feat(pvm): expose standalone runtime through host bridge

.gitattributes

@@ -7,6 +7,8 @@ rust/crates/truapi-server/src/wasm/generated_bridge.rs linguist-generated=true
 ios/truapi-host/Sources/TrUAPIHost/truapi*.swift linguist-generated=true
 ios/truapi-host/Sources/TrUAPIHost/Resources/truapi-container.js linguist-generated=true
 ios/truapi-host/Sources/truapi*FFI/include/** linguist-generated=true
+ios/truapi-host/Sources/TrUAPIHost/pvm_runtime.swift linguist-generated=true
+ios/truapi-host/Sources/pvm_runtimeFFI/include/** linguist-generated=true
 
 ios/truapi-provider/Sources/TrUAPIProvider/truapi_provider.swift linguist-generated=true
 ios/*-provider/Sources/*FFI/include/** linguist-generated=true

CLAUDE.md

@@ -14,6 +14,8 @@ rust/crates/
   truapi-platform/       Host syscall traits (storage, navigation, consent, ...)
   truapi-provider/       network provider backends (WebSocket RPC or smoldot light-client)
   truapi-server/         Rust runtime hosts implement; ships as WASM (browser/node)
+  truapi-pvm-host/       reviewed bridge pinned to paritytech/pvm-host-runtime;
+                         re-exports native APIs and optional browser assets
 js/packages/
   truapi/                  @parity/truapi TS package; generated TS lives under ignored paths
   truapi-host/            @parity/truapi-host: WASM-backed host runtime. Subpath entries:
@@ -44,6 +46,11 @@ scripts/truapi-host-installer.sh
 .github/consumers.json     maps each released package to the repos notified by a bump issue
 ```
 
+The PolkaVM runtime implementation, GPU wire crate, browser package, and ABI
+contract live in `paritytech/pvm-host-runtime`. Changes here update only the
+`truapi-pvm-host` bridge pin and host integration; do not copy runtime source or
+browser workers back into this repository.
+
 ### Crate + binding invariants
 
 - `truapi` is canonical; runtime crates re-export rather than redefine. New

Makefile

@@ -238,9 +238,9 @@ uniffi-kotlin: ## Regenerate Kotlin UniFFI bindings from the truapi-server cdyli
 		--language kotlin \
 		--out-dir $(UNIFFI_KOTLIN_OUT)
 
-# Android ABIs to cross-compile the cdylib for. arm64 + armv7 cover physical
-# devices; x86_64 covers the emulator on Intel/Apple-silicon hosts.
-ANDROID_ABIS ?= arm64-v8a armeabi-v7a x86_64
+# Android ABIs supported by both TrUAPI and PolkaVM. arm64 covers physical
+# devices; x86_64 covers emulators. PolkaVM does not support 32-bit armv7.
+ANDROID_ABIS ?= arm64-v8a x86_64
 ANDROID_JNILIBS := android/truapi-host/src/main/jniLibs
 
 android-jni: ## Cross-compile libtruapi_server.so for Android ABIs into jniLibs (needs cargo-ndk + NDK).
@@ -444,7 +444,8 @@ xcframework: uniffi ## Build truapi_server.xcframework for iOS device + simulato
 	rm -rf $(XCFRAMEWORK_OUT) $(XCFRAMEWORK_HEADERS)
 	mkdir -p $(XCFRAMEWORK_HEADERS)
 	cp $(UNIFFI_SWIFT_TMP)/truapiFFI.h $(UNIFFI_SWIFT_TMP)/truapi_platformFFI.h \
-		$(UNIFFI_SWIFT_TMP)/truapi_serverFFI.h $(XCFRAMEWORK_HEADERS)/
+		$(UNIFFI_SWIFT_TMP)/truapi_serverFFI.h $(UNIFFI_SWIFT_TMP)/pvm_runtimeFFI.h \
+		$(XCFRAMEWORK_HEADERS)/
 	cp $(UNIFFI_SWIFT_TMP)/truapi_serverFFI.modulemap $(XCFRAMEWORK_HEADERS)/module.modulemap
 	slices=""; \
 	for target in $(XCFRAMEWORK_TARGETS); do \

Package.swift

@@ -81,11 +81,18 @@ let package = Package(
             pkgConfig: nil,
             providers: []
         ),
+        .systemLibrary(
+            name: "pvm_runtimeFFI",
+            path: "ios/truapi-host/Sources/pvm_runtimeFFI/include",
+            pkgConfig: nil,
+            providers: []
+        ),
         binaryTarget,
         .target(
             name: "TrUAPIHost",
             dependencies: [
-                "truapiFFI", "truapi_platformFFI", "truapi_serverFFI", "truapi_serverFFI_binary",
+                "truapiFFI", "truapi_platformFFI", "truapi_serverFFI",
+                "pvm_runtimeFFI", "truapi_serverFFI_binary",
             ],
             path: "ios/truapi-host/Sources/TrUAPIHost",
             resources: [.copy("Resources/truapi-container.js")]

README.md

@@ -70,6 +70,7 @@ rust/crates/
   truapi-platform/       Host syscall traits used by truapi-server (storage, navigation, consent, ...)
   truapi-provider/       Network provider backends (WebSocket RPC or smoldot light-client)
   truapi-server/         Host runtime: dispatcher, typed SCALE logic, chain signing, WASM surface
+  truapi-pvm-host/       Reviewed bridge to one immutable pvm-host-runtime release
 js/packages/
   truapi/                  @parity/truapi TypeScript client
   truapi-host/            @parity/truapi-host: WASM-backed host runtime; entries `.`
@@ -92,6 +93,12 @@ scripts/codegen.sh         Regenerate the TS client from the Rust source
 scripts/battery.sh         Run the generated battery against both headless CLI host roles
 ```
 
+The PolkaVM application runtime, GPU wire contract, browser workers, and
+reproducible browser assets live in
+[`paritytech/pvm-host-runtime`](https://github.com/paritytech/pvm-host-runtime).
+Hosts integrate through `truapi-pvm-host`, which pins one reviewed runtime
+source revision and exposes the matching native API and browser asset set.
+
 The Swift host adapter (the `TrUAPIHost` SPM package over the truapi-server
 UniFFI core) lives under [`ios/truapi-host/`](ios/truapi-host), with its SPM
 manifest at the repo root (`Package.swift`) so apps can consume it as a git-URL

deny.toml

@@ -41,6 +41,11 @@ exceptions = [
     # BSL-1.0 is permissive, but scope it so it cannot spread to other crates.
     { name = "clipboard-win", allow = ["BSL-1.0"] },
     { name = "error-code", allow = ["BSL-1.0"] },
+    # The host-neutral PVM runtime and wire protocol are intentionally MPL-2.0
+    # so their Rust and browser implementations retain file-level copyleft.
+    { name = "pvm-gpu-wire", allow = ["MPL-2.0"] },
+    { name = "pvm-runtime", allow = ["MPL-2.0"] },
+    { name = "pvm-runtime-assets", allow = ["MPL-2.0"] },
     { name = "uniffi", allow = ["MPL-2.0"] },
     { name = "uniffi_bindgen", allow = ["MPL-2.0"] },
     { name = "uniffi_checksum_derive", allow = ["MPL-2.0"] },