@wenathlan/saddle 2.0.154 → 2.0.155

package/modes.ts

@@ -0,0 +1,170 @@
+/**
+ * modes.ts — target mode resolution and host-neutral deployment contracts.
+ *
+ * This file is the v2.0.0 grand-merge consolidation of the former nested
+ * folders of the repository (modes) into the single
+ * root-level domain file of the saddle family standard: one optimized
+ * TypeScript file per correlated domain, ordinal sections, JSDoc on every
+ * block, intra-domain imports dissolved, cross-domain imports rewritten to
+ * ./<domain>.js. Every capability of every source file is preserved here;
+ * the pure re-export barrels (none in this domain) folded their surface into this file directly.
+ */
+
+
+
+/* ════════════════════════════════════════════════════════════════════ */
+/* Section 1: modes/modes.ts — mode profiles describe paired operation surfaces without changing engine contracts. */
+/* ════════════════════════════════════════════════════════════════════ */
+/**
+ * mode profiles describe paired operation surfaces without changing engine contracts.
+ */
+const names = ["computer", "library", "application", "browser", "desktop", "mobile", "extension", "cli", "binary", "internet", "physicalfile", "vectorfile", "visible", "headless"];
+
+export function modeprofile(options = {}) {
+  const enabled = new Set(options.enabled ?? ["library", "cli", "binary"]);
+  return Object.fromEntries(names.map((name) => [name, { name, enabled: enabled.has(name), paired: Boolean(options.paired?.includes(name)) }]));
+}
+
+export function librarymode(factory) { return { name: "library", start: factory, stop: async () => undefined }; }
+export function climode(run) { return { name: "cli", run }; }
+export function binarymode(run) { return { name: "binary", run }; }
+export function browsermode(adapter) { return { name: "browser", adapter }; }
+export function headlessmode(adapter) { return { name: "headless", adapter }; }
+export function computemode(adapter) { return { name: "computer", adapter }; }
+
+/* ════════════════════════════════════════════════════════════════════ */
+/* Section 2: modes/matrix.ts — mode matrix keeps supported execution choices in one grouped contract. */
+/* ════════════════════════════════════════════════════════════════════ */
+/**
+ * mode matrix keeps supported execution choices in one grouped contract.
+ */
+export const modeaxes = Object.freeze({
+  execution: ["library", "application", "browser", "desktopapp", "mobileapp", "extension", "cli", "binary", "computer", "internet"],
+  runtime: ["node", "browser", "deno", "bun", "worker", "unknown"],
+  memory: ["internal", "external", "physical", "vectorized", "library"],
+  file: ["internal", "external", "physical", "vector"],
+  dependency: ["internal", "external", "dev"],
+  visibility: ["visible", "headless"],
+  pair: ["without", "with"]
+});
+
+export const operationmodes = Object.freeze(modeaxes.execution.flatMap((execution) => modeaxes.pair.map((pair) => `${execution}${pair}`)));
+
+/** Returns true when the matrix contains the requested axis value. */
+export function validatemode(axis, value) { return Boolean(modeaxes[axis]?.includes(value)); }
+
+/** Returns a serializable snapshot for documentation and diagnostics. */
+export function modecatalog() { return { axes: Object.fromEntries(Object.entries(modeaxes).map(([key, values]) => [key, [...values]])), operationmodes: [...operationmodes] }; }
+
+/* ════════════════════════════════════════════════════════════════════ */
+/* Section 3: modes/resolve.ts — mode resolver selects open defaults while preserving every caller choice. */
+/* ════════════════════════════════════════════════════════════════════ */
+/**
+ * mode resolver selects open defaults while preserving every caller choice.
+ */
+
+/** Resolves an execution profile without starting a process or opening a socket. */
+export function resolvemode(options = {}) {
+  const profile = {
+    execution: options.execution ?? "library",
+    runtime: options.runtime ?? "unknown",
+    memory: options.memory ?? "internal",
+    file: options.file ?? "internal",
+    dependency: options.dependency ?? "internal",
+    visibility: options.visibility ?? "headless",
+    pair: options.pair ?? "without"
+  };
+  for (const [axis, value] of Object.entries(profile)) if (!validatemode(axis, value)) throw new TypeError(`unsupported mode ${axis}:${value}`);
+  return { ...profile, capabilities: modecapabilities(profile) };
+}
+
+/** Returns stable capabilities for adapters and diagnostics. */
+export function modecapabilities(profile) {
+  return {
+    library: profile.execution === "library" || profile.execution === "application",
+    browser: profile.execution === "browser" || profile.execution === "extension" || profile.runtime === "browser" || profile.runtime === "worker",
+    cli: profile.execution === "cli" || profile.execution === "binary",
+    physicalmemory: profile.memory === "physical",
+    vectorizedmemory: profile.memory === "vectorized",
+    externalmemory: profile.memory === "external",
+    externalfile: profile.file === "external",
+    externaldependency: profile.dependency === "external",
+    visible: profile.visibility === "visible"
+  };
+}
+
+/** Returns a stable cross-runtime capability report without starting infrastructure. */
+export function capabilityreport(options = {}) {
+  const overrides = { runtime: options.runtime ?? "unknown", memory: options.memory ?? "internal", file: options.file ?? "internal", dependency: options.dependency ?? "internal", visibility: options.visibility ?? "headless", pair: options.pair ?? "without" };
+  const profiles = modeaxes.execution.map((execution) => {
+    const profile = resolvemode({ ...overrides, execution });
+    return { mode: execution, capabilities: profile.capabilities, profile };
+  });
+  return { version: 1, axes: Object.fromEntries(Object.entries(modeaxes).map(([key, values]) => [key, [...values]])), overrides, profiles, infrastructure: { host: "caller-owned", port: "caller-owned", credentials: "caller-owned", provider: "caller-owned" } };
+}
+
+/** Applies one profile to a caller supplied operation. */
+export async function withmode(options, operation) { if (typeof operation !== "function") throw new TypeError("mode operation is required"); return operation(resolvemode(options)); }
+
+
+/* ════════════════════════════════════════════════════════════════════ */
+/* Section 4: modes/deploy.ts — deploy surface exposes artifact planning without performing provider mutations. */
+/* ════════════════════════════════════════════════════════════════════ */
+/**
+ * deploy surface exposes artifact planning without performing provider mutations.
+ */
+export { publishplan, registrymanifest } from "./distribution.ts";
+/* the packaging surface pair (surfacemanifest, surfacebundle) moved to
+ * devthink with the automation domain (the saddle ownership law, wave a,
+ * actions 108-112 — the deploy surface keeps the artifact planning pair
+ * the engine owns). */
+
+/* ════════════════════════════════════════════════════════════════════ */
+/* Section 5: modes/targets.ts — target profiles keep platform packaging open and describe capability boundaries. */
+/* ════════════════════════════════════════════════════════════════════ */
+/**
+ * target profiles keep platform packaging open and describe capability boundaries.
+ */
+export const targetprofiles = Object.freeze({
+  application: { runtime: "caller", entry: "distpackage/index.js", capabilities: ["memory", "storage", "network"], formats: ["zip", "tarball"] },
+  computer: { runtime: "node", entry: "distpackage/index.js", capabilities: ["memory", "storage", "runner"], formats: ["node", "bun", "deno", "singlefile"] },
+  desktopapp: { runtime: "tauri", entry: "desktop/src-tauri", capabilities: ["memory", "file", "visible"], formats: ["appimage", "deb", "rpm", "snap", "flatpak", "dmg", "pkg", "exe", "msi", "msix"] },
+  mobileapp: { runtime: "capacitor", entry: "index.html", capabilities: ["memory", "network", "visible"], formats: ["apk", "aab", "ipa"] },
+  android: { runtime: "capacitor", entry: "android", capabilities: ["memory", "network", "visible"], formats: ["apk", "aab"] },
+  ios: { runtime: "capacitor", entry: "ios", capabilities: ["memory", "network", "visible"], formats: ["ipa"] },
+  cli: { runtime: "node", entry: "distpackage/cli/main.js", capabilities: ["memory", "storage", "network"], formats: ["node", "bun", "deno", "singlefile", "exe", "deb", "rpm"] },
+  binary: { runtime: "caller", entry: "distpackage/cli/main.js", capabilities: ["memory", "storage", "runner"], formats: ["sea", "singlefile", "wasm"] },
+  browser: { runtime: "tauri", entry: "desktop/src-tauri", capabilities: ["memory", "network", "visible"], formats: ["html", "pwa", "wasm", "appimage", "deb", "rpm", "dmg", "exe", "msi"] },
+  extension: { runtime: "browser", entry: "distpackage/extension/index.js", capabilities: ["browser", "network", "visible"], formats: ["crx", "xpi", "safariextz"] },
+  internet: { runtime: "caller", entry: "distpackage/index.js", capabilities: ["network", "webhook", "api"], formats: ["http", "websocket", "grpc", "rest"] },
+  web: { runtime: "browser", entry: "index.html", capabilities: ["network", "visible"], formats: ["html", "pwa", "ssg", "ssr", "wasm"] },
+  libreoffice: { runtime: "caller", entry: "distpackage/index.js", capabilities: ["file", "network"], formats: ["oxt", "zip"] },
+  mcp: { runtime: "caller", entry: "distpackage/adapters/mcpserver.js", capabilities: ["network", "api"], formats: ["stdio", "jsonrpc"] },
+  vsix: { runtime: "caller", entry: "distpackage/index.js", capabilities: ["network", "visible"], formats: ["vsix"] },
+  container: { runtime: "node", entry: "distpackage/index.js", capabilities: ["memory", "storage", "network"], formats: ["oci", "docker"] }
+});
+
+/** Creates a surface target with caller supplied entry and capabilities. */
+export function targetmanifest(target, options = {}) { const profile = targetprofiles[target]; if (!profile) throw new TypeError(`unsupported target: ${target}`); return { target, runtime: options.runtime ?? profile.runtime, entry: options.entry ?? profile.entry, formats: options.formats ?? [...profile.formats], capabilities: options.capabilities ?? [...profile.capabilities], permissions: options.permissions ?? [], metadata: options.metadata ?? {} }; }
+
+/** Returns all supported target profiles for documentation and tooling. */
+export function targetcatalog() { return Object.fromEntries(Object.entries(targetprofiles).map(([key, value]) => [key, { ...value, capabilities: [...value.capabilities] }])); }
+
+
+/* ════════════════════════════════════════════════════════════════════ */
+/* Section 6: the runner-mode ladder — the runtime targets a run asks   */
+/* the engine for (wave 3, the engine ownership law: forge and foundry  */
+/* consumed the five targets as duplicated twin lists; the ladder       */
+/* answers from the saddle owner from this day on, and the apps import  */
+/* it through the published library specifier). Zero logic change to    */
+/* the lanes above — the section is additive and imports nothing.       */
+/* ════════════════════════════════════════════════════════════════════ */
+/**
+ * the runner modes of the engine: the runtime targets a run asks for on
+ * the saddle boundary — the full virtual machine, the runner host, the
+ * node packages lane, the docker lane and the ghcr immutable lane.
+ */
+export const runnermodes = ["full-virtual", "runner", "node-packages", "docker", "ghcr"] as const;
+
+/** one runner mode of the engine (the runtime target a run asks for). */
+export type RunnerMode = (typeof runnermodes)[number];

package/mttg.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "mttg.config",
     "title": "saddle - MTTG Multi-Tenant Task Groups (cgroups v2 + tenants + transcode) with MTTCG (QEMU TCG) section",
-    "version": "2.0.127",
+    "version": "2.0.154",
     "date": "2026-08-22",
     "language": "en",
     "conceptSeparation": "MTTG = Multi-Tenant Task Groups (cgroup v2 cpu.weight/cpuset/memory/io/pids/hugetlb/rdma + tenants + transcode pipelines). MTTCG = QEMU Multi-Threaded TCG (one host thread per vCPU under TCG). Both live here as DISTINCT sections; MTTCG accel flags also in qemu.config#mttcg.",

package/orchestrator.ts

@@ -68,8 +68,8 @@ import { cpus, freemem, networkInterfaces, tmpdir, totalmem } from 'node:os';
 import path from 'node:path';
 import process from 'node:process';
 import { setTimeout as sleep } from 'node:timers/promises';
-import type { enginetopicname, enginetopics } from './index.js';
-import { enginebus, MetricsStore } from './index.js';
+import type { enginetopicname, enginetopics } from './index.ts';
+import { enginebus, MetricsStore } from './index.ts';
 
 /* ------------------------------------------------------------------ */
 /* context: runtime catalog (verified 2026-08-22)                       */
@@ -1279,8 +1279,12 @@ class firecrackerruntime extends runtimestrategy {
  * the class also absorbs spawnqemu from the Meta source: the vm plane
  * launches qemu with monitor and qmp unix sockets, a numa pin line,
  * vfio devices for every gpu assignment, extra args from qemu.config
- * and, when the binary is absent (CI), a "sleep 3600" stand-in process
- * so scheduling and lifecycle still exercise end to end.
+ * and — the honest-boot law of the engine-real rung — when the qemu
+ * binary is absent the spawn refuses with ERR_QEMU_ABSENT (the error
+ * names the binary the host must carry) so a vm record never claims
+ * running over a stand-in process: scheduling and lifecycle still
+ * exercise end to end in CI through the argv builders and the create /
+ * destroy planes, never through a faked boot.
  */
 class qemuruntime extends runtimestrategy {
   override readonly name: sandboxruntime = 'qemu';
@@ -1346,13 +1350,24 @@ class qemuruntime extends runtimestrategy {
 
   /**
    * builds the vm plane argv: strategy flags plus the name/uuid, dual
-   * unix sockets, virtio balloon, the per-numa bridge netdev, the numa
-   * pin line and one vfio-pci device per assigned gpu.
+   * unix sockets, virtio balloon, the numa pin line and one vfio-pci
+   * device per assigned gpu. the netdev answers the honest network law:
+   * the per-numa bridge (br-vhe-N) rides when the interface exists on
+   * the host (the privileged deployments the bridge plane owns), and a
+   * host without the interface rides user-mode networking (slirp) — a
+   * real qemu network mode that needs no privilege — so the argv a host
+   * without the bridge answers is a bootable argv, never a bridge the
+   * kernel would refuse.
    */
   buildvmcommand(vm: vmrecord, assignments: readonly gpuassignment[]): readonly string[] {
     const kvm = kvmavailable();
     const accel = vm.accel === 'kvm' && kvm ? 'kvm' : 'tcg,thread=multi,tb-size=1024';
     const sockets = this.socketsfor(vm.id);
+    const bridgename = `br-vhe-${vm.numanode}`;
+    const bridgeonhost = existsSync(`/sys/class/net/${bridgename}`);
+    const netdev = bridgeonhost
+      ? `bridge,br=${bridgename},id=net0`
+      : 'user,id=net0';
     const args: string[] = [
       vm.qemubinary,
       '-machine',
@@ -1372,7 +1387,7 @@ class qemuruntime extends runtimestrategy {
       '-device',
       'virtio-balloon-pci,id=balloon0',
       '-netdev',
-      `bridge,br=br-vhe-${vm.numanode},id=net0`,
+      netdev,
       '-device',
       'virtio-net-pci,netdev=net0',
       '-display',
@@ -1394,8 +1409,12 @@ class qemuruntime extends runtimestrategy {
 
   /**
    * spawns qemu for a vm record; when the binary does not exist the
-   * method spawns "sleep 3600" instead so CI environments without qemu
-   * still run the scheduling and lifecycle paths (spawnqemu merge).
+   * method refuses with ERR_QEMU_ABSENT — the honest-boot law of the
+   * engine-real rung: a host without the qemu binary never answers a
+   * stand-in process, the vm record never claims running over a sleep
+   * (startvm catches the refusal, marks the vm failed and publishes the
+   * error, so CI exercises the argv builders and the create / destroy
+   * planes instead of a faked boot).
    */
   async spawn(
     vm: vmrecord,
@@ -1404,14 +1423,23 @@ class qemuruntime extends runtimestrategy {
   ): Promise<qemuprocess> {
     try {
       const sockets = this.socketsfor(vm.id);
-      const argv = [...this.buildvmcommand(vm, assignments), '-daemonize'];
+      // the socket seats must exist before the guest opens its servers —
+      // qemu creates the socket files itself, never the parent directory
+      mkdirSync(path.dirname(sockets.qmp), { recursive: true });
+      // the foreground law of the honest-boot rung: the tracked child is
+      // the process that lives as long as the vm — the daemonize flag
+      // would fork the daemon and exit the parent at once (the vm would
+      // read stopped over a live machine), so the spawn rides the
+      // foreground argv the exit callback can own
+      const argv = this.buildvmcommand(vm, assignments);
       const [bin, ...rest] = argv;
-      let child: ChildProcess;
-      if (existsSync(bin)) {
-        child = spawn(bin, rest, { stdio: 'ignore', detached: false });
-      } else {
-        child = spawn('sleep', ['3600'], { stdio: 'ignore', detached: false });
+      if (!existsSync(bin)) {
+        throw new orchestratorerror(
+          `qemu spawn refused for ${vm.id}: the binary ${bin} is absent from the engine host (the honest-boot law — a vm never runs over a stand-in process)`,
+          'ERR_QEMU_ABSENT',
+        );
       }
+      const child: ChildProcess = spawn(bin, rest, { stdio: 'ignore', detached: false });
       const pid = child.pid ?? randomInt(1000, 11000);
       const processinfo: qemuprocess = {
         vmid: vm.id,
@@ -1426,6 +1454,12 @@ class qemuruntime extends runtimestrategy {
       });
       return processinfo;
     } catch (error) {
+      // the honest-boot refusal rides through untouched — the code the
+      // law answers (ERR_QEMU_ABSENT) is the code startvm and the vm
+      // record read, never the generic spawn wrap
+      if (error instanceof orchestratorerror) {
+        throw error;
+      }
       throw new orchestratorerror(
         `qemu spawn failed for ${vm.id}: ${errormessage(error)}`,
         'ERR_QEMU_SPAWN',

package/package.json

@@ -1,17 +1,17 @@
 {
   "name": "@wenathlan/saddle",
-  "version": "2.0.154",
+  "version": "2.0.155",
   "description": "binary computing engine that turns distributed storage into a publishable working set carrying the merged virtual-hardware engine (the saddle + e2ugh grand merge)",
   "type": "module",
   "private": false,
   "license": "GPL-3.0-only",
   "author": "Wenathlan",
   "sideEffects": false,
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "browser": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "packageManager": "npm@12.0.2",
+  "main": "./index.ts",
+  "module": "./index.ts",
+  "browser": "./index.ts",
+  "types": "./index.ts",
+  "packageManager": "pnpm@12.3.4",
   "publishConfig": {
     "access": "public"
   },
@@ -53,7 +53,6 @@
     "virtual gpu",
     "runner",
     "storage",
-    "automation",
     "llvmpipe",
     "lavapipe",
     "rusticl",
@@ -65,18 +64,25 @@
   "engines": {
     "bare": "^1.18.0",
     "bun": "^1.4.2",
+    "cargo": ">=1.85.0",
     "chrome": "^16.0.912",
     "cnpm": "^9.4.0",
     "corepack": "^0.35.0",
     "deno": "^2.9.5",
+    "dotnet": ">=8.0.0",
     "ecmascript": "^5.0.0",
     "firefox": ">=0.8.0",
+    "go": ">=1.24.0",
     "iojs": "^1.0.0",
+    "java": ">=17",
     "node": ">=26.13.0 <27",
     "npm": "^12.1.0",
     "pnpm": "^12.6.0",
+    "python": ">=3.11.0",
+    "rust": ">=1.85.0",
     "teleport": ">=0.2.0",
     "typescript": "^5.8.0",
+    "v": "^0.5.2",
     "vscode": "^1.118.0",
     "yarn": "^4.17.1"
   },
@@ -89,45 +95,42 @@
     }
   },
   "bin": {
-    "saddle": "./dist/cli.js"
+    "saddle": "./cli.ts"
   },
   "exports": {
-    ".": "./dist/index.js",
-    "./memory": "./dist/virtual.js",
-    "./memory-node": "./dist/virtual.js",
-    "./memory-engine": "./dist/virtual.js",
-    "./memory-plan": "./dist/virtual.js",
-    "./storage": "./dist/virtual.js",
-    "./storage-pool": "./dist/virtual.js",
-    "./storage-node": "./dist/virtual.js",
-    "./runners": "./dist/execution.js",
-    "./provider-chain": "./dist/execution.js",
-    "./sessions": "./dist/foundation.js",
-    "./modes": "./dist/modes.js",
-    "./mode": "./dist/modes.js",
-    "./sandbox": "./dist/sandbox.js",
-    "./modalities": "./dist/modalityregistry.js",
-    "./workloadlaw": "./dist/workloadlaw.js",
-    "./browser": "./dist/browser.js",
-    "./browser-playwright": "./dist/browser.js",
-    "./bot": "./dist/automation.js",
-    "./deploy": "./dist/modes.js",
-    "./extension": "./dist/browser.js",
-    "./server-node": "./dist/server.js",
-    "./sessions-file": "./dist/execution.js",
-    "./sessions-store": "./dist/execution.js",
-    "./queue-persistent": "./dist/execution.js",
-    "./hash": "./dist/foundation.js",
-    "./release-assets": "./dist/distribution.js",
-    "./release-verify": "./dist/distribution.js",
-    "./release-evidence": "./dist/distribution.js",
-    "./delivery": "./dist/distribution.js",
-    "./surface-requirements": "./dist/automation.js",
-    "./worker": "./dist/execution.js",
-    "./binary-archive": "./dist/distribution.js",
-    "./binary-transform": "./dist/distribution.js",
-    "./isolation": "./dist/isolation.js",
-    "./virtual-browser": "./dist/browser.js",
+    ".": "./index.ts",
+    "./memory": "./virtual.ts",
+    "./memory-node": "./virtual.ts",
+    "./memory-engine": "./virtual.ts",
+    "./memory-plan": "./virtual.ts",
+    "./storage": "./virtual.ts",
+    "./storage-pool": "./virtual.ts",
+    "./storage-node": "./virtual.ts",
+    "./runners": "./execution.ts",
+    "./provider-chain": "./execution.ts",
+    "./sessions": "./foundation.ts",
+    "./modes": "./modes.ts",
+    "./mode": "./modes.ts",
+    "./sandbox": "./sandbox.ts",
+    "./modalities": "./modalityregistry.ts",
+    "./workloadlaw": "./workloadlaw.ts",
+    "./browser": "./browser.ts",
+    "./browser-playwright": "./browser.ts",
+    "./deploy": "./modes.ts",
+    "./server-node": "./server.ts",
+    "./sessions-file": "./execution.ts",
+    "./sessions-store": "./execution.ts",
+    "./queue-persistent": "./execution.ts",
+    "./hash": "./foundation.ts",
+    "./release-assets": "./distribution.ts",
+    "./release-verify": "./distribution.ts",
+    "./release-evidence": "./distribution.ts",
+    "./delivery": "./distribution.ts",
+    "./worker": "./execution.ts",
+    "./binary-archive": "./distribution.ts",
+    "./binary-transform": "./distribution.ts",
+    "./isolation": "./isolation.ts",
+    "./virtual-browser": "./browser.ts",
     "./virtualcpu": "./virtualcpu.ts",
     "./virtualmemory": "./virtualmemory.ts",
     "./virtualgpu": "./virtualgpu.ts",
@@ -136,7 +139,6 @@
     "./virtualization": "./virtualization.ts",
     "./scheduler": "./scheduler.ts",
     "./compute": "./compute.ts",
-    "./media": "./media.ts",
     "./security": "./security.ts",
     "./performance": "./performance.ts",
     "./alternatives": "./alternatives.ts",
@@ -154,16 +156,25 @@
     "./quantum": "./quantum.ts"
   },
   "files": [
-    "dist",
-    "manifest.json",
+    "index.ts",
+    "virtual.ts",
+    "execution.ts",
+    "foundation.ts",
+    "modes.ts",
+    "sandbox.ts",
+    "modalityregistry.ts",
+    "workloadlaw.ts",
+    "browser.ts",
+    "server.ts",
+    "distribution.ts",
+    "isolation.ts",
+    "cli.ts",
     "docs",
     "README.md",
     "LICENSE",
-    "index.ts",
     "orchestrator.ts",
     "scheduler.ts",
     "compute.ts",
-    "media.ts",
     "virtualcpu.ts",
     "virtualmemory.ts",
     "virtualgpu.ts",
@@ -189,33 +200,31 @@
     "Dockerfile",
     "tsconfig.json",
     "biome.jsonc",
-    "modalityregistry.ts",
     "tiers.ts",
     "quantum.ts"
   ],
   "scripts": {
-    "build:engine": "node scripts.buildengine.ts",
-    "check": "npm run build:engine && node --check dist/index.js && node --check dist/execution.js && node --check dist/cli.js && node --check dist/browser.js && node --check dist/distribution.js",
+    "build:engine": "node scriptsbuildengine.ts",
+    "check": "tsc -p tsconfig.json --noEmit",
     "formatcheck": "node --import tsx format.ts",
     "test": "vitest run",
-    "run": "npm run build:engine && node dist/cli.js",
-    "extension:build": "npm run build:engine && node dist/browser.js",
-    "release:assets": "npm run build:engine && node dist/distribution.js",
-    "release:verify": "npm run build:engine && node dist/distribution.js verify",
-    "target:manifest": "npm run build:engine && node dist/distribution.js target",
+    "run": "npm run build:engine && node --import tsx ./cli.ts",
+    "release:assets": "npm run build:engine && node --import tsx ./distribution.ts",
+    "release:verify": "npm run build:engine && node --import tsx ./distribution.ts verify",
+    "target:manifest": "npm run build:engine && node --import tsx ./distribution.ts target",
     "pack:check": "npm run check && npm run formatcheck && npm test && npm pack --dry-run",
     "prepublishOnly": "npm run pack:check",
     "tauri": "npx --yes @tauri-apps/cli@2.11.4",
     "capacitor:sync:android": "npm run web:build:pages && cap sync android",
     "capacitor:sync:ios": "npm run web:build:pages && cap sync ios",
-    "native:check:flat": "node scripts.validateflatnative.ts",
+    "native:check:flat": "node scriptsvalidateflatnative.ts",
     "web:dev": "vite --host",
     "web:check": "npm run build:engine && tsc --project tsconfig.json --noEmit",
     "web:build": "vite build",
     "web:build:pages": "vite build",
     "web:preview": "vite preview --host",
     "build": "npm run build:engine",
-    "build:tsc": "tsc -p tsconfig.json --noEmitOnError false",
+    "build:tsc": "tsc -p tsconfig.json --noEmit",
     "start": "node --import tsx ./cli.ts plan",
     "dev": "node --import tsx --watch ./cli.ts",
     "web": "node webserver.ts",
@@ -238,13 +247,13 @@
     "vm:create": "node --import tsx ./cli.ts vm",
     "vm:validate": "node --import tsx ./cli.ts vmlint",
     "gpu:list": "node --import tsx ./cli.ts gpus",
-    "docker:build": "docker build -f Dockerfile -t saddle:2.0.154 .",
-    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.0.154",
-    "docker:health": "docker run --rm saddle:2.0.154 qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || true",
+    "docker:build": "docker build -f Dockerfile -t saddle:2.0.155 .",
+    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.0.155",
+    "docker:health": "docker run --rm saddle:2.0.155 qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || true",
     "firecracker:boot": "firecracker --api-sock /tmp/fc-saddle.sock --config-file vmconfig.json 2>/dev/null || echo 'firecracker 1.16.1 warm-pool boot 125ms target'",
     "py:bridge": "python3 qemubridge.py",
     "py:test": "python3 -m pytest -q || python3 qemubridge.py",
-    "clean": "rm -rf dist coverage .biome __pycache__",
+    "clean": "rm -rf distpackage coverage .biome __pycache__",
     "prepare": "echo 'saddle grand-merge toolchain 2026-08-23: Node 26.12.0 Current / 24.19.0 LTS, npm 12.0.2, TS 7.0.2, Python 3.14.7, Docker 29.7.2, QEMU 11.1.0, Mesa 26.2.1, LLVM 22.1.8, Firecracker 1.16.1'",
     "start:engine": "node --import tsx ./cli.ts plan"
   },
@@ -259,12 +268,18 @@
     "@libsql/client": "^0.18.0",
     "@prisma/adapter-libsql": "^7.10.1",
     "@prisma/client": "^7.10.1",
-    "@wenathlan/saddle": "^2.1.6",
-    "@wenathlan/vault": "^2.0.153",
+    "@wenathlan/cadria": "^2.0.154",
+    "@wenathlan/debonair": "^2.0.154",
+    "@wenathlan/devthink": "^2.0.154",
+    "@wenathlan/getry": "^2.0.154",
+    "@wenathlan/saddle": "^2.0.154",
+    "@wenathlan/vault": "^2.0.154",
+    "better-sqlite3": "^13.0.3",
+    "drizzle-orm": "^0.45.4",
     "gsap": "^3.15.0",
     "hono": "^4.13.16",
     "ink": "^7.1.1",
-    "lucide-react": "^1.66.0",
+    "lucide-react": "^1.67.0",
     "motion": "^12.43.0",
     "react": "^19.3.1",
     "react-devtools-core": "^8.0.0",
@@ -310,9 +325,9 @@
     "@radix-ui/react-toggle": "^1.2.1",
     "@radix-ui/react-toggle-group": "^1.2.1",
     "@radix-ui/react-tooltip": "^1.4.1",
-    "@tailwindcss/postcss": "^4.3.3",
+    "@tailwindcss/postcss": "^4.3.4",
     "@tailwindcss/typography": "^0.5.20",
-    "@tailwindcss/vite": "^4.3.3",
+    "@tailwindcss/vite": "^4.3.4",
     "@tsconfig/node26": "^26.0.1",
     "@types/better-sqlite3": "^9.6.0",
     "@types/three": "^0.187.0",
@@ -322,7 +337,7 @@
     "@types/node": "^26.6.6",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
-    "@vitejs/plugin-react": "^6.1.2",
+    "@vitejs/plugin-react": "^6.2.1",
     "add": "^2.0.9",
     "autoprefixer": "^10.6.2",
     "axios": "^1.21.0",
@@ -343,7 +358,7 @@
     "hono": "^4.13.16",
     "input-otp": "^1.5.0",
     "jsdom": "26.1.0",
-    "lucide-react": "^1.66.0",
+    "lucide-react": "^1.67.0",
     "mysql2": "^3.24.6",
     "nanoid": "^6.0.2",
     "next-themes": "^0.4.6",
@@ -358,12 +373,12 @@
     "react-day-picker": "^10.0.2",
     "react-dom": "^19.3.1",
     "react-hook-form": "^7.91.0",
-    "react-resizable-panels": "^4.16.1",
+    "react-resizable-panels": "^4.18.0",
     "recharts": "^3.10.1",
     "sonner": "^2.0.8",
     "streamdown": "^2.7.1",
     "tailwind-merge": "^3.7.0",
-    "tailwindcss": "^4.3.3",
+    "tailwindcss": "^4.3.4",
     "tailwindcss-animate": "^1.0.7",
     "tsup": "^8.5.1",
     "tsx": "^4.23.15",
@@ -372,9 +387,9 @@
     "vaul": "^1.1.2",
     "vite": "^8.3.5",
     "vite-plugin-manus-runtime": "^0.0.59",
-    "vitest": "^5.0.5",
-    "webpack": "5.112.2",
-    "webpack-cli": "6.0.1",
+    "vitest": "^5.1.0",
+    "webpack": "^5.112.2",
+    "webpack-cli": "^6.0.1",
     "wouter": "^3.13.0",
     "yaml": "^2.9.1",
     "zod": "^4.6.7"

package/qemu.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "qemu.config",
     "title": "saddle - QEMU Configuration (canonical JSON; sources: S6 TOML + v5 spec 11.1.0 + libvirt overlay)",
-    "version": "2.0.127",
+    "version": "2.0.154",
     "date": "2026-08-22",
     "language": "en",
     "format": "JSON (canonical v2 schema; sources were S6 TOML + V5 JSON schema + libvirt conf overlay)",
@@ -90,7 +90,7 @@
         "githubSetupPython": "actions/setup-python@v5.4.0",
         "platformKernel": "6.11.0+"
       },
-      "version": "2.0.127",
+      "version": "2.0.154",
       "title": "saddle - QEMU Configuration (canonical JSON; sources: S6 TOML + v5 spec 11.1.0 + libvirt overlay)",
       "project": "e2ugh v6",
       "toolchainV5": {