@wenathlan/saddle 2.0.165 → 2.0.167

package/docs/ninetymodalities.md

@@ -192,8 +192,12 @@ covers every name the owner used.
 
 the container side of the same law rides its own registry: the
 OSDISTRIBUTIONS catalog of saddle/containerarch.ts (section 1c) carries
-the seven system seats the saddle container starts its distribution with
-— grapheneos, omarchy, vanilla os, maru os, the v seat, the normal linux
-baseline and android — with the arch pairings, the engine plan trio
+the sixteen system seats the saddle container holds (the owner's
+more-than-fifteen directive: "o saddle nao ta com mais de 15 devido as
+disvbriçoe s com sistem aoperacional como graphene os e etc") — the
+seven named seats (grapheneos, omarchy, vanilla os, maru os, the v
+seat, the normal linux baseline and android) beside the nine honest
+additions (postmarketos, lineageos, calyxos, archlinux, alpine, debian,
+fedora, nixos and void) — with the arch pairings, the engine plan trio
 binding and the plan-resource law. see
 [osdistributions.md](osdistributions.md) for the record.

package/docs/osdistributions.md

@@ -1,4 +1,4 @@
-# os.distributions — the seven system seats the saddle container carries
+# os.distributions — the sixteen system seats the saddle container carries
 
 > the owner order (pr15, verbatim): "iniciar distribuição do container
 > saddle com por exemplo, grapheneos, omarchy e outros sistemas dentro do
@@ -10,7 +10,10 @@
 > distribution created by dhh / grapheneos is a privacy and security
 > hardened version of android / linux normal / max / lite / balanced /
 > android / arm64 / amd64 / vgpu / vcpu / por exemplo, 50gb por plano
-> via config."
+> via config." and the more-than-fifteen directive: "o saddle nao ta
+> com mais de 15 devido as disvbriçoe s com sistem aoperacional como
+> graphene os e etc" — the saddle container carries more than fifteen
+> system seats.
 
 ## the registry
 
@@ -30,6 +33,21 @@ import it takes — `engineplans.ts` — is itself pure data).
 | v | languageos | the v language platform (vlang, the 0.5.2 catalog seat) | vpm | linux-x64, linux-arm64, darwin-arm64, darwin-x64, windows-x64, wasm32 | amd64+arm64 | max/balanced/lite |
 | linux | distribution | the plain linux baseline the engine container rides | apt | linux-x64, linux-x64-musl, linux-arm64, linux-riscv64 | amd64+arm64+riscv64 | max/balanced/lite |
 | android | mobile | the android application platform | apk | linux-arm64, darwin-arm64-v8 | arm64 | max/balanced/lite |
+| postmarketos | mobile | alpine linux | apk | linux-arm64, darwin-arm64-v8 | arm64 | max/balanced/lite |
+| lineageos | mobile | android | apk | linux-arm64, darwin-arm64-v8 | arm64 | max/balanced/lite |
+| calyxos | mobile | android | apk | linux-arm64, darwin-arm64-v8 | arm64 | max/balanced/lite |
+| archlinux | desktop | arch linux | pacman | linux-x64, linux-arm64 | amd64+arm64 | max/balanced/lite |
+| alpine | distribution | musl libc busybox | apk | linux-x64, linux-arm64, linux-x64-musl, linux-riscv64 | amd64+arm64+riscv64 | max/balanced/lite |
+| debian | desktop | the debian project | apt | linux-x64, linux-arm64 | amd64+arm64 | max/balanced/lite |
+| fedora | desktop | red hat linux upstream | rpm | linux-x64, linux-arm64 | amd64+arm64 | max/balanced/lite |
+| nixos | distribution | the nix package manager | nix | linux-x64, linux-arm64 | amd64+arm64 | max/balanced/lite |
+| void | distribution | xbps | xbps | linux-x64, linux-arm64, linux-x64-musl | amd64+arm64 | max/balanced/lite |
+
+the seven named law seats ride first (the order the owner's sentence
+rides them), then the nine honest additions the more-than-fifteen
+directive rides: postmarketos, lineageos, calyxos, archlinux, alpine,
+debian, fedora, nixos and void — every one a real distribution with
+its true upstream fact.
 
 the true facts the owner's law pins, verbatim in the rows' notes:
 
@@ -52,6 +70,27 @@ the true facts the owner's law pins, verbatim in the rows' notes:
   standard carries answers it.
 - **android** is the mobile platform the grapheneos hardening builds on.
 
+the true facts of the nine additions, verbatim in the rows' notes:
+
+- **postmarketos** is the alpine-based mobile distribution real devices
+  boot (the community mobile seat, the apk grammar, the arm64 legs).
+- **lineageos** is the community android continuation (the aftermarket
+  mobile seat on the arm64 legs).
+- **calyxos** is the privacy-focused android distribution (the hardened
+  mobile seat beside grapheneos).
+- **archlinux** is the rolling-release distribution omarchy builds on
+  (the pacman desktop seat on the amd64 and arm64 legs).
+- **alpine** is the musl-based lightweight distribution (the
+  small-footprint seat the musl legs answer).
+- **debian** is the universal operating system (the apt desktop seat the
+  widest hardware matrix answers).
+- **fedora** is the red-hat-upstream community distribution (the rpm
+  desktop seat beside the apt rows).
+- **nixos** is the declarative distribution the nix package manager
+  builds (the reproducible-system seat).
+- **void** is the independent source-rolling distribution (the xbps seat
+  the musl legs answer beside alpine).
+
 ## the pairings (real joins, never duplicated lists)
 
 - the **arch pairing**: every `archs` entry of every row is a real seat
@@ -106,7 +145,7 @@ arch standard:
 - `getosdistribution`, `resolveosdistribution`, `osdistributionerror`
   — the resolver (undefined/null answers the linux row, a known id
   answers its row, anything else throws the coded
-  `OS_DISTRIBUTION_UNKNOWN` refusal naming the seven seats);
+  `OS_DISTRIBUTION_UNKNOWN` refusal naming the sixteen seats);
 - `osdistributionsforarch`, `osdistributionsforprofile` — the joins the
   modality system reads (which seats ride one arch seat; which seats
   ride one tier — an unknown tier throws
@@ -126,7 +165,7 @@ legs the eleven-architecture standard carries. the dockerfile documents
 the law (the `THE OS DISTRIBUTION SEATS` paragraph) and the publish
 lanes stay untouched: no per-os build matrix exists or is needed, the
 container itself keeps riding the normal linux baseline (the container
-lane law) and the seven seats are the catalog the modality system hosts
+lane law) and the sixteen seats are the catalog the modality system hosts
 inside the engine, never host distributions the container installs.
 
 ## the visitor law (the critical law)
@@ -139,8 +178,10 @@ owns every cycle it spends through saddle and vault edge processing.
 
 ## the pinning battery
 
-`saddle/tests/osdistrib.test.ts` (eight tests, green): the seven seats
-in law order, the true facts verbatim, the arch pairing honesty (every
+`saddle/test/osdistrib.test.ts` (nine tests, green): the sixteen seats
+in law order (the seven named seats plus the nine honest additions,
+more than fifteen), the true facts verbatim per named seat and per
+addition seat, the arch pairing honesty (every
 pairing a real seat of the standard, the derived legs per seat), the
 tier binding reused from engineplans (the deep-equality against
 `ENGINEPLANS.map`), the plan-resource law (50 as plan config, the

package/docs/saddle.md

@@ -0,0 +1,35 @@
+# saddle — the dossier
+
+The master virtualization engine of the family: the VM, the sandbox, the microVM, the runner and the virtual hardware — the engine every app rides.
+
+## Identity
+
+- Category: virtualization engine.
+- The ninety modalities: from the first (the complete virtual machine) to the ninetieth, every one a real executable seat.
+- Competitor space: the edge processing engines (the infrastructure the family owns).
+
+## Objective
+
+Execute every workload of the family on the house infrastructure — never the visitor machine: not the browser, not the GPU, not the CPU, not the local storage. The engine runs 24h on the internet edge.
+
+## Features
+
+- The ninety modalities across four lanes: vm (the machine seats), hardware (the virtual hardware presentation), runner (the program execution), sandbox (the isolation, ports, files, storage, network, delivery).
+- Real executors on every seat: qemu argv builders, docker flag arrays, firecracker seats, the language runtimes (node, bun, deno, go, python), the wasm instantiation, the babel compilation bridge, the yaml interpreter, the virtual file system, the wire packet builders and the sigv4 signing chain.
+- The visitor guard: the dispatch gate refuses any request that asks for a visitor scope before one instruction rides.
+- The eleven-architecture standard: linux-x64, darwin-arm64, windows-x64, linux-arm64, darwin-x64, windows-arm64, linux-x64-musl, linux-riscv64, wasm32, darwin-arm64-v8, windows-x64-gnu.
+- The OS host profiles catalog: linux, grapheneos, omarchy, maruos, vanillaos, v, windows, android.
+- The container trio: max, balanced, lite — the exotic seat only saddle carries.
+- The OS distribution flavor lanes: linux, omarchy, vanillaos, android flavors with the grapheneos, maruos, v and windows catalog lanes.
+- The queue orchestration: express, normal, batch.
+- The engine plans seam: plan limits (for example the storage quota) arrive from outside and scope one run only — the engines themselves are unlimited.
+
+## Interactions
+
+- The engine CLI with the family chat design beside the functional commands.
+- The modalities endpoint the family surfaces consume.
+
+## Doctrine
+
+- The critical law: the engine never touches the person's machine.
+- Saddle first, vault second: the storage engine leans on saddle when it needs edge processing.

package/docs/todo1816.md

@@ -538,7 +538,7 @@
 - [ ] Derive the 1.8.16 documentation for PWA and Mini App bridge only after comparative evidence identifies a concrete gap that does not duplicate an existing Saddle capability.
 - [x] Derive the 1.8.16 contract for release evidence only after comparative evidence identifies a concrete gap that does not duplicate an existing Saddle capability. Completed by `release/evidence.ts`: data-only normalization, policy evaluation, and readiness receipt; no external effects.
 - [x] Derive the 1.8.16 artifact inventory for release evidence only after comparative evidence identifies a concrete gap that does not duplicate an existing Saddle capability. Completed by `evidencefromverification`, which maps only an already-valid `verifyassets` checksum inventory into `checked` evidence and preserves declared signing state as metadata.
-- [x] Derive the 1.8.16 verification check for release evidence only after comparative evidence identifies a concrete gap that does not duplicate an existing Saddle capability. Completed by deterministic acceptance, insufficiency, mismatch, and readiness tests in `tests/engine.test.ts`.
+- [x] Derive the 1.8.16 verification check for release evidence only after comparative evidence identifies a concrete gap that does not duplicate an existing Saddle capability. Completed by deterministic acceptance, insufficiency, mismatch, and readiness tests in `test/engine.test.ts`.
 - [ ] Derive the 1.8.16 workflow test for release evidence only after comparative evidence identifies a concrete gap that does not duplicate an existing Saddle capability.
 - [x] Derive the 1.8.16 failure policy for release evidence only after comparative evidence identifies a concrete gap that does not duplicate an existing Saddle capability. Completed by ordered `rejected` and `insufficient` reason codes without positive assurance claims.
 - [x] Derive the 1.8.16 documentation for release evidence only after comparative evidence identifies a concrete gap that does not duplicate an existing Saddle capability. Completed in `docs/enginearchitecture.md` and `docs/reposynthesis1816.md`.

package/docs/viability.md

@@ -310,7 +310,7 @@ applied to e2ugh v2: the 8-document consolidation (readme, architecture,
 hardware, virtualization, security, performance, alternatives, viability)
 absorbs the redundant document families identified in the analysis phase,
 workflows ship in `.github/workflows` from the start, and the tree stays
-flat (root plus `libs/`, `docs/`, `tests/`, `.github/workflows/`) with the
+flat (root plus `libs/`, `docs/`, `test/`, `.github/workflows/`) with the
 same checks the reports codified (counts, flat
 naming, JSON validity, deduplication, version pins) now enforced by CI
 rather than by a post-hoc report.

package/index.ts

@@ -1475,6 +1475,8 @@ export * from './modes.ts';
  * runner, the yml/yaml interpretation through the house yaml subset with
  * the babel compile roundtrip, the detached background runs on the house
  * job queue and the docker-ready descriptors (the PR15 lane surface the
- * webserver routes and the script cli command consume). */
-export * from './scriptlanes.ts';
+ * webserver routes and the script cli command consume) — riding the one
+ * scripts keyword file beside its build-engine, security-gate and
+ * flat-native validation lanes (the consolidation law of the root). */
+export * from './scripts.ts';
 export * from './virtual.ts';