Last updated: 2026-08-24 UTC
The independently actionable source engineering work is current for the x64
candidate. Linux now uses the shared macOS-style compact launcher pill and chat
surface, a CEF 147 Electrobun shell with durable partitioned profiles, secure
Devices & Runtimes flows, portable local inference, and reproducible direct
packages. A frozen package payload passes the production-direct contract and
its broad packaged acceptance suite. That payload predates the current merged
source head and is therefore retained as candidate evidence, not exact-head
release evidence.
This is a local demo/review candidate, not a production release claim. Physical GNOME/Wayland and hardware QA, a second Mac/VPS runtime, real Secret Service and deployed-Cloud proof, system installer lifecycle, RPM tooling, review, signing, publication, merge, and deployment remain environment, credential, physical-device, or authority gates.
The current host-capacity check records under 2 GiB free on the root filesystem versus the 8 GiB required for another desktop rebuild. The completed artifacts launch from their current locations, but a fresh rebuild requires owner-approved cleanup of generated outputs or caches. No unrelated cache or workspace data was deleted to manufacture a green doctor result.
- Worktree:
/home/nubs/Documents/Codex/2026-08-22/eliza-linux-devices-runtimes - Current local branch:
codex/pr25427-final - Draft PR branch:
fix/linux-cef-devices-runtimes-parity - Integrated
origin/develop:da1203a930100fbd5e51fa8100ca1819cb85d06d - Product payload source:
be05b667e76b7c8f5266667bfc33f35125b75faf - Packaging/tooling checkpoint:
02c00a3902a35732d7cb134f98570b9d349bdbfc - Original merged work: PR #24414, merge commit
acf111c4a - Publication state: draft PR #25427
is open and conflict-free. Its prior exact remote head
4b70c38769passed hosted PR Static Smoke. The head carrying this status refresh integrates the latest recordeddevelopbase and must pass a new exact-head hosted run before it replaces that evidence. No merge, signing, release, deployment, or system installation was performed.
- Reproducible Linux bootstrap with pinned Bun 1.3.14 and Node 24.15.0, checksum verification, frozen installs, and a capability doctor.
- CEF 147 Linux x64 packaging with strict RPC, permission, ABI, renderer, inventory, unsafe-switch, and distribution-claim gates.
- A fail-closed Electrobun 1.18.1 hotfix that forwards named partitions, maps them to direct SHA-256 CEF profiles, and closes/drains browsers so CEF flushes profile state before shutdown.
- The macOS-style bottom launcher pill expanding the shared
ChatOverlay, plus tray, hotkey, notification, background, and relaunch behavior. - Devices & Runtimes UI with durable selection, health, conversations, chat, SSH enrollment, keyring references, host-key binding, restart intent, and rehydration.
- Secure five-minute code-only activation, device-bound encrypted envelopes, replay/expiry/fencing protection, exact-once cancellation, reconnect, reconciliation, revocation, and bounded cleanup.
- Target-initiated pairing with owner-bound discovery, explicit host
confirmation, staged activation/compensation, and migration
0315after the Personal Shared delivery-attempt migration at0314. - Same-host lifecycle proof through the real
DesktopRemoteTargetServiceandRemoteTargetVault, faithful injected secret storage, atomic journal, authenticated loopback, service recreation, exact-once dispatch, revocation, and no authority resurrection after restart. - Reproducible Debian Bookworm portable inference builder and provenance for Vulkan ASR and OmniVoice TTS.
- Hardened
.deb, AppImage, and side-load Flatpak packaging paths, including deterministic nested Electrobun app discovery and fail-closed ambiguity. - A read-only whole-laptop Git preservation inventory in
reports/linux-parity/laptop-git-inventory.md.
- Path:
packages/app-core/platforms/electrobun/build/dev-linux-x64/Eliza-dev - Built:
2026-08-23T02:50:53.651Z; variantdirect; 1,079 renderer assets. - Renderer build ID:
246bdd070f40c9f3db17f22a40f032cb787f1d444b277b4ffac043a7b0de51db. - Size/inventory: 3,230,715,904 allocated bytes; 151,736 entries.
- Renderer: default
cef, withnativealso available; CEF147.0.10+gd58e84d+chromium-147.0.7727.118. - ABI: 78 ELF files; maximum required
GLIBC_2.38, equal to the supported ceiling. Portable inference libraries require at mostGLIBC_2.34. - Permissions: zero writable or setuid/setgid regular files. Five intentional
relative symlinks expose CEF libraries from
bin/cef/. - Chromium boundary: the pinned wrapper disables Chromium renderer/GPU
sandboxes and
chrome-sandboxis not setuid-root capable. Direct artifacts do not claim renderer-process sandboxing; Flatpak supplies an outer app sandbox instead. - Embedded Bun: 1.3.13, controlled by Electrobun. Repository tooling remains pinned to Bun 1.3.14.
Selected SHA-256 identities:
9cce6bcdc1bc550b6533454a8470870cc321773890c0d1bd03d10d5f441bd9cd bin/launcher
40ba72d0cc6e38d04cd2ea29a650f5b3976673b2facb09fedae003b26bfdc971 bin/libNativeWrapper.so
dc7c0cd922fce45f39e8f9e0eb40eb25f1df0b806cc9890b208292c3398ae9e9 Resources/main.js
2bde89501be609ff6bbcd67fb366300ca1641cc53cc4ac724c46d422995fb83d Resources/app/bun/index.js
c262b0eadb3e4c31527ab0420bdfa1e199505fb837c8a1ef0113b1143c37eb4b Resources/app/renderer/index.html
b40e35df512ed9570fbdb47c3c9a45745528b85b8bc135d51dff5adb81135359 Resources/build.json
1900fe614895951e06014e477b1bec3bccea14529092fb927b630a315985e21c Resources/app/eliza-dist/local-inference/lib/libelizainference.so
Native hotfix identities:
e7172d886925e4d728cf35cbee5a52ad17c33e9bb4c40248a788a0a10100df53 upstream Electrobun wrapper
40ba72d0cc6e38d04cd2ea29a650f5b3976673b2facb09fedae003b26bfdc971 patched Electrobun wrapper
b7e043197daca54f028b63fc1d05b12e6b69901a76ddbcea84adb653652d5430 electrobun-1.18.1-cef-profile-x64.bsdiff
- Artifact:
packages/app-core/platforms/electrobun/artifacts/elizaos-app_2.0.3-beta.7_amd64.deb - Size: 474,119,096 bytes.
- SHA-256:
78dfe3cf76faab4660fa6ae010830791e20e258416ad6d9e7f771623abcbe04d. - All 151,736 archive entries are
root/root. The extracted payload matches the frozen hashes and passes theproduction-directcontract.
- Artifact:
packages/app-core/platforms/electrobun/artifacts/Eliza-2.0.3-beta.7-linux-x64.AppImage - Size: 596,452,544 bytes; mode
0755. - SHA-256:
fe5d211740317f048afe110be82b70a7997bd47ca95b58f6b336b2b5dd8ef27d. - AppStream validation succeeds; the only pedantic note is optional release history metadata.
- Its extracted payload matches the frozen hashes, passes the distribution
contract, and its exact
AppRunrendered substantial UI in Xvfb (1/1).
- Artifact:
/tmp/eliza-flatpak-artifacts-20260823-be05/Eliza-2.0.3-beta.7-linux-x86_64.flatpak. - Size: 454,183,528 bytes.
- SHA-256:
6e70dcaf7f4d33ed1d3250ae84c1ccb35e5327a28c8a5e8af49c724ce653e78d. - Isolated no-deploy import passed at commit
4e92aac93f1a0ecd34925c5db56b7d5d53bf0534a30332a3ae55e27bda4d5838, using GNOME Platform 50 and Freedesktop SDK 25.08. Its declared permissions are IPC/network, fallback-X11/Wayland/PulseAudio, and DRI. - The packaging contract verifies the outer sandbox and explicitly does not claim Chromium renderer-process sandboxing or Flathub/store readiness.
- Not built:
rpmbuildis not installed and no system mutation was authorized. The RPM code path and dependency metadata remain covered by packaging tests.
- Current-
developmerge completed without conflicts. Eight newly exposed test fixture typing drifts were repaired for Bun/Vitest parity and currentAppRunSummary/character metadata contracts. One newly added Cloud auth fixture and eight shared/Cloud shared coverage files were also formatted to the current Biome rules. - Focused current-source suites passed: Devices/remote-control UI 109/109, storage bridge 6/6, app-core CEF/Flatpak/direct packaging 34/34, the full Electrobun package 1,430 passed with 16 intentional skips, Agent runtime/ proposal/owner 27/27, app-control runtime management 46/46, Headscale client 29/29, Linux doctor/portable-inference contracts 15/15, and Cloud managed network/relay 37/37, admin/connector 15/15, and PGlite/persistence 41/41.
- Supporting build/shared/inbox/auth suites passed 11/11, 8/8, 11/11, and 5/5. The newly formatted shared and Cloud shared coverage files pass 5/5 and 23/23 respectively. The repaired example-code fixtures pass 43/43 under both Bun and Vitest; the repaired UI fixtures pass 18/18. The repaired app-core rate-limit and shared boot-config fixtures pass 6/6 and 2/2, and the repaired Agent memory/action fixtures pass 5/5; all three package typechecks are green.
- Affected lint passed 143/143 tasks and affected typecheck passed 232/232
tasks on the latest integrated
developbase. git diff --checkpasses. Hosted exact-head lint/typecheck/build and secret scan will be authoritative after the refreshed head is pushed.
- Fresh no-streaming desktop build completed and stamped the renderer/service
worker to
be05b667e. production-directcontract: pass; 151,736 entries, 78 ELF files, maximumGLIBC_2.38.- Exact broad packaged acceptance: 10 passed, 4 intentional platform/hardware skips, 0 failed in 3.8 minutes. The walkthrough recorded 148 frames over 24.47 seconds with zero capture failures.
- Focused CEF packaged regressions: all three Linux cases passed, including a zero-delay real-process relaunch; two platform cases skipped. The persistence case also passed three consecutive repeat runs.
- Same-host remote lifecycle, runner, and main-window session suites: 33/33.
- Direct plus Flatpak packaging suites after nested-build repair: 31/31.
- Exact Debian archive: all entries root-owned; extracted contract and frozen hashes passed. Exact AppImage: extracted contract/hashes plus launch/render passed. Exact Flatpak: hash and isolated no-deploy import/metadata passed.
- App and Electrobun typechecks passed. Targeted storage bridge tests passed 6/6; main-window session tests passed 9/9.
- Native patch verification passed, and the review source patch applies cleanly to pristine Electrobun v1.18.1.
- Biome checks and
git diff --checkpassed for the modified source. - Frozen-candidate Linux doctor: 35 passed, 5 optional warnings, 1 required failure. The sole failure is the documented free-space/rebuild floor; optional warnings cover development headers, containers, and unreadable firewall state rather than the packaged runtime.
- Earlier completed gates remain recorded in Git history: accessibility, remote Cloud/PGlite routes, safe fetch, affected lint/typecheck/build, portable inference builder, real model ASR, and Vulkan TTS.
These tiers do not convert Xvfb, same-host, or focused tests into physical, live-provider, second-device, or production proof.
The no-fetch, no-mutation laptop scan found 425 Git markers and 421 canonical
repositories. Of those, 178 need individual attention: 102 dirty repositories,
136 branches without upstreams, 14 cached-ahead branches, and 25 cached-behind
branches, with overlapping categories. Cached divergence may be stale. The
scan did not fetch, commit, clean, push, or open PRs; an iqlabs timeout and
root-owned tails/chroot paths remain explicit coverage gaps.
- Physical GNOME/Wayland: pill placement, tray, shortcut, notifications, scales/monitors, suspend/resume, reboot persistence, and visible UX review.
- Physical media/provider: microphone, speaker, camera, and live voice chain.
- Second machine: Mac/VPS SSH enrollment, WAN reconnect, changed-host-key confirmation, restart recovery, and revocation with real identities.
- Real persistence services: Linux Secret Service plus deployed Cloud/PGlite migrations and relay, rather than same-host injected boundaries.
- Installer lifecycle: owner-approved clean install, upgrade, uninstall, and
reinstall. No
sudomutation was performed. - RPM: install/enable an approved RPM build environment, then build and inspect the exact artifact.
- Rebuild capacity: approve removal of specific generated outputs/caches or provide another build filesystem until at least 8 GiB is free. The current host has under 2 GiB free, so no exact-head packaged rebuild was attempted.
- Publication: refresh and approve draft PR #25427 after exact-head hosted CI and evidence review. Signing, release publication, merge, deploy, and production mutation remain separately gated.
cd /home/nubs/Documents/Codex/2026-08-22/eliza-linux-devices-runtimes
git status --short --branch
git log --oneline --decorate origin/develop..HEAD
node packages/scripts/patch-electrobun-linux-cef-profile.mjs --require
node packages/app-core/scripts/linux-distribution-contract.mjs \
--build-dir=packages/app-core/platforms/electrobun/build/dev-linux-x64/Eliza-dev \
--claim=production-direct