@elizaos/app-core 2.0.0-beta.1 → 2.0.0-beta.2

package/runtime/ensure-local-inference-handler.js

@@ -28,6 +28,7 @@ import { localInferenceEngine } from "../services/local-inference/engine";
 import { handlerRegistry } from "../services/local-inference/handler-registry";
 import { listInstalledModels } from "../services/local-inference/registry";
 import { installRouterHandler } from "../services/local-inference/router-handler";
+import { getRuntimeMode } from "./mode/runtime-mode";
 const LOCAL_INFERENCE_PROVIDER = "eliza-local-inference";
 const DEVICE_BRIDGE_PROVIDER = "eliza-device-bridge";
 const CAPACITOR_LLAMA_PROVIDER = "capacitor-llama";
@@ -46,6 +47,9 @@ const AOSP_LLAMA_PROVIDER = "eliza-aosp-llama";
  * routing-policy layer picks between them).
  */
 const LOCAL_INFERENCE_PRIORITY = 0;
+export function shouldRegisterLocalInferenceHandlers(mode) {
+    return mode === "local" || mode === "local-only";
+}
 function getLoader(runtime) {
     const candidate = runtime.getService?.("localInferenceLoader");
     if (!candidate || typeof candidate !== "object")
@@ -278,6 +282,11 @@ async function tryRegisterCapacitorLoader(runtime) {
     return false;
 }
 export async function ensureLocalInferenceHandler(runtime) {
+    const runtimeMode = getRuntimeMode();
+    if (!shouldRegisterLocalInferenceHandlers(runtimeMode)) {
+        logger.info(`[local-inference] Runtime mode is ${runtimeMode}; skipping local model handler registration`);
+        return;
+    }
     const runtimeWithRegistration = runtime;
     if (typeof runtimeWithRegistration.getModel !== "function" ||
         typeof runtimeWithRegistration.registerModel !== "function") {

package/runtime/mode/remote-forwarder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-forwarder.d.ts","sourceRoot":"","sources":["../../../../../../src/runtime/mode/remote-forwarder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAelC,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAKT;AAgBD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAClC,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAkBT;AAUD;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,GACvB,OAAO,CAAC,OAAO,CAAC,CA8ClB"}
+{"version":3,"file":"remote-forwarder.d.ts","sourceRoot":"","sources":["../../../../../../src/runtime/mode/remote-forwarder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAelC,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAKT;AAgBD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAClC,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAkBT;AAUD;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,GACvB,OAAO,CAAC,OAAO,CAAC,CAkDlB"}

package/runtime/mode/remote-forwarder.js

@@ -96,7 +96,7 @@ export async function forwardRemoteCloudMutation(req, res) {
     if (!shouldForwardToRemoteTarget(url.pathname, method))
         return false;
     if (!snapshot.remoteApiBase) {
-        sendJsonError(res, 503, "Remote target not configured");
+        sendJsonError(res, snapshot.remoteApiBaseError ? 400 : 503, snapshot.remoteApiBaseError ?? "Remote target not configured");
         return true;
     }
     const targetUrl = new URL(`${url.pathname}${url.search}`, snapshot.remoteApiBase);

package/runtime/mode/runtime-mode.d.ts

@@ -23,9 +23,11 @@ export interface RuntimeModeSnapshot {
     mode: RuntimeMode;
     deploymentTarget: DeploymentTargetConfig | null;
     /** Present iff `mode === "remote"`. The local-instance HTTP base the
-     *  controller proxies to. Cloud bases are rejected upstream during
-     *  onboarding (see `onboarding.ts`). */
+     *  controller proxies to. Cloud/public bases are rejected here too so
+     *  stale or hand-edited config cannot turn remote mode into cloud mode. */
     remoteApiBase: string | null;
+    /** Populated when a remote target was configured but rejected. */
+    remoteApiBaseError: string | null;
     remoteAccessToken: string | null;
 }
 declare const RuntimeModeConfigSchema: z.ZodObject<{
@@ -50,5 +52,21 @@ export declare function getRuntimeMode(): RuntimeMode;
 export declare function getRuntimeModeSnapshot(): RuntimeModeSnapshot;
 /** True for both `local` and `local-only`. */
 export declare function isLocalRuntime(mode: RuntimeMode): boolean;
+export interface RemoteApiBaseValidationOk {
+    ok: true;
+    href: string;
+}
+export interface RemoteApiBaseValidationErr {
+    ok: false;
+    error: string;
+}
+export type RemoteApiBaseValidation = RemoteApiBaseValidationOk | RemoteApiBaseValidationErr;
+/**
+ * Remote mode is a thin controller for another local/private Eliza instance,
+ * never for Eliza Cloud or a public model API. Accept loopback, private
+ * RFC1918/CGNAT/link-local hosts, and .local mDNS names.
+ */
+export declare function validateRemoteApiBase(value: string | null | undefined): RemoteApiBaseValidation;
+export declare function isLocalRemoteHost(hostname: string): boolean;
 export {};
 //# sourceMappingURL=runtime-mode.d.ts.map

package/runtime/mode/runtime-mode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-mode.d.ts","sourceRoot":"","sources":["../../../../../../src/runtime/mode/runtime-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EACL,KAAK,sBAAsB,EAE5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,aAAa,qDAKhB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAChD;;4CAEwC;IACxC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAOD,QAAA,MAAM,uBAAuB;;;;;iBASb,CAAC;AAEjB,KAAK,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAatE;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,mBAAmB,CAkCrB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,4BAA4B;AAC5B,wBAAgB,sBAAsB,IAAI,mBAAmB,CAE5D;AAED,8CAA8C;AAC9C,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAEzD"}
+{"version":3,"file":"runtime-mode.d.ts","sourceRoot":"","sources":["../../../../../../src/runtime/mode/runtime-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EACL,KAAK,sBAAsB,EAE5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,aAAa,qDAKhB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAChD;;+EAE2E;IAC3E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kEAAkE;IAClE,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAOD,QAAA,MAAM,uBAAuB;;;;;iBASb,CAAC;AAEjB,KAAK,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAatE;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,mBAAmB,CAuCrB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,4BAA4B;AAC5B,wBAAgB,sBAAsB,IAAI,mBAAmB,CAE5D;AAED,8CAA8C;AAC9C,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAEzD;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,uBAAuB,GAC/B,yBAAyB,GACzB,0BAA0B,CAAC;AAE/B;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,uBAAuB,CAuBzB;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAsB3D"}

package/runtime/mode/runtime-mode.js

@@ -55,10 +55,13 @@ function parseRuntimeModeConfig(config) {
 export function resolveRuntimeMode(config) {
     const deploymentTarget = normalizeDeploymentTargetConfig(config?.deploymentTarget);
     if (deploymentTarget?.runtime === "remote") {
+        const remoteApiBase = deploymentTarget.remoteApiBase?.trim() || null;
+        const remoteValidation = validateRemoteApiBase(remoteApiBase);
         return {
             mode: "remote",
             deploymentTarget,
-            remoteApiBase: deploymentTarget.remoteApiBase?.trim() || null,
+            remoteApiBase: remoteValidation.ok ? remoteValidation.href : null,
+            remoteApiBaseError: remoteValidation.ok ? null : remoteValidation.error,
             remoteAccessToken: deploymentTarget.remoteAccessToken?.trim() || null,
         };
     }
@@ -67,6 +70,7 @@ export function resolveRuntimeMode(config) {
             mode: "cloud",
             deploymentTarget,
             remoteApiBase: null,
+            remoteApiBaseError: null,
             remoteAccessToken: null,
         };
     }
@@ -78,6 +82,7 @@ export function resolveRuntimeMode(config) {
         mode: cloudExplicitlyDisabled ? "local-only" : "local",
         deploymentTarget: deploymentTarget ?? null,
         remoteApiBase: null,
+        remoteApiBaseError: null,
         remoteAccessToken: null,
     };
 }
@@ -97,3 +102,66 @@ export function getRuntimeModeSnapshot() {
 export function isLocalRuntime(mode) {
     return mode === "local" || mode === "local-only";
 }
+/**
+ * Remote mode is a thin controller for another local/private Eliza instance,
+ * never for Eliza Cloud or a public model API. Accept loopback, private
+ * RFC1918/CGNAT/link-local hosts, and .local mDNS names.
+ */
+export function validateRemoteApiBase(value) {
+    const raw = value?.trim();
+    if (!raw) {
+        return { ok: false, error: "Remote target not configured" };
+    }
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        return { ok: false, error: "Remote target must be a valid URL" };
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        return { ok: false, error: "Remote target must use http or https" };
+    }
+    if (!isLocalRemoteHost(url.hostname)) {
+        return {
+            ok: false,
+            error: "Remote mode can only target loopback, .local, or private-network Eliza instances",
+        };
+    }
+    url.pathname = url.pathname.replace(/\/+$/, "");
+    return { ok: true, href: url.toString() };
+}
+export function isLocalRemoteHost(hostname) {
+    const host = hostname.trim().toLowerCase().replace(/^\[(.*)\]$/, "$1");
+    if (!host)
+        return false;
+    if (host === "localhost" || host.endsWith(".localhost"))
+        return true;
+    if (host.endsWith(".local"))
+        return true;
+    if (host === "::1")
+        return true;
+    if (host.startsWith("fe80:"))
+        return true;
+    const parts = host.split(".");
+    if (parts.length !== 4)
+        return false;
+    const octets = parts.map((p) => Number(p));
+    if (!octets.every((n) => Number.isInteger(n) && n >= 0 && n <= 255)) {
+        return false;
+    }
+    const [a, b] = octets;
+    if (a === 10)
+        return true;
+    if (a === 127)
+        return true;
+    if (a === 169 && b === 254)
+        return true;
+    if (a === 172 && b >= 16 && b <= 31)
+        return true;
+    if (a === 192 && b === 168)
+        return true;
+    if (a === 100 && b >= 64 && b <= 127)
+        return true;
+    return false;
+}

package/scripts/aosp/stage-default-models.mjs

@@ -68,7 +68,7 @@ const repoRoot = resolveRepoRootFromImportMeta(import.meta.url);
 const CHAT_MODEL_ELIZA_1_MOBILE = {
   id: "eliza-1-mobile-1_7b",
   displayName: "Eliza-1 mobile",
-  hfRepo: "elizaos/eliza-1-mobile-1_7b",
+  hfRepo: "elizalabs/eliza-1-mobile-1_7b",
   ggufFile: "text/eliza-1-mobile-1_7b-32k.gguf",
   expectedMinBytes: 900 * 1024 * 1024,
   expectedMaxBytes: 1700 * 1024 * 1024,
@@ -78,7 +78,7 @@ const CHAT_MODEL_ELIZA_1_MOBILE = {
 const EMBEDDING_MODEL_ELIZA_1_LITE = {
   id: "eliza-1-lite-0_6b",
   displayName: "Eliza-1 lite",
-  hfRepo: "elizaos/eliza-1-lite-0_6b",
+  hfRepo: "elizalabs/eliza-1-lite-0_6b",
   ggufFile: "text/eliza-1-lite-0_6b-32k.gguf",
   expectedMinBytes: 300 * 1024 * 1024,
   expectedMaxBytes: 800 * 1024 * 1024,

package/scripts/build-llama-cpp-dflash.mjs

@@ -647,8 +647,8 @@ function cmakeFlagsForTarget(target, ctx) {
     // EMBED_LIBRARY behavior:
     //
     //   * iOS (later in this function) sets it to ON unconditionally —
-    //     the static-archive build needs the metallib data baked into
-    //     the framework via .incbin.
+    //     the static-archive build needs compiled metallib bytes baked
+    //     into the framework via .incbin.
     //   * Darwin desktop (this branch) sets it OFF so the metallib is
     //     compiled at build time into a sidecar default.metallib that
     //     ships next to llama-server. The kernel-patches/metal-kernels
@@ -657,13 +657,10 @@ function cmakeFlagsForTarget(target, ctx) {
     //     is compiled into its own .air and merged into default.metallib
     //     alongside ggml-metal.air.
     //
-    //     The EMBED path is incompatible with the standalones because
-    //     it concatenates ggml-metal.metal + ggml-common.h into a single
-    //     compilation unit, and the standalones redefine block_qjl1_256
-    //     and block_q4_polar (same byte layout, different field names)
-    //     plus QK_POLAR / QK_QJL / QJL_RESIDUAL_BYTES already in
-    //     ggml-common.h. Wiring them through the EMBED path requires a
-    //     dup-strip pass that is filed as a separate follow-up.
+    //     The EMBED path is patched by kernel-patches/metal-kernels.mjs
+    //     to embed a compiled default.metallib instead of concatenated
+    //     source. That keeps the standalone shader TUs separate and
+    //     avoids duplicate block_* / constant declarations.
     flags.push("-DGGML_METAL_EMBED_LIBRARY=OFF");
   } else if (backend === "cuda") {
     flags[flags.indexOf("-DGGML_CUDA=OFF")] = "-DGGML_CUDA=ON";
@@ -826,13 +823,11 @@ function cmakeFlagsForTarget(target, ctx) {
     } else {
       flags.push("-DCMAKE_OSX_SYSROOT=iphoneos");
     }
-    // iOS static-archive build needs the metallib data baked in via .incbin
-    // since there is no place on-device to ship a sidecar default.metallib.
-    // Override the OFF default that the metal backend block set above.
-    // NOTE: targetCompatibility() refuses iOS Metal before configure/build
-    // until kernel-patches/metal-kernels.mjs wires the EMBED_LIBRARY path.
-    // Keep this flag correct for the future patch, but do not rely on late
-    // requiredKernelsMissing() failure for today's unsupported path.
+    // iOS static-archive build needs compiled metallib data baked in via
+    // .incbin since there is no sidecar default.metallib next to a console
+    // binary. The Metal patcher rewrites the EMBED_LIBRARY CMake branch to
+    // compile ggml-metal.metal + the milady standalones into one metallib
+    // before embedding it.
     const embedIdx = flags.indexOf("-DGGML_METAL_EMBED_LIBRARY=OFF");
     if (embedIdx !== -1) {
       flags[embedIdx] = "-DGGML_METAL_EMBED_LIBRARY=ON";
@@ -857,17 +852,6 @@ function targetCompatibility(target, ctx) {
         "fused (omnivoice-grafted) targets are desktop/server only — mobile fusion is not wired yet",
     };
   }
-  if (platform === "ios" && backend === "metal") {
-    return {
-      ok: false,
-      reason:
-        "iOS Metal cannot yet ship the full Eliza-1 kernel set: the current " +
-        "metal-kernels.mjs patch wires only the non-EMBED default.metallib " +
-        "branch used by darwin host builds. iOS uses GGML_METAL_EMBED_LIBRARY=ON, " +
-        "so TurboQuant/QJL/Polar standalones are not embedded. Refusing before " +
-        "configure/build; wire the embedded metallib path before enabling this target.",
-    };
-  }
   if (platform === "darwin" && process.platform !== "darwin") {
     return { ok: false, reason: "darwin target requires macOS host" };
   }
@@ -1044,6 +1028,12 @@ function ensureCheckout(cacheDir, ref) {
   if (fs.existsSync(path.join(cacheDir, ".git"))) {
     run("git", ["fetch", "--depth=1", "origin", ref], { cwd: cacheDir });
     run("git", ["checkout", "FETCH_HEAD"], { cwd: cacheDir });
+    // This checkout is a generated build cache owned by this script. Always
+    // reset tracked and untracked source edits before applying our patch set
+    // so stale kernel-patch artifacts from prior builds cannot leak into a
+    // new artifact.
+    run("git", ["reset", "--hard", "FETCH_HEAD"], { cwd: cacheDir });
+    run("git", ["clean", "-fd"], { cwd: cacheDir });
   } else {
     fs.mkdirSync(path.dirname(cacheDir), { recursive: true });
     run("git", ["clone", "--depth=1", "--branch", ref, REMOTE, cacheDir]);
@@ -1097,12 +1087,11 @@ function ensureCheckout(cacheDir, ref) {
 //     wiring is a separate fork-internals patch and is the next agent's
 //     mission.
 //
-//   * The EMBED_LIBRARY=ON branch (used by iOS targets) is not yet patched.
-//     iOS builds compile a single concatenated .metal via .incbin and would
-//     require stripping the duplicate decls (block_qjl1_256, block_q4_polar,
-//     QK_QJL, QK_POLAR, QJL_RESIDUAL_BYTES already in ggml-common.h). That
-//     is a separate patch tracked in kernel-patches/metal-kernels.mjs's
-//     module comment.
+//   * The EMBED_LIBRARY=ON branch (used by iOS targets) is also patched:
+//     it compiles ggml-metal.metal + the milady standalones as separate
+//     .air files, merges them into one default.metallib, and embeds those
+//     compiled bytes. That avoids duplicate source declarations while
+//     shipping the same five kernel symbols as the desktop sidecar.
 //
 //   * Vulkan: the 8 standalone .comp files are staged into
 //     ggml/src/ggml-vulkan/vulkan-shaders/ (picked up by file(GLOB)),
@@ -1111,10 +1100,10 @@ function ensureCheckout(cacheDir, ref) {
 //     SPV blobs are linked into libggml-vulkan.so. Symbol audit (`nm
 //     libggml-vulkan.so | grep milady_`) passes; op-level dispatch routing
 //     for GGML_OP_ATTN_SCORE_QJL and the milady GGML_TYPE_* values is the
-//     remaining gap and is the next agent's mission. Until it lands, the
-//     ELIZA_DFLASH_ALLOW_INCOMPLETE_VULKAN=1 env var still applies — the
-//     help-text probe in probeKernels() can't yet see qjl/polar via CLI
-//     flags because the runtime can't select them.
+//     remaining gap and is the next agent's mission. Incomplete Vulkan
+//     artifacts are now publish-blocking: probeKernels() marks symbol-only
+//     QJL/Polar/Turbo paths false until op-level dispatch is numerically
+//     verified.
 function applyForkPatches(cacheDir, backend, target, { dryRun = false } = {}) {
   if (backend === "metal") {
     patchMetalKernelsImpl(cacheDir, { dryRun });
@@ -1294,9 +1283,17 @@ function probeKernels(target, buildDir, outDir) {
   // Honesty gate: Metal/Vulkan standalone shaders can compile and be present
   // as symbols/pipelines while still being unreachable or semantically wrong
   // through generic llama.cpp ops. Do not let symbol presence satisfy
-  // AGENTS.md §3. Flip these back to true only after dedicated ATTN_SCORE /
-  // QJL projection / Polar get_rows dispatch is numerically verified.
-  if (backend === "metal" || backend === "vulkan") {
+  // AGENTS.md §3. Flip these back to true only after dedicated dispatch is
+  // wired. Metal currently has a dedicated GGML_OP_ATTN_SCORE_QJL bridge;
+  // Turbo and Polar remain symbol-only.
+  if (backend === "metal") {
+    const shipped = probeMetalShippedKernelSymbols(buildDir, outDir).symbols;
+    kernels.turbo3 = false;
+    kernels.turbo4 = false;
+    kernels.turbo3_tcq = false;
+    kernels.qjl_full = Boolean(shipped.qjl_full);
+    kernels.polarquant = false;
+  } else if (backend === "vulkan") {
     kernels.turbo3 = false;
     kernels.turbo4 = false;
     kernels.turbo3_tcq = false;
@@ -1354,6 +1351,41 @@ function requiredKernelsMissing(target, kernels) {
   return required.filter((k) => !kernels[k]);
 }
 
+function probeMetalShippedKernelSymbols(buildDir, outDir) {
+  const shipped = {
+    turbo3: false,
+    turbo4: false,
+    turbo3_tcq: false,
+    qjl_full: false,
+    polarquant: false,
+  };
+  const metallibs = [
+    ...collectFilesUnder(buildDir, /\.metallib$/),
+    ...collectFilesUnder(outDir, /\.metallib$/),
+  ];
+  for (const metallibPath of metallibs) {
+    const bytes = fs.readFileSync(metallibPath);
+    const has = (sym) => bytes.indexOf(sym) !== -1;
+    if (has("kernel_turbo3_dot")) shipped.turbo3 = true;
+    if (has("kernel_turbo4_dot")) shipped.turbo4 = true;
+    if (has("kernel_turbo3_tcq_dot")) shipped.turbo3_tcq = true;
+    if (
+      has("kernel_attn_score_qjl1_256") ||
+      has("kernel_get_rows_qjl1_256") ||
+      has("kernel_mul_mv_qjl1_256_f32")
+    ) {
+      shipped.qjl_full = true;
+    }
+    if (
+      has("kernel_get_rows_q4_polar") ||
+      has("kernel_mul_mv_q4_polar_f32")
+    ) {
+      shipped.polarquant = true;
+    }
+  }
+  return { metallibs, symbols: shipped };
+}
+
 function writeCapabilities({
   outDir,
   target,
@@ -1365,6 +1397,8 @@ function writeCapabilities({
   const { platform, arch, backend, fused } = parseTarget(target);
   const kernels = probeKernels(target, buildDir, outDir);
   const missing = requiredKernelsMissing(target, kernels);
+  const shippedKernels =
+    backend === "metal" ? probeMetalShippedKernelSymbols(buildDir, outDir) : null;
   const capabilities = {
     target,
     platform,
@@ -1375,6 +1409,7 @@ function writeCapabilities({
     fork: "milady-ai/llama.cpp",
     forkCommit,
     kernels,
+    shippedKernels,
     binaries,
     omnivoice,
   };