@wenathlan/saddle 2.1.3 → 2.1.5

package/Dockerfile

@@ -13,7 +13,7 @@
 #      compute service published as ghcr.io/wenathlan/saddle:<version>
 #      across the four-arch family standard (amd64, arm64, ppc64le, s390x
 #      — the trixie slim base line; the stage also builds the web SPA so
-#      the image serves the self-hosted console via `node /app/web/server.js`).
+#      the image serves the self-hosted console via `node /app/web/server.ts`).
 #
 # saddle v2 (grand merge) - virtual hardware engine, multi-stage, multi-arch image.
 #
@@ -94,7 +94,7 @@
 #     -v vmdata:/data/vmdata -v webdata:/data/web \
 #     -v ./vm.config.json:/engine/vm.config.json:ro \
 #     -e PORT=8080 -e NODE_ENV=production -p 31280:8080 \
-#     ghcr.io/wenathlan/saddle:vhe-2.1.3
+#     ghcr.io/wenathlan/saddle:vhe-2.1.5
 #
 #   vheqemu (the guest runner; build it first with
 #   docker build --target qemu-runtime -t saddle/qemu:11.1.0 . because the
@@ -128,7 +128,7 @@
 #     -e VHE_GPU_PROFILE=b200 -e VHE_GPUS=8 -e VHE_MIG=1 \
 #     -e VHE_SMI_DRIVER=575.57.08 -e VHE_SMI_CUDA=12.9 \
 #     -e VHE_SMI_INTERVAL=30 -e VHE_SKIP_XVFB=1 -e VHE_SKIP_VALIDATE=1 \
-#     ghcr.io/wenathlan/saddle:vhe-2.1.3 /bin/bash -c '
+#     ghcr.io/wenathlan/saddle:vhe-2.1.5 /bin/bash -c '
 #       while true; do
 #         /usr/local/bin/nvidia-smi "$VHE_GPU_PROFILE" "$VHE_GPUS" || true
 #         sleep "$VHE_SMI_INTERVAL"
@@ -145,7 +145,7 @@
 #     -v qemudata:/data/qemudata \
 #     -v ./qemubridge.py:/engine/qemubridge.py:ro \
 #     -e QMP_SOCKET=/run/vhe/vm.qmp -e PYTHONUNBUFFERED=1 \
-#     ghcr.io/wenathlan/saddle:vhe-2.1.3 \
+#     ghcr.io/wenathlan/saddle:vhe-2.1.5 \
 #     python3 /engine/qemubridge.py --socket /run/vhe/vm.qmp status
 #
 #   saddle-node (the node-engine service, the former compose.yml
@@ -159,7 +159,7 @@
 #     --log-driver json-file --log-opt max-size=50m --log-opt max-file=5 \
 #     --tmpfs /tmp:size=2g,mode=1777 \
 #     -e SADDLE_MEMORY_ENGINE=ram -e SBOT_PLATFORM= -e SBOT_CDN_URL= \
-#     ghcr.io/wenathlan/saddle:2.1.3 \
+#     ghcr.io/wenathlan/saddle:2.1.5 \
 #     node dist/cli.js plan
 #
 #   observability (the former prometheus scraper of the full profile)
@@ -902,10 +902,10 @@ COPY qemu.config mttg.config passage.config docker.config /engine/
 # the web node ships inside the main container: the mesh edition (auth,
 # sqlite database, dashboard and the browser sandbox pages) runs from the
 # same image, so one container serves the engine AND the web surface.
-# run it with: docker run ghcr.io/wenathlan/saddle node /engine/web/server.js
+# run it with: docker run ghcr.io/wenathlan/saddle node /engine/web/server.ts
 COPY web /engine/web
 # the built web SPA (vite, from the saddle-build stage): the console
-# server (node /engine/web/server.js) serves web/dist/public - the
+# server (node /engine/web/server.ts) serves web/dist/public - the
 # unified React interface that absorbed the former static pages.
 COPY --from=saddle-build /app/web/dist /engine/web/dist
 
@@ -1271,7 +1271,7 @@ HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --start-interval=5s
 # OCI labels for registry introspection.
 LABEL org.opencontainers.image.title="saddle virtual-hardware engine (the grand merge)" \
       org.opencontainers.image.description="100% software virtual hardware: per-profile CPU/memory spoofing via LD_PRELOAD (max/balanced/lite), mesa 26.2.1 llvmpipe/lavapipe/rusticl, QEMU 11.1.0 TCG/MTTCG, virtual nvidia-smi adapter + NVML/CUDA shims, node 26.7.0, python bridge" \
-      org.opencontainers.image.version="2.1.3" \
+      org.opencontainers.image.version="2.1.5" \
       org.opencontainers.image.licenses="MIT" \
       org.opencontainers.image.source="https://github.com/wenathlan/saddle" \
       org.opencontainers.image.documentation="https://github.com/wenathlan/saddle/blob/main/README.md" \
@@ -1359,7 +1359,7 @@ RUN apt-get update \
 COPY --from=saddle-build /app/dist ./dist
 # the web service surface (self-hosted console): the built SPA
 # (web/dist/public from the saddle-build vite run) plus the pure-node
-# server stack (server.js, db.js, auth.js, mesh.js, sandbox.js,
+# server stack (server.ts, db.ts, auth.ts, mesh.ts, sandbox.ts,
 # mime.types, init.sql, schema.prisma) - zero npm dependencies, the
 # node 26 runtime carries everything (node:sqlite, node:crypto).
 COPY --from=saddle-build /app/web ./web

package/README.md

@@ -30,7 +30,7 @@ domain modules land beside the saddle domains:
 | `scheduler.ts`, `compute.ts`, `performance.ts` | job queues, batch compute and benchmark planning |
 | `media.ts`, `render.ts`, `quantum.ts`, `tiers.ts` | media pipeline, GPU registry, quantum simulation, tier policy |
 | `security.ts`, `alternatives.ts` | hardening gates and the alternative-stack catalog |
-| `web/` | the static console and the zero-dependency self-hosted API (`node web/server.js`) |
+| `web/` | the static console and the zero-dependency self-hosted API (`node web/server.ts`) |
 | `specs/*` package exports | processors, gpus, cores, boards and the qemu/mttg/passage/docker envelopes |
 
 The full pre-merge documentation of the engine lives in

package/boards.json

@@ -88,7 +88,7 @@
       }
     },
     "name": "boards.json",
-    "version": "2.1.3",
+    "version": "2.1.5",
     "title": "saddle - Virtual Motherboard Database (retail boards + platform reference sockets)",
     "sources": [
       "pool:boards.json [S6, 20 retail boards]",

package/cores.json

@@ -1,7 +1,7 @@
 {
   "metadata": {
     "id": "cores.json",
-    "version": "2.1.3",
+    "version": "2.1.5",
     "date": "2026-08-22",
     "datestamp": "2026-08-22T00:00:00Z",
     "observer": "third person observer notes the hybrid core inventory reflects production silicon as of 2026-08-22",

package/docker.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "docker.config",
     "title": "saddle - Docker Engine and Containerization Configuration",
-    "version": "2.1.3",
+    "version": "2.1.5",
     "date": "2026-08-22",
     "language": "en",
     "sources": [
@@ -618,7 +618,7 @@
   "labels": {
     "org.opencontainers.image.title": "saddle-v6",
     "org.opencontainers.image.description": "Saddle v6 virtualization orchestrator with QEMU 11.1.0, Node 22 LTS, Python 3.13.5, MTTG, Passage, OVMF",
-    "org.opencontainers.image.version": "2.1.3",
+    "org.opencontainers.image.version": "2.1.5",
     "org.opencontainers.image.created": "2026-08-22T00:00:00Z",
     "org.opencontainers.image.authors": "Saddle Core <core@saddle.dev>",
     "org.opencontainers.image.url": "https://saddle.dev",
@@ -630,7 +630,7 @@
     "org.opencontainers.image.base.name": "debian:bookworm-slim",
     "org.opencontainers.image.base.digest": "sha256:bookworm-slim-pinned-2026-08-22",
     "saddle": {
-      "com.saddle.version": "2.1.3",
+      "com.saddle.version": "2.1.5",
       "com.saddle.engine": "qemu-11.1.0",
       "com.saddle.modes": "32",
       "com.saddle.forge.mirrors": "github,gitea,forgejo",

package/docs/architecture.md

@@ -104,7 +104,7 @@ Line counts are the shipped files (v2 carryover plus the v3/v5/v6 additions); ev
 | `libs/gpumonitor.cpp` | 1543 | C++26 four-mode build: CLI smi-adapter, NVML/libcuda shim, N-API addon, forge mode (Plan/validate/qemu_argv, Mttg work-stealing mirror) | 12 hooks |
 | `libs/virtualhardware.c` | 1011 | C11 LD_PRELOAD core: open-family interception, vhe_translate, inotify regeneration thread, xorshift32 drift, constructor 101 | 12 hooks |
 
-Data files: `gpus.json` 2408, `processors.json` 2217, `vm.config.json` 1910, `cores.json` 1801, `mttg.config` 1548, `boards.json` 1517, `passage.config` 1330, `qemu.config` 1061, `virtualhardware.json` 739, `docker.config` 768. Web node (`web/`, the v6 edition plus the v7 wave): `sandbox.js` 1433 is the browser-pure engine port (bank, procfs payloads, the 89-char smi table, mesa summaries, boot dmesg and the command dispatcher), `server.js` 640 serves the console plus the `/api/v1` contract (health, spec catalogs, sandbox lifecycle, exec) over `node:http`, `index.html` 646 renders the spec panel, terminal and bus timeline, adapters `vercel.json`/`netlify.toml`/`caddyfile` (static edge, api reverse proxied) and `readme.md` 120; the v7 wave completes the node with `db.js` (sqlite persistence for users, sessions and sandboxes), `auth.js` (scrypt password hashing, timing-safe verification, cookie sessions), `mesh.js` (HMAC-SHA256 signed clone-to-main calls with replay windows), the `login.html`/`register.html`/`dashboard.html` pages, `package.json`/`Dockerfile` (image `ghcr.io/wenathlan/e2ugh (main image, web/ included)`; node pinned by the root `.nvmrc`), the database definition kept flat as `schema.prisma` plus `init.sql`, and `mime.types`. Total repository: about 62,200 lines across 83 tracked files (the v2 carryover plus the v3 domains, the v5 media/test waves and the v6 web edition; the `tests/` suite alone is 3,674 lines across eleven files).
+Data files: `gpus.json` 2408, `processors.json` 2217, `vm.config.json` 1910, `cores.json` 1801, `mttg.config` 1548, `boards.json` 1517, `passage.config` 1330, `qemu.config` 1061, `virtualhardware.json` 739, `docker.config` 768. Web node (`web/`, the v6 edition plus the v7 wave): `sandbox.ts` 1433 is the browser-pure engine port (bank, procfs payloads, the 89-char smi table, mesa summaries, boot dmesg and the command dispatcher), `server.ts` 640 serves the console plus the `/api/v1` contract (health, spec catalogs, sandbox lifecycle, exec) over `node:http`, `index.html` 646 renders the spec panel, terminal and bus timeline, adapters `vercel.json`/`netlify.toml`/`caddyfile` (static edge, api reverse proxied) and `readme.md` 120; the v7 wave completes the node with `db.ts` (sqlite persistence for users, sessions and sandboxes), `auth.ts` (scrypt password hashing, timing-safe verification, cookie sessions), `mesh.ts` (HMAC-SHA256 signed clone-to-main calls with replay windows), the `login.html`/`register.html`/`dashboard.html` pages, `package.json`/`Dockerfile` (image `ghcr.io/wenathlan/e2ugh (main image, web/ included)`; node pinned by the root `.nvmrc`), the database definition kept flat as `schema.prisma` plus `init.sql`, and `mime.types`. Total repository: about 62,200 lines across 83 tracked files (the v2 carryover plus the v3 domains, the v5 media/test waves and the v6 web edition; the `tests/` suite alone is 3,674 lines across eleven files).
 
 ## 3a. v3 redistribution: features live in domains
 
@@ -129,7 +129,7 @@ Tests live in the `tests/` directory (one of the five allowed directories) and r
 
 ## 3c. Web node architecture (v7)
 
-The web node is a static edge plus one self-hosted process. Clones (Vercel and Netlify static deploys of the `web/` pages, redeployed from the `pages.yml` zip -9 bundle) ship only immutable assets: the console, the auth pages and `sandbox.js`, which runs the whole engine client-side and keeps working with no backend. The main node (`node web/server.js` behind the `caddyfile` on devthink.pro, packaged as `ghcr.io/wenathlan/e2ugh (main image, web/ included)`) owns everything stateful: `db.js` opens the sqlite file (`schema.prisma`/`init.sql` define it, kept flat per the two-level contract), `auth.js` is the auth authority - scrypt password hashing with per-user salts, timing-safe verification and server-side sessions delivered as `HttpOnly` cookies - and `mesh.js` verifies the HMAC-SHA256 signature (method, path, body digest, timestamp, bounded replay window) that every clone attaches to forwarded calls before routing. The design is deliberately anti-serverless: no function runs on the edge platforms, clones hold no secrets and no database, and unauthenticated clones receive 401 from the main node instead of any partial authority.
+The web node is a static edge plus one self-hosted process. Clones (Vercel and Netlify static deploys of the `web/` pages, redeployed from the `pages.yml` zip -9 bundle) ship only immutable assets: the console, the auth pages and `sandbox.ts`, which runs the whole engine client-side and keeps working with no backend. The main node (`node web/server.ts` behind the `caddyfile` on devthink.pro, packaged as `ghcr.io/wenathlan/e2ugh (main image, web/ included)`) owns everything stateful: `db.ts` opens the sqlite file (`schema.prisma`/`init.sql` define it, kept flat per the two-level contract), `auth.ts` is the auth authority - scrypt password hashing with per-user salts, timing-safe verification and server-side sessions delivered as `HttpOnly` cookies - and `mesh.ts` verifies the HMAC-SHA256 signature (method, path, body digest, timestamp, bounded replay window) that every clone attaches to forwarded calls before routing. The design is deliberately anti-serverless: no function runs on the edge platforms, clones hold no secrets and no database, and unauthenticated clones receive 401 from the main node instead of any partial authority.
 
 ## 4. One bus, one state machine, one metrics store
 
@@ -209,7 +209,7 @@ Per-target delivery notes (one line each, from the collapsed topic docs):
 | Target | How the same library is consumed |
 | --- | --- |
 | desktop | EgUi lab UI over the in-process factory; every control honors the 44 px touch target |
-| web | browser bundle shipped as the `web/` console (v6): `sandbox.js` mirrors the verified bank, `server.js` serves it and `/api/spec`; zero dependencies keep the graph tree-shakeable |
+| web | browser bundle shipped as the `web/` console (v6): `sandbox.ts` mirrors the verified bank, `server.ts` serves it and `/api/spec`; zero dependencies keep the graph tree-shakeable |
 | extension | browser extension service worker; endpoints bind a random port, never localhost |
 | cli | planner CLI: `node --experimental-strip-types index.ts` reading `vm.config.toml` |
 | android | container/wasm module surface through the JVM bridge; arm64 native runner images |

package/docs/native-wrappers.md

@@ -7,7 +7,7 @@ The native wrappers — Android, iOS and desktop — are **generated on the CI r
 - **Generated on the runners, never committed**: the mobile workflows run `npx cap add android` / `npx cap add ios` into `build/native/` (gitignored); the desktop workflow scaffolds the Tauri Rust envelope (Cargo.toml, main.rs, lib.rs, build.rs) via heredoc into `build/native/desktop`. The historical templates remain recoverable from git history.
 - **Single icon source**: `web/icon.svg` is the one source of every native icon family. Runners derive the Android mipmaps/splashs, the iOS AppIcon set and the Tauri bundle icons from it (`npx cap assets` equivalents and `npx --yes @tauri-apps/cli@2.11.4 icon web/icon.svg --output build/native/desktop/icons`).
 - **Versions injected via `SADDLE_VERSION` env**: the workflows patch the generated `tauri.conf.json` copy, the Cargo manifest, the Gradle config and the iOS project with the resolved release version at build time — no committed file carries a stale native version.
-- **One conversion config at the repository root**: `capacitor.config.ts` (`webDir` = `web/dist/public`, `android.path`/`ios.path` = `build/native/{android,ios}`) and `tauri.conf.json` (`frontendDist` = `web/dist/public`, `bundle.icon` relative to the scaffold directory where the runner copies this config).
+- **One conversion config pair**: `web/capacitor.config.ts` (the web root, where the Capacitor CLI resolves it: `webDir` = `dist/public`, `android.path`/`ios.path` = `../build/native/{android,ios}` at the repository root) and `tauri.conf.json` (the repository root, `frontendDist` = `web/dist/public`, `bundle.icon` relative to the scaffold directory where the runner copies this config).
 
 ## Android surface (from the retired `web/android/README.md`)
 

package/gpus.json

@@ -3,7 +3,7 @@
   "meta": {
     "name": "gpus.json",
     "title": "saddle - Unified Virtual GPU Database",
-    "version": "2.1.3",
+    "version": "2.1.5",
     "date": "2026-08-22",
     "language": "en",
     "description": "Union of the v5 GPU database (7 virtual identity identities), the S6 registry (RX 8900 XTX + Arc B770 unique), Blackwell architecture specs v5+v6 (B100/GB200/RTX 5070/5070 Ti SKUs), gpu.config TOML SKUs (incl. 5 AMD APU RDNA iGPUs) and the 11-entry vfio profile table. PCI device id for RTX PRO 6000 corrected 2BB5->26B5 per canonical v5.",

package/mttg.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "mttg.config",
     "title": "saddle - MTTG Multi-Tenant Task Groups (cgroups v2 + tenants + transcode) with MTTCG (QEMU TCG) section",
-    "version": "2.1.3",
+    "version": "2.1.5",
     "date": "2026-08-22",
     "language": "en",
     "conceptSeparation": "MTTG = Multi-Tenant Task Groups (cgroup v2 cpu.weight/cpuset/memory/io/pids/hugetlb/rdma + tenants + transcode pipelines). MTTCG = QEMU Multi-Threaded TCG (one host thread per vCPU under TCG). Both live here as DISTINCT sections; MTTCG accel flags also in qemu.config#mttcg.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/saddle",
-  "version": "2.1.3",
+  "version": "2.1.5",
   "description": "binary computing engine that turns distributed storage into a publishable working set carrying the merged virtual-hardware engine (the saddle + e2ugh grand merge)",
   "type": "module",
   "private": false,
@@ -178,15 +178,15 @@
     "capacitor:sync:android": "npm run web:build:pages && cap sync android",
     "capacitor:sync:ios": "npm run web:build:pages && cap sync ios",
     "native:check:flat": "node tests/scripts/validateflatnative.mjs",
-    "web:dev": "vite --host",
+    "web:dev": "vite --host --config web/vite.config.ts",
     "web:check": "npm run build:engine && tsc --project web/tsconfig.json --noEmit",
-    "web:build": "vite build",
-    "web:build:pages": "vite build",
+    "web:build": "vite build --config web/vite.config.ts",
+    "web:build:pages": "vite build --config web/vite.config.ts",
     "build": "npm run build:engine",
     "build:tsc": "tsc -p tsconfig.json --noEmitOnError false",
     "start": "node --import tsx ./cli.ts plan",
     "dev": "node --import tsx --watch ./cli.ts",
-    "web": "node web/server.js",
+    "web": "node web/server.ts",
     "qemu:bridge": "node ./orchestrator.ts --qemu-bridge",
     "toolchain:verify": "node --version && npx tsc --version && python3 --version && qemu-system-x86_64 --version || true && docker --version",
     "dev:tsx": "node --import tsx --watch ./cli.ts",
@@ -206,9 +206,9 @@
     "vm:create": "node --import tsx ./cli.ts vm",
     "vm:validate": "node --import tsx ./cli.ts vmlint",
     "gpu:list": "node --import tsx ./cli.ts gpus",
-    "docker:build": "docker build -f Dockerfile -t saddle:2.1.3 .",
-    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.1.3",
-    "docker:health": "docker run --rm saddle:2.1.3 qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || true",
+    "docker:build": "docker build -f Dockerfile -t saddle:2.1.5 .",
+    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.1.5",
+    "docker:health": "docker run --rm saddle:2.1.5 qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || true",
     "firecracker:boot": "firecracker --api-sock /tmp/fc-saddle.sock --config-file vmconfig.json 2>/dev/null || echo 'firecracker 1.16.1 warm-pool boot 125ms target'",
     "py:bridge": "python3 qemubridge.py",
     "py:test": "python3 -m pytest -q || python3 qemubridge.py",
@@ -276,7 +276,7 @@
     "react-day-picker": "^9.11.1",
     "react-dom": "^19.2.1",
     "react-hook-form": "^7.64.0",
-    "react-resizable-panels": "^3.0.6",
+    "react-resizable-panels": "^4.12.3",
     "recharts": "^2.15.2",
     "sonner": "^2.0.7",
     "streamdown": "^2.6.0",

package/passage.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "passage.config",
     "title": "saddle - Passage Configuration (3 homonym domains kept separate + host playbook)",
-    "version": "2.1.3",
+    "version": "2.1.5",
     "date": "2026-08-22",
     "language": "en",
     "conceptSeparation": "'passage' has 3 distinct domains in the pool: (1) gateway - L7 Pingora reverse proxy (routes/upstreams/TLS 1.3); (2) passthrough - PCI device passthrough modes (VFIO/MDEV/MIG/vGPU/SR-IOV/vfio-user/hotplug/KVM/none); (3) network_binding - VM network bridge modes + host port binding (never localhost). A 4th section carries the AetherForge host-side VFIO playbook. Sections are NEVER merged.",
@@ -56,7 +56,7 @@
   "gateway": {
     "meta": {
       "project": "saddle (grand merge)",
-      "version": "2.1.3",
+      "version": "2.1.5",
       "schema": "passage.config",
       "schemaversion": "2026.08.22",
       "engine": "passage gateway v6",

package/processors.json

@@ -3,7 +3,7 @@
   "meta": {
     "name": "processors.json",
     "title": "saddle - Unified Virtual Processor Database",
-    "version": "2.1.3",
+    "version": "2.1.5",
     "date": "2026-08-22",
     "language": "en",
     "description": "Union of the v5 canonical CPU database (6 x86_64 identities), the e2ugh processor catalog (55 SKUs incl. ARM/Apple/Xeon; lineage kept), Zen5/X3D microarchitecture specs and pool minis. Field conflicts resolved V5-first (model_name/max_boost_ghz/tdp_watts canonical); OMNI complementary fields (arch, core_type, topology, memory_support, release_date) merged in place. Versions re-pinned date-first 2026-08-22.",

package/qemu.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "qemu.config",
     "title": "saddle - QEMU Configuration (canonical JSON; sources: S6 TOML + v5 spec 11.1.0 + libvirt overlay)",
-    "version": "2.1.3",
+    "version": "2.1.5",
     "date": "2026-08-22",
     "language": "en",
     "format": "JSON (canonical v2 schema; sources were S6 TOML + V5 JSON schema + libvirt conf overlay)",
@@ -90,7 +90,7 @@
         "githubSetupPython": "actions/setup-python@v5.4.0",
         "platformKernel": "6.11.0+"
       },
-      "version": "2.1.3",
+      "version": "2.1.5",
       "title": "saddle - QEMU Configuration (canonical JSON; sources: S6 TOML + v5 spec 11.1.0 + libvirt overlay)",
       "project": "e2ugh v6",
       "toolchainV5": {

package/virtualhardware.json

@@ -3,7 +3,7 @@
   "meta": {
     "name": "e2ugh",
     "title": "e2ugh v6 - Master Schema, Cross-References and Compatibility Matrix",
-    "version": "2.1.3",
+    "version": "2.1.5",
     "date": "2026-08-22",
     "language": "en",
     "description": "Master schema of the e2ugh v6 virtual hardware engine: binds the 10 specification files (cpu, cores, boards, gpu, vm.config, passage, docker, qemu, mttcg, mesa), defines the modularity ranges (vCPU 1-192, RAM 1-1024 GB, vRAM 8-96 GB via MIG), defaults, validation rules and the pinned 2026-08-22 compatibility matrix.",

package/vm.config.json

@@ -3,7 +3,7 @@
   "meta": {
     "name": "vm.config.json",
     "title": "e2ugh v6 - VM Profiles and Orchestrator Configuration (canonical schema)",
-    "version": "2.1.3",
+    "version": "2.1.5",
     "date": "2026-08-22",
     "language": "en",
     "description": "22 VM profiles consumed by the VHE orchestrator. Each profile binds a CPU identity (cpu.json), core count (cores.json), board (boards.json), GPU profile (gpu.json) and runtime (qemu.json, docker.json, mesa.json). Accel policy: KVM preferred when /dev/kvm exists, TCG multi-thread fallback on GitHub-hosted runners (see passage.json).",

package/web/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Saddle browser bridge",
-  "version": "2.1.3",
+  "version": "2.1.5",
   "description": "User initiated page snapshots through the Saddle browser contract.",
   "minimum_chrome_version": "110",
   "permissions": [

package/web/readme.md

@@ -5,7 +5,7 @@ virtual container — cpu, ram, gpu, mesa software graphics — entirely in the
 browser, plus one self-hosted node api exposing the exact same sandbox over
 http for automation. no framework, no build step, no serverless functions.
 
-version 2.1.3 — reported by `/api/v1/health` and kept in lockstep with
+version 2.1.5 — reported by `/api/v1/health` and kept in lockstep with
 `package.json` and the `meta.version` envelope of the ten data documents
 (v6-SYNC worklog task).
 
@@ -13,14 +13,14 @@ version 2.1.3 — reported by `/api/v1/health` and kept in lockstep with
 
 ```bash
 # the whole thing: built spa + self-hosted api (zero dependencies)
-node web/server.js
+node web/server.ts
 # it prints the endpoint once, e.g. listening on 0.0.0.0:48213
 # override with --port 8080 or PORT=8080 / SADDLE_HOST
 # (first run: `npm run web:build` produces web/dist/public; the server
 # answers a honest 503 until the build exists)
 
 # the browser console also runs 100% client-side on any static host:
-# the browser port (sandbox.js) needs no api; the api badge stays in
+# the browser port (sandbox.ts) needs no api; the api badge stays in
 # "engine: local" mode when /api/v1 is absent.
 ```
 
@@ -53,25 +53,25 @@ vm:stopped, vm:deleted).
 | page folders `Home/` `Architecture/` `AgentBrowser/` `Compute/` `Integrations/` `Playground/` `Console/` `Dashboard/` `Login/` `Register/` `Docs/` `NotFound/` | one folder per route carrying its own `<Page>.tsx` and components (the duck.ai conversion doctrine): the Console folder carries the absorbed e2ugh console surface (spec panel, boot terminal with history and tab-complete, events timeline, snapshot controls, api badge), the Login/Register/Dashboard folders carry the absorbed account pages (safenext redirect, strength meter, admin tables, mesh ping with client probe, keyfile backup/restore, local sandbox shelf) |
 | loose shell files (`PageShell.tsx`, `SiteHeader.tsx`, `SaddleMark.tsx`, `SectionRail.tsx`, `RuntimeDiagram.tsx`, `ErrorBoundary.tsx`, `ThemeContext.tsx`, `button.tsx`, `card.tsx`, `tooltip.tsx`, `sonner.tsx`, `utils.ts`, `paths.ts`) | the shared interface modules at the web root |
 | `api.ts` | the consolidated api-base helpers (the three duplicated copies of the absorbed pages joined into one module) |
-| `localauth.ts` | static-edge account fallback (the typed module conversion of the window-global original): when no api answers (github pages / netlify / vercel clones), login/register/dashboard switch to browser-local accounts (pbkdf2-sha256 via webcrypto, never synced). persistence: accounts are mirrored to IndexedDB and repaired in both directions on load (a partial storage clear never loses them), the CODEOWNERS admins (iakadion, inathlan, aasblor and nasblor, shared bootstrap password `cdw782FG7pjxQVw`, kept in lockstep with the server seed in `auth.js`) are re-seeded whenever missing, and the dashboard ships explicit backup/restore keyfile buttons for a full wipe; only the CODEOWNERS accounts are admins |
-| `sandbox.js` + `sandbox.d.ts` | browser-pure port of the engine generators (zero imports, runs in node too) with the typed surface declaration |
-| `server.js`   | self-hosted node:http api: built spa serving (web/dist/public) + `/api/v1` |
-| `db.js`       | node:sqlite data layer: users, sessions, nodes, sandboxes, sandboxfiles, events, audit |
-| `auth.js`     | security layer: scrypt hashing, saddlesession cookies, rate limiter, request guards, CODEOWNERS admin seed |
-| `mesh.js`     | signed node-to-node mesh: hmac requests, aes-gcm payloads, clone heartbeat |
-| `schema.prisma` / `init.sql` / `drizzle.config.ts` | the three schema mirrors of the db.js migrations (prisma, raw sql, drizzle kit) |
-| `mime.types`  | the extension to content-type table parsed by server.js at boot |
+| `localauth.ts` | static-edge account fallback (the typed module conversion of the window-global original): when no api answers (github pages / netlify / vercel clones), login/register/dashboard switch to browser-local accounts (pbkdf2-sha256 via webcrypto, never synced). persistence: accounts are mirrored to IndexedDB and repaired in both directions on load (a partial storage clear never loses them), the CODEOWNERS admins (iakadion, inathlan, aasblor and nasblor, shared bootstrap password `cdw782FG7pjxQVw`, kept in lockstep with the server seed in `auth.ts`) are re-seeded whenever missing, and the dashboard ships explicit backup/restore keyfile buttons for a full wipe; only the CODEOWNERS accounts are admins |
+| `sandbox.ts` | browser-pure port of the engine generators (zero imports, runs in node too), the typed surface absorbed in the module itself (the 2.1.4 typescript conversion) |
+| `server.ts`   | self-hosted node:http api: built spa serving (web/dist/public) + `/api/v1` |
+| `db.ts`       | node:sqlite data layer: users, sessions, nodes, sandboxes, sandboxfiles, events, audit |
+| `auth.ts`     | security layer: scrypt hashing, saddlesession cookies, rate limiter, request guards, CODEOWNERS admin seed |
+| `mesh.ts`     | signed node-to-node mesh: hmac requests, aes-gcm payloads, clone heartbeat |
+| `schema.prisma` / `init.sql` / `drizzle.config.ts` | the three schema mirrors of the db.ts migrations (prisma, raw sql, drizzle kit) |
+| `mime.types`  | the extension to content-type table parsed by server.ts at boot |
 | `manifest.json` / `popup.html` / `popup.css` / `icon.svg` / `icon32.png` / `icon64.png` / `icon128.png` | the browser-extension surface regenerated by buildextension.yml on the runners |
-| `package.json` | deploy manifest only (`@wenathlan/saddle-web`, private, never published): vercel/netlify require it at the deploy root; the published npm package is the central `@wenathlan/saddle` without web |
+| `package.json` | the web manifest (`@wenathlan/saddle-web`, private, never published): the deploy root owns its package and its dependency set mirrors the repository-root package.json one-to-one (the same set, kept in lockstep) so the vite build runs standalone; the published npm package is the central `@wenathlan/saddle` without web |
 | `Dockerfile` (repo root) | container image for ghcr.io/wenathlan/saddle (the main image; web/ ships inside) |
-| `vercel.json` (repo root) | static hosting config for the React SPA (`outputDirectory: web/dist/public`, SPA rewrite), **no functions** |
-| `netlify.toml` (repo root) | static hosting config for the React SPA (`publish = "web/dist/public"`, SPA rewrite 200), **no functions** |
+| `vercel.json` | static hosting config for the React SPA at the web root (the deploy root, `outputDirectory: dist/public`, SPA rewrite), **no functions** |
+| `netlify.toml` | static hosting config for the React SPA at the web root (`publish = "dist/public"`, the build command runs from the repository root, SPA rewrite 200), **no functions** |
 | `caddyfile`   | self-host reverse proxy for the node api (devthink.pro + www) |
 | `readme.md`   | this document |
 
 ## architecture
 
-- **browser sandbox = engine port, pure.** `sandbox.js` rewrites the
+- **browser sandbox = engine port, pure.** `sandbox.ts` rewrites the
   engine generators for the web platform: `cpudata` (the
   `best_virtual_processors` bank plus the showcase additions), `gpudata`
   (the verified `gpu_bank`), `cpuinfo`/`lscpu` (byte-realistic procfs with
@@ -82,8 +82,8 @@ vm:stopped, vm:deleted).
   (lavapipe vulkan 1.4), `glxinfoSummary` (llvmpipe gl 4.6), `mesaenv`
   (`lp_native_vector_width=512` and friends), `bootSequence` (firecracker
   125 ms dmesg) and `dispatch` (the command parser).
-- **self-hosted api = same contracts.** `server.js` imports that very same
-  `sandbox.js` module (it is plain esm, no dom, no node builtin) so the
+- **self-hosted api = same contracts.** `server.ts` imports that very same
+  `sandbox.ts` module (it is plain esm, no dom, no node builtin) so the
   browser terminal and the http api can never drift apart.
 
 ### api surface (`/api/v1`)
@@ -141,7 +141,7 @@ the role is `admin` (overview cards, mesh node table with ping through
                            |  reverse_proxy /api/* -> 127.0.0.1:39721
                            v
               [ ghcr.io/wenathlan/saddle (the main image; web/ ships inside) ]
-                node 26 slim - server.js
+                node 26 slim - server.ts
                 /api/v1/auth - /api/v1/admin - /api/v1/sandboxes
                 mesh: HMAC-signed gossip + AES-GCM payloads
                 sqlite /data/saddle.db (0600)
@@ -165,7 +165,7 @@ the role is `admin` (overview cards, mesh node table with ping through
   with one generic message (no user enumeration).
 - **headers**: `x-content-type-options: nosniff`, `x-frame-options: deny`,
   `referrer-policy: strict-origin-when-cross-origin` and a restrictive
-  `permissions-policy` — identical on server.js, caddy and netlify.
+  `permissions-policy` — identical on server.ts, caddy and netlify.
 - **mesh**: node-to-node traffic is hmac-signed (replay-windowed
   timestamps) with aes-gcm encrypted payloads; mesh keys live only in the
   main-node environment, never in the browser.
@@ -177,8 +177,8 @@ the role is `admin` (overview cards, mesh node table with ping through
 
 | target | method | what runs |
 |--------|--------|-----------|
-| vercel (clone) | root `vercel.json`, SPA output from `web/dist/public` | bytes only: local engine, `?api=` pointing at the main node for auth |
-| netlify (clone) | root `netlify.toml`, `publish = "web/dist/public"` (file lives at the repo root), node 26.7.0 | bytes only: same behavior as vercel |
+| vercel (clone) | `web/vercel.json` (the deploy root), SPA output from `dist/public` | bytes only: local engine, `?api=` pointing at the main node for auth |
+| netlify (clone) | `web/netlify.toml`, `publish = "dist/public"` (the file lives at the web root), node 26.7.0 | bytes only: same behavior as vercel |
 | self-host (main, devthink.pro) | `docker build .` (the repo-root Dockerfile) -> `ghcr.io/wenathlan/saddle` (the main image; web/ ships inside), caddyfile in front | static pages + full `/api/v1` (auth, admin, mesh) + sqlite on `/data` |
 
 ## why the static + node split
@@ -186,7 +186,7 @@ the role is `admin` (overview cards, mesh node table with ping through
 static hosts cannot run docker or sqlite and the project forbids
 serverless functions, so the split is the only shape that satisfies every
 rule at once: the sandbox compute is the visitor's own browser (the
-`sandbox.js` engine port runs client-side on every clone), and the
+`sandbox.ts` engine port runs client-side on every clone), and the
 authoritative api is one plain node container an operator runs anywhere —
 devthink.pro today, any other node tomorrow, joined to the mesh. the same
 directory serves both worlds without a build step, a framework or a
@@ -194,14 +194,14 @@ single dependency.
 
 ## deploy options
 
-- **vercel static** — the repo-root `vercel.json` sets
+- **vercel static** — the web-root `vercel.json` (the deploy root) sets
   `outputDirectory: web/dist/public` with an SPA rewrite and cache
   headers. static edge only: the page runs the local engine in the
   browser; there are no functions.
-- **netlify static** — the repo-root `netlify.toml` sets
+- **netlify static** — the web-root `netlify.toml` (the deploy root) sets
   `publish = "web/dist/public"` on node 26.7.0 with an SPA rewrite and
   security headers. same rule: static edge only, no functions.
-- **self-host (devthink.pro pattern)** — run `node web/server.js` (or the
+- **self-host (devthink.pro pattern)** — run `node web/server.ts` (or the
   `ghcr.io/wenathlan/saddle (the main image; web/ ships inside)` container behind `web/caddyfile`):
   caddy serves the static files on devthink.pro (+ www redirect, gzip,
   security headers, auto tls) and reverse-proxies `/api/*` to the node

package/dist/capacitor.config.d.ts

@@ -1,15 +0,0 @@
-import type { CapacitorConfig } from "@capacitor/cli";
-/**
- * The one conversion config of the grand merge, living at the repository root
- * so the Capacitor CLI resolves it from its working directory (verified against
- * @capacitor/cli 8.5.1: loadConfig searches process.cwd() and every path
- * below - webDir, android.path, ios.path - resolves relative to that cwd).
- * The shared web build (web/dist/public, produced by vite) is the single
- * application source; the native shells are GENERATED ON THE RUNNERS
- * (npx cap add android / npx cap add ios) into build/native/{android,ios},
- * a gitignored toolchain output that is never committed (see
- * docs/native-wrappers.md for the doctrine).
- */
-declare const config: CapacitorConfig;
-export default config;
-//# sourceMappingURL=capacitor.config.d.ts.map

package/dist/capacitor.config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"capacitor.config.d.ts","sourceRoot":"","sources":["../capacitor.config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,QAAA,MAAM,MAAM,EAAE,eAcb,CAAC;eAEa,MAAM"}

package/dist/capacitor.config.js

@@ -1,28 +0,0 @@
-/**
- * The one conversion config of the grand merge, living at the repository root
- * so the Capacitor CLI resolves it from its working directory (verified against
- * @capacitor/cli 8.5.1: loadConfig searches process.cwd() and every path
- * below - webDir, android.path, ios.path - resolves relative to that cwd).
- * The shared web build (web/dist/public, produced by vite) is the single
- * application source; the native shells are GENERATED ON THE RUNNERS
- * (npx cap add android / npx cap add ios) into build/native/{android,ios},
- * a gitignored toolchain output that is never committed (see
- * docs/native-wrappers.md for the doctrine).
- */
-const config = {
-    appId: "com.wenathlan.saddle",
-    appName: "Saddle Browser",
-    webDir: "web/dist/public",
-    loggingBehavior: "none",
-    android: {
-        path: "build/native/android",
-        webContentsDebuggingEnabled: false,
-    },
-    ios: {
-        path: "build/native/ios",
-        preferredContentMode: "mobile",
-        webContentsDebuggingEnabled: false,
-    },
-};
-export default config;
-//# sourceMappingURL=capacitor.config.js.map

package/dist/capacitor.config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"capacitor.config.js","sourceRoot":"","sources":["../capacitor.config.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,MAAM,GAAoB;IAC9B,KAAK,EAAE,sBAAsB;IAC7B,OAAO,EAAE,gBAAgB;IACzB,MAAM,EAAE,iBAAiB;IACzB,eAAe,EAAE,MAAM;IACvB,OAAO,EAAE;QACP,IAAI,EAAE,sBAAsB;QAC5B,2BAA2B,EAAE,KAAK;KACnC;IACD,GAAG,EAAE;QACH,IAAI,EAAE,kBAAkB;QACxB,oBAAoB,EAAE,QAAQ;QAC9B,2BAA2B,EAAE,KAAK;KACnC;CACF,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/dist/vite.config.d.ts

@@ -1,3 +0,0 @@
-declare const _default: import("vite").UserConfig;
-export default _default;
-//# sourceMappingURL=vite.config.d.ts.map

package/dist/vite.config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"vite.config.d.ts","sourceRoot":"","sources":["../vite.config.ts"],"names":[],"mappings":""}

package/dist/vite.config.js

@@ -1,227 +0,0 @@
-import tailwindcss from "@tailwindcss/vite";
-import react from "@vitejs/plugin-react";
-import fs from "node:fs";
-import path from "node:path";
-import { defineConfig } from "vite";
-import { vitePluginManusRuntime } from "vite-plugin-manus-runtime";
-// =============================================================================
-// Manus Debug Collector - Vite Plugin
-// Writes browser logs directly to files, trimmed when exceeding size limit
-// =============================================================================
-const REPO_ROOT = import.meta.dirname;
-const WEB_ROOT = path.join(REPO_ROOT, "web");
-const LOG_DIR = path.join(WEB_ROOT, ".manus-logs");
-const MAX_LOG_SIZE_BYTES = 1 * 1024 * 1024; // 1MB per log file
-const TRIM_TARGET_BYTES = Math.floor(MAX_LOG_SIZE_BYTES * 0.6); // Trim to 60% to avoid constant re-trimming
-function ensureLogDir() {
-    if (!fs.existsSync(LOG_DIR)) {
-        fs.mkdirSync(LOG_DIR, { recursive: true });
-    }
-}
-function trimLogFile(logPath, maxSize) {
-    try {
-        if (!fs.existsSync(logPath) || fs.statSync(logPath).size <= maxSize) {
-            return;
-        }
-        const lines = fs.readFileSync(logPath, "utf-8").split("\n");
-        const keptLines = [];
-        let keptBytes = 0;
-        // Keep newest lines (from end) that fit within 60% of maxSize
-        const targetSize = TRIM_TARGET_BYTES;
-        for (let i = lines.length - 1; i >= 0; i--) {
-            const lineBytes = Buffer.byteLength(`${lines[i]}\n`, "utf-8");
-            if (keptBytes + lineBytes > targetSize)
-                break;
-            keptLines.unshift(lines[i]);
-            keptBytes += lineBytes;
-        }
-        fs.writeFileSync(logPath, keptLines.join("\n"), "utf-8");
-    }
-    catch {
-        /* ignore trim errors */
-    }
-}
-function writeToLogFile(source, entries) {
-    if (entries.length === 0)
-        return;
-    ensureLogDir();
-    const logPath = path.join(LOG_DIR, `${source}.log`);
-    // Format entries with timestamps
-    const lines = entries.map((entry) => {
-        const ts = new Date().toISOString();
-        return `[${ts}] ${JSON.stringify(entry)}`;
-    });
-    // Append to log file
-    fs.appendFileSync(logPath, `${lines.join("\n")}\n`, "utf-8");
-    // Trim if exceeds max size
-    trimLogFile(logPath, MAX_LOG_SIZE_BYTES);
-}
-/**
- * Vite plugin to collect browser debug logs
- * - POST /debuglogs: Browser sends logs, written directly to files
- * - Files: browserConsole.log, networkRequests.log, sessionReplay.log
- * - Auto-trimmed when exceeding 1MB (keeps newest entries)
- */
-function vitePluginManusDebugCollector() {
-    return {
-        name: "manus-debug-collector",
-        transformIndexHtml(html) {
-            if (process.env.NODE_ENV === "production") {
-                return html;
-            }
-            return {
-                html,
-                tags: [
-                    {
-                        tag: "script",
-                        attrs: {
-                            src: "/debugcollector.ts",
-                            type: "module",
-                            defer: true,
-                        },
-                        injectTo: "head",
-                    },
-                ],
-            };
-        },
-        configureServer(server) {
-            // POST /debuglogs: Browser sends logs (written directly to files)
-            server.middlewares.use("/debuglogs", (req, res, next) => {
-                if (req.method !== "POST") {
-                    return next();
-                }
-                const handlePayload = (payload) => {
-                    // Write logs directly to files
-                    if (payload.consoleLogs?.length > 0) {
-                        writeToLogFile("browserConsole", payload.consoleLogs);
-                    }
-                    if (payload.networkRequests?.length > 0) {
-                        writeToLogFile("networkRequests", payload.networkRequests);
-                    }
-                    if (payload.sessionEvents?.length > 0) {
-                        writeToLogFile("sessionReplay", payload.sessionEvents);
-                    }
-                    res.writeHead(200, { "Content-Type": "application/json" });
-                    res.end(JSON.stringify({ success: true }));
-                };
-                const reqBody = req.body;
-                if (reqBody && typeof reqBody === "object") {
-                    try {
-                        handlePayload(reqBody);
-                    }
-                    catch (e) {
-                        res.writeHead(400, { "Content-Type": "application/json" });
-                        res.end(JSON.stringify({ success: false, error: String(e) }));
-                    }
-                    return;
-                }
-                let body = "";
-                req.on("data", (chunk) => {
-                    body += chunk.toString();
-                });
-                req.on("end", () => {
-                    try {
-                        const payload = JSON.parse(body);
-                        handlePayload(payload);
-                    }
-                    catch (e) {
-                        res.writeHead(400, { "Content-Type": "application/json" });
-                        res.end(JSON.stringify({ success: false, error: String(e) }));
-                    }
-                });
-            });
-        },
-    };
-}
-function vitePluginStorageProxy() {
-    return {
-        name: "manus-storage-proxy",
-        configureServer(server) {
-            server.middlewares.use("/manus-storage", async (req, res) => {
-                const key = req.url?.replace(/^\//, "");
-                if (!key) {
-                    res.writeHead(400, { "Content-Type": "text/plain" });
-                    res.end("Missing storage key");
-                    return;
-                }
-                const forgeBaseUrl = (process.env.BUILT_IN_FORGE_API_URL || "").replace(/\/+$/, "");
-                const forgeKey = process.env.BUILT_IN_FORGE_API_KEY;
-                if (!forgeBaseUrl || !forgeKey) {
-                    res.writeHead(500, { "Content-Type": "text/plain" });
-                    res.end("Storage proxy not configured");
-                    return;
-                }
-                try {
-                    const forgeUrl = new URL("v1/storage/presign/get", forgeBaseUrl + "/");
-                    forgeUrl.searchParams.set("path", key);
-                    const forgeResp = await fetch(forgeUrl, {
-                        headers: { Authorization: `Bearer ${forgeKey}` },
-                    });
-                    if (!forgeResp.ok) {
-                        res.writeHead(502, { "Content-Type": "text/plain" });
-                        res.end("Storage backend error");
-                        return;
-                    }
-                    const { url } = (await forgeResp.json());
-                    if (!url) {
-                        res.writeHead(502, { "Content-Type": "text/plain" });
-                        res.end("Empty signed URL");
-                        return;
-                    }
-                    res.writeHead(307, { Location: url, "Cache-Control": "no-store" });
-                    res.end();
-                }
-                catch {
-                    res.writeHead(502, { "Content-Type": "text/plain" });
-                    res.end("Storage proxy error");
-                }
-            });
-        },
-    };
-}
-function normalizeBasePath(value) {
-    const rawvalue = value?.trim() || "/";
-    if (rawvalue === "/")
-        return "/";
-    return `/${rawvalue.replace(/^\/+|\/+$/g, "")}/`;
-}
-const plugins = [react(), tailwindcss(), vitePluginManusRuntime(), vitePluginManusDebugCollector(), vitePluginStorageProxy()];
-const basePath = normalizeBasePath(process.env.VITE_BASE_PATH);
-export default defineConfig({
-    plugins,
-    base: basePath,
-    root: WEB_ROOT,
-    resolve: {
-        alias: {
-            "@": WEB_ROOT,
-            // The playground consumes source here so CI never depends on a prebuilt dist directory.
-            "@saddle/isolation": path.resolve(REPO_ROOT, "isolation.ts"),
-            "@shared": path.resolve(WEB_ROOT, "shared"),
-            "@assets": path.resolve(WEB_ROOT, "attached_assets"),
-        },
-    },
-    envDir: WEB_ROOT,
-    build: {
-        outDir: path.join(WEB_ROOT, "dist/public"),
-        emptyOutDir: true,
-    },
-    server: {
-        port: 3000,
-        strictPort: false, // Will find next available port if 3000 is busy
-        host: true,
-        allowedHosts: [
-            ".manuspre.computer",
-            ".manus.computer",
-            ".manus-asia.computer",
-            ".manuscomputer.ai",
-            ".manusvm.computer",
-            "localhost",
-            "127.0.0.1",
-        ],
-        fs: {
-            strict: true,
-            deny: ["**/.*"],
-        },
-    },
-});
-//# sourceMappingURL=vite.config.js.map

package/dist/vite.config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vite.config.js","sourceRoot":"","sources":["../vite.config.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,MAAM,sBAAsB,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAmC,MAAM,MAAM,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,gFAAgF;AAChF,sCAAsC;AACtC,2EAA2E;AAC3E,gFAAgF;AAEhF,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC;AACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AACnD,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,mBAAmB;AAC/D,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,GAAG,GAAG,CAAC,CAAC,CAAC,4CAA4C;AAI5G,SAAS,YAAY;IACnB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,OAAe;IACnD,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;YACpE,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,8DAA8D;QAC9D,MAAM,UAAU,GAAG,iBAAiB,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9D,IAAI,SAAS,GAAG,SAAS,GAAG,UAAU;gBAAE,MAAM;YAC9C,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,SAAS,IAAI,SAAS,CAAC;QACzB,CAAC;QAED,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAiB,EAAE,OAAkB;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,YAAY,EAAE,CAAC;IACf,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC;IAEpD,iCAAiC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,IAAI,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,qBAAqB;IACrB,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE7D,2BAA2B;IAC3B,WAAW,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,SAAS,6BAA6B;IACpC,OAAO;QACL,IAAI,EAAE,uBAAuB;QAE7B,kBAAkB,CAAC,IAAI;YACrB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE;oBACJ;wBACE,GAAG,EAAE,QAAQ;wBACb,KAAK,EAAE;4BACL,GAAG,EAAE,oBAAoB;4BACzB,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,IAAI;yBACZ;wBACD,QAAQ,EAAE,MAAM;qBACjB;iBACF;aACF,CAAC;QACJ,CAAC;QAED,eAAe,CAAC,MAAqB;YACnC,kEAAkE;YAClE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBACtD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1B,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBAED,MAAM,aAAa,GAAG,CAAC,OAAY,EAAE,EAAE;oBACrC,+BAA+B;oBAC/B,IAAI,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpC,cAAc,CAAC,gBAAgB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;oBACxD,CAAC;oBACD,IAAI,OAAO,CAAC,eAAe,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC;wBACxC,cAAc,CAAC,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;oBAC7D,CAAC;oBACD,IAAI,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtC,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;oBACzD,CAAC;oBAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC7C,CAAC,CAAC;gBAEF,MAAM,OAAO,GAAI,GAA0B,CAAC,IAAI,CAAC;gBACjD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBACH,aAAa,CAAC,OAAO,CAAC,CAAC;oBACzB,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBAChE,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBACvB,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC3B,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACjC,aAAa,CAAC,OAAO,CAAC,CAAC;oBACzB,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,eAAe,CAAC,MAAqB;YACnC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACxC,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;oBACrD,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBAED,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;gBAEpD,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC/B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;oBACrD,GAAG,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;oBACxC,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,YAAY,GAAG,GAAG,CAAC,CAAC;oBACvE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;oBAEvC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;wBACtC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,QAAQ,EAAE,EAAE;qBACjD,CAAC,CAAC;oBAEH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;wBAClB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;wBACrD,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;wBACjC,OAAO;oBACT,CAAC;oBAED,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAoB,CAAC;oBAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;wBACT,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;wBACrD,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;wBAC5B,OAAO;oBACT,CAAC;oBAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;oBACnE,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;gBAAC,MAAM,CAAC;oBACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;oBACrD,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC;IACtC,IAAI,QAAQ,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IACjC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC;AACnD,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,sBAAsB,EAAE,EAAE,6BAA6B,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAC9H,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAE/D,eAAe,YAAY,CAAC;IAC1B,OAAO;IACP,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE;QACP,KAAK,EAAE;YACL,GAAG,EAAE,QAAQ;YACb,wFAAwF;YACxF,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC;YAC5D,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC;SACrD;KACF;IACD,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE;QACL,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC1C,WAAW,EAAE,IAAI;KAClB;IACD,MAAM,EAAE;QACN,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK,EAAE,gDAAgD;QACnE,IAAI,EAAE,IAAI;QACV,YAAY,EAAE;YACZ,oBAAoB;YACpB,iBAAiB;YACjB,sBAAsB;YACtB,mBAAmB;YACnB,mBAAmB;YACnB,WAAW;YACX,WAAW;SACZ;QACD,EAAE,EAAE;YACF,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,CAAC,OAAO,CAAC;SAChB;KACF;CACF,CAAC,CAAC"}