@wenathlan/saddle 2.0.6 → 2.0.150

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/saddle",
-  "version": "2.0.6",
+  "version": "2.0.150",
   "description": "binary computing engine that turns distributed storage into a publishable working set carrying the merged virtual-hardware engine (the saddle + e2ugh grand merge)",
   "type": "module",
   "private": false,
@@ -19,11 +19,23 @@
     "xcode": {
       "uuid": "11.1.1"
     },
-    "uuid": "^11.1.1"
+    "uuid": "^11.1.1",
+    "@grpc/grpc-js": "1.14.5",
+    "deepmerge-ts": "^8.0.0",
+    "esbuild": "^0.28.2",
+    "follow-redirects": "^1.16.1",
+    "mysql2": "^3.24.6",
+    "postcss-selector-parser": "^7.1.6",
+    "source-map-js": "1.2.2",
+    "proxy-addr": "2.0.8",
+    "body-parser": "^2.4.0",
+    "fast-uri": "^3.1.9",
+    "zod": "^4.6.7",
+    "undici": "^7.30.1"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/wenathlan/saddle.git"
+    "url": "https://github.com/wenathlan/devthink"
   },
   "bugs": {
     "url": "https://github.com/wenathlan/saddle/issues"
@@ -32,16 +44,40 @@
   "keywords": [
     "distributed computing",
     "virtual memory",
+    "virtual machine",
+    "virtual cpu",
+    "virtual gpu",
     "runner",
     "storage",
-    "automation"
+    "automation",
+    "llvmpipe",
+    "lavapipe",
+    "rusticl",
+    "qemu",
+    "firecracker",
+    "mesa",
+    "ghcr"
   ],
   "engines": {
-    "node": ">=26.7.0",
-    "npm": ">=10.9.2"
+    "bare": "^1.18.0",
+    "bun": "^1.4.2",
+    "chrome": "^16.0.912",
+    "cnpm": "^9.4.0",
+    "corepack": "^0.35.0",
+    "deno": "^2.9.5",
+    "ecmascript": "^5.0.0",
+    "firefox": ">=0.8.0",
+    "iojs": "^1.0.0",
+    "node": ">=26.12.1 <27",
+    "npm": "^12.1.0",
+    "pnpm": "^12.6.0",
+    "teleport": ">=0.2.0",
+    "typescript": "^5.8.0",
+    "vscode": "^1.118.0",
+    "yarn": "^4.17.1"
   },
   "peerDependencies": {
-    "playwright": "^1.62.1"
+    "playwright": "^1.63.0"
   },
   "peerDependenciesMeta": {
     "playwright": {
@@ -65,6 +101,7 @@
     "./sessions": "./dist/foundation.js",
     "./modes": "./dist/modes.js",
     "./mode": "./dist/modes.js",
+    "./sandbox": "./dist/sandbox.js",
     "./browser": "./dist/browser.js",
     "./browser-playwright": "./dist/browser.js",
     "./bot": "./dist/automation.js",
@@ -114,7 +151,7 @@
   },
   "files": [
     "dist",
-    "web/extension/manifest.json",
+    "manifest.json",
     "docs",
     "README.md",
     "LICENSE",
@@ -155,7 +192,7 @@
     "build:engine": "node tests/scripts/buildengine.mjs",
     "check": "npm run build:engine && node --check dist/index.js && node --check dist/execution.js && node --check dist/cli.js && node --check dist/browser.js && node --check dist/distribution.js",
     "formatcheck": "node --import tsx format.ts",
-    "test": "npm run build:engine && node --import tsx --test tests/engine.test.ts tests/extension.test.ts tests/package.test.ts tests/release.test.ts tests/virtualengine.test.ts tests/features.test.ts tests/media.test.ts tests/render.test.ts tests/simulation.test.ts tests/specs.test.ts tests/virtualcpu.test.ts tests/virtualgpu.test.ts tests/virtualmemory.test.ts tests/web.test.ts tests/workflow.test.ts",
+    "test": "vitest run",
     "test:legacy": "vitest run tests/agent-utils.test.ts tests/cache.test.ts tests/chunking.test.ts tests/core.test.ts tests/errors.test.ts tests/llms-txt.test.ts tests/middleware.test.ts tests/proxy.test.ts tests/tokens.test.ts",
     "run": "npm run build:engine && node dist/cli.js",
     "extension:build": "npm run build:engine && node dist/browser.js",
@@ -166,18 +203,18 @@
     "prepublishOnly": "npm run pack:check",
     "tauri": "npx --yes @tauri-apps/cli@2.11.4",
     "capacitor:sync:android": "npm run web:build:pages && cap sync android",
-    "capacitor:flatten:android": "node tests/scripts/flattenandroid.mjs",
     "capacitor:sync:ios": "npm run web:build:pages && cap sync ios",
     "native:check:flat": "node tests/scripts/validateflatnative.mjs",
-    "web:dev": "vite --config web/vite.config.ts --host",
-    "web:check": "npm run build:engine && tsc --project web/tsconfig.json --noEmit",
-    "web:build": "vite build --config web/vite.config.ts",
-    "web:build:pages": "vite build --config web/vite.config.ts",
+    "web:dev": "vite --host",
+    "web:check": "npm run build:engine && tsc --project tsconfig.json --noEmit",
+    "web:build": "vite build",
+    "web:build:pages": "vite build",
+    "web:preview": "vite preview --host",
     "build": "npm run build:engine",
     "build:tsc": "tsc -p tsconfig.json --noEmitOnError false",
     "start": "node --import tsx ./cli.ts plan",
     "dev": "node --import tsx --watch ./cli.ts",
-    "web": "node web/server.js",
+    "web": "node webserver.ts",
     "qemu:bridge": "node ./orchestrator.ts --qemu-bridge",
     "toolchain:verify": "node --version && npx tsc --version && python3 --version && qemu-system-x86_64 --version || true && docker --version",
     "dev:tsx": "node --import tsx --watch ./cli.ts",
@@ -194,100 +231,114 @@
     "test:unit": "node --test tests/*.test.ts",
     "test:e2e": "node --test tests/*.test.ts",
     "qemu:version": "qemu-system-x86_64 --version || echo 'qemu 11.1.0 expected 2026-08-22'",
-    "vm:create": "node ./index.ts --create-vm",
-    "vm:validate": "node ./index.ts --validate-vm",
-    "gpu:list": "node ./index.ts --list-gpus",
-    "docker:build": "docker build -f Dockerfile -t saddle:2.0.6 .",
-    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.0.6",
-    "docker:health": "docker run --rm saddle:2.0.6 qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || true",
+    "vm:create": "node --import tsx ./cli.ts vm",
+    "vm:validate": "node --import tsx ./cli.ts vmlint",
+    "gpu:list": "node --import tsx ./cli.ts gpus",
+    "docker:build": "docker build -f Dockerfile -t saddle:2.0.150 .",
+    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.0.150",
+    "docker:health": "docker run --rm saddle:2.0.150 qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || true",
     "firecracker:boot": "firecracker --api-sock /tmp/fc-saddle.sock --config-file vmconfig.json 2>/dev/null || echo 'firecracker 1.16.1 warm-pool boot 125ms target'",
     "py:bridge": "python3 qemubridge.py",
     "py:test": "python3 -m pytest -q || python3 qemubridge.py",
     "clean": "rm -rf dist coverage .biome __pycache__",
-    "prepare": "echo 'saddle grand-merge toolchain 2026-08-23: Node 26.7.0 Current / 24.19.0 LTS, npm 12.0.2, TS 7.0.2, Python 3.14.7, Docker 29.7.2, QEMU 11.1.0, Mesa 26.2.1, LLVM 22.1.8, Firecracker 1.16.1'",
+    "prepare": "echo 'saddle grand-merge toolchain 2026-08-23: Node 26.12.0 Current / 24.19.0 LTS, npm 12.0.2, TS 7.0.2, Python 3.14.7, Docker 29.7.2, QEMU 11.1.0, Mesa 26.2.1, LLVM 22.1.8, Firecracker 1.16.1'",
     "start:engine": "node --import tsx ./cli.ts plan"
   },
   "devDependencies": {
-    "@biomejs/biome": "^2.5.11",
-    "@capacitor/android": "^8.5.0",
-    "@capacitor/cli": "^8.5.1",
-    "@capacitor/core": "^8.5.0",
-    "@capacitor/ios": "^8.5.0",
-    "@hookform/resolvers": "^5.2.2",
-    "@radix-ui/react-accordion": "^1.2.12",
-    "@radix-ui/react-alert-dialog": "^1.1.15",
-    "@radix-ui/react-aspect-ratio": "^1.1.7",
-    "@radix-ui/react-avatar": "^1.1.10",
-    "@radix-ui/react-checkbox": "^1.3.3",
-    "@radix-ui/react-collapsible": "^1.1.12",
-    "@radix-ui/react-context-menu": "^2.2.16",
-    "@radix-ui/react-dialog": "^1.1.15",
-    "@radix-ui/react-dropdown-menu": "^2.1.16",
-    "@radix-ui/react-hover-card": "^1.1.15",
-    "@radix-ui/react-label": "^2.1.7",
-    "@radix-ui/react-menubar": "^1.1.16",
-    "@radix-ui/react-navigation-menu": "^1.2.14",
-    "@radix-ui/react-popover": "^1.1.15",
-    "@radix-ui/react-progress": "^1.1.7",
-    "@radix-ui/react-radio-group": "^1.3.8",
-    "@radix-ui/react-scroll-area": "^1.2.10",
-    "@radix-ui/react-select": "^2.2.6",
-    "@radix-ui/react-separator": "^1.1.7",
-    "@radix-ui/react-slider": "^1.3.6",
-    "@radix-ui/react-slot": "^1.2.3",
-    "@radix-ui/react-switch": "^1.2.6",
-    "@radix-ui/react-tabs": "^1.1.13",
-    "@radix-ui/react-toggle": "^1.1.10",
-    "@radix-ui/react-toggle-group": "^1.1.11",
-    "@radix-ui/react-tooltip": "^1.2.8",
-    "@tailwindcss/typography": "^0.5.15",
-    "@tailwindcss/vite": "^4.1.3",
-    "@types/google.maps": "^3.58.1",
-    "@types/node": "^26.4.0",
-    "@types/react": "^19.2.1",
-    "@types/react-dom": "^19.2.1",
-    "@vitejs/plugin-react": "^6.1.1",
-    "add": "^2.0.6",
-    "autoprefixer": "^10.4.20",
-    "axios": "^1.12.0",
+    "@biomejs/biome": "^2.6.2",
+    "@capacitor/android": "^8.5.3",
+    "@capacitor/cli": "^8.5.3",
+    "@capacitor/core": "^8.5.3",
+    "@capacitor/ios": "^8.5.3",
+    "@fluentui/react-icons": "^2.0.344",
+    "@hookform/resolvers": "^5.9.2",
+    "@libsql/client": "^0.18.0",
+    "@prisma/client": "^7.10.1",
+    "@radix-ui/react-accordion": "^1.3.1",
+    "@radix-ui/react-alert-dialog": "^1.2.1",
+    "@radix-ui/react-aspect-ratio": "^1.2.0",
+    "@radix-ui/react-avatar": "^1.3.1",
+    "@radix-ui/react-checkbox": "^1.4.1",
+    "@radix-ui/react-collapsible": "^1.2.1",
+    "@radix-ui/react-context-menu": "^2.4.1",
+    "@radix-ui/react-dialog": "^1.3.1",
+    "@radix-ui/react-dropdown-menu": "^2.2.1",
+    "@radix-ui/react-hover-card": "^1.2.1",
+    "@radix-ui/react-label": "^2.1.17",
+    "@radix-ui/react-menubar": "^1.2.1",
+    "@radix-ui/react-navigation-menu": "^1.4.1",
+    "@radix-ui/react-popover": "^1.3.1",
+    "@radix-ui/react-progress": "^1.2.1",
+    "@radix-ui/react-radio-group": "^1.5.1",
+    "@radix-ui/react-scroll-area": "^1.4.0",
+    "@radix-ui/react-select": "^2.4.1",
+    "@radix-ui/react-separator": "^1.2.0",
+    "@radix-ui/react-slider": "^1.6.1",
+    "@radix-ui/react-slot": "^1.5.0",
+    "@radix-ui/react-switch": "^1.4.1",
+    "@radix-ui/react-tabs": "^1.2.1",
+    "@radix-ui/react-toggle": "^1.2.1",
+    "@radix-ui/react-toggle-group": "^1.2.1",
+    "@radix-ui/react-tooltip": "^1.4.1",
+    "@tailwindcss/typography": "^0.5.20",
+    "@tailwindcss/vite": "^4.3.3",
+    "@types/google.maps": "^3.66.7",
+    "@types/node": "^26.6.5",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "@vitejs/plugin-react": "^6.1.2",
+    "add": "^2.0.9",
+    "autoprefixer": "^10.6.1",
+    "axios": "^1.20.0",
+    "better-sqlite3": "^13.0.3",
+    "cheerio": "^1.2.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
+    "drizzle-kit": "^0.31.11",
+    "drizzle-orm": "^0.45.4",
     "embla-carousel-react": "^8.6.0",
-    "esbuild": "^0.25.0",
-    "framer-motion": "^13.1.1",
-    "input-otp": "^1.4.2",
+    "emittery": "^2.2.0",
+    "esbuild": "^0.28.2",
+    "framer-motion": "^13.5.1",
+    "hono": "^4.13.13",
+    "input-otp": "^1.5.0",
     "jsdom": "26.1.0",
-    "lucide-react": "^0.453.0",
-    "nanoid": "^5.1.5",
+    "lucide-react": "^1.61.0",
+    "mysql2": "^3.24.6",
+    "nanoid": "^6.0.2",
     "next-themes": "^0.4.6",
-    "postcss": "^8.4.47",
-    "prettier": "^3.6.2",
-    "react": "^19.2.1",
-    "react-day-picker": "^9.11.1",
-    "react-dom": "^19.2.1",
-    "react-hook-form": "^7.64.0",
-    "react-resizable-panels": "^3.0.6",
-    "recharts": "^2.15.2",
-    "sonner": "^2.0.7",
-    "streamdown": "^2.6.0",
-    "tailwind-merge": "^3.3.1",
-    "tailwindcss": "^4.1.14",
+    "p-limit": "^7.3.3",
+    "playwright": "^1.64.1",
+    "p-retry": "^8.0.1",
+    "postcss": "^8.5.31",
+    "prettier": "^3.9.10",
+    "prisma": "^7.10.1",
+    "react": "^19.3.1",
+    "react-day-picker": "^10.0.2",
+    "react-dom": "^19.3.1",
+    "react-hook-form": "^7.91.0",
+    "react-resizable-panels": "^4.14.8",
+    "recharts": "^3.10.1",
+    "sonner": "^2.0.8",
+    "streamdown": "^2.7.1",
+    "tailwind-merge": "^3.7.0",
+    "tailwindcss": "^4.3.3",
     "tailwindcss-animate": "^1.0.7",
-    "tsx": "^4.19.1",
+    "tsx": "^4.23.15",
     "tw-animate-css": "^1.4.0",
     "typescript": "7.0.2",
     "vaul": "^1.1.2",
-    "vite": "^8.2.2",
-    "vite-plugin-manus-runtime": "^0.0.58",
-    "vitest": "^4.1.10",
-    "wouter": "^3.3.5",
-    "zod": "^4.1.12"
+    "vite": "^8.3.5",
+    "vite-plugin-manus-runtime": "^0.0.59",
+    "vitest": "^5.0.5",
+    "wouter": "^3.13.0",
+    "zod": "^4.6.7"
   },
   "optionalDependencies": {
-    "commander": "^13.1.0",
+    "commander": "^15.0.0",
     "dockerode": "^5.0.1",
-    "express": "^5.1.0"
+    "express": "^5.3.0"
   },
   "systemLibraries": {
     "note": "system libraries, not npm packages (declared by nested_package.json v3 as dependencies; kept here as build-time system requirements only)",
@@ -301,9 +352,9 @@
   "saddle": {
     "date": "2026-08-23",
     "toolchain": {
-      "node": "26.7.0",
+      "node": "26.12.0",
       "nodeLts": "24.19.0",
-      "nodeCurrent": "26.7.0",
+      "nodeCurrent": "26.12.0",
       "npm": "12.0.2",
       "typescript": "7.0.2",
       "python": "3.14.7",

package/passage.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "passage.config",
     "title": "saddle - Passage Configuration (3 homonym domains kept separate + host playbook)",
-    "version": "2.0.0",
+    "version": "2.1.6",
     "date": "2026-08-22",
     "language": "en",
     "conceptSeparation": "'passage' has 3 distinct domains in the pool: (1) gateway - L7 Pingora reverse proxy (routes/upstreams/TLS 1.3); (2) passthrough - PCI device passthrough modes (VFIO/MDEV/MIG/vGPU/SR-IOV/vfio-user/hotplug/KVM/none); (3) network_binding - VM network bridge modes + host port binding (never localhost). A 4th section carries the AetherForge host-side VFIO playbook. Sections are NEVER merged.",
@@ -56,7 +56,7 @@
   "gateway": {
     "meta": {
       "project": "saddle (grand merge)",
-      "version": "2.0.0",
+      "version": "2.1.6",
       "schema": "passage.config",
       "schemaversion": "2026.08.22",
       "engine": "passage gateway v6",

package/processors.json

@@ -3,7 +3,7 @@
   "meta": {
     "name": "processors.json",
     "title": "saddle - Unified Virtual Processor Database",
-    "version": "2.0.0",
+    "version": "2.0.127",
     "date": "2026-08-22",
     "language": "en",
     "description": "Union of the v5 canonical CPU database (6 x86_64 identities), the e2ugh processor catalog (55 SKUs incl. ARM/Apple/Xeon; lineage kept), Zen5/X3D microarchitecture specs and pool minis. Field conflicts resolved V5-first (model_name/max_boost_ghz/tdp_watts canonical); OMNI complementary fields (arch, core_type, topology, memory_support, release_date) merged in place. Versions re-pinned date-first 2026-08-22.",

package/qemu.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "qemu.config",
     "title": "saddle - QEMU Configuration (canonical JSON; sources: S6 TOML + v5 spec 11.1.0 + libvirt overlay)",
-    "version": "2.0.0",
+    "version": "2.0.127",
     "date": "2026-08-22",
     "language": "en",
     "format": "JSON (canonical v2 schema; sources were S6 TOML + V5 JSON schema + libvirt conf overlay)",
@@ -90,7 +90,7 @@
         "githubSetupPython": "actions/setup-python@v5.4.0",
         "platformKernel": "6.11.0+"
       },
-      "version": "2.0.0",
+      "version": "2.0.127",
       "title": "saddle - QEMU Configuration (canonical JSON; sources: S6 TOML + v5 spec 11.1.0 + libvirt overlay)",
       "project": "e2ugh v6",
       "toolchainV5": {

package/tiers.ts

@@ -337,6 +337,10 @@ export class sqlitekv implements Disposable {
   /** Absolute path of the database file. */
   readonly path: string;
 
+  /** the shared sqlite now cast (one literal, every statement reuses it) */
+  // biome-ignore lint/security/noSecrets: a sqlite strftime cast literal, not a credential
+  #nowsql = "CAST(strftime('%s','now') AS INTEGER)";
+
   #db: DatabaseSync;
   #closed = false;
   #getstmt: StatementSync | null = null;
@@ -373,8 +377,7 @@ export class sqlitekv implements Disposable {
         throw new tierserror(`invalid kvstore key length ${key?.length ?? 0}`);
       }
       this.#getstmt ??= this.#db.prepare(
-        "UPDATE kvstore SET accessedat = CAST(strftime('%s','now') AS INTEGER) " +
-          'WHERE key = ? RETURNING value',
+        `UPDATE kvstore SET accessedat = ${this.#nowsql} WHERE key = ? RETURNING value`,
       );
       const row = this.#getstmt.get(key) as { value: Uint8Array } | undefined;
       return row === undefined ? null : Buffer.from(row.value);
@@ -393,7 +396,10 @@ export class sqlitekv implements Disposable {
       }
       this.#setstmt ??= this.#db.prepare(
         'INSERT INTO kvstore (key, value, createdat, accessedat) VALUES (?, ?, ' +
-          "CAST(strftime('%s','now') AS INTEGER), CAST(strftime('%s','now') AS INTEGER)) " +
+          this.#nowsql +
+          ', ' +
+          this.#nowsql +
+          ') ' +
           'ON CONFLICT(key) DO UPDATE SET value = excluded.value, accessedat = excluded.accessedat',
       );
       this.#setstmt.run(key, value);

package/tsconfig.json

@@ -1,29 +1,34 @@
+// the saddle typescript baseline (the engine emission contract over the
+// app root and the Sol theme: one project covers both).
+// the grand-merge engine sources carry the loose typing baseline the
+// upstream saddle authored them under (strict: false with noCheck: true),
+// and the build engine emits the dist tree through this project — the
+// upstream options answer verbatim (outDir dist, NodeNext, declaration),
+// with the theme options (jsx, the vite client types) riding beside them
+// so the one project keeps covering the Sol surface.
 {
   "compilerOptions": {
-    "target": "ES2024",
     "module": "NodeNext",
     "moduleResolution": "NodeNext",
-    "rootDir": ".",
+    "target": "ES2024",
+    "lib": ["ES2024", "dom", "dom.iterable"],
+    "jsx": "react-jsx",
     "outDir": "dist",
+    "rootDir": ".",
     "declaration": true,
-    "declarationMap": true,
-    "sourceMap": true,
     "strict": false,
     "noCheck": true,
-    "noEmitOnError": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
     "isolatedModules": true,
-    "verbatimModuleSyntax": false,
     "allowSyntheticDefaultImports": true,
     "forceConsistentCasingInFileNames": true,
-    "skipLibCheck": true,
-    "lib": ["ES2024", "DOM", "DOM.Iterable"],
-    "types": ["node"]
+    "types": ["node", "vite/client"],
+    "paths": {
+      "@/*": ["./Sol/*", "./*"],
+      "@saddle/isolation": ["./isolation.ts"]
+    }
   },
-  "include": [
-    "index.ts",
-    "*.ts",
-    "examples/**/*.ts",
-    "jsdom.d.ts"
-  ],
-  "exclude": ["node_modules", "dist", "coverage", "docs", "web", "tests", "android", "ios", "desktop"]
-}
+  "include": ["*.ts", "*.tsx", "Sol/**/*.ts", "Sol/**/*.tsx", "docs/example-*.ts", "jsdom.d.ts"],
+  "exclude": ["node_modules", "dist", "**/*.test.ts", "coverage", "web", "tests", "build"]
+}

package/virtualcpu.ts

@@ -192,6 +192,7 @@ export const ZEN5FLAGS: readonly string[] = [
   'avx512vbmi',
   'avx512vbmi2',
   'avx512ifma',
+  // biome-ignore lint/security/noSecrets: a cpu capability flag list, not a credential
   'avx512vp2intersect',
   'sha_ni',
   'gfni',

package/virtualgpu.ts

@@ -462,6 +462,7 @@ export function nvidiaVgpuProfiles(): {
       return { profileSize, fbReservation, fb: profileSize - fbReservation };
     };
     return {
+      // biome-ignore lint/security/noSecrets: a memory layout formula string, not a credential
       formula: 'profileSize=X*0x40000000, fbReservation=0x8000000+(profileSize-0x40000000)/0x10',
       min: '384 MiB',
       example: calc(2),

package/virtualhardware.json

@@ -3,7 +3,7 @@
   "meta": {
     "name": "e2ugh",
     "title": "e2ugh v6 - Master Schema, Cross-References and Compatibility Matrix",
-    "version": "2.0.0",
+    "version": "2.0.127",
     "date": "2026-08-22",
     "language": "en",
     "description": "Master schema of the e2ugh v6 virtual hardware engine: binds the 10 specification files (cpu, cores, boards, gpu, vm.config, passage, docker, qemu, mttcg, mesa), defines the modularity ranges (vCPU 1-192, RAM 1-1024 GB, vRAM 8-96 GB via MIG), defaults, validation rules and the pinned 2026-08-22 compatibility matrix.",
@@ -41,7 +41,7 @@
         "llvm": "19.1.7",
         "dockerode": "4.0.8",
         "express": "5.1.0",
-        "commander": "13.1.0",
+        "commander": "15.0.0",
         "zod": "4.0.5",
         "ws": "8.18.1"
       },

package/vm.config.json

@@ -3,7 +3,7 @@
   "meta": {
     "name": "vm.config.json",
     "title": "e2ugh v6 - VM Profiles and Orchestrator Configuration (canonical schema)",
-    "version": "2.0.0",
+    "version": "2.1.6",
     "date": "2026-08-22",
     "language": "en",
     "description": "22 VM profiles consumed by the VHE orchestrator. Each profile binds a CPU identity (cpu.json), core count (cores.json), board (boards.json), GPU profile (gpu.json) and runtime (qemu.json, docker.json, mesa.json). Accel policy: KVM preferred when /dev/kvm exists, TCG multi-thread fallback on GitHub-hosted runners (see passage.json).",
@@ -1218,7 +1218,7 @@
       "kernelLts": "6.18.45",
       "libvirtVersion": "12.5.0",
       "nodeLts": "24.19.0",
-      "nodeCurrent": "26.7.0",
+      "nodeCurrent": "26.12.0",
       "typescript": "7.0.2",
       "runnerVersion": "2.336.0",
       "checkoutAction": "v6",
@@ -1613,7 +1613,7 @@
     },
     "toolchain": {
       "nodeLts": "24.19.0",
-      "nodeCurrent": "26.7.0",
+      "nodeCurrent": "26.12.0",
       "typescript": "7.0.2",
       "checkout": "v6",
       "setupNode": "v6",