@wenathlan/saddle 2.0.153 → 2.0.154

package/Dockerfile

@@ -323,9 +323,11 @@ RUN set -eux; \
     # (nodesource node 26.7.0 ships npm 11.19.0) and surgically refresh
     # the four nested dependencies whose bundled versions carry the CVEs
     # the trivy release gate rejects (brace-expansion CVE-2026-14257 /
-    # CVE-2026-69152, ip-address CVE-2026-69192 / CVE-2026-54272 /
-    # CVE-2026-69198, tar CVE-2026-73566, undici CVE-2026-16728 /
-    # CVE-2026-16729 / CVE-2026-15157). published npm tarballs freeze
+    # CVE-2026-69152 / CVE-2026-102276 / CVE-2026-102278, ip-address
+    # CVE-2026-69192 / CVE-2026-54272 / CVE-2026-69198, tar
+    # CVE-2026-73566, undici CVE-2026-16728 / CVE-2026-16729 /
+    # CVE-2026-15157 / CVE-2026-109383 / CVE-2026-109869 /
+    # CVE-2026-19534 / CVE-2026-87018). published npm tarballs freeze
     # their bundled node_modules at publish time, so the swap alone
     # still ships brace-expansion 5.0.7; each fixed release is packed
     # separately and extracted over the nested path, then asserted: the
@@ -358,10 +360,10 @@ RUN set -eux; \
         fi; \
         echo "npm tree $fname $fgot"; \
     }; \
-    fixdep brace-expansion 5.0.9; \
+    fixdep brace-expansion 5.0.11; \
     fixdep ip-address 10.3.1; \
     fixdep tar 7.5.21; \
-    fixdep undici 6.28.0; \
+    fixdep undici 6.29.1; \
     rm -rf /root/.npm 2>/dev/null || true
 
 # mesa 26.2.1 from source (the "build" arm of the PPA-or-build policy):
@@ -454,7 +456,7 @@ RUN set -eux; \
 # without one). virtualizationcore.cpp additionally builds its selftest
 # binary and runs it: the stage fails if a single assert trips.
 WORKDIR /src
-COPY virtualhardware.c gpumonitor.cpp virtualizationcore.cpp /src/libs/
+COPY saddle/virtualhardware.c saddle/gpumonitor.cpp saddle/virtualizationcore.cpp /src/libs/
 RUN set -eux; \
     # portable baseline per architecture, with the ARCH FLAG the compiler
     # family actually accepts: x86 and arm speak -march; the ppc64le gcc
@@ -536,7 +538,7 @@ ENV PYTHONDONTWRITEBYTECODE=1 \
 # (qemu-bridge/cffi wheels) because the bridge talks raw QMP over a unix
 # socket without any native binding. the py_compile run is the syntax gate
 # (error catcher: a bridge that does not compile fails the image build).
-COPY qemubridge.py /bridge/qemubridge.py
+COPY saddle/qemubridge.py /bridge/qemubridge.py
 RUN set -eux; \
     python3 -m py_compile /bridge/qemubridge.py; \
     python3 /bridge/qemubridge.py --help >/dev/null; \
@@ -661,9 +663,14 @@ WORKDIR /app
 
 ENV NPM_CONFIG_LEGACY_PEER_DEPS=true
 
-COPY package.json package-lock.json ./
+COPY saddle/package.json saddle/package-lock.json ./
 RUN npm ci --ignore-scripts --legacy-peer-deps
-COPY . .
+COPY saddle/ .
+# the engine-ownership sibling: the saddle labels resolve
+# ../vault/labelstore.ts (the node-side fork reads the source file raw),
+# so the vault sources ride the context beside the saddle and land at
+# /vault where the import resolves (the family context fix).
+COPY vault/ /vault
 RUN npm run build:engine \
     && node --check dist/cli.js \
     && npm run web:build:pages \
@@ -907,9 +914,9 @@ COPY --from=python-bridge /bridge/qemubridge.py /engine/qemubridge.py
 # the engine sources and the specification files consumed at runtime
 # (docker.config "final" stage copies the whole tree; the flat layout
 # keeps that a single COPY layer).
-COPY *.ts package.json tsconfig.json biome.jsonc jsdom.d.ts /engine/
-COPY processors.json gpus.json cores.json boards.json vm.config.json virtualhardware.json /engine/
-COPY qemu.config mttg.config passage.config docker.config mime.types /engine/
+COPY saddle/*.ts saddle/package.json saddle/tsconfig.json saddle/biome.jsonc saddle/jsdom.d.ts /engine/
+COPY saddle/processors.json saddle/gpus.json saddle/cores.json saddle/boards.json saddle/vm.config.json saddle/virtualhardware.json /engine/
+COPY saddle/qemu.config saddle/mttg.config saddle/passage.config saddle/docker.config saddle/mime.types /engine/
 
 # the web node ships inside the main container: the mesh edition (auth,
 # sqlite database, dashboard and the browser sandbox pages) runs from the
@@ -1352,17 +1359,23 @@ RUN apt-get update \
     && rm -rf /var/lib/apt/lists/* \
     && npm install --global npm@12.0.2 \
     && tempdir="$(mktemp -d)" \
-    && npm pack brace-expansion@5.0.9 ip-address@10.3.1 tar@7.5.22 --pack-destination "$tempdir" \
-    && mkdir -p /usr/local/lib/node_modules/npm/node_modules/brace-expansion /usr/local/lib/node_modules/npm/node_modules/ip-address /usr/local/lib/node_modules/npm/node_modules/tar \
-    && tar -xzf "$tempdir/brace-expansion-5.0.9.tgz" --strip-components=1 -C /usr/local/lib/node_modules/npm/node_modules/brace-expansion \
+    && npm pack brace-expansion@5.0.11 ip-address@10.3.1 tar@7.5.22 undici@6.29.1 --pack-destination "$tempdir" \
+    && mkdir -p /usr/local/lib/node_modules/npm/node_modules/brace-expansion /usr/local/lib/node_modules/npm/node_modules/ip-address /usr/local/lib/node_modules/npm/node_modules/tar /usr/local/lib/node_modules/npm/node_modules/undici \
+    && tar -xzf "$tempdir/brace-expansion-5.0.11.tgz" --strip-components=1 -C /usr/local/lib/node_modules/npm/node_modules/brace-expansion \
     && tar -xzf "$tempdir/ip-address-10.3.1.tgz" --strip-components=1 -C /usr/local/lib/node_modules/npm/node_modules/ip-address \
     # the npm@12.0.2 tarball freezes its bundled node_modules at publish
     # time (the same lesson as the vhe builder's fixdep): its tar@7.5.19
     # carries CVE-2026-73566 (long-path DoS), fixed in 7.5.21+. The
     # lockfile already resolves app tar to 7.5.22 - the global npm tree
     # gets the same treatment and the version is asserted after install.
+    # The same freeze ships brace-expansion 5.0.9 (CVE-2026-102276 /
+    # CVE-2026-102278, fixed in 5.0.10+) and undici 6.28.0 (CVE-2026-109383
+    # / CVE-2026-109869 / CVE-2026-19534 / CVE-2026-87018, fixed in
+    # 6.29.1+): both carriers ride the swap and the assert proves it.
     && tar -xzf "$tempdir/tar-7.5.22.tgz" --strip-components=1 -C /usr/local/lib/node_modules/npm/node_modules/tar \
+    && tar -xzf "$tempdir/undici-6.29.1.tgz" --strip-components=1 -C /usr/local/lib/node_modules/npm/node_modules/undici \
     && test "$(node -p "require('/usr/local/lib/node_modules/npm/node_modules/tar/package.json').version")" = "7.5.22" \
+    && test "$(node -p "require('/usr/local/lib/node_modules/npm/node_modules/undici/package.json').version")" = "6.29.1" \
     && rm -rf "$tempdir" \
     && npm ci --omit=dev --ignore-scripts --legacy-peer-deps \
     # prune the vendored build toolchains of optional native deps: the

package/README.md

@@ -31,7 +31,7 @@ domain modules land beside the saddle domains:
 | `media.ts`, `render.ts`, `quantum.ts`, `tiers.ts` | media pipeline, GPU registry, quantum simulation, tier policy |
 | `security.ts`, `alternatives.ts` | hardening gates and the alternative-stack catalog |
 | `index.html`, `App.tsx`, `Sol/` | the single SPA shell and the Sol theme (one tsx app with one stylesheet per theme) |
-| `server.ts`, `sandbox.ts` | the zero-dependency self-hosted API of the 2.0.153 grand-merge envelope (`node server.ts`; the api answers its version at `/api/v1/health`) and the browser-pure engine port |
+| `server.ts`, `sandbox.ts` | the zero-dependency self-hosted API of the 2.0.154 grand-merge envelope (`node server.ts`; the api answers its version at `/api/v1/health`) and the browser-pure engine port |
 | `vercel.json`, `netlify.toml` | the platform deploy adapters beside the surface they publish (the caddy ghost stays out of the tree) |
 | `specs/*` package exports | processors, gpus, cores, boards and the qemu/mttg/passage/docker envelopes |
 

package/dist/edgeplane.d.ts

@@ -90,6 +90,13 @@ export declare function edgelandesreport(): Record<string, EdgeLaneReport>;
  * and never as the visitor browser. Every runonedge entry calls it on
  * globalThis before a single instruction rides a lane.
  *
+ * the node server process exemption: when the scope is the globalThis
+ * of a live node process, the webstorage globals the runtime defines
+ * itself (the experimental webstorage surface of node 26) never mark
+ * the scope — the server defining its own storage is the server, while
+ * any storage riding a scope the runtime did not define (a browser
+ * realm, an arbitrary object) stays refused.
+ *
  * @param scope the scope to inspect (duck-typed, works in node).
  * @throws the coded refusal when the scope is browser-shaped.
  */

package/dist/edgeplane.js

@@ -88,7 +88,12 @@ export function edgelandesreport() {
  * carrying any of them is a browser, and the engine refuses to execute
  * as one. navigator alone is not a marker — node itself ships a
  * vestigial navigator since v21 — the shells and the storages are the
- * law. */
+ * law. the node runtime may also define the experimental webstorage
+ * globals (node 26 ships localStorage and sessionStorage without
+ * --localstorage-file): the storages the server process defines on its
+ * own globalThis never mark the visitor machine — the engine executes
+ * server-side, and the node process carrying its own storage surface is
+ * the server, never the visitor browser. */
 const VISITORMARKERS = Object.freeze([
     "window",
     "document",
@@ -96,12 +101,40 @@ const VISITORMARKERS = Object.freeze([
     "sessionStorage",
     "indexedDB",
 ]);
+/** the storage markers the law refuses on any scope: the two webstorage
+ * seats (localStorage and sessionStorage) are the ones a node runtime
+ * defines on its own globalThis, so the exemption below is scoped to
+ * exactly them. */
+const STORAGEMARKERS = Object.freeze([
+    "localStorage",
+    "sessionStorage",
+]);
+/** whether the inspected scope is the globalThis of a live node server
+ * process: the runtime identity the exemption rides on (the versions
+ * table only exists inside node, and the scope identity is the global
+ * object itself, so a browser carrying a node-shaped shim never
+ * qualifies). */
+function isnodeprocess(scope) {
+    if (scope !== globalThis)
+        return false;
+    if (typeof process !== "object" || process === null)
+        return false;
+    const versions = process.versions;
+    return typeof versions?.node === "string";
+}
 /** assertvisitorfree — the law guard of the edge plane: throws
  * {code: "VISITOR_CONTEXT_REFUSED"} when the scope carries
  * browser-shaped globals, because the engine executes server-side only
  * and never as the visitor browser. Every runonedge entry calls it on
  * globalThis before a single instruction rides a lane.
  *
+ * the node server process exemption: when the scope is the globalThis
+ * of a live node process, the webstorage globals the runtime defines
+ * itself (the experimental webstorage surface of node 26) never mark
+ * the scope — the server defining its own storage is the server, while
+ * any storage riding a scope the runtime did not define (a browser
+ * realm, an arbitrary object) stays refused.
+ *
  * @param scope the scope to inspect (duck-typed, works in node).
  * @throws the coded refusal when the scope is browser-shaped.
  */
@@ -109,13 +142,16 @@ export function assertvisitorfree(scope) {
     if (scope === null || typeof scope !== "object")
         return;
     const record = scope;
+    const serverprocess = isnodeprocess(scope);
     for (const marker of VISITORMARKERS) {
-        if (record[marker] !== undefined) {
-            const error = new Error(`the visitor context is refused: the scope carries the browser global ${marker} and the edge plane executes server-side only`);
-            error.name = "edgeplaneerror";
-            error.code = "VISITOR_CONTEXT_REFUSED";
-            throw error;
-        }
+        if (record[marker] === undefined)
+            continue;
+        if (serverprocess && STORAGEMARKERS.includes(marker))
+            continue;
+        const error = new Error(`the visitor context is refused: the scope carries the browser global ${marker} and the edge plane executes server-side only`);
+        error.name = "edgeplaneerror";
+        error.code = "VISITOR_CONTEXT_REFUSED";
+        throw error;
     }
 }
 /* ════════════════════════════════════════════════════════════════════ */

package/dist/labels.d.ts

@@ -650,7 +650,7 @@ export declare const labelmanifest: {
     readonly 'notfound.agentBrowser': 'Open the agent browser';
 };
 export type LabelKey = keyof typeof labelmanifest & string;
-/** the typed accessor of the copy: the only door a widget uses. */
+/** the typed accessor of the copy: the only door a widget or page anchor uses. */
 export declare function label(key: LabelKey): string;
 /** the placeholder door: fills the {token} slots of one format key with the
  * runtime values (the store keeps the sentence, the widget passes the data). */
@@ -658,7 +658,7 @@ export declare function labelfill(key: LabelKey, values: Record<string, string>)
 /** the seed ingests the manifest into the labels store, idempotent, and the
  * translated rows stay protected from the overwrite. in the browser the rows
  * ride the local cache of the site db; on the server db.ts seeds the same
- * manifest into the labels table through seedlabelrows. */
+ * manifest into the labels table through seedLabelRows. */
 export declare function seedlabels(): Promise<{
     seeded: number;
     protected: number;

package/dist/labels.js

@@ -11,6 +11,7 @@
  * bundle): the type comes across erased, the browser seed mirrors the rows
  * into the local cache the way onboardingstate.ts mirrors the seen flags.
  */
+import { createLabelStore } from "../vault/labelstore.ts";
 /** the label revision of the manifest: bump on every copy wave so the seed
  * refreshes the store rows of the changed strings. */
 export const LABEL_REVISION = 4;
@@ -680,72 +681,27 @@ export const labelmanifest = {
     'notfound.backHome': 'Back home',
     'notfound.agentBrowser': 'Open the agent browser',
 };
-/** the translation overrides the runtime loads from the store at boot: the
- * key answers the translated text when the person changed the language. */
-const overrides = new Map();
-/** the browser cache of the labels table: the rows mirror the site db (the
- * db is the source of truth; the cache carries the translated rows offline —
- * the onboardingstate.ts precedent for the visitor machine). */
-const CACHE_KEY = 'saddle.labels.rows';
-function readcache() {
-    if (typeof window === 'undefined')
-        return [];
-    try {
-        const raw = window.localStorage.getItem(CACHE_KEY);
-        if (!raw)
-            return [];
-        const parsed = JSON.parse(raw);
-        return Array.isArray(parsed)
-            ? parsed.filter((row) => !!row && typeof row === 'object')
-            : [];
-    }
-    catch {
-        return [];
-    }
-}
-function writecache(rows) {
-    if (typeof window === 'undefined')
-        return;
-    try {
-        window.localStorage.setItem(CACHE_KEY, JSON.stringify(rows));
-    }
-    catch {
-        // the cache is best effort: the manifest always answers
-    }
-}
-/** the typed accessor of the copy: the only door a widget uses. */
+/** the store mechanism rides the vault factory (the storage law of the
+ * family: the vault owns the store, the app owns the manifest — the
+ * mechanism is imported, never duplicated). the cache key keeps the browser mirror the wingets already read. */
+const store = createLabelStore({
+    manifest: labelmanifest,
+    revision: LABEL_REVISION,
+    cacheKey: "saddle.labels.rows",
+});
+/** the typed accessor of the copy: the only door a widget or page anchor uses. */
 export function label(key) {
-    return overrides.get(key) ?? labelmanifest[key];
+    return store.label(key);
 }
 /** the placeholder door: fills the {token} slots of one format key with the
  * runtime values (the store keeps the sentence, the widget passes the data). */
 export function labelfill(key, values) {
-    return label(key).replace(/\{(\w+)\}/g, (match, token) => values[token] ?? match);
+    return store.labelfill(key, values);
 }
 /** the seed ingests the manifest into the labels store, idempotent, and the
  * translated rows stay protected from the overwrite. in the browser the rows
  * ride the local cache of the site db; on the server db.ts seeds the same
- * manifest into the labels table through seedlabelrows. */
-export async function seedlabels() {
-    const stored = readcache();
-    const rows = new Map(stored.map((row) => [row.id, row]));
-    let seeded = 0;
-    let saved = 0;
-    for (const [id, text] of Object.entries(labelmanifest)) {
-        const row = rows.get(id);
-        overrides.set(id, row && row.translated ? row.text : text);
-        if (!row || (!row.translated && row.text !== text)) {
-            rows.set(id, {
-                id,
-                text,
-                revision: LABEL_REVISION,
-                updatedAt: new Date().toISOString(),
-                ...(row?.translated ? { translated: true } : {}),
-            });
-            seeded += 1;
-        }
-        saved += 1;
-    }
-    writecache([...rows.values()]);
-    return { seeded, protected: saved - seeded };
+ * manifest into the labels table through seedLabelRows. */
+export function seedlabels() {
+    return store.seedLabels();
 }

package/dist/vite.config.js

@@ -16,6 +16,11 @@ export default defineConfig({
         alias: {
             // the theme sources live in the Sol folder of this app root.
             '@': path.resolve(import.meta.dirname, 'Sol'),
+            // The label store bridge of the ownership law: the app's copy mechanism
+            // rides the vault factory through the relative sibling source (the
+            // owner is the vault engine — the mechanism is never duplicated inside
+            // saddle), and the raw-node lanes (the forked webserver) resolve the
+            // same relative path without any registry envelope.
             // The playground consumes the engine source here so the build never
             // depends on a prebuilt dist directory.
             '@saddle/isolation': path.resolve(import.meta.dirname, 'isolation.ts'),
@@ -34,7 +39,7 @@ export default defineConfig({
      * dev server allows this single root. */
     server: {
         fs: {
-            allow: [import.meta.dirname],
+            allow: [import.meta.dirname, path.resolve(import.meta.dirname, '../vault')],
         },
         host: true,
         strictPort: false,

package/dist/webserver.js

@@ -72,7 +72,7 @@ const webdir = moduledir;
  * greps this exact literal out of the source with a regular expression,
  * so the declaration below stays a plain single-quoted string with no
  * type annotation in typescript. */
-const version = '2.0.153';
+const version = '2.0.154';
 /** sandbox ttl in milliseconds (15 minutes) and sweep interval (60 s). */
 const ttlms = 15 * 60 * 1000;
 const sweepperiodms = 60 * 1000;

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Saddle browser bridge",
-  "version": "2.0.153",
+  "version": "2.0.154",
   "description": "User initiated page snapshots through the Saddle browser contract.",
   "minimum_chrome_version": "110",
   "permissions": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/saddle",
-  "version": "2.0.153",
+  "version": "2.0.154",
   "description": "binary computing engine that turns distributed storage into a publishable working set carrying the merged virtual-hardware engine (the saddle + e2ugh grand merge)",
   "type": "module",
   "private": false,
@@ -238,9 +238,9 @@
     "vm:create": "node --import tsx ./cli.ts vm",
     "vm:validate": "node --import tsx ./cli.ts vmlint",
     "gpu:list": "node --import tsx ./cli.ts gpus",
-    "docker:build": "docker build -f Dockerfile -t saddle:2.0.153 .",
-    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.0.153",
-    "docker:health": "docker run --rm saddle:2.0.153 qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || true",
+    "docker:build": "docker build -f Dockerfile -t saddle:2.0.154 .",
+    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.0.154",
+    "docker:health": "docker run --rm saddle:2.0.154 qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || true",
     "firecracker:boot": "firecracker --api-sock /tmp/fc-saddle.sock --config-file vmconfig.json 2>/dev/null || echo 'firecracker 1.16.1 warm-pool boot 125ms target'",
     "py:bridge": "python3 qemubridge.py",
     "py:test": "python3 -m pytest -q || python3 qemubridge.py",
@@ -260,7 +260,7 @@
     "@prisma/adapter-libsql": "^7.10.1",
     "@prisma/client": "^7.10.1",
     "@wenathlan/saddle": "^2.1.6",
-    "@wenathlan/vault": "^2.0.152",
+    "@wenathlan/vault": "^2.0.153",
     "gsap": "^3.15.0",
     "hono": "^4.13.16",
     "ink": "^7.1.1",
@@ -358,7 +358,7 @@
     "react-day-picker": "^10.0.2",
     "react-dom": "^19.3.1",
     "react-hook-form": "^7.91.0",
-    "react-resizable-panels": "^4.16.0",
+    "react-resizable-panels": "^4.16.1",
     "recharts": "^3.10.1",
     "sonner": "^2.0.8",
     "streamdown": "^2.7.1",