chore: remove dead plugin-era code and stale WASM-plugin references (#177)

Author: markovejnovic

.github/workflows/release.yml

@@ -57,7 +57,7 @@ jobs:
           sed -i "s|hm-render          = { path = \"crates/hm-render\",          version = \"0.0.0-dev\" }|hm-render          = { path = \"crates/hm-render\",          version = \"$VERSION\" }|" Cargo.toml
           sed -i "s|hm-vm              = { path = \"crates/hm-vm\",              version = \"0.0.0-dev\" }|hm-vm              = { path = \"crates/hm-vm\",              version = \"$VERSION\" }|" Cargo.toml
 
-          cargo check --workspace --exclude hm-fixtures
+          cargo check --workspace
 
       - name: Publishability guard (dry-run package the whole graph)
         # Fail fast before any real `cargo publish` if the dependency graph
@@ -68,7 +68,7 @@ jobs:
         # would fail), so it catches exactly the publish=false / unpublished-dep
         # class of regression. `--no-verify` skips the per-crate rebuild;
         # `cargo check --workspace` above already proved it compiles.
-        run: cargo package --workspace --exclude hm-fixtures --allow-dirty --no-verify
+        run: cargo package --workspace --allow-dirty --no-verify
 
       - name: Publish hm-util
         run: |

CLAUDE.md

@@ -6,7 +6,6 @@ The `cli/` directory is a Cargo workspace.
 - `crates/hm-pipeline-ir/` — pipeline IR schema (serde structs only, no runtime).
 - `crates/hm-common/` — shared utilities (OS/filesystem, formatting, and other cross-crate helpers). This is the source of truth for common code; prefer adding shared helpers here.
 - `crates/hm-plugin-protocol/` — wire types (serde structs only).
-- `crates/hm-plugin-sdk/` — authoring SDK for plugin writers.
 Run `cargo build` from the workspace root.
 
 For cross-cutting doctrine see [PRINCIPLES.md](../PRINCIPLES.md).

CONTRIBUTING.md

@@ -181,7 +181,7 @@ cargo insta review
 | `crates/hm-pipeline-ir` | The pipeline IR wire-format schema. |
 | `crates/hm-config` | Layered configuration and credential storage. |
 | `crates/hm-plugin-cloud` | Cloud client library. |
-| `crates/hm-plugin-protocol` | Wire types shared between `hm` and plugins. |
+| `crates/hm-plugin-protocol` | Wire types shared between `hm` crate internals. |
 | `crates/hm-util` | Shared OS and filesystem utilities. |
 
 A useful mental model: the DSL engine evaluates your `.hm/*.py` pipeline

Cargo.lock

@@ -51,7 +51,7 @@ hm-util → hm-pipeline-ir → hm-config → hm-plugin-protocol → hm-render
 
 `harmont-cli` (the `hm` binary) depends on every other crate, so they
 must all reach crates.io first — including `hm-vm`, which carries the
-local Docker backend. `hm-fixtures` is test-only and not published.
+local Docker backend.
 
 ### Prerequisites (one-time)
 

RELEASING.md

@@ -1,8 +1,8 @@
 //! File-backed credential store at `~/.config/hm/credentials.toml`.
 //!
-//! Replaces the OS keyring as the sole backend. The file is written with
-//! mode 0o600 (parent dir 0o700) via [`hm_util::os::fs::blocking::write_atomic_restricted`].
-//! Keyed by `(service, account)` to match the host-fn ABI plugins use.
+//! The file is written with mode 0o600 (parent dir 0o700) via
+//! [`hm_util::os::fs::blocking::write_atomic_restricted`], keyed by
+//! `(service, account)`.
 
 use anyhow::{Context, Result};
 use serde::{Deserialize, Serialize};
@@ -50,8 +50,7 @@ pub fn get(service: &str, account: &str) -> Option<String> {
     load().entries.get(service)?.get(account).cloned()
 }
 
-/// Write a credential. Silently no-ops on I/O failure so plugin callers
-/// match the prior keyring-backed best-effort semantics.
+/// Write a credential. Silently no-ops on I/O failure (best-effort).
 pub fn set(service: &str, account: &str, secret: &str) {
     let mut f = load();
     f.entries

crates/hm-config/src/creds.rs

@@ -2,10 +2,10 @@
 //!
 //! On build start the orchestrator tar.gzs the user's working
 //! directory once (via [`crate::local::build_archive_bytes`])
-//! and registers the bytes under an opaque `ArchiveId`. Step-executor
-//! plugins receive that ID in their `ExecutorInput` and pull bytes
-//! via `hm_archive_read`. The host caches archives in memory keyed
-//! by ID for the duration of a single `local::run` invocation.
+//! and registers the bytes under an opaque `ArchiveId`. Runners receive
+//! that ID in their `ExecutorInput` and read the bytes back from this
+//! store. Archives are cached in memory keyed by ID for the duration of
+//! a single `local::run` invocation.
 
 use std::collections::HashMap;
 use std::sync::Mutex;

crates/hm-exec/src/local/archive.rs

@@ -1,9 +1,7 @@
 //! Build-event broadcast channel.
 //!
-//! Subscribers (output formatter plugin, lifecycle hook plugins,
-//! the human-readable progress sink) all subscribe to the same
-//! channel; the host's `emit_event` / `emit_step_log` host fns
-//! publish into it.
+//! Subscribers (the output renderers and progress sink) subscribe to the
+//! same channel; runners and the scheduler publish [`BuildEvent`]s into it.
 
 // `new()` returning `Arc<Self>` is intentional (the bus is always
 // shared); `subscribe()` returns a tokio receiver that callers must
@@ -39,7 +37,7 @@ impl EventBus {
     /// received it. A return of 0 is normal (no subscribers yet).
     pub fn emit(&self, event: BuildEvent) {
         // We intentionally drop the error: zero-subscriber sends are
-        // not interesting and we don't want host_fn impls to fail
+        // not interesting and we don't want publishers to fail
         // because nobody is listening.
         let _ = self.tx.send(event);
     }

crates/hm-exec/src/local/events.rs

@@ -1,8 +1,7 @@
 //! Static runner interface.
 //!
-//! This module replaces the old WASM plugin system with a static DI
-//! approach. Step executors implement [`StepRunner`]. A [`RunnerRegistry`]
-//! maps runner names to concrete implementations at startup.
+//! Step executors implement [`StepRunner`]; a [`RunnerRegistry`] maps
+//! runner names to concrete implementations at startup.
 
 use std::collections::HashMap;
 use std::fmt;
@@ -21,9 +20,7 @@ pub mod vm;
 
 /// Shared context threaded into every runner invocation.
 ///
-/// Replaces the monolithic `OrchestratorState` that the old plugin
-/// system passed as opaque host memory. All fields are cheaply
-/// cloneable (`Arc` / `CancellationToken`).
+/// All fields are cheaply cloneable (`Arc` / `CancellationToken`).
 #[derive(Clone, Debug)]
 pub struct StepContext {
     pub event_bus: Arc<EventBus>,

crates/hm-exec/src/local/runner/mod.rs

@@ -36,11 +36,11 @@ pub struct CommandStep {
     /// Cache configuration for this step's committed snapshot.
     #[serde(default)]
     pub cache: Option<Cache>,
-    /// Step-executor plugin name. `None` falls back to the default
+    /// Step-executor (runner) name. `None` falls back to the default
     /// runner (Docker in the shipped configuration).
     #[serde(default, skip_serializing_if = "Option::is_none")]
     pub runner: Option<String>,
-    /// Plugin-specific extra fields passed verbatim to the runner.
+    /// Runner-specific extra fields passed verbatim to the runner.
     #[serde(default, skip_serializing_if = "Option::is_none")]
     pub runner_args: Option<serde_json::Value>,
 }