refactor: move programs into programs and UIs into apps

This refactors the repository structure as it has grown over time.

programs/token/methods/Cargo.toml

@@ -0,0 +1,17 @@
+[package]
+name = "token-methods"
+version = "0.1.0"
+edition = "2021"
+
+[lints]
+workspace = true
+
+[build-dependencies]
+risc0-build = "=3.0.5"
+
+[dependencies]
+risc0-zkvm = { version = "=3.0.5", features = ["std"] }
+token_core = { path = "../core" }
+
+[package.metadata.risc0]
+methods = ["guest"]

programs/token/methods/build.rs

@@ -0,0 +1,3 @@
+fn main() {
+    risc0_build::embed_methods();
+}

programs/token/methods/guest/Cargo.toml

@@ -0,0 +1,61 @@
+[package]
+name = "token-guest"
+version = "0.1.0"
+edition = "2021"
+
+[workspace]
+
+[lints.rust]
+rust_2018_idioms = { level = "deny", priority = -1 }
+# deny (not forbid) so a targeted per-item #[allow] remains possible if ever needed
+unsafe_code = "deny"
+
+[lints.clippy]
+# Deny only the groups where a new lint should always be a hard error.
+# style/pedantic lints default to warn so toolchain upgrades don't break the
+# build unexpectedly — they can be evaluated and addressed at our own pace.
+correctness = { level = "deny", priority = -1 }
+suspicious  = { level = "deny", priority = -1 }
+perf        = { level = "deny", priority = -1 }
+style       = { level = "warn", priority = -1 }
+
+# Generated-code / placeholder blockers.
+dbg_macro = "deny"
+todo = "deny"
+unimplemented = "deny"
+unwrap_used = "deny"
+
+# Lint suppression hygiene.
+allow_attributes = "warn"
+allow_attributes_without_reason = "deny"
+
+# Determinism, panic-safety, and arithmetic correctness.
+arithmetic_side_effects = "deny"
+indexing_slicing = "deny"
+
+# Cast discipline.
+as_conversions = "deny"
+cast_possible_truncation = "deny"
+cast_possible_wrap = "deny"
+cast_sign_loss = "deny"
+
+# API and enum evolution.
+large_enum_variant = "deny"
+wildcard_enum_match_arm = "deny"
+
+# Too noisy for this codebase unless enforced selectively.
+module_name_repetitions = "allow"
+similar_names = "allow"
+
+[[bin]]
+name = "token"
+path = "src/bin/token.rs"
+
+[dependencies]
+spel-framework = { git = "https://github.com/logos-co/spel.git", tag = "v0.3.0", package = "spel-framework" }
+nssa_core = { git = "https://github.com/logos-blockchain/logos-execution-zone.git", tag = "v0.2.0-rc3" }
+risc0-zkvm = { version = "=3.0.5", default-features = false }
+token_core = { path = "../../core" }
+token_program = { path = "../..", package = "token_program" }
+serde = { version = "1.0", features = ["derive"] }
+borsh = "1.5"

programs/token/methods/guest/src/bin/token.rs

@@ -0,0 +1,140 @@
+#![cfg_attr(not(test), no_main)]
+
+use spel_framework::prelude::*;
+use spel_framework::context::ProgramContext;
+use nssa_core::account::AccountWithMetadata;
+
+#[cfg(not(test))]
+risc0_zkvm::guest::entry!(main);
+
+#[lez_program(instruction = "token_core::Instruction")]
+mod token {
+    #[expect(
+        unused_imports,
+        reason = "SPEL instruction macro requires importing parent-scope handler types"
+    )]
+    use super::*;
+
+    /// Transfer tokens from sender to recipient.
+    /// Fresh public recipients must be explicitly authorized in the same transaction.
+    #[instruction]
+    pub fn transfer(
+        sender: AccountWithMetadata,
+        recipient: AccountWithMetadata,
+        amount_to_transfer: u128,
+    ) -> SpelResult {
+        Ok(spel_framework::SpelOutput::execute(token_program::transfer::transfer(
+            sender,
+            recipient,
+            amount_to_transfer,
+        ), vec![]))
+    }
+
+    /// Create a new fungible token definition without metadata.
+    /// Definition and holding targets must be uninitialized and authorized.
+    #[instruction]
+    pub fn new_fungible_definition(
+        definition_target_account: AccountWithMetadata,
+        holding_target_account: AccountWithMetadata,
+        name: String,
+        total_supply: u128,
+    ) -> SpelResult {
+        Ok(spel_framework::SpelOutput::execute(
+            token_program::new_definition::new_fungible_definition(
+                definition_target_account,
+                holding_target_account,
+                name,
+                total_supply,
+            ),
+            vec![],
+        ))
+    }
+
+    /// Create a new fungible or non-fungible token definition with metadata.
+    /// Definition, holding, and metadata targets must be uninitialized and authorized.
+    #[expect(
+        clippy::boxed_local,
+        reason = "boxed metadata keeps the instruction argument size bounded on the stack"
+    )]
+    #[instruction]
+    pub fn new_definition_with_metadata(
+        definition_target_account: AccountWithMetadata,
+        holding_target_account: AccountWithMetadata,
+        metadata_target_account: AccountWithMetadata,
+        new_definition: token_core::NewTokenDefinition,
+        metadata: Box<token_core::NewTokenMetadata>,
+    ) -> SpelResult {
+        Ok(spel_framework::SpelOutput::execute(
+            token_program::new_definition::new_definition_with_metadata(
+                definition_target_account,
+                holding_target_account,
+                metadata_target_account,
+                new_definition,
+                *metadata,
+            ),
+            vec![],
+        ))
+    }
+
+    /// Initialize a token holding account for a given token definition.
+    /// The holding target must be uninitialized and authorized.
+    #[instruction]
+    pub fn initialize_account(
+        ctx: ProgramContext,
+        definition_account: AccountWithMetadata,
+        account_to_initialize: AccountWithMetadata,
+    ) -> SpelResult {
+        Ok(spel_framework::SpelOutput::execute(
+            token_program::initialize::initialize_account(
+                definition_account,
+                account_to_initialize,
+                ctx.self_program_id,
+            ),
+            vec![],
+        ))
+    }
+
+    /// Burn tokens from the holder's account.
+    #[instruction]
+    pub fn burn(
+        definition_account: AccountWithMetadata,
+        user_holding_account: AccountWithMetadata,
+        amount_to_burn: u128,
+    ) -> SpelResult {
+        Ok(spel_framework::SpelOutput::execute(token_program::burn::burn(
+            definition_account,
+            user_holding_account,
+            amount_to_burn,
+        ), vec![]))
+    }
+
+    /// Mint new tokens to the holder's account.
+    /// Fresh public holders must be explicitly authorized in the same transaction.
+    #[instruction]
+    pub fn mint(
+        ctx: ProgramContext,
+        definition_account: AccountWithMetadata,
+        user_holding_account: AccountWithMetadata,
+        amount_to_mint: u128,
+    ) -> SpelResult {
+        Ok(spel_framework::SpelOutput::execute(token_program::mint::mint(
+            definition_account,
+            user_holding_account,
+            amount_to_mint,
+            ctx.self_program_id,
+        ), vec![]))
+    }
+
+    /// Print a new NFT from the master copy.
+    /// The printed copy target must be uninitialized and authorized.
+    #[instruction]
+    pub fn print_nft(
+        master_account: AccountWithMetadata,
+        printed_account: AccountWithMetadata,
+    ) -> SpelResult {
+        Ok(spel_framework::SpelOutput::execute(token_program::print_nft::print_nft(
+            master_account,
+            printed_account,
+        ), vec![]))
+    }
+}

programs/token/methods/src/lib.rs

@@ -0,0 +1 @@
+include!(concat!(env!("OUT_DIR"), "/methods.rs"));