@wenathlan/saddle 1.8.13 → 1.8.15

package/docs/plans/22.research.universal.runtime.md

@@ -189,7 +189,7 @@ export async function readFile(path: string): Promise<string | null> {
 
 ```json
 {
-  "name": "@devthink/webscrape",
+  "name": "@wenathlan/webscrape",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -216,16 +216,16 @@ export async function readFile(path: string): Promise<string | null> {
 
 ```typescript
 // Node.js
-import { scrape } from '@devthink/webscrape/node';
+import { scrape } from '@wenathlan/webscrape/node';
 
 // Browser
-import { scrape } from '@devthink/webscrape/browser';
+import { scrape } from '@wenathlan/webscrape/browser';
 
 // Deno
-import { scrape } from '@devthink/webscrape/deno';
+import { scrape } from '@wenathlan/webscrape/deno';
 
 // Universal (só APIs comuns)
-import { scrape } from '@devthink/webscrape';
+import { scrape } from '@wenathlan/webscrape';
 ```
 
 ### 4.3. unenv polyfills
@@ -615,10 +615,10 @@ npx @arethetypeswrong/cli
 
 **Exemplo de output:**
 ```
-@devthink/webscrape
+@wenathlan/webscrape
 
   "import" - ESM
-    ✅ @devthink/webscrape → ./dist/index.js
+    ✅ @wenathlan/webscrape → ./dist/index.js
     ✅ Types: ./dist/index.d.ts
 
   "require" - CJS
@@ -626,7 +626,7 @@ npx @arethetypeswrong/cli
     💡 Add a "require" condition
 
   "browser" - Browser ESM
-    ✅ @devthink/webscrape → ./dist/browser.js
+    ✅ @wenathlan/webscrape → ./dist/browser.js
 ```
 
 ### 9.3. other tools
@@ -636,7 +636,7 @@ npx @arethetypeswrong/cli
 npx arethetypeswrong --pack
 
 # Verificar size do bundle
-npx bundlephobia @devthink/webscrape
+npx bundlephobia @wenathlan/webscrape
 
 # Verificar dependências circulares
 npx madge --circular src/
@@ -896,7 +896,7 @@ export async function loadConfig(root = '.'): Promise<Config | null> {
 
 ```json
 {
-  "name": "@devthink/webscrape",
+  "name": "@wenathlan/webscrape",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",

package/docs/plans/28.action.plan.md

@@ -2,7 +2,7 @@
 
 ## Phase: planning + research done
 - [x] Folder structure (mirrors `cli`/`debonair`): `docs/plans`, `docs/talks`, `docs/logs`, `tests/{examples,output,scripts}`, `web`, `.github/workflows`.
-- [x] Config files: `package.json` (`@devthink/saddle`, 65 deps), `tsconfig.json`, `biome.json`, `vitest.config.ts`, `.github/workflows/saddle-tests.yml`, `.gitignore`, `.npmrc`, `.nvmrc`, `README.md`.
+- [x] Config files: `package.json` (`@wenathlan/saddle`, 65 deps), `tsconfig.json`, `biome.json`, `vitest.config.ts`, `.github/workflows/saddle-tests.yml`, `.gitignore`, `.npmrc`, `.nvmrc`, `README.md`.
 - [x] Research done (computer use, hcaptcha bypass, vercel sandbox, atlas agent browser).
 - [x] Planning docs in `docs/plans/` (01 to 12 + index).
 - [x] Applied skill arch: no `src/`, no vercel/netlify functions, mysql2, socket, no localhost, lowercase files, production = `web/`.

package/docs/plans/35.comparativo.concorrencia.md

@@ -8,7 +8,7 @@
 
 ## Sumário Executivo
 
-`@devthink/webscrape` é um toolkit de scraping all-in-one que ocupa um nicho único: combina HTTP scraping, browser automation, serialização multi-formato, formatação para IA e um servidor HTTP — tudo em um único pacote TypeScript, sem depender de serviços em nuvem. A análise técnica revela que, enquanto competitors como Crawlee e Scrapy dominam em infraestrutura de produção (filas persistentes, Docker, anti-detection), webscrape supera em integração com IA, estimativa de tokens e chunking para RAG.
+`@wenathlan/webscrape` é um toolkit de scraping all-in-one que ocupa um nicho único: combina HTTP scraping, browser automation, serialização multi-formato, formatação para IA e um servidor HTTP — tudo em um único pacote TypeScript, sem depender de serviços em nuvem. A análise técnica revela que, enquanto competitors como Crawlee e Scrapy dominam em infraestrutura de produção (filas persistentes, Docker, anti-detection), webscrape supera em integração com IA, estimativa de tokens e chunking para RAG.
 
 ---
 
@@ -226,14 +226,14 @@ Nenhum outro competitor suporta Bun nativamente. Crawlee e Puppeteer são Node-o
 
 ```typescript
 // Um pacote faz TUDO:
-import { scrapeUrl } from '@devthink/webscrape/scrape';
-import { crawl } from '@devthink/webscrape/crawler';
-import { batchScrape } from '@devthink/webscrape/batch';
-import { serializeResult } from '@devthink/webscrape/serialize';
-import { formatForAgent } from '@devthink/webscrape/agent';
-import { chunkMarkdown } from '@devthink/webscrape/chunking';
-import { generateLlmsTxt } from '@devthink/webscrape/llms-txt';
-import { createServer } from '@devthink/webscrape/server';
+import { scrapeUrl } from '@wenathlan/webscrape/scrape';
+import { crawl } from '@wenathlan/webscrape/crawler';
+import { batchScrape } from '@wenathlan/webscrape/batch';
+import { serializeResult } from '@wenathlan/webscrape/serialize';
+import { formatForAgent } from '@wenathlan/webscrape/agent';
+import { chunkMarkdown } from '@wenathlan/webscrape/chunking';
+import { generateLlmsTxt } from '@wenathlan/webscrape/llms-txt';
+import { createServer } from '@wenathlan/webscrape/server';
 ```
 
 **Nenhum competitor combina:**
@@ -373,7 +373,7 @@ O Redis serialization (`JSON.SET` command) é exclusivo — permite popular Redi
 
 ```json
 // webscrape: 1 package
-@devthink/webscrape
+@wenathlan/webscrape
 
 // Crawlee: multi-package
 crawlee

package/docs/plans/40.npm.publish.md

@@ -1,6 +1,6 @@
 # NPM Package Publishing for Saddle Robot
 
-> Package `@devthink/saddle` published to NPM registry.
+> Package `@wenathlan/saddle` published to NPM registry.
 > Acts as both library and CLI binary.
 
 ## Overview
@@ -16,7 +16,7 @@ bypass, and memory engine capabilities.
 
 ```json
 {
-  "name": "@devthink/saddle",
+  "name": "@wenathlan/saddle",
   "version": "1.0.0",
   "description": "Super bot: agent browser, captcha bypass, multi-platform GitHub/GitLab/Forgejo/Gitea automation with computational memory",
   "main": "lib/index.js",
@@ -129,11 +129,11 @@ git push --follow-tags
 ### As Library
 
 ```bash
-npm install @devthink/saddle
+npm install @wenathlan/saddle
 ```
 
 ```javascript
-import { SaddleRobot } from '@devthink/saddle'
+import { SaddleRobot } from '@wenathlan/saddle'
 
 const robot = new SaddleRobot({
   platform: 'github',
@@ -146,7 +146,7 @@ await robot.start()
 ### As CLI
 
 ```bash
-npm install -g @devthink/saddle
+npm install -g @wenathlan/saddle
 
 saddle --help
 saddle capture --url https://example.com
@@ -200,7 +200,7 @@ main()
 ## Scoped Package Structure
 
 ```
-@devthink/saddle/
+@wenathlan/saddle/
 ├── lib/
 │   ├── index.js          main entry point
 │   ├── index.cjs         CommonJS entry point

package/docs/plans/41.o.que.falta.md

@@ -8,7 +8,7 @@
 
 ## Sumário
 
-`@devthink/webscrape` é um toolkit all-in-one que combina scraping, serialização multi-formato, AI formatting e chunking para RAG — um posicionamento único no mercado. No entanto, 3 gaps críticos impedem a adoção em produção: ausência de anti-detection real, queue persistente e suporte Docker. Este documento lista tudo que falta, priorizado por impacto.
+`@wenathlan/webscrape` é um toolkit all-in-one que combina scraping, serialização multi-formato, AI formatting e chunking para RAG — um posicionamento único no mercado. No entanto, 3 gaps críticos impedem a adoção em produção: ausência de anti-detection real, queue persistente e suporte Docker. Este documento lista tudo que falta, priorizado por impacto.
 
 ---
 
@@ -146,7 +146,7 @@
 - Puppeteer: `chrome-devtools-mcp`
 
 **Implementação necessária:**
-1. Criar pacote `@devthink/webscrape-mcp`
+1. Criar pacote `@wenathlan/webscrape-mcp`
 2. Expor endpoints como MCP tools: `scrape`, `crawl`, `batch`, `extract`, `serialize`
 3. Usar SDK oficial `@modelcontextprotocol/sdk`
 4. Adicionar configuração MCP ao `cli.ts`

package/docs/plans/42.pesquisa.concorrencia.md

@@ -1,7 +1,7 @@
 # Competitive Research: webscrape vs. 7 Competitors
 
 > **Date:** 2026-06-08
-> **Objective:** Deep analysis of 7 direct/indirect competitors to identify gaps, opportunities, and architectural insights for the `@devthink/webscrape` toolkit.
+> **Objective:** Deep analysis of 7 direct/indirect competitors to identify gaps, opportunities, and architectural insights for the `@wenathlan/webscrape` toolkit.
 
 ---
 
@@ -601,7 +601,7 @@ Request → [Downloader Middlewares] → Downloader → [Spider Middlewares] →
 **Impact:** Cannot be used by AI agents (Claude, Cursor, Windsurf) natively.
 
 **Recommendation:**
-- Create `@devthink/webscrape-mcp` package
+- Create `@wenathlan/webscrape-mcp` package
 - Expose scrape/crawl/batch endpoints as MCP tools
 - Integrate with Claude Desktop, VS Code, Cursor
 

package/docs/plans/43.plan.universal.architecture.md

@@ -2,7 +2,7 @@
 
 ## 1. Visão Geral
 
-A biblioteca `@devthink/webscrape` precisa funcionar em **TODOS os modos**:
+A biblioteca `@wenathlan/webscrape` precisa funcionar em **TODOS os modos**:
 
 | Modo | Como funciona |
 |------|--------------|
@@ -404,7 +404,7 @@ export default defineConfig({
 
 ```json
 {
-  "name": "@devthink/webscrape",
+  "name": "@wenathlan/webscrape",
   "version": "2.0.0",
   "type": "module",
   "main": "./dist/index.js",

package/docs/plans/44.reference.md

@@ -81,7 +81,7 @@ files, and deployment payloads with edge caching.
 
 ### NPM Publishing
 
-Package `@devthink/saddle` available as both library and
+Package `@wenathlan/saddle` available as both library and
 CLI binary.
 
 ## Architecture Rules (from arch skill)

package/docs/plans/45.robotarchitecture.md

@@ -175,13 +175,13 @@ CMD ["node", "server.js"]
 
 ## NPM Package Publishing
 
-Saddle can be published as an NPM package `@devthink/saddle` for
+Saddle can be published as an NPM package `@wenathlan/saddle` for
 distribution as both a library and a CLI tool.
 
 ### Package Structure
 
 ```
-@devthink/saddle/
+@wenathlan/saddle/
 ├── lib/
 │   ├── browser.js        (agent browser engine)
 │   ├── bot.js            (multi-platform bot engine)
@@ -200,7 +200,7 @@ distribution as both a library and a CLI tool.
 
 | Mode | Entry Point | Usage |
 |------|------------|-------|
-| Library | `require('@devthink/saddle')` | Import as Node module |
+| Library | `require('@wenathlan/saddle')` | Import as Node module |
 | CLI | `saddle --command capture` | Run as terminal command |
 | Binary | `node_modules/.bin/saddle` | Direct execution |
 

package/docs/plans/46.scdnintegration.md

@@ -144,7 +144,7 @@ class SCDNClient {
 
 ```typescript
 // In browser capture module
-import { SCDNClient } from '@devthink/saddle/deploy'
+import { SCDNClient } from '@wenathlan/saddle/deploy'
 
 async function uploadCaptureSession(
   sessionData: SessionData,

package/docs/plans/README.md

@@ -2,7 +2,7 @@
 
 Binary computing agent, agent browser, computer-use, scraper and packager.
 
-> **Storage turned into memory.** Saddle runs on other people's computers (GitHub Actions, Forgejo, Gitea, GitLab, Codeberg, free Docker containers) and turns unlimited third-party storage buckets into virtual RAM/GPU/CPU. **Nothing runs on the operator's local machine.** Ships as a library, CLI, binary, n8n node, CRX extension, Android/iOS and Tauri desktop app. Package `@devthink/saddle` — published to npm, GitHub Packages, Maven, NuGet, RubyGems and GitHub Containers (auto-mirrored to jsDelivr). It is simultaneously **sandbox + virtual machine + webhook server + workflow orchestrator (n8n-style) + packager + deployment system + integration platform** — sometimes each *is* the other three; the virtual VMs expose vCPU/VRAM/vGPU/virtual processing to the user, 100% on the internet, 100% virtual.
+> **Storage turned into memory.** Saddle runs on other people's computers (GitHub Actions, Forgejo, Gitea, GitLab, Codeberg, free Docker containers) and turns unlimited third-party storage buckets into virtual RAM/GPU/CPU. **Nothing runs on the operator's local machine.** Ships as a library, CLI, binary, n8n node, CRX extension, Android/iOS and Tauri desktop app. Package `@wenathlan/saddle` — published to npm, GitHub Packages, Maven, NuGet, RubyGems and GitHub Containers (auto-mirrored to jsDelivr). It is simultaneously **sandbox + virtual machine + webhook server + workflow orchestrator (n8n-style) + packager + deployment system + integration platform** — sometimes each *is* the other three; the virtual VMs expose vCPU/VRAM/vGPU/virtual processing to the user, 100% on the internet, 100% virtual.
 
 This document is the single source of truth, arranged as a progressive arc: **Foundation (1–6)**, **Engine (7–17)**, **Productization (18–31)**. Nothing here is attributed to external tooling; it is the project's own architecture.
 
@@ -368,7 +368,7 @@ Where a platform has no formal app portal (Telegram, Matrix), the robot is still
 
 Sources: `api.kilo.ai`, `opencode.ai/zen`, `openrouter.ai`. Count with `js-tiktoken` / `gpt-tokenizer`.
 
-22. **Packaging & Publishing** — `@devthink/saddle` as **lib + CLI** (`saddle`); install `npm install @devthink/saddle` (global for CLI). Package layout: `lib/index.js` + `bin/saddle.js` (`node:util parseArgs{command, platform, token, verbose}`, default `help`), exports map subpaths `./browser, ./bot, ./captcha, ./memory-engine, ./deploy` (import/require dual) + `./index.cjs`. Scripts: `"build":"tsc"`, `"test":"vitest run"`, `"lint":"biome check ."`, `"typecheck":"tsc --noEmit"`, `"prepublishOnly":"npm run build && npm test"`, `"prepare":"husky"`. Version: semver `npm version patch|minor|major` + `git push --follow-tags`. Library API: `import { SaddleRobot } from '@devthink/saddle'; await robot.start(); await robot.executeCommand(cmd)`. `npm publish --access public` → auto-mirror jsDelivr/UNPKG/esm.sh.
+22. **Packaging & Publishing** — `@wenathlan/saddle` as **lib + CLI** (`saddle`); install `npm install @wenathlan/saddle` (global for CLI). Package layout: `lib/index.js` + `bin/saddle.js` (`node:util parseArgs{command, platform, token, verbose}`, default `help`), exports map subpaths `./browser, ./bot, ./captcha, ./memory-engine, ./deploy` (import/require dual) + `./index.cjs`. Scripts: `"build":"tsc"`, `"test":"vitest run"`, `"lint":"biome check ."`, `"typecheck":"tsc --noEmit"`, `"prepublishOnly":"npm run build && npm test"`, `"prepare":"husky"`. Version: semver `npm version patch|minor|major` + `git push --follow-tags`. Library API: `import { SaddleRobot } from '@wenathlan/saddle'; await robot.start(); await robot.executeCommand(cmd)`. `npm publish --access public` → auto-mirror jsDelivr/UNPKG/esm.sh.
 
 | Registry | What |
 |----------|------|

package/docs/plans/missing-facts.md

@@ -118,7 +118,7 @@ FILE: 40.npm.publish.md
 - Pre-publish checklist
 - As library (npm install) and CLI (npm install -g, saddle --command)
 - Binary entry point: saddle.js
-- Scoped package structure: @devthinking/saddle/
+- Scoped package structure: @wenathlaning/saddle/
 - Versioning strategy: semver (patch/minor/major)
 - 10-step pre-publish checklist
 - No mention of these npm details

package/docs/registryresearch.md

@@ -34,15 +34,15 @@ The live GHCR workflow `31544093172` completed successfully, and the public pack
 
 ## live verification
 
-The first `publishgithubnpm.yml` run failed with HTTP 403 because `@devthink/saddle` was not an authorized package namespace for the `iakadion/saddle` workflow. The corrected run `31543249301` completed successfully after rewriting the package name in the CI workspace to `@iakadion/saddle`. However, the repository Packages page still returned an empty listing immediately afterward, and the available GitHub API token could not read the user package namespace. The next verification must query the owner package page directly and inspect the workflow publish logs before treating the successful exit code as visible package availability.
+The first `publishgithubnpm.yml` run failed with HTTP 403 because `@wenathlan/saddle` was not an authorized package namespace for the `iakadion/saddle` workflow. The corrected run `31543249301` completed successfully after rewriting the package name in the CI workspace to `@iakadion/saddle`. However, the repository Packages page still returned an empty listing immediately afterward, and the available GitHub API token could not read the user package namespace. The next verification must query the owner package page directly and inspect the workflow publish logs before treating the successful exit code as visible package availability.
 
 The v1.7.0 release verification used workflow logs as the available artifact evidence. GitHub npm run `31549603859` published `@iakadion/saddle@1.7.0`; GHCR run `31549603838` pushed `ghcr.io/iakadion/saddle:1.7.0` and `latest`; Maven retry run `31549802841` uploaded `io.devthink:saddle:1.7.0`; RubyGems retry run `31549804286` registered `saddle (1.7.0)`; and NuGet retry run `31549972311` created and pushed `Saddle.1.7.0.nupkg`. The GitHub package-list API was not readable with the available integration token, so these statements are limited to successful workflow upload evidence rather than an independent package-page listing.
 
-The first public npmjs run `31549603849` used OIDC and returned HTTP 404. Retry `31551708958` used the configured `NPM_TOKEN` secret, and retry `31551771374` confirmed that the masked secret reached the runner after newline normalization; both still returned HTTP 404 for `@devthink/saddle`. The identity-check retry `31552368723` reached `npm whoami` with a masked token but npm returned HTTP 401. The remaining blocker is the token itself or its account/scope permission: the owner must replace `NPM_TOKEN` with a valid raw npm access token authorized to publish `@devthink/saddle`. The exposed token from the prior conversation remains deliberately unused.
+The first public npmjs run `31549603849` used OIDC and returned HTTP 404. Retry `31551708958` used the configured `NPM_TOKEN` secret, and retry `31551771374` confirmed that the masked secret reached the runner after newline normalization; both still returned HTTP 404 for `@wenathlan/saddle`. The identity-check retry `31552368723` reached `npm whoami` with a masked token but npm returned HTTP 401. The remaining blocker is the token itself or its account/scope permission: the owner must replace `NPM_TOKEN` with a valid raw npm access token authorized to publish `@wenathlan/saddle`. The exposed token from the prior conversation remains deliberately unused.
 
 The cross-runtime workflow `31552266171` and its manual rerun `31552272176` completed successfully. The matrix ran the root probe on Node, Bun and Deno and the deterministic Node suite. The root entry no longer imports filesystem, Node HTTP, persistent queue, file-session or local-memory adapters; those remain explicit Node-only subpaths.
 
-Release `v1.8.0` was created from commit `9ddfd6c`. GitHub npm run `31556461901`, GHCR run `31556461887`, NuGet run `31556461883` and RubyGems run `31556461991` completed successfully for `1.8.0`. Maven run `31556461885` initially failed because setup-java rejects `latest`; after changing the workflow to JDK 26, manual run `31556549154` completed successfully. Public npmjs run `31556461909` produced the `@devthink/saddle@1.8.0` tarball but the registry rejected the PUT with HTTP 404 `Scope not found`; no public npmjs publication is claimed.
+Release `v1.8.0` was created from commit `9ddfd6c`. GitHub npm run `31556461901`, GHCR run `31556461887`, NuGet run `31556461883` and RubyGems run `31556461991` completed successfully for `1.8.0`. Maven run `31556461885` initially failed because setup-java rejects `latest`; after changing the workflow to JDK 26, manual run `31556549154` completed successfully. Public npmjs run `31556461909` produced the `@wenathlan/saddle@1.8.0` tarball but the registry rejected the PUT with HTTP 404 `Scope not found`; no public npmjs publication is claimed.
 
 The active package identity on main is now `@wenathlan/saddle`. The repository has since transferred to `wenathlan`; the authenticated `iakadion` account retains administrator permission. Release `v1.8.2` is the first release prepared against the transferred repository owner for GitHub Packages npm, Maven and GHCR.
 

package/docs/release17notes.md

@@ -21,4 +21,4 @@ The release was prepared with the deterministic Node test runner, format checks,
 
 ## Registry targets
 
-The release workflows target GitHub Packages npm, npmjs through OIDC Trusted Publishing, GHCR, Maven, NuGet and RubyGems. Each package is verified from its workflow result before being reported as published. npmjs publication remains conditional on the one-time Trusted Publisher configuration for `@devthink/saddle`.
+The release workflows target GitHub Packages npm, npmjs through OIDC Trusted Publishing, GHCR, Maven, NuGet and RubyGems. Each package is verified from its workflow result before being reported as published. npmjs publication remains conditional on the one-time Trusted Publisher configuration for `@wenathlan/saddle`.

package/docs/releaseassets.md

@@ -1,10 +1,10 @@
 # Release assets
 
-The Node-only release adapter creates deterministic metadata for caller-selected artifacts. For version `1.8.12`, it writes dotted surface-specific names such as `sha256.desktop.1.8.12`, `manifest.desktop.1.8.12.json`, `sbom.desktop.1.8.12.cdx.json` and `provenance.desktop.1.8.12.intoto.jsonl`. The adapter rejects underscore-based public names and Rust build-helper executables. It never publishes, authenticates or selects a registry.
+The Node-only release adapter creates deterministic metadata for caller-selected artifacts. For version `1.8.14`, it writes dotted surface-specific names such as `sha256.desktop.1.8.14`, `manifest.desktop.1.8.14.json`, `sbom.desktop.1.8.14.cdx.json` and `provenance.desktop.1.8.14.intoto.jsonl`. The adapter rejects underscore-based public names and Rust build-helper executables. It never publishes, authenticates or selects a registry.
 
 ```bash
 npm run release:assets -- \
-  --version 1.8.12 \
+  --version 1.8.14 \
   --surface desktop \
   --output build/release \
   --artifact build/saddle.tgz \

package/docs/releasenotes-1.8.12.md

@@ -17,7 +17,7 @@ Saddle 1.8.12 consolidates the root-first native surfaces, the GPL-3.0-only proj
 
 ## Artifact matrix
 
-The release workflows derive the version from the release tag and use these lowercase dotted names. This table is the contract expected from CI; it does not claim that an asset exists until the corresponding workflow attaches it.
+The release workflows derive the version from the release tag and use these lowercase dotted names. The `v1.8.12` release was published and contains the generated assets listed below; iOS remains unavailable because Apple signing and provisioning were not configured.
 
 | Surface | Architectures or mode | Expected artifact |
 |---|---|---|
@@ -31,13 +31,28 @@ The release workflows derive the version from the release tag and use these lowe
 
 Each generated surface must carry its checksum and manifest companion. Where enabled, CI also emits SBOM and provenance metadata. The signing state must be one of `unsigned`, `ci-test-key`, `caller-owned`, `notarized` or the exact provider status produced by CI. No unsigned artifact is described as trusted or production-signed.
 
+## Verified attached assets
+
+The release contains **38 attached assets**. Desktop binaries are unsigned, Android APK/AAB files use the explicitly labeled `ci-test-key`, and the container is marked `caller-owned`.
+
+| Surface | Attached assets | Signing |
+|---|---|---|
+| Linux desktop | `saddle.browser.1.8.12.x64.deb`, `saddle.browser.1.8.12.x64.rpm`, `saddle.browser.1.8.12.x64.appimage`, `saddle.browser.1.8.12.arm64.deb`, `saddle.browser.1.8.12.arm64.rpm`, `saddle.browser.1.8.12.arm64.appimage` | `unsigned` |
+| Windows desktop | `saddle.browser.1.8.12.x86.exe`, `saddle.browser.1.8.12.x86.msi`, `saddle.browser.1.8.12.x64.exe`, `saddle.browser.1.8.12.x64.msi`, `saddle.browser.1.8.12.arm64.exe`, `saddle.browser.1.8.12.arm64.msi` | `unsigned` |
+| macOS desktop | `saddle.browser.1.8.12.x64.dmg`, `saddle.browser.1.8.12.x64.app.zip`, `saddle.browser.1.8.12.arm64.dmg`, `saddle.browser.1.8.12.arm64.app.zip` | `unsigned` |
+| Android | `saddle.apk.1.8.12.apk`, `saddle.aab.1.8.12.aab` | `ci-test-key` |
+| Container | `saddle.container.1.8.12.tar.gz` | `caller-owned` |
+| Browser extension | `saddle.extension.1.8.12.zip` | `unsigned` |
+| Manifests | `manifest.android.1.8.12.json`, `manifest.container.1.8.12.json`, `manifest.desktop.linux.arm64.1.8.12.json`, `manifest.desktop.linux.x64.1.8.12.json`, `manifest.desktop.macos.arm64.1.8.12.json`, `manifest.desktop.macos.x64.1.8.12.json`, `manifest.desktop.windows.arm64.1.8.12.json`, `manifest.desktop.windows.x64.1.8.12.json`, `manifest.desktop.windows.x86.1.8.12.json` | metadata |
+| Checksums | `sha256.android.1.8.12`, `sha256.container.1.8.12`, `sha256.desktop.linux.arm64.1.8.12`, `sha256.desktop.linux.x64.1.8.12`, `sha256.desktop.macos.arm64.1.8.12`, `sha256.desktop.macos.x64.1.8.12`, `sha256.desktop.windows.arm64.1.8.12`, `sha256.desktop.windows.x64.1.8.12`, `sha256.desktop.windows.x86.1.8.12` | integrity metadata |
+
 ## Compatibility and upgrade notes
 
 The public package remains `@wenathlan/saddle`. The release does not downgrade the package to `1.8.3`; the active version is `1.8.12`. Version `1.8.21` is reserved for the next objective-driven research and implementation cycle. SignPath Foundation approval and production code-signing credentials remain caller-owned and are not implied by this release note.
 
 ## Verification
 
-The prepared state passed 107 active tests, 69 legacy tests, engine build and syntax checks, formatting checks, web TypeScript and Pages build checks, npm pack dry-run, npm audit, flat-native validation and diff hygiene. Final artifact sizes and live download URLs must be filled from the actual GitHub Actions release run rather than estimated in advance.
+The release validation workflow passed, and the live release contains the 38 assets listed above. The original release-event security and mobile jobs were superseded by successful, explicitly labeled manual reruns; no production signing claim is made.
 
 ## References
 

package/docs/releasenotes-1.8.13.md

@@ -17,7 +17,7 @@ Saddle 1.8.13 carries the active code and release-facing manifests forward from
 
 ## Artifact contract
 
-The active workflows derive names from the release tag. The following names are expected for a 1.8.13 run; actual URLs, checksums and sizes must come from the completed CI run.
+The active workflows derive names from the release tag. The `v1.8.13` release was published and contains the generated assets listed below; iOS remains unavailable because Apple signing and provisioning were not configured.
 
 | Surface | Expected artifact family |
 |---|---|
@@ -31,9 +31,37 @@ The active workflows derive names from the release tag. The following names are
 
 Signing remains explicit. `unsigned`, `ci-test-key`, `caller-owned`, `notarized` and a provider-reported status are distinct states. This release note does not claim SignPath approval or production signing.
 
+## Verified attached assets
+
+The release contains **38 attached assets**. Desktop binaries are unsigned, Android APK/AAB files use the explicitly labeled `ci-test-key`, and the container is marked `caller-owned`.
+
+| Surface | Attached assets | Signing |
+|---|---|---|
+| Linux desktop | `saddle.browser.1.8.13.x64.deb`, `saddle.browser.1.8.13.x64.rpm`, `saddle.browser.1.8.13.x64.appimage`, `saddle.browser.1.8.13.arm64.deb`, `saddle.browser.1.8.13.arm64.rpm`, `saddle.browser.1.8.13.arm64.appimage` | `unsigned` |
+| Windows desktop | `saddle.browser.1.8.13.x86.exe`, `saddle.browser.1.8.13.x86.msi`, `saddle.browser.1.8.13.x64.exe`, `saddle.browser.1.8.13.x64.msi`, `saddle.browser.1.8.13.arm64.exe`, `saddle.browser.1.8.13.arm64.msi` | `unsigned` |
+| macOS desktop | `saddle.browser.1.8.13.x64.dmg`, `saddle.browser.1.8.13.x64.app.zip`, `saddle.browser.1.8.13.arm64.dmg`, `saddle.browser.1.8.13.arm64.app.zip` | `unsigned` |
+| Android | `saddle.apk.1.8.13.apk`, `saddle.aab.1.8.13.aab` | `ci-test-key` |
+| Container | `saddle.container.1.8.13.tar.gz` | `caller-owned` |
+| Browser extension | `saddle.extension.1.8.13.zip` | `unsigned` |
+| Manifests | `manifest.android.1.8.13.json`, `manifest.container.1.8.13.json`, `manifest.desktop.linux.arm64.1.8.13.json`, `manifest.desktop.linux.x64.1.8.13.json`, `manifest.desktop.macos.arm64.1.8.13.json`, `manifest.desktop.macos.x64.1.8.13.json`, `manifest.desktop.windows.arm64.1.8.13.json`, `manifest.desktop.windows.x64.1.8.13.json`, `manifest.desktop.windows.x86.1.8.13.json` | metadata |
+| Checksums | `sha256.android.1.8.13`, `sha256.container.1.8.13`, `sha256.desktop.linux.arm64.1.8.13`, `sha256.desktop.linux.x64.1.8.13`, `sha256.desktop.macos.arm64.1.8.13`, `sha256.desktop.macos.x64.1.8.13`, `sha256.desktop.windows.arm64.1.8.13`, `sha256.desktop.windows.x64.1.8.13`, `sha256.desktop.windows.x86.1.8.13` | integrity metadata |
+
+## Registry publication
+
+The six registry workflows derive the version from the same `v1.8.13` release tag through `.github/actions/releaseversion`. The release-event jobs completed successfully for GitHub Packages npm, public npmjs, Maven and RubyGems. GHCR completed successfully after the corrected Buildx and image-hardening rerun. NuGet was rerun manually from `main` and completed successfully with `Saddle.1.8.13.nupkg`; the package is published to GitHub Packages NuGet under the `wenathlan` owner. Public `nuget.org` was not targeted by the repository workflow and is not claimed here.
+
+| Registry | Workflow | Verified version | Result |
+|---|---|---:|---|
+| GHCR | `publishghcr.yml` | `1.8.13` | success after corrected rerun |
+| GitHub Packages npm | `publishgithubnpm.yml` | `1.8.13` | success |
+| Public npmjs | `publishnpmjs.yml` | `1.8.13` | success |
+| Maven GitHub Packages | `publishmaven.yml` | `1.8.13` | success |
+| NuGet GitHub Packages | `publishnuget.yml` | `1.8.13` | success after explicit rerun |
+| RubyGems GitHub Packages | `publishrubygems.yml` | `1.8.13` | success |
+
 ## Verification
 
-The queue, structured extraction, browser context, workflow compensation and retention features passed the active engine and release test suites. The complete release gate must be rerun after the implementation commit before a tag or release is created. The 1.8.21 research set remains the planning label for this feature batch and is not presented as a separate published version.
+The queue, structured extraction, browser context, workflow compensation and retention features passed the active engine and release test suites. The release validation workflow passed, and the live release contains the 38 assets listed above. The original release-event security, GHCR and mobile failures were superseded by successful corrected reruns; production signing remains pending.
 
 ## References
 

package/docs/releasenotes-1.8.14.md

@@ -0,0 +1,67 @@
+# Saddle 1.8.14 release notes
+
+Saddle 1.8.14 carries the active code and release-facing manifests forward from 1.8.13. The 1.8.13 release notes remain the canonical record for the previous artifact set. The comparative 1.8.21 research remains planning material and is not presented as a separate shipped version.
+
+## Changes
+
+| Area | Change |
+|---|---|
+| Version identity | Aligned npm, lockfile, Maven, NuGet, RubyGems, browser extension, Tauri, Capacitor, iOS and crawler metadata to `1.8.14`. The iOS marketing version is `1.8.14` with build `1008014`. |
+| Container | Added a build-stage TypeScript engine compilation, runtime-only `dist` copy, `org.opencontainers.image.version` label and post-push pull/label/CLI smoke validation. |
+| Registry order | Documented GHCR as the first package surface, followed by GitHub Packages npm, public npmjs, Maven, NuGet and RubyGems. |
+| Release automation | Kept the shared release-tag resolver as the only version source; workflows reject tag/package mismatches and do not contain per-release manual versions. |
+| Architecture | Kept the root-first layout, no project-owned `src` directory, transport-neutral exports and caller-owned infrastructure. |
+
+## Artifact contract
+
+The active workflows derive names from the `v1.8.14` release tag. The release was verified with 38 uploaded assets listed below; iOS remains unavailable because Apple signing and provisioning are caller-owned and were not configured.
+
+| Surface | Expected artifact family |
+|---|---|
+| Linux desktop | `saddle.browser.1.8.14.<architecture>.deb`, `.rpm`, `.appimage` |
+| Windows desktop | `saddle.browser.1.8.14.<architecture>.exe`, `.msi` |
+| macOS desktop | `saddle.browser.1.8.14.<architecture>.dmg`, `.app.zip` |
+| Android | `saddle.apk.1.8.14.apk`, `saddle.aab.1.8.14.aab` |
+| iOS | `saddle.ipa.1.8.14.ipa`, `saddle.app.1.8.14.app.zip` |
+| Container | `saddle.container.1.8.14.tar.gz` |
+| Browser extension | `saddle.extension.1.8.14.zip` |
+
+Signing remains explicit. `unsigned`, `ci-test-key`, `caller-owned`, `notarized` and a provider-reported status are distinct states. These notes do not claim SignPath approval or production signing.
+
+## Verified attached assets
+
+The release contains **38 uploaded assets**. Desktop artifacts are unsigned, Android artifacts use the explicitly labeled `ci-test-key`, the container is `caller-owned` and the extension is unsigned.
+
+| Surface | Attached assets | Signing |
+|---|---|---|
+| Linux desktop | `saddle.browser.1.8.14.arm64.appimage`, `saddle.browser.1.8.14.arm64.deb`, `saddle.browser.1.8.14.arm64.rpm`, `saddle.browser.1.8.14.x64.appimage`, `saddle.browser.1.8.14.x64.deb`, `saddle.browser.1.8.14.x64.rpm` | `unsigned` |
+| Windows desktop | `saddle.browser.1.8.14.arm64.exe`, `saddle.browser.1.8.14.arm64.msi`, `saddle.browser.1.8.14.x64.exe`, `saddle.browser.1.8.14.x64.msi`, `saddle.browser.1.8.14.x86.exe`, `saddle.browser.1.8.14.x86.msi` | `unsigned` |
+| macOS desktop | `saddle.browser.1.8.14.arm64.app.zip`, `saddle.browser.1.8.14.arm64.dmg`, `saddle.browser.1.8.14.x64.app.zip`, `saddle.browser.1.8.14.x64.dmg` | `unsigned` |
+| Android | `saddle.apk.1.8.14.apk`, `saddle.aab.1.8.14.aab` | `ci-test-key` |
+| Container | `saddle.container.1.8.14.tar.gz` | `caller-owned` |
+| Browser extension | `saddle.extension.1.8.14.zip` | `unsigned` |
+| Manifests | Nine `manifest.*.1.8.14.json` files covering Android, container, Linux, macOS and Windows | metadata |
+| Checksums | Nine `sha256.*.1.8.14` files covering Android, container, Linux, macOS and Windows | integrity metadata |
+
+## Registry publication
+
+The six registry workflows derive the version from the same `v1.8.14` release tag through `.github/actions/releaseversion`. GHCR is listed first in the package order and must build, scan, push, pull and smoke-test the published image before the job is successful. The remaining workflows publish GitHub Packages npm, public npmjs, Maven, NuGet GitHub Packages and RubyGems from the same validated version. Public `nuget.org` is not targeted by the current repository workflow.
+
+| Registry | Workflow | Version | Verified result |
+|---|---|---:|---|
+| GHCR | `publishghcr.yml` | `1.8.14` | success; run `31806235613` also pulled, inspected and smoke-tested the image |
+| GitHub Packages npm | `publishgithubnpm.yml` | `1.8.14` | success; run `31806235570` |
+| Public npmjs | `publishnpmjs.yml` | `1.8.14` | success; run `31806235515` |
+| Maven GitHub Packages | `publishmaven.yml` | `1.8.14` | success; run `31806235540` |
+| NuGet GitHub Packages | `publishnuget.yml` | `1.8.14` | success; run `31806235606` |
+| RubyGems GitHub Packages | `publishrubygems.yml` | `1.8.14` | success; run `31806235523` |
+
+## Verification policy
+
+Local gates passed before the tag was created. Desktop run `31806235468` completed successfully. The release-event mobile run `31806235484` correctly refused to claim production signing because the Android secrets were absent; manual run `31806605994` with `allow_test_signing=true` completed successfully and attached the APK/AAB as `ci-test-key`. Production signing remains pending until caller-owned certificates and provider configuration are supplied.
+
+## References
+
+[1]: https://github.com/wenathlan/saddle "Saddle source repository"
+[2]: https://github.com/wenathlan/saddle/releases "Saddle release archive"
+[3]: https://github.com/wenathlan/saddle/blob/main/docs/releasenotes-1.8.13.md "Saddle 1.8.13 release notes"

package/docs/releasenotes-1.8.15.md

@@ -0,0 +1,37 @@
+# Saddle 1.8.15
+
+Saddle 1.8.15 adds transport-neutral contracts for verified storage, bounded working sets, isolated transformations, provider selection and immutable delivery. The shared core remains declarative: it does not create runners, start containers, register service workers, mutate DNS, transfer artifacts or execute binaries without a caller-owned adapter.
+
+## Changes
+
+| Area | Change |
+|---|---|
+| Storage | Added verified pool reads, primary/mirror/fan-out writes, quorum evidence, operation budgets, range reads, repair plans and verified-source restore plans. |
+| Memory | Added bounded working-set admission, capability-gated bridge plans, materialization transitions and declarative cleanup plans. |
+| Transformations | Added magic-byte classification, bounded WASM plans, isolated adapters, archive inspection limits and cache eligibility controls. |
+| Providers | Added capability-based selection, caller preferences, dry-run rendering, integrity-bound handoff and cancellation plans with unknown remote state preserved. |
+| Delivery | Added immutable chunk manifests, verification without evaluation, PWA/CDN capability reports, Mini App validation requirements and DNS/application bridge descriptors. |
+| Validation | Active tests increased to 132 while the 69 legacy tests remain green; package, flat native, web and audit gates passed. |
+
+## Artifact contract
+
+The release workflows derive artifact names and package versions from `v1.8.15`. The following artifact families are expected from the release pipelines; signing remains explicit and is never inferred from a filename.
+
+| Surface | Artifact family |
+|---|---|
+| Linux desktop | `saddle.browser.1.8.15.<architecture>.deb`, `.rpm`, `.appimage` |
+| Windows desktop | `saddle.browser.1.8.15.<architecture>.exe`, `.msi` |
+| macOS desktop | `saddle.browser.1.8.15.<architecture>.dmg`, `.app.zip` |
+| Android | `saddle.apk.1.8.15.apk`, `saddle.aab.1.8.15.aab` |
+| iOS | `saddle.ipa.1.8.15.ipa`, `saddle.app.1.8.15.app.zip` |
+| Container | `saddle.container.1.8.15.tar.gz` |
+| Browser extension | `saddle.extension.1.8.15.zip` |
+
+## Publication and verification policy
+
+The six registry workflows publish from the same validated release tag, in container-first order: GHCR, GitHub Packages npm, public npmjs, Maven, NuGet GitHub Packages and RubyGems. GHCR must build, scan, push, pull, inspect its OCI version label and complete a smoke check. Production signing remains caller-owned; the release does not claim SignPath approval, Apple notarization or a production Android signing key unless a workflow reports those states.
+
+## References
+
+[1]: https://github.com/wenathlan/saddle "Saddle source repository"
+[2]: https://github.com/wenathlan/saddle/releases "Saddle release archive"

package/docs/talks9/README (2).md

@@ -2,7 +2,7 @@
 
 Binary computing agent, agent browser, computer-use, scraper and packager.
 
-> **Storage turned into memory.** Saddle runs on other people's computers (GitHub Actions, Forgejo, Gitea, GitLab, Codeberg, free Docker containers) and turns unlimited third-party storage buckets into virtual RAM/GPU/CPU. **Nothing runs on the operator's local machine.** Ships as a library, CLI, binary, n8n node, CRX extension, Android/iOS and Tauri desktop app. Package `@devthink/saddle` — published to npm, GitHub Packages, Maven, NuGet, RubyGems and GitHub Containers (auto-mirrored to jsDelivr). It is simultaneously **sandbox + virtual machine + webhook server + workflow orchestrator (n8n-style) + packager + deployment system + integration platform** — sometimes each *is* the other three; the virtual VMs expose vCPU/VRAM/vGPU/virtual processing to the user, 100% on the internet, 100% virtual.
+> **Storage turned into memory.** Saddle runs on other people's computers (GitHub Actions, Forgejo, Gitea, GitLab, Codeberg, free Docker containers) and turns unlimited third-party storage buckets into virtual RAM/GPU/CPU. **Nothing runs on the operator's local machine.** Ships as a library, CLI, binary, n8n node, CRX extension, Android/iOS and Tauri desktop app. Package `@wenathlan/saddle` — published to npm, GitHub Packages, Maven, NuGet, RubyGems and GitHub Containers (auto-mirrored to jsDelivr). It is simultaneously **sandbox + virtual machine + webhook server + workflow orchestrator (n8n-style) + packager + deployment system + integration platform** — sometimes each *is* the other three; the virtual VMs expose vCPU/VRAM/vGPU/virtual processing to the user, 100% on the internet, 100% virtual.
 
 This document is the single source of truth, arranged as a progressive arc: **Foundation (1–6)**, **Engine (7–17)**, **Productization (18–31)**. Nothing here is attributed to external tooling; it is the project's own architecture.
 
@@ -368,7 +368,7 @@ Where a platform has no formal app portal (Telegram, Matrix), the robot is still
 
 Sources: `api.kilo.ai`, `opencode.ai/zen`, `openrouter.ai`. Count with `js-tiktoken` / `gpt-tokenizer`.
 
-22. **Packaging & Publishing** — `@devthink/saddle` as **lib + CLI** (`saddle`); install `npm install @devthink/saddle` (global for CLI). Package layout: `lib/index.js` + `bin/saddle.js` (`node:util parseArgs{command, platform, token, verbose}`, default `help`), exports map subpaths `./browser, ./bot, ./captcha, ./memory-engine, ./deploy` (import/require dual) + `./index.cjs`. Scripts: `"build":"tsc"`, `"test":"vitest run"`, `"lint":"biome check ."`, `"typecheck":"tsc --noEmit"`, `"prepublishOnly":"npm run build && npm test"`, `"prepare":"husky"`. Version: semver `npm version patch|minor|major` + `git push --follow-tags`. Library API: `import { SaddleRobot } from '@devthink/saddle'; await robot.start(); await robot.executeCommand(cmd)`. `npm publish --access public` → auto-mirror jsDelivr/UNPKG/esm.sh.
+22. **Packaging & Publishing** — `@wenathlan/saddle` as **lib + CLI** (`saddle`); install `npm install @wenathlan/saddle` (global for CLI). Package layout: `lib/index.js` + `bin/saddle.js` (`node:util parseArgs{command, platform, token, verbose}`, default `help`), exports map subpaths `./browser, ./bot, ./captcha, ./memory-engine, ./deploy` (import/require dual) + `./index.cjs`. Scripts: `"build":"tsc"`, `"test":"vitest run"`, `"lint":"biome check ."`, `"typecheck":"tsc --noEmit"`, `"prepublishOnly":"npm run build && npm test"`, `"prepare":"husky"`. Version: semver `npm version patch|minor|major` + `git push --follow-tags`. Library API: `import { SaddleRobot } from '@wenathlan/saddle'; await robot.start(); await robot.executeCommand(cmd)`. `npm publish --access public` → auto-mirror jsDelivr/UNPKG/esm.sh.
 
 | Registry | What |
 |----------|------|

package/docs/talks9/README.md

@@ -22,13 +22,13 @@ Saddle is a **JavaScript ESM engine** for jobs that move data between storage, a
 Saddle requires **Node.js 22 or newer**.
 
 ```bash
-npm install @devthink/saddle
+npm install @wenathlan/saddle
 ```
 
 The public API uses injected transports. A caller can use the built-in `fetch`, a custom fetcher, a browser adapter, a storage backend or a runner without changing the core contracts.
 
 ```js
-import { scrapeurl, formatforagent } from "@devthink/saddle";
+import { scrapeurl, formatforagent } from "@wenathlan/saddle";
 
 const result = await scrapeurl("https://example.com", {
   format: "markdown"
@@ -95,7 +95,7 @@ import {
   localmemory,
   localstorage,
   scheduler
-} from "@devthink/saddle";
+} from "@wenathlan/saddle";
 
 const events = eventbus();
 const run = engine({
@@ -155,7 +155,7 @@ The release is distributed through the following GitHub Packages registries.
 | NuGet | `Saddle 1.0.0` | [`publishnuget.yml`](.github/workflows/publishnuget.yml) |
 | RubyGems | `saddle 1.0.0` | [`publishrubygems.yml`](.github/workflows/publishrubygems.yml) |
 
-The canonical JavaScript package name remains `@devthink/saddle` for the public npmjs workflow. GitHub Packages uses `@iakadion/saddle` because the GitHub Actions token is authorized for the repository owner namespace.
+The canonical JavaScript package name remains `@wenathlan/saddle` for the public npmjs workflow. GitHub Packages uses `@iakadion/saddle` because the GitHub Actions token is authorized for the repository owner namespace.
 
 ## Development