From 2ab4d38c4b619ff66a08cfc761784e78138bd7bb Mon Sep 17 00:00:00 2001 From: Jinwoo-H Date: Wed, 12 Aug 2026 13:35:23 -0400 Subject: [PATCH] Record packaged Linux floor validation --- docs/agent-skill-sharing-implementation-checklist.md | 12 ++++++++++-- docs/agent-skill-sharing-installation-plan.md | 11 +++++++++-- 2 files changed, 19 insertions(+), 4 deletions(-) diff --git a/docs/agent-skill-sharing-implementation-checklist.md b/docs/agent-skill-sharing-implementation-checklist.md index 9a3c03bea0b..9592206c61e 100644 --- a/docs/agent-skill-sharing-implementation-checklist.md +++ b/docs/agent-skill-sharing-implementation-checklist.md @@ -6,7 +6,7 @@ Last updated: 2026-08-12. Implementation baselines captured by this checklist update: -- Orca implementation: `skills-share` at `9100431212`; no PR. +- Orca implementation: `skills-share` through `f1dccb4f42`; no PR. - Orca Cloud: bundle smoke PR `#329` merged as `eddb144afe`; generation-aware recovery PR `#330` merged as `8045c85dad`; encrypted physical-host credential PR `#336` merged as `8fce3298ef`; kill-switch discovery PR `#342` merged as `c2bef2ff20fb`; production remains untouched. @@ -72,6 +72,12 @@ Validated so far: - The same 26/26 portable package suite passed at `109272dab1` on a disposable native x86_64 Ubuntu 22.04 GCE host using Linux 6.8 and Node 24.18. The VM had no service account or scopes; its boot disk, uploaded Git bundle, and temporary project SSH metadata were removed afterward. +- The exact x64 Electron directory package at `f1dccb4f42` passed its after-pack ABI scan for all + 18 bundled native binaries, then loaded packaged `node-pty` and spawned `/bin/sh` inside an + Ubuntu 20.04/glibc 2.31 container. The physical run corrected the gate to use Linux's actual + `orca-ide` executable and `resources/node_modules` layout. Physical packaged ARM64 proof remains + separate. The no-service-account builder, boot disk, temporary project SSH metadata, and local + source archive were removed and independently verified absent. - Real native Windows global, linked Git-worktree, and plain folder installs with spaces and non-ASCII paths, plus privacy-safe install diagnostics and owner-private staging tests. - Docker-backed SSH relay installation from the real Electron client passed global, remote Git @@ -1345,7 +1351,9 @@ platform gates below. - [ ] Run macOS ARM64 and x64 behavior where supported. - [ ] Run Linux against Ubuntu 20.04/glibc 2.31 and verify bundled native binaries respect the - floor. + floor. The exact x64 directory package passed its 18-binary ABI scan and packaged + `node-pty` load/spawn smoke inside Ubuntu 20.04 at `f1dccb4f42`; physical packaged ARM64 + execution remains open. - [x] Run native Windows and WSL scenarios on `windows 2`. - [x] Run local and remote Git worktrees and plain folder workspaces. Native Windows covered a linked worktree and folder; paired desktop and Docker SSH covered host-owned worktrees and diff --git a/docs/agent-skill-sharing-installation-plan.md b/docs/agent-skill-sharing-installation-plan.md index b4f82e3c36c..04a17a0b184 100644 --- a/docs/agent-skill-sharing-installation-plan.md +++ b/docs/agent-skill-sharing-installation-plan.md @@ -53,8 +53,8 @@ that larger package-manager surface. ## Current execution status -The Orca implementation is on `skills-share` at `df259119f6`; no Orca pull request exists. Cloud -bundle ingestion and bearer-link work merged through `stablyai/orca-cloud#320` as `0579cc1a71`; +The Orca implementation is on `skills-share` through `f1dccb4f42`; no Orca pull request exists. +Cloud bundle ingestion and bearer-link work merged through `stablyai/orca-cloud#320` as `0579cc1a71`; the bundle desktop smoke update merged through `#329` as `eddb144afe`, generation-aware GCS recovery merged through `#330` as `8045c85dad`, and the bounded finalization load gate plus cleanup hardening merged through `#332`-`#335` as `bb8bf8b9ac`. The encrypted physical-host credential @@ -67,6 +67,13 @@ physical Ubuntu 20.04 SSH, published-object recovery, and bounded finalization-l substantially complete; the implementation checklist records the exact evidence and remaining physical-host and lifecycle gates. +The release workflow now runs the exact unpacked Linux package under Electron-as-Node in an +Ubuntu 20.04 container and requires packaged `node-pty` to spawn `/bin/sh`. A physical x64 build at +`f1dccb4f42` passed the existing 18-binary ABI scan and this load/spawn smoke. The physical run also +caught and corrected assumptions about the Linux executable name and packaged runtime-module +location before the gate can protect a real release. Physical packaged ARM64 execution remains an +explicit separate proof. + The local redesign now has an independently implemented Agent Plugins 1.0.0 skills-only bundle manifest, deterministic one-or-many archive creation, bounded bundle extraction, additive bundle install contracts, per-skill conflict/results orchestration, and bundle provenance on installed