@wenathlan/saddle 2.1.5 → 2.1.7

package/mttg.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "mttg.config",
     "title": "saddle - MTTG Multi-Tenant Task Groups (cgroups v2 + tenants + transcode) with MTTCG (QEMU TCG) section",
-    "version": "2.1.5",
+    "version": "2.0.154",
     "date": "2026-08-22",
     "language": "en",
     "conceptSeparation": "MTTG = Multi-Tenant Task Groups (cgroup v2 cpu.weight/cpuset/memory/io/pids/hugetlb/rdma + tenants + transcode pipelines). MTTCG = QEMU Multi-Threaded TCG (one host thread per vCPU under TCG). Both live here as DISTINCT sections; MTTCG accel flags also in qemu.config#mttcg.",

package/orchestrator.ts

@@ -91,7 +91,10 @@ const runtimecatalog = {
 
 /** toolchain stack reported by dumpstate and the version probe. */
 const stackcatalog = {
-  nodecurrent: '26.7.0',
+  /* walks with the .nvmrc pin the maintenance rung stamps — the 2.0.133
+     publish regression answered the engine advertising a node the repository
+     retired, so the anchor rides the pin lane now (never ahead of it) */
+  nodecurrent: '26.13.0',
   nodelts: '24.19.0',
   typescript: '7.0.2',
   qemu: runtimecatalog.qemu,
@@ -1276,8 +1279,12 @@ class firecrackerruntime extends runtimestrategy {
  * the class also absorbs spawnqemu from the Meta source: the vm plane
  * launches qemu with monitor and qmp unix sockets, a numa pin line,
  * vfio devices for every gpu assignment, extra args from qemu.config
- * and, when the binary is absent (CI), a "sleep 3600" stand-in process
- * so scheduling and lifecycle still exercise end to end.
+ * and — the honest-boot law of the engine-real rung — when the qemu
+ * binary is absent the spawn refuses with ERR_QEMU_ABSENT (the error
+ * names the binary the host must carry) so a vm record never claims
+ * running over a stand-in process: scheduling and lifecycle still
+ * exercise end to end in CI through the argv builders and the create /
+ * destroy planes, never through a faked boot.
  */
 class qemuruntime extends runtimestrategy {
   override readonly name: sandboxruntime = 'qemu';
@@ -1343,13 +1350,24 @@ class qemuruntime extends runtimestrategy {
 
   /**
    * builds the vm plane argv: strategy flags plus the name/uuid, dual
-   * unix sockets, virtio balloon, the per-numa bridge netdev, the numa
-   * pin line and one vfio-pci device per assigned gpu.
+   * unix sockets, virtio balloon, the numa pin line and one vfio-pci
+   * device per assigned gpu. the netdev answers the honest network law:
+   * the per-numa bridge (br-vhe-N) rides when the interface exists on
+   * the host (the privileged deployments the bridge plane owns), and a
+   * host without the interface rides user-mode networking (slirp) — a
+   * real qemu network mode that needs no privilege — so the argv a host
+   * without the bridge answers is a bootable argv, never a bridge the
+   * kernel would refuse.
    */
   buildvmcommand(vm: vmrecord, assignments: readonly gpuassignment[]): readonly string[] {
     const kvm = kvmavailable();
     const accel = vm.accel === 'kvm' && kvm ? 'kvm' : 'tcg,thread=multi,tb-size=1024';
     const sockets = this.socketsfor(vm.id);
+    const bridgename = `br-vhe-${vm.numanode}`;
+    const bridgeonhost = existsSync(`/sys/class/net/${bridgename}`);
+    const netdev = bridgeonhost
+      ? `bridge,br=${bridgename},id=net0`
+      : 'user,id=net0';
     const args: string[] = [
       vm.qemubinary,
       '-machine',
@@ -1369,7 +1387,7 @@ class qemuruntime extends runtimestrategy {
       '-device',
       'virtio-balloon-pci,id=balloon0',
       '-netdev',
-      `bridge,br=br-vhe-${vm.numanode},id=net0`,
+      netdev,
       '-device',
       'virtio-net-pci,netdev=net0',
       '-display',
@@ -1391,8 +1409,12 @@ class qemuruntime extends runtimestrategy {
 
   /**
    * spawns qemu for a vm record; when the binary does not exist the
-   * method spawns "sleep 3600" instead so CI environments without qemu
-   * still run the scheduling and lifecycle paths (spawnqemu merge).
+   * method refuses with ERR_QEMU_ABSENT — the honest-boot law of the
+   * engine-real rung: a host without the qemu binary never answers a
+   * stand-in process, the vm record never claims running over a sleep
+   * (startvm catches the refusal, marks the vm failed and publishes the
+   * error, so CI exercises the argv builders and the create / destroy
+   * planes instead of a faked boot).
    */
   async spawn(
     vm: vmrecord,
@@ -1401,14 +1423,23 @@ class qemuruntime extends runtimestrategy {
   ): Promise<qemuprocess> {
     try {
       const sockets = this.socketsfor(vm.id);
-      const argv = [...this.buildvmcommand(vm, assignments), '-daemonize'];
+      // the socket seats must exist before the guest opens its servers —
+      // qemu creates the socket files itself, never the parent directory
+      mkdirSync(path.dirname(sockets.qmp), { recursive: true });
+      // the foreground law of the honest-boot rung: the tracked child is
+      // the process that lives as long as the vm — the daemonize flag
+      // would fork the daemon and exit the parent at once (the vm would
+      // read stopped over a live machine), so the spawn rides the
+      // foreground argv the exit callback can own
+      const argv = this.buildvmcommand(vm, assignments);
       const [bin, ...rest] = argv;
-      let child: ChildProcess;
-      if (existsSync(bin)) {
-        child = spawn(bin, rest, { stdio: 'ignore', detached: false });
-      } else {
-        child = spawn('sleep', ['3600'], { stdio: 'ignore', detached: false });
+      if (!existsSync(bin)) {
+        throw new orchestratorerror(
+          `qemu spawn refused for ${vm.id}: the binary ${bin} is absent from the engine host (the honest-boot law — a vm never runs over a stand-in process)`,
+          'ERR_QEMU_ABSENT',
+        );
       }
+      const child: ChildProcess = spawn(bin, rest, { stdio: 'ignore', detached: false });
       const pid = child.pid ?? randomInt(1000, 11000);
       const processinfo: qemuprocess = {
         vmid: vm.id,
@@ -1423,6 +1454,12 @@ class qemuruntime extends runtimestrategy {
       });
       return processinfo;
     } catch (error) {
+      // the honest-boot refusal rides through untouched — the code the
+      // law answers (ERR_QEMU_ABSENT) is the code startvm and the vm
+      // record read, never the generic spawn wrap
+      if (error instanceof orchestratorerror) {
+        throw error;
+      }
       throw new orchestratorerror(
         `qemu spawn failed for ${vm.id}: ${errormessage(error)}`,
         'ERR_QEMU_SPAWN',
@@ -4389,7 +4426,7 @@ class orchestrator {
   /**
    * default contents of the flat config files written by start(); the
    * version strings carry the v2 anchors (qemu 11.1.0, docker 29.7.2,
-   * node 26.7.0), replacing the stale Meta banners.
+   * node 26.12.0), replacing the stale Meta banners.
    */
   #defaultconfigcontents(): Record<configfilename, string> {
     return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/saddle",
-  "version": "2.1.5",
+  "version": "2.1.7",
   "description": "binary computing engine that turns distributed storage into a publishable working set carrying the merged virtual-hardware engine (the saddle + e2ugh grand merge)",
   "type": "module",
   "private": false,
@@ -11,19 +11,35 @@
   "module": "./dist/index.js",
   "browser": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "packageManager": "npm@12.0.2",
+  "packageManager": "pnpm@12.3.4",
   "publishConfig": {
     "access": "public"
   },
   "overrides": {
+    "uuid": "^11.1.1",
+    "deepmerge-ts": "^8.0.0",
+    "esbuild": "^0.28.2",
+    "follow-redirects": "^1.16.2",
+    "minimatch": "^11.0.3",
+    "glob": "^14.0.3",
+    "mysql2": "^3.24.6",
+    "postcss-selector-parser": "^7.1.6",
+    "source-map-js": "1.2.2",
+    "proxy-addr": "2.0.8",
+    "body-parser": "^2.4.0",
+    "fast-uri": "^3.1.9",
+    "zod": "^4.6.7",
+    "undici": "^7.30.1",
+    "katex": "^0.18.2",
+    "shell-quote": "^1.11.0",
     "xcode": {
       "uuid": "11.1.1"
     },
-    "uuid": "^11.1.1"
+    "@grpc/grpc-js": "1.14.5"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/wenathlan/saddle.git"
+    "url": "https://github.com/wenathlan/devthink"
   },
   "bugs": {
     "url": "https://github.com/wenathlan/saddle/issues"
@@ -37,7 +53,6 @@
     "virtual gpu",
     "runner",
     "storage",
-    "automation",
     "llvmpipe",
     "lavapipe",
     "rusticl",
@@ -47,11 +62,32 @@
     "ghcr"
   ],
   "engines": {
-    "node": ">=26.7.0",
-    "npm": ">=12.0.2"
+    "bare": "^1.18.0",
+    "bun": "^1.4.2",
+    "cargo": ">=1.85.0",
+    "chrome": "^16.0.912",
+    "cnpm": "^9.4.0",
+    "corepack": "^0.35.0",
+    "deno": "^2.9.5",
+    "dotnet": ">=8.0.0",
+    "ecmascript": "^5.0.0",
+    "firefox": ">=0.8.0",
+    "go": ">=1.24.0",
+    "iojs": "^1.0.0",
+    "java": ">=17",
+    "node": ">=26.13.0 <27",
+    "npm": "^12.1.0",
+    "pnpm": "^12.6.0",
+    "python": ">=3.11.0",
+    "rust": ">=1.85.0",
+    "teleport": ">=0.2.0",
+    "typescript": "^5.8.0",
+    "v": "^0.5.2",
+    "vscode": "^1.118.0",
+    "yarn": "^4.17.1"
   },
   "peerDependencies": {
-    "playwright": "^1.62.1"
+    "playwright": "^1.63.0"
   },
   "peerDependenciesMeta": {
     "playwright": {
@@ -75,23 +111,22 @@
     "./sessions": "./dist/foundation.js",
     "./modes": "./dist/modes.js",
     "./mode": "./dist/modes.js",
+    "./sandbox": "./dist/sandbox.js",
+    "./modalities": "./dist/modalityregistry.js",
+    "./workloadlaw": "./dist/workloadlaw.js",
     "./browser": "./dist/browser.js",
     "./browser-playwright": "./dist/browser.js",
-    "./bot": "./dist/automation.js",
-    "./captcha": "./dist/acquisition.js",
     "./deploy": "./dist/modes.js",
     "./extension": "./dist/browser.js",
     "./server-node": "./dist/server.js",
     "./sessions-file": "./dist/execution.js",
     "./sessions-store": "./dist/execution.js",
     "./queue-persistent": "./dist/execution.js",
-    "./captcha-evidence": "./dist/acquisition.js",
     "./hash": "./dist/foundation.js",
     "./release-assets": "./dist/distribution.js",
     "./release-verify": "./dist/distribution.js",
     "./release-evidence": "./dist/distribution.js",
     "./delivery": "./dist/distribution.js",
-    "./surface-requirements": "./dist/automation.js",
     "./worker": "./dist/execution.js",
     "./binary-archive": "./dist/distribution.js",
     "./binary-transform": "./dist/distribution.js",
@@ -105,7 +140,6 @@
     "./virtualization": "./virtualization.ts",
     "./scheduler": "./scheduler.ts",
     "./compute": "./compute.ts",
-    "./media": "./media.ts",
     "./security": "./security.ts",
     "./performance": "./performance.ts",
     "./alternatives": "./alternatives.ts",
@@ -124,7 +158,7 @@
   },
   "files": [
     "dist",
-    "web/manifest.json",
+    "manifest.json",
     "docs",
     "README.md",
     "LICENSE",
@@ -132,7 +166,6 @@
     "orchestrator.ts",
     "scheduler.ts",
     "compute.ts",
-    "media.ts",
     "virtualcpu.ts",
     "virtualmemory.ts",
     "virtualgpu.ts",
@@ -157,16 +190,16 @@
     "docker.config",
     "Dockerfile",
     "tsconfig.json",
-    "biome.json",
+    "biome.jsonc",
+    "modalityregistry.ts",
     "tiers.ts",
     "quantum.ts"
   ],
   "scripts": {
-    "build:engine": "node tests/scripts/buildengine.mjs",
+    "build:engine": "node scriptsbuildengine.ts",
     "check": "npm run build:engine && node --check dist/index.js && node --check dist/execution.js && node --check dist/cli.js && node --check dist/browser.js && node --check dist/distribution.js",
     "formatcheck": "node --import tsx format.ts",
-    "test": "npm run build:engine && node --import tsx --test tests/engine.test.ts tests/extension.test.ts tests/package.test.ts tests/release.test.ts tests/virtualengine.test.ts tests/features.test.ts tests/media.test.ts tests/render.test.ts tests/simulation.test.ts tests/specs.test.ts tests/virtualcpu.test.ts tests/virtualgpu.test.ts tests/virtualmemory.test.ts tests/web.test.ts tests/workflow.test.ts",
-    "test:legacy": "vitest run tests/agent-utils.test.ts tests/cache.test.ts tests/chunking.test.ts tests/core.test.ts tests/errors.test.ts tests/llms-txt.test.ts tests/middleware.test.ts tests/proxy.test.ts tests/tokens.test.ts",
+    "test": "vitest run",
     "run": "npm run build:engine && node dist/cli.js",
     "extension:build": "npm run build:engine && node dist/browser.js",
     "release:assets": "npm run build:engine && node dist/distribution.js",
@@ -177,16 +210,17 @@
     "tauri": "npx --yes @tauri-apps/cli@2.11.4",
     "capacitor:sync:android": "npm run web:build:pages && cap sync android",
     "capacitor:sync:ios": "npm run web:build:pages && cap sync ios",
-    "native:check:flat": "node tests/scripts/validateflatnative.mjs",
-    "web:dev": "vite --host --config web/vite.config.ts",
-    "web:check": "npm run build:engine && tsc --project web/tsconfig.json --noEmit",
-    "web:build": "vite build --config web/vite.config.ts",
-    "web:build:pages": "vite build --config web/vite.config.ts",
+    "native:check:flat": "node scriptsvalidateflatnative.ts",
+    "web:dev": "vite --host",
+    "web:check": "npm run build:engine && tsc --project tsconfig.json --noEmit",
+    "web:build": "vite build",
+    "web:build:pages": "vite build",
+    "web:preview": "vite preview --host",
     "build": "npm run build:engine",
     "build:tsc": "tsc -p tsconfig.json --noEmitOnError false",
     "start": "node --import tsx ./cli.ts plan",
     "dev": "node --import tsx --watch ./cli.ts",
-    "web": "node web/server.ts",
+    "web": "node webserver.ts",
     "qemu:bridge": "node ./orchestrator.ts --qemu-bridge",
     "toolchain:verify": "node --version && npx tsc --version && python3 --version && qemu-system-x86_64 --version || true && docker --version",
     "dev:tsx": "node --import tsx --watch ./cli.ts",
@@ -198,105 +232,164 @@
     "format": "biome format --write .",
     "format:biome": "biome format --write .",
     "format:check": "biome check .",
-    "test:watch": "node --test --watch tests/*.test.ts",
-    "test:coverage": "node --test --experimental-test-coverage tests/*.test.ts",
-    "test:unit": "node --test tests/*.test.ts",
-    "test:e2e": "node --test tests/*.test.ts",
+    "test:watch": "node --test --watch \"tests/*.test.ts\"",
+    "test:coverage": "node --test --experimental-test-coverage \"tests/*.test.ts\"",
+    "test:unit": "node --test \"tests/*.test.ts\"",
+    "test:e2e": "node --test \"tests/*.test.ts\"",
     "qemu:version": "qemu-system-x86_64 --version || echo 'qemu 11.1.0 expected 2026-08-22'",
     "vm:create": "node --import tsx ./cli.ts vm",
     "vm:validate": "node --import tsx ./cli.ts vmlint",
     "gpu:list": "node --import tsx ./cli.ts gpus",
-    "docker:build": "docker build -f Dockerfile -t saddle:2.1.5 .",
-    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.1.5",
-    "docker:health": "docker run --rm saddle:2.1.5 qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || true",
+    "docker:build": "docker build -f Dockerfile -t saddle:2.1.7 .",
+    "docker:run": "docker run --rm --memory-swap=-1 --shm-size=2g saddle:2.1.7",
+    "docker:health": "docker run --rm saddle:2.1.7 qemu-system-x86_64 --version && curl -fsS http://localhost:8080/health || true",
     "firecracker:boot": "firecracker --api-sock /tmp/fc-saddle.sock --config-file vmconfig.json 2>/dev/null || echo 'firecracker 1.16.1 warm-pool boot 125ms target'",
     "py:bridge": "python3 qemubridge.py",
     "py:test": "python3 -m pytest -q || python3 qemubridge.py",
     "clean": "rm -rf dist coverage .biome __pycache__",
-    "prepare": "echo 'saddle grand-merge toolchain 2026-08-23: Node 26.7.0 Current / 24.19.0 LTS, npm 12.0.2, TS 7.0.2, Python 3.14.7, Docker 29.7.2, QEMU 11.1.0, Mesa 26.2.1, LLVM 22.1.8, Firecracker 1.16.1'",
+    "prepare": "echo 'saddle grand-merge toolchain 2026-08-23: Node 26.12.0 Current / 24.19.0 LTS, npm 12.0.2, TS 7.0.2, Python 3.14.7, Docker 29.7.2, QEMU 11.1.0, Mesa 26.2.1, LLVM 22.1.8, Firecracker 1.16.1'",
     "start:engine": "node --import tsx ./cli.ts plan"
   },
+  "dependencies": {
+    "@fluentui/react-icons": "^2.0.345",
+    "@fontsource-variable/bricolage-grotesque": "^5.3.0",
+    "@fontsource-variable/geist-mono": "^5.3.0",
+    "@fontsource-variable/inter": "^5.3.0",
+    "@fontsource-variable/jetbrains-mono": "^5.3.0",
+    "@fontsource-variable/outfit": "^5.3.0",
+    "@hono/node-server": "^2.1.5",
+    "@libsql/client": "^0.18.0",
+    "@prisma/adapter-libsql": "^7.10.1",
+    "@prisma/client": "^7.10.1",
+    "@wenathlan/cadria": "^2.0.154",
+    "@wenathlan/debonair": "^2.0.154",
+    "@wenathlan/getry": "^2.0.154",
+    "@wenathlan/saddle": "^2.1.6",
+    "@wenathlan/vault": "^2.0.154",
+    "better-sqlite3": "^13.0.3",
+    "drizzle-orm": "^0.45.4",
+    "gsap": "^3.15.0",
+    "hono": "^4.13.16",
+    "ink": "^7.1.1",
+    "lucide-react": "^1.66.0",
+    "motion": "^12.43.0",
+    "react": "^19.3.1",
+    "react-devtools-core": "^8.0.0",
+    "react-dom": "^19.3.1",
+    "three": "^0.187.0",
+    "wouter": "^3.13.0",
+    "z-ai-web-dev-sdk": "^0.0.18"
+  },
   "devDependencies": {
-    "@biomejs/biome": "^2.5.11",
-    "@capacitor/android": "^8.5.0",
-    "@capacitor/cli": "^8.5.1",
-    "@capacitor/core": "^8.5.0",
-    "@capacitor/ios": "^8.5.0",
-    "@hookform/resolvers": "^5.2.2",
-    "@radix-ui/react-accordion": "^1.2.12",
-    "@radix-ui/react-alert-dialog": "^1.1.15",
-    "@radix-ui/react-aspect-ratio": "^1.1.7",
-    "@radix-ui/react-avatar": "^1.1.10",
-    "@radix-ui/react-checkbox": "^1.3.3",
-    "@radix-ui/react-collapsible": "^1.1.12",
-    "@radix-ui/react-context-menu": "^2.2.16",
-    "@radix-ui/react-dialog": "^1.1.15",
-    "@radix-ui/react-dropdown-menu": "^2.1.16",
-    "@radix-ui/react-hover-card": "^1.1.15",
-    "@radix-ui/react-label": "^2.1.7",
-    "@radix-ui/react-menubar": "^1.1.16",
-    "@radix-ui/react-navigation-menu": "^1.2.14",
-    "@radix-ui/react-popover": "^1.1.15",
-    "@radix-ui/react-progress": "^1.1.7",
-    "@radix-ui/react-radio-group": "^1.3.8",
-    "@radix-ui/react-scroll-area": "^1.2.10",
-    "@radix-ui/react-select": "^2.2.6",
-    "@radix-ui/react-separator": "^1.1.7",
-    "@radix-ui/react-slider": "^1.3.6",
-    "@radix-ui/react-slot": "^1.2.3",
-    "@radix-ui/react-switch": "^1.2.6",
-    "@radix-ui/react-tabs": "^1.1.13",
-    "@radix-ui/react-toggle": "^1.1.10",
-    "@radix-ui/react-toggle-group": "^1.1.11",
-    "@radix-ui/react-tooltip": "^1.2.8",
-    "@tailwindcss/typography": "^0.5.15",
-    "@tailwindcss/vite": "^4.1.3",
-    "@types/google.maps": "^3.58.1",
-    "@types/node": "^26.4.0",
-    "@types/react": "^19.2.1",
-    "@types/react-dom": "^19.2.1",
-    "@vitejs/plugin-react": "^6.1.1",
-    "add": "^2.0.6",
-    "autoprefixer": "^10.4.20",
-    "axios": "^1.12.0",
+    "@biomejs/biome": "^2.6.4",
+    "@capacitor/android": "^8.6.0",
+    "@capacitor/cli": "^8.6.0",
+    "@capacitor/core": "^8.6.0",
+    "@capacitor/ios": "^8.6.0",
+    "@fluentui/react-icons": "^2.0.345",
+    "@hookform/resolvers": "^5.9.2",
+    "@libsql/client": "^0.18.0",
+    "@opencode-ai/sdk": "^1.19.5",
+    "@prisma/client": "^7.10.1",
+    "@radix-ui/react-accordion": "^1.3.1",
+    "@radix-ui/react-alert-dialog": "^1.2.1",
+    "@radix-ui/react-aspect-ratio": "^1.2.0",
+    "@radix-ui/react-avatar": "^1.3.1",
+    "@radix-ui/react-checkbox": "^1.4.1",
+    "@radix-ui/react-collapsible": "^1.2.1",
+    "@radix-ui/react-context-menu": "^2.4.1",
+    "@radix-ui/react-dialog": "^1.3.1",
+    "@radix-ui/react-dropdown-menu": "^2.2.1",
+    "@radix-ui/react-hover-card": "^1.2.1",
+    "@radix-ui/react-label": "^2.1.17",
+    "@radix-ui/react-menubar": "^1.2.1",
+    "@radix-ui/react-navigation-menu": "^1.4.1",
+    "@radix-ui/react-popover": "^1.3.1",
+    "@radix-ui/react-progress": "^1.2.1",
+    "@radix-ui/react-radio-group": "^1.5.1",
+    "@radix-ui/react-scroll-area": "^1.4.0",
+    "@radix-ui/react-select": "^2.4.1",
+    "@radix-ui/react-separator": "^1.2.0",
+    "@radix-ui/react-slider": "^1.6.1",
+    "@radix-ui/react-slot": "^1.5.0",
+    "@radix-ui/react-switch": "^1.4.1",
+    "@radix-ui/react-tabs": "^1.2.1",
+    "@radix-ui/react-toggle": "^1.2.1",
+    "@radix-ui/react-toggle-group": "^1.2.1",
+    "@radix-ui/react-tooltip": "^1.4.1",
+    "@tailwindcss/postcss": "^4.3.3",
+    "@tailwindcss/typography": "^0.5.20",
+    "@tailwindcss/vite": "^4.3.3",
+    "@tsconfig/node26": "^26.0.1",
+    "@types/better-sqlite3": "^9.6.0",
+    "@types/three": "^0.187.0",
+    "@types/chrome": "^0.3.7",
+    "@types/express": "^5.0.6",
+    "@types/google.maps": "^3.66.9",
+    "@types/node": "^26.6.6",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "@vitejs/plugin-react": "^6.1.2",
+    "add": "^2.0.9",
+    "autoprefixer": "^10.6.2",
+    "axios": "^1.21.0",
+    "better-sqlite3": "^13.0.3",
+    "bun-types": "^1.4.4",
+    "cheerio": "^1.2.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
+    "drizzle-kit": "^0.31.11",
+    "drizzle-orm": "^0.45.4",
     "embla-carousel-react": "^8.6.0",
-    "esbuild": "^0.25.0",
-    "framer-motion": "^13.1.1",
-    "input-otp": "^1.4.2",
+    "emittery": "^2.2.0",
+    "esbuild": "^0.28.2",
+    "express": "^5.3.0",
+    "fast-check": "^4.10.2",
+    "framer-motion": "^13.5.1",
+    "hono": "^4.13.16",
+    "input-otp": "^1.5.0",
     "jsdom": "26.1.0",
-    "lucide-react": "^0.453.0",
-    "nanoid": "^5.1.5",
+    "lucide-react": "^1.66.0",
+    "mysql2": "^3.24.6",
+    "nanoid": "^6.0.2",
     "next-themes": "^0.4.6",
-    "postcss": "^8.4.47",
-    "prettier": "^3.6.2",
-    "react": "^19.2.1",
-    "react-day-picker": "^9.11.1",
-    "react-dom": "^19.2.1",
-    "react-hook-form": "^7.64.0",
-    "react-resizable-panels": "^4.12.3",
-    "recharts": "^2.15.2",
-    "sonner": "^2.0.7",
-    "streamdown": "^2.6.0",
-    "tailwind-merge": "^3.3.1",
-    "tailwindcss": "^4.1.14",
+    "p-limit": "^7.3.3",
+    "p-retry": "^8.0.1",
+    "playwright": "^1.64.1",
+    "pnpm": "^12.16.1",
+    "postcss": "^8.5.32",
+    "prettier": "^3.9.10",
+    "prisma": "^7.10.1",
+    "react": "^19.3.1",
+    "react-day-picker": "^10.0.2",
+    "react-dom": "^19.3.1",
+    "react-hook-form": "^7.91.0",
+    "react-resizable-panels": "^4.16.1",
+    "recharts": "^3.10.1",
+    "sonner": "^2.0.8",
+    "streamdown": "^2.7.1",
+    "tailwind-merge": "^3.7.0",
+    "tailwindcss": "^4.3.3",
     "tailwindcss-animate": "^1.0.7",
-    "tsx": "^4.19.1",
+    "tsup": "^8.5.1",
+    "tsx": "^4.23.15",
     "tw-animate-css": "^1.4.0",
-    "typescript": "7.0.2",
+    "typescript": "^7.0.2",
     "vaul": "^1.1.2",
-    "vite": "^8.2.2",
-    "vite-plugin-manus-runtime": "^0.0.58",
-    "vitest": "^4.1.10",
-    "wouter": "^3.3.5",
-    "zod": "^4.1.12"
+    "vite": "^8.3.5",
+    "vite-plugin-manus-runtime": "^0.0.59",
+    "vitest": "^5.0.5",
+    "webpack": "^5.112.2",
+    "webpack-cli": "^6.0.1",
+    "wouter": "^3.13.0",
+    "yaml": "^2.9.1",
+    "zod": "^4.6.7"
   },
   "optionalDependencies": {
-    "commander": "^13.1.0",
+    "commander": "^15.0.0",
     "dockerode": "^5.0.1",
-    "express": "^5.1.0"
+    "express": "^5.3.0"
   },
   "systemLibraries": {
     "note": "system libraries, not npm packages (declared by nested_package.json v3 as dependencies; kept here as build-time system requirements only)",
@@ -310,9 +403,9 @@
   "saddle": {
     "date": "2026-08-23",
     "toolchain": {
-      "node": "26.7.0",
+      "node": "26.12.0",
       "nodeLts": "24.19.0",
-      "nodeCurrent": "26.7.0",
+      "nodeCurrent": "26.12.0",
       "npm": "12.0.2",
       "typescript": "7.0.2",
       "python": "3.14.7",

package/passage.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "passage.config",
     "title": "saddle - Passage Configuration (3 homonym domains kept separate + host playbook)",
-    "version": "2.1.5",
+    "version": "2.1.6",
     "date": "2026-08-22",
     "language": "en",
     "conceptSeparation": "'passage' has 3 distinct domains in the pool: (1) gateway - L7 Pingora reverse proxy (routes/upstreams/TLS 1.3); (2) passthrough - PCI device passthrough modes (VFIO/MDEV/MIG/vGPU/SR-IOV/vfio-user/hotplug/KVM/none); (3) network_binding - VM network bridge modes + host port binding (never localhost). A 4th section carries the AetherForge host-side VFIO playbook. Sections are NEVER merged.",
@@ -56,7 +56,7 @@
   "gateway": {
     "meta": {
       "project": "saddle (grand merge)",
-      "version": "2.1.5",
+      "version": "2.1.6",
       "schema": "passage.config",
       "schemaversion": "2026.08.22",
       "engine": "passage gateway v6",

package/processors.json

@@ -3,7 +3,7 @@
   "meta": {
     "name": "processors.json",
     "title": "saddle - Unified Virtual Processor Database",
-    "version": "2.1.5",
+    "version": "2.0.127",
     "date": "2026-08-22",
     "language": "en",
     "description": "Union of the v5 canonical CPU database (6 x86_64 identities), the e2ugh processor catalog (55 SKUs incl. ARM/Apple/Xeon; lineage kept), Zen5/X3D microarchitecture specs and pool minis. Field conflicts resolved V5-first (model_name/max_boost_ghz/tdp_watts canonical); OMNI complementary fields (arch, core_type, topology, memory_support, release_date) merged in place. Versions re-pinned date-first 2026-08-22.",

package/qemu.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "qemu.config",
     "title": "saddle - QEMU Configuration (canonical JSON; sources: S6 TOML + v5 spec 11.1.0 + libvirt overlay)",
-    "version": "2.1.5",
+    "version": "2.0.154",
     "date": "2026-08-22",
     "language": "en",
     "format": "JSON (canonical v2 schema; sources were S6 TOML + V5 JSON schema + libvirt conf overlay)",
@@ -90,7 +90,7 @@
         "githubSetupPython": "actions/setup-python@v5.4.0",
         "platformKernel": "6.11.0+"
       },
-      "version": "2.1.5",
+      "version": "2.0.154",
       "title": "saddle - QEMU Configuration (canonical JSON; sources: S6 TOML + v5 spec 11.1.0 + libvirt overlay)",
       "project": "e2ugh v6",
       "toolchainV5": {