[ael-dev3]

Allthing now owns its repository tooling in Rust. Native xtask commands replace Node and shell implementations of build orchestration, Brotli compression, repository/CSP validation, asset-credit auditing, deployment waiting, npm audit handling, browser fixture phases and attestation-key tooling. The isolated SpacetimeDB checks also use Rust; deployment entry points remain thin wrappers.

Keep the official Playwright tests, independent crypto/SQL/SDK oracles and required SpacetimeDB TypeScript adapter. The Rust-first policy records the following exceptions: retain the faster JavaScript first-card renderer after its Rust prototype added about 1.1 seconds on the slow-phone profile, and retain the existing small Node static test server after the proposed replacement encountered an unproven pre-mount stall in CI. The failed first run remains rejected. Static startup failures now attach bounded, sanitized transport diagnostics; assertions and timing limits are unchanged.

Validation:

• Formatting, native/Wasm Clippy, 664 Rust tests and dependency licenses pass.
• SpacetimeDB: formatting, native/Wasm Clippy, 4 tests, release Wasm build and licenses pass.
• All 10 retained Node oracles pass on Node 22; npm audit reports zero vulnerabilities.
• Workers and Pages builds pass. Local early-render/SDK checks: 22 pass. Restored static transport: 10 cold desktop/phone first attempts pass with retries disabled.
• Required CI triggers, retry rejection, timing budgets and deployment behavior remain intact. No attestation key, database behavior or application UI changed.