Experimental remote SSH MVP — Host-only test assets

This is an artifact-only test release, not a Desktop release and not an automatic update. It does not replace any existing version or the Latest release.

Candidate provenance

• Desktop/Host application base: 62c49317201bf7aeb286d6670cfe8e54d981a885 plus the attached source overlay.
• Worktree: fix/remote-ssh-mvp; source changes are not committed. The release tag identifies the base only, not the complete candidate source.
• Changed-file source SHA-256: 7d161be5bc2a50368c87d4b75240e76d8227081bb28de331a1fbe8ee55b0e239.
• Application/runtime version: 0.18.0-beta.5.
• Linux native host-core and node-pty files are reused from the checksum-verified v0.18.0-beta.5 release (native source 9ef3cdfff23547c96d2d56cdb4152c6b52284552). The newer base adds the Desktop window-corner RPC, which is not exposed by the headless RACP Host; no fresh Linux native compilation is claimed. See each bundle's TEST-PROVENANCE.json.
• remote-mvp-source-overlay.tar.gz contains the complete changed source files to overlay on the application base, plus a source/provenance manifest. No credentials or environment files are included.
• Non-Linux and non-target node-pty prebuilds are omitted from each test bundle; the matching published Linux native module is retained.

Scope

Explicit SSH-only model configuration copy, project/session creation and opening, text chat, approvals, bounded history, read-only files/diffs, reconnect recovery without mutation replay, and fail-closed remote routing. Complete Agent runtime chunks/assets are included. Terminal UI, reverse MCP/plugin relay, and cross-host handoff remain deferred.

Verification and limitations

• 1,696 relevant unit/integration tests passed.
• 25 existing Host-process scenarios passed.
• Packaged Host chat/Bash approval across reconnect and isolated React/Chromium interactions passed on macOS with mocked model/IPC boundaries respectively.
• Typechecks, Desktop build, configured lint/style/policy checks passed.
• Real Linux x64 SSH bootstrap and Host workflow acceptance passed on 2026-10-10 (Node v26.5.0, Debian glibc 2.36), using the published bundle and a loopback mock model. Linux arm64 execution and a full Electron UI-to-SSH click-through remain unvalidated. This is still an experimental test release, not a production release.
• A matching candidate Desktop and an explicit test release URL are required. The normal same-version installer still resolves the original release, not this test tag.
• Use isolated home/data/project directories. Do not overwrite an existing Host installation or point this test at production data.

Published-asset checks and real-machine acceptance

• Both Linux bundles passed archive layout, target ELF architecture, complete runtime (76 files each), CLI/shell syntax, and SHA-256 checks. All six uploaded assets match GitHub's recorded SHA-256 digests. Public checksum download links are reachable.
• After the SSH configuration was updated, the real machine completed release download/checksum/install/start, SSH forwarding, pairing, explicit selected model/fixture-key import and idempotent reimport, project/session creation, and conversation opening.
• The real Agent runtime requested Bash approval before execution. Closing the actual SSH tunnel triggered automatic reconnection without resending the prompt. Approving the recovered request executed Bash exactly once and returned the completed assistant reply. Files, diff and path containment checks passed.
• A fresh Desktop-main lifecycle restored the encrypted pairing, session and history without replay. Removing the Host kept remote prompts fail-closed. This exercises actual Desktop main routing and SSH/Rust/Agent processes, not the full Electron renderer workflow.
• No paid model or production credentials were used. The temporary HOME, project, mock server, Host processes and local pairing state were cleaned up; an independent SSH check confirmed no test process/directory remained and the original HOME was not installed into.