@elizaos/app-core 2.0.0-alpha.85 → 2.0.0-beta.2

package/platforms/electrobun/scripts/stage-macos-release-artifacts.sh

@@ -0,0 +1,491 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ARTIFACTS_DIR="${1:-$(cd "$SCRIPT_DIR/.." && pwd)/artifacts}"
+SKIP_SIGNATURE_CHECK="${ELECTROBUN_SKIP_CODESIGN:-0}"
+REAL_XCRUN="${ELECTROBUN_REAL_XCRUN:-/usr/bin/xcrun}"
+NOTARY_WAIT_TIMEOUT="${ELECTROBUN_NOTARY_WAIT_TIMEOUT:-60m}"
+
+if [[ "$(uname)" != "Darwin" ]]; then
+  echo "stage-macos-release-artifacts: macOS only"
+  exit 1
+fi
+
+if [[ ! -d "$ARTIFACTS_DIR" ]]; then
+  echo "stage-macos-release-artifacts: artifacts directory not found: $ARTIFACTS_DIR"
+  exit 1
+fi
+
+TMP_ROOT="$(mktemp -d "${TMPDIR:-/tmp}/eliza-macos-artifacts.XXXXXX")"
+EXTRACT_DIR="$TMP_ROOT/extracted"
+DMG_STAGING_DIR="$TMP_ROOT/dmg-staging"
+TEMP_DMG_PATH=""
+
+cleanup() {
+  if [[ -n "$TMP_ROOT" && -d "$TMP_ROOT" ]]; then
+    rm -rf "$TMP_ROOT"
+  fi
+}
+
+trap cleanup EXIT
+
+mkdir -p "$EXTRACT_DIR" "$DMG_STAGING_DIR"
+
+retry_command() {
+  local attempts="$1"
+  local delay_seconds="$2"
+  shift 2
+
+  local attempt command_status=0
+  for ((attempt = 1; attempt <= attempts; attempt += 1)); do
+    if "$@"; then
+      return 0
+    else
+      command_status=$?
+    fi
+    echo "Command failed (attempt $attempt/$attempts, exit=$command_status): $*" >&2
+    if [[ "$attempt" -lt "$attempts" ]]; then
+      sleep "$((delay_seconds * attempt))"
+    fi
+  done
+
+  return "$command_status"
+}
+
+retry_codesign() {
+  retry_command "${ELECTROBUN_CODESIGN_ATTEMPTS:-3}" "${ELECTROBUN_CODESIGN_RETRY_DELAY_SECONDS:-20}" codesign "$@"
+}
+
+parse_notary_submission_id() {
+  local output_path="$1"
+  /usr/bin/python3 - "$output_path" <<'PY'
+import json
+import pathlib
+import sys
+
+raw = pathlib.Path(sys.argv[1]).read_text(encoding="utf-8", errors="replace")
+
+try:
+    payload = json.loads(raw)
+except json.JSONDecodeError:
+    sys.exit(1)
+
+for key in ("id", "submissionId", "uuid", "notarizationId"):
+    value = payload.get(key)
+    if value:
+        print(value)
+        break
+PY
+}
+
+write_config_entitlements_plist() {
+  local output_path="$1"
+  local config_path="$SCRIPT_DIR/../electrobun.config.ts"
+
+  node --import tsx --input-type=module - "$output_path" "$config_path" <<'NODE'
+import fs from "node:fs";
+import { pathToFileURL } from "node:url";
+
+const [outputPath, configPath] = process.argv.slice(2);
+const configModule = await import(pathToFileURL(configPath).href);
+const config = configModule.default?.default ?? configModule.default;
+const entitlements = config?.build?.mac?.entitlements;
+
+if (
+  !entitlements ||
+  typeof entitlements !== "object" ||
+  Array.isArray(entitlements) ||
+  Object.keys(entitlements).length === 0
+) {
+  console.error(
+    `stage-macos-release-artifacts: no macOS entitlements configured in ${configPath}`,
+  );
+  process.exit(1);
+}
+
+const encode = (value) =>
+  String(value)
+    .replaceAll("&", "&amp;")
+    .replaceAll("<", "&lt;")
+    .replaceAll(">", "&gt;")
+    .replaceAll('"', "&quot;")
+    .replaceAll("'", "&apos;");
+
+const formatValue = (value) => {
+  if (value === true) return "<true/>";
+  if (value === false) return "<false/>";
+  if (typeof value === "string") return `<string>${encode(value)}</string>`;
+  if (Number.isInteger(value)) return `<integer>${value}</integer>`;
+  throw new Error(
+    `Unsupported macOS entitlement value for plist generation: ${JSON.stringify(value)}`,
+  );
+};
+
+const entries = Object.entries(entitlements)
+  .sort(([left], [right]) => left.localeCompare(right))
+  .map(([key, value]) => `\t<key>${encode(key)}</key>\n\t${formatValue(value)}`)
+  .join("\n");
+
+fs.writeFileSync(
+  outputPath,
+  `<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "https://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0">\n<dict>\n${entries}\n</dict>\n</plist>\n`,
+);
+NODE
+}
+
+parse_notary_status() {
+  local output_path="$1"
+  /usr/bin/python3 - "$output_path" <<'PY'
+import json
+import pathlib
+import sys
+
+path = pathlib.Path(sys.argv[1])
+if not path.exists():
+    sys.exit(1)
+
+raw = path.read_text(encoding="utf-8", errors="replace")
+
+try:
+    payload = json.loads(raw)
+except json.JSONDecodeError:
+    sys.exit(1)
+
+status = payload.get("status") or ""
+if status:
+    print(status)
+PY
+}
+
+retry_notarytool_submit() {
+  local output_path="$1"
+  local attempts="$2"
+  local delay_seconds="$3"
+
+  local attempt command_status=0
+  for ((attempt = 1; attempt <= attempts; attempt += 1)); do
+    rm -f "$output_path"
+    if "$REAL_XCRUN" notarytool submit \
+      --apple-id "$ELECTROBUN_APPLEID" \
+      --password "$ELECTROBUN_APPLEIDPASS" \
+      --team-id "$ELECTROBUN_TEAMID" \
+      --output-format json \
+      "$TEMP_DMG_PATH" >"$output_path"; then
+      return 0
+    else
+      command_status=$?
+    fi
+
+    echo "stage-macos-release-artifacts: notarization submit failed for $TEMP_DMG_PATH (attempt $attempt/$attempts, exit=$command_status)" >&2
+    if [[ "$attempt" -lt "$attempts" ]]; then
+      sleep "$((delay_seconds * attempt))"
+    fi
+  done
+
+  return "$command_status"
+}
+
+retry_notarytool_wait() {
+  local output_path="$1"
+  local attempts="$2"
+  local delay_seconds="$3"
+
+  local attempt command_status=0 notary_status=""
+  for ((attempt = 1; attempt <= attempts; attempt += 1)); do
+    rm -f "$output_path"
+    if "$REAL_XCRUN" notarytool wait \
+      --apple-id "$ELECTROBUN_APPLEID" \
+      --password "$ELECTROBUN_APPLEIDPASS" \
+      --team-id "$ELECTROBUN_TEAMID" \
+      --timeout "$NOTARY_WAIT_TIMEOUT" \
+      --output-format json \
+      "$NOTARY_SUBMISSION_ID" >"$output_path"; then
+      NOTARY_STATUS="$(parse_notary_status "$output_path" || true)"
+      if [[ "$NOTARY_STATUS" == "Accepted" ]]; then
+        return 0
+      fi
+      echo "stage-macos-release-artifacts: notarization ended with status ${NOTARY_STATUS:-unknown} for submission $NOTARY_SUBMISSION_ID" >&2
+      return 1
+    else
+      command_status=$?
+    fi
+
+    notary_status="$(parse_notary_status "$output_path" || true)"
+    if [[ "$notary_status" == "Invalid" || "$notary_status" == "Rejected" ]]; then
+      echo "stage-macos-release-artifacts: notarization ended with status $notary_status for submission $NOTARY_SUBMISSION_ID" >&2
+      return "$command_status"
+    fi
+
+    echo "stage-macos-release-artifacts: notarization wait failed for submission $NOTARY_SUBMISSION_ID (attempt $attempt/$attempts, exit=$command_status)" >&2
+    if [[ "$attempt" -lt "$attempts" ]]; then
+      sleep "$((delay_seconds * attempt))"
+    fi
+  done
+
+  return "$command_status"
+}
+
+retry_notarytool_log() {
+  local attempts="${ELECTROBUN_NOTARY_LOG_ATTEMPTS:-3}"
+  local delay_seconds="${ELECTROBUN_NOTARY_LOG_RETRY_DELAY_SECONDS:-20}"
+
+  local attempt command_status=0
+  for ((attempt = 1; attempt <= attempts; attempt += 1)); do
+    if "$REAL_XCRUN" notarytool log \
+      --apple-id "$ELECTROBUN_APPLEID" \
+      --password "$ELECTROBUN_APPLEIDPASS" \
+      --team-id "$ELECTROBUN_TEAMID" \
+      "$NOTARY_SUBMISSION_ID"; then
+      return 0
+    else
+      command_status=$?
+    fi
+
+    echo "stage-macos-release-artifacts: notarization log fetch failed for submission $NOTARY_SUBMISSION_ID (attempt $attempt/$attempts, exit=$command_status)" >&2
+    if [[ "$attempt" -lt "$attempts" ]]; then
+      sleep "$((delay_seconds * attempt))"
+    fi
+  done
+
+  return "$command_status"
+}
+
+TARBALL_PATH=""
+for tarball_pattern in "*-macos-*.app.tar.zst" "*-macos-*.app.tar.gz" "*-macos-*.tar.gz"; do
+  TARBALL_PATH="$(find -L "$ARTIFACTS_DIR" -maxdepth 1 -type f -name "$tarball_pattern" | sort | head -1)"
+  if [[ -n "$TARBALL_PATH" ]]; then
+    break
+  fi
+done
+if [[ -z "$TARBALL_PATH" ]]; then
+  echo "stage-macos-release-artifacts: no macOS updater tarball found in $ARTIFACTS_DIR"
+  exit 1
+fi
+
+echo "Using updater tarball: $TARBALL_PATH"
+TARBALL_BASENAME="$(basename "$TARBALL_PATH")"
+case "$TARBALL_BASENAME" in
+  *.tar.zst)
+    tar --zstd -xf "$TARBALL_PATH" -C "$EXTRACT_DIR"
+    ;;
+  *.tar.gz)
+    tar -xzf "$TARBALL_PATH" -C "$EXTRACT_DIR"
+    ;;
+  *)
+    echo "stage-macos-release-artifacts: unsupported macOS updater tarball: $TARBALL_BASENAME"
+    exit 1
+    ;;
+esac
+
+APP_BUNDLE_PATH="$(find "$EXTRACT_DIR" -maxdepth 2 -type d -name "*.app" | sort | head -1)"
+if [[ -z "$APP_BUNDLE_PATH" ]]; then
+  echo "stage-macos-release-artifacts: extracted tarball did not contain a .app bundle"
+  exit 1
+fi
+
+STAGED_APP_PATH="$ARTIFACTS_DIR/$(basename "$APP_BUNDLE_PATH")"
+rm -rf "$STAGED_APP_PATH"
+ditto "$APP_BUNDLE_PATH" "$STAGED_APP_PATH"
+
+LAUNCHER_PATH="$STAGED_APP_PATH/Contents/MacOS/launcher"
+WGPU_PATH="$STAGED_APP_PATH/Contents/MacOS/libwebgpu_dawn.dylib"
+VERSION_JSON_PATH="$STAGED_APP_PATH/Contents/Resources/version.json"
+RUNTIME_DIR="$STAGED_APP_PATH/Contents/Resources/app/eliza-dist"
+DIRECT_LAUNCHER_SOURCE="$SCRIPT_DIR/macos-direct-launcher.c"
+
+for required_path in "$LAUNCHER_PATH" "$WGPU_PATH" "$VERSION_JSON_PATH" "$RUNTIME_DIR"; do
+  if [[ ! -e "$required_path" ]]; then
+    echo "stage-macos-release-artifacts: expected extracted app content is missing: $required_path"
+    exit 1
+  fi
+done
+
+if [[ ! -f "$DIRECT_LAUNCHER_SOURCE" ]]; then
+  echo "stage-macos-release-artifacts: direct launcher source not found: $DIRECT_LAUNCHER_SOURCE"
+  exit 1
+fi
+
+if [[ "$SKIP_SIGNATURE_CHECK" != "1" && -n "${ELECTROBUN_DEVELOPER_ID:-}" ]]; then
+  TMP_ENTITLEMENTS_PATH="$TMP_ROOT/staged-entitlements.plist"
+  if ! codesign -d --entitlements :- "$STAGED_APP_PATH" >"$TMP_ENTITLEMENTS_PATH" 2>/dev/null; then
+    write_config_entitlements_plist "$TMP_ENTITLEMENTS_PATH"
+  fi
+  if [[ ! -s "$TMP_ENTITLEMENTS_PATH" ]]; then
+    write_config_entitlements_plist "$TMP_ENTITLEMENTS_PATH"
+  fi
+  if [[ ! -s "$TMP_ENTITLEMENTS_PATH" ]]; then
+    echo "stage-macos-release-artifacts: macOS entitlements plist is empty"
+    exit 1
+  fi
+fi
+
+TMP_LAUNCHER_PATH="$TMP_ROOT/direct-launcher"
+LAUNCHER_ARCHES="$(lipo -archs "$LAUNCHER_PATH" 2>/dev/null || true)"
+if [[ -z "$LAUNCHER_ARCHES" ]]; then
+  echo "stage-macos-release-artifacts: failed to determine launcher architecture for $LAUNCHER_PATH"
+  exit 1
+fi
+
+clang_arch_args=()
+for arch in $LAUNCHER_ARCHES; do
+  case "$arch" in
+    arm64|x86_64)
+      clang_arch_args+=(-arch "$arch")
+      ;;
+    *)
+      echo "stage-macos-release-artifacts: unsupported launcher architecture: $arch"
+      exit 1
+      ;;
+  esac
+done
+
+/usr/bin/clang \
+  -O2 \
+  -Wall \
+  -Wextra \
+  "${clang_arch_args[@]}" \
+  -mmacosx-version-min=11.0 \
+  "$DIRECT_LAUNCHER_SOURCE" \
+  -o "$TMP_LAUNCHER_PATH"
+install -m 0755 "$TMP_LAUNCHER_PATH" "$LAUNCHER_PATH"
+
+echo "Staged app bundle: $STAGED_APP_PATH"
+if [[ "$SKIP_SIGNATURE_CHECK" != "1" && -n "${ELECTROBUN_DEVELOPER_ID:-}" ]]; then
+  # The extracted updater app bundle is already correctly signed/notarized by
+  # electrobun. Re-sign only what changed and keep the original entitlements so
+  # we do not rewrite valid nested signatures with a blanket --deep pass.
+  runtime_sign_args=(--force --timestamp --sign "$ELECTROBUN_DEVELOPER_ID" --options runtime)
+  fallback_runtime_sign_args=(--force --timestamp --sign "$ELECTROBUN_DEVELOPER_ID")
+  app_sign_args=(--force --timestamp --sign "$ELECTROBUN_DEVELOPER_ID" --options runtime)
+  if [[ -s "${TMP_ENTITLEMENTS_PATH:-}" ]]; then
+    runtime_sign_args+=(--entitlements "$TMP_ENTITLEMENTS_PATH")
+    fallback_runtime_sign_args+=(--entitlements "$TMP_ENTITLEMENTS_PATH")
+    app_sign_args+=(--entitlements "$TMP_ENTITLEMENTS_PATH")
+  fi
+  sign_macos_runtime_target() {
+    local target_path="$1"
+    if ! retry_codesign "${runtime_sign_args[@]}" "$target_path"; then
+      echo "stage-macos-release-artifacts: runtime signing failed for $target_path, retrying without hardened runtime" >&2
+      retry_codesign "${fallback_runtime_sign_args[@]}" "$target_path"
+    fi
+  }
+  sign_nested_macos_runtime_targets() {
+    local runtime_resources_dir="$STAGED_APP_PATH/Contents/Resources/app/eliza-dist"
+    local candidate_path file_type
+    if [[ ! -d "$runtime_resources_dir" ]]; then
+      return 0
+    fi
+    while IFS= read -r -d '' candidate_path; do
+      file_type="$(file "$candidate_path" 2>/dev/null || true)"
+      case "$file_type" in
+        *Mach-O*)
+          sign_macos_runtime_target "$candidate_path"
+          ;;
+      esac
+    done < <(find "$runtime_resources_dir" -type f -print0)
+  }
+  macos_code_dir="$STAGED_APP_PATH/Contents/MacOS"
+  for runtime_target in \
+    "$macos_code_dir/libNativeWrapper.dylib" \
+    "$macos_code_dir/libwebgpu_dawn.dylib" \
+    "$macos_code_dir/libasar.dylib" \
+    "$macos_code_dir/bun" \
+    "$macos_code_dir/extractor" \
+    "$macos_code_dir/process_helper" \
+    "$macos_code_dir/zig-zstd" \
+    "$macos_code_dir/zig-asar" \
+    "$macos_code_dir/bspatch" \
+    "$macos_code_dir/bsdiff"; do
+    if [[ -e "$runtime_target" ]]; then
+      sign_macos_runtime_target "$runtime_target"
+    fi
+  done
+  sign_nested_macos_runtime_targets
+  sign_macos_runtime_target "$LAUNCHER_PATH"
+  retry_codesign "${app_sign_args[@]}" "$STAGED_APP_PATH"
+  codesign --verify --deep --strict --verbose=2 "$STAGED_APP_PATH"
+else
+  echo "Skipping staged app signature verification (unsigned/local build)."
+fi
+
+case "$TARBALL_BASENAME" in
+  *.app.tar.zst)
+    FINAL_DMG_NAME="${TARBALL_BASENAME%.app.tar.zst}.dmg"
+    ;;
+  *.app.tar.gz)
+    FINAL_DMG_NAME="${TARBALL_BASENAME%.app.tar.gz}.dmg"
+    ;;
+  *.tar.gz)
+    FINAL_DMG_NAME="${TARBALL_BASENAME%.tar.gz}.dmg"
+    ;;
+  *)
+    echo "stage-macos-release-artifacts: unsupported macOS updater tarball: $TARBALL_BASENAME"
+    exit 1
+    ;;
+esac
+FINAL_DMG_PATH="$ARTIFACTS_DIR/$FINAL_DMG_NAME"
+TEMP_DMG_PATH="$TMP_ROOT/$FINAL_DMG_NAME"
+VOLUME_NAME="$(basename "$STAGED_APP_PATH" .app)"
+
+ditto "$STAGED_APP_PATH" "$DMG_STAGING_DIR/$(basename "$STAGED_APP_PATH")"
+ln -s /Applications "$DMG_STAGING_DIR/Applications"
+
+rm -f "$FINAL_DMG_PATH"
+hdiutil create \
+  -volname "$VOLUME_NAME" \
+  -srcfolder "$DMG_STAGING_DIR" \
+  -ov \
+  -format ULFO \
+  "$TEMP_DMG_PATH"
+
+if [[ "$SKIP_SIGNATURE_CHECK" != "1" && -n "${ELECTROBUN_DEVELOPER_ID:-}" ]]; then
+  retry_codesign --force --timestamp --sign "$ELECTROBUN_DEVELOPER_ID" "$TEMP_DMG_PATH"
+fi
+
+if [[ "$SKIP_SIGNATURE_CHECK" != "1" && -n "${ELECTROBUN_APPLEID:-}" && -n "${ELECTROBUN_APPLEIDPASS:-}" && -n "${ELECTROBUN_TEAMID:-}" ]]; then
+  NOTARY_SUBMIT_ATTEMPTS="${ELECTROBUN_NOTARY_SUBMIT_ATTEMPTS:-3}"
+  NOTARY_SUBMIT_RETRY_DELAY_SECONDS="${ELECTROBUN_NOTARY_SUBMIT_RETRY_DELAY_SECONDS:-30}"
+  NOTARY_SUBMIT_OUTPUT_PATH="$TMP_ROOT/notary-submit.json"
+  if ! retry_notarytool_submit "$NOTARY_SUBMIT_OUTPUT_PATH" "$NOTARY_SUBMIT_ATTEMPTS" "$NOTARY_SUBMIT_RETRY_DELAY_SECONDS"; then
+    echo "stage-macos-release-artifacts: notarization submit failed for $TEMP_DMG_PATH" >&2
+    sed -n '1,80p' "$NOTARY_SUBMIT_OUTPUT_PATH" >&2 || true
+    exit 1
+  fi
+  NOTARY_SUBMISSION_ID="$(parse_notary_submission_id "$NOTARY_SUBMIT_OUTPUT_PATH" || true)"
+  if [[ -z "$NOTARY_SUBMISSION_ID" ]]; then
+    echo "stage-macos-release-artifacts: failed to parse notary submission id" >&2
+    sed -n '1,40p' "$NOTARY_SUBMIT_OUTPUT_PATH" >&2 || true
+    exit 1
+  fi
+  echo "Notary submission id: $NOTARY_SUBMISSION_ID"
+
+  NOTARY_WAIT_ATTEMPTS="${ELECTROBUN_NOTARY_WAIT_ATTEMPTS:-3}"
+  NOTARY_WAIT_RETRY_DELAY_SECONDS="${ELECTROBUN_NOTARY_WAIT_RETRY_DELAY_SECONDS:-60}"
+  NOTARY_WAIT_OUTPUT_PATH="$TMP_ROOT/notary-wait.json"
+  if ! retry_notarytool_wait "$NOTARY_WAIT_OUTPUT_PATH" "$NOTARY_WAIT_ATTEMPTS" "$NOTARY_WAIT_RETRY_DELAY_SECONDS"; then
+    echo "stage-macos-release-artifacts: notarization wait failed for submission $NOTARY_SUBMISSION_ID" >&2
+    sed -n '1,80p' "$NOTARY_WAIT_OUTPUT_PATH" >&2 || true
+    retry_notarytool_log >&2 || true
+    exit 1
+  fi
+  echo "Notarization accepted for submission $NOTARY_SUBMISSION_ID"
+
+  # Apple can lag several minutes before the notarization ticket becomes
+  # visible to stapler, especially on Intel runners.
+  STAPLER_ATTEMPTS="${ELECTROBUN_STAPLER_ATTEMPTS:-12}"
+  STAPLER_DELAY_SECONDS="${ELECTROBUN_STAPLER_DELAY_SECONDS:-30}"
+  if ! retry_command "$STAPLER_ATTEMPTS" "$STAPLER_DELAY_SECONDS" xcrun stapler staple "$TEMP_DMG_PATH"; then
+    if [[ "${ELECTROBUN_REQUIRE_STAPLED_DMG:-0}" == "1" ]]; then
+      exit 1
+    fi
+    echo "stage-macos-release-artifacts: notarization accepted but stapler ticket was not available; continuing without stapled DMG" >&2
+  fi
+fi
+
+mv "$TEMP_DMG_PATH" "$FINAL_DMG_PATH"
+
+echo "Standard macOS installer ready:"
+echo "  app: $STAGED_APP_PATH"
+echo "  dmg: $FINAL_DMG_PATH"

package/platforms/electrobun/scripts/sync-web-assets.mjs

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+/**
+ * Sync the host app's Vite `dist/` into the canonical Electrobun shell at
+ * `packages/app-core/platforms/electrobun/app/` (not under the host app).
+ *
+ * Usage:
+ *   node packages/app-core/platforms/electrobun/scripts/sync-web-assets.mjs
+ *
+ * Resolves the host app via the standard elizaOS layout; run after
+ * `bun run build:web` (or equivalent).
+ */
+import { cp, mkdir, rm, stat } from "node:fs/promises";
+import path from "node:path";
+import {
+	resolveElectrobunDir,
+	resolveMainAppDir,
+} from "../../../scripts/lib/app-dir.mjs";
+import { resolveRepoRootFromImportMeta } from "../../../scripts/lib/repo-root.mjs";
+
+const repoRoot = resolveRepoRootFromImportMeta(import.meta.url);
+const appRoot = resolveMainAppDir(repoRoot, "app");
+const electrobunRoot = resolveElectrobunDir(repoRoot);
+const sourceDir = path.join(appRoot, "dist");
+const targetDir = path.join(electrobunRoot, "app");
+const LOG_PREFIX = "[Electrobun]";
+
+async function ensureDirExists(dir) {
+	try {
+		const info = await stat(dir);
+		return info.isDirectory();
+	} catch {
+		return false;
+	}
+}
+
+if (!(await ensureDirExists(sourceDir))) {
+	console.error(`${LOG_PREFIX} Web build output not found: ${sourceDir}`);
+	console.error(
+		`${LOG_PREFIX} Run \`bun run build\` from the host app before syncing Electrobun assets.`,
+	);
+	process.exit(1);
+}
+
+await rm(targetDir, { recursive: true, force: true });
+await mkdir(targetDir, { recursive: true });
+await cp(sourceDir, targetDir, { recursive: true, force: true });
+
+console.info(`${LOG_PREFIX} Synced web assets: ${sourceDir} -> ${targetDir}`);

package/platforms/electrobun/scripts/verify-rpc-handlers.ts

@@ -0,0 +1,162 @@
+#!/usr/bin/env bun
+/**
+ * verify-rpc-handlers — compare ElizaDesktopRPCSchema methods to handler
+ * implementations in rpc-handlers.ts. Prints a drift report.
+ *
+ * Use during the defineRPC migration to catch missing/extra/orphan handlers.
+ *
+ * Usage:
+ *   bun scripts/verify-rpc-handlers.ts
+ *
+ * Exit code: 0 if in sync, 1 if drift detected.
+ */
+
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+
+const PLATFORM_ROOT = resolve(import.meta.dir, "..");
+const SCHEMA_PATH = resolve(PLATFORM_ROOT, "src/rpc-schema.ts");
+const HANDLERS_PATH = resolve(PLATFORM_ROOT, "src/rpc-handlers.ts");
+
+/** Extract top-level method names from `requests: { ... }` block in a schema side. */
+function extractSchemaMethods(source: string, side: "bun" | "webview"): Set<string> {
+	const sideAnchor = `${side}: RPCSchema<{`;
+	const sideStart = source.indexOf(sideAnchor);
+	if (sideStart < 0) {
+		throw new Error(`Could not find ${side} side in schema`);
+	}
+	const requestsAnchor = "requests: {";
+	const requestsStart = source.indexOf(requestsAnchor, sideStart);
+	if (requestsStart < 0) {
+		throw new Error(`Could not find requests block in ${side} side`);
+	}
+	// Walk forward to matching closing brace.
+	const cursor = requestsStart + requestsAnchor.length;
+	let depth = 1;
+	let i = cursor;
+	while (i < source.length && depth > 0) {
+		const ch = source[i];
+		if (ch === "{") depth++;
+		else if (ch === "}") depth--;
+		i++;
+	}
+	const block = source.slice(cursor, i - 1);
+
+	// Top-level keys: identifier followed by `:` at depth 0 inside block.
+	const methods = new Set<string>();
+	let d = 0;
+	let lineStart = 0;
+	for (let j = 0; j < block.length; j++) {
+		const ch = block[j];
+		if (ch === "{") d++;
+		else if (ch === "}") d--;
+		else if (ch === "\n") lineStart = j + 1;
+		else if (ch === ":" && d === 0) {
+			const line = block.slice(lineStart, j);
+			const match = line.match(/^\s*([a-zA-Z_$][\w$]*)\s*$/);
+			if (match) methods.add(match[1]);
+		}
+	}
+	return methods;
+}
+
+/** Extract top-level handler keys from the buildBunRpcHandlers return block. */
+function extractHandlerKeys(source: string): Set<string> {
+	// Prefer the new pure factory; fall back to the legacy setRequestHandler call.
+	const anchors = [
+		"export function buildBunRpcHandlers",
+		"rpc?.setRequestHandler?.({",
+	];
+	let cursor = -1;
+	for (const anchor of anchors) {
+		const idx = source.indexOf(anchor);
+		if (idx < 0) continue;
+		// For the factory, find the `return {` after the function signature.
+		if (anchor.startsWith("export function")) {
+			const returnIdx = source.indexOf("return {", idx);
+			if (returnIdx < 0) continue;
+			cursor = returnIdx + "return {".length;
+		} else {
+			cursor = idx + anchor.length;
+		}
+		break;
+	}
+	if (cursor < 0) {
+		throw new Error(
+			"Could not find handler block (buildBunRpcHandlers or setRequestHandler)",
+		);
+	}
+	let depth = 1;
+	let i = cursor;
+	while (i < source.length && depth > 0) {
+		const ch = source[i];
+		if (ch === "{") depth++;
+		else if (ch === "}") depth--;
+		i++;
+	}
+	const block = source.slice(cursor, i - 1);
+
+	const keys = new Set<string>();
+	let d = 0;
+	let parenDepth = 0;
+	let lineStart = 0;
+	for (let j = 0; j < block.length; j++) {
+		const ch = block[j];
+		if (ch === "{") d++;
+		else if (ch === "}") d--;
+		else if (ch === "(") parenDepth++;
+		else if (ch === ")") parenDepth--;
+		else if (ch === "\n") lineStart = j + 1;
+		else if (
+			(ch === ":" || ch === ",") &&
+			d === 0 &&
+			parenDepth === 0
+		) {
+			const line = block.slice(lineStart, j);
+			// Property: identifier alone (shorthand) or identifier preceding colon.
+			// For shorthand, the line is just the identifier (with whitespace).
+			// For colon syntax, line ends with the identifier name.
+			if (ch === ",") {
+				const match = line.match(/^\s*([a-zA-Z_$][\w$]*)\s*$/);
+				if (match) keys.add(match[1]);
+			} else {
+				const match = line.match(/^\s*([a-zA-Z_$][\w$]*)\s*$/);
+				if (match) keys.add(match[1]);
+			}
+		}
+	}
+	return keys;
+}
+
+const schemaSrc = readFileSync(SCHEMA_PATH, "utf8");
+const handlersSrc = readFileSync(HANDLERS_PATH, "utf8");
+
+const schemaMethods = extractSchemaMethods(schemaSrc, "bun");
+const handlerKeys = extractHandlerKeys(handlersSrc);
+
+const missing = [...schemaMethods].filter((m) => !handlerKeys.has(m)).sort();
+const extra = [...handlerKeys].filter((k) => !schemaMethods.has(k)).sort();
+
+console.log(`Schema methods (bun.requests): ${schemaMethods.size}`);
+console.log(`Handler implementations:       ${handlerKeys.size}`);
+console.log("");
+
+if (missing.length === 0 && extra.length === 0) {
+	console.log("✓ All schema methods have handler implementations");
+	console.log("✓ All handlers correspond to schema methods");
+	process.exit(0);
+}
+
+if (missing.length > 0) {
+	console.log(`✗ Missing handlers (${missing.length}):`);
+	for (const m of missing) console.log(`    - ${m}`);
+	console.log("");
+}
+
+if (extra.length > 0) {
+	console.log(`✗ Orphan handlers — not in schema (${extra.length}):`);
+	for (const k of extra) console.log(`    - ${k}`);
+	console.log("");
+}
+
+process.exit(1);