Every workspace member, grouped by role. The architecture orientation
shows how they fit; each crate’s AGENTS.md (with a CLAUDE.md symlink
beside it) has its commands and detail. The same index, for agents, is
crates/AGENTS.md.
| Crate |
Package |
What it is |
crates/merod |
merod |
The node binary: init, run, config, local, inspect, kms disk-key. Turns NodeArgs into the node’s Config. |
crates/meroctl |
meroctl |
The command line for nodes, over the attested, sealed client. |
| Crate |
Package |
What it is |
crates/node |
calimero-node |
The node: system group, app groups, executor glue, routing, the HTTP API and Ops API, packages, follow-ups, blobs, presence, search, app frontends, backups, the storage key. |
crates/log |
calimero-log |
Multi-group Raft (openraft) over one sealed RocksDB per node; snapshots; the log.redb migration. |
crates/sealed |
calimero-sealed |
The sealed HTTP transport (wire format v2), server middleware and client; byte-compatible with mero-js. |
crates/identity |
calimero-identity |
WebAuthn passkeys, session tokens, API keys, confirm challenges; testing: a software authenticator. |
crates/client |
calimero-client |
The Rust client: attestation check (shared with peers), sealed requests, sign-in, calls and views. |
crates/kms-client |
calimero-kms-client |
The mero-kms client: release-policy check, key release, kms disk-key. |
crates/outbound |
calimero-outbound |
The gated outbound HTTPS client and secrets a run may use. |
crates/search |
calimero-search |
Per-app full-text search (tantivy), built in memory from apps’ search exports. |
| Crate |
Package |
What it is |
crates/tee-attestation |
calimero-tee-attestation |
TDX quote generation (Linux, configfs-tsm) and DCAP verification; mock-attestation for tests; the calimero-tee-verify binary behind cli. |
crates/tee-release |
calimero-tee-release |
Fetches and Sigstore-verifies signed mero-tee release assets (published-mrtds.json, KMS policies). |
| Crate |
Package |
What it is |
crates/bundle |
calimero-bundle |
The .mpk manifest, JCS canonicalization and Ed25519 signatures; shared with mero-sign. |
crates/app-downloader |
calimero-app-downloader |
Fetching signed releases from a package registry (HttpRegistry). |
Apps are calimero:app components on wasmtime. Check with their owner before
changing these.
| Crate |
Package |
What it is |
crates/app-wit |
calimero-app-wit |
The calimero:app WIT world and its import allow-list. |
crates/app-host |
calimero-app-host |
The engine-neutral host core of calimero:app: state, policy, time and randomness. |
crates/app-engine-wasmtime |
calimero-app-engine-wasmtime |
The wasmtime engine for components: fuel, epochs, limits and a checked cache. |
crates/sdk (+ sdk-macros) |
calimero-sdk, calimero-sdk-macros |
The Rust app SDK for calimero:app: app attributes, encoding, tables, collections, env and the embedded ABI. |
crates/app-sdk |
calimero-app-sdk |
The SDK’s old name: re-exports calimero-sdk, kept until no app depends on it. |
crates/app-build |
calimero-app-build |
Builds Rust guests into calimero:app components (mero-app-build). |
| Crate |
Package |
What it is |
crates/primitives |
calimero-primitives |
Ids, keys, hashes and wire types used everywhere. |
| Crate |
Package |
What it is |
crates/build-utils |
calimero-build-utils |
build.rs helpers: release version, git and rustc metadata. |
crates/git-hooks |
calimero-git-hooks |
Installs .githooks/pre-commit (cargo fmt --check) on any build. |
crates/utils/fs |
calimero-utils-fs |
Writing a secret file only its owner can read, on Unix and Windows; used by mero-sign. |
| Tool |
Binary |
What it is |
tools/mero-sign |
mero-sign |
Sign bundle manifests. |
tools/mero-compute |
mero-compute |
Run one compute method of a compute component alone, with a job node’s engine and caps. |
