[MarcStdt]

Summary

• Presign and upload app.openui beside app.wasm under the same immutable request prefix in both runtimes.
• Validate both files before uploading; upload the document first and update the active package only after success.
• Preserve the previous package on publication failure and keep worker environment expansion safe.
• Add Node 24 and Rust/wasm32 tooling to the developer image.

Boundaries

No new public HTTP endpoints, CLI flags or protobuf fields. RuntimeUIPackageUpload changes are internal.

Verification

• go test ./... passed (one initial existing supervisor cleanup-race failure; complete rerun passed).
• Restore/retention and paired-publication regressions include missing document, upload failure and worker environment expansion.
• Targeted supervisor, Docker and Kubernetes package tests passed again before commit.
• Built/imported the local developer image and published a real WASM/document pair in Kubernetes.

Readiness

Draft: this integration was verified against the local build of highcard-dev/druid-ui#19 (9443dcb), published only to local Verdaccio as 4.0.0-rc.1. GitHub still reports SDK PR #19 as OPEN, not merged.

Before merge, publish the SDK RC, regenerate consumer lockfiles against the actual public tarballs (the current RC integrity hashes come from local packing), and rerun clean-install CI. Local registry URLs have been removed from committed lockfiles. Coordinate the host, runtime, Scrolls and developer image rollout; this is a breaking UI-package format change. No production deployment or public npm release was performed.

Coordinated PRs

• highcard-dev/druid-local: https://github.com/highcard-dev/druid-local/pull/11
• highcard-dev/monorepo: https://github.com/highcard-dev/monorepo/pull/386
• highcard-dev/druid-cli: feat(ui)!: publish paired WASM and OpenUI assets #128
• highcard-dev/scrolls: feat(ui)!: migrate the config editor to OpenUI scrolls#100
• SDK prerequisite: refactor(sdk)!: adopt Rust-first OpenUI runtime druid-ui#19