@wenathlan/saddle 2.0.165 → 2.0.166

package/Dockerfile

@@ -1,4 +1,4 @@
-# saddle 2.0.165 — THE ENGINE CONTAINER FILE
+# saddle 2.0.166 — THE ENGINE CONTAINER FILE
 #
 # THE FAMILY CONTAINER DOCTRINE, THE SADDLE SHAPE: one versioned container
 # per engine, built like the site homes (argan, cadria) build theirs — a
@@ -62,15 +62,26 @@
 # distribution this container installs.
 #
 # THE OS DISTRIBUTION SEATS the saddle container carries (the osdistrib
-# law, saddle/containerarch.ts — the owner's sentence: "iniciar
+# law, saddle/containerarch.ts — the owner's sentences: "iniciar
 # distribuição do container saddle com por exemplo, grapheneos, omarchy
-# e outros sistemas dentro do saddle"): the container starts its
-# distribution catalog with the seven system seats the OSDISTRIBUTIONS
-# registry pins — grapheneos (a privacy and security hardened version of
-# android), omarchy (the arch linux-based distribution created by dhh),
-# vanilla os (based on ubuntu), maru os (firmware, not an application),
-# the v seat (the vlang platform the dependency catalog pins at 0.5.2,
-# never a guest distribution), the normal linux baseline and android —
+# e outros sistemas dentro do saddle" and "o saddle nao ta com mais de
+# 15 devido as disvbriçoe s com sistem aoperacional como graphene os e
+# etc" — the more-than-fifteen directive): the container carries the
+# sixteen system seats the OSDISTRIBUTIONS
+# registry pins — the seven named law seats (grapheneos a privacy and
+# security hardened version of android, omarchy the arch linux-based
+# distribution created by dhh, vanilla os based on ubuntu, maru os
+# firmware not an application, the v seat the vlang platform the
+# dependency catalog pins at 0.5.2 never a guest distribution, the
+# normal linux baseline and android) beside the nine honest additions —
+# postmarketos (the alpine-based mobile distribution), lineageos (the
+# community android continuation), calyxos (the privacy-focused android
+# distribution), archlinux (the rolling-release distribution omarchy
+# builds on), alpine (the musl-based lightweight distribution), debian
+# (the universal operating system), fedora (the red-hat-upstream
+# community distribution), nixos (the declarative distribution the nix
+# package manager builds) and void (the independent source-rolling
+# distribution) —
 # every seat paired with the architecture legs the eleven-architecture
 # standard already carries (the mobile and firmware seats ride the arm64
 # legs, the desktop and baseline seats ride amd64 and arm64) and bound
@@ -143,7 +154,7 @@ ARG NODE_BASE_DIGEST
 # ===== stage: solbuild — the locked npm tree and the console spa =====
 FROM --platform=$BUILDPLATFORM ${NODE_BASE_TAG}@sha256:${NODE_BASE_DIGEST} AS solbuild
 
-ARG SADDLE_VERSION=2.0.165
+ARG SADDLE_VERSION=2.0.166
 
 WORKDIR /app
 
@@ -171,7 +182,7 @@ RUN npm run web:build:pages \
 # ===== stage: base — the hardened runtime floor every profile shares =====
 FROM ${NODE_BASE_TAG}@sha256:${NODE_BASE_DIGEST} AS base
 
-ARG SADDLE_VERSION=2.0.165
+ARG SADDLE_VERSION=2.0.166
 # the revision stamp the devthink container carries (DEVTHINK_REVISION
 # there): the publish legs pass the release sha at build time and the
 # revision label below declares the default-unknown local shape.
@@ -411,3 +422,107 @@ ENV SADDLE_PROFILE=balanced \
     SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
     SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
     SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
+
+# ===== the os-distribution flavor lanes (the container-lane law) =====
+# THE OS-DISTRIBUTION AXIS BESIDE THE PROFILE AXIS (the owner's
+# container-lane law: the saddle container carries MORE THAN 15 lanes):
+# the four seats of the OSDISTRIBUTIONS catalog that ride the same honest
+# node base legs — linux (the baseline seat), omarchy (the arch
+# linux-based desktop distribution created by dhh), vanilla os (the
+# ubuntu-based atomic distribution) and android (the mobile platform the
+# grapheneos hardening builds on) — answer four flavor targets that stamp
+# the catalog seat into the image config (SADDLE_OS_PROFILE + the OCI
+# labels), binding the max plan the baseline seat rides. the flavor is
+# the GUEST SEAT the engine hosts (the catalog law of
+# saddle/containerarch.ts: the engine presents the profile, it never
+# installs a host distribution) — the same engine graph, the same ninety
+# modalities, the same health surface, one honest seat stamp per lane:
+#
+#   docker build --target oslinux      -t saddle:2.0.165-linux .
+#   docker build --target osomarchy    -t saddle:2.0.165-omarchy .
+#   docker build --target osvanillaos  -t saddle:2.0.165-vanillaos .
+#   docker build --target osandroid    -t saddle:2.0.165-android .
+FROM max AS oslinux
+ARG SADDLE_OS_PROFILE="linux"
+ENV SADDLE_OS_PROFILE=linux
+LABEL org.opencontainers.image.title="saddle (the linux os-distribution lane)" \
+      org.opencontainers.image.description="saddle — the master virtualization engine bound to the linux os-distribution seat of the catalog: the baseline distribution the container itself rides."
+
+FROM max AS osomarchy
+ARG SADDLE_OS_PROFILE="omarchy"
+ENV SADDLE_OS_PROFILE=omarchy
+LABEL org.opencontainers.image.title="saddle (the omarchy os-distribution lane)" \
+      org.opencontainers.image.description="saddle — the master virtualization engine bound to the omarchy os-distribution seat of the catalog: the arch linux-based distribution created by dhh, hosted as the desktop guest profile."
+
+FROM max AS osvanillaos
+ARG SADDLE_OS_PROFILE="vanillaos"
+ENV SADDLE_OS_PROFILE=vanillaos
+LABEL org.opencontainers.image.title="saddle (the vanilla os os-distribution lane)" \
+      org.opencontainers.image.description="saddle — the master virtualization engine bound to the vanilla os os-distribution seat of the catalog: the ubuntu-based atomic distribution, hosted as the desktop guest profile."
+
+FROM max AS osandroid
+ARG SADDLE_OS_PROFILE="android"
+ENV SADDLE_OS_PROFILE=android
+LABEL org.opencontainers.image.title="saddle (the android os-distribution lane)" \
+      org.opencontainers.image.description="saddle — the master virtualization engine bound to the android os-distribution seat of the catalog: the mobile platform the grapheneos hardening builds on, hosted as the mobile guest profile."
+
+# ===== the os-distribution catalog lanes (the no-base seats) =====
+# THE EXOTIC HALF OF THE AXIS: the os distribution seats with NO runnable
+# container base — grapheneos (a privacy and security hardened version of
+# android) and maru os (firmware, not an application) are android
+# firmware seats, the v seat is the vlang platform target (never a guest
+# distribution) and the windows seat is the guest vocabulary the exe
+# seats execute — never pretend a runnable image. the catalog lane
+# publishes the profile itself: a scratch-based image (no base at all —
+# the digest law rides trivially) whose config carries the seat stamp and
+# whose single file is the profile row the osprofiles catalog answers,
+# rendered to json beside the build context (osprofiles/<id>.json, the
+# publish lane generates it from the tagged source):
+#
+#   docker build --target osgrapheneos -t saddle:2.0.165-grapheneos .
+#   docker build --target osmaruos     -t saddle:2.0.165-maruos .
+#   docker build --target osv          -t saddle:2.0.165-v .
+#   docker build --target oswindows    -t saddle:2.0.165-windows .
+FROM scratch AS osgrapheneos
+ARG SADDLE_VERSION=2.0.166
+ARG SADDLE_OS_PROFILE="grapheneos"
+ENV SADDLE_OS_PROFILE=grapheneos
+LABEL org.opencontainers.image.title="saddle (the grapheneos os-distribution catalog lane)" \
+      org.opencontainers.image.description="the grapheneos os-distribution seat as a catalog lane: a privacy and security hardened version of android — no runnable container base exists for an android firmware seat, the lane publishes the profile config the engine reads." \
+      org.opencontainers.image.version="${SADDLE_VERSION}" \
+      org.opencontainers.image.licenses="GPL-3.0-only" \
+      org.opencontainers.image.source="https://github.com/wenathlan/devthink"
+COPY osprofiles/grapheneos.json /saddle/osprofile.json
+
+FROM scratch AS osmaruos
+ARG SADDLE_VERSION=2.0.166
+ARG SADDLE_OS_PROFILE="maruos"
+ENV SADDLE_OS_PROFILE=maruos
+LABEL org.opencontainers.image.title="saddle (the maru os os-distribution catalog lane)" \
+      org.opencontainers.image.description="the maru os os-distribution seat as a catalog lane: maru os is firmware, not an application — no runnable container base exists for a firmware seat, the lane publishes the profile config the engine reads." \
+      org.opencontainers.image.version="${SADDLE_VERSION}" \
+      org.opencontainers.image.licenses="GPL-3.0-only" \
+      org.opencontainers.image.source="https://github.com/wenathlan/devthink"
+COPY osprofiles/maruos.json /saddle/osprofile.json
+
+FROM scratch AS osv
+ARG SADDLE_VERSION=2.0.166
+ARG SADDLE_OS_PROFILE="v"
+ENV SADDLE_OS_PROFILE=v
+LABEL org.opencontainers.image.title="saddle (the v os-distribution catalog lane)" \
+      org.opencontainers.image.description="the v os-distribution seat as a catalog lane: the v language platform target the languagev compiler seat of the ninety modalities answers, never a guest distribution — the lane publishes the profile config the engine reads." \
+      org.opencontainers.image.version="${SADDLE_VERSION}" \
+      org.opencontainers.image.licenses="GPL-3.0-only" \
+      org.opencontainers.image.source="https://github.com/wenathlan/devthink"
+COPY osprofiles/v.json /saddle/osprofile.json
+
+FROM scratch AS oswindows
+ARG SADDLE_VERSION=2.0.166
+ARG SADDLE_OS_PROFILE="windows"
+ENV SADDLE_OS_PROFILE=windows
+LABEL org.opencontainers.image.title="saddle (the windows os-distribution catalog lane)" \
+      org.opencontainers.image.description="the windows os-distribution seat as a catalog lane: the guest vocabulary the exe seats execute — the container standard answers the windows seats as binary targets, the lane publishes the profile config the engine reads." \
+      org.opencontainers.image.version="${SADDLE_VERSION}" \
+      org.opencontainers.image.licenses="GPL-3.0-only" \
+      org.opencontainers.image.source="https://github.com/wenathlan/devthink"
+COPY osprofiles/windows.json /saddle/osprofile.json

package/README.md

@@ -31,7 +31,7 @@ domain modules land beside the saddle domains:
 | `media.ts`, `render.ts`, `quantum.ts`, `tiers.ts` | media pipeline, GPU registry, quantum simulation, tier policy |
 | `security.ts`, `alternatives.ts` | hardening gates and the alternative-stack catalog |
 | `index.html`, `App.tsx`, `sol/` | the single SPA shell and the Sol theme (one tsx app with one stylesheet per theme) |
-| `server.ts`, `sandbox.ts` | the zero-dependency self-hosted API of the 2.0.165 grand-merge envelope (`node server.ts`; the api answers its version at `/api/v1/health`) and the browser-pure engine port |
+| `server.ts`, `sandbox.ts` | the zero-dependency self-hosted API of the 2.0.166 grand-merge envelope (`node server.ts`; the api answers its version at `/api/v1/health`) and the browser-pure engine port |
 | `vercel.json`, `netlify.toml` | the platform deploy adapters beside the surface they publish (the caddy ghost stays out of the tree) |
 | `specs/*` package exports | processors, gpus, cores, boards and the qemu/mttg/passage/docker envelopes |
 

package/docs/distributionlanes.md

@@ -6,7 +6,7 @@ The eleven distribution lanes of the PR14 law and the honest status each lane an
 | --- | --- | --- | --- |
 | npmjs | package.json — @wenathlan/saddle | live | the family-npmjs lane publishes the engine envelope (the heaviest pass, always last) |
 | GitHub Packages npm | package.json — @wenathlan/saddle | live | the family-githubnpm lane publishes the same envelope idempotently |
-| Maven | pom.xml — io.github.wenathlan:saddle | live | the family-maven lane deploys the one real jar of the family (the Saddle.java adapter) |
+| Maven | pom.xml — com.wenathlan:saddle | live | the family-maven lane deploys the one real jar of the family (the Saddle.java adapter) |
 | NuGet | saddle.csproj | live | the family-nuget lane packs the engine envelope |
 | Gradle | build.gradle.kts — com.wenathlan:saddle | live | the family-gradle lane publishes the module beside the maven coordinates |
 | Ruby Gems | saddle.gemspec | live | the family-rubygems lane pushes the gem carrying the SaddleCli.rb process adapter |

package/docs/ninetymodalities.md

@@ -192,8 +192,12 @@ covers every name the owner used.
 
 the container side of the same law rides its own registry: the
 OSDISTRIBUTIONS catalog of saddle/containerarch.ts (section 1c) carries
-the seven system seats the saddle container starts its distribution with
-— grapheneos, omarchy, vanilla os, maru os, the v seat, the normal linux
-baseline and android — with the arch pairings, the engine plan trio
+the sixteen system seats the saddle container holds (the owner's
+more-than-fifteen directive: "o saddle nao ta com mais de 15 devido as
+disvbriçoe s com sistem aoperacional como graphene os e etc") — the
+seven named seats (grapheneos, omarchy, vanilla os, maru os, the v
+seat, the normal linux baseline and android) beside the nine honest
+additions (postmarketos, lineageos, calyxos, archlinux, alpine, debian,
+fedora, nixos and void) — with the arch pairings, the engine plan trio
 binding and the plan-resource law. see
 [osdistributions.md](osdistributions.md) for the record.

package/docs/osdistributions.md

@@ -1,4 +1,4 @@
-# os.distributions — the seven system seats the saddle container carries
+# os.distributions — the sixteen system seats the saddle container carries
 
 > the owner order (pr15, verbatim): "iniciar distribuição do container
 > saddle com por exemplo, grapheneos, omarchy e outros sistemas dentro do
@@ -10,7 +10,10 @@
 > distribution created by dhh / grapheneos is a privacy and security
 > hardened version of android / linux normal / max / lite / balanced /
 > android / arm64 / amd64 / vgpu / vcpu / por exemplo, 50gb por plano
-> via config."
+> via config." and the more-than-fifteen directive: "o saddle nao ta
+> com mais de 15 devido as disvbriçoe s com sistem aoperacional como
+> graphene os e etc" — the saddle container carries more than fifteen
+> system seats.
 
 ## the registry
 
@@ -30,6 +33,21 @@ import it takes — `engineplans.ts` — is itself pure data).
 | v | languageos | the v language platform (vlang, the 0.5.2 catalog seat) | vpm | linux-x64, linux-arm64, darwin-arm64, darwin-x64, windows-x64, wasm32 | amd64+arm64 | max/balanced/lite |
 | linux | distribution | the plain linux baseline the engine container rides | apt | linux-x64, linux-x64-musl, linux-arm64, linux-riscv64 | amd64+arm64+riscv64 | max/balanced/lite |
 | android | mobile | the android application platform | apk | linux-arm64, darwin-arm64-v8 | arm64 | max/balanced/lite |
+| postmarketos | mobile | alpine linux | apk | linux-arm64, darwin-arm64-v8 | arm64 | max/balanced/lite |
+| lineageos | mobile | android | apk | linux-arm64, darwin-arm64-v8 | arm64 | max/balanced/lite |
+| calyxos | mobile | android | apk | linux-arm64, darwin-arm64-v8 | arm64 | max/balanced/lite |
+| archlinux | desktop | arch linux | pacman | linux-x64, linux-arm64 | amd64+arm64 | max/balanced/lite |
+| alpine | distribution | musl libc busybox | apk | linux-x64, linux-arm64, linux-x64-musl, linux-riscv64 | amd64+arm64+riscv64 | max/balanced/lite |
+| debian | desktop | the debian project | apt | linux-x64, linux-arm64 | amd64+arm64 | max/balanced/lite |
+| fedora | desktop | red hat linux upstream | rpm | linux-x64, linux-arm64 | amd64+arm64 | max/balanced/lite |
+| nixos | distribution | the nix package manager | nix | linux-x64, linux-arm64 | amd64+arm64 | max/balanced/lite |
+| void | distribution | xbps | xbps | linux-x64, linux-arm64, linux-x64-musl | amd64+arm64 | max/balanced/lite |
+
+the seven named law seats ride first (the order the owner's sentence
+rides them), then the nine honest additions the more-than-fifteen
+directive rides: postmarketos, lineageos, calyxos, archlinux, alpine,
+debian, fedora, nixos and void — every one a real distribution with
+its true upstream fact.
 
 the true facts the owner's law pins, verbatim in the rows' notes:
 
@@ -52,6 +70,27 @@ the true facts the owner's law pins, verbatim in the rows' notes:
   standard carries answers it.
 - **android** is the mobile platform the grapheneos hardening builds on.
 
+the true facts of the nine additions, verbatim in the rows' notes:
+
+- **postmarketos** is the alpine-based mobile distribution real devices
+  boot (the community mobile seat, the apk grammar, the arm64 legs).
+- **lineageos** is the community android continuation (the aftermarket
+  mobile seat on the arm64 legs).
+- **calyxos** is the privacy-focused android distribution (the hardened
+  mobile seat beside grapheneos).
+- **archlinux** is the rolling-release distribution omarchy builds on
+  (the pacman desktop seat on the amd64 and arm64 legs).
+- **alpine** is the musl-based lightweight distribution (the
+  small-footprint seat the musl legs answer).
+- **debian** is the universal operating system (the apt desktop seat the
+  widest hardware matrix answers).
+- **fedora** is the red-hat-upstream community distribution (the rpm
+  desktop seat beside the apt rows).
+- **nixos** is the declarative distribution the nix package manager
+  builds (the reproducible-system seat).
+- **void** is the independent source-rolling distribution (the xbps seat
+  the musl legs answer beside alpine).
+
 ## the pairings (real joins, never duplicated lists)
 
 - the **arch pairing**: every `archs` entry of every row is a real seat
@@ -106,7 +145,7 @@ arch standard:
 - `getosdistribution`, `resolveosdistribution`, `osdistributionerror`
   — the resolver (undefined/null answers the linux row, a known id
   answers its row, anything else throws the coded
-  `OS_DISTRIBUTION_UNKNOWN` refusal naming the seven seats);
+  `OS_DISTRIBUTION_UNKNOWN` refusal naming the sixteen seats);
 - `osdistributionsforarch`, `osdistributionsforprofile` — the joins the
   modality system reads (which seats ride one arch seat; which seats
   ride one tier — an unknown tier throws
@@ -126,7 +165,7 @@ legs the eleven-architecture standard carries. the dockerfile documents
 the law (the `THE OS DISTRIBUTION SEATS` paragraph) and the publish
 lanes stay untouched: no per-os build matrix exists or is needed, the
 container itself keeps riding the normal linux baseline (the container
-lane law) and the seven seats are the catalog the modality system hosts
+lane law) and the sixteen seats are the catalog the modality system hosts
 inside the engine, never host distributions the container installs.
 
 ## the visitor law (the critical law)
@@ -139,8 +178,10 @@ owns every cycle it spends through saddle and vault edge processing.
 
 ## the pinning battery
 
-`saddle/tests/osdistrib.test.ts` (eight tests, green): the seven seats
-in law order, the true facts verbatim, the arch pairing honesty (every
+`saddle/tests/osdistrib.test.ts` (nine tests, green): the sixteen seats
+in law order (the seven named seats plus the nine honest additions,
+more than fifteen), the true facts verbatim per named seat and per
+addition seat, the arch pairing honesty (every
 pairing a real seat of the standard, the derived legs per seat), the
 tier binding reused from engineplans (the deep-equality against
 `ENGINEPLANS.map`), the plan-resource law (50 as plan config, the

package/docs/saddle.md

@@ -0,0 +1,35 @@
+# saddle — the dossier
+
+The master virtualization engine of the family: the VM, the sandbox, the microVM, the runner and the virtual hardware — the engine every app rides.
+
+## Identity
+
+- Category: virtualization engine.
+- The ninety modalities: from the first (the complete virtual machine) to the ninetieth, every one a real executable seat.
+- Competitor space: the edge processing engines (the infrastructure the family owns).
+
+## Objective
+
+Execute every workload of the family on the house infrastructure — never the visitor machine: not the browser, not the GPU, not the CPU, not the local storage. The engine runs 24h on the internet edge.
+
+## Features
+
+- The ninety modalities across four lanes: vm (the machine seats), hardware (the virtual hardware presentation), runner (the program execution), sandbox (the isolation, ports, files, storage, network, delivery).
+- Real executors on every seat: qemu argv builders, docker flag arrays, firecracker seats, the language runtimes (node, bun, deno, go, python), the wasm instantiation, the babel compilation bridge, the yaml interpreter, the virtual file system, the wire packet builders and the sigv4 signing chain.
+- The visitor guard: the dispatch gate refuses any request that asks for a visitor scope before one instruction rides.
+- The eleven-architecture standard: linux-x64, darwin-arm64, windows-x64, linux-arm64, darwin-x64, windows-arm64, linux-x64-musl, linux-riscv64, wasm32, darwin-arm64-v8, windows-x64-gnu.
+- The OS host profiles catalog: linux, grapheneos, omarchy, maruos, vanillaos, v, windows, android.
+- The container trio: max, balanced, lite — the exotic seat only saddle carries.
+- The OS distribution flavor lanes: linux, omarchy, vanillaos, android flavors with the grapheneos, maruos, v and windows catalog lanes.
+- The queue orchestration: express, normal, batch.
+- The engine plans seam: plan limits (for example the storage quota) arrive from outside and scope one run only — the engines themselves are unlimited.
+
+## Interactions
+
+- The engine CLI with the family chat design beside the functional commands.
+- The modalities endpoint the family surfaces consume.
+
+## Doctrine
+
+- The critical law: the engine never touches the person's machine.
+- Saddle first, vault second: the storage engine leans on saddle when it needs edge processing.