feat(host): duckdb-wasm storage write dispatch + CONTRACT_DIGEST rotation

Cargo.toml

@@ -212,6 +212,7 @@ members = [
     "extensions/icebergscan-component",
     "extensions/autocomplete-component",
     "extensions/statsduck-component",
+    "tools/catalog-sig-extract",
 ]
 
 # talib-component carries its own `[workspace]` table (an independent lockfile —

crates/ducklink-cli/src/lib.rs

@@ -344,7 +344,13 @@ fn run_repl(conn: &duckdb::Connection) -> Result<(), String> {
 
         statement.push_str(trimmed);
         if !trimmed.ends_with(';') {
-            statement.push(' ');
+            // Preserve line breaks between joined input lines so DuckDB's
+            // parser correctly terminates SQL line comments (`-- ...`) at
+            // end-of-line. Joining with a single space instead caused
+            // `-- comment\nSELECT 1;` to become `-- comment SELECT 1;`,
+            // which the parser reads as one giant line comment that
+            // swallows the following statement.
+            statement.push('\n');
             write_continuation_prompt(&out)?;
             continue;
         }

crates/ducklink-host/Cargo.toml

@@ -11,10 +11,12 @@ clap = { version = "4.5", features = ["derive"] }
 wasmtime = { version = "46.0.1", features = ["component-model", "cache"] }
 wasmtime-wasi = "46.0.1"
 # Tiered Virtual Memory: host-owned regions back DuckDB's >4 GiB spill tier.
-# tvm-core is wasmtime-free, so it works with this host's pinned wasmtime (39)
-# even though tvm-wasmtime targets 45; the manager/bytes host traits are
-# implemented in this crate against this host's bindgen.
-tvm-core = { path = "../../../tvm-wasm/crates/tvm-core" }
+# tvm-core is wasmtime-free; the manager/bytes host traits are implemented in
+# this crate against this host's bindgen. Sourced via a pinned git rev of
+# tvm-wasm (not a local path) so ducklink builds standalone AND so ChimeraDB's
+# in-process build (which links ducklink-host + sqlink-host) resolves a SINGLE
+# tvm-core source — sqlink-host pins the same rev. See chimeradb/PLAN-inprocess.md PR1.
+tvm-core = { git = "https://github.com/tegmentum/tvm-wasm.git", rev = "6f3bae38fad4addd4de1837ab151f4ac871d1dd4" }
 # TLS for `ducklink serve` (the httpd). Blocking rustls over the accept
 # loop's TcpStream; rcgen mints the --tls-self-signed cert. Mirrors the
 # sqlite-wasm-httpd stack.
@@ -38,7 +40,12 @@ hex = "0.4"
 # trust-gated CompileCache. Used here to HMAC-authenticate the precompiled
 # `.cwasm` (a `.cwasm` deserializes to runnable machine code, so it must be
 # trusted). compose-core is wasmtime-free and sqlite-free.
-compose-core = { git = "https://github.com/tegmentum/webassembly-component-orchestration.git", branch = "main" }
+compose-core = { git = "https://github.com/tegmentum/webassembly-component-orchestration.git", rev = "416226921cc166e98016f534a73bd6c9b7dcb33c" }
+# Ergonomic error enum for the sub-ext loader (Phase D). The rest of the
+# crate uses anyhow at the boundary; internally SubExtError is a `thiserror`
+# enum so callers can pattern-match on `SubExtError::PlanMissing` vs a compose
+# failure without stringly parsing.
+thiserror = "1"
 # Home-dir resolution for the per-machine HMAC key + FsBlobStore cache root.
 dirs = "5"
 # Shared, db-agnostic crates (also consumed by the sqlink host). datalink is