Skip to content

fix(release): ship self-contained managed Prime archives - #60

Merged
rynfar merged 3 commits into
pylonfrom
fix/self-contained-managed-artifact
Sep 11, 2026
Merged

rynfar merged 3 commits into
pylonfrom
fix/self-contained-managed-artifact

Conversation

@rynfar

@rynfar rynfar commented Sep 11, 2026 •

Copy link
Copy Markdown

Managed preview installation extracted a root archive that could not start: its CLI required undici and other runtime packages that were absent. The prior smoke test masked this by running npm install.

Recipe 2 packs the full committed runtime dependency graph into the signed root archive. Build-input acquisition downloads only lockfile URLs and verifies SHA-512; offline packing revalidates those bytes, preserves nested dependencies, peers and all platform optionals, and copies the exact built workspace archives. Installation and current-recipe smoke invoke no npm install or lifecycle scripts. The smoke loads CLI, SDK and native/WASM dependencies directly and retains the owned daemon cleanup proof. Packing resolves the physical staging path so npm retains bundles beneath symlinked temporary directories.

Policy 4 registers the changed preview/stable workflows while preserving historical recipes and policies. Pylon companion #487 is merged and accepts the recipe and bounded per-file PAX metadata used by long dependency paths.

Validation: 205 publication tests passed with zero skips; 22 focused release tests passed, including a real archive regression that failed before the physical-path fix. Required npm check and normal commit hooks passed. Checkpoint adversarial review passed with scoped corrections. Clean-source recipe 2 build/pack, all 196 bundled dependency-manifest checks, and macOS installed CLI/SDK/native-module/owned-daemon smoke passed at 69c6b74 (tree fe3ecef9c5e59b5ef639e046f2cf7644cbe5fe16). The root archive is 43,135,559 bytes. The first hosted run passed both isolated offline packs, byte reproducibility, installed runtime checks on both OSes, all ordinary tests and 205 publication cases on each OS. macOS stress exposed an existing unrecognized safe losing-builder refusal. A captured three-process regression now proves native open loss after valid peer cleanup, unchanged winning checkpoint/inode, zero callbacks and fresh recovery; only that exact migration refusal is accepted. The corrected full stress suite passed 29/29 locally with zero skips, and its scoped review passed. The first run was cancelled after preserving its failure and partial Linux crash evidence. Fresh CI must pass all current tests, 3,034 crash cuts and actual 16 MiB limits on both OSes before merge. Signed publication and protected Pylon artifact graduation remain required after merge before stable promotion.

The existing immutable recipe 1 preview is retained as historical evidence and will not be promoted.

Model: GPT-6. Harness: Codex in Pylon.

@rynfar
rynfar merged commit 82961cd into pylon Sep 11, 2026
22 checks passed
@rynfar
rynfar deleted the fix/self-contained-managed-artifact branch September 11, 2026 21:34
@rynfar rynfar mentioned this pull request Sep 12, 2026
8 of 16 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant