@wenathlan/saddle 1.8.4 → 1.8.5

package/docs/registryresearch.md

@@ -50,6 +50,8 @@ Release `v1.8.1` was created from the identity migration commit `efcbb02`. The n
 
 Release `v1.8.2` was created from commit `ac7c355` after the repository transfer to `wenathlan`. All release jobs succeeded: GitHub npm `31559770092` logged the owner-derived `@wenathlan/saddle` package, npmjs `31559770096` published the same public package, GHCR `31559770016` pushed `ghcr.io/wenathlan/saddle:1.8.2` and `latest`, Maven `31559770216` deployed `io.wenathlan:saddle:1.8.2`, NuGet `31559770142` created and pushed `Saddle.1.8.2.nupkg`, RubyGems `31559770023` registered `saddle (1.8.2)`, and extension build `31559769740` attached `saddle-extension-1.8.2.zip`. Release validation `31559770059` also succeeded. Independent checks confirmed npmjs `@wenathlan/saddle@1.8.2` and the GitHub release asset. The GitHub organization package-list API returned 403 for the available integration, while unauthenticated GHCR, Maven and NuGet endpoints returned 401; these protected visibility boundaries do not contradict the successful authenticated workflow logs.
 
+Release `v1.8.4` was created from commit `d64a7bc` and the complete release matrix succeeded: engine CI `31561276824`, cross-runtime compatibility `31561276811`, release validation `31561278178`, extension build `31561278220`, GitHub npm `31561278174`, npmjs `31561278155`, GHCR `31561278152`, Maven `31561278161`, NuGet `31561278165` and RubyGems `31561278131`. The release therefore published `@wenathlan/saddle@1.8.4`, `ghcr.io/wenathlan/saddle:1.8.4`, `io.wenathlan:saddle:1.8.4`, `Saddle.1.8.4.nupkg`, `saddle (1.8.4)` and `saddle-extension-1.8.4.zip`. The legacy package metadata endpoint confirmed the public package `io.devthink.saddle` under `wenathlan`, but both version listing and deletion returned HTTP 403 because the current GitHub App token lacks package-management deletion permission; no deletion is claimed.
+
 ## sources
 
 1. GitHub Docs — About permissions for GitHub Packages: https://docs.github.com/en/packages/learn-github-packages/about-permissions-for-github-packages

package/docs/release.md

@@ -1,4 +1,4 @@
-# saddle release 1.8.4
+# saddle release 1.8.5
 
 ## release path
 
@@ -6,10 +6,10 @@ The release path is intentionally split into source validation, package validati
 
 | step | owner | condition |
 |---|---|---|
-| package version | repository | `package.json` is `1.8.4` |
+| package version | repository | `package.json` is `1.8.5` |
 | quality gate | GitHub Actions | `npm run pack:check` passes |
-| tag | repository owner | tag `v1.8.4` points to the validated release commit |
-| GitHub release | repository owner | release `v1.8.4` is created from the validated tag |
+| tag | repository owner | tag `v1.8.5` points to the validated release commit |
+| GitHub release | repository owner | release `v1.8.5` is created from the validated tag |
 | GitHub Packages | GitHub Actions | `publishgithubnpm.yml`, `publishghcr.yml`, `publishmaven.yml`, `publishnuget.yml`, and `publishrubygems.yml` use `GITHUB_TOKEN` |
 | public npmjs | owner-managed GitHub Actions secret | `publishnpmjs.yml` uses `NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}` and derives the version from the release tag or latest release in manual maintenance runs |
 | extension zip | GitHub Actions | `buildextension.yml` derives the version from the release tag, validates the unpacked artifact and attaches `saddle-extension-<version>.zip` |

package/docs/release184notes.md

@@ -2,6 +2,6 @@
 
 Saddle 1.8.4 updates every active library and forge pipeline to Node.js 26.7.0 and adds deterministic package gates to GitLab, Forgejo, Gitea and Woodpecker workflows. GitHub Actions remains the authoritative multi-registry release path; the other forge files are caller-configured validation and artifact paths because their runners, secrets and package registries differ.
 
-The legacy public Maven package `io.devthink.saddle` was identified under the `wenathlan` organization. Its deletion request was attempted through the GitHub Packages API, but the authenticated GitHub App integration returned HTTP 403 because it lacks package-management deletion permission. The new owner-aligned Maven coordinate is `io.wenathlan:saddle` and must not be removed.
+The legacy public Maven package `io.devthink.saddle` was identified under the `wenathlan` organization. Its deletion request was attempted through the GitHub Packages API, but the authenticated GitHub App integration returned HTTP 403 because it lacks package-management deletion permission. The new owner-aligned Maven coordinate is `io.wenathlan:saddle` and was published successfully; it must not be removed.
 
-The companion Saddle Pages repository now contains a GitHub Pages workflow using `actions/configure-pages@v5`, `actions/upload-pages-artifact@v4` and `actions/deploy-pages@v4`, plus caller-configured GitLab Pages, Forgejo, Codeberg Pages, Gitea and Woodpecker pipelines. The site builds only `dist/public` with `VITE_BASE_PATH=/saddle-pages/` and uses Node.js 26.7.0.
+The companion Saddle Pages repository is public at `https://github.com/wenathlan/saddle-pages` and contains the GitHub Pages workflow using `actions/configure-pages@v5`, `actions/upload-pages-artifact@v4` and `actions/deploy-pages@v4`, plus caller-configured GitLab Pages, Forgejo, Codeberg Pages, Gitea and Woodpecker pipelines. The site builds only `dist/public` with `VITE_BASE_PATH=/saddle-pages/` and uses Node.js 26.7.0. The initial source push omitted `.github/workflows/pages.yml` because the current GitHub App token lacks the `workflow` scope; the workflow remains prepared in the local project checkpoint for the required reauthorization.

package/docs/release185notes.md

@@ -0,0 +1,7 @@
+# Saddle 1.8.5
+
+Saddle 1.8.5 extends the published 1.8.4 engine without rewriting its immutable tag. The package metadata now declares Node.js `>=26.7.0`, npm `>=10.9.2`, the reproducible package manager `npm@12.0.2`, `main`/`module`/`browser` entry hints and `sideEffects: false` for bundlers.
+
+The release adds `playwright` as an optional peer at `^1.62.1` and exposes `@wenathlan/saddle/browser-playwright`. The adapter dynamically loads the caller-installed provider and reports `OPTIONAL_DEPENDENCY_MISSING` when Playwright is not installed. No browser binary, credential, host or runtime dependency is forced into the transport-neutral root.
+
+The package remains root-based JavaScript ESM. `trustedDependencies` and patch metadata were intentionally not added: the package has no install-time dependency requiring trust escalation and no active package patch to describe. The pnpm documentation also states that pnpm 11 no longer reads settings from the `pnpm` field in `package.json`, so no stale `pnpm.patchedDependencies` field was introduced.

package/docs/sources/farm.py

@@ -0,0 +1,117 @@
+# farm.py - Orquestra N repos para multiplicar storage ilimitado
+# Ideia: 1 repo = 500MB artifact free. 10 repos = 5GB, 100 repos = 50GB ilimitado
+
+import os, requests
+
+# Lista de repos workers (você cria via API)
+WORKER_REPOS = [
+    "seuuser/opencode-worker-1",
+    "seuuser/opencode-worker-2",
+    "seuuser/opencode-worker-3",
+    # ... adicione 100
+]
+
+TOKEN = os.getenv("GITHUB_TOKEN")
+
+def dispatch_to_farm(filename, job_id):
+    for repo in WORKER_REPOS:
+        owner, name = repo.split("/")
+        url = f"https://api.github.com/repos/{owner}/{name}/actions/workflows/process-binary.yml/dispatches"
+        payload = {
+            "ref": "main",
+            "inputs": {"job_id": job_id, "filename": filename, "action": "run"}
+        }
+        r = requests.post(url, json=payload, headers={
+            "Authorization": f"Bearer {TOKEN}",
+            "Accept": "application/vnd.github+json"
+        })
+        print(f"{repo}: {r.status_code}")
+        if r.status_code == 204:
+            break # conseguiu um worker
+
+if __name__ == "__main__":
+    dispatch_to_farm("binary.wasm", "job-123")
+
+#!/bin/bash
+# Script: Transforma Armazenamento em RAM / Processamento
+# Uso: ./scripts/storage-as-ram.sh
+
+echo "=== Transformando Storage em Processamento ==="
+echo "Antes:" && free -h
+
+# 1. Swap file - transforma disco em RAM virtual
+echo "[1] Criando swap 16GB em /mnt/swapfile..."
+sudo fallocate -l 16G /mnt/swapfile 2>/dev/null || sudo dd if=/dev/zero of=/mnt/swapfile bs=1G count=16
+sudo chmod 600 /mnt/swapfile
+sudo mkswap /mnt/swapfile
+sudo swapon /mnt/swapfile
+
+# 2. tmpfs RAM disk - RAM que parece storage
+echo "[2] Criando RAM disk 8GB em /mnt/ramdisk..."
+sudo mkdir -p /mnt/ramdisk
+sudo mount -t tmpfs -o size=8G tmpfs /mnt/ramdisk
+
+# 3. ZRAM - comprime RAM para caber mais
+echo "[3] Ativando ZRAM..."
+sudo modprobe zram 2>/dev/null || true
+echo 2G | sudo tee /sys/block/zram0/disksize 2>/dev/null || true
+
+# 4. Usar /dev/shm (já é tmpfs) como workspace ultra rápido
+echo "[4] Usando /dev/shm como workspace..."
+mkdir -p /dev/shm/opencode-workspace
+
+echo "Depois:" && free -h && swapon --show && df -h /mnt/ramdisk /dev/shm
+
+echo "Pronto: Storage virou RAM. Use /mnt/ramdisk e /dev/shm para processar binários sem pesar disco."
+
+# buckets/huggingface_upload.py - Usa Hugging Face como bucket ilimitado de terceiros
+from huggingface_hub import HfApi, upload_folder
+import os
+
+# Free: public best-effort ilimitado, private 100GB
+# PRO $9/mo: 10TB public + 1TB private
+# Cada arquivo até 500GB com Xet backend
+
+api = HfApi(token=os.getenv("HF_TOKEN"))
+
+REPO_ID = "seuuser/opencode-storage" # dataset repo
+REPO_TYPE = "dataset" # dataset tem viewer, melhor para binários
+
+# Cria repo se não existe
+api.create_repo(REPO_ID, repo_type=REPO_TYPE, exist_ok=True, private=False)
+
+# Upload pasta dumps como dataset
+upload_folder(
+    folder_path="docs/results",
+    repo_id=REPO_ID,
+    repo_type=REPO_TYPE,
+    commit_message="feat: dump from browser via third-party"
+)
+
+print(f"Upload feito: https://huggingface.co/datasets/{REPO_ID}")
+# Acesso via CDN: https://huggingface.co/datasets/{REPO_ID}/resolve/main/arquivo.bin
+
+# buckets/kaggle_upload.py - Kaggle como bucket 200GB por dataset, público ilimitado
+# Limite: 200GB por dataset, 50 arquivos top-level, privado total 200GB, público ilimitado
+
+import os, json, subprocess, pathlib
+
+DATASET_NAME = "seuuser-opencode-storage-part-001" # cada dataset 200GB
+DATASET_PATH = pathlib.Path("docs/results")
+
+# dataset-metadata.json
+meta = {
+    "title": "opencode-storage-part-001",
+    "id": f"seuuser/{DATASET_NAME}",
+    "licenses": [{"name": "mit"}],
+    "resources": [{"path": "results", "description": "binários processados"}]
+}
+
+(DATASET_PATH / "dataset-metadata.json").write_text(json.dumps(meta, indent=2))
+
+# Cria ou versiona
+# kaggle datasets create -p docs/results --dir-mode tar
+# kaggle datasets version -p docs/results -m "add more bins"
+
+print("Kaggle: cada dataset público = 200GB free ilimitado. Crie N datasets para N*200GB")
+print("10 datasets = 2TB free, 100 datasets = 20TB")