Onboarding

Nestr

25 cards ~ 2 h Foundational

Foundational walk through the nestr project. Read top to bottom if you're new; no prior context assumed.

  1. nestr beginner 5 min

    Platform Components: Engine, Registry, Web, Landing, Olly, Perch

    Use when: onboarding to nestr-tools and deciding which submodule owns a change; someone describes nestr as a dependency cache with three components; checking what is live versus pre-production

  2. nestr intermediate 6 min

    Pellet Data Model: Framed Format, PID, Signatures, Provenance, Lockfile

    Use when: adding a field to the pellet header or footer; debugging an E_PID_MISMATCH or payload hash failure; explaining what nest.lock commits to

  3. nestr intermediate 5 min

    Pack and Extract: zstd Payload, BLAKE3 Checks, Read-Only Store

    Use when: tuning the zstd level for pack; explaining what extract verifies before writing a single file; someone treats nestr compression ratio as the product metric

  4. nestr beginner 4 min

    Store Stats, Prune and the Community Caps

    Use when: reading the dashboard's cache page; deciding when to call /api/pellets/prune; explaining which hosted operations Community caps and which it never caps

  5. nestr intermediate 5 min

    Engine REST API Surface

    Use when: wiring a client to the hosted engine; adding an engine route and choosing its middleware; auditing which routes are open, authenticated, rate-limited or capped

  6. nestr intermediate 5 min

    Engine Auth: better-auth JWT via JWKS, Rate Limiter, Quota Middleware

    Use when: wiring web or another client to the engine with a JWT; debugging a 401 from the engine; explaining what the per-IP rate limiter really does

  7. nestr intermediate 4 min

    WebSocket Event Stream

    Use when: subscribing a new client to live cache events; deciding whether to invalidate a TanStack Query cache on an event; debugging why the dashboard never refreshes after a compress

  8. nestr intermediate 6 min

    Engine Metrics Catalogue: Request, Pellet and Supply-Chain Series

    Use when: writing a Grafana panel against engine series; a supply-chain panel shows zeros and you need to know whether that is real; adding a counter emitted by a CLI verb

  9. nestr intermediate 4 min

    Perch Bridge Federation

    Use when: diagnosing missing nestr_* series in the central Folio dashboard; tuning push interval to reduce egress cost; deciding whether to add a new metric upstream of the federation cut

  10. nestr intermediate 6 min

    Perch Custom Services Roster

    Use when: deciding which Perch service answers a given operator question; adding a new SLO or cost rule; wiring a deploy gate to error-budget compliance

  11. nestr beginner 4 min

    .nest.yaml Config Schema

    Use when: writing a fresh workspace config from scratch; adding a new service to an existing workspace; deciding what conflict_resolution mode is safe for sync

  12. nestr intermediate 5 min

    Nest Dashboard: Next.js 15, better-auth Organisations, Engine JWT, Billing

    Use when: adding a dashboard route; debugging a 401 redirect or an engine call without a token; telling a prospect which dashboard screens show real data

  13. nestr intermediate 4 min

    Service Dependency Graph & Topological Order

    Use when: adding a service that must clone after another; debugging an assemble that runs services in the wrong order; detecting a dependency cycle in CI

  14. nestr intermediate 5 min

    Perch on Kubernetes: The Helm Chart as It Stands

    Use when: installing Perch in a fresh cluster; someone assumes the bridge or the custom services ship with the chart; wiring Perch to scrape the registry or the engine

  15. nestr beginner 3 min

    Installing a Package Should Never Run Its Code

    Use when: writing the nestr.tools homepage hero or a one-line description; explaining what category nestr sits in to a non-engineer; someone still pitches nestr as package compression

  16. nestr beginner 3 min

    Monorepo Operators, Not Everyone

    Use when: deciding whether a feature request fits the audience; writing copy for an outbound channel; someone asks whether nestr is for anyone who wants faster installs

  17. nestr beginner 3 min

    Pin. Verify. Contain.

    Use when: drafting any short-form copy: headline, social post, one-liner; deciding which verb a feature belongs to; checking whether a sentence overclaims what runs today

  18. nestr beginner 4 min

    Not a Rocketship: One Person, One Owl, In Public

    Use when: answering 'why should I trust this is still around in two years'; framing the founder story for a press or podcast intro; someone quotes old roadmap dates for Engine v1.0 or a Pro tier

  19. nestr beginner 3 min

    Not a Build Orchestrator, Not a Cache

    Use when: answering 'how is this different from Nx or Turborepo'; someone calls nestr a dependency cache or a faster npm install; writing a comparison or FAQ answer

  20. nestr beginner 4 min

    Community, Early Access, Enterprise, and No Lifetime Deal

    Use when: explaining the pricing page to a prospect; someone quotes the old $29 Pro tier or the $199 lifetime offer; deciding whether an item may be listed as included in Early Access

  21. nestr advanced 7 min

    pellets-registry: Receiver, Namespace Claims, Witnessed Transparency Log

    Use when: explaining what registry.nestr.tools does today versus by design; configuring the Rekor backend and witness pool; a customer asks how to publish or claim a namespace

  22. nestr advanced 7 min

    Signing, SLSA Provenance and the Trust Root

    Use when: setting up a signing key or a builder for a namespace; an install refuses with a provenance or signer error; explaining what 'SLSA L3' means in nestr and who decides it

  23. nestr advanced 6 min

    Hook Sandbox: Landlock, Network Namespace, Deny-List seccomp

    Use when: describing how nestr contains install hooks; a hook fails with a sandbox denial; checking what may be said publicly about the syscall filter

  24. nestr intermediate 6 min

    Billing via TOLL per Organisation, and the Rule That Payment Never Touches Trust

    Use when: changing anything that reads plan or billing state; support asks what a lapsed subscription removes; preparing the live-billing switch (G-13-5)

  25. nestr intermediate 5 min

    Usage Metering: Community Caps and the Security Record

    Use when: adding a route that should or should not count against Community; debugging a 402 E_FREE_QUOTA_EXCEEDED or 503 E_USAGE_UNAVAILABLE; explaining what the security record contains per plan