Merge branch 'main' into harden/ssrf-proxy-allowlist

Author: prk-Jr

.claude/agents/build-validator.md

@@ -17,13 +17,13 @@ Validate that the project builds correctly across all targets.
 2. **WASM build** (production target)
 
    ```bash
-   cargo build --bin trusted-server-fastly --release --target wasm32-wasip1
+   cargo build --package trusted-server-adapter-fastly --release --target wasm32-wasip1
    ```
 
 3. **Clippy**
 
    ```bash
-   cargo clippy --all-targets --all-features -- -D warnings
+   cargo clippy --workspace --all-targets --all-features -- -D warnings
    ```
 
 4. **Format check**

.claude/agents/pr-creator.md

@@ -21,7 +21,7 @@ Before creating the PR, verify the branch is healthy:
 
 ```
 cargo fmt --all -- --check
-cargo clippy --all-targets --all-features -- -D warnings
+cargo clippy --workspace --all-targets --all-features -- -D warnings
 cargo test --workspace
 cd crates/js/lib && npx vitest run
 cd crates/js/lib && npm run format

.claude/agents/pr-reviewer.md

@@ -70,8 +70,8 @@ For each changed file, evaluate:
 #### WASM compatibility
 
 - Target is `wasm32-wasip1` — no std::net, std::thread, or OS-specific APIs
-- No Tokio or runtime-specific deps in `crates/common`
-- Fastly-specific APIs only in `crates/fastly`
+- No Tokio or runtime-specific deps in `crates/trusted-server-core`
+- Fastly-specific APIs only in `crates/trusted-server-adapter-fastly`
 
 #### Convention compliance (from CLAUDE.md)
 
@@ -177,7 +177,7 @@ comment. Use the file's **current line number** (not diff position) with the
 
 ````json
 {
-  "path": "crates/common/src/publisher.rs",
+  "path": "crates/trusted-server-core/src/publisher.rs",
   "line": 166,
   "side": "RIGHT",
   "body": "🔧 **wrench** — Race condition: Description of the issue...\n\n**Fix**:\n```rust\n// suggested code\n```"
@@ -288,6 +288,6 @@ Output:
 - Do not include any byline, "Generated with" footer, `Co-Authored-By`
   trailer, or self-referential titles (e.g., "Staff Engineer Review") in
   review comments or the review body.
-- If the diff is very large (>50 files), prioritize `crates/common/` changes
+- If the diff is very large (>50 files), prioritize `crates/trusted-server-core/` changes
   and new files over mechanical changes (Cargo.lock, generated code).
 - Never submit a review without explicit user approval of the findings.

.claude/agents/repo-explorer.md

@@ -11,8 +11,8 @@ implementation details.
 
 This is a Rust workspace with three crates:
 
-- `crates/common/` — core library (integrations, HTML processing, synthetic IDs, GDPR)
-- `crates/fastly/` — Fastly Compute entry point
+- `crates/trusted-server-core/` — core library (integrations, HTML processing, synthetic IDs, GDPR)
+- `crates/trusted-server-adapter-fastly/` — Fastly Compute entry point
 - `crates/js/` — TypeScript/JS build pipeline (per-integration IIFE bundles)
 
 Target: `wasm32-wasip1` (Fastly Compute)

.claude/agents/verify-app.md

@@ -19,7 +19,7 @@ cargo fmt --all -- --check
 ### 2. Clippy
 
 ```bash
-cargo clippy --all-targets --all-features -- -D warnings
+cargo clippy --workspace --all-targets --all-features -- -D warnings
 ```
 
 ### 3. Rust Tests
@@ -49,7 +49,7 @@ cd docs && npm run format
 ### 7. WASM Build
 
 ```bash
-cargo build --bin trusted-server-fastly --release --target wasm32-wasip1
+cargo build --package trusted-server-adapter-fastly --release --target wasm32-wasip1
 ```
 
 ## Output

.claude/commands/check-ci.md

@@ -1,7 +1,7 @@
 Run all CI checks locally, in order. Stop and report if any step fails.
 
 1. `cargo fmt --all -- --check`
-2. `cargo clippy --all-targets --all-features -- -D warnings`
+2. `cargo clippy --workspace --all-targets --all-features -- -D warnings`
 3. `cargo test --workspace`
 4. `cd crates/js/lib && npx vitest run`
 5. `cd crates/js/lib && npm run format`

.claude/commands/verify.md

@@ -1,9 +1,9 @@
 Full verification: build, test, and lint the entire project.
 
 1. `cargo build --workspace`
-2. `cargo build --bin trusted-server-fastly --release --target wasm32-wasip1`
+2. `cargo build --package trusted-server-adapter-fastly --release --target wasm32-wasip1`
 3. `cargo fmt --all -- --check`
-4. `cargo clippy --all-targets --all-features -- -D warnings`
+4. `cargo clippy --workspace --all-targets --all-features -- -D warnings`
 5. `cargo test --workspace`
 6. `cd crates/js/lib && npx vitest run`
 7. `cd crates/js/lib && npm run format`

.github/actions/setup-integration-test-env/action.yml

@@ -73,7 +73,7 @@ runs:
         TRUSTED_SERVER__PUBLISHER__PROXY_SECRET: integration-test-proxy-secret
         TRUSTED_SERVER__SYNTHETIC__SECRET_KEY: integration-test-secret-key
         TRUSTED_SERVER__PROXY__CERTIFICATE_CHECK: "false"
-      run: cargo build --bin trusted-server-fastly --release --target wasm32-wasip1
+      run: cargo build --package trusted-server-adapter-fastly --release --target wasm32-wasip1
 
     - name: Build WordPress test container
       if: ${{ inputs.build-test-images == 'true' }}

.github/pull_request_template.md

@@ -24,12 +24,12 @@ Closes #
 <!-- How did you verify this works? Check all that apply -->
 
 - [ ] `cargo test --workspace`
-- [ ] `cargo clippy --all-targets --all-features -- -D warnings`
+- [ ] `cargo clippy --workspace --all-targets --all-features -- -D warnings`
 - [ ] `cargo fmt --all -- --check`
 - [ ] JS tests: `cd crates/js/lib && npx vitest run`
 - [ ] JS format: `cd crates/js/lib && npm run format`
 - [ ] Docs format: `cd docs && npm run format`
-- [ ] WASM build: `cargo build --bin trusted-server-fastly --release --target wasm32-wasip1`
+- [ ] WASM build: `cargo build --package trusted-server-adapter-fastly --release --target wasm32-wasip1`
 - [ ] Manual testing via `fastly compute serve`
 - [ ] Other: <!-- describe -->
 

.github/workflows/format.yml

@@ -33,7 +33,7 @@ jobs:
         uses: actions-rust-lang/rustfmt@v1
 
       - name: Run cargo clippy
-        run: cargo clippy --all-targets --all-features -- -D warnings
+        run: cargo clippy --workspace --all-targets --all-features -- -D warnings
 
   format-typescript:
     runs-on: ubuntu-latest