refactor: adopt monorepo layout

.agent/CODING_TASTE.md

@@ -99,7 +99,7 @@ Argue from dstack's threat model, not from generic best practices.
 
 ## Code organization
 
-- **Workspace-managed dependencies.** Declare versions in the root `Cargo.toml`, reference
+- **Workspace-managed dependencies.** Declare versions in `dstack/Cargo.toml`, reference
   with `foo.workspace = true` (#161, #360).
 - **One source of truth.** Shared logic used by two components lives in one crate
   (`dstack-mr::sev` used by both KMS and verifier). Duplicated blocks get extracted —
@@ -208,7 +208,7 @@ not just the symptom:
   an `X-App-Version` response header. Follow this skeleton exactly when adding a service.
 - **Module layout**: the core RPC surface lives in `main_service.rs` (or `rpc_service.rs`
   in guest-agent). When a module grows subordinate concerns, promote it to `foo.rs` + a
-  `foo/` directory of submodules (`gateway/src/proxy.rs` + `proxy/{sni,tls_terminate,...}`).
+  `foo/` directory of submodules (`dstack/gateway/src/proxy.rs` + `proxy/{sni,tls_terminate,...}`).
   Core files routinely run 800–1500+ lines before splitting — don't over-fragment into
   many small files.
 - **Config conventions**: each service embeds its default TOML (`include_str!`), extracts
@@ -298,7 +298,7 @@ not just the symptom:
   when async is unavoidable.
 - **Golden vectors over mocks**: real captured binary fixtures embedded with
   `include_bytes!("../samples/...")`, asserted against inline hex literals or `insta`
-  snapshots (`cc-eventlog`, `dstack-attest/tests/`). Fixture provenance gets its own
+  snapshots (`dstack/cc-eventlog`, `dstack/dstack-attest/tests/`). Fixture provenance gets its own
   README (`sev_snp_fixture.README.md`). When changing an encoding, add a regression test
   proving old and new outputs match (#603).
 - **Test names are snake_case behavior statements**: `enforces_ttl`,

.claude/agents/sdk-sync-checker.md

@@ -11,7 +11,7 @@ You validate SDK implementations against protobuf schemas to ensure synchronizat
 ## Process
 
 ### 1. Discovery
-- Find all `.proto` files in `guest-agent/rpc/proto/`
+- Find all `.proto` files in `dstack/guest-agent/rpc/proto/`
 - Identify SDK implementations in `sdk/` (python, go, rust, js, curl docs)
 - Extract services, RPCs, and message types from proto files
 
@@ -66,7 +66,7 @@ Details:
 - cURL docs: `snake_case` (JSON wire format)
 
 ## Locations
-- Protos: `guest-agent/rpc/proto/*.proto`
+- Protos: `dstack/guest-agent/rpc/proto/*.proto`
 - Python: `sdk/python/src/dstack_sdk/dstack_client.py`
 - Go: `sdk/go/dstack/client.go`
 - Rust: `sdk/rust/types/src/dstack.rs`

.cursorrules

@@ -1 +1 @@
-Don't capitalize the first letter for log messages and error messages.
+Don't capitalize the first letter for log messages and error messages.

.github/scripts/cargo-publish-idempotent.sh

@@ -11,7 +11,7 @@ set -euo pipefail
 
 crate=${1:?missing crate name}
 
-if output=$(cargo publish -p "$crate" 2>&1); then
+if output=$(cargo publish --manifest-path dstack/Cargo.toml -p "$crate" 2>&1); then
     echo "$output"
     exit 0
 fi

.github/workflows/docker-build-check.yml

@@ -26,21 +26,21 @@ jobs:
       - name: Build Gateway Docker image
         uses: docker/build-push-action@v5
         with:
-          context: gateway/dstack-app/builder
+          context: dstack/gateway/dstack-app/builder
           push: false
           load: true
           tags: dstack-gateway-check:latest
           provenance: false
           build-contexts: |
-            build-shared=build/shared
+            build-shared=dstack/build/shared
           build-args: |
             DSTACK_REV=${{ env.DSTACK_REV }}
             DSTACK_SRC_URL=${{ env.DSTACK_SRC_URL }}
 
       - name: Verify pinned packages
         run: |
-          build/shared/verify-pinned-packages.sh dstack-gateway-check:latest \
-            gateway/dstack-app/builder/shared/pinned-packages.txt
+          dstack/build/shared/verify-pinned-packages.sh dstack-gateway-check:latest \
+            dstack/gateway/dstack-app/builder/shared/pinned-packages.txt
 
       - name: Build gateway-builder target
         run: |
@@ -49,44 +49,49 @@ jobs:
             --target gateway-builder \
             --tag gateway-builder-check:latest \
             --provenance=false \
-            --build-context build-shared=build/shared \
+            --build-context build-shared=dstack/build/shared \
             --build-arg "DSTACK_REV=${DSTACK_REV}" \
             --build-arg "DSTACK_SRC_URL=${DSTACK_SRC_URL}" \
-            gateway/dstack-app/builder
+            dstack/gateway/dstack-app/builder
 
       - name: Verify builder pinned packages
         run: |
-          build/shared/verify-pinned-packages.sh gateway-builder-check:latest \
-            gateway/dstack-app/builder/shared/builder-pinned-packages.txt
+          dstack/build/shared/verify-pinned-packages.sh gateway-builder-check:latest \
+            dstack/gateway/dstack-app/builder/shared/builder-pinned-packages.txt
 
   kms:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-        with:
-          submodules: recursive
+
+      - name: Checkout KMS contract dependencies
+        run: |
+          git submodule update --init --recursive --depth 1 -- \
+            dstack/kms/auth-eth/lib/forge-std \
+            dstack/kms/auth-eth/lib/openzeppelin-contracts-upgradeable \
+            dstack/kms/auth-eth/lib/openzeppelin-foundry-upgrades
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
       - name: Build KMS Docker image
         uses: docker/build-push-action@v5
         with:
-          context: kms/dstack-app/builder
+          context: dstack/kms/dstack-app/builder
           push: false
           load: true
           tags: dstack-kms-check:latest
           provenance: false
           build-contexts: |
-            build-shared=build/shared
+            build-shared=dstack/build/shared
           build-args: |
             DSTACK_REV=${{ env.DSTACK_REV }}
             DSTACK_SRC_URL=${{ env.DSTACK_SRC_URL }}
 
       - name: Verify pinned packages (qemu stage)
         run: |
-          build/shared/verify-pinned-packages.sh dstack-kms-check:latest \
-            kms/dstack-app/builder/shared/qemu-pinned-packages.txt
+          dstack/build/shared/verify-pinned-packages.sh dstack-kms-check:latest \
+            dstack/kms/dstack-app/builder/shared/qemu-pinned-packages.txt
 
       - name: Build kms-builder target
         run: |
@@ -95,22 +100,22 @@ jobs:
             --target kms-builder \
             --tag kms-builder-check:latest \
             --provenance=false \
-            --build-context build-shared=build/shared \
+            --build-context build-shared=dstack/build/shared \
             --build-arg "DSTACK_REV=${DSTACK_REV}" \
             --build-arg "DSTACK_SRC_URL=${DSTACK_SRC_URL}" \
-            kms/dstack-app/builder
+            dstack/kms/dstack-app/builder
 
       - name: Verify builder pinned packages
         run: |
-          build/shared/verify-pinned-packages.sh kms-builder-check:latest \
-            kms/dstack-app/builder/shared/builder-pinned-packages.txt
+          dstack/build/shared/verify-pinned-packages.sh kms-builder-check:latest \
+            dstack/kms/dstack-app/builder/shared/builder-pinned-packages.txt
 
       - name: Install Foundry
         uses: foundry-rs/foundry-toolchain@v1
 
       - name: Build KMS contracts
         run: |
-          cd kms/auth-eth
+          cd dstack/kms/auth-eth
           forge build
 
   verifier:
@@ -124,22 +129,22 @@ jobs:
       - name: Build Verifier Docker image
         uses: docker/build-push-action@v5
         with:
-          context: verifier
-          file: verifier/builder/Dockerfile
+          context: dstack/verifier
+          file: dstack/verifier/builder/Dockerfile
           push: false
           load: true
           tags: dstack-verifier-check:latest
           provenance: false
           build-contexts: |
-            build-shared=build/shared
+            build-shared=dstack/build/shared
           build-args: |
             DSTACK_REV=${{ env.DSTACK_REV }}
             DSTACK_SRC_URL=${{ env.DSTACK_SRC_URL }}
 
       - name: Verify pinned packages (runtime)
         run: |
-          build/shared/verify-pinned-packages.sh dstack-verifier-check:latest \
-            verifier/builder/shared/pinned-packages.txt
+          dstack/build/shared/verify-pinned-packages.sh dstack-verifier-check:latest \
+            dstack/verifier/builder/shared/pinned-packages.txt
 
       - name: Build verifier-builder target
         run: |
@@ -148,16 +153,16 @@ jobs:
             --target verifier-builder \
             --tag verifier-builder-check:latest \
             --provenance=false \
-            --file verifier/builder/Dockerfile \
-            --build-context build-shared=build/shared \
+            --file dstack/verifier/builder/Dockerfile \
+            --build-context build-shared=dstack/build/shared \
             --build-arg "DSTACK_REV=${DSTACK_REV}" \
             --build-arg "DSTACK_SRC_URL=${DSTACK_SRC_URL}" \
-            verifier
+            dstack/verifier
 
       - name: Verify builder pinned packages
         run: |
-          build/shared/verify-pinned-packages.sh verifier-builder-check:latest \
-            verifier/builder/shared/builder-pinned-packages.txt
+          dstack/build/shared/verify-pinned-packages.sh verifier-builder-check:latest \
+            dstack/verifier/builder/shared/builder-pinned-packages.txt
 
       - name: Build acpi-builder target
         run: |
@@ -166,13 +171,13 @@ jobs:
             --target acpi-builder \
             --tag verifier-acpi-check:latest \
             --provenance=false \
-            --file verifier/builder/Dockerfile \
-            --build-context build-shared=build/shared \
+            --file dstack/verifier/builder/Dockerfile \
+            --build-context build-shared=dstack/build/shared \
             --build-arg "DSTACK_REV=${DSTACK_REV}" \
             --build-arg "DSTACK_SRC_URL=${DSTACK_SRC_URL}" \
-            verifier
+            dstack/verifier
 
       - name: Verify qemu pinned packages
         run: |
-          build/shared/verify-pinned-packages.sh verifier-acpi-check:latest \
-            verifier/builder/shared/qemu-pinned-packages.txt
+          dstack/build/shared/verify-pinned-packages.sh verifier-acpi-check:latest \
+            dstack/verifier/builder/shared/qemu-pinned-packages.txt

.github/workflows/foundry-test.yml

@@ -7,11 +7,11 @@ name: KMS Auth-ETH Foundry Tests
 on:
   push:
     paths:
-      - 'kms/auth-eth/**'
+      - 'dstack/kms/auth-eth/**'
       - '.github/workflows/foundry-test.yml'
   pull_request:
     paths:
-      - 'kms/auth-eth/**'
+      - 'dstack/kms/auth-eth/**'
       - '.github/workflows/foundry-test.yml'
   workflow_dispatch:
 
@@ -27,11 +27,17 @@ jobs:
     runs-on: ubuntu-latest
     defaults:
       run:
-        working-directory: kms/auth-eth
+        working-directory: dstack/kms/auth-eth
     steps:
       - uses: actions/checkout@v5
-        with:
-          submodules: recursive
+
+      - name: Checkout contract dependencies
+        working-directory: .
+        run: |
+          git submodule update --init --recursive --depth 1 -- \
+            dstack/kms/auth-eth/lib/forge-std \
+            dstack/kms/auth-eth/lib/openzeppelin-contracts-upgradeable \
+            dstack/kms/auth-eth/lib/openzeppelin-foundry-upgrades
 
       - name: Install Foundry
         uses: foundry-rs/foundry-toolchain@v1

.github/workflows/gateway-release.yml

@@ -49,13 +49,13 @@ jobs:
         env:
           SOURCE_DATE_EPOCH: ${{ env.TIMESTAMP }}
         with:
-          context: gateway/dstack-app/builder
+          context: dstack/gateway/dstack-app/builder
           push: true
           tags: ${{ vars.DOCKERHUB_ORG }}/dstack-gateway:${{ env.VERSION }}
           platforms: linux/amd64
           provenance: false
           build-contexts: |
-            build-shared=build/shared
+            build-shared=dstack/build/shared
           build-args: |
             DSTACK_REV=${{ env.GIT_REV }}
             SOURCE_DATE_EPOCH=${{ env.TIMESTAMP }}

.github/workflows/guest-os.yml

@@ -0,0 +1,95 @@
+# SPDX-FileCopyrightText: © 2026 Phala Network <dstack@phala.network>
+#
+# SPDX-License-Identifier: Apache-2.0
+
+name: Build Guest Images
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Tag to create and release (e.g. guest-os-v0.6.0). Leave empty to build only.'
+        required: false
+        default: ''
+        type: string
+
+jobs:
+  build:
+    runs-on: yocto-builder
+    timeout-minutes: 480
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Build production guest OS
+        run: make os-image
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: guest-images
+          path: |
+            os/yocto/repro-build/dist/*.tar.gz
+            os/yocto/repro-build/dist/reproduce.sh
+          retention-days: 30
+
+  release:
+    if: inputs.tag != '' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
+    needs: build
+    runs-on: yocto-builder
+    timeout-minutes: 60
+    environment: release
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout default branch
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event.repository.default_branch }}
+
+      - name: Download artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: guest-images
+          path: os/yocto/repro-build/dist
+
+      - name: Validate release tag
+        env:
+          TAG: ${{ inputs.tag }}
+        run: |
+          echo "$TAG" | grep -Eq '^guest-os-v[0-9]+\.[0-9]+\.[0-9]+([-.][0-9A-Za-z.-]+)?$'
+          VERSION="${TAG#guest-os-v}"
+          python3 - "$VERSION" <<'PY'
+          import re
+          import sys
+
+          match = re.match(r"^(\d+)\.(\d+)\.(\d+)", sys.argv[1])
+          if not match or tuple(map(int, match.groups())) < (0, 6, 0):
+              raise SystemExit("guest OS versions below 0.6.0 belong in Dstack-TEE/meta-dstack")
+          PY
+          BARE="os/yocto/repro-build/dist/dstack-${VERSION}.tar.gz"
+          UKI="os/yocto/repro-build/dist/dstack-${VERSION}-uki.tar.gz"
+          test -f "$BARE"
+          test -f "$UKI"
+
+          read -r IMAGE_VERSION IMAGE_REVISION < <(
+            tar -xOf "$BARE" "dstack-${VERSION}/metadata.json" |
+              python3 -c 'import json, sys; data=json.load(sys.stdin); print(data["version"], data["git_revision"])'
+          )
+          test "$IMAGE_VERSION" = "$VERSION"
+          test "$IMAGE_REVISION" = "$(git rev-parse HEAD)"
+          tar -tzf "$UKI" | grep -Fx "dstack-${VERSION}/disk.raw"
+
+      - name: Create tag and release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TAG: ${{ inputs.tag }}
+        run: |
+          git tag "$TAG"
+          git push origin "$TAG"
+          gh release create "$TAG" \
+            os/yocto/repro-build/dist/*.tar.gz \
+            os/yocto/repro-build/dist/reproduce.sh \
+            --title "$TAG" --generate-notes