fix(build): update gateway package references

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

Author: drew

CONTRIBUTING.md

@@ -445,7 +445,7 @@ The following Bazel commands are available alongside the mise tasks above. Cargo
 | Build everything | `bazel build //...` | All crates and protos |
 | Run all tests | `bazel test //...` | Unit tests only, no E2E |
 | Build the CLI | `bazel build //crates/openshell-cli:openshell` | |
-| Build the gateway | `bazel build //crates/openshell-server:openshell-gateway` | |
+| Build the gateway | `bazel build //crates/openshell-gateway:openshell-gateway-bin` | |
 | Build the supervisor | `bazel build //crates/openshell-sandbox:openshell-sandbox-bin` | |
 | Clean | `bazel clean` | |
 

MODULE.bazel.lock

@@ -260,7 +260,7 @@ OpenShell collects anonymous telemetry to help improve the project for developer
 
 Disable telemetry at runtime by setting `OPENSHELL_TELEMETRY_ENABLED=false` on the gateway deployment. For Helm installs, set `server.telemetryEnabled=false`. OpenShell propagates this deployment setting into sandbox supervisor environments so sandbox-side telemetry collection is disabled as well.
 
-You can also compile telemetry out entirely. Telemetry support is a default-on `telemetry` Cargo feature; building with `--no-default-features` produces binaries that contain no telemetry endpoint, no telemetry HTTP client, and no emission code. Build telemetry-free artifacts with, for example, `cargo build --release -p openshell-server --no-default-features` (gateway) and the equivalent for `openshell-sandbox` and `openshell-driver-vm`. With telemetry compiled out, the gateway emits nothing and reports telemetry disabled to the sandboxes it launches.
+You can also compile telemetry out entirely. Telemetry support is a default-on `telemetry` Cargo feature; building with `--no-default-features` produces binaries that contain no telemetry endpoint, no telemetry HTTP client, and no emission code. Build a telemetry-free gateway with `cargo build --release -p openshell-gateway --no-default-features --features in-tree-compute-drivers`, and use the equivalent feature selection for `openshell-sandbox` and `openshell-driver-vm`. With telemetry compiled out, the gateway emits nothing and reports telemetry disabled to the sandboxes it launches.
 
 Telemetry events are limited to anonymous operational categories and counts, such as sandbox lifecycle outcomes, provider profile buckets, policy decision counts, and aggregate network activity denial categories. OpenShell telemetry does not collect sandbox names or IDs, hostnames, file paths, binary paths, prompts, credentials, provider names, model names, or user content.
 

README.md

@@ -26,7 +26,7 @@ Sandbox community images are built outside this repository.
 Anonymous telemetry emission is gated behind a default-on `telemetry` Cargo
 feature. It is defined in `openshell-core` (where the emission code, HTTP
 client, and endpoint live) and forwarded by the binary crates that emit or
-collect telemetry: `openshell-server` (gateway), `openshell-sandbox`
+collect telemetry: `openshell-gateway`, `openshell-sandbox`
 (supervisor), and `openshell-driver-vm`. Every crate depends on
 `openshell-core` with `default-features = false`, so the binary crate's feature
 is the single switch that enables `openshell-core/telemetry` for its build

architecture/build.md

@@ -59,15 +59,15 @@ platform_transition_binary(
 platform_transition_binary(
     name = "openshell_gateway_linux_x86_64",
     basename = "openshell-gateway",
-    binary = "//crates/openshell-server:openshell-gateway",
+    binary = "//crates/openshell-gateway:openshell-gateway-bin",
     tags = ["manual"],
     target_platform = ":linux_x86_64_gnu_2_28",
 )
 
 platform_transition_binary(
     name = "openshell_gateway_linux_aarch64",
     basename = "openshell-gateway",
-    binary = "//crates/openshell-server:openshell-gateway",
+    binary = "//crates/openshell-gateway:openshell-gateway-bin",
     tags = ["manual"],
     target_platform = ":linux_aarch64_gnu_2_28",
 )
@@ -91,7 +91,7 @@ platform_transition_binary(
 platform_transition_binary(
     name = "openshell_gateway_macos_aarch64",
     basename = "openshell-gateway",
-    binary = "//crates/openshell-server:openshell-gateway",
+    binary = "//crates/openshell-gateway:openshell-gateway-bin",
     tags = ["manual"],
     target_platform = "@rules_rs//rs/platforms:aarch64-apple-darwin",
 )

bazel/releases/BUILD.bazel

@@ -12,7 +12,10 @@ rust_library(
         "//proto:openshell_proto_descriptor_set",
         "//proto:openshell_rust_proto_src",
     ],
-    crate_features = ["telemetry"],
+    crate_features = [
+        "driver-extraction",
+        "telemetry",
+    ],
     rustc_env = {
         "OPENSHELL_DESCRIPTOR_PATH": "$(execpath //proto:openshell_proto_descriptor_set)",
         "OPENSHELL_PROTO_PATH": "$(execpath //proto:openshell_rust_proto_src)",
@@ -30,7 +33,10 @@ rust_library(
 rust_test(
     name = "openshell-core_test",
     crate = ":openshell-core",
-    crate_features = ["telemetry"],
+    crate_features = [
+        "driver-extraction",
+        "telemetry",
+    ],
     rustc_flags = ["--cfg=bazel"],
     deps = all_crate_deps(normal_dev = True),
 )

crates/openshell-core/BUILD.bazel

@@ -65,7 +65,7 @@ impl RegisteredSetting {
 ///
 /// 1. Add a [`RegisteredSetting`] entry to this array with the key name and
 ///    [`SettingValueKind`].
-/// 2. Recompile `openshell-server` (gateway) and `openshell-sandbox`
+/// 2. Recompile `openshell-gateway` and `openshell-sandbox`
 ///    (supervisor). No database migration is needed -- new keys are stored in
 ///    the existing settings JSON blob.
 /// 3. Add sandbox-side consumption in `openshell-sandbox` to read and act on

crates/openshell-core/src/settings.rs

@@ -9,7 +9,7 @@ Standalone libkrun-backed [`ComputeDriver`](../../proto/compute_driver.proto) fo
 ```mermaid
 flowchart LR
     subgraph host["Host process"]
-        gateway["openshell-server<br/>(compute::vm::spawn)"]
+        gateway["openshell-gateway<br/>(vm::spawn)"]
         driver["openshell-driver-vm<br/>├── libkrun (VM)<br/>├── gvproxy (net)<br/>└── openshell-sandbox.zst"]
         gateway <-->|"gRPC over UDS<br/>compute-driver.sock"| driver
     end
@@ -98,7 +98,7 @@ mise run vm:supervisor          # if openshell-sandbox.zst is not already presen
 
 # 2. Build both binaries with the staged artifacts embedded
 OPENSHELL_VM_RUNTIME_COMPRESSED_DIR=$PWD/target/vm-runtime-compressed \
-  cargo build -p openshell-server -p openshell-driver-vm
+  cargo build -p openshell-gateway -p openshell-driver-vm
 
 # 3. macOS only: codesign the driver for Hypervisor.framework
 codesign \
@@ -283,5 +283,5 @@ the user explicitly overrides it.
 
 ## TODOs
 
-- The gateway still configures the driver via CLI args; this will move to a gRPC bootstrap call so the driver interface is uniform across backends. See the `TODO(driver-abstraction)` notes in `crates/openshell-server/src/lib.rs` and `crates/openshell-server/src/compute/vm.rs`.
+- The gateway still configures the driver via CLI args; this will move to a gRPC bootstrap call so the driver interface is uniform across backends. See the `TODO(driver-abstraction)` note in `crates/openshell-gateway/src/vm.rs`.
 - macOS local builds are codesigned by `tasks/scripts/gateway-vm.sh`; the generated Homebrew formula signs the release tarball driver for local installs.

crates/openshell-driver-vm/README.md

@@ -41,7 +41,7 @@ mise run vm:supervisor
 
 # Build the gateway and VM driver with embedded runtime artifacts
 OPENSHELL_VM_RUNTIME_COMPRESSED_DIR=$PWD/target/vm-runtime-compressed \
-  cargo build -p openshell-server -p openshell-driver-vm
+  cargo build -p openshell-gateway -p openshell-driver-vm
 ```
 
 Use `FROM_SOURCE=1 mise run vm:setup` to build the runtime from source instead

crates/openshell-driver-vm/runtime/README.md

@@ -0,0 +1,64 @@
+load("@crates//:defs.bzl", "aliases", "all_crate_deps")
+load("@rules_rs//rs:rust_binary.bzl", "rust_binary")
+load("@rules_rs//rs:rust_library.bzl", "rust_library")
+load("@rules_rs//rs:rust_test.bzl", "rust_test")
+load("@rules_rust//rust:defs.bzl", "rustfmt_test")
+load("@workspace_version//:version.bzl", "WORKSPACE_VERSION")
+
+rust_library(
+    name = "openshell-gateway",
+    srcs = glob(
+        ["src/**/*.rs"],
+        exclude = ["src/main.rs"],
+    ),
+    aliases = aliases(),
+    crate_features = [
+        "in-tree-compute-drivers",
+        "telemetry",
+    ],
+    version = WORKSPACE_VERSION,
+    visibility = ["//visibility:public"],
+    deps = all_crate_deps(normal = True),
+)
+
+rust_binary(
+    name = "openshell-gateway-bin",
+    srcs = ["src/main.rs"],
+    aliases = aliases(),
+    binary_name = "openshell-gateway",
+    version = WORKSPACE_VERSION,
+    visibility = ["//visibility:public"],
+    deps = all_crate_deps(normal = True) + [":openshell-gateway"],
+)
+
+rust_test(
+    name = "openshell-gateway_lib_test",
+    crate = ":openshell-gateway",
+    crate_features = [
+        "in-tree-compute-drivers",
+        "telemetry",
+    ],
+    deps = all_crate_deps(normal_dev = True),
+)
+
+rust_test(
+    name = "openshell-gateway_bin_test",
+    srcs = ["src/main.rs"],
+    aliases = aliases(),
+    version = WORKSPACE_VERSION,
+    deps = all_crate_deps(
+        normal = True,
+        normal_dev = True,
+    ) + [":openshell-gateway"],
+)
+
+rustfmt_test(
+    name = "rustfmt_test",
+    targets = [
+        ":openshell-gateway",
+        ":openshell-gateway-bin",
+        ":openshell-gateway_bin_test",
+        ":openshell-gateway_lib_test",
+    ],
+    visibility = ["//crates:__pkg__"],
+)