[damianjarosz-erli]

	Files	Added	Deleted	Net
Test	662	$\color{#1a7f37}{\Huge{\mathbf{+}}}$​97662	$\color{#cf222e}{\Huge{\mathbf{−}}}$​11047	$\color{#1a7f37}{\Huge{\mathbf{+}}}$​86615
Prod	2338	$\color{#1a7f37}{\Huge{\mathbf{+}}}$​416928	$\color{#cf222e}{\Huge{\mathbf{−}}}$​29332	$\color{#1a7f37}{\Huge{\mathbf{+}}}$​387596

ELI5

This moves ERLI's Orca from upstream v1.4.199 to v1.4.229, fixes the places where the merge silently undid ERLI's own changes, and adds a Windows installer next to the Linux .deb.

What Changed

Upstream sync. Merges upstream/main at de1f6e3d81, the commit v1.4.229 (2026-10-17) was cut from — about a week old, per SYNC.md. 4216 upstream commits. Upstream's release commit is cherry-picked so builds are stamped 2.0.<run>-erli-upstream.1.4.229.

Fork patches the merge undid, now restored (typecheck and the targeted tests were green throughout):

Area	What the merge did	Fix
Failed local terminal exit (pty-exit-hibernate.ts)	Port onto upstream's new keepsUntouchedFreshPane read the raw input timestamp instead of the input generation; upstream's PTY suite split (stablyai#29193) brought back the 5 assertions the fork inverts and dropped the fork's tests; the fork's guard read session.connectionId, renamed upstream to worktreeConnectionId (untyped session, so always undefined)	Generation check restored; the 5 upstream assertions removed from the spec and the fork's versions moved to pty-connection-failed-local-exit.test.ts; the connection guard dropped, since upstream removed it itself in stablyai#27489 (a pane is now local or remote-runtime)
Background push (new upstream feature)	Started push.onorca.dev with mobile compiled out	Gated on the mobile capability
Native chat (new upstream feature)	New chats defaulted to Full access with yolo-default compiled out	Defaults to Ask in that build
max-lines	Two fork-patched upstream files sit at exactly 300 counted lines	Fork patches rewritten to add zero lines
electron.vite.config.ts	Upstream left 2 lines of budget	Fork defines wrapped in config/build-plugins/erli-defines.ts
Updater	updater.ts split further	Fork feed patches now live in updater/updater-release-feed.ts and updater/updater-setup.ts (added to FORK_OWNED_PATHS)

Security fix past the cut point. The managed-server Node runtime pin moves to 24.22.1 (Node's October security release), taken from upstream eb9d2f9a06b (stablyai#31687, 2026-10-21) — only the pin, its tests, and the test image they check.

Release workflow. erli-linux-release.yml becomes erli-release.yml: one dispatch builds the Linux x64 .deb and an unsigned Windows x64 NSIS installer from one commit and publishes both in one release, only once both succeed (separate releases would leave one platform's updater pointing at a release without its latest*.yml). ERLI builds drop upstream's SignPath publisherName, as upstream's dev channels do, so an installed build does not reject the next unsigned one. Both builds now also:

• package the orcad deployment template, built by upstream's node-server-tests.yml exactly as release-cut does. Upstream deleted the SSH relay (refactor(relay): delete the SSH relay server, its build assets and tests stablyai/orca#27215); without the template an ERLI build cannot connect to any SSH host;
• install mobile/node_modules, which build:release now needs for the mobile web bundle even with mobile compiled out.

Why

Cut-point evidence (SYNC.md step 2):

• Reverts after the cut point — revert: remove the editor buffer design doc from the repo stablyai/orca#30875, Revert "fix(native-chat): Claude, Pi and ACP chats are Working only while the agent holds the send" (#30134) stablyai/orca#30572, Revert bundled skills installer; restore pinned skills@1.7.2 stablyai/orca#30207 — all target work outside the window.
• Known open upstream bugs accepted with this merge:
  • [Bug]: terminal_pane_owner_changed recurs on MXT 1.4.229 because #30448 is not included stablyai/orca#31767: terminal_pane_owner_changed on pane reconnect; the fix A terminal pane that loses its reconnect to another connection attaches to the winner instead of showing terminal_pane_owner_changed stablyai/orca#30448 (84 files) landed 2026-10-21, after the cut;
  • Memory saturation, UI freezes, forced reloads, and crashes when running multiple concurrent agents stablyai/orca#29899: memory pressure with many concurrent agents;
  • [Bug]: Local Claude Code pane in fullscreen goes permanently blank after navigating away; --screen reports screen-unavailable; resize, Clear Screen and Reset Terminal don't recover it stablyai/orca#31155: a fullscreen Claude Code pane can go blank after navigating away.

Linked Issue

N/A — fork maintenance.

Visual Proof

N/A — no UI change beyond what upstream shipped; the new defaults are covered by tests.

Testing

• typecheck, oxlint (0/0), audit:code-quality:native, audit:code-quality:type-aware, check:max-lines-ratchet, verify:skill-bundle-manifest, check:node-runtime-pin
• Fork-only line audit, plus a new check that every session.* field fork lines read is still assigned (added to SYNC.md)
• pnpm test:node: 12 320 files pass. The 28 that fail fail identically on a pristine checkout of de1f6e3d81 (no Bun, git 2.43 without reftable, cloud/ deps not installed). pnpm test itself now requires Bun.
• Merged tree differs from de1f6e3d81 only in fork-owned files, fork tests, the version bump and the Node-pin cherry-pick
• Linux .deb built locally (2.0.9001-erli-upstream.1.4.229) and launched under xvfb with an isolated profile: app-update.yml targets ERLI-SA, the capability list is in the asar, the updater checks ERLI-SA/orca only, and no request reaches stablyai or onorca.dev
• Windows installer: not built locally; the first ERLI release run (as a prerelease) is its test
• orcad template packaging: CI-only, same run

Expected noise from the smoke run: [agent-state-rules] download failed: HTTP 404 — the rules feed resolves through ORCA_RELEASE_REPO to ERLI-SA/orca, which publishes no rules release, so the app keeps the rules bundled in the package.

AI Disclosure

Merge resolution, fixes and workflow written with Claude Opus 5.5 (Claude Code), reviewed by the author.

Notes

The audit baseline (config/erli-upstream-audit-baseline.txt) is deliberately not moved; that happens when an audit round closes, per AUDIT.md.

🤖 Generated with Claude Code