IA OlympusAsistente de la web
# Limitations and Non-Certified Agents This document records what was actually verified and what remains unverified. A configuration file being written is not proof that an agent works end to end, and a successful package installation is not a conversational certification. ## 1.0.4 current status - The 1.0.4 installer was built on the Windows development host and passed local typecheck, 101 Vitest tests (1 Linux-only test skipped) and Playwright 4/4. - The artifact has not yet been installed or exercised in a Windows VM. The 1.0.1 VM report below remains historical evidence and must not be presented as 1.0.4 certification. - The Windows header now has explicit `Español` and `English` buttons. Automated UI tests verified that the English selection changes the search field, connection indicator and platform label and is persisted through preferences. - The Windows EXE does not install Linux software and does not use Docker. The operating-system dropdown was removed because it was only a redundant catalog filter. - Disk space is measured with `fs.statfs` on the application install volume. The required amount is the catalog upper-bound estimate plus a 512 MB safety reserve. If the measurement fails, the agent is blocked rather than assumed safe. - Hermes on Windows installs inside a WSL2 distribution, whose VHDX can have a separate growth limit. The app checks the host install volume but cannot guarantee the WSL distribution quota; Hermes remains a consent-based official installer path and is not certified until tested with a real WSL2 distribution. - Node.js is never installed, updated, reinstalled or uninstalled by the app. An existing installation is left intact; a missing or insufficient version blocks only the affected agent and opens the official Node.js page. - Local validation cannot prove that a third-party agent starts, accepts the generated configuration, or converses. Those cases remain `NO EJECUTADA` until tested in the VM. - The installed-directory cleanup defect from 1.0.1 has not been re-tested for 1.0.4. - The current catalog no longer claims `documentation-verified` for OpenCode, OpenClaw or Reasonix; it uses the conservative `configuration-verified` label backed by the 1.0.1 VM evidence. None is `live-verified` on Windows. - The exposed test key from earlier chats must be rotated or revoked and must not be reused. ## 1.0.1 environment tested - Windows 10 Pro 19045 x64 VM, standard user. - Node.js 24.22.1, npm/npx 11.19.1. - Codex 0.164.0 was preinstalled globally and was preserved. - Python 3.15.1. - Snapshots `clean-before-install` and `before-node-upgrade` confirmed by the host. - No WSL2 distribution. - Defender remained active. ## 1.0.1 what was verified - The NSIS artifact hash, size, FileVersion, ProductVersion and Authenticode `NotSigned` status matched the expected 1.0.1 values; `SHA256SUMS` matched. - `npm ci`, TypeScript, Vitest 86/86 and Playwright 3/3 passed in the VM. - The API key dialog supported password entry, paste, show/hide, whitespace trimming and prefix validation. An invalid key returned HTTP 401. A valid key returned HTTP 200 from `/v1/models` with `iaolympus-low` and `iaolympus-pro`. - The key was stored through `safeStorage` in an encrypted file with a user-only ACL and no plaintext pattern. Deletion from the app and persistence of the deletion after restart passed. - Codex, Claude Code, OpenCode, OpenClaw and Reasonix were installed, configured and connection-validated. Global Codex 0.164.0 was preserved. - Shortcuts were removed when agents were uninstalled; the final app uninstall removed all `IA Olympus - *.lnk` shortcuts. - `%APPDATA%\iaolympus-agent-installer` was removed by the app uninstaller. - `state.json` lost `lastKeyValidationAt` and `apiValidatedAt` after key deletion; agent records disappeared after agent uninstall. - Reasonix displayed `%APPDATA%\reasonix\config.toml`; its private `.env` had a user-only ACL, no leading blank line after idempotent reconfiguration, and no content was printed. - Reconfiguring Codex, OpenCode and Reasonix did not duplicate IA Olympus blocks. Repairing OpenCode preserved unrelated configuration. - Hermes explained the missing WSL2 dependency, opened the official guide and rechecked without pretending to be installed. - WorkBuddy/CodeBuddy remained a guided installation. Qoder remained unavailable and was not installed or redirected. - The registered app uninstaller returned exit code 0. No app processes, services, shortcuts or `%APPDATA%` app data remained. - Node.js, npm/npx and global Codex remained intact. ## 1.0.1 what was not verified - A clean Windows baseline without Node.js. - Blocking with an insufficient Node.js version. - The offline-network message with the VM network disconnected. - Explicit persistence of a valid key across a restart before deletion. - A documented non-interactive conversation probe for any agent. All such probes are `NO EJECUTADA`. - Hermes inside a working WSL2 distribution. - WorkBuddy/CodeBuddy after a real guided installation. - Interactive Linux AppImage and DEB testing on a physical desktop. - Authenticode signing and Linux GPG signing. ## Known minor defects in 1.0.1 - After validating Codex connectivity, the Codex detail panel still shows a static sentence saying that no real key is available. The header and test ledger correctly show connection validated. This is a wording defect, not a connectivity failure. - The uninstaller leaves an empty `%LOCALAPPDATA%\Programs\IA Olympus Agent Installer` directory. It contains no executables or secrets. - The catalog labels for OpenCode, OpenClaw and Reasonix remain `documentation-verified` even though the 1.0.1 VM evidence supports `configuration-verified`. The conservative label does not overclaim. ## Historical 1.0.0 findings and 1.0.1 remediation - Shortcuts were left after agent uninstall. 1.0.1 removes the matching shortcut and sanitizes the WorkBuddy/CodeBuddy filename; the NSIS uninstaller also deletes `IA Olympus - *.lnk`. - The app uninstaller left 511,529,737 bytes under `%APPDATA%\iaolympus-agent-installer`. 1.0.1 added an update-safe `customUnInstall` cleanup for that folder, verified in the 1.0.1 VM. - Validation timestamps and empty agent records survived key deletion or uninstall. 1.0.1 clears all key-validation state, deletes the whole agent record and prunes legacy empty records, verified in the 1.0.1 VM. - The UI showed the Linux Reasonix path on Windows. 1.0.1 uses one shared display helper and shows `%APPDATA%\reasonix\config.toml` on Windows, verified in the 1.0.1 VM. - Claude Code settings do not contain `IAOLYMPUS_API_KEY`. This is intentional: official documentation states that values in `settings.json` are copied literally and are not expanded. The launcher injects the key and token only into the agent process. - The Reasonix `.env` inherited broad access. 1.0.1 applies `icacls /inheritance:r /grant:r <user>:F` through an argument list and fails closed if the restriction cannot be applied. The encrypted key file receives the same treatment, verified in the 1.0.1 VM. - The OpenCode stale-message finding could not be reproduced in the current source; the generic uninstall message is agent-neutral. The saved 1.0.0 evidence was not modified. ## Security notes - The test key exposed in a chat must remain revoked or rotated and must not be reused. - No real key is present in this repository, the reports, the screenshots or the build output. - The app does not disable Defender, firewall, SmartScreen or system protections. - No telemetry, prompt collection or conversation storage is implemented by the installer. ## Required validation before public release 1. Decide whether to fix the Codex stale note and the empty installation directory in a future build. 2. Windows 10 and Windows 11 clean VM without Node.js. 3. Windows with an insufficient Node.js version. 4. Revoked/invalid key, offline network and HTTP 5xx behavior. 5. Explicit valid-key persistence across a restart. 6. Real guided WorkBuddy/CodeBuddy installation and post-install detection. 7. Hermes on a working WSL2 distribution. 8. AppImage and DEB on clean Ubuntu and Fedora desktops, including keyring and no-keyring fallback. 9. A safe non-interactive probe for each agent whose official documentation provides one. 10. Authenticode signing and optional Linux GPG signing.