build(ssh): assemble relay runtime artifacts by Jinwoo-H · Pull Request #8741 · stablyai/orca

Jinwoo-H · 2026-07-14T13:04:09Z

Scope

Work Package 2 for #8450: target-native relay runtime assembly and artifact verification only.

pins and authenticates the official Node 24.18.0 inputs and release key
builds patched node-pty against the bundled Node headers
assembles a runtime-only relay/PTY/watcher tree with deterministic identity and tar.xz
emits unpublished SBOM, provenance, and identity evidence
adds a read-only four-runner POSIX artifact workflow

Safety boundary

This PR does not connect a desktop resolver, cache, SSH transfer/install path, fallback state machine, target setting, or production launch path. It publishes no GitHub Release and enables no tuple. Existing relay behavior remains the default.

The eventual bundled path remains a per-SSH-target Beta opt-in, default off; any default-on change requires separate review and completed evidence gates.

Local evidence

4 focused suites, 15/15 tests
pnpm run typecheck
pnpm run lint
focused format/max-lines/diff gates
fresh native Linux/arm64 build in the pinned container
full 49-entry archive/tree verification before bundled Node/native smoke
PTY input/resize/exit and watcher create/update/rename/delete

Exact commands, hashes, timings, resource observations, and residual gaps are in the living implementation checklist.

Open gates

GitHub native POSIX runner results, oldest-baseline checks, macOS native trust/signing, Windows runtime/zip, SSH transfer, relay RPC conformance, cancellation/resource metrics, and all tuple-enablement/default-path gates remain open.

Made with Orca 🐋

coderabbitai · 2026-07-14T14:17:15Z

Caution

Review failed

An error occurred during the review process. Please try again later.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Co-authored-by: Orca <help@stably.ai>

coderabbitai · 2026-07-16T22:46:48Z

Caution

Review failed

An error occurred during the review process. Please try again later.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Co-authored-by: Orca <help@stably.ai>

coderabbitai · 2026-07-16T23:02:55Z

Caution

Review failed

An error occurred during the review process. Please try again later.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Co-authored-by: Orca <help@stably.ai>

coderabbitai · 2026-07-16T23:31:53Z

Caution

Review failed

An error occurred during the review process. Please try again later.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Co-authored-by: Orca <help@stably.ai>

coderabbitai · 2026-07-17T01:32:50Z

Caution

Review failed

An error occurred during the review process. Please try again later.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Co-authored-by: Orca <help@stably.ai>

Jinwoo-H and others added 29 commits July 14, 2026 11:20

fix(ssh): settle copied Windows ConPTY worker

c04b4f6

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record ConPTY worker settlement gate

d9a556b

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record native Windows runtime proof

d35ab55

Co-authored-by: Orca <help@stably.ai>

test(ssh): gate runtime clean-build identity

c70e963

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record clean-build oracle gate

09b047f

Co-authored-by: Orca <help@stably.ai>

test(ssh): improve native reproducibility diagnostics

e58913d

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record native reproducibility red

c62b0d0

Co-authored-by: Orca <help@stably.ai>

build(ssh): stabilize native runtime rebuilds

a09b02e

Co-authored-by: Orca <help@stably.ai>

build(ssh): canonicalize native build path

3e433b3

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record native linker correction

54df2cb

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record builder parser boundary

25ca539

Co-authored-by: Orca <help@stably.ai>

build(ssh): syntax-check runtime builder

f864d3f

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record builder parser correction

de541ef

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record arm64 reproducibility boundary

a7151f9

Co-authored-by: Orca <help@stably.ai>

build(ssh): diagnose Windows PE reproducibility drift

39ee345

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record bounded PE diagnostic evidence

27c6a57

Co-authored-by: Orca <help@stably.ai>

test(ssh): summarize complete Windows PE drift

cd7f941

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record full PE scan gate

a51093f

Co-authored-by: Orca <help@stably.ai>

build(ssh): make copied MSVC inputs deterministic

6546f54

Co-authored-by: Orca <help@stably.ai>

docs(ssh): gate MSVC determinism correction

a6b423f

Co-authored-by: Orca <help@stably.ai>

test(ssh): diagnose generated arm64 build inputs

0d3a0c9

Co-authored-by: Orca <help@stably.ai>

docs(ssh): gate arm64 build-input diagnostic

65d44d7

Co-authored-by: Orca <help@stably.ai>

fix(ssh): accept native arm64 MSBuild casing

4207c20

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record native platform case gate

e1a6393

Co-authored-by: Orca <help@stably.ai>

test(ssh): evaluate Windows incremental link state

36a19f5

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record native linker thunk gate

2d4433b

Co-authored-by: Orca <help@stably.ai>

build(ssh): inspect native linker command tracking

4a66435

Co-authored-by: Orca <help@stably.ai>

docs(ssh): record linker tracking gate evidence

dafca20

Co-authored-by: Orca <help@stably.ai>

build(ssh): discover native linker tracking record

6198f0d

Co-authored-by: Orca <help@stably.ai>

fix(ssh): pin portable fixture signer identities

130d57d

Co-authored-by: Orca <help@stably.ai>

fix(ssh): enforce fixture ACL trustee closure

d28552f

Co-authored-by: Orca <help@stably.ai>

fix(ssh): settle Windows system SSH fixture lifecycle

b652c1e

Co-authored-by: Orca <help@stably.ai>

Jinwoo-H and others added 6 commits July 16, 2026 19:54

fix(ssh): detach Windows no-input probe

8ae6dcf

Co-authored-by: Orca <help@stably.ai>

fix(ssh): settle Windows fixture sessions

e4bcee3

Co-authored-by: Orca <help@stably.ai>

fix(ssh): detach no-input child stdin

aab0775

Co-authored-by: Orca <help@stably.ai>

fix(ssh): close no-input child handles safely

4f57b88

Co-authored-by: Orca <help@stably.ai>

test(ssh): qualify Windows no-input handles

da938a7

Co-authored-by: Orca <help@stably.ai>

test(ssh): isolate Windows no-input pipe EOF

daffd54

Co-authored-by: Orca <help@stably.ai>

Jinwoo-H and others added 17 commits July 16, 2026 21:47

test(ssh): qualify overlapped Windows stdin

1c391aa

Co-authored-by: Orca <help@stably.ai>

test(ssh): qualify pre-execution Windows EOF

eee686d

Co-authored-by: Orca <help@stably.ai>

test(ssh): add disconnected Windows no-input launcher

1f220a7

Co-authored-by: Orca <help@stably.ai>

fix(ssh): disambiguate launcher job info class

6a716de

Co-authored-by: Orca <help@stably.ai>

test(ssh): add private-console Windows diagnostic

5841b12

Co-authored-by: Orca <help@stably.ai>

test(ssh): isolate Windows regular-file output

149a122

Co-authored-by: Orca <help@stably.ai>

test(ssh): capture hung Windows client phase

b24dda7

Co-authored-by: Orca <help@stably.ai>

test(ssh): pin Windows fixture host trust

a6feb8c

Co-authored-by: Orca <help@stably.ai>

test(ssh): qualify Windows no-input launcher adapter

42098d1

Co-authored-by: Orca <help@stably.ai>

test(ssh): isolate Windows launcher argument effects

167ec96

Co-authored-by: Orca <help@stably.ai>

test(ssh): pin Windows qualification host trust

34b51eb

Co-authored-by: Orca <help@stably.ai>

fix(ssh): route runtime commands by remote dialect

ad3c397

Co-authored-by: Orca <help@stably.ai>

fix(ssh): frame Windows runtime transfer completion

19683ba

Co-authored-by: Orca <help@stably.ai>

test(ssh): bound Windows transfer stall diagnostics

ce4c7c4

Co-authored-by: Orca <help@stably.ai>

fix(ssh): bound Windows runtime pipe writes

c93111a

Co-authored-by: Orca <help@stably.ai>

fix(ssh): match Windows runtime pipe buffers

d7fcdb2

Co-authored-by: Orca <help@stably.ai>

test(ssh): classify Windows Node transfer stall

c85a900

Co-authored-by: Orca <help@stably.ai>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(ssh): assemble relay runtime artifacts#8741

build(ssh): assemble relay runtime artifacts#8741
Jinwoo-H wants to merge 267 commits into
Jinwoo-H/bug-8450-ssh-relay-contractsfrom
Jinwoo-H/bug-8450-ssh-relay-runtime-builds

Jinwoo-H commented Jul 14, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Jul 14, 2026

Review failed

Uh oh!

coderabbitai Bot commented Jul 16, 2026

Review failed

Uh oh!

coderabbitai Bot commented Jul 16, 2026

Review failed

Uh oh!

coderabbitai Bot commented Jul 16, 2026

Review failed

Uh oh!

coderabbitai Bot commented Jul 17, 2026

Review failed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

Jinwoo-H commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Scope

Safety boundary

Local evidence

Open gates

Uh oh!

coderabbitai Bot commented Jul 14, 2026

Review failed

Uh oh!

coderabbitai Bot commented Jul 16, 2026

Review failed

Uh oh!

coderabbitai Bot commented Jul 16, 2026

Review failed

Uh oh!

coderabbitai Bot commented Jul 16, 2026

Review failed

Uh oh!

coderabbitai Bot commented Jul 17, 2026

Review failed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Jinwoo-H commented Jul 14, 2026 •

edited

Loading