Merge remote-tracking branch 'origin/develop' into develop

# Conflicts:
#	packages/chip/scripts/check_e1_phone_board_package.py
#	packages/chip/scripts/check_e1_phone_boolean_interference.py
#	packages/chip/scripts/generate_e1_phone_cad.py
#	packages/chip/scripts/generate_e1_phone_routed_mainboard_demo.py
#	packages/chip/scripts/generate_e1_phone_spec_sheet.py

Author: lalalune

.github/workflows/gitleaks.yml

@@ -25,14 +25,38 @@ jobs:
           # Full history so gitleaks can scan the diff range on PRs.
           fetch-depth: 0
 
+      - name: Install gitleaks (OSS binary — no license required)
+        # gitleaks/gitleaks-action@v2 requires a paid license for org repos.
+        # We download the OSS CLI directly so the scan remains free and
+        # honors our .gitleaks.toml allowlist + custom rules.
+        run: |
+          set -euo pipefail
+          GITLEAKS_VERSION=8.21.2
+          curl -sSL -o /tmp/gitleaks.tar.gz \
+            "https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz"
+          tar -xzf /tmp/gitleaks.tar.gz -C /tmp gitleaks
+          sudo install -m 0755 /tmp/gitleaks /usr/local/bin/gitleaks
+          gitleaks version
+
       - name: Run gitleaks
-        # gitleaks/gitleaks-action@v2
-        uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7
-        env:
-          # No license — uses default OSS scanning. Set GITLEAKS_LICENSE if/when
-          # an org license is provisioned for richer scans.
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GITLEAKS_CONFIG: .gitleaks.toml
-          GITLEAKS_ENABLE_COMMENTS: "false"
-          GITLEAKS_ENABLE_UPLOAD_ARTIFACT: "true"
-          GITLEAKS_ENABLE_SUMMARY: "true"
+        # Scan the full working tree. Returns non-zero on any finding so the
+        # job fails the build the same way the wrapper action did.
+        run: |
+          gitleaks detect \
+            --config .gitleaks.toml \
+            --source . \
+            --verbose \
+            --redact \
+            --report-format sarif \
+            --report-path gitleaks.sarif \
+            --no-banner
+
+      - name: Upload SARIF
+        if: always()
+        # actions/upload-artifact@v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
+        with:
+          name: gitleaks-sarif
+          path: gitleaks.sarif
+          if-no-files-found: ignore
+          retention-days: 7

.github/workflows/release.yaml

@@ -55,6 +55,9 @@ jobs:
     permissions:
       contents: write   # release commits push lerna version bumps + git tags
       id-token: write   # OIDC for npm publish
+      packages: write   # publish to GitHub Packages mirror
+      issues: write     # comment on release-tracking issues
+      actions: read     # read other workflow runs for context
     # Skip if commit message contains [skip ci]. Alpha releases are disabled;
     # prerelease GitHub-release events are skipped so tag pushes are the single
     # npm publication path for beta versions.
@@ -65,12 +68,6 @@ jobs:
         !(github.ref_type == 'tag' && contains(github.ref_name || '', '-alpha'))
       }}
 
-    permissions:
-      contents: write
-      packages: write
-      issues: write
-      actions: read
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v4

AGENTS.md

@@ -4,6 +4,31 @@ This is the contributor charter for the elizaOS repository. The
 companion `CLAUDE.md` covers tooling and review conventions; this file
 covers what the codebase enforces.
 
+## Cloud frontend visual review (REQUIRED for any UI change in `packages/cloud-frontend/`)
+
+Any change in `packages/cloud-frontend/` MUST go through the screenshot +
+manual-review loop before being declared done. Run:
+
+```bash
+bun run --cwd packages/cloud-frontend audit:cloud
+```
+
+This walks every route in `src/App.tsx` (53 routes × desktop + mobile × rest +
+hover), logs in with the synthetic injected-ethereum JWT, captures the populated
+UI, and auto-stubs `aesthetic-audit-output/manual-review/<slug>.md` for any new
+route. You then fill in the verdict for every page you touched (and every page
+your change can reach via shared layout/theme/components).
+
+- Verdicts: `good` · `needs-work` · `needs-eyeball` · `broken`.
+- No page can stay at `needs-work` or `broken` when a UI task is declared done.
+- Iterate the loop at least 5 times for any meaningful redesign — screenshot,
+  evaluate, fix, re-audit, repeat.
+- Hover transitions to black-from-orange, or any blue at all, are banned.
+- Full protocol + checklist template: `packages/cloud-frontend/AGENTS.md`.
+- E2E coverage gap list per page: `packages/cloud-frontend/docs/E2E_COVERAGE_GAPS.md`.
+- Hover/color rules: `packages/cloud-frontend/docs/HOVER_SYSTEM.md`.
+- Dashboard IA: `packages/cloud-frontend/docs/DASHBOARD_REDESIGN.md`.
+
 ## LifeOps app + plugin-health
 
 LifeOps (`@elizaos/plugin-lifeops`) and the health plugin

packages/chip/Makefile

@@ -4,6 +4,25 @@ PYTHON ?= python3
 AI_EDA_RUN_ID ?= validation
 AI_EDA_SETUP_RUN_ID ?= $(AI_EDA_RUN_ID)
 AI_EDA_TRAINING_HANDOFF_RUN_ID ?= $(AI_EDA_RUN_ID)-training-handoff
+AI_EDA_TRAINING_CORPUS_RUN_ID ?= $(AI_EDA_RUN_ID)
+AI_EDA_READINESS_RUN_ID ?= $(AI_EDA_RUN_ID)
+AI_EDA_EVIDENCE_BUNDLE_RUN_ID ?= $(AI_EDA_READINESS_RUN_ID)
+AI_EDA_RESEARCH_RUN_ID ?= $(AI_EDA_READINESS_RUN_ID)
+AI_EDA_REPLAY_PREREQUISITES_RUN_ID ?= $(AI_EDA_TRAINING_HANDOFF_RUN_ID)
+AI_EDA_REPLAY_PREFLIGHT_RUN_ID ?= $(AI_EDA_READINESS_RUN_ID)
+AI_EDA_REPLAY_EXECUTION_RUN_ID ?= $(AI_EDA_REPLAY_PREFLIGHT_RUN_ID)
+AI_EDA_REPLAY_COMPARISON_RUN_ID ?= $(AI_EDA_REPLAY_EXECUTION_RUN_ID)
+AI_EDA_ALPHACHIP_RUN_ID ?= $(AI_EDA_READINESS_RUN_ID)
+AI_EDA_ALPHACHIP_SUCCESSOR_RUN_ID ?= $(AI_EDA_READINESS_RUN_ID)
+AI_EDA_FULL_TRAINING_MATRIX_RUN_ID ?= $(AI_EDA_READINESS_RUN_ID)
+AI_EDA_BASELINE_REPLAY_EXECUTION ?= build/ai_eda/openlane_replay_execution/$(AI_EDA_RUN_ID)-baseline/openlane_replay_execution.json
+AI_EDA_CANDIDATE_REPLAY_EXECUTION ?= build/ai_eda/openlane_replay_execution/$(AI_EDA_RUN_ID)/openlane_replay_execution.json
+AI_EDA_REPLAY_CANDIDATE_ID ?= replay-candidate-placeholder
+AI_EDA_REPLAY_METRICS ?= build/ai_eda/openlane_replay_inputs/$(AI_EDA_RUN_ID)/final-metrics.json
+AI_EDA_REPLAY_OPENLANE_LOG ?= build/ai_eda/openlane_replay_inputs/$(AI_EDA_RUN_ID)/openlane.log
+AI_EDA_REPLAY_OPENROAD_LOG ?= build/ai_eda/openlane_replay_inputs/$(AI_EDA_RUN_ID)/openroad.log
+AI_EDA_REPLAY_DEF ?= build/ai_eda/openlane_replay_inputs/$(AI_EDA_RUN_ID)/final.def
+AI_EDA_REPLAY_GDS ?= build/ai_eda/openlane_replay_inputs/$(AI_EDA_RUN_ID)/final.gds
 VENV := .venv
 VENV_PYTHON := $(VENV)/bin/python
 BENCH_PYTHON := $(if $(wildcard $(VENV_PYTHON)),$(VENV_PYTHON),$(PYTHON))
@@ -1439,11 +1458,11 @@ software-bsp-test:
 evidence-regression-test: no-hardware-action-check software-bsp-test physical-gates-test product-feature-gates-check product-check-status-test benchmark-sim-metrics-test benchmark-calibration-test benchmark-parser-test benchmark-efficiency-scope-test software-bsp-scope-test cpu-ap-scope-test npu-scope-test renode-status-test cocotb cocotb-npu cocotb-contract cocotb-cpu record-tool-versions strict-release-gate-test
 	@echo "evidence regression tests complete"
 
-.PHONY: ai-eda-source-inventory-check ai-eda-external-assets-check ai-eda-external-intake-check \
+.PHONY: ai-eda-source-inventory-check ai-eda-ai-workload-manifest-check ai-eda-assertion-candidate-manifests-check ai-eda-external-method-wrapper-readiness-check ai-eda-external-assets-check ai-eda-external-intake-check \
 	ai-eda-external-assets-dry-run ai-eda-local-rag-index ai-eda-backend-preflight \
 	ai-eda-bootstrap-metadata ai-eda-bootstrap-setup-check ai-eda-bootstrap-local-smoke \
 	ai-eda-bootstrap-training-handoff ai-eda-alphachip-checkpoint-blocker-check \
-	ai-eda-alphachip-checkpoint-blocker-network-check ai-eda-internal-schemas-check \
+	ai-eda-alphachip-checkpoint-blocker-network-check ai-eda-alphachip-successor-plan ai-eda-internal-schemas-check \
 	ai-eda-internal-fixtures ai-eda-openroad-eda-corpus-convert ai-eda-tilos-macroplacement-convert \
 	ai-eda-circuitnet3-convert ai-eda-chipbench-d-convert ai-eda-aieda-idata-convert \
 	ai-eda-edalearn-convert ai-eda-macro-place-challenge-convert ai-eda-mlcad-fpga-macro-convert \
@@ -1457,17 +1476,25 @@ evidence-regression-test: no-hardware-action-check software-bsp-test physical-ga
 	ai-eda-macro-placement-candidate-eval ai-eda-macro-placement-combined-candidate-eval \
 	ai-eda-macro-placement-full-candidate-eval ai-eda-macro-placement-replay-plan \
 	ai-eda-macro-placement-replay-preflight ai-eda-macro-placement-combined-replay-plan \
-	ai-eda-macro-placement-full-replay-plan ai-eda-candidate-manifests-check \
+	ai-eda-macro-placement-full-replay-plan ai-eda-macro-placement-replay-queue ai-eda-openlane-replay-prerequisites ai-eda-candidate-manifests-check \
+	ai-eda-openlane-replay-execution ai-eda-openlane-replay-comparison \
 	ai-eda-tool-actions-check ai-eda-cocotb-stimulus-dry-run ai-eda-verification-targets \
 	ai-eda-physical-design-targets ai-eda-optimization-targets ai-eda-all-target-captures ai-eda-logic-synthesis-recipes \
 	ai-eda-logic-synthesis-baseline ai-eda-cuda-preflight ai-eda-cuda-payload \
-	ai-eda-cuda-payload-check ai-eda-cuda-run-plan-dry-run ai-eda-cuda-run-plan-safety-matrix ai-eda-cuda-readiness-audit
+	ai-eda-cuda-payload-check ai-eda-cuda-full-training-matrix ai-eda-cuda-run-plan-dry-run ai-eda-cuda-run-plan-safety-matrix ai-eda-cuda-readiness-audit \
+	ai-eda-cuda-evidence-bundle ai-eda-objective-readiness-audit
 ai-eda-source-inventory-check:
 	@AI_EDA_RUN_ID=$(AI_EDA_RUN_ID) $(PYTHON) scripts/check_ai_eda_source_inventory.py
 
 ai-eda-ai-workload-manifest-check:
 	@$(PYTHON) scripts/ai_eda/check_ai_workload_manifest.py
 
+ai-eda-assertion-candidate-manifests-check:
+	@$(PYTHON) scripts/ai_eda/check_assertion_candidate_manifests.py
+
+ai-eda-external-method-wrapper-readiness-check:
+	@$(PYTHON) scripts/ai_eda/check_external_method_wrapper_readiness.py
+
 ai-eda-external-assets-check:
 	@$(PYTHON) scripts/ai_eda/check_external_asset_manifests.py
 
@@ -1503,6 +1530,10 @@ ai-eda-alphachip-checkpoint-blocker-check:
 ai-eda-alphachip-checkpoint-blocker-network-check:
 	@$(PYTHON) scripts/ai_eda/check_alphachip_checkpoint_blocker.py --run-id $(AI_EDA_RUN_ID) --network
 
+ai-eda-alphachip-successor-plan:
+	@$(PYTHON) scripts/ai_eda/capture_alphachip_successor_plan.py --run-id $(AI_EDA_RUN_ID) --training-corpus-run-id $(AI_EDA_TRAINING_CORPUS_RUN_ID) --training-handoff-run-id $(AI_EDA_TRAINING_HANDOFF_RUN_ID)
+	@$(PYTHON) scripts/ai_eda/check_alphachip_successor_plan.py --report build/ai_eda/alphachip_successor_plan/$(AI_EDA_RUN_ID)/alphachip_successor_plan.json
+
 ai-eda-internal-schemas-check:
 	@$(PYTHON) scripts/ai_eda/check_internal_dataset_schemas.py
 
@@ -1652,6 +1683,14 @@ ai-eda-macro-placement-full-replay-plan: ai-eda-macro-placement-full-candidate-e
 	@$(PYTHON) scripts/ai_eda/check_macro_placement_replay_plan.py --report build/ai_eda/macro_placement_full_replay/$(AI_EDA_RUN_ID)/replay_plan.json
 	@$(PYTHON) scripts/ai_eda/check_tool_action_manifests.py --manifests-dir build/ai_eda/macro_placement_full_replay/$(AI_EDA_RUN_ID)/tool_actions
 
+ai-eda-macro-placement-replay-queue: ai-eda-macro-placement-full-replay-plan
+	@$(PYTHON) scripts/ai_eda/select_macro_placement_replay_queue.py --run-id $(AI_EDA_RUN_ID)
+	@$(PYTHON) scripts/ai_eda/check_macro_placement_replay_queue.py --report build/ai_eda/macro_placement_replay_queue/$(AI_EDA_RUN_ID)/replay_queue.json
+
+ai-eda-openlane-replay-prerequisites: ai-eda-macro-placement-replay-queue
+	@$(PYTHON) scripts/ai_eda/capture_openlane_replay_prerequisites.py --run-id $(AI_EDA_RUN_ID)
+	@$(PYTHON) scripts/ai_eda/check_openlane_replay_prerequisites.py --report build/ai_eda/openlane_replay_prerequisites/$(AI_EDA_RUN_ID)/openlane_replay_prerequisites.json
+
 ai-eda-candidate-manifests-check: ai-eda-fixture-placement-train
 	@$(PYTHON) scripts/ai_eda/check_candidate_manifests.py
 
@@ -1745,18 +1784,38 @@ ai-eda-cuda-payload:
 ai-eda-cuda-payload-check:
 	@$(PYTHON) scripts/ai_eda/check_cuda_training_payload.py --report build/ai_eda/cuda_training_payloads/$(AI_EDA_RUN_ID)/cuda_training_payload_report.json
 
+ai-eda-cuda-full-training-matrix:
+	@$(PYTHON) scripts/ai_eda/capture_cuda_full_training_matrix.py --run-id $(AI_EDA_RUN_ID) --payload-run-id $(AI_EDA_RUN_ID) --preflight-run-id $(AI_EDA_RUN_ID)
+	@$(PYTHON) scripts/ai_eda/check_cuda_full_training_matrix.py --report build/ai_eda/cuda_full_training_matrix/$(AI_EDA_RUN_ID)/cuda_full_training_matrix.json
+
 ai-eda-cuda-run-plan-dry-run: ai-eda-cuda-payload
 	@$(PYTHON) scripts/ai_eda/execute_cuda_run_plan.py --plan build/ai_eda/cuda_training_payloads/$(AI_EDA_RUN_ID)/cuda_training_run_plan.json --run-id $(AI_EDA_RUN_ID)
 	@$(PYTHON) scripts/ai_eda/check_cuda_run_plan_execution.py --report build/ai_eda/cuda_run_plan_execution/$(AI_EDA_RUN_ID)/cuda_run_plan_execution.json
 
 ai-eda-cuda-run-plan-safety-matrix: ai-eda-cuda-payload
 	@$(PYTHON) scripts/ai_eda/check_cuda_run_plan_safety_matrix.py --plan build/ai_eda/cuda_training_payloads/$(AI_EDA_RUN_ID)/cuda_training_run_plan.json --run-id $(AI_EDA_RUN_ID)
 
-ai-eda-cuda-readiness-audit: ai-eda-cuda-preflight ai-eda-cuda-run-plan-dry-run ai-eda-cuda-run-plan-safety-matrix ai-eda-alphachip-checkpoint-blocker-check ai-eda-optimization-targets ai-eda-macro-placement-replay-preflight
-	@$(PYTHON) scripts/ai_eda/capture_cuda_readiness_audit.py --run-id $(AI_EDA_RUN_ID) --setup-run-id $(AI_EDA_SETUP_RUN_ID) --training-handoff-run-id $(AI_EDA_TRAINING_HANDOFF_RUN_ID)
+ai-eda-cuda-readiness-audit: ai-eda-cuda-preflight ai-eda-cuda-run-plan-dry-run ai-eda-cuda-run-plan-safety-matrix ai-eda-alphachip-checkpoint-blocker-check ai-eda-alphachip-successor-plan ai-eda-optimization-targets ai-eda-openlane-replay-prerequisites ai-eda-macro-placement-replay-preflight ai-eda-openlane-replay-comparison ai-eda-cuda-full-training-matrix
+	@$(PYTHON) scripts/ai_eda/capture_cuda_readiness_audit.py --run-id $(AI_EDA_RUN_ID) --setup-run-id $(AI_EDA_SETUP_RUN_ID) --training-handoff-run-id $(AI_EDA_TRAINING_HANDOFF_RUN_ID) --full-training-matrix-run-id $(AI_EDA_FULL_TRAINING_MATRIX_RUN_ID)
 	@$(PYTHON) scripts/ai_eda/check_cuda_readiness_audit.py --report build/ai_eda/cuda_readiness_audit/$(AI_EDA_RUN_ID)/cuda_readiness_audit.json
 
-docs-check: ai-eda-local-rag-index ai-eda-backend-preflight ai-eda-all-target-captures ai-eda-source-inventory-check ai-eda-ai-workload-manifest-check ai-eda-external-assets-check ai-eda-external-intake-check ai-eda-alphachip-checkpoint-blocker-check ai-eda-internal-schemas-check ai-eda-candidate-manifests-check ai-eda-tool-actions-check ai-eda-cocotb-stimulus-dry-run
+ai-eda-cuda-evidence-bundle: ai-eda-cuda-readiness-audit
+	@$(PYTHON) scripts/ai_eda/package_cuda_evidence_bundle.py --run-id $(AI_EDA_RUN_ID)
+	@$(PYTHON) scripts/ai_eda/check_cuda_evidence_bundle.py --report build/ai_eda/cuda_evidence_bundles/$(AI_EDA_RUN_ID)/cuda_evidence_bundle.json
+
+ai-eda-objective-readiness-audit:
+	@$(PYTHON) scripts/ai_eda/capture_ai_eda_objective_readiness.py --run-id $(AI_EDA_RUN_ID) --readiness-run-id $(AI_EDA_READINESS_RUN_ID) --evidence-bundle-run-id $(AI_EDA_EVIDENCE_BUNDLE_RUN_ID) --training-handoff-run-id $(AI_EDA_TRAINING_HANDOFF_RUN_ID) --training-corpus-run-id $(AI_EDA_TRAINING_CORPUS_RUN_ID) --research-run-id $(AI_EDA_RESEARCH_RUN_ID) --replay-prerequisites-run-id $(AI_EDA_REPLAY_PREREQUISITES_RUN_ID) --replay-preflight-run-id $(AI_EDA_REPLAY_PREFLIGHT_RUN_ID) --replay-execution-run-id $(AI_EDA_REPLAY_EXECUTION_RUN_ID) --replay-comparison-run-id $(AI_EDA_REPLAY_COMPARISON_RUN_ID) --alphachip-run-id $(AI_EDA_ALPHACHIP_RUN_ID) --alphachip-successor-run-id $(AI_EDA_ALPHACHIP_SUCCESSOR_RUN_ID) --full-training-matrix-run-id $(AI_EDA_FULL_TRAINING_MATRIX_RUN_ID)
+	@$(PYTHON) scripts/ai_eda/check_ai_eda_objective_readiness.py --report build/ai_eda/objective_readiness/$(AI_EDA_RUN_ID)/objective_readiness.json
+
+ai-eda-openlane-replay-execution:
+	@$(PYTHON) scripts/ai_eda/capture_openlane_replay_execution.py --run-id $(AI_EDA_RUN_ID) --candidate-id $(AI_EDA_REPLAY_CANDIDATE_ID) --metrics $(AI_EDA_REPLAY_METRICS) --openlane-log $(AI_EDA_REPLAY_OPENLANE_LOG) --openroad-log $(AI_EDA_REPLAY_OPENROAD_LOG) --def-file $(AI_EDA_REPLAY_DEF) --gds-file $(AI_EDA_REPLAY_GDS)
+	@$(PYTHON) scripts/ai_eda/check_openlane_replay_execution.py --report build/ai_eda/openlane_replay_execution/$(AI_EDA_RUN_ID)/openlane_replay_execution.json
+
+ai-eda-openlane-replay-comparison: ai-eda-openlane-replay-execution
+	@$(PYTHON) scripts/ai_eda/capture_openlane_replay_comparison.py --run-id $(AI_EDA_RUN_ID) --baseline-execution $(AI_EDA_BASELINE_REPLAY_EXECUTION) --candidate-execution $(AI_EDA_CANDIDATE_REPLAY_EXECUTION)
+	@$(PYTHON) scripts/ai_eda/check_openlane_replay_comparison.py --report build/ai_eda/openlane_replay_comparison/$(AI_EDA_RUN_ID)/openlane_replay_comparison.json
+
+docs-check: ai-eda-local-rag-index ai-eda-backend-preflight ai-eda-all-target-captures ai-eda-source-inventory-check ai-eda-ai-workload-manifest-check ai-eda-assertion-candidate-manifests-check ai-eda-external-assets-check ai-eda-external-intake-check ai-eda-alphachip-checkpoint-blocker-check ai-eda-external-method-wrapper-readiness-check ai-eda-internal-schemas-check ai-eda-candidate-manifests-check ai-eda-tool-actions-check ai-eda-cocotb-stimulus-dry-run
 	@$(PYTHON) scripts/docs_check.py
 
 tool-versions: