@wenathlan/saddle 1.8.18 → 2.0.2

package/README.md

@@ -6,7 +6,7 @@
   <strong>Storage-backed jobs, scraping contracts and portable runners for Node.js.</strong><br/>
   <strong>Binary computing engine, agent browser, scraper and packager.</strong><br/>
   <a href="https://github.com/wenathlan/saddle/actions/workflows/ci.yml"><img src="https://github.com/wenathlan/saddle/actions/workflows/ci.yml/badge.svg" alt="CI" /></a>
-  <a href="https://github.com/wenathlan/saddle/releases/tag/v1.8.18"><img src="https://img.shields.io/badge/release-v1.8.18-d35d3d" alt="Release 1.8.18" /></a>
+  <a href="https://github.com/wenathlan/saddle/releases/tag/v2.0.0"><img src="https://img.shields.io/badge/release-v2.0.0-d35d3d" alt="Release 2.0.0" /></a>
   <a href="https://github.com/wenathlan/saddle/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-GPL--3.0--only-202a2f" alt="GPL 3.0 only license" /></a>
 </p>
 
@@ -16,6 +16,27 @@ Saddle is a **TypeScript-first ESM engine** compiled to JavaScript, declarations
 
 The canonical JavaScript package is `@wenathlan/saddle`. GitHub Packages npm, Maven and GHCR use the `wenathlan` owner namespace; NuGet and RubyGems retain their ecosystem package names. Older `@wenathlan`, `@iakadion` and `io.devthink` references in archived documents are historical records, not current package identities.
 
+## The e2ugh virtual-hardware engine (the grand merge)
+
+Version 2.0.0 merges the e2ugh repository into saddle. The engine core
+(`createVirtualEngine`, `validateSpec`, `randomPort`, `InternalMemory`,
+`MetricsStore`, the `enginebus`) is re-exported from the package root; the
+domain modules land beside the saddle domains:
+
+| module | surface |
+| --- | --- |
+| `virtualcpu.ts`, `virtualmemory.ts`, `virtualgpu.ts` | the virtual hardware catalog contracts |
+| `virtualization.ts`, `orchestrator.ts` | grid orchestration and the sandbox/vm runtime strategies |
+| `scheduler.ts`, `compute.ts`, `performance.ts` | job queues, batch compute and benchmark planning |
+| `media.ts`, `render.ts`, `quantum.ts`, `tiers.ts` | media pipeline, GPU registry, quantum simulation, tier policy |
+| `security.ts`, `alternatives.ts` | hardening gates and the alternative-stack catalog |
+| `web/` | the static console and the zero-dependency self-hosted API (`node web/server.js`) |
+| `specs/*` package exports | processors, gpus, cores, boards and the qemu/mttg/passage/docker envelopes |
+
+The full pre-merge documentation of the engine lives in
+[docs/e2ugh-engine.md](docs/e2ugh-engine.md) and its release history in
+[CHANGELOG.md (the e2ugh lineage sections)](CHANGELOG.md (the e2ugh lineage sections)).
+
 ## Start here
 
 Saddle requires **Node.js 26.7.0 or newer**.
@@ -177,7 +198,7 @@ The base permission set is `activeTab`, `scripting` and `storage`. It does not r
 | Failure | retry, circuit breaker, idempotency and resume are configurable |
 | Releases | version comes from the `vX.Y.Z` tag and must match `package.json` |
 
-Version 1.8.18 keeps the TypeScript-first public package paths stable and adds serializable, denied-by-default execution intent, policy decision, handoff and internal-API contracts. They do not read a file, start a process, create a worker, instantiate WebAssembly, open a browser, call a provider, allocate host memory, write a database or dispatch remotely. An operator may supply a separately approved adapter later; the initial result remains a plan or a receipt. The current container targets `linux/amd64`, `linux/arm64` and `linux/ppc64le`; release evidence, readiness and verification remain serializable and caller-owned. Release workflows also include cache-retention operations and an automatic mobile artifact fallback that is identified according to its actual signing state. The dynamic debug collector remains an unchecked browser boundary because it monkey-patches browser APIs; the rest of the web surface remains strictly typechecked.
+Version 2.0.0 (the grand merge) absorbs the e2ugh virtual-hardware engine into the saddle engine: fifteen engine modules land at the repository root (virtualcpu, virtualmemory, virtualgpu, virtualization, orchestrator, scheduler, compute, media, render, security, performance, alternatives, tiers, quantum and the engine index core), the e2ugh static console and self-hosted API live at web, the hardware catalogs (processors, gpus, cores, boards) and the four virtual-hardware config envelopes (qemu, mttg, passage, docker) ship as package exports under specs/*, and the legacy WebScrape toolkit generation consolidates into webscrape.ts. The engine surface stays dependency-free at the root (node built-ins only). Version 1.8.19 previously while reorganizing implementation ownership into twenty correlated domains behind a transport-neutral root router. The migration groups foundation nouns, execution state, API protocols, MCP adapters, automation contracts, package delivery and mode profiles without adding a privileged effect. Existing package subpaths remain available through their updated compiled targets. The denied-by-default execution, policy, handoff and internal-API contracts remain plans or receipts until a separately approved caller adapter is supplied. The current container targets `linux/amd64`, `linux/arm64` and `linux/ppc64le`; release evidence, readiness and verification remain serializable and caller-owned.
 
 ## Package surfaces and release automation
 
@@ -200,7 +221,7 @@ Saddle is applying to the SignPath Foundation for open-source code signing. Unti
 
 The requested policy is: **Free code signing provided by SignPath.io, certificate by SignPath Foundation**. Committers and reviewers are maintainers with write access to the public repository. Approvers are repository owners or release approvers recorded in `governance.md`. Every signed release must be built from repository source, pass the security and packaging gates, and receive manual signing approval.
 
-The core program will not transfer information to other networked systems unless specifically requested by the user or the person installing or operating it. Browser sessions, storage adapters, runners and external services remain caller-configured and subject to their own policies. See [`privacy-policy.md`](privacy-policy.md) and [`security.md`](security.md).
+The core program will not transfer information to other networked systems unless specifically requested by the user or the person installing or operating it. Browser sessions, storage adapters, runners and external services remain caller-configured and subject to their own policies. See [`privacy-policy.md`](privacy-policy.md) and [`SECURITY.md`](SECURITY.md).
 
 ## GitHub Pages web surface
 
@@ -226,7 +247,7 @@ npm run web:check
 VITE_BASE_PATH=/saddle npm run web:build:pages
 ```
 
-The engine test suite is deterministic and does not require real credentials or network access. The release path is: update `package.json` and the manifest files, update `changelog.md` and release notes, run all gates, create `v<package-version>`, push the tag and create the GitHub release. Registry workflows then derive the same version from that release tag. A package metadata change alone does not publish anything; the release tag is the intentional publication boundary.
+The engine test suite is deterministic and does not require real credentials or network access. The release path is: update `package.json` and the manifest files, update `CHANGELOG.md` and release notes, run all gates, create `v<package-version>`, push the tag and create the GitHub release. Registry workflows then derive the same version from that release tag. A package metadata change alone does not publish anything; the release tag is the intentional publication boundary.
 
 ## CLI
 
@@ -244,23 +265,23 @@ Remote execution, provider credentials, browser transport, persistence, proxy se
 ## Repository map
 
 ```text
-core/          engine errors, scrape error taxonomy, events, identifiers and hashing
-domain/        jobs, artifacts, sessions and providers
+core/          errors, events, identifiers, hashing, jobs, artifacts, sessions and providers
 memory/        working-set bridge, modes, objects and transforms
 storage/       local, chunked, remote and file-hosting adapters
 scrape/        robots, cache, extraction, schema, normalization and grouped crawl contracts
-queue/         queue, idempotency, saga and recovery
+runtime/       engine orchestration, queues, idempotency, saga, resumable and session contexts
 browser/       fingerprint, session, agent and Playwright adapter contracts
 extension/     Manifest V3 reference surface and packager
 desktop/       Tauri browser application for Windows, Linux and macOS
 android/       Capacitor Android conversion target and optimized Gradle release
 ios/           Capacitor iOS conversion target and caller-owned Xcode signing
 capacitor.config.ts shared web-to-native configuration for Android and iOS
-protocol/      JSON, NDJSON, SSE and block serializers
-workflow/      manifests, templates and registry contracts
+api/           envelopes, authentication, controls, JSON/NDJSON/SSE and webhooks
+adapters/      forge, app, socket and MCP integration adapters
+automation/    workflow, bot, permission and surface automation contracts
 release/       checksums, SBOM and provenance metadata
-runtime/       engine orchestration, capability detection, worker and grouped retry context
-packager/      dist, binary, container and multi-target artifact plans
+packager/      distribution, delivery, binary, container and multi-target artifact plans
+modes/         target mode selection, deployment plans and surface profiles
 web/           root-based static marketing site with TypeScript React source
 tests/         deterministic engine and extension coverage
 docs/          architecture, API, security, release and registry notes
@@ -274,7 +295,7 @@ The repository history contains 41 root README revisions and several surface-spe
 
 ## Current scope
 
-Version 1.8.18 extends the TypeScript-first engine with flat project-owned desktop, Android and iOS build surfaces; explicit Capacitor staging boundaries; dotted release asset naming; helper-binary rejection; structured extraction provenance; browser context budgets; resumable workflow compensation; retention metadata; release-evidence contracts; and pure internal API execution-policy contracts. The web playground demonstrates request, policy and handoff states using a fixed fixture with no operational adapter. Browser binaries, provider credentials, hosted automation registration, persistent databases, captcha solvers, remote execution and production deployment remain caller-selected adapters. Future work should extend contracts without coupling the core to one forge, registry, browser or storage vendor.
+Version 1.8.19 organizes the existing engine into twenty documented, dependency-directed domains and keeps the root package as a universal, transport-neutral router. The web playground continues to demonstrate request, policy and handoff states using a fixed fixture with no operational adapter. Browser binaries, provider credentials, hosted automation registration, persistent databases, captcha solvers, remote execution and production deployment remain caller-selected adapters. Future work should extend contracts without coupling the core to one forge, registry, browser or storage vendor.
 
 ## License