fix(release): restore version and harden staging confirmation

Resolves release scan blockers STA-6611 and STA-6612.

.github/workflows/cloud-prove-relay-asia-staging.yml

@@ -55,9 +55,11 @@ jobs:
 
       - name: Validate the exact staging proof request
         shell: bash
+        env:
+          CONFIRMATION: ${{ inputs.confirmation }}
         run: |
           set -euo pipefail
-          test "${{ inputs.confirmation }}" = PROVE_ASIA_STAGING
+          test "${CONFIRMATION}" = PROVE_ASIA_STAGING
           [[ "${IMAGE_DIGEST}" =~ ^sha256:[0-9a-f]{64}$ ]]
           [[ "${INITIAL_SELECTOR_GENERATION}" =~ ^[1-9][0-9]*$ ]]
           [[ "${PROMOTE_ATTEMPT_ID}" =~ ^[A-Za-z0-9_-]{8,128}$ ]]

config/scripts/release-blocker-fixes.test.mjs

@@ -0,0 +1,35 @@
+import { readFileSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { describe, expect, it } from 'vitest'
+import { parse } from 'yaml'
+
+const projectDir = resolve(import.meta.dirname, '../..')
+
+describe('release blocker safeguards', () => {
+  it('keeps the root package version on the current stable release line', () => {
+    const packageJson = JSON.parse(readFileSync(resolve(projectDir, 'package.json'), 'utf8'))
+    const match = /^(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?$/.exec(packageJson.version)
+    expect(match).not.toBeNull()
+    const version = match.slice(1, 4).map(Number)
+    const isAtLeastStable =
+      version[0] > 1 ||
+      (version[0] === 1 && (version[1] > 4 || (version[1] === 4 && version[2] >= 196)))
+    expect(isAtLeastStable).toBe(true)
+  })
+
+  it('passes the staging confirmation through the step environment', () => {
+    const workflow = parse(
+      readFileSync(
+        resolve(projectDir, '.github/workflows/cloud-prove-relay-asia-staging.yml'),
+        'utf8'
+      )
+    )
+    const step = workflow.jobs.prove.steps.find(
+      ({ name }) => name === 'Validate the exact staging proof request'
+    )
+
+    expect(step.env.CONFIRMATION).toBe('${{ inputs.confirmation }}')
+    expect(step.run).toContain('test "${CONFIRMATION}" = PROVE_ASIA_STAGING')
+    expect(step.run).not.toContain('${{ inputs.confirmation }}')
+  })
+})

package.json

@@ -1,6 +1,6 @@
 {
   "name": "orca",
-  "version": "1.4.178-rc.2",
+  "version": "1.4.197",
   "description": "Next-gen IDE for parallel agentic development",
   "homepage": "https://github.com/stablyai/orca",
   "author": "stablyai",