PROTOCOL · DSL · RUNTIME

One manifest.
Every environment.

Exchange typed configuration, procedural policy and URI Processes between browsers, services, Raspberry Pi devices, queues and digital twins—in the format each side prefers.

Try conversion Explore the repository

JSONYAMLHCLtyped@1proto3policy-sh

envelope.wm.yaml

spec: wellmanifest.protocol/v1
kind: command
operation: youtube://channel/video/query/list
contract_ref: contract:frontend-demo
runtime:
  environment: frontend
  execution: remote
content_type: yaml
accept: [json, proto3]
payload:
  channel: ours

validate→authorize→convert→receipt

7dialect frontends

4transport families

3diagnostic severities

0implicit authority grants

ARCHITECTURE

Different syntax. Common meaning.

Each dialect has its own parser. Documents normalize into a canonical data/IR model, pass schema and policy checks, then travel inside one envelope.

Author

JSON / YAML / TOML HCL-compatible Strongly typed DSL Policy DSL proto3

CANONICALWellManifestEnvelope + IR

Run

Browser / WASM Backend / gRPC MQTT / IoT Raspberry Pi Digital twins

HTTPWebSocketMQTT v5protobuf / gRPCCQRS / Events

POLYGLOT RUNTIMES

Local when capable. Remote when constrained.

A runtime declaration selects a compatible implementation; it never uploads arbitrary code or expands Contract AQL authority.

◫

Frontend

Dependency-free JavaScript SDK, WebSocket streams and a WASM build path.

runtime:browser-wasm@1

⌘

Backend

Python reference service, Rust core, HTTP/gRPC APIs and append-only events.

runtime:backend-python@1

⌁

Firmware

Thin HTTP/MQTT clients delegate parsing and execution to an edge gateway.

runtime:firmware-thin@1

◇

Digital twin

Read-only portraits, situation metrics and authority-first actor routing.

runtime:digital-twin@1

LIVE PLAYGROUND

Convert through the running gateway.

The page calls /v1/convert. Start the runtime locally or with Compose to use it.

InputDialect

OutputDialect

Select Convert to contact the runtime.

INFO Ready.

FAIL-CLOSED BY DESIGN

Wildcards grant scope.
Only concrete URIs execute.

youtube://* may appear in a Contract AQL permission. The process router accepts only a concrete address such as youtube://channel/video/query/list, a valid contract and a registered adapter.

1Parse without shell evaluation
2Validate type and schema
3Authorize server-side contract
4Execute registered adapter only
5Record idempotent receipt/event

ECOSYSTEM

One protocol across the stack.

Use	Package / service	Preferred runtime	Transport	Status
Browser configuration	`@wellmanifest/sdk`	JS / WASM	HTTP · WS	working
Backend orchestration	`wellmanifest-server`	Python / Rust	HTTP · gRPC	working MVP
IoT / firmware	thin client + bridge	remote edge	MQTT · protobuf	source
Digital twins	situation + router	read-only server	events · URI	working demo
Native bindings	Rust / PyO3 / N-API	local native	FFI	scaffold

START WITH A SIDECAR

Give every language one manifest gateway.

docker compose up --build runtime
curl http://localhost:8080/v1/capabilities

One manifest.Every environment.