@elizaos/app-core 2.0.0-beta.3 → 2.0.11-beta.6

package/scripts/pre-review-local.mjs

@@ -304,7 +304,7 @@ export function resolveRunnableTestFiles(testFiles, cwd = process.cwd()) {
 }
 
 export function buildRepoTestCommand(repoTests) {
-  return `bunx vitest run --config eliza/test/vitest/unit.config.ts ${repoTests.join(" ")}`;
+  return `bunx vitest run --config eliza/packages/test/vitest/unit.config.ts ${repoTests.join(" ")}`;
 }
 
 export function shouldRunTargetedRegressionTests({
@@ -506,7 +506,7 @@ export function runChecks() {
 
         if (repoE2eTests.length > 0) {
           testCommands.push(
-            `bunx vitest run --config eliza/test/vitest/e2e.config.ts ${repoE2eTests.join(" ")}`,
+            `bunx vitest run --config eliza/packages/test/vitest/e2e.config.ts ${repoE2eTests.join(" ")}`,
           );
         }
 

package/scripts/prepare-ios-cocoapods.sh

@@ -1,11 +1,49 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-if ! command -v pod >/dev/null 2>&1; then
-  echo "CocoaPods is required but 'pod' is not installed." >&2
+resolve_pod() {
+  if command -v pod >/dev/null 2>&1; then
+    return 0
+  fi
+
+  if command -v ruby >/dev/null 2>&1 && command -v gem >/dev/null 2>&1; then
+    local ruby_user_dir
+    ruby_user_dir="$(ruby -rrubygems -e 'print Gem.user_dir' 2>/dev/null || true)"
+    if [ -n "${ruby_user_dir}" ] && [ -x "${ruby_user_dir}/bin/pod" ]; then
+      export PATH="${ruby_user_dir}/bin:${PATH}"
+      return 0
+    fi
+  fi
+
+  for candidate in /opt/homebrew/bin/pod /usr/local/bin/pod; do
+    if [ -x "${candidate}" ]; then
+      export PATH="$(dirname "${candidate}"):${PATH}"
+      return 0
+    fi
+  done
+
+  return 1
+}
+
+if ! resolve_pod || ! command -v pod >/dev/null 2>&1; then
+  cat >&2 <<'EOF'
+CocoaPods is required but 'pod' is not installed.
+
+Install it with one of the local developer paths:
+  brew install cocoapods
+  gem install --user-install cocoapods
+
+After a user-local gem install, make sure Ruby's user gem bin directory is on PATH.
+This iOS local build path supports Xcode/developer sideloading; it does not
+require or assume enterprise distribution.
+EOF
   exit 127
 fi
 
+if [[ "${RUBYOPT:-}" != *"-rlogger"* ]]; then
+  export RUBYOPT="-rlogger${RUBYOPT:+ ${RUBYOPT}}"
+fi
+
 PODS_REPOS_DIR="${HOME}/.cocoapods/repos"
 TRUNK_REPO_DIR="${PODS_REPOS_DIR}/trunk"
 TRUNK_REPO_URL="https://cdn.cocoapods.org/"
@@ -18,7 +56,7 @@ if [ -d "${TRUNK_REPO_DIR}/.git" ] || [ -f "${TRUNK_REPO_DIR}/CocoaPods-version.
 fi
 
 if [ -e "${TRUNK_REPO_DIR}" ]; then
-  echo "Removing incomplete CocoaPods trunk repo at ${TRUNK_REPO_DIR}"
+  echo "Removing partial CocoaPods trunk repo at ${TRUNK_REPO_DIR}"
   rm -rf "${TRUNK_REPO_DIR}"
 fi
 

package/scripts/release-check.ts

@@ -4,6 +4,7 @@ import { execSync } from "node:child_process";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { assertReviewedAppleStoreEntitlements } from "./lib/apple-entitlement-audit.mjs";
 import {
   findLocalPackHotspots,
   shouldSkipExactPackDryRun,
@@ -17,9 +18,9 @@ const requiredPaths = [
   "dist/index.js",
   "dist/entry.js",
   "dist/build-info.json",
-  "eliza/packages/app-core/scripts",
-  "scripts/setup-upstreams.mjs",
-  "scripts/init-submodules.mjs",
+  "packages/app-core/scripts",
+  "packages/app-core/scripts/setup-upstreams.mjs",
+  "packages/app-core/scripts/init-submodules.mjs",
 ];
 const forbiddenPrefixes = ["dist/Eliza.app/"];
 const orchestratorBrokenLifecycleTarget = "./scripts/ensure-node-pty.mjs";
@@ -38,17 +39,40 @@ const orchestratorPluginPackageJsonPathCandidates = [
     "package.json",
   ),
 ] as const;
-const autonomousServerPathCandidates = [
-  "node_modules/@elizaos/agent/src/api/server.js",
-  "eliza/packages/agent/src/api/server.ts",
-] as const;
 const autonomousElizaPathCandidates = [
   "node_modules/@elizaos/agent/src/runtime/eliza.js",
+  "packages/agent/src/runtime/eliza.ts",
   "eliza/packages/agent/src/runtime/eliza.ts",
 ] as const;
 const homepageReleaseDataPathCandidates = [
+  "packages/homepage/src/generated/release-data.ts",
   "apps/homepage/src/generated/release-data.ts",
 ] as const;
+const cdnValidationScriptPathCandidates = [
+  "packages/app-core/scripts/validate-cdn-assets.mjs",
+  "scripts/validate-cdn-assets.mjs",
+  "eliza/packages/app-core/scripts/validate-cdn-assets.mjs",
+] as const;
+const patchedElectrobunCliHelperPathCandidates = [
+  "packages/app-core/scripts/build-patched-electrobun-cli.mjs",
+  "eliza/packages/app-core/scripts/build-patched-electrobun-cli.mjs",
+] as const;
+const cloudAgentTemplatePackageJsonPathCandidates = [
+  "packages/app-core/deploy/cloud-agent-template/package.json",
+  "eliza/packages/app-core/deploy/cloud-agent-template/package.json",
+] as const;
+const agentPackageJsonPathCandidates = [
+  "packages/agent/package.json",
+  "eliza/packages/agent/package.json",
+] as const;
+const innoBuildScriptPathCandidates = [
+  "packages/app-core/packaging/inno/build-inno.ps1",
+  "eliza/packages/app-core/packaging/inno/build-inno.ps1",
+] as const;
+const innoTemplatePathCandidates = [
+  "packages/app-core/packaging/inno/ElizaOSApp.iss",
+  "eliza/packages/app-core/packaging/inno/ElizaOSApp.iss",
+] as const;
 
 function resolveExistingPath(candidates: readonly string[]) {
   return candidates.find((candidate) => existsSync(candidate)) ?? null;
@@ -58,7 +82,7 @@ function resolveOrchestratorPluginPackageJsonPath() {
   return resolveExistingPath(orchestratorPluginPackageJsonPathCandidates);
 }
 const requiredWorkflowSnippets = [
-  'BUN_VERSION: "1.3.13"',
+  'BUN_VERSION: "canary"',
   "workflow_call:",
   "name: Validate Release Inputs",
   "Manual branch dispatches must provide inputs.tag; refusing to derive a release tag from package.json.",
@@ -74,12 +98,11 @@ const requiredWorkflowSnippets = [
   // biome-ignore lint/suspicious/noTemplateCurlyInString: GitHub Actions expression
   "ELIZA_RELEASE_TAG: ${{ needs.prepare.outputs.tag }}",
   'ELIZA_VALIDATE_CDN: "1"',
-  "run: bun run release:check",
+  "bun run release:check",
   "build-browser-companions:",
   "name: Build Agent Browser Bridge companions",
-  "if bun run browser-bridge:package:release; then",
+  "bun run browser-bridge:package:release",
   'echo "packaged=true" >> "$GITHUB_OUTPUT"',
-  "Agent Browser Bridge packaging failed; desktop release will continue without browser companion bundles.",
   "name: Upload Agent Browser Bridge release artifacts",
   "name: browser-bridge-store-bundles",
   "publish-browser-companions:",
@@ -91,11 +114,7 @@ const requiredWorkflowSnippets = [
   "for attempt in 1 2 3; do",
   `bun install failed on attempt \${attempt}; retrying in 15 seconds`,
   "name: Ensure avatar assets",
-  "node eliza/packages/app-core/scripts/ensure-avatars.mjs",
-  "name: Prepare Whisper model artifact",
-  "bash eliza/packages/app-core/platforms/electrobun/scripts/ensure-whisper-model.sh base.en",
-  "name: Upload Whisper model artifact",
-  "name: whisper-model-base-en",
+  "node packages/app-core/scripts/ensure-avatars.mjs",
   "Install quiet macOS packaging wrappers",
   "packages/app-core/platforms/electrobun/scripts/hdiutil-wrapper.sh",
   "packages/app-core/platforms/electrobun/scripts/xcrun-wrapper.sh",
@@ -103,10 +122,8 @@ const requiredWorkflowSnippets = [
   "ELECTROBUN_REAL_HDIUTIL: /usr/bin/hdiutil",
   "ELECTROBUN_REAL_XCRUN: /usr/bin/xcrun",
   "ELECTROBUN_REAL_ZIP: /usr/bin/zip",
-  "name: Download Whisper model artifact",
-  "name: Seed Whisper model cache",
   "Stage desktop bundle inputs",
-  "node eliza/packages/app-core/scripts/desktop-build.mjs stage --variant=base --build-whisper",
+  "node packages/app-core/scripts/desktop-build.mjs stage --variant=base",
   "Inject version.json into bundle (Windows)",
   "Inject version.json into bundle (macOS / Linux)",
   '"identifier":"ai.elizaos.Eliza"',
@@ -130,24 +147,24 @@ const requiredWorkflowSnippets = [
   "packaging/inno/build-inno.ps1",
   '-BuildDir "C:\\e"',
   "Verify Windows public installer looks complete",
-  'Get-ChildItem -Path "eliza/packages/app-core/platforms/electrobun/artifacts" -File -Filter "ElizaOSApp-Setup-*.exe"',
+  'Get-ChildItem -Path "packages/app-core/platforms/electrobun/artifacts" -File -Filter "*-Setup-*.exe"',
   "$minimumBytes = 50MB",
   "packages/app-core/platforms/electrobun/artifacts/*.exe",
   "name: Prepare public canary Windows installer artifact",
   "needs.prepare.outputs.env == 'canary'",
   '$publicCanaryDir = Join-Path $artifactsDir "public-canary-installer"',
-  '$canonicalInstallers = Get-ChildItem -Path $artifactsDir -File -Filter "ElizaOSApp-Setup-*.exe"',
+  '$canonicalInstallers = Get-ChildItem -Path $artifactsDir -File -Filter "*-Setup-*.exe"',
   "Copy-Item $canonicalInstaller.FullName -Destination $publicCanaryDir -Force",
-  '$canonicalInstallerZips = Get-ChildItem -Path $artifactsDir -File -Filter "ElizaOSApp-Setup-*.exe.zip"',
+  '$canonicalInstallerZips = Get-ChildItem -Path $artifactsDir -File -Filter "*-Setup-*.exe.zip"',
   "No canonical Windows installer (or zip fallback) found for canary artifact publishing.",
   "Expand-Archive -Path $canonicalInstallerZip.FullName -DestinationPath $publicCanaryDir -Force",
   "Prepared public canary installer artifact:",
   "name: Upload public canary installer artifact",
   "name: electrobun-$" + "{{ matrix.platform.artifact-name }}-public-installer",
-  "path: eliza/packages/app-core/platforms/electrobun/artifacts/public-canary-installer/ElizaOSApp-Setup-*.exe",
+  "path: packages/app-core/platforms/electrobun/artifacts/public-canary-installer/*-Setup-*.exe",
   "name: Collect public release files",
-  '-name "ElizaOSApp-Setup-*.exe" -o \\',
-  '-name "ElizaOSApp-Setup-*.exe.zip" -o \\',
+  '-name "*-Setup-*.exe" -o \\',
+  '-name "*-Setup-*.exe.zip" -o \\',
   '-name "*Setup*.tar.gz" -o \\',
   "name: Collect update channel files",
   "pattern: browser-bridge-*",
@@ -156,7 +173,7 @@ const requiredWorkflowSnippets = [
   "DMG attach attempt $attempt/5 failed",
   "name: Resolve electrobun package dir",
   "id: resolve-electrobun",
-  'const workspacePackageJson = path.resolve("eliza/packages/app-core/platforms/electrobun/package.json");',
+  'const workspacePackageJson = path.resolve("packages/app-core/platforms/electrobun/package.json");',
   'const entryPath = req.resolve("electrobun");',
   "Could not find electrobun package.json starting from",
   "Resolved unexpected package at",
@@ -164,10 +181,10 @@ const requiredWorkflowSnippets = [
   'echo "cache-dir=$package_dir/.cache"',
   "$" + "{{ steps.resolve-electrobun.outputs.cache-dir }}",
   "name: Build patched Electrobun CLI",
-  'node eliza/packages/app-core/scripts/build-patched-electrobun-cli.mjs "$' +
+  'node packages/app-core/scripts/build-patched-electrobun-cli.mjs "$' +
     '{{ steps.resolve-electrobun.outputs.package-dir }}"',
   '"${{ matrix.platform.artifact-name }}"',
-  "node eliza/packages/app-core/scripts/desktop-build.mjs package --env=$" +
+  "node packages/app-core/scripts/desktop-build.mjs package --env=$" +
     "{{ needs.prepare.outputs.env }}",
   "ELIZA_ELECTROBUN_NOTARIZE: 0",
   'ELIZA_DISABLE_LOCAL_EMBEDDINGS: "1"',
@@ -177,7 +194,7 @@ const requiredWorkflowSnippets = [
   "verify-windows-installer-proof.ps1",
   "ELIZA_TEST_WINDOWS_PROOF_INSTALL_DIR: $" + "{{ runner.temp }}\\el-proof",
   "name: Upload Windows installer proof artifact",
-  "path: eliza/packages/app-core/platforms/electrobun/artifacts/windows-installer-proof/**",
+  "path: packages/app-core/platforms/electrobun/artifacts/windows-installer-proof/**",
   "if: always() && matrix.platform.os == 'windows'",
   "ANTHROPIC_API_KEY: $" + "{{ secrets.ANTHROPIC_API_KEY }}",
   "ELIZAOS_CLOUD_API_KEY: $" +
@@ -188,7 +205,7 @@ const requiredWorkflowSnippets = [
   "bun run test:desktop:playwright",
 ];
 const _requiredPatchedElectrobunCliSnippets = [
-  "https://github.com/blackboardsh/electrobun.git",
+  "https://github.com/elizaOS/electrobun.git",
   '"sparse-checkout", "set", "package"',
   'writeGitHubEnv("ELECTROBUN_RCEDIT_PACKAGE_JSON", resolvedRceditPackageJson);',
   'const overridePackageJson = process.env["ELECTROBUN_RCEDIT_PACKAGE_JSON"];',
@@ -245,10 +262,10 @@ const requiredElectrobunPrWorkflowSnippets = [
   "workflow_dispatch:",
   "permissions:",
   "contents: read",
-  'BUN_VERSION: "1.3.13"',
+  'BUN_VERSION: "canary"',
   "name: Release Workflow Contract",
   "bun install --ignore-scripts",
-  "bun run postinstall",
+  'run-postinstall: "true"',
   "bun run test:regression-matrix:release-contract",
   "bun run test:release:contract",
 ];
@@ -259,13 +276,26 @@ const forbiddenElectrobunPrWorkflowSnippets = [
   "draft: false",
   "secrets: inherit",
   "packages: write",
+  "not yet ported from eliza; skipping",
+  "test:regression-matrix:release-contract --help",
+  "test:release:contract --help",
 ];
+const requiredRootPackageScriptSnippets: Record<string, readonly string[]> = {
+  "release:check": ["scripts/run-release-check.mjs"],
+  "test:release:contract": ["scripts/run-release-contract-suite.mjs"],
+  "test:regression-matrix:release": [
+    "scripts/run-eliza-app-core-script.mjs validate-regression-matrix.mjs --workflow release",
+  ],
+  "test:regression-matrix:release-contract": [
+    "scripts/run-eliza-app-core-script.mjs validate-regression-matrix.mjs --workflow release-contract",
+  ],
+};
 const requiredElectrobunConfigSnippets = [
   'postBuild: "scripts/postwrap-sign-runtime-macos.ts"',
   'postWrap: "scripts/postwrap-diagnostics.ts"',
   "process.env.ELIZA_ELECTROBUN_NOTARIZE !==",
-  "[repoPluginsJsonPath]: `${runtimeDistDir}/plugins.json`",
-  "[repoPackageJsonPath]: `${runtimeDistDir}/package.json`",
+  "copy[repoPluginsJsonPath] = `${runtimeDistDir}/plugins.json`",
+  "copy[repoPackageJsonPath] = `${runtimeDistDir}/package.json`",
 ];
 const electrobunDirCandidates = [
   resolve("packages", "app-core", "platforms", "electrobun"),
@@ -765,9 +795,9 @@ function assertOrchestratorVersionPinned() {
     }
     return;
   }
-  if (!isExactVersion(version)) {
+  if (!isExactVersion(version) && !["beta", "beta"].includes(version)) {
     console.error(
-      `release-check: @elizaos/plugin-agent-orchestrator must either use workspace:* for the local checkout or be pinned to an exact version, but found "${version}".`,
+      `release-check: @elizaos/plugin-agent-orchestrator must either use workspace:* for the local checkout, use a release dist tag, or be pinned to an exact version, but found "${version}".`,
     );
     process.exit(1);
   }
@@ -775,9 +805,9 @@ function assertOrchestratorVersionPinned() {
 
 function assertCloudAgentTemplateDependenciesUseWorkspace() {
   const cloudAgentPackage = JSON.parse(
-    readFileSync(
-      "eliza/packages/app-core/deploy/cloud-agent-template/package.json",
-      "utf8",
+    readExistingReleaseCheckFile(
+      "cloud agent template package.json",
+      cloudAgentTemplatePackageJsonPathCandidates,
     ),
   ) as RootPackageJson;
   const nonWorkspace = findNonWorkspaceDependencySpecs(
@@ -787,7 +817,7 @@ function assertCloudAgentTemplateDependenciesUseWorkspace() {
 
   if (nonWorkspace.length > 0) {
     console.error(
-      "release-check: eliza/packages/app-core/deploy/cloud-agent-template/package.json must use workspace:* for repo-local elizaOS dependencies. Materialize exact npm versions only at the deploy/publish boundary.",
+      "release-check: packages/app-core/deploy/cloud-agent-template/package.json must use workspace:* for repo-local elizaOS dependencies. Materialize exact npm versions only at the deploy/publish boundary.",
     );
     for (const dependency of nonWorkspace) {
       console.error(`  - ${dependency.name}: ${dependency.specifier}`);
@@ -801,7 +831,10 @@ function assertAgentDependenciesAlignedWithRootPins() {
     readFileSync("package.json", "utf8"),
   ) as RootPackageJson;
   const agentPackage = JSON.parse(
-    readFileSync("eliza/packages/agent/package.json", "utf8"),
+    readExistingReleaseCheckFile(
+      "agent package.json",
+      agentPackageJsonPathCandidates,
+    ),
   ) as RootPackageJson;
   const mismatches = findMismatchedSharedAgentDependencySpecs(
     rootPackage,
@@ -833,7 +866,7 @@ function assertReleaseWorkflowHasNotaryWrapper() {
 
   if (missing.length > 0) {
     console.error(
-      "release-check: release workflow is missing notary wrapper wiring:",
+      "release-check: release workflow is missing required release wiring:",
     );
     for (const snippet of missing) {
       console.error(`  - ${snippet}`);
@@ -841,9 +874,9 @@ function assertReleaseWorkflowHasNotaryWrapper() {
     process.exit(1);
   }
 
-  const patchedCliHelper = readFileSync(
-    "eliza/packages/app-core/scripts/build-patched-electrobun-cli.mjs",
-    "utf8",
+  const patchedCliHelper = readExistingReleaseCheckFile(
+    "patched Electrobun CLI helper",
+    patchedElectrobunCliHelperPathCandidates,
   );
   const missingPatchedCli =
     findMissingPatchedElectrobunCliSnippets(patchedCliHelper);
@@ -907,6 +940,60 @@ function assertElectrobunPrWorkflowExists() {
   }
 }
 
+function assertRequiredRootPackageScripts() {
+  const packageJson = JSON.parse(readFileSync("package.json", "utf8"));
+  const scripts = packageJson.scripts ?? {};
+  const missing: string[] = [];
+
+  for (const [scriptName, requiredSnippets] of Object.entries(
+    requiredRootPackageScriptSnippets,
+  )) {
+    const scriptBody = scripts[scriptName];
+    if (typeof scriptBody !== "string") {
+      missing.push(`${scriptName} (missing script)`);
+      continue;
+    }
+    for (const snippet of requiredSnippets) {
+      if (!scriptBody.includes(snippet)) {
+        missing.push(`${scriptName}: ${snippet}`);
+      }
+    }
+  }
+
+  if (missing.length > 0) {
+    console.error(
+      "release-check: package.json is missing required release/audit script wiring:",
+    );
+    for (const entry of missing) {
+      console.error(`  - ${entry}`);
+    }
+    process.exit(1);
+  }
+}
+
+function assertAppleStoreSandboxAuditPasses() {
+  const auditScriptPath = resolveExistingPath([
+    "packages/app-core/scripts/audit-apple-store-sandbox.mjs",
+    "eliza/packages/app-core/scripts/audit-apple-store-sandbox.mjs",
+  ]);
+  if (!auditScriptPath) {
+    console.error(
+      "release-check: Apple store sandbox audit script is missing.",
+    );
+    process.exit(1);
+  }
+
+  try {
+    execSync(`node ${JSON.stringify(auditScriptPath)}`, {
+      stdio: "inherit",
+      env: process.env,
+    });
+  } catch {
+    console.error("release-check: Apple store sandbox audit failed.");
+    process.exit(1);
+  }
+}
+
 function assertElectrobunConfigHasPostWrapSigner() {
   const config = readElectrobunFile("electrobun.config.ts");
   const missing = requiredElectrobunConfigSnippets.filter(
@@ -1079,7 +1166,7 @@ function assertWindowsInstallerProofScript() {
   );
 
   const requiredSnippets = [
-    "Eliza-Setup-*.exe",
+    '"*-Setup-*.exe"',
     "smoke-test-windows.ps1",
     "ELIZA_WINDOWS_SMOKE_REQUIRE_INSTALLER",
     "Start Menu",
@@ -1102,9 +1189,9 @@ function assertWindowsInstallerProofScript() {
 }
 
 function assertInnoBuildScriptHasTimeoutAndHeartbeat() {
-  const script = readFileSync(
-    "eliza/packages/app-core/packaging/inno/build-inno.ps1",
-    "utf8",
+  const script = readExistingReleaseCheckFile(
+    "Inno Setup build script",
+    innoBuildScriptPathCandidates,
   );
   const requiredSnippets = [
     "$isccTimeout = [TimeSpan]::FromMinutes(25)",
@@ -1131,9 +1218,9 @@ function assertInnoBuildScriptHasTimeoutAndHeartbeat() {
 }
 
 function assertInnoTemplateTargetsBundledLauncher() {
-  const template = readFileSync(
-    "eliza/packages/app-core/packaging/inno/ElizaOSApp.iss",
-    "utf8",
+  const template = readExistingReleaseCheckFile(
+    "Inno Setup template",
+    innoTemplatePathCandidates,
   );
   const requiredSnippets = [
     '#define MyAppExeName "bin\\launcher.exe"',
@@ -1227,32 +1314,6 @@ function assertMacSmokeScriptLaunchesPackagedLauncherDirectly() {
   }
 }
 
-function assertServerDynamicHyperscapeImport() {
-  const serverSource = readExistingReleaseCheckFile(
-    "autonomous API server source",
-    autonomousServerPathCandidates,
-  );
-
-  // @hyperscape/plugin-hyperscape must never be a static top-level import. The
-  // API server has to remain bootable when the optional app package is not
-  // installed (for example in Windows smoke and release validation runs).
-  const lines = serverSource.split("\n");
-  const staticImports = lines.filter(
-    (line) =>
-      /^\s*import\s/.test(line) &&
-      line.includes("@hyperscape/plugin-hyperscape"),
-  );
-  if (staticImports.length > 0) {
-    console.error(
-      "release-check: server.ts must NOT have a static import of @hyperscape/plugin-hyperscape/routes. Use a dynamic import inside a try-catch.",
-    );
-    for (const line of staticImports) {
-      console.error(`  - ${line.trim()}`);
-    }
-    process.exit(1);
-  }
-}
-
 function assertStartApiServerCatchBlockSafety() {
   const elizaSource = readExistingReleaseCheckFile(
     "autonomous runtime source",
@@ -1281,7 +1342,10 @@ function assertStartApiServerCatchBlockSafety() {
     elizaSource.indexOf("// ── Server-only mode", catchIndex),
   );
   if (
-    !catchBlock.includes("opts?.serverOnly") ||
+    !(
+      catchBlock.includes("opts?.serverOnly") ||
+      catchBlock.includes("options?.serverOnly")
+    ) ||
     !catchBlock.includes("process.exit(1)")
   ) {
     console.error(
@@ -1296,7 +1360,17 @@ function maybeValidateCdnAssets() {
     return;
   }
 
-  execSync("node scripts/validate-cdn-assets.mjs", {
+  const cdnValidationScriptPath = resolveExistingPath(
+    cdnValidationScriptPathCandidates,
+  );
+  if (!cdnValidationScriptPath) {
+    console.error(
+      `release-check: CDN validation script is missing. Checked: ${cdnValidationScriptPathCandidates.join(", ")}`,
+    );
+    process.exit(1);
+  }
+
+  execSync(`node ${JSON.stringify(cdnValidationScriptPath)}`, {
     stdio: "inherit",
     env: process.env,
   });
@@ -1309,7 +1383,7 @@ function assertStaticAssetManifestIsCurrent() {
   }
 
   console.error(
-    `release-check: static asset manifest is ${result.reason}. Run node scripts/generate-static-asset-manifest.mjs.`,
+    `release-check: static asset manifest is ${result.reason}. Run node packages/app-core/scripts/generate-static-asset-manifest.mjs.`,
   );
   console.error(`  - ${result.manifestPath}`);
   process.exit(1);
@@ -1328,9 +1402,16 @@ function assertHomepageReleaseDataUsesCurrentAssetRoot() {
     process.exit(1);
   }
 
-  if (!releaseDataSource.includes("/apps/homepage/public/")) {
+  const hasNoPublishedRelease =
+    releaseDataSource.includes('"homepageAssetBaseUrl": ""') ||
+    releaseDataSource.includes("homepageAssetBaseUrl: ''") ||
+    releaseDataSource.includes('homepageAssetBaseUrl: ""');
+  if (
+    !hasNoPublishedRelease &&
+    !releaseDataSource.includes("/packages/homepage/public/")
+  ) {
     console.error(
-      "release-check: generated homepage release data must point homepageAssetBaseUrl at /apps/homepage/public/.",
+      "release-check: generated homepage release data must point homepageAssetBaseUrl at /packages/homepage/public/.",
     );
     process.exit(1);
   }
@@ -1343,7 +1424,23 @@ function assertHomepageReleaseDataUsesCurrentAssetRoot() {
   }
 }
 
+function assertAppleStoreEntitlementsReviewed() {
+  try {
+    assertReviewedAppleStoreEntitlements();
+  } catch (error) {
+    console.error(
+      `release-check: Apple store entitlement audit failed:\n${
+        error instanceof Error ? error.message : String(error)
+      }`,
+    );
+    process.exit(1);
+  }
+}
+
 function main() {
+  assertRequiredRootPackageScripts();
+  assertAppleStoreSandboxAuditPasses();
+  assertAppleStoreEntitlementsReviewed();
   assertReleaseWorkflowHasNotaryWrapper();
   assertElectrobunPrWorkflowExists();
   assertElectrobunConfigHasPostWrapSigner();
@@ -1353,7 +1450,6 @@ function main() {
   assertInnoBuildScriptHasTimeoutAndHeartbeat();
   assertInnoTemplateTargetsBundledLauncher();
   assertMacSmokeScriptLaunchesPackagedLauncherDirectly();
-  assertServerDynamicHyperscapeImport();
   assertStartApiServerCatchBlockSafety();
   assertStaticAssetManifestIsCurrent();
   assertHomepageReleaseDataUsesCurrentAssetRoot();

package/scripts/release-workflow-drift.test.ts

@@ -0,0 +1,57 @@
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+
+const scriptDir = path.dirname(fileURLToPath(import.meta.url));
+const repoRoot = path.resolve(scriptDir, "..", "..", "..");
+
+function readRepoFile(relativePath: string) {
+  return fs.readFileSync(path.join(repoRoot, relativePath), "utf8");
+}
+
+describe("release workflow drift", () => {
+  it("keeps release readiness wired to generated metadata and release:check", () => {
+    const workflow = readRepoFile(".github/workflows/release-electrobun.yml");
+
+    expect(workflow).toContain("name: Release readiness checks");
+    expect(workflow).toContain(
+      "ELIZA_RELEASE_TAG: $" + "{{ needs.prepare.outputs.tag }}",
+    );
+    expect(workflow).toContain('ELIZA_VALIDATE_CDN: "1"');
+    expect(workflow).toContain(
+      "node packages/app-core/scripts/write-homepage-release-data.mjs",
+    );
+    expect(workflow).toContain(
+      "node packages/app-core/scripts/generate-static-asset-manifest.mjs",
+    );
+    expect(workflow).toContain("bun run release:check");
+  });
+
+  it("keeps release contract validation on Electrobun pull requests", () => {
+    const workflow = readRepoFile(
+      ".github/workflows/test-electrobun-release.yml",
+    );
+
+    expect(workflow).toContain("bun run test:release:contract");
+    expect(workflow).not.toContain(
+      "uses: ./.github/workflows/release-electrobun.yml",
+    );
+  });
+
+  it("keeps release-only mobile builders manually dispatched", () => {
+    const androidWorkflow = readRepoFile(".github/workflows/build-android.yml");
+    const iosWorkflow = readRepoFile(".github/workflows/build-ios.yml");
+
+    expect(androidWorkflow).toContain("workflow_dispatch:");
+    expect(iosWorkflow).toContain("workflow_dispatch:");
+    expect(androidWorkflow).not.toContain("types: [created]");
+    expect(iosWorkflow).not.toContain("types: [created]");
+  });
+
+  it("keeps Android Play release using the cloud Android build", () => {
+    const workflow = readRepoFile(".github/workflows/android-release.yml");
+
+    expect(workflow).toContain("bun run build:android:cloud");
+  });
+});

package/scripts/relink-workspace-packages-to-dist.mjs

@@ -25,10 +25,27 @@ if (packageNames.length === 0) {
 }
 
 const rootPkg = JSON.parse(readFileSync(join(root, "package.json"), "utf8"));
-const { workspaceDirs, nameToDir } = collectWorkspaceMaps(
-  root,
-  rootPkg.workspaces ?? [],
-);
+const rootWorkspaceMaps = collectWorkspaceMaps(root, rootPkg.workspaces ?? []);
+const workspaceDirs = [...rootWorkspaceMaps.workspaceDirs];
+const nameToDir = new Map(rootWorkspaceMaps.nameToDir);
+
+const nestedElizaPackageJson = join(root, "eliza", "package.json");
+if (existsSync(nestedElizaPackageJson)) {
+  const elizaRoot = join(root, "eliza");
+  const elizaPkg = JSON.parse(readFileSync(nestedElizaPackageJson, "utf8"));
+  const elizaWorkspaceMaps = collectWorkspaceMaps(
+    elizaRoot,
+    elizaPkg.workspaces ?? [],
+  );
+  for (const dir of elizaWorkspaceMaps.workspaceDirs) {
+    workspaceDirs.push(dir);
+  }
+  for (const [name, dir] of elizaWorkspaceMaps.nameToDir) {
+    if (!nameToDir.has(name)) {
+      nameToDir.set(name, dir);
+    }
+  }
+}
 const candidateBases = [root, ...workspaceDirs];
 
 function getNodeModulesEntry(baseDir, packageName) {