diff --git a/config/reliability-gates.jsonc b/config/reliability-gates.jsonc index c724d099b8a..d296d50d0ee 100644 --- a/config/reliability-gates.jsonc +++ b/config/reliability-gates.jsonc @@ -3509,7 +3509,7 @@ "summary": "Sixteen deterministic SSH relay/session/source/decoder files passed 192 tests, including exit-sealed private recovery, retained stale-transfer cancellation authority, exact private-frame proof watermarks, one retirement record across 10,000 same-PTY token rotations, stale-owner fallback, and scheduler rejection isolation; no live topology was exercised." }, { - "date": "2026-07-28", + "date": "2026-07-29", "runner": "local", "platform": "macos", "command": "pnpm exec vitest run --config config/vitest.config.ts src/relay/git-response-stream-ownership.test.ts src/relay/pty-handler.test.ts --reporter=dot", @@ -3559,8 +3559,8 @@ "platform": "macos", "command": "ORCA_E2E_SSH_DOCKER=1 ORCA_SSH_PTY_SOURCE_CREDIT_V1=1 SKIP_BUILD=1 pnpm exec playwright test tests/e2e/ssh-docker-relay-perf.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1", "result": "passed", - "durationSeconds": 66, - "summary": "All four deployed Linux relay/direct-SSH cases passed against one artifact: direct typing 6.2/7.4 ms median/worst, ACK-stalled typing 5.5/16.3 ms at exactly 262,144 held source units, fixed-size filesystem/Git churn 141.2/151.5 ms with 95 bulk reads, and owner-lease reconnect in 16.0 seconds." + "durationSeconds": 60, + "summary": "All four deployed Linux relay/direct-SSH cases passed after an exact-current E2E rebuild at code commit 5611bb45b51a/tree 8e85c3afedec: main bundle SHA-256 cbaf4e997d74bbe0ae1179bc20e52b122c60f0b56ee49ca607e12ae4125a4342 and Linux-x64 relay SHA-256 a7438fc47c4da0223ceaafab621086e14b6cdee427f53a3bf2e710fa99bcf2e6. Direct typing was 3.7/109.1 ms median/worst, ACK-stalled typing was 5.1/109.7 ms at exactly 262,144 held source units, fixed-size filesystem/Git churn was 144.9/153.2 ms with 104 bulk reads, and owner-lease reconnect completed in 15.8 seconds." }, { "date": "2026-07-28", diff --git a/docs/plans/2026-07-27-ssh-relay-pty-backpressure.md b/docs/plans/2026-07-27-ssh-relay-pty-backpressure.md index f09b4a59d39..0248435344b 100644 --- a/docs/plans/2026-07-27-ssh-relay-pty-backpressure.md +++ b/docs/plans/2026-07-27-ssh-relay-pty-backpressure.md @@ -8,7 +8,7 @@ HEAD; live topology gaps remain explicit below Historical unbounded baseline: `badf91101babf96fa09cb79a8294f7e23b9f081c` (the implementation branch parent). The implementation was rebased onto -`origin/main@c8dba6d72caa60aeb663ec0cd525d0216e485f63`; final GitHub CI remains +`origin/main@d9fec8fd61d0349ae8cdf0eea594de7425db94c9`; final GitHub CI remains the merge gate. ## Scope @@ -74,7 +74,7 @@ The implementation is intentionally scoped: | Surface | State in this PR | Evidence | | ------------------------------------------- | ------------------------------------------------------- | ------------------------------------------------------------------------------------------------ | -| Same-build direct SSH/deployed relay, V1 on | implemented | current-head deterministic relay/main contracts; exact-current-artifact Docker rerun pending | +| Same-build direct SSH/deployed relay, V1 on | implemented | current-head deterministic contracts plus provenance-bound macOS-hosted Docker OpenSSH | | Same-build SSH, V1 off | implemented bounded legacy mode | deterministic rollout and writer contracts | | Reconnect/owner recovery | implemented | exact contiguous recovery, fail-closed cancellation, eight-wide reattach tests, Docker reconnect | | Headed/headless remote consumers | source-range rotation/replacement implemented | deterministic runtime/main seam only; no live paired-runtime claim | @@ -89,10 +89,14 @@ not prove headed or headless paired-runtime behavior, WSL, Windows ConPTY or named pipes, local daemon/provider behavior, folder workspaces, prior-version processes, mixed-version clients, or the Ubuntu 20.04 packaging floor. -The recorded Docker rerun used the private-recovery-transfer checkpoint. It -predates the final exit-sealed recovery, exact private-watermark, and bounded -retirement fixes, so it is not exact-current-artifact evidence. No additional -live topology proof is inferred from that run. +The exact-current-code Docker rerun rebuilt the E2E main bundle and all relay +targets immediately before execution. It is bound to code commit +`5611bb45b51abe0b35d5bedc66124f158cfdcdc7`, tree +`8e85c3afedec23f94cb3ff89b75c378ddd0e4ec7`, main bundle SHA-256 +`cbaf4e997d74bbe0ae1179bc20e52b122c60f0b56ee49ca607e12ae4125a4342`, +and Linux-x64 relay SHA-256 +`a7438fc47c4da0223ceaafab621086e14b6cdee427f53a3bf2e710fa99bcf2e6`. +No additional live topology proof is inferred from that run. ## Verified baseline and migration boundary @@ -2471,6 +2475,14 @@ at exactly 262,144 held source units; fixed-size filesystem/Git churn was 141.2/151.5 ms with 95 bulk reads; reconnect completed in 16.0 seconds. All other live topologies remain separate. +After the final lifecycle fixes and rebase, `electron-vite build --mode e2e` +and `pnpm run build:relay` produced the exact artifact hashes recorded above. +The four-case Docker command then passed in 1.0 minute: direct typing was +3.7/109.1 ms median/worst; ACK-stalled typing was 5.1/109.7 ms at exactly +262,144 held source units; fixed-size filesystem/Git churn was 144.9/153.2 ms +with 104 bulk reads; reconnect completed in 15.8 seconds. This is direct +SSH/deployed Linux relay evidence only. + At the current working tree, the source/intake slice passed 12 files and 205 tests, the provider/session slice passed 16 files and 192 tests, and this complementary lifecycle slice passed 13 files and 150 tests: