@tangle-network/starter-foundry 0.5.4 → 0.7.2

package/registry/families/rag-pipeline-py/manifest.json

@@ -0,0 +1,174 @@
+{
+  "id": "rag-pipeline-py",
+  "description": "Python RAG pipeline \u2014 ingest local docs, chunk, embed via sentence-transformers, store in Chroma, retrieve top-k, answer via a local LLM (Ollama by default). Production-shape retrieval-augmented generation with langchain-core primitives. For knowledge-base chatbots, internal search, and doc Q&A products that keep their own corpus.",
+  "tags": [
+    "ml",
+    "rag",
+    "retrieval",
+    "python",
+    "langchain",
+    "chroma",
+    "embeddings"
+  ],
+  "taxonomy": {
+    "language": "python",
+    "runtime": "python",
+    "surface": "inference"
+  },
+  "slots": {
+    "auth": {
+      "options": [
+        "auth:none",
+        "auth:better-auth",
+        "auth:clerk"
+      ],
+      "default": "auth:none"
+    }
+  },
+  "defaults": {
+    "projectType": "inference",
+    "serviceName": "starter-foundry-rag",
+    "port": 8098,
+    "embeddingModel": "sentence-transformers/all-MiniLM-L6-v2",
+    "llmModel": "llama3.1:8b",
+    "llmBaseUrl": "http://localhost:11434",
+    "vectorDbDir": "./chroma_db"
+  },
+  "files": [
+    {
+      "source": "files/pyproject.toml",
+      "target": "pyproject.toml"
+    },
+    {
+      "source": "files/.env.example",
+      "target": ".env.example"
+    },
+    {
+      "source": "files/docs/sample.md",
+      "target": "docs/sample.md"
+    },
+    {
+      "source": "files/README-rag.md",
+      "target": "docs/rag.md"
+    },
+    {
+      "source": "files/validate-rag.mjs",
+      "target": "validate-rag.mjs"
+    }
+  ],
+  "validationChecks": [
+    {
+      "type": "file-exists",
+      "path": "pyproject.toml"
+    },
+    {
+      "type": "file-exists",
+      "path": "src/pipeline.py"
+    },
+    {
+      "type": "file-exists",
+      "path": "docs/sample.md"
+    },
+    {
+      "type": "file-exists",
+      "path": ".env.example"
+    },
+    {
+      "type": "command-success",
+      "command": [
+        "node",
+        "validate-rag.mjs"
+      ],
+      "expect": "rag pipeline starter ok"
+    }
+  ],
+  "contextHints": {
+    "commands": [
+      "pip install -e .",
+      "cp .env.example .env",
+      "python -m src.pipeline index",
+      "python -m src.pipeline ask 'what is paged attention?'"
+    ],
+    "entrypoints": [
+      "src/pipeline.py",
+      "pyproject.toml",
+      "docs/"
+    ],
+    "preview": null,
+    "extensionPoints": [
+      "docs/",
+      "src/pipeline.py"
+    ]
+  },
+  "keywords": [
+    "retrieval augmented generation",
+    "rag pipeline",
+    "langchain rag",
+    "chroma rag",
+    "sentence transformers",
+    "vector search python",
+    "embeddings pipeline",
+    "doc qa",
+    "knowledge base chatbot",
+    "local rag"
+  ],
+  "scoring": {
+    "boost": {
+      "rag pipeline": 5,
+      "chroma rag": 4,
+      "langchain rag": 4,
+      "retrieval augmented generation": 3
+    }
+  },
+  "tieredKeywords": {
+    "tier1": [
+      "rag pipeline",
+      "retrieval augmented generation",
+      "langchain rag",
+      "chroma rag"
+    ],
+    "tier2": [
+      "sentence transformers",
+      "doc qa",
+      "embeddings pipeline",
+      "vector search python"
+    ],
+    "archetypes": [
+      "internal knowledge base chatbot",
+      "doc-grounded qa bot",
+      "enterprise rag search"
+    ]
+  },
+  "buildHints": {
+    "whenToUse": "Pick this when the product owns its document corpus and needs grounded, citation-bearing answers. Ships end-to-end: ingest \u2192 chunk \u2192 embed \u2192 Chroma \u2192 retrieve \u2192 LLM. For raw LLM serving without retrieval, use vllm-server / tgi-server / ollama-server; for agentic tool-using loops, use agent-service-py.",
+    "firstSteps": [
+      "pip install -e . to install the package and all langchain/chroma deps",
+      "cp .env.example .env; verify LLM_BASE_URL points at a running Ollama (`ollama serve`) or OpenAI-compatible server",
+      "Drop source docs (.md / .txt / .pdf) into ./docs",
+      "python -m src.pipeline index \u2014 builds the Chroma collection",
+      "python -m src.pipeline ask 'your question here'"
+    ],
+    "gotchas": [
+      "sentence-transformers/all-MiniLM-L6-v2 is 384-dim. Mixing embeddings from different models in the same Chroma collection will silently return garbage \u2014 always nuke VECTOR_DB_DIR when you change EMBEDDING_MODEL.",
+      "Chroma persists SQLite + parquet to VECTOR_DB_DIR. Commit it to git only for tiny demo corpora; for real docs, rebuild on deploy.",
+      "Chunk size tradeoff: too small (<200 chars) loses context; too large (>1500) dilutes retrieval. Default is 800 chars with 120 overlap \u2014 tune per corpus.",
+      "If LLM_BASE_URL is Ollama you must `ollama pull {{llmModel}}` before the first query \u2014 first run otherwise 404s on the /api/chat call.",
+      "pypdf is imported lazily. PDF ingest requires `pip install pypdf`; the default install only handles .md and .txt.",
+      "Embedding the whole corpus is O(docs \u00d7 tokens \u00d7 embedding-forward-pass). For >10k docs use an ONNX/GPU sentence-transformers backend or batch via an embeddings API."
+    ],
+    "placeholders": [
+      {
+        "path": "src/main.py",
+        "description": "docs/ (replace sample.md with the real corpus)"
+      },
+      {
+        "path": "src/main.py",
+        "description": ".env (LLM_BASE_URL, LLM_MODEL, EMBEDDING_MODEL)"
+      },
+      {
+        "path": "src/main.py",
+        "description": "src/pipeline.py (chunk size, retrieval k, prompt template)"
+      }
+    ]
+  }
+}

package/registry/families/react-vite-ts/files/package.json

@@ -13,20 +13,20 @@
     "class-variance-authority": "latest",
     "clsx": "latest",
     "lucide-react": "latest",
-    "react": "^19.1.0",
-    "react-dom": "^19.1.0",
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
     "tailwind-merge": "latest",
     "@tanstack/react-table": "latest",
     "recharts": "latest"
   },
   "devDependencies": {
     "@tailwindcss/vite": "latest",
-    "@types/node": "^20.0.0",
-    "@types/react": "latest",
-    "@types/react-dom": "latest",
-    "@vitejs/plugin-react": "^4.4.0",
+    "@types/node": "^20.17.0",
+    "@types/react": "^19.2.0",
+    "@types/react-dom": "^19.2.0",
+    "@vitejs/plugin-react": "^4.7.0",
     "tailwindcss": "latest",
-    "typescript": "^5.7.0",
+    "typescript": "^5.9.0",
     "vite": "^6.4.2"
   },
   "overrides": {

package/registry/families/react-vite-ts/manifest.json

@@ -191,5 +191,36 @@
       "multichain portfolio",
       "token tracker"
     ]
+  },
+  "buildHints": {
+    "whenToUse": "React single-page app with Vite. Use for client-rich apps without a server surface \u2014 dashboards, tools, games, interactive demos.",
+    "firstSteps": [
+      "Install: `pnpm install` then `pnpm dev` (Vite dev server with HMR).",
+      "Brand strings + copy: `src/personalize.json`. Palette: `src/personalize.css`. Both render-time templated; preview updates on next refresh.",
+      "shadcn/ui components under `src/components/ui/`. Import via `@/components/ui/button`. Path alias `@/` \u2192 `src/` is configured.",
+      "Build: `pnpm build` outputs to `dist/` \u2014 static assets ready for any CDN."
+    ],
+    "gotchas": [
+      "No SSR \u2014 SEO content must live in `index.html` <head> or be injected post-hydration. Use `nextjs-ts` if SEO is a hard requirement.",
+      "Vite dev server is separate from prod build. Some imports (e.g. CSS-in-JS) work in dev but need explicit config for prod."
+    ],
+    "placeholders": [
+      {
+        "path": "src/App.tsx",
+        "description": "Minimal skeleton shell (header + empty main). Replace the main content with the product's primary view \u2014 shadcn components + path alias are ready."
+      },
+      {
+        "path": "index.html",
+        "description": "Root HTML with `<div id=\"app\">` and title templated from personalize. Title + meta tags live here; favicon and fonts too if the product needs them."
+      },
+      {
+        "path": "src/personalize.json",
+        "description": "Brand strings \u2014 edit for the product but also rewrite src/App.tsx main content."
+      },
+      {
+        "path": "src/personalize.css",
+        "description": "HSL design tokens on :root + .dark. Edit the palette to match the product; Tailwind v4 @theme defaults already compose in."
+      }
+    ]
   }
 }

package/registry/families/realtime-audio-ts/files/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "{{packageName}}",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc && vite build",
+    "preview": "vite preview",
+    "preview:instant": "vite --port {{port}} --host 0.0.0.0",
+    "validate": "node validate-realtime-audio.mjs"
+  },
+  "devDependencies": {
+    "@types/node": "^20.17.0",
+    "typescript": "^5.9.0",
+    "vite": "^6.4.2"
+  },
+  "overrides": {
+    "vite": "^6.4.2"
+  },
+  "pnpm": {
+    "overrides": {
+      "vite": "^6.4.2"
+    }
+  }
+}

package/registry/families/realtime-audio-ts/files/validate-realtime-audio.mjs

@@ -0,0 +1,43 @@
+import fs from "node:fs/promises";
+import { stripTypeScriptTypes } from "node:module";
+
+const files = ["src/main.ts", "src/audio.ts", "src/visualizer.ts", "src/peer.ts"];
+for (const file of files) {
+  const source = await fs.readFile(file, "utf8");
+  stripTypeScriptTypes(source);
+}
+
+JSON.parse(await fs.readFile("tsconfig.json", "utf8"));
+
+const html = await fs.readFile("index.html", "utf8");
+if (!html.includes('/src/main.ts')) {
+  throw new Error("index.html must load src/main.ts as a module");
+}
+
+const audio = await fs.readFile("src/audio.ts", "utf8");
+if (!audio.includes("AudioContext") || !audio.includes("AnalyserNode")) {
+  throw new Error("src/audio.ts must set up an AudioContext + AnalyserNode");
+}
+// Autoplay-unlock check: resume() MUST be called somewhere, otherwise
+// the mic meters return all zeros silently.
+if (!audio.includes(".resume()")) {
+  throw new Error("src/audio.ts must call AudioContext.resume() — autoplay policy requires a user-gesture unlock");
+}
+
+const vis = await fs.readFile("src/visualizer.ts", "utf8");
+if (!vis.includes("getByteFrequencyData")) {
+  throw new Error("src/visualizer.ts must read FFT data via getByteFrequencyData");
+}
+if (!vis.includes("requestAnimationFrame")) {
+  throw new Error("src/visualizer.ts must drive rendering from requestAnimationFrame");
+}
+
+const peer = await fs.readFile("src/peer.ts", "utf8");
+if (!peer.includes("RTCPeerConnection") || !peer.includes("addTrack")) {
+  throw new Error("src/peer.ts must create an RTCPeerConnection and call addTrack before createOffer");
+}
+if (!peer.includes("SIGNALLING") && !peer.includes("signalling") && !peer.includes("signaling")) {
+  throw new Error("src/peer.ts must document where signalling transport plugs in");
+}
+
+console.log("realtime audio ok");

package/registry/families/realtime-audio-ts/manifest.json

@@ -0,0 +1,177 @@
+{
+  "id": "realtime-audio-ts",
+  "description": "Browser realtime-audio app — WebAudio mic capture, FFT visualization, WebRTC peer-audio stub.",
+  "tags": [
+    "frontend",
+    "audio",
+    "webaudio",
+    "webrtc",
+    "typescript"
+  ],
+  "taxonomy": {
+    "language": "typescript",
+    "runtime": "browser",
+    "surface": "frontend"
+  },
+  "slots": {
+    "auth": {
+      "options": [
+        "auth:none",
+        "auth:better-auth",
+        "auth:clerk",
+        "auth:supabase-auth"
+      ],
+      "default": "auth:none"
+    },
+    "payments": {
+      "options": [
+        "payments:none",
+        "payments:stripe",
+        "payments:coinbase-commerce"
+      ],
+      "default": "payments:none"
+    },
+    "sdk": {
+      "options": [
+        "sdk:none",
+        "sdk:coinbase-cdp",
+        "sdk:solana-web3",
+        "sdk:evm-wallet"
+      ],
+      "default": "sdk:none"
+    }
+  },
+  "defaults": {
+    "projectType": "frontend",
+    "port": 4199,
+    "headline": "Starter Foundry Realtime Audio",
+    "subheadline": "Mic capture, FFT visualization, and a WebRTC peer-audio seam — browser-native."
+  },
+  "files": [
+    {
+      "source": "files/package.json",
+      "target": "package.json"
+    },
+    {
+      "source": "files/validate-realtime-audio.mjs",
+      "target": "validate-realtime-audio.mjs"
+    }
+  ],
+  "validationChecks": [
+    {
+      "type": "file-exists",
+      "path": "src/main.ts"
+    },
+    {
+      "type": "file-exists",
+      "path": "index.html"
+    },
+    {
+      "type": "file-exists",
+      "path": "vite.config.ts"
+    },
+    {
+      "type": "command-success",
+      "command": [
+        "node",
+        "validate-realtime-audio.mjs"
+      ],
+      "expect": "realtime audio ok"
+    }
+  ],
+  "contextHints": {
+    "commands": [
+      "pnpm install",
+      "pnpm dev",
+      "node validate-realtime-audio.mjs"
+    ],
+    "entrypoints": [
+      "index.html",
+      "src/main.ts",
+      "src/audio.ts",
+      "src/visualizer.ts",
+      "src/peer.ts",
+      "vite.config.ts"
+    ],
+    "preview": {
+      "path": "/"
+    },
+    "extensionPoints": [
+      "auth-config.json",
+      "payments-config.json",
+      "sdk-config.json"
+    ]
+  },
+  "keywords": [
+    "realtime audio",
+    "webaudio",
+    "audio visualization",
+    "webrtc audio",
+    "peer audio",
+    "fft visualization",
+    "microphone capture browser",
+    "audio app",
+    "spectrum analyzer",
+    "voice chat web"
+  ],
+  "tieredKeywords": {
+    "tier1": [
+      "realtime audio",
+      "webaudio",
+      "audio visualization",
+      "webrtc audio",
+      "peer audio"
+    ],
+    "tier2": [
+      "fft visualization",
+      "microphone capture browser",
+      "spectrum analyzer",
+      "voice chat web",
+      "audio streaming browser",
+      "browser audio app"
+    ],
+    "tier3": [
+      "audio effects",
+      "music visualizer",
+      "karaoke app"
+    ],
+    "archetypes": [
+      "browser voice chat",
+      "web-based audio analyzer",
+      "p2p audio streaming"
+    ]
+  },
+  "buildHints": {
+    "whenToUse": "Pick realtime-audio-ts when the app captures microphone audio in the browser, visualizes it with an AnalyserNode / FFT, and optionally streams it to a peer via WebRTC. If the user wants voice chat with server-mediated rooms, use a signalling-server + this template — the peer.ts stub has the RTCPeerConnection wired and documents where to plug in the signalling transport.",
+    "architectureNotes": [
+      "src/audio.ts owns the AudioContext lifecycle — it is created lazily on the first user gesture to satisfy autoplay policy (Chrome/Safari refuse to run an AudioContext started before a click).",
+      "src/visualizer.ts runs a requestAnimationFrame loop that reads from AnalyserNode.getByteFrequencyData into a preallocated Uint8Array (allocating in the RAF loop causes GC jank at 60fps).",
+      "src/peer.ts is an RTCPeerConnection harness that accepts an inbound MediaStream, adds its tracks to the peer connection, and exposes createOffer/applyAnswer hooks. Signalling is OUT OF SCOPE — the stub documents exactly where to wire a WebSocket/Ably/Pusher transport.",
+      "src/main.ts is the glue: Start button → requestUserMedia → audio.start(stream) → visualizer.attach(analyser) → peer.addLocalStream(stream)."
+    ],
+    "components": [
+      "Start/Stop button that unlocks the AudioContext on click.",
+      "Canvas-based FFT bar visualizer (one draw per RAF tick).",
+      "Mute / gain slider wired through a GainNode.",
+      "Peer status display (idle / offering / connected).",
+      "Signalling transport seam — a comment block in peer.ts marks where WebSocket code goes."
+    ],
+    "gotchas": [
+      "AUTOPLAY POLICY: a freshly-created AudioContext is suspended in Chrome, Safari, and Firefox until a user gesture. Call audioContext.resume() inside the click handler — NOT at module load — or getByteFrequencyData returns all zeros with no error.",
+      "getUserMedia requires HTTPS (or localhost). On any other http:// origin the browser silently blocks the prompt. Use `vite --host 0.0.0.0 --https` for LAN testing.",
+      "Safari: audioContext.sampleRate differs from Chrome/Firefox (defaults to 44100 or device rate). If you hardcode 48000 in any FFT math the visualizer shifts on Safari — always read `audioContext.sampleRate`.",
+      "Allocating Uint8Array inside the RAF loop causes GC pauses. Preallocate ONE array at attach time and reuse it every frame.",
+      "AnalyserNode.fftSize must be a power of 2 between 32 and 32768. Set it once at creation; changing it mid-stream is allowed but reallocates buffers internally and glitches the canvas.",
+      "RTCPeerConnection: you MUST call addTrack for each track BEFORE createOffer, otherwise the SDP has no m=audio section and the remote peer won't know you're sending audio.",
+      "iOS Safari: AudioContext is destroyed when the page goes to the background for >30s. Listen to visibilitychange and resume() on return, or the meters freeze permanently.",
+      "Echo cancellation: set `{ echoCancellation: true, noiseSuppression: true, autoGainControl: true }` in getUserMedia constraints — defaults vary by browser and you'll get feedback loops in P2P audio without these.",
+      "ICE servers: the peer stub uses Google's public STUN by default. For production you need TURN servers — without them, symmetric-NAT clients fail to connect ~20% of the time."
+    ],
+    "integrations": [
+      "Web Audio API (native) — AudioContext, AnalyserNode, GainNode",
+      "WebRTC (native) — RTCPeerConnection, MediaStream",
+      "MediaDevices.getUserMedia — microphone capture",
+      "Bring-your-own signalling transport (WebSocket / Ably / Pusher / socket.io)"
+    ]
+  }
+}

package/registry/families/remix-ts/files/package.json

@@ -8,22 +8,22 @@
   },
   "dependencies": {
     "@radix-ui/react-slot": "latest",
-    "@remix-run/node": "^2.0.0",
-    "@remix-run/react": "^2.0.0",
+    "@remix-run/node": "^2.15.0",
+    "@remix-run/react": "^2.15.0",
     "class-variance-authority": "latest",
     "clsx": "latest",
     "lucide-react": "latest",
-    "react": "^19.1.0",
-    "react-dom": "^19.1.0",
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
     "tailwind-merge": "latest"
   },
   "devDependencies": {
     "@tailwindcss/vite": "latest",
-    "@types/react": "latest",
-    "@types/react-dom": "latest",
+    "@types/react": "^19.2.0",
+    "@types/react-dom": "^19.2.0",
     "tailwindcss": "latest",
     "vite": "^6.4.2",
-    "@remix-run/dev": "^2.0.0"
+    "@remix-run/dev": "^2.15.0"
   },
   "overrides": {
     "vite": "^6.4.2"

package/registry/families/remix-ts/manifest.json

@@ -98,5 +98,35 @@
       "loader",
       "action"
     ]
+  },
+  "buildHints": {
+    "whenToUse": "Remix for full-stack React with nested routes, loader/action pattern, and progressive enhancement. Prefer when the product has deeply nested route trees or strong form-submission + server-mutation flows.",
+    "firstSteps": [
+      "Install: `pnpm install` then `pnpm dev`. Remix uses file-based routing under `app/routes/` \u2014 dot-delimited filenames map to URL segments.",
+      "Loaders (server-only) run before render, actions handle form submits. Do not import server-only libraries into components directly \u2014 put them in `.server.ts` files.",
+      "Color palette + brand strings in `app/personalize.css` + `app/personalize.json`."
+    ],
+    "gotchas": [
+      "Remix 2.x is the current line; React Router v7 is the next major. Check the remix-run docs version for guide alignment.",
+      "Loaders throw Response objects for redirects/errors, NOT raw throws \u2014 `throw redirect(...)` / `throw json(...)` are the patterns."
+    ],
+    "placeholders": [
+      {
+        "path": "app/routes/_index.tsx",
+        "description": "Landing page with placeholder hero. Rewrite for the product."
+      },
+      {
+        "path": "app/routes/dashboard.tsx",
+        "description": "Default dashboard route \u2014 generic KPI cards. Replace with the product's primary view."
+      },
+      {
+        "path": "app/root.tsx",
+        "description": "Root document shell + meta. Update `<Meta />` generation for SEO."
+      },
+      {
+        "path": "app/personalize.json",
+        "description": "Brand + copy strings. Edit but also rewrite the routes above."
+      }
+    ]
   }
 }

package/registry/families/risczero-zkvm/files/Cargo.toml

@@ -0,0 +1,23 @@
+[workspace]
+resolver = "2"
+members = ["host", "methods"]
+exclude = ["methods/guest"]  # guest is built by risc0-build, not as a workspace member
+
+[workspace.package]
+version = "0.1.0"
+edition = "2021"
+license = "MIT OR Apache-2.0"
+
+[workspace.dependencies]
+risc0-zkvm = "2.1"
+serde = { version = "1", features = ["derive"] }
+bincode = "1.3"
+
+[profile.release]
+lto = true
+codegen-units = 1
+
+# Release-mode optimizations that keep proof generation fast without
+# blowing up binary size.
+[profile.dev]
+opt-level = 0

package/registry/families/risczero-zkvm/files/README.md

@@ -0,0 +1,66 @@
+# RISC Zero zkVM starter
+
+General-purpose Rust zkVM. Prove arbitrary Rust programs; optionally
+delegate to the Bonsai proving network for fast cloud proofs.
+
+## Layout
+
+```
+Cargo.toml                 # workspace root, resolver="2", members = [host, methods]
+rust-toolchain.toml        # pinned stable
+host/
+  Cargo.toml               # std Rust — runs prover + verifier
+  src/main.rs              # entry point
+  src/prover.rs            # prove() / verify() wrappers
+methods/
+  Cargo.toml               # build-dep: risc0-build
+  build.rs                 # embeds compiled guest into methods crate
+  src/lib.rs               # auto-generated GUEST_ELF + GUEST_ID exports
+  guest/
+    Cargo.toml             # guest is NOT a workspace member
+    src/main.rs            # runs IN the zkVM — pure compute
+```
+
+## Run
+
+```bash
+# First install the risc0 toolchain (one-time).
+curl -L https://risczero.com/install | bash
+rzup install
+
+# Build + prove + verify locally (slow — minutes).
+cargo run --release
+
+# For fast cloud proofs, set Bonsai env vars:
+export BONSAI_API_URL=https://api.bonsai.xyz/
+export BONSAI_API_KEY=<your key>
+cargo run --release
+```
+
+## Replacing the example circuit
+
+1. Edit `methods/guest/src/main.rs` — change `Input`/`Output` and replace
+   the addition logic with what you want proven.
+2. Mirror the struct changes in `host/src/prover.rs` so the host can
+   serialize/deserialize inputs and outputs.
+3. Rebuild: `cargo run --release` — the risc0-build build.rs
+   auto-recompiles the guest when it changes.
+
+## On-chain verification
+
+For EVM: use RISC Zero's Groth16 verifier + wrap the STARK receipt.
+See [risc0-ethereum](https://github.com/risc0/risc0-ethereum) for the
+Solidity verifier + R0 Steel examples of reading Ethereum state inside
+a proof.
+
+## Gotchas
+
+- **Guest std is constrained** — no net, no fs, no SystemTime, limited
+  float. If your compute needs those, you're using the wrong zkVM (or
+  you need to pre-compute outside and pass results in via `env::read`).
+- **Proof sizes are hundreds of KB**. Never bundle into a JSON response.
+  Store the receipt in S3/IPFS, pass a reference.
+- **BONSAI_API_KEY is a prover credential**. Belongs in secret storage,
+  not source control.
+- **Image ID changes on every guest recompile**. Don't hardcode — always
+  use `methods::GUEST_ID` so verify stays in sync.

package/registry/families/risczero-zkvm/files/host/main.rs

@@ -0,0 +1,25 @@
+// RISC Zero host entry point. Invokes the guest, pulls the receipt, and
+// verifies it end-to-end. Run with `cargo run --release`.
+//
+// For local proving (default): uses your CPU. Slow — seconds-to-minutes
+// depending on cycle count.
+// For Bonsai cloud proving: set BONSAI_API_URL + BONSAI_API_KEY; the
+// default_prover() call auto-delegates.
+
+mod prover;
+
+use anyhow::Result;
+
+fn main() -> Result<()> {
+    let input = prover::Input { a: 3, b: 4 };
+    let (output, receipt_bytes) = prover::prove(input)?;
+    println!("Proved: {} + {} = {}, product = {}", 3, 4, output.sum, output.product);
+    println!("Receipt: {} bytes", receipt_bytes.len());
+
+    // Round-trip: deserialize and re-verify. In production, this is what
+    // your verifier service does on receipt submission.
+    let reverified = prover::verify(&receipt_bytes)?;
+    assert_eq!(output.sum, reverified.sum);
+    println!("Re-verified receipt ✓");
+    Ok(())
+}