@wenathlan/saddle 1.8.14 → 1.8.16

package/docs/artifactavailability.md

@@ -117,7 +117,7 @@ Each surface also emits `sha256.*.1.8.13`, `manifest.*.1.8.13.json` and, where e
 
 ## 1.8.14 release matrix
 
-Version 1.8.14 keeps the release-tag-derived matrix and adds post-push container pull and smoke validation. The implementation records retention policy and keep/prune decisions but never removes caller-owned files. The release is expected to contain the same 38-asset family; iOS remains unavailable until caller-owned Apple signing and provisioning are configured.
+Version 1.8.14 keeps the release-tag-derived matrix and adds post-push container pull and smoke validation. The implementation records retention policy and keep/prune decisions but never removes caller-owned files. The release contains 38 verified assets; iOS remains unavailable until caller-owned Apple signing and provisioning are configured.
 
 | Surface | Architectures | Artifact naming contract |
 | --- | --- | --- |
@@ -130,3 +130,15 @@ Version 1.8.14 keeps the release-tag-derived matrix and adds post-push container
 | Browser extension | Manifest V3 | `saddle.extension.1.8.14.zip` |
 
 Each surface also emits `sha256.*.1.8.14`, `manifest.*.1.8.14.json` and, where enabled by the release path, SBOM and provenance metadata. The Android manifest records `ci-test-key`, desktop manifests record `unsigned` and the container manifest records `caller-owned`. The container image additionally records `org.opencontainers.image.version=1.8.14`; the post-push workflow pulls that exact version and runs the CLI help smoke test.
+
+The verified 1.8.14 release contains six Linux assets, six Windows assets, four macOS assets, two Android assets, one container archive, one browser extension, nine manifests and nine checksum files. The release-event mobile job did not bypass missing production credentials; the successful manual rerun used the explicit `ci-test-key` path.
+
+## 1.8.15 verified release matrix
+
+The published [v1.8.15 release](https://github.com/wenathlan/saddle/releases/tag/v1.8.15) contains 38 attached assets: six Linux desktop artifacts, six Windows desktop artifacts, four macOS desktop artifacts, two Android artifacts, one container archive, one browser extension, nine manifests, and nine checksum files. The primary artifacts use the dotted lowercase names `saddle.browser.1.8.15.<architecture>.<format>`, `saddle.apk.1.8.15.apk`, `saddle.aab.1.8.15.aab`, `saddle.container.1.8.15.tar.gz`, and `saddle.extension.1.8.15.zip`.
+
+The available metadata files are `manifest.android.1.8.15.json`, `manifest.container.1.8.15.json`, the seven desktop `manifest.*.1.8.15.json` files, and the matching nine `sha256.*.1.8.15` files. The release record identifies Android as `ci-test-key`, desktop surfaces as `unsigned`, and the container as `caller-owned`; those declared states do not imply production signing, notarization, or registry trust.
+
+## 1.8.16 candidate release matrix
+
+Version 1.8.16 preserves the tag-derived 38-asset contract described in [releasenotes-1.8.16.md](releasenotes-1.8.16.md). Before tag workflows complete, every 1.8.16 entry is an expected output rather than an availability claim. The new release-evidence API can normalize and evaluate results supplied by completed verification adapters, but it cannot generate artifacts, change their signing state, publish them, or validate their registry availability.

package/docs/ecosystemplan.md

@@ -46,7 +46,7 @@ Each block follows the same loop:
 3. Define the smallest transport-neutral contract.
 4. Implement grouped logic in the domain folder without adding a vendor dependency unless required.
 5. Add deterministic tests with fake transports and no real credentials.
-6. Update API docs, README claims, changelog and `todo.md`.
+6. Update API docs, README claims, changelog and `docs/todo.md`.
 7. Run format, syntax, tests, package and security checks.
 8. Commit and push the block before starting the next one.
 

package/docs/enginearchitecture.md

@@ -32,11 +32,41 @@ The public contract uses plain objects and factory functions. The engine never r
 | contract | responsibility | open choice |
 |---|---|---|
 | `storageadapter` | put, get, head, delete, and list artifacts | local, s3 compatible, webdav, hf, kaggle, or another backend |
+| `storagepool` | read verified replicas, write to an explicit quorum, describe capabilities, and produce a repair plan | caller-authorized adapters with explicit priority and no background replication |
 | `localmemory` | prepare, sync, and cleanup a working set | tmpfs, mmap, sqlite, r2, or a remote bridge |
+| `workingbudget` / `workingadmission` / `bridgeplan` | plan bounded materialization and host-memory operations | caller-owned host adapter; the transport-neutral core never mounts, swaps, or executes a shell command |
+| `providerchain` / `artifacthandoff` | select a declared eligible runner and prepare immutable transfer evidence | caller-authorized provider reports and a caller-owned dispatch or storage adapter |
+| `deliverymanifest` / `verifydelivery` / `pwaplan` | verify immutable transport chunks and describe offline registration requirements | caller-owned CDN or web host; no dynamic import or service-worker registration from the core |
 | `scheduler` | select the first available provider by stable priority | github, forgejo, gitea, gitlab, hf, kaggle, or custom |
 | `engine` | coordinate the lifecycle and emit events | library, cli, browser, desktop, mobile, or service |
 | `validatesession` | accept a versioned session record | browser capture, replay, or external event source |
 
+`storagepool` is an additive storage contract. It selects members in stable caller-configured priority order, accepts only caller-owned adapters, verifies a returned digest when one is supplied by the caller or manifest, and returns per-member evidence. A quorum write reports partial outcomes and fails when the requested threshold is not met. `repairplan` is declarative: it identifies a source and candidate targets but never starts a background repair, probes an account, or mutates an adapter.
+
+`workingadmission` selects serializable candidates against byte and entry budgets without reading data. `bridgeplan` can describe `temporaryfile`, `mmap`, `tmpfs`, `zram`, or `swap` only when a caller declares the capability. A returned `caller-executes` result contains preconditions and cleanup ownership; an unsupported capability is reported without a probe or side effect.
+
+`materializationledger` records only validated materialization transitions and produces a `caller-cleans` plan. It does not unlink a file, unmount a volume, modify swap, or delete a remote replica.
+
+`magicbytes`, `wasmplan`, `transformationkey`, `transformationcache`, and `executeisolated` define a separate binary boundary. The module classifies verified byte prefixes, plans bounded WASM work, invalidates cache reuse when source, compiler, key, or policy differ, and calls an injected isolated adapter only. It never creates a process, a container, a filesystem mount, or a network connection by itself.
+
+`cacheeligibility` rejects reuse for outputs that are unverified, secret-bearing, private, environment-bound, or partial. It reports normalized reasons and never attempts to inspect, upload, or redact an artifact.
+
+`archivelimits` and `archiveinspection` validate a caller-provided archive inventory before extraction. The contract rejects excess entry count, nested depth, output bytes, decompression ratio, absolute paths, and traversal paths. `extractarchive` requires an accepted inspection and an injected adapter, so the core neither opens an archive nor writes an extracted file.
+
+`providerchain` consumes only explicit provider reports. It rejects unavailable, under-capacity, or capability-incompatible candidates with evidence, chooses the remaining candidate by stable priority, and emits a `caller-dispatches` plan rather than a remote request. `artifacthandoff` requires an artifact digest, size, provider identity, and retention choice before a caller transfers output to storage.
+
+`renderdispatch` can serialize an existing dispatch plan only through an injected adapter. It does not post to a forge, create a workflow run, or own an authentication token.
+
+`cancellationplan` represents a caller request to cancel a remote run. It deliberately reports the remote state as `unknown` until the selected provider adapter confirms an outcome, and it leaves any compensation decision to the caller.
+
+`deliverymanifest` keeps ordered chunks immutable through content type, size, and SHA-256 metadata. `verifydelivery` checks received bytes without evaluating JavaScript or WASM. `pwaplan` only describes scope, offline intent, update policy, and declared service-worker support; the host decides whether to register anything.
+
+`cdncapabilities` records only caller-reported delivery properties such as immutable caching, purge support, range delivery, integrity headers, CORS, and visibility. It never performs a CDN probe, purge, upload, or configuration mutation.
+
+`releaseevidence` evaluates caller-supplied supply-chain and release metadata as data. It normalizes a subject digest, producer, workflow, evidence kind, verification method, timestamp and explicit status. `evaluateevidence` produces only `accepted`, `rejected`, or `insufficient` with stable reason codes; it never treats an unchecked declaration as a signature, trust decision, compliance result, or vulnerability assessment. `evidencefromverification` converts an already-completed `verifyassets` result into `checked` checksum evidence, retaining its explicit signing state as metadata and never upgrading an `unsigned` or caller-owned state into a signing claim. `releasereadiness` binds a source tag, observed manifest versions, gates, artifact-plan digest, publication targets, signing state, and evidence result into a serializable receipt. These contracts do not edit versions, create a tag, trigger a workflow, publish, sign, scan, download, or contact a registry.
+
+`miniappplan`, `dnsplan`, and `applicationbridge` add deployment-neutral application requirements. Mini App plans reject token-bearing input and require an HTTPS origin plus a caller-selected validation method. DNS records list ownership, DNSSEC and HTTPS requirements but cannot buy a domain, change a zone, or obtain a certificate. Surface bridges only report declared capabilities for browser, desktop, mobile, extension, and Mini App targets.
+
 ## execution lifecycle
 
 ```text

package/docs/libraryapi.md

@@ -39,6 +39,8 @@ The public API is designed around injected transports. Consumers can use the sam
 | `commandguard` | enforce caller-defined bot command scopes |
 | `deliveryqueue` | retry webhook deliveries and retain dead letters |
 | `nodeserver` | expose a Web Request/Response handler through Node HTTP |
+| `releaseevidence` / `evaluateevidence` | normalize caller-supplied evidence and evaluate it against explicit policy with bounded decision reasons |
+| `evidencefromverification` / `releasereadiness` | map an already-valid local checksum result and assemble a descriptive readiness receipt without performing a release |
 | `@wenathlan/saddle/browser-playwright` | optional Node-only Playwright session adapter; the peer is caller-installed and the root remains vendor-neutral |
 
 ```js
@@ -56,10 +58,12 @@ The `fetcher`, browser adapter, persistence adapter, proxy pool, captcha solver,
 
 ## package surfaces
 
-The package exposes explicit subpaths for `./browser`, `./bot`, `./captcha`, `./memory-engine`, and `./deploy`. Desktop, mobile, target-plan and n8n contracts are exported from the root entry; the root entry remains the complete compiled JavaScript API with generated TypeScript declarations for consumers that prefer one import.
+The package exposes explicit subpaths for `./browser`, `./bot`, `./captcha`, `./memory-engine`, `./deploy`, and `./release-evidence`. Desktop, mobile, target-plan and n8n contracts are exported from the root entry; the root entry remains the complete compiled JavaScript API with generated TypeScript declarations for consumers that prefer one import.
 
 The `./extension` subpath exposes browser-neutral message, snapshot and service-worker routing contracts. The concrete Manifest V3 files live in `extension/`; they are not imported by the core at runtime and do not require Chrome when the library is used as a Node package. The browser surface also exposes snapshots, tab/frame context, action results, bounded action batches and recording through `./browser`.
 
 The current release exposes `desktopmanifest`, `mobilemanifest`, `desktopadapter`, `mobileadapter`, `n8nnode`, `n8nmatch`, `n8nexecute`, `controlsurface`, `controlservice`, and `workerbridge`. These factories describe surface boundaries and invoke caller-owned handlers; they do not install a native toolkit, start an n8n server, create a dashboard, or store credentials.
 
+`releaseevidence` and `evaluateevidence` retain the status that a caller supplies instead of asserting a security property. `evidencefromverification` accepts only an already-valid `verifyassets` result and maps its checksum inventory to `checked` evidence; its signing field remains metadata, so `unsigned`, `caller-owned`, or `caller-configured` does not become a signature or reputation claim. `releasereadiness` is descriptive: it cannot alter files, create tags, invoke CI, publish artifacts, sign content, or contact registries.
+
 The root entry is cross-runtime safe for the tested core contract. Filesystem, Node HTTP, persistent queue, file sessions, local memory and captcha evidence adapters remain available through explicit Node-only files or subpaths. `runtimecontract` reports the capabilities of the current global scope, while `memorystorage` provides a process-local backend for browser workers, Deno, Bun and deterministic tests.

package/docs/plans/00.index.md

@@ -1,6 +1,6 @@
 # Index
 
-Project: **UKA** — computer use agent, sandbox for AI and captcha bypass. Super bot with computational memory. Package `@devthink/saddle`. Domain acquired.
+Project: **UKA** — computer use agent, sandbox for AI and captcha bypass. Super bot with computational memory. Package `@wenathlan/saddle`. Domain acquired.
 
 Theme: computer use, bypasses, captcha, sandbox for AI, container for AI, multi-platform bot, storage-to-compute memory transformation.
 
@@ -30,7 +30,7 @@ Theme: computer use, bypasses, captcha, sandbox for AI, container for AI, multi-
 | 37 | [deploystrategy.md](./37.deploystrategy.md) | Deploy strategies (Netlify, Vercel, CI/CD, Docker, VM) |
 | 36 | [computational.memory.md](./36.computational.memory.md) | Storage-to-compute memory transformation system |
 | 39 | [multi.platform.bot.md](./39.multi.platform.bot.md) | Multi-platform bot (GitHub, GitLab, Forgejo, Gitea, Discord) |
-| 40 | [npm.publish.md](./40.npm.publish.md) | NPM package publishing (`@devthink/saddle`) |
+| 40 | [npm.publish.md](./40.npm.publish.md) | NPM package publishing (`@wenathlan/saddle`) |
 | 46 | [scdnintegration.md](./46.scdnintegration.md) | SCDN integration for assets and deployment |
 | 44 | [reference.md](./44.reference.md) | Reference index for all saddle documentation |
 | 33 | [bots.codigo.revisao.md](./33.bots.codigo.revisao.md) | Best AI code review bots (research) |

package/docs/plans/06.dependencies.md

@@ -1,6 +1,6 @@
 # 06 Dependencies
 
-Dependency list of the `@devthink/UKA` package, grouped by function. Total: 65 packages (including the dev tooling set). The user asked for "50 to 60, or 60+. Counting 10 more", so this set covers browser automation, ai/vision, sandbox, server, db, storage and validation.
+Dependency list of the `@wenathlan/UKA` package, grouped by function. Total: 65 packages (including the dev tooling set). The user asked for "50 to 60, or 60+. Counting 10 more", so this set covers browser automation, ai/vision, sandbox, server, db, storage and validation.
 
 ## Browser automation and mouse (8)
 1. `playwright` — real brave/chromium automation via cdp.

package/docs/plans/18.research.content.extraction.md

@@ -396,8 +396,8 @@ OpenGraph (OG) e Twitter Card são metadados usados para social sharing. Menos c
 
 <!-- Twitter Card -->
 <meta name="twitter:card" content="summary_large_image">
-<meta name="twitter:site" content="@devthink">
-<meta name="twitter:creator" content="@nathlan">
+<meta name="twitter:site" content="@wenathlan">
+<meta name="twitter:creator" content="@nasblor">
 <meta name="twitter:title" content="Título da Página">
 <meta name="twitter:description" content="Descrição da Página">
 <meta name="twitter:image" content="https://example.com/image.jpg">
@@ -868,7 +868,7 @@ console.log(result.siteName);
 
 ### turndown 7.2.4 (Padrão)
 
-`turndown` é o conversor HTML→Markdown mais popular. Usado pelo `@devthink/webscrape`.
+`turndown` é o conversor HTML→Markdown mais popular. Usado pelo `@wenathlan/webscrape`.
 
 ```ts
 import TurndownService from 'turndown';

package/docs/plans/22.research.universal.runtime.md

@@ -189,7 +189,7 @@ export async function readFile(path: string): Promise<string | null> {
 
 ```json
 {
-  "name": "@devthink/webscrape",
+  "name": "@wenathlan/webscrape",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -216,16 +216,16 @@ export async function readFile(path: string): Promise<string | null> {
 
 ```typescript
 // Node.js
-import { scrape } from '@devthink/webscrape/node';
+import { scrape } from '@wenathlan/webscrape/node';
 
 // Browser
-import { scrape } from '@devthink/webscrape/browser';
+import { scrape } from '@wenathlan/webscrape/browser';
 
 // Deno
-import { scrape } from '@devthink/webscrape/deno';
+import { scrape } from '@wenathlan/webscrape/deno';
 
 // Universal (só APIs comuns)
-import { scrape } from '@devthink/webscrape';
+import { scrape } from '@wenathlan/webscrape';
 ```
 
 ### 4.3. unenv polyfills
@@ -615,10 +615,10 @@ npx @arethetypeswrong/cli
 
 **Exemplo de output:**
 ```
-@devthink/webscrape
+@wenathlan/webscrape
 
   "import" - ESM
-    ✅ @devthink/webscrape → ./dist/index.js
+    ✅ @wenathlan/webscrape → ./dist/index.js
     ✅ Types: ./dist/index.d.ts
 
   "require" - CJS
@@ -626,7 +626,7 @@ npx @arethetypeswrong/cli
     💡 Add a "require" condition
 
   "browser" - Browser ESM
-    ✅ @devthink/webscrape → ./dist/browser.js
+    ✅ @wenathlan/webscrape → ./dist/browser.js
 ```
 
 ### 9.3. other tools
@@ -636,7 +636,7 @@ npx @arethetypeswrong/cli
 npx arethetypeswrong --pack
 
 # Verificar size do bundle
-npx bundlephobia @devthink/webscrape
+npx bundlephobia @wenathlan/webscrape
 
 # Verificar dependências circulares
 npx madge --circular src/
@@ -896,7 +896,7 @@ export async function loadConfig(root = '.'): Promise<Config | null> {
 
 ```json
 {
-  "name": "@devthink/webscrape",
+  "name": "@wenathlan/webscrape",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",

package/docs/plans/28.action.plan.md

@@ -2,7 +2,7 @@
 
 ## Phase: planning + research done
 - [x] Folder structure (mirrors `cli`/`debonair`): `docs/plans`, `docs/talks`, `docs/logs`, `tests/{examples,output,scripts}`, `web`, `.github/workflows`.
-- [x] Config files: `package.json` (`@devthink/saddle`, 65 deps), `tsconfig.json`, `biome.json`, `vitest.config.ts`, `.github/workflows/saddle-tests.yml`, `.gitignore`, `.npmrc`, `.nvmrc`, `README.md`.
+- [x] Config files: `package.json` (`@wenathlan/saddle`, 65 deps), `tsconfig.json`, `biome.json`, `vitest.config.ts`, `.github/workflows/saddle-tests.yml`, `.gitignore`, `.npmrc`, `.nvmrc`, `README.md`.
 - [x] Research done (computer use, hcaptcha bypass, vercel sandbox, atlas agent browser).
 - [x] Planning docs in `docs/plans/` (01 to 12 + index).
 - [x] Applied skill arch: no `src/`, no vercel/netlify functions, mysql2, socket, no localhost, lowercase files, production = `web/`.

package/docs/plans/35.comparativo.concorrencia.md

@@ -8,7 +8,7 @@
 
 ## Sumário Executivo
 
-`@devthink/webscrape` é um toolkit de scraping all-in-one que ocupa um nicho único: combina HTTP scraping, browser automation, serialização multi-formato, formatação para IA e um servidor HTTP — tudo em um único pacote TypeScript, sem depender de serviços em nuvem. A análise técnica revela que, enquanto competitors como Crawlee e Scrapy dominam em infraestrutura de produção (filas persistentes, Docker, anti-detection), webscrape supera em integração com IA, estimativa de tokens e chunking para RAG.
+`@wenathlan/webscrape` é um toolkit de scraping all-in-one que ocupa um nicho único: combina HTTP scraping, browser automation, serialização multi-formato, formatação para IA e um servidor HTTP — tudo em um único pacote TypeScript, sem depender de serviços em nuvem. A análise técnica revela que, enquanto competitors como Crawlee e Scrapy dominam em infraestrutura de produção (filas persistentes, Docker, anti-detection), webscrape supera em integração com IA, estimativa de tokens e chunking para RAG.
 
 ---
 
@@ -226,14 +226,14 @@ Nenhum outro competitor suporta Bun nativamente. Crawlee e Puppeteer são Node-o
 
 ```typescript
 // Um pacote faz TUDO:
-import { scrapeUrl } from '@devthink/webscrape/scrape';
-import { crawl } from '@devthink/webscrape/crawler';
-import { batchScrape } from '@devthink/webscrape/batch';
-import { serializeResult } from '@devthink/webscrape/serialize';
-import { formatForAgent } from '@devthink/webscrape/agent';
-import { chunkMarkdown } from '@devthink/webscrape/chunking';
-import { generateLlmsTxt } from '@devthink/webscrape/llms-txt';
-import { createServer } from '@devthink/webscrape/server';
+import { scrapeUrl } from '@wenathlan/webscrape/scrape';
+import { crawl } from '@wenathlan/webscrape/crawler';
+import { batchScrape } from '@wenathlan/webscrape/batch';
+import { serializeResult } from '@wenathlan/webscrape/serialize';
+import { formatForAgent } from '@wenathlan/webscrape/agent';
+import { chunkMarkdown } from '@wenathlan/webscrape/chunking';
+import { generateLlmsTxt } from '@wenathlan/webscrape/llms-txt';
+import { createServer } from '@wenathlan/webscrape/server';
 ```
 
 **Nenhum competitor combina:**
@@ -373,7 +373,7 @@ O Redis serialization (`JSON.SET` command) é exclusivo — permite popular Redi
 
 ```json
 // webscrape: 1 package
-@devthink/webscrape
+@wenathlan/webscrape
 
 // Crawlee: multi-package
 crawlee

package/docs/plans/40.npm.publish.md

@@ -1,6 +1,6 @@
 # NPM Package Publishing for Saddle Robot
 
-> Package `@devthink/saddle` published to NPM registry.
+> Package `@wenathlan/saddle` published to NPM registry.
 > Acts as both library and CLI binary.
 
 ## Overview
@@ -16,7 +16,7 @@ bypass, and memory engine capabilities.
 
 ```json
 {
-  "name": "@devthink/saddle",
+  "name": "@wenathlan/saddle",
   "version": "1.0.0",
   "description": "Super bot: agent browser, captcha bypass, multi-platform GitHub/GitLab/Forgejo/Gitea automation with computational memory",
   "main": "lib/index.js",
@@ -129,11 +129,11 @@ git push --follow-tags
 ### As Library
 
 ```bash
-npm install @devthink/saddle
+npm install @wenathlan/saddle
 ```
 
 ```javascript
-import { SaddleRobot } from '@devthink/saddle'
+import { SaddleRobot } from '@wenathlan/saddle'
 
 const robot = new SaddleRobot({
   platform: 'github',
@@ -146,7 +146,7 @@ await robot.start()
 ### As CLI
 
 ```bash
-npm install -g @devthink/saddle
+npm install -g @wenathlan/saddle
 
 saddle --help
 saddle capture --url https://example.com
@@ -200,7 +200,7 @@ main()
 ## Scoped Package Structure
 
 ```
-@devthink/saddle/
+@wenathlan/saddle/
 ├── lib/
 │   ├── index.js          main entry point
 │   ├── index.cjs         CommonJS entry point

package/docs/plans/41.o.que.falta.md

@@ -8,7 +8,7 @@
 
 ## Sumário
 
-`@devthink/webscrape` é um toolkit all-in-one que combina scraping, serialização multi-formato, AI formatting e chunking para RAG — um posicionamento único no mercado. No entanto, 3 gaps críticos impedem a adoção em produção: ausência de anti-detection real, queue persistente e suporte Docker. Este documento lista tudo que falta, priorizado por impacto.
+`@wenathlan/webscrape` é um toolkit all-in-one que combina scraping, serialização multi-formato, AI formatting e chunking para RAG — um posicionamento único no mercado. No entanto, 3 gaps críticos impedem a adoção em produção: ausência de anti-detection real, queue persistente e suporte Docker. Este documento lista tudo que falta, priorizado por impacto.
 
 ---
 
@@ -146,7 +146,7 @@
 - Puppeteer: `chrome-devtools-mcp`
 
 **Implementação necessária:**
-1. Criar pacote `@devthink/webscrape-mcp`
+1. Criar pacote `@wenathlan/webscrape-mcp`
 2. Expor endpoints como MCP tools: `scrape`, `crawl`, `batch`, `extract`, `serialize`
 3. Usar SDK oficial `@modelcontextprotocol/sdk`
 4. Adicionar configuração MCP ao `cli.ts`

package/docs/plans/42.pesquisa.concorrencia.md

@@ -1,7 +1,7 @@
 # Competitive Research: webscrape vs. 7 Competitors
 
 > **Date:** 2026-06-08
-> **Objective:** Deep analysis of 7 direct/indirect competitors to identify gaps, opportunities, and architectural insights for the `@devthink/webscrape` toolkit.
+> **Objective:** Deep analysis of 7 direct/indirect competitors to identify gaps, opportunities, and architectural insights for the `@wenathlan/webscrape` toolkit.
 
 ---
 
@@ -601,7 +601,7 @@ Request → [Downloader Middlewares] → Downloader → [Spider Middlewares] →
 **Impact:** Cannot be used by AI agents (Claude, Cursor, Windsurf) natively.
 
 **Recommendation:**
-- Create `@devthink/webscrape-mcp` package
+- Create `@wenathlan/webscrape-mcp` package
 - Expose scrape/crawl/batch endpoints as MCP tools
 - Integrate with Claude Desktop, VS Code, Cursor
 

package/docs/plans/43.plan.universal.architecture.md

@@ -2,7 +2,7 @@
 
 ## 1. Visão Geral
 
-A biblioteca `@devthink/webscrape` precisa funcionar em **TODOS os modos**:
+A biblioteca `@wenathlan/webscrape` precisa funcionar em **TODOS os modos**:
 
 | Modo | Como funciona |
 |------|--------------|
@@ -404,7 +404,7 @@ export default defineConfig({
 
 ```json
 {
-  "name": "@devthink/webscrape",
+  "name": "@wenathlan/webscrape",
   "version": "2.0.0",
   "type": "module",
   "main": "./dist/index.js",

package/docs/plans/44.reference.md

@@ -81,7 +81,7 @@ files, and deployment payloads with edge caching.
 
 ### NPM Publishing
 
-Package `@devthink/saddle` available as both library and
+Package `@wenathlan/saddle` available as both library and
 CLI binary.
 
 ## Architecture Rules (from arch skill)

package/docs/plans/45.robotarchitecture.md

@@ -175,13 +175,13 @@ CMD ["node", "server.js"]
 
 ## NPM Package Publishing
 
-Saddle can be published as an NPM package `@devthink/saddle` for
+Saddle can be published as an NPM package `@wenathlan/saddle` for
 distribution as both a library and a CLI tool.
 
 ### Package Structure
 
 ```
-@devthink/saddle/
+@wenathlan/saddle/
 ├── lib/
 │   ├── browser.js        (agent browser engine)
 │   ├── bot.js            (multi-platform bot engine)
@@ -200,7 +200,7 @@ distribution as both a library and a CLI tool.
 
 | Mode | Entry Point | Usage |
 |------|------------|-------|
-| Library | `require('@devthink/saddle')` | Import as Node module |
+| Library | `require('@wenathlan/saddle')` | Import as Node module |
 | CLI | `saddle --command capture` | Run as terminal command |
 | Binary | `node_modules/.bin/saddle` | Direct execution |
 

package/docs/plans/46.scdnintegration.md

@@ -144,7 +144,7 @@ class SCDNClient {
 
 ```typescript
 // In browser capture module
-import { SCDNClient } from '@devthink/saddle/deploy'
+import { SCDNClient } from '@wenathlan/saddle/deploy'
 
 async function uploadCaptureSession(
   sessionData: SessionData,

package/docs/plans/README.md

@@ -2,7 +2,7 @@
 
 Binary computing agent, agent browser, computer-use, scraper and packager.
 
-> **Storage turned into memory.** Saddle runs on other people's computers (GitHub Actions, Forgejo, Gitea, GitLab, Codeberg, free Docker containers) and turns unlimited third-party storage buckets into virtual RAM/GPU/CPU. **Nothing runs on the operator's local machine.** Ships as a library, CLI, binary, n8n node, CRX extension, Android/iOS and Tauri desktop app. Package `@devthink/saddle` — published to npm, GitHub Packages, Maven, NuGet, RubyGems and GitHub Containers (auto-mirrored to jsDelivr). It is simultaneously **sandbox + virtual machine + webhook server + workflow orchestrator (n8n-style) + packager + deployment system + integration platform** — sometimes each *is* the other three; the virtual VMs expose vCPU/VRAM/vGPU/virtual processing to the user, 100% on the internet, 100% virtual.
+> **Storage turned into memory.** Saddle runs on other people's computers (GitHub Actions, Forgejo, Gitea, GitLab, Codeberg, free Docker containers) and turns unlimited third-party storage buckets into virtual RAM/GPU/CPU. **Nothing runs on the operator's local machine.** Ships as a library, CLI, binary, n8n node, CRX extension, Android/iOS and Tauri desktop app. Package `@wenathlan/saddle` — published to npm, GitHub Packages, Maven, NuGet, RubyGems and GitHub Containers (auto-mirrored to jsDelivr). It is simultaneously **sandbox + virtual machine + webhook server + workflow orchestrator (n8n-style) + packager + deployment system + integration platform** — sometimes each *is* the other three; the virtual VMs expose vCPU/VRAM/vGPU/virtual processing to the user, 100% on the internet, 100% virtual.
 
 This document is the single source of truth, arranged as a progressive arc: **Foundation (1–6)**, **Engine (7–17)**, **Productization (18–31)**. Nothing here is attributed to external tooling; it is the project's own architecture.
 
@@ -368,7 +368,7 @@ Where a platform has no formal app portal (Telegram, Matrix), the robot is still
 
 Sources: `api.kilo.ai`, `opencode.ai/zen`, `openrouter.ai`. Count with `js-tiktoken` / `gpt-tokenizer`.
 
-22. **Packaging & Publishing** — `@devthink/saddle` as **lib + CLI** (`saddle`); install `npm install @devthink/saddle` (global for CLI). Package layout: `lib/index.js` + `bin/saddle.js` (`node:util parseArgs{command, platform, token, verbose}`, default `help`), exports map subpaths `./browser, ./bot, ./captcha, ./memory-engine, ./deploy` (import/require dual) + `./index.cjs`. Scripts: `"build":"tsc"`, `"test":"vitest run"`, `"lint":"biome check ."`, `"typecheck":"tsc --noEmit"`, `"prepublishOnly":"npm run build && npm test"`, `"prepare":"husky"`. Version: semver `npm version patch|minor|major` + `git push --follow-tags`. Library API: `import { SaddleRobot } from '@devthink/saddle'; await robot.start(); await robot.executeCommand(cmd)`. `npm publish --access public` → auto-mirror jsDelivr/UNPKG/esm.sh.
+22. **Packaging & Publishing** — `@wenathlan/saddle` as **lib + CLI** (`saddle`); install `npm install @wenathlan/saddle` (global for CLI). Package layout: `lib/index.js` + `bin/saddle.js` (`node:util parseArgs{command, platform, token, verbose}`, default `help`), exports map subpaths `./browser, ./bot, ./captcha, ./memory-engine, ./deploy` (import/require dual) + `./index.cjs`. Scripts: `"build":"tsc"`, `"test":"vitest run"`, `"lint":"biome check ."`, `"typecheck":"tsc --noEmit"`, `"prepublishOnly":"npm run build && npm test"`, `"prepare":"husky"`. Version: semver `npm version patch|minor|major` + `git push --follow-tags`. Library API: `import { SaddleRobot } from '@wenathlan/saddle'; await robot.start(); await robot.executeCommand(cmd)`. `npm publish --access public` → auto-mirror jsDelivr/UNPKG/esm.sh.
 
 | Registry | What |
 |----------|------|

package/docs/plans/missing-facts.md

@@ -118,7 +118,7 @@ FILE: 40.npm.publish.md
 - Pre-publish checklist
 - As library (npm install) and CLI (npm install -g, saddle --command)
 - Binary entry point: saddle.js
-- Scoped package structure: @devthinking/saddle/
+- Scoped package structure: @wenathlaning/saddle/
 - Versioning strategy: semver (patch/minor/major)
 - 10-step pre-publish checklist
 - No mention of these npm details

package/docs/registryresearch.md

@@ -34,15 +34,15 @@ The live GHCR workflow `31544093172` completed successfully, and the public pack
 
 ## live verification
 
-The first `publishgithubnpm.yml` run failed with HTTP 403 because `@devthink/saddle` was not an authorized package namespace for the `iakadion/saddle` workflow. The corrected run `31543249301` completed successfully after rewriting the package name in the CI workspace to `@iakadion/saddle`. However, the repository Packages page still returned an empty listing immediately afterward, and the available GitHub API token could not read the user package namespace. The next verification must query the owner package page directly and inspect the workflow publish logs before treating the successful exit code as visible package availability.
+The first `publishgithubnpm.yml` run failed with HTTP 403 because `@wenathlan/saddle` was not an authorized package namespace for the `iakadion/saddle` workflow. The corrected run `31543249301` completed successfully after rewriting the package name in the CI workspace to `@iakadion/saddle`. However, the repository Packages page still returned an empty listing immediately afterward, and the available GitHub API token could not read the user package namespace. The next verification must query the owner package page directly and inspect the workflow publish logs before treating the successful exit code as visible package availability.
 
 The v1.7.0 release verification used workflow logs as the available artifact evidence. GitHub npm run `31549603859` published `@iakadion/saddle@1.7.0`; GHCR run `31549603838` pushed `ghcr.io/iakadion/saddle:1.7.0` and `latest`; Maven retry run `31549802841` uploaded `io.devthink:saddle:1.7.0`; RubyGems retry run `31549804286` registered `saddle (1.7.0)`; and NuGet retry run `31549972311` created and pushed `Saddle.1.7.0.nupkg`. The GitHub package-list API was not readable with the available integration token, so these statements are limited to successful workflow upload evidence rather than an independent package-page listing.
 
-The first public npmjs run `31549603849` used OIDC and returned HTTP 404. Retry `31551708958` used the configured `NPM_TOKEN` secret, and retry `31551771374` confirmed that the masked secret reached the runner after newline normalization; both still returned HTTP 404 for `@devthink/saddle`. The identity-check retry `31552368723` reached `npm whoami` with a masked token but npm returned HTTP 401. The remaining blocker is the token itself or its account/scope permission: the owner must replace `NPM_TOKEN` with a valid raw npm access token authorized to publish `@devthink/saddle`. The exposed token from the prior conversation remains deliberately unused.
+The first public npmjs run `31549603849` used OIDC and returned HTTP 404. Retry `31551708958` used the configured `NPM_TOKEN` secret, and retry `31551771374` confirmed that the masked secret reached the runner after newline normalization; both still returned HTTP 404 for `@wenathlan/saddle`. The identity-check retry `31552368723` reached `npm whoami` with a masked token but npm returned HTTP 401. The remaining blocker is the token itself or its account/scope permission: the owner must replace `NPM_TOKEN` with a valid raw npm access token authorized to publish `@wenathlan/saddle`. The exposed token from the prior conversation remains deliberately unused.
 
 The cross-runtime workflow `31552266171` and its manual rerun `31552272176` completed successfully. The matrix ran the root probe on Node, Bun and Deno and the deterministic Node suite. The root entry no longer imports filesystem, Node HTTP, persistent queue, file-session or local-memory adapters; those remain explicit Node-only subpaths.
 
-Release `v1.8.0` was created from commit `9ddfd6c`. GitHub npm run `31556461901`, GHCR run `31556461887`, NuGet run `31556461883` and RubyGems run `31556461991` completed successfully for `1.8.0`. Maven run `31556461885` initially failed because setup-java rejects `latest`; after changing the workflow to JDK 26, manual run `31556549154` completed successfully. Public npmjs run `31556461909` produced the `@devthink/saddle@1.8.0` tarball but the registry rejected the PUT with HTTP 404 `Scope not found`; no public npmjs publication is claimed.
+Release `v1.8.0` was created from commit `9ddfd6c`. GitHub npm run `31556461901`, GHCR run `31556461887`, NuGet run `31556461883` and RubyGems run `31556461991` completed successfully for `1.8.0`. Maven run `31556461885` initially failed because setup-java rejects `latest`; after changing the workflow to JDK 26, manual run `31556549154` completed successfully. Public npmjs run `31556461909` produced the `@wenathlan/saddle@1.8.0` tarball but the registry rejected the PUT with HTTP 404 `Scope not found`; no public npmjs publication is claimed.
 
 The active package identity on main is now `@wenathlan/saddle`. The repository has since transferred to `wenathlan`; the authenticated `iakadion` account retains administrator permission. Release `v1.8.2` is the first release prepared against the transferred repository owner for GitHub Packages npm, Maven and GHCR.
 

package/docs/release17notes.md

@@ -21,4 +21,4 @@ The release was prepared with the deterministic Node test runner, format checks,
 
 ## Registry targets
 
-The release workflows target GitHub Packages npm, npmjs through OIDC Trusted Publishing, GHCR, Maven, NuGet and RubyGems. Each package is verified from its workflow result before being reported as published. npmjs publication remains conditional on the one-time Trusted Publisher configuration for `@devthink/saddle`.
+The release workflows target GitHub Packages npm, npmjs through OIDC Trusted Publishing, GHCR, Maven, NuGet and RubyGems. Each package is verified from its workflow result before being reported as published. npmjs publication remains conditional on the one-time Trusted Publisher configuration for `@wenathlan/saddle`.

package/docs/releasenotes-1.8.14.md

@@ -14,7 +14,7 @@ Saddle 1.8.14 carries the active code and release-facing manifests forward from
 
 ## Artifact contract
 
-The active workflows derive names from the `v1.8.14` release tag. The expected artifact family is listed below; attached-asset counts and registry conclusions must be updated only after the release workflows finish.
+The active workflows derive names from the `v1.8.14` release tag. The release was verified with 38 uploaded assets listed below; iOS remains unavailable because Apple signing and provisioning are caller-owned and were not configured.
 
 | Surface | Expected artifact family |
 |---|---|
@@ -28,22 +28,37 @@ The active workflows derive names from the `v1.8.14` release tag. The expected a
 
 Signing remains explicit. `unsigned`, `ci-test-key`, `caller-owned`, `notarized` and a provider-reported status are distinct states. These notes do not claim SignPath approval or production signing.
 
+## Verified attached assets
+
+The release contains **38 uploaded assets**. Desktop artifacts are unsigned, Android artifacts use the explicitly labeled `ci-test-key`, the container is `caller-owned` and the extension is unsigned.
+
+| Surface | Attached assets | Signing |
+|---|---|---|
+| Linux desktop | `saddle.browser.1.8.14.arm64.appimage`, `saddle.browser.1.8.14.arm64.deb`, `saddle.browser.1.8.14.arm64.rpm`, `saddle.browser.1.8.14.x64.appimage`, `saddle.browser.1.8.14.x64.deb`, `saddle.browser.1.8.14.x64.rpm` | `unsigned` |
+| Windows desktop | `saddle.browser.1.8.14.arm64.exe`, `saddle.browser.1.8.14.arm64.msi`, `saddle.browser.1.8.14.x64.exe`, `saddle.browser.1.8.14.x64.msi`, `saddle.browser.1.8.14.x86.exe`, `saddle.browser.1.8.14.x86.msi` | `unsigned` |
+| macOS desktop | `saddle.browser.1.8.14.arm64.app.zip`, `saddle.browser.1.8.14.arm64.dmg`, `saddle.browser.1.8.14.x64.app.zip`, `saddle.browser.1.8.14.x64.dmg` | `unsigned` |
+| Android | `saddle.apk.1.8.14.apk`, `saddle.aab.1.8.14.aab` | `ci-test-key` |
+| Container | `saddle.container.1.8.14.tar.gz` | `caller-owned` |
+| Browser extension | `saddle.extension.1.8.14.zip` | `unsigned` |
+| Manifests | Nine `manifest.*.1.8.14.json` files covering Android, container, Linux, macOS and Windows | metadata |
+| Checksums | Nine `sha256.*.1.8.14` files covering Android, container, Linux, macOS and Windows | integrity metadata |
+
 ## Registry publication
 
 The six registry workflows derive the version from the same `v1.8.14` release tag through `.github/actions/releaseversion`. GHCR is listed first in the package order and must build, scan, push, pull and smoke-test the published image before the job is successful. The remaining workflows publish GitHub Packages npm, public npmjs, Maven, NuGet GitHub Packages and RubyGems from the same validated version. Public `nuget.org` is not targeted by the current repository workflow.
 
-| Registry | Workflow | Version | Expected result |
+| Registry | Workflow | Version | Verified result |
 |---|---|---:|---|
-| GHCR | `publishghcr.yml` | `1.8.14` | build, scan, push, pull and smoke test |
-| GitHub Packages npm | `publishgithubnpm.yml` | `1.8.14` | tag-derived package |
-| Public npmjs | `publishnpmjs.yml` | `1.8.14` | tag-derived package |
-| Maven GitHub Packages | `publishmaven.yml` | `1.8.14` | tag-derived package |
-| NuGet GitHub Packages | `publishnuget.yml` | `1.8.14` | tag-derived package |
-| RubyGems GitHub Packages | `publishrubygems.yml` | `1.8.14` | tag-derived package |
+| GHCR | `publishghcr.yml` | `1.8.14` | success; run `31806235613` also pulled, inspected and smoke-tested the image |
+| GitHub Packages npm | `publishgithubnpm.yml` | `1.8.14` | success; run `31806235570` |
+| Public npmjs | `publishnpmjs.yml` | `1.8.14` | success; run `31806235515` |
+| Maven GitHub Packages | `publishmaven.yml` | `1.8.14` | success; run `31806235540` |
+| NuGet GitHub Packages | `publishnuget.yml` | `1.8.14` | success; run `31806235606` |
+| RubyGems GitHub Packages | `publishrubygems.yml` | `1.8.14` | success; run `31806235523` |
 
 ## Verification policy
 
-Local gates must pass before the tag is created. The release notes must be amended with effective asset names and workflow conclusions only after remote verification. Production signing remains pending until caller-owned certificates and provider configuration are supplied.
+Local gates passed before the tag was created. Desktop run `31806235468` completed successfully. The release-event mobile run `31806235484` correctly refused to claim production signing because the Android secrets were absent; manual run `31806605994` with `allow_test_signing=true` completed successfully and attached the APK/AAB as `ci-test-key`. Production signing remains pending until caller-owned certificates and provider configuration are supplied.
 
 ## References
 

package/docs/releasenotes-1.8.15.md

@@ -0,0 +1,41 @@
+# Saddle 1.8.15
+
+Saddle 1.8.15 adds transport-neutral contracts for verified storage, bounded working sets, isolated transformations, provider selection and immutable delivery. The shared core remains declarative: it does not create runners, start containers, register service workers, mutate DNS, transfer artifacts or execute binaries without a caller-owned adapter.
+
+## Changes
+
+| Area | Change |
+|---|---|
+| Storage | Added verified pool reads, primary/mirror/fan-out writes, quorum evidence, operation budgets, range reads, repair plans and verified-source restore plans. |
+| Memory | Added bounded working-set admission, capability-gated bridge plans, materialization transitions and declarative cleanup plans. |
+| Transformations | Added magic-byte classification, bounded WASM plans, isolated adapters, archive inspection limits and cache eligibility controls. |
+| Providers | Added capability-based selection, caller preferences, dry-run rendering, integrity-bound handoff and cancellation plans with unknown remote state preserved. |
+| Delivery | Added immutable chunk manifests, verification without evaluation, PWA/CDN capability reports, Mini App validation requirements and DNS/application bridge descriptors. |
+| Validation | Active tests increased to 132 while the 69 legacy tests remain green; package, flat native, web and audit gates passed. |
+
+## Artifact contract
+
+The release workflows derive artifact names and package versions from `v1.8.15`. The following artifact families are expected from the release pipelines; signing remains explicit and is never inferred from a filename.
+
+| Surface | Artifact family |
+|---|---|
+| Linux desktop | `saddle.browser.1.8.15.<architecture>.deb`, `.rpm`, `.appimage` |
+| Windows desktop | `saddle.browser.1.8.15.<architecture>.exe`, `.msi` |
+| macOS desktop | `saddle.browser.1.8.15.<architecture>.dmg`, `.app.zip` |
+| Android | `saddle.apk.1.8.15.apk`, `saddle.aab.1.8.15.aab` |
+| iOS | `saddle.ipa.1.8.15.ipa`, `saddle.app.1.8.15.app.zip` |
+| Container | `saddle.container.1.8.15.tar.gz` |
+| Browser extension | `saddle.extension.1.8.15.zip` |
+
+## Publication and verification policy
+
+The six registry workflows publish from the same validated release tag, in container-first order: GHCR, GitHub Packages npm, public npmjs, Maven, NuGet GitHub Packages and RubyGems. GHCR must build, scan, push, pull, inspect its OCI version label and complete a smoke check. Production signing remains caller-owned; the release does not claim SignPath approval, Apple notarization or a production Android signing key unless a workflow reports those states.
+
+## Verified publication results
+
+The v1.8.15 release has **38 attached assets** after the desktop rerun completed. GHCR, GitHub Packages npm, npmjs, Maven, NuGet and RubyGems completed successfully from the release event. The initial release-event Android job correctly failed because no production signing secrets were present; manual run `31835215420` completed with the explicitly labeled `ci-test-key` fallback. The desktop rerun completed after a transient macOS asset-attachment failure, without changing the tag or claiming notarization.
+
+## References
+
+[1]: https://github.com/wenathlan/saddle "Saddle source repository"
+[2]: https://github.com/wenathlan/saddle/releases "Saddle release archive"