@wenathlan/saddle 2.0.170 → 2.0.172

package/Dockerfile

@@ -1,4 +1,4 @@
-# saddle 2.0.170 — THE ENGINE CONTAINER FILE
+# saddle 2.0.171 — THE ENGINE CONTAINER FILE
 #
 # THE FAMILY CONTAINER DOCTRINE, THE SADDLE SHAPE: one versioned container
 # per engine, built like the site homes (argan, cadria) build theirs — a
@@ -158,7 +158,7 @@ ARG NODE_BASE_DIGEST=5adad64f9a1fca2d51972caa65983634c8a774eb300d72b20f7f2a0f603
 # ===== stage: solbuild — the locked npm tree and the console spa =====
 FROM --platform=$BUILDPLATFORM ${NODE_BASE_TAG}@sha256:${NODE_BASE_DIGEST} AS solbuild
 
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 
 WORKDIR /app
 
@@ -192,7 +192,7 @@ RUN npm run web:build:pages \
 # ===== stage: base — the hardened runtime floor every profile shares =====
 FROM ${NODE_BASE_TAG}@sha256:${NODE_BASE_DIGEST} AS base
 
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 # the revision stamp the devthink container carries (DEVTHINK_REVISION
 # there): the publish legs pass the release sha at build time and the
 # revision label below declares the default-unknown local shape.
@@ -307,6 +307,76 @@ RUN apt-get update \
     # degrades to a no-op at runtime - the sources are dead weight.
     && rm -rf node_modules/cpu-features/deps \
     && find node_modules -type f -name Dockerfile -delete
+# THE TOOLCHAIN LAYER — the fourteen planned seats walk live (the pr13
+# completion law): the engine host carries the runtimes the language,
+# build and wasi seats spawn, every carrier pinned to the exact version
+# the engines catalog answers and the assert after every install proving
+# the binary answers its version. the apt lanes (make, ninja, lua, php,
+# the gcc toolchain the v and nim codegen rides) install on every arch
+# leg debian ships them for; the prefab carriers (rustup 1.99.1, zig
+# 0.17.1, wasmtime 50.0.1, v 0.5.2, nim 2.4.0, dotnet sdk 10.0.403)
+# ride the two native legs (amd64, arm64) their publishers ship — the
+# exotic legs (ppc64le, s390x) answer the honest coded absence the
+# seats' probes name at dispatch (HOST_RUNTIME_ABSENT — the seat never
+# fakes a run), the same law the arch case above carries.
+RUN set -eux; \
+    arch="${TARGETARCH:-$(dpkg --print-architecture)}"; \
+    apt-get update; \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+      build-essential ca-certificates curl git lua5.4 ninja-build php-cli unzip xz-utils; \
+    ln -sf /usr/bin/lua5.4 /usr/local/bin/lua; \
+    make --version | head -1; \
+    ninja --version; \
+    lua -v; \
+    php --version | head -1; \
+    case "$arch" in \
+      amd64|arm64) \
+        rustuparch="x86_64-unknown-linux-gnu"; \
+        [ "$arch" = "arm64" ] && rustuparch="aarch64-unknown-linux-gnu"; \
+        curl -fsS https://sh.rustup.rs -o /tmp/rustup-init.sh; \
+        sh /tmp/rustup-init.sh -y --profile minimal --default-toolchain 1.99.1 \
+          --no-modify-path --default-host "$rustuparch"; \
+        rustctool="/root/.rustup/toolchains/1.99.1-${rustuparch}/bin"; \
+        ln -sf "$rustctool/rustc" /usr/local/bin/rustc; \
+        ln -sf "$rustctool/cargo" /usr/local/bin/cargo; \
+        rustc --version; \
+        cargo --version; \
+        zigarch="x86_64"; [ "$arch" = "arm64" ] && zigarch="aarch64"; \
+        curl -fsSL "https://ziglang.org/download/0.17.1/zig-linux-${zigarch}-0.17.1.tar.xz" \
+          -o /tmp/zig.tar.xz; \
+        mkdir -p /opt/zig; \
+        tar -xJf /tmp/zig.tar.xz --strip-components=1 -C /opt/zig; \
+        ln -sf /opt/zig/zig /usr/local/bin/zig; \
+        zig version; \
+        wasmtimearch="x86_64"; [ "$arch" = "arm64" ] && wasmtimearch="aarch64"; \
+        curl -fsSL "https://github.com/bytecodealliance/wasmtime/releases/download/v50.0.1/wasmtime-v50.0.1-${wasmtimearch}-linux.tar.xz" \
+          -o /tmp/wasmtime.tar.xz; \
+        mkdir -p /opt/wasmtime; \
+        tar -xJf /tmp/wasmtime.tar.xz --strip-components=1 -C /opt/wasmtime; \
+        ln -sf /opt/wasmtime/wasmtime /usr/local/bin/wasmtime; \
+        wasmtime --version; \
+        git clone --depth 1 --branch 0.5.2 https://github.com/vlang/v.git /opt/v; \
+        make -C /opt/v; \
+        ln -sf /opt/v/v /usr/local/bin/v; \
+        v version; \
+        git clone --depth 1 --branch v2.4.0 https://github.com/nim-lang/Nim.git /opt/nim; \
+        sh -c 'cd /opt/nim && sh build_all.sh'; \
+        ln -sf /opt/nim/bin/nim /usr/local/bin/nim; \
+        nim --version | head -1; \
+        curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh; \
+        bash /tmp/dotnet-install.sh --channel 10.0 --version 10.0.403 --install-dir /usr/share/dotnet; \
+        ln -sf /usr/share/dotnet/dotnet /usr/local/bin/dotnet; \
+        dotnet --version; \
+        ;; \
+      *) \
+        echo "the toolchain layer answers the honest coded absence on ${arch}: the prefab carriers ship amd64 and arm64 alone (the seats' probes name the requirement at dispatch)" ;; \
+    esac; \
+    rm -rf /var/lib/apt/lists/* /tmp/* /opt/nim/.git /opt/v/.git; \
+    mkdir -p /sandbox && chown node:node /sandbox
+ENV DOTNET_CLI_TELEMETRY_OPTOUT=1 \
+    DOTNET_NOLOGO=1 \
+    DOTNET_CLI_HOME=/sandbox/dotnet-home \
+    DOTNET_CLI_LANGUAGE=en
 # the web service surface (self-hosted console): the staged spa plus the
 # pure-node server stack - zero npm dependencies, the node 26 runtime
 # carries everything (node:sqlite, node:crypto, native type stripping
@@ -509,9 +579,23 @@ LABEL org.opencontainers.image.title="saddle (the android os-distribution lane)"
 #   docker build --target osv          -t saddle:2.0.165-v .
 #   docker build --target oswindows    -t saddle:2.0.165-windows .
 FROM scratch AS osgrapheneos
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="grapheneos"
-ENV SADDLE_OS_PROFILE=grapheneos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=grapheneos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the grapheneos os-distribution catalog lane)" \
       org.opencontainers.image.description="the grapheneos os-distribution seat as a catalog lane: a privacy and security hardened version of android — no runnable container base exists for an android firmware seat, the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -520,9 +604,23 @@ LABEL org.opencontainers.image.title="saddle (the grapheneos os-distribution cat
 COPY osprofiles/grapheneos.json /saddle/osprofile.json
 
 FROM scratch AS osmaruos
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="maruos"
-ENV SADDLE_OS_PROFILE=maruos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=maruos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the maru os os-distribution catalog lane)" \
       org.opencontainers.image.description="the maru os os-distribution seat as a catalog lane: maru os is firmware, not an application — no runnable container base exists for a firmware seat, the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -531,9 +629,23 @@ LABEL org.opencontainers.image.title="saddle (the maru os os-distribution catalo
 COPY osprofiles/maruos.json /saddle/osprofile.json
 
 FROM scratch AS osv
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="v"
-ENV SADDLE_OS_PROFILE=v
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=v \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the v os-distribution catalog lane)" \
       org.opencontainers.image.description="the v os-distribution seat as a catalog lane: the v language platform target the languagev compiler seat of the ninety modalities answers, never a guest distribution — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -542,9 +654,23 @@ LABEL org.opencontainers.image.title="saddle (the v os-distribution catalog lane
 COPY osprofiles/v.json /saddle/osprofile.json
 
 FROM scratch AS oswindows
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="windows"
-ENV SADDLE_OS_PROFILE=windows
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=windows \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the windows os-distribution catalog lane)" \
       org.opencontainers.image.description="the windows os-distribution seat as a catalog lane: the guest vocabulary the exe seats execute — the container standard answers the windows seats as binary targets, the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -553,9 +679,23 @@ LABEL org.opencontainers.image.title="saddle (the windows os-distribution catalo
 COPY osprofiles/windows.json /saddle/osprofile.json
 
 FROM scratch AS ospostmarketos
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="postmarketos"
-ENV SADDLE_OS_PROFILE=postmarketos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=postmarketos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the postmarketos os-distribution catalog lane)" \
       org.opencontainers.image.description="the postmarketos os-distribution seat as a catalog lane: postmarketos is the alpine-based mobile distribution real devices boot — no runnable container base exists for this seat, the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -564,9 +704,23 @@ LABEL org.opencontainers.image.title="saddle (the postmarketos os-distribution c
 COPY osprofiles/postmarketos.json /saddle/osprofile.json
 
 FROM scratch AS oslineageos
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="lineageos"
-ENV SADDLE_OS_PROFILE=lineageos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=lineageos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the lineageos os-distribution catalog lane)" \
       org.opencontainers.image.description="the lineageos os-distribution seat as a catalog lane: lineageos is the community android continuation — the aftermarket mobile seat on the arm64 legs, the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -575,9 +729,23 @@ LABEL org.opencontainers.image.title="saddle (the lineageos os-distribution cata
 COPY osprofiles/lineageos.json /saddle/osprofile.json
 
 FROM scratch AS oscalyxos
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="calyxos"
-ENV SADDLE_OS_PROFILE=calyxos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=calyxos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the calyxos os-distribution catalog lane)" \
       org.opencontainers.image.description="the calyxos os-distribution seat as a catalog lane: calyxos is the privacy-focused android distribution, the hardened mobile seat beside grapheneos — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -586,9 +754,23 @@ LABEL org.opencontainers.image.title="saddle (the calyxos os-distribution catalo
 COPY osprofiles/calyxos.json /saddle/osprofile.json
 
 FROM scratch AS osarchlinux
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="archlinux"
-ENV SADDLE_OS_PROFILE=archlinux
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=archlinux \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the archlinux os-distribution catalog lane)" \
       org.opencontainers.image.description="the archlinux os-distribution seat as a catalog lane: archlinux is the rolling-release distribution omarchy builds on, the pacman desktop seat — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -597,9 +779,23 @@ LABEL org.opencontainers.image.title="saddle (the archlinux os-distribution cata
 COPY osprofiles/archlinux.json /saddle/osprofile.json
 
 FROM scratch AS osalpine
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="alpine"
-ENV SADDLE_OS_PROFILE=alpine
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=alpine \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the alpine os-distribution catalog lane)" \
       org.opencontainers.image.description="the alpine os-distribution seat as a catalog lane: alpine is the musl-based lightweight distribution, the small-footprint seat the musl legs answer — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -608,9 +804,23 @@ LABEL org.opencontainers.image.title="saddle (the alpine os-distribution catalog
 COPY osprofiles/alpine.json /saddle/osprofile.json
 
 FROM scratch AS osdebian
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="debian"
-ENV SADDLE_OS_PROFILE=debian
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=debian \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the debian os-distribution catalog lane)" \
       org.opencontainers.image.description="the debian os-distribution seat as a catalog lane: debian is the universal operating system, the apt desktop seat the widest hardware matrix answers — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -619,9 +829,23 @@ LABEL org.opencontainers.image.title="saddle (the debian os-distribution catalog
 COPY osprofiles/debian.json /saddle/osprofile.json
 
 FROM scratch AS osfedora
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="fedora"
-ENV SADDLE_OS_PROFILE=fedora
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=fedora \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the fedora os-distribution catalog lane)" \
       org.opencontainers.image.description="the fedora os-distribution seat as a catalog lane: fedora is the red-hat-upstream community distribution, the rpm desktop seat beside the apt rows — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -630,9 +854,23 @@ LABEL org.opencontainers.image.title="saddle (the fedora os-distribution catalog
 COPY osprofiles/fedora.json /saddle/osprofile.json
 
 FROM scratch AS osnixos
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="nixos"
-ENV SADDLE_OS_PROFILE=nixos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=nixos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the nixos os-distribution catalog lane)" \
       org.opencontainers.image.description="the nixos os-distribution seat as a catalog lane: nixos is the declarative distribution the nix package manager builds, the reproducible-system seat — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -641,9 +879,23 @@ LABEL org.opencontainers.image.title="saddle (the nixos os-distribution catalog
 COPY osprofiles/nixos.json /saddle/osprofile.json
 
 FROM scratch AS osvoid
-ARG SADDLE_VERSION=2.0.170
+ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="void"
-ENV SADDLE_OS_PROFILE=void
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=void \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the void os-distribution catalog lane)" \
       org.opencontainers.image.description="the void os-distribution seat as a catalog lane: void is the independent source-rolling distribution, the xbps seat the musl legs answer beside alpine — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \

package/README.md

@@ -31,7 +31,7 @@ domain modules land beside the saddle domains:
 | `media.ts`, `render.ts`, `quantum.ts`, `tiers.ts` | media pipeline, GPU registry, quantum simulation, tier policy |
 | `security.ts`, `alternatives.ts` | hardening gates and the alternative-stack catalog |
 | `index.html`, `App.tsx`, `sol/` | the single SPA shell and the Sol theme (one tsx app with one stylesheet per theme) |
-| `server.ts`, `sandbox.ts` | the zero-dependency self-hosted API of the 2.0.170 grand-merge envelope (`node server.ts`; the api answers its version at `/api/v1/health`) and the browser-pure engine port |
+| `server.ts`, `sandbox.ts` | the zero-dependency self-hosted API of the 2.0.171 grand-merge envelope (`node server.ts`; the api answers its version at `/api/v1/health`) and the browser-pure engine port |
 | `vercel.json`, `netlify.toml` | the platform deploy adapters beside the surface they publish (the caddy ghost stays out of the tree) |
 | `specs/*` package exports | processors, gpus, cores, boards and the qemu/mttg/passage/docker envelopes |
 

package/docker.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "docker.config",
     "title": "saddle - Docker Engine and Containerization Configuration",
-    "version": "2.0.170",
+    "version": "2.0.171",
     "date": "2026-11-06",
     "language": "en",
     "sources": [

package/docs/ninetymodalities.md

@@ -201,3 +201,35 @@ additions (postmarketos, lineageos, calyxos, archlinux, alpine, debian,
 fedora, nixos and void) — with the arch pairings, the engine plan trio
 binding and the plan-resource law. see
 [osdistributions.md](osdistributions.md) for the record.
+
+## the toolchain rung (the pr13 completion law)
+
+the honesty audit's fourteen planned seats walked live: the engine
+container's toolchain layer now carries the runtimes the host-spawn
+seats demand, every carrier pinned to the exact version the engines
+catalog answers and asserted after install —
+
+- the apt lanes every arch leg carries: make, ninja, lua 5.4, php-cli
+  and the gcc toolchain the v and nim codegen rides;
+- the prefab carriers the two native legs (amd64, arm64) carry: rustup
+  1.99.1 (rustc and cargo, edition 2024 answering the rust floor the
+  catalog pins), zig 0.17.1, wasmtime 50.0.1 (the wasi preview runtime),
+  the v 0.5.2 compiler (the exact tag the catalog's v seat answers),
+  nim 2.4.0 and the dotnet sdk 10.0.403 (the lts channel, the
+  file-based app law the seat's `dotnet run payload.cs` rides);
+- the exotic legs (ppc64le, s390x) answer the honest coded absence the
+  seats' probes name at dispatch — HOST_RUNTIME_ABSENT, the seat never
+  fakes a run, the same law the arch case carries.
+
+the host-spawn staging grew the payload-name law: the
+extension-sensitive runtimes answer their own staged filename (the
+payload.wasm, payload.rs, payload.v, payload.cs, payload.zig and
+payload.nim seats beside the cargo manifest harness — the minimal
+Cargo.toml the seat stages beside src/main.rs so `cargo run --offline`
+answers a real build), and the three in-process seats whose executors
+always drove (the serverless v8 isolate, the git objects vfs, the doh
+resolver) walk the live lines they always deserved.
+
+the census answers the ninety-wave promise whole: **81 live, 9 host, 0
+planned, 90 records** — the plan the owner charged, the record never
+pretending a wiring the engine does not drive.

package/modalities.ts

@@ -1576,6 +1576,15 @@ function hostspawnseat(options: {
   env?: Record<string, string>;
   priority?: ModalityPriority;
   probe?: string;
+  /** the staged payload filename — the extension-sensitive runtimes (the
+   * dotnet file-based app that demands .cs, the nim compiler that demands
+   * .nim, the zig and v sources, the wasm module, the cargo manifest)
+   * answer their own staged name instead of the bare payload default. */
+  payloadname?: string;
+  /** the extra staged files one seat's payload model demands beside the
+   * payload itself (the cargo manifest's src tree, the makefile's
+   * includes) — read from the request inputs, never the host. */
+  extrafiles?: (request: ModalityRunRequest) => Record<string, string>;
 }): ModalityExecutor {
   return async (request: ModalityRunRequest): Promise<ModalityRunResult> => {
     const started = Date.now();
@@ -1583,9 +1592,30 @@ function hostspawnseat(options: {
     const profile = request.profile ?? DEFAULTPROFILE;
     const deadline = clampdeadline(request.deadlinems);
     const staging = await stageworkspace(options.slug, request.code);
+    let file = staging.payload;
+    try {
+      const fsp = (await import("node:fs/promises")) as typeof import("node:fs/promises");
+      const nodepath = (await import("node:path")) as typeof import("node:path");
+      if (options.payloadname !== undefined && options.payloadname !== "payload") {
+        file = nodepath.join(staging.dir, options.payloadname);
+        await fsp.mkdir(nodepath.dirname(file), { recursive: true });
+        await fsp.copyFile(staging.payload, file);
+      }
+      if (options.extrafiles !== undefined) {
+        const extras = options.extrafiles(request);
+        for (const [name, content] of Object.entries(extras)) {
+          const target = nodepath.join(staging.dir, name);
+          await fsp.mkdir(nodepath.dirname(target), { recursive: true });
+          await fsp.writeFile(target, content, "utf8");
+        }
+      }
+    } catch (error) {
+      await unstageworkspace(staging.dir);
+      return failureresult(options.slug, options.num, options.lane, error, started);
+    }
     let argv: readonly string[];
     try {
-      argv = options.argv({ code: request.code, file: staging.payload, request });
+      argv = options.argv({ code: request.code, file, request });
     } catch (error) {
       // the gate seats refuse before the plan stamps: the typed refusal
       // (the mz, the elf, the wasm magic laws) answers an honest failed
@@ -2611,7 +2641,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "runnerwasi",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["wasmtime"],
     hardening: ["capability-imports"],
     boot: "hot",
@@ -2630,6 +2660,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       argv: ({ file }) => ["wasmtime", "--dir", "/sandbox::/sandbox", file],
       hardening: ["capability-imports", "wasi-snapshot"],
       probe: "the host must carry wasmtime (the wasi preview runtime)",
+      payloadname: "payload.wasm",
     }),
   },
   {
@@ -2638,7 +2669,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "runnerserverless",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["v8"],
     hardening: ["no-fs", "cpu-quota"],
     boot: "hot",
@@ -3021,7 +3052,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagerust",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["rustc"],
     hardening: ["crate-allowlist"],
     boot: "hot",
@@ -3039,6 +3070,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       binary: "rustc",
       argv: ({ file }) => ["rustc", "-O", "--edition", "2024", "-o", "/sandbox/languagerust/payload", file],
       hardening: ["crate-allowlist"],
+      payloadname: "payload.rs",
     }),
   },
   {
@@ -3047,7 +3079,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagecargo",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["cargo"],
     hardening: ["crate-allowlist"],
     boot: "hot",
@@ -3066,6 +3098,18 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       argv: () => ["cargo", "run", "--offline"],
       env: { CARGO_HOME: "/sandbox/cargo", CARGO_NET_OFFLINE: "true" },
       hardening: ["crate-allowlist", "offline-only"],
+      payloadname: "src/main.rs",
+      extrafiles: () => ({
+        "Cargo.toml": [
+          "[package]",
+          "name = \"payload\"",
+          "version = \"0.1.0\"",
+          "edition = \"2021\"",
+          "",
+          "[dependencies]",
+          "",
+        ].join("\n"),
+      }),
     }),
   },
   {
@@ -3074,7 +3118,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagev",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["v"],
     hardening: ["package-allowlist"],
     boot: "hot",
@@ -3092,6 +3136,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       binary: "v",
       argv: ({ file }) => ["v", "run", file],
       env: { VFLAGS: "-prod" },
+      payloadname: "payload.v",
       hardening: ["package-allowlist"],
       probe: "the host must carry the v compiler (the 0.5.2 seat the catalog pins)",
     }),
@@ -3129,7 +3174,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagedotnet",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["dotnet"],
     hardening: ["assembly-allowlist"],
     boot: "warm",
@@ -3147,6 +3192,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       binary: "dotnet",
       argv: ({ file }) => ["dotnet", "run", file],
       hardening: ["assembly-allowlist", "mz-gate"],
+      payloadname: "payload.cs",
     }),
   },
   {
@@ -3181,7 +3227,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagelua",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["lua"],
     hardening: ["sandbox-env"],
     boot: "hot",
@@ -3207,7 +3253,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagezig",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["zig"],
     hardening: ["package-allowlist"],
     boot: "hot",
@@ -3225,6 +3271,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       binary: "zig",
       argv: ({ file }) => ["zig", "run", file],
       hardening: ["package-allowlist"],
+      payloadname: "payload.zig",
     }),
   },
   {
@@ -3233,7 +3280,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagenim",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["nim"],
     hardening: ["package-allowlist"],
     boot: "hot",
@@ -3251,6 +3298,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       binary: "nim",
       argv: ({ file }) => ["nim", "r", file],
       hardening: ["package-allowlist"],
+      payloadname: "payload.nim",
     }),
   },
   {
@@ -3259,7 +3307,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagephp",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["php"],
     hardening: ["ini-lockdown"],
     boot: "hot",
@@ -3366,7 +3414,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "buildmake",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["make"],
     hardening: ["recipe-allowlist"],
     boot: "hot",
@@ -3419,7 +3467,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "buildninja",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["ninja"],
     hardening: ["recipe-allowlist"],
     boot: "hot",
@@ -4040,7 +4088,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "fsgitobjects",
     lane: "sandbox",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["git", "vfs"],
     hardening: ["content-hash", "chunk-catalog"],
     boot: "hot",
@@ -4535,7 +4583,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "networkdoh",
     lane: "sandbox",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["doh"],
     hardening: ["resolver-allowlist"],
     boot: "hot",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/saddle",
-  "version": "2.0.170",
+  "version": "2.0.172",
   "private": false,
   "description": "binary computing engine that turns distributed storage into a publishable working set carrying the merged virtual-hardware engine (the saddle + e2ugh grand merge)",
   "license": "GPL-3.0-only",
@@ -48,9 +48,9 @@
     "vm:create": "node --import tsx ./cli.ts vm",
     "vm:validate": "node --import tsx ./cli.ts vmlint",
     "gpu:list": "node --import tsx ./cli.ts gpus",
-    "docker:build": "docker build -f Dockerfile -t saddle:2.0.170 ..",
-    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.0.170",
-    "docker:health": "docker run --rm -d --name saddle-health -p 8080:8080 saddle:2.0.170 >/dev/null && sleep 5; curl -fsS http://localhost:8080/api/v1/health || true; docker rm -f saddle-health >/dev/null 2>&1 || true",
+    "docker:build": "docker build -f Dockerfile -t saddle:2.0.171 ..",
+    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.0.171",
+    "docker:health": "docker run --rm -d --name saddle-health -p 8080:8080 saddle:2.0.171 >/dev/null && sleep 5; curl -fsS http://localhost:8080/api/v1/health || true; docker rm -f saddle-health >/dev/null 2>&1 || true",
     "firecracker:boot": "firecracker --api-sock /tmp/fc-saddle.sock --config-file vmconfig.json 2>/dev/null || echo 'firecracker 1.16.1 warm-pool boot 125ms target'",
     "py:bridge": "python3 qemubridge.py",
     "py:test": "python3 -m pytest -q || python3 qemubridge.py",
@@ -131,13 +131,13 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.168",
-    "@wenathlan/cadria": "~2.0.168",
-    "@wenathlan/debonair": "~2.0.168",
-    "@wenathlan/devthink": "~2.0.168",
-    "@wenathlan/getry": "~2.0.168",
-    "@wenathlan/saddle": "~2.0.168",
-    "@wenathlan/vault": "~2.0.168",
+    "@wenathlan/argan": "~2.0.171",
+    "@wenathlan/cadria": "~2.0.171",
+    "@wenathlan/debonair": "~2.0.171",
+    "@wenathlan/devthink": "~2.0.170",
+    "@wenathlan/getry": "~2.0.171",
+    "@wenathlan/saddle": "~2.0.171",
+    "@wenathlan/vault": "~2.0.171",
     "add": "^2.0.9",
     "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
@@ -188,7 +188,7 @@
     "playwright": "^1.65.0",
     "pnpm": "^12.18.0",
     "postcss": "^8.5.32",
-    "postcss-selector-parser": "^7.1.8",
+    "postcss-selector-parser": "^7.2.0",
     "prettier": "^3.9.10",
     "prisma": "^7.10.1",
     "proxy-addr": "^2.0.8",
@@ -304,13 +304,17 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.168",
-    "@wenathlan/cadria": "~2.0.168",
-    "@wenathlan/debonair": "~2.0.168",
-    "@wenathlan/devthink": "~2.0.168",
-    "@wenathlan/getry": "~2.0.168",
-    "@wenathlan/saddle": "~2.0.168",
-    "@wenathlan/vault": "~2.0.168",
+    "@wenathlan/argan": "~2.0.171",
+    "@wenathlan/cadria": "~2.0.171",
+    "@wenathlan/cobaia": "~2.0.171",
+    "@wenathlan/debonair": "~2.0.171",
+    "@wenathlan/devthink": "~2.0.170",
+    "@wenathlan/forge": "~2.0.171",
+    "@wenathlan/foundry": "~2.0.171",
+    "@wenathlan/getry": "~2.0.171",
+    "@wenathlan/saddle": "~2.0.171",
+    "@wenathlan/stealthhead": "~2.0.171",
+    "@wenathlan/vault": "~2.0.171",
     "add": "^2.0.9",
     "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
@@ -361,7 +365,7 @@
     "playwright": "^1.65.0",
     "pnpm": "^12.18.0",
     "postcss": "^8.5.32",
-    "postcss-selector-parser": "^7.1.8",
+    "postcss-selector-parser": "^7.2.0",
     "prettier": "^3.9.10",
     "prisma": "^7.10.1",
     "proxy-addr": "^2.0.8",
@@ -477,13 +481,13 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.168",
-    "@wenathlan/cadria": "~2.0.168",
-    "@wenathlan/debonair": "~2.0.168",
-    "@wenathlan/devthink": "~2.0.168",
-    "@wenathlan/getry": "~2.0.168",
-    "@wenathlan/saddle": "~2.0.168",
-    "@wenathlan/vault": "~2.0.168",
+    "@wenathlan/argan": "~2.0.171",
+    "@wenathlan/cadria": "~2.0.171",
+    "@wenathlan/debonair": "~2.0.171",
+    "@wenathlan/devthink": "~2.0.170",
+    "@wenathlan/getry": "~2.0.171",
+    "@wenathlan/saddle": "~2.0.171",
+    "@wenathlan/vault": "~2.0.171",
     "add": "^2.0.9",
     "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
@@ -534,7 +538,7 @@
     "playwright": "^1.65.0",
     "pnpm": "^12.18.0",
     "postcss": "^8.5.32",
-    "postcss-selector-parser": "^7.1.8",
+    "postcss-selector-parser": "^7.2.0",
     "prettier": "^3.9.10",
     "prisma": "^7.10.1",
     "proxy-addr": "^2.0.8",
@@ -572,13 +576,13 @@
     "webpack": "^5.112.2",
     "webpack-cli": "^7.3.1",
     "wouter": "^3.13.0",
+    "xcode": {
+      "uuid": "11.1.1"
+    },
     "yaml": "^2.9.1",
     "z-ai-web-dev-sdk": "^0.0.18",
     "zod": "^4.6.7",
-    "zustand": "^5.1.0",
-    "xcode": {
-      "uuid": "11.1.1"
-    }
+    "zustand": "^5.1.0"
   },
   "type": "module",
   "sideEffects": false,
@@ -698,6 +702,5 @@
     "quantum.ts"
   ],
   "main": "./index.ts",
-  "types": "./index.ts",
-  "optionalDependencies": {}
+  "types": "./index.ts"
 }

package/sandbox.ts

@@ -2244,8 +2244,24 @@ export function specenvlimits(env: Record<string, string | undefined>): sandboxs
 /** the three runtime bases of the saddle fleet. */
 export type sandboxbaseid = 'max' | 'balanced' | 'lite';
 
-/** the guest operating systems a sandbox can boot. */
-export type sandboxosid = 'android' | 'grapheneos' | 'linux' | 'omarchy' | 'windows';
+/** the guest operating systems a sandbox can boot — the eleven-seat OS
+ *  tab the owner's standardization ordered: the five historical seats
+ *  (android, grapheneos, linux, omarchy, windows) beside the six catalog
+ *  distributions that carry honest amd64 and arm64 legs in the published
+ *  grid (vanillaos, archlinux, alpine, debian, fedora, nixos), so the OS
+ *  chip row answers the same breadth the container catalog ships. */
+export type sandboxosid =
+  | 'android'
+  | 'grapheneos'
+  | 'linux'
+  | 'omarchy'
+  | 'windows'
+  | 'vanillaos'
+  | 'archlinux'
+  | 'alpine'
+  | 'debian'
+  | 'fedora'
+  | 'nixos';
 
 /** the guest cpu architectures (amd64 == the x86_64 of the engine bank). */
 export type sandboxarchid = 'arm64' | 'amd64';
@@ -2267,6 +2283,12 @@ export const SANDBOXOSES: readonly sandboxosid[] = [
   'linux',
   'omarchy',
   'windows',
+  'vanillaos',
+  'archlinux',
+  'alpine',
+  'debian',
+  'fedora',
+  'nixos',
 ];
 export const SANDBOXARCHES: readonly sandboxarchid[] = ['arm64', 'amd64'];
 export const SANDBOXFORMS: readonly sandboxformid[] = ['runtime-node', 'full-docker', 'published'];

package/tsconfig.json

@@ -24,6 +24,9 @@
     "moduleResolution": "NodeNext",
     "types": ["node", "vite/client"],
     "paths": {
+      "@wenathlan/vault/labelstore": ["../vault/labelstore.ts"],
+      "@wenathlan/vault/onboardingstore": ["../vault/onboardingstore.ts"],
+
       "@/*": ["./sol/*", "./*"],
       "@saddle/isolation": ["./isolation.ts"]
     }