = server.url("");
+
+    let result = tokio::task::spawn_blocking(move || {
+        let mut sandbox = SandboxBuilder::new()
+            .guest(Wasm)
+            .module_path(python_guest_path())
+            .build()
+            .expect("failed to create sandbox");
+
+        sandbox
+            .register_credential("cred_a", cred(&base_url, "token-a"))
+            .expect("register_credential failed");
+
+        sandbox
+            .register_credential("cred_b", cred(&base_url, "token-b"))
+            .expect("register_credential failed");
+
+        sandbox
+            .allow_domain(&base_url, vec![HttpMethod::Get])
+            .expect("allow_domain failed");
+
+        // Guest code uses attach_credential directly to attempt double-attach
+        let code = format!(
+            r#"
+import wit_world.imports.wasi_http_types as http_types
+import wit_world.imports.credentials as creds
+
+fields = http_types.Fields.from_list([("user-agent", b"test")])
+req = http_types.OutgoingRequest(fields)
+req.set_method(http_types.Method_Get())
+req.set_scheme(http_types.Scheme_Http())
+req.set_authority("{authority}")
+req.set_path_with_query("/double")
+
+# First attach — should succeed
+creds.attach(req, "cred_a")
+
+# Second attach — should fail with already-attached
+try:
+    creds.attach(req, "cred_b")
+    print("ERROR: second attach did not raise")
+except Exception as e:
+    print(f"OK: {{e}}")
+"#,
+            authority = base_url.trim_start_matches("http://").trim_end_matches('/')
+        );
+
+        sandbox.run(&code).expect("sandbox run failed")
+    })
+    .await
+    .unwrap();
+
+    assert_eq!(result.exit_code, 0, "stderr: {}", result.stderr);
+    assert!(
+        result.stdout.contains("OK:"),
+        "expected OK from double-attach rejection, got stdout: {}",
+        result.stdout
+    );
+}
+
+// -----------------------------------------------------------------------
+// Security: guest-set Authorization header is replaced by credential
+// -----------------------------------------------------------------------
+
+#[tokio::test]
+async fn guest_cannot_override_credential_header() {
+    let server = EchoServer::start().await;
+    let base_url = server.url("");
+
+    let result = tokio::task::spawn_blocking(move || {
+        let mut sandbox = SandboxBuilder::new()
+            .guest(Wasm)
+            .module_path(python_guest_path())
+            .build()
+            .expect("failed to create sandbox");
+
+        sandbox
+            .register_credential("legit", cred(&base_url, "real-token"))
+            .expect("register_credential failed");
+
+        sandbox
+            .allow_domain(&base_url, vec![HttpMethod::Get])
+            .expect("allow_domain failed");
+
+        // Guest manually sets Authorization header, then also attaches a
+        // credential.  The host must strip the guest's header and inject
+        // the credential's value instead.
+        let code = format!(
+            r#"
+import wit_world.imports.wasi_http_types as http_types
+import wit_world.imports.outgoing_handler as outgoing_handler
+import wit_world.imports.credentials as creds
+
+fields = http_types.Fields.from_list([
+    ("user-agent", b"test"),
+    ("authorization", b"Bearer evil-guest-token"),
+])
+req = http_types.OutgoingRequest(fields)
+req.set_method(http_types.Method_Get())
+req.set_scheme(http_types.Scheme_Http())
+req.set_authority("{authority}")
+req.set_path_with_query("/sneaky")
+
+creds.attach(req, "legit")
+
+future_resp = outgoing_handler.handle(req, None)
+pollable = future_resp.subscribe()
+pollable.block()
+resp_result = future_resp.get()
+resp = resp_result
+if hasattr(resp, 'value'):
+    resp = resp.value
+if hasattr(resp, 'value'):
+    resp = resp.value
+import json
+body_stream = resp.consume().stream()
+chunks = []
+while True:
+    try:
+        chunk = body_stream.read(65536)
+        if chunk:
+            chunks.append(chunk)
+        else:
+            break
+    except:
+        break
+print(b"".join(chunks).decode())
+"#,
+            authority = base_url.trim_start_matches("http://").trim_end_matches('/')
+        );
+
+        sandbox.run(&code).expect("sandbox run failed")
+    })
+    .await
+    .unwrap();
+
+    assert_eq!(result.exit_code, 0, "stderr: {}", result.stderr);
+
+    let echo: serde_json::Value =
+        serde_json::from_str(result.stdout.trim()).expect("failed to parse echo response");
+    let headers = echo["headers"].as_object().expect("missing headers");
+    let auth_val = headers
+        .get("authorization")
+        .and_then(|v| v.as_str())
+        .expect("authorization header missing");
+
+    assert_eq!(
+        auth_val, "Bearer real-token",
+        "credential header must be the host-injected value, not the guest's"
+    );
+    assert!(
+        !auth_val.contains("evil"),
+        "guest's fake authorization header must be stripped"
+    );
+}
+
+// -----------------------------------------------------------------------
+// No credential attached — request goes through without auth header
+// -----------------------------------------------------------------------
+
+#[tokio::test]
+async fn no_credential_means_no_auth_header() {
+    let server = EchoServer::start().await;
+    let base_url = server.url("");
+
+    let result = tokio::task::spawn_blocking(move || {
+        let mut sandbox = SandboxBuilder::new()
+            .guest(Wasm)
+            .module_path(python_guest_path())
+            .build()
+            .expect("failed to create sandbox");
+
+        sandbox
+            .allow_domain(&base_url, vec![HttpMethod::Get])
+            .expect("allow_domain failed");
+
+        let code = format!(
+            r#"
+resp = http_get("{base_url}/open")
+print(resp["body"])
+"#,
+            base_url = base_url.trim_end_matches('/')
+        );
+
+        sandbox.run(&code).expect("sandbox run failed")
+    })
+    .await
+    .unwrap();
+
+    assert_eq!(result.exit_code, 0, "stderr: {}", result.stderr);
+
+    let echo: serde_json::Value =
+        serde_json::from_str(result.stdout.trim()).expect("failed to parse echo response");
+    let headers = echo["headers"].as_object().expect("missing headers");
+    assert!(
+        headers.get("authorization").is_none(),
+        "no credential attached — authorization header should be absent"
+    );
+}
+
+// -----------------------------------------------------------------------
+// Host-side duplicate registration is rejected
+// -----------------------------------------------------------------------
+
+#[tokio::test]
+async fn duplicate_credential_registration_rejected() {
+    let sandbox = SandboxBuilder::new()
+        .guest(Wasm)
+        .module_path(python_guest_path())
+        .build()
+        .expect("failed to create sandbox");
+
+    sandbox
+        .register_credential("dup", cred("https://example.com", "tok"))
+        .expect("first registration should succeed");
+
+    let err = sandbox
+        .register_credential("dup", cred("https://example.com", "tok2"))
+        .expect_err("second registration should fail");
+
+    assert!(
+        format!("{err}").contains("already registered"),
+        "error should mention 'already registered', got: {err}"
+    );
+}
+
+// -----------------------------------------------------------------------
+// Resolver is invoked per-request — proves token refresh contract
+// -----------------------------------------------------------------------
+
+#[tokio::test]
+async fn resolver_invoked_per_request() {
+    let server = EchoServer::start().await;
+    let base_url = server.url("");
+
+    let result = tokio::task::spawn_blocking(move || {
+        let mut sandbox = SandboxBuilder::new()
+            .guest(Wasm)
+            .module_path(python_guest_path())
+            .build()
+            .expect("failed to create sandbox");
+
+        // Resolver that returns a different token on each invocation.
+        // This is the canonical proof that the host calls the resolver
+        // for every outgoing credentialed request, not just once at
+        // registration time.
+        let counter = Arc::new(AtomicUsize::new(0));
+        let counter_for_resolver = Arc::clone(&counter);
+        let resolver: ResolverFn = Arc::new(move || {
+            let n = counter_for_resolver.fetch_add(1, Ordering::SeqCst);
+            Ok(format!("rotating-token-{n}"))
+        });
+
+        sandbox
+            .register_credential(
+                "rotating",
+                CredentialEntry {
+                    target: base_url.clone(),
+                    header: "authorization".to_string(),
+                    prefix: "Bearer ".to_string(),
+                    resolver,
+                },
+            )
+            .expect("register_credential failed");
+
+        sandbox
+            .allow_domain(&base_url, vec![HttpMethod::Get])
+            .expect("allow_domain failed");
+
+        let code = format!(
+            r#"
+import json
+r1 = http_get("{base_url}/api/one", credential="rotating")
+r2 = http_get("{base_url}/api/two", credential="rotating")
+print(json.dumps([json.loads(r1["body"]), json.loads(r2["body"])]))
+"#,
+            base_url = base_url.trim_end_matches('/')
+        );
+
+        (sandbox.run(&code).expect("sandbox run failed"), counter)
+    })
+    .await
+    .unwrap();
+
+    let (exec, counter) = result;
+    assert_eq!(exec.exit_code, 0, "stderr: {}", exec.stderr);
+
+    let echoes: Vec<serde_json::Value> =
+        serde_json::from_str(exec.stdout.trim()).expect("failed to parse echo array");
+    assert_eq!(echoes.len(), 2, "expected two echoed responses");
+    assert_eq!(
+        echoes[0]["headers"]["authorization"].as_str(),
+        Some("Bearer rotating-token-0"),
+        "first request should see token-0"
+    );
+    assert_eq!(
+        echoes[1]["headers"]["authorization"].as_str(),
+        Some("Bearer rotating-token-1"),
+        "second request should see token-1 — resolver MUST be called per request"
+    );
+    assert_eq!(
+        counter.load(Ordering::SeqCst),
+        2,
+        "resolver should have been invoked exactly twice"
+    );
+}
+
+// -----------------------------------------------------------------------
+// Resolver failure surfaces as a request error with no token leakage
+// -----------------------------------------------------------------------
+
+#[tokio::test]
+async fn resolver_failure_surfaces_as_error() {
+    let server = EchoServer::start().await;
+    let base_url = server.url("");
+
+    let result = tokio::task::spawn_blocking(move || {
+        let mut sandbox = SandboxBuilder::new()
+            .guest(Wasm)
+            .module_path(python_guest_path())
+            .build()
+            .expect("failed to create sandbox");
+
+        // Resolver that always fails.  The diagnostic string MUST NOT
+        // appear in any guest-visible error — the host redacts it to a
+        // fixed message.
+        let resolver: ResolverFn =
+            Arc::new(|| Err("secret-bearing diagnostic that must not leak".to_string()));
+
+        sandbox
+            .register_credential(
+                "broken",
+                CredentialEntry {
+                    target: base_url.clone(),
+                    header: "authorization".to_string(),
+                    prefix: "Bearer ".to_string(),
+                    resolver,
+                },
+            )
+            .expect("register_credential failed");
+
+        sandbox
+            .allow_domain(&base_url, vec![HttpMethod::Get])
+            .expect("allow_domain failed");
+
+        let code = format!(
+            r#"
+try:
+    resp = http_get("{base_url}/api/data", credential="broken")
+    print("UNEXPECTED_OK:" + resp["body"])
+except Exception as e:
+    print("ERR:" + repr(e))
+"#,
+            base_url = base_url.trim_end_matches('/')
+        );
+
+        sandbox.run(&code).expect("sandbox run failed")
+    })
+    .await
+    .unwrap();
+
+    assert_eq!(result.exit_code, 0, "stderr: {}", result.stderr);
+    assert!(
+        result.stdout.starts_with("ERR:"),
+        "guest should have raised an exception, got stdout: {}",
+        result.stdout
+    );
+    // The host-redacted message is the only thing the guest may see.
+    assert!(
+        !result.stdout.contains("secret-bearing"),
+        "resolver diagnostic must NOT leak to guest, stdout was: {}",
+        result.stdout
+    );
+    assert!(
+        !result.stdout.contains("must not leak"),
+        "resolver diagnostic must NOT leak to guest, stdout was: {}",
+        result.stdout
+    );
+}
+
+// -----------------------------------------------------------------------
+// Multi-tenant isolation: two sandboxes that register the same
+// credential id with DIFFERENT tokens must each see only their own
+// token.  Proves the credential registry is per-`Sandbox` instance
+// — there is no global key table, no shared `Arc`, no cross-instance
+// lookup path.
+//
+// If this test ever fails it means the host has acquired a shared
+// registry by mistake (e.g. a `lazy_static!`, a `OnceCell`, or a
+// stray `Arc::clone` between sandboxes).  Treat as critical.
+// -----------------------------------------------------------------------
+
+#[tokio::test]
+async fn isolated_registries_across_sandboxes() {
+    let server = EchoServer::start().await;
+    let base_url = server.url("");
+
+    let (result_a, result_b) = tokio::task::spawn_blocking(move || {
+        // ---- Sandbox A: id="shared" → token-tenant-A ----
+        let result_a = {
+            let mut sandbox = SandboxBuilder::new()
+                .guest(Wasm)
+                .module_path(python_guest_path())
+                .build()
+                .expect("failed to create sandbox A");
+
+            sandbox
+                .register_credential("shared", cred(&base_url, "token-tenant-A"))
+                .expect("register_credential on sandbox A failed");
+
+            sandbox
+                .allow_domain(&base_url, vec![HttpMethod::Get])
+                .expect("allow_domain on sandbox A failed");
+
+            let code = format!(
+                r#"
+resp = http_get("{base_url}/tenant-a", credential="shared")
+print(resp["body"])
+"#,
+                base_url = base_url.trim_end_matches('/')
+            );
+
+            sandbox.run(&code).expect("sandbox A run failed")
+        };
+
+        // ---- Sandbox B: same id="shared" → token-tenant-B ----
+        let result_b = {
+            let mut sandbox = SandboxBuilder::new()
+                .guest(Wasm)
+                .module_path(python_guest_path())
+                .build()
+                .expect("failed to create sandbox B");
+
+            sandbox
+                .register_credential("shared", cred(&base_url, "token-tenant-B"))
+                .expect("register_credential on sandbox B failed");
+
+            sandbox
+                .allow_domain(&base_url, vec![HttpMethod::Get])
+                .expect("allow_domain on sandbox B failed");
+
+            let code = format!(
+                r#"
+resp = http_get("{base_url}/tenant-b", credential="shared")
+print(resp["body"])
+"#,
+                base_url = base_url.trim_end_matches('/')
+            );
+
+            sandbox.run(&code).expect("sandbox B run failed")
+        };
+
+        (result_a, result_b)
+    })
+    .await
+    .unwrap();
+
+    assert_eq!(
+        result_a.exit_code, 0,
+        "sandbox A stderr: {}",
+        result_a.stderr
+    );
+    assert_eq!(
+        result_b.exit_code, 0,
+        "sandbox B stderr: {}",
+        result_b.stderr
+    );
+
+    let echo_a: serde_json::Value =
+        serde_json::from_str(result_a.stdout.trim()).expect("failed to parse echo response A");
+    let echo_b: serde_json::Value =
+        serde_json::from_str(result_b.stdout.trim()).expect("failed to parse echo response B");
+
+    assert_eq!(
+        echo_a["headers"]["authorization"].as_str(),
+        Some("Bearer token-tenant-A"),
+        "sandbox A must see ONLY its own token"
+    );
+    assert_eq!(
+        echo_b["headers"]["authorization"].as_str(),
+        Some("Bearer token-tenant-B"),
+        "sandbox B must see ONLY its own token"
+    );
+
+    // Belt-and-braces: neither sandbox's stdout contains the other's
+    // token.  Catches any future regression where, say, a debug log
+    // path or a shared registry accidentally surfaces the foreign
+    // value to the guest.
+    assert!(
+        !result_a.stdout.contains("token-tenant-B"),
+        "sandbox A leaked sandbox B's token: {}",
+        result_a.stdout
+    );
+    assert!(
+        !result_b.stdout.contains("token-tenant-A"),
+        "sandbox B leaked sandbox A's token: {}",
+        result_b.stdout
+    );
+}
diff --git a/src/wasm_sandbox/wit/hyperlight-sandbox.wit b/src/wasm_sandbox/wit/hyperlight-sandbox.wit
index 5adc2cf..345b4e7 100644
--- a/src/wasm_sandbox/wit/hyperlight-sandbox.wit
+++ b/src/wasm_sandbox/wit/hyperlight-sandbox.wit
@@ -35,6 +35,7 @@ world root {
   import wasi:http/types@0.2.0;
   import wasi:http/outgoing-handler@0.2.0;
   import hyperlight:sandbox/tools;
+  import hyperlight:sandbox/credentials;
 
   export hyperlight:sandbox/executor;
 }
@@ -54,9 +55,54 @@ package hyperlight:sandbox {
     dispatch: func(name: string, args-json: string) -> result<string, string>;
   }
 
+  /// Scoped credential injection for outgoing HTTP requests.
+  ///
+  /// A credential is registered host-side with:
+  ///   * a name (opaque string the guest uses to reference it),
+  ///   * a target scope (URL prefix the credential is bound to),
+  ///   * a header name + value prefix,
+  ///   * a resolver callback that produces the secret value.
+  ///
+  /// The guest never sees the secret. It attaches a credential by name to an
+  /// `outgoing-request` before dispatching it through
+  /// `wasi:http/outgoing-handler`. At dispatch time the host:
+  ///   1. resolves the credential value (resolver callback),
+  ///   2. verifies the request URL is within the credential's target scope,
+  ///   3. injects `<header>: <prefix><value>` into the request,
+  ///   4. then proceeds with the normal `allow_domain` network gate.
+  ///
+  /// Both the credential scope check AND the allow_domain check must pass.
+  /// Credential lookup, scope match, resolver errors and unknown credentials
+  /// all surface as the `credential-error` variant. Secret values are never
+  /// included in error messages.
+  interface credentials {
+    use wasi:http/types@0.2.0.{outgoing-request};
+
+    variant credential-error {
+      /// No credential is registered under this name.
+      unknown,
+      /// The request URL does not fall within the credential's target scope.
+      scope-mismatch,
+      /// The host resolver callback failed. The inner string is a
+      /// host-redacted message safe for logging.
+      resolver-failed(string),
+      /// A credential is already attached to this request.
+      already-attached,
+    }
+
+    /// Attach a registered credential to an outgoing-request.
+    /// The host will inject the credential's header at dispatch time.
+    /// Returns ok on success, credential-error on failure.
+    attach: func(
+      request: borrow<outgoing-request>,
+      credential: string,
+    ) -> result<_, credential-error>;
+  }
+
   /// Minimal world for guests that bring their own WASI shim (e.g. ComponentizeJS).
   world sandbox {
     import tools;
+    import credentials;
     import wasi:filesystem/types@0.2.0;
     import wasi:filesystem/preopens@0.2.0;
     import wasi:http/types@0.2.0;
diff --git a/src/wasm_sandbox/wit/sandbox-world.wasm b/src/wasm_sandbox/wit/sandbox-world.wasm
new file mode 100644
index 0000000..a8a3e89
Binary files /dev/null and b/src/wasm_sandbox/wit/sandbox-world.wasm differ