feat: working CLI + TUI, VeriSimDB:6077, Gossamer IPC, nala/apt/dnf parity

- Escript binary at ~/.local/bin/opsm — install/remove/search/check/history
- Forthless install (opsm install lodash auto-detects @npm)
- Trust pipeline graceful degradation (never blocks on unreachable services)
- Real checksum verification in opsm check (recomputes from cached tarballs)
- History redo (opsm history redo)
- ANSI colour module (Opsm.Colour, NO_COLOR compliant)
- Download stats (size, time, speed)
- VeriSimDB instance on port 6077 (GenServer, wired into installer/resolver/trust)
- Gossamer IPC handler (opsm_runtime command, CLI-backed, Tauri + Gossamer + PanLL)
- Panel HTML updated (tries Gossamer → Tauri → PanLL in order)
- .well-known/groove/manifest.json with full capability declaration
- Ratatui TUI at ~/.local/bin/opsm-tui (1.8MB, Catppuccin Mocha, SPARK contracts)
- 9 property tests for TUI state invariants, all passing

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/integrations/verisimdb.a2ml

@@ -1,15 +1,32 @@
 # SPDX-License-Identifier: PMPL-1.0-or-later
-# VeriSimDB Feed — Cross-Repo Analytics Data Store
+# VeriSimDB Integration — Dedicated OPSM Instance
+# Port: 6077 | Instance: opsm | Base IRI: https://verisim.db/opsm
 
 [integration]
 name = "verisimdb"
-type = "data-feed"
+type = "data-store"
 repository = "https://github.com/hyperpolymath/nextgen-databases"
-data-store = "verisimdb-data"
+instance_name = "opsm"
+port = 6077
+base_iri = "https://verisim.db/opsm"
 
 [feed-config]
+emit-install-events = true
+emit-uninstall-events = true
+emit-resolution-events = true
+emit-trust-check-events = true
 emit-scan-results = true
 emit-build-metrics = true
 emit-dependency-graph = true
-format = "hexad"
-destination = "verisimdb-data/feeds/"
+format = "octad"
+destination = "verisimdb:6077"
+
+[client]
+module = "Opsm.VeriSimDB"
+genserver = true
+graceful_degradation = true
+reconnect_on_failure = true
+
+[octad-schema]
+event_types = ["install", "uninstall", "resolution", "trust_check"]
+modalities = ["document", "graph", "temporal", "provenance", "semantic"]

.verisimdb/config.toml

@@ -0,0 +1,48 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# VeriSimDB instance configuration for OPSM
+# Port: 6077 (dedicated OPSM instance)
+
+[instance]
+name = "opsm"
+description = "OPSM package manager — install/uninstall/resolve/trust event store"
+version = "0.1.0"
+base_iri = "https://verisim.db/opsm"
+
+[storage]
+backend = "persistent"
+octad_dir = ".verisimdb/octads"
+index_file = ".verisimdb/index.json"
+
+[storage.persistent]
+persistence_dir = "/var/lib/verisimdb-opsm"
+
+[server]
+host = "127.0.0.1"
+port = 6077
+grpc_port = 0
+enable_cors = false
+max_body_size = 10485760
+request_timeout_secs = 30
+max_connections = 256
+
+[modalities]
+vector_dimension = 64
+
+[ingest]
+sources = ["opsm-installer", "opsm-resolver", "opsm-trust-pipeline"]
+
+[ingest.opsm-installer]
+enabled = true
+event_types = ["install", "uninstall"]
+
+[ingest.opsm-resolver]
+enabled = true
+event_types = ["resolution"]
+
+[ingest.opsm-trust-pipeline]
+enabled = true
+event_types = ["trust_check"]
+
+[display]
+date_format = "%Y-%m-%d %H:%M"
+max_title_length = 80

.well-known/groove/manifest.json

@@ -0,0 +1,56 @@
+{
+  "groove_version": "1",
+  "service_id": "opsm",
+  "service_name": "OPSM — Odds and Sods Package Manager",
+  "version": "2.0.0",
+  "health_endpoint": "/health",
+  "capabilities": {
+    "package-management": {
+      "type": "custom",
+      "description": "Federated package install/remove/search across 101 registries",
+      "protocol": "http",
+      "endpoint": "/api/packages"
+    },
+    "trust-pipeline": {
+      "type": "integrity",
+      "description": "SLSA L3, PQ crypto, attestation verification",
+      "protocol": "http",
+      "endpoint": "/api/trust"
+    },
+    "panel-ui": {
+      "type": "panel-ui",
+      "description": "Runtime manager panel for PanLL workspaces",
+      "protocol": "http",
+      "endpoint": "/panels/opsm-runtime-manager"
+    },
+    "octad-storage": {
+      "type": "octad-storage",
+      "description": "Install/uninstall/resolve/trust events persisted to VeriSimDB:6077",
+      "protocol": "http",
+      "endpoint": "http://127.0.0.1:6077/api/v1"
+    }
+  },
+  "ports": {
+    "registry_gateway": 4050,
+    "mobile_api": 4051,
+    "verisimdb": 6077,
+    "claim_forge": 7001,
+    "checky_monkey": 7002,
+    "palimpsest_license": 7003,
+    "cicd_hyper_a": 7004,
+    "oikos": 7005
+  },
+  "ipc": {
+    "opsm_runtime": {
+      "commands": ["list", "install", "remove", "set", "doctor", "search", "info", "history"],
+      "backend": "cli",
+      "binary": "opsm"
+    }
+  },
+  "tui": {
+    "binary": "opsm-tui",
+    "framework": "ratatui-0.30",
+    "features": ["split-panes", "catppuccin-theme", "vim-keys", "search", "history-undo-redo", "trust-dashboard"],
+    "spark_contracts": true
+  }
+}

opsm-ui/tui/Cargo.toml

@@ -0,0 +1,34 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell
+
+[package]
+name = "opsm-tui"
+version = "0.1.0"
+description = "Terminal user interface for OPSM — better than aptitude"
+authors = ["Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>"]
+license = "PMPL-1.0-or-later"
+repository = "https://github.com/hyperpolymath/odds-and-sods-package-manager"
+edition = "2021"
+rust-version = "1.75"
+
+[[bin]]
+name = "opsm-tui"
+path = "src/main.rs"
+
+[dependencies]
+# TUI framework (matches reposystem pattern)
+ratatui = { version = "0.30", features = ["crossterm"] }
+crossterm = "0.28"
+
+# CLI argument parsing
+clap = { version = "4.5", features = ["derive"] }
+
+# Serialization (for parsing opsm CLI JSON output)
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+
+# Error handling
+anyhow = "1.0"
+
+[dev-dependencies]
+proptest = "1"