fix: harden Windows repo setup

.github/workflows/test.yml

@@ -172,13 +172,7 @@ jobs:
           # Published-only CI restores the required non-eliza submodules explicitly.
           submodules: false
 
-      - name: Initialize Windows-safe workspace submodules
-        if: ${{ matrix.os == 'windows-latest' }}
-        shell: bash
-        run: git submodule update --init --depth 1 plugins/plugin-agent-orchestrator
-
       - name: Initialize tracked workspace submodules
-        if: ${{ matrix.os != 'windows-latest' }}
         run: node scripts/init-submodules.mjs
 
       - name: Setup Node.js
@@ -244,13 +238,7 @@ jobs:
           # Published-only CI restores the required non-eliza submodules explicitly.
           submodules: false
 
-      - name: Initialize Windows-safe workspace submodules
-        if: ${{ matrix.os == 'windows-latest' }}
-        shell: bash
-        run: git submodule update --init --depth 1 plugins/plugin-agent-orchestrator
-
       - name: Initialize tracked workspace submodules
-        if: ${{ matrix.os != 'windows-latest' }}
         run: node scripts/init-submodules.mjs
 
       - name: Setup Node.js
@@ -266,7 +254,8 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: ${{ env.BUN_VERSION }}
+          # pinned on Windows: Bun 1.3.11 reports false frozen-lockfile drift on root installs
+          bun-version: ${{ matrix.os == 'windows-latest' && '1.3.9' || env.BUN_VERSION }}
 
       - name: Cache Bun install
         uses: actions/cache@v4

.github/workflows/windows-desktop-preload-smoke.yml

@@ -18,14 +18,15 @@ jobs:
   preload-smoke:
     name: desktop preload preflight (windows)
     runs-on: windows-latest
+    env:
+      MILADY_SKIP_LOCAL_UPSTREAMS: "1"
     steps:
       - uses: actions/checkout@v4
         with:
           submodules: false
 
-      - name: Initialize Windows-safe workspace submodules
-        shell: bash
-        run: git submodule update --init --depth 1 plugins/plugin-agent-orchestrator
+      - name: Initialize tracked workspace submodules
+        run: node scripts/init-submodules.mjs
 
       - name: Enable long paths (Windows)
         run: git config --global core.longpaths true
@@ -38,7 +39,8 @@ jobs:
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: "1.3.11"
+          # pinned: Bun 1.3.11 reports false frozen-lockfile drift on Windows root installs
+          bun-version: "1.3.9"
 
       - name: Disable repo-local eliza workspace
         run: node scripts/disable-local-eliza-workspace.mjs

.github/workflows/windows-dev-smoke.yml

@@ -18,6 +18,8 @@ jobs:
   dev-smoke:
     name: Windows smoke (${{ matrix.bun-version }})
     runs-on: windows-latest
+    env:
+      MILADY_SKIP_LOCAL_UPSTREAMS: "1"
     strategy:
       fail-fast: false
       matrix:
@@ -26,9 +28,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Initialize Windows-safe workspace submodules
-        shell: bash
-        run: git submodule update --init --depth 1 plugins/plugin-agent-orchestrator
+      - name: Initialize tracked workspace submodules
+        run: node scripts/init-submodules.mjs
 
       - name: Setup Node.js
         uses: actions/setup-node@v4

packages/agent/src/external-modules.d.ts

@@ -1,10 +1,23 @@
 declare module "@elizaos/plugin-coding-agent";
 declare module "@elizaos/plugin-agent-orchestrator";
 declare module "@elizaos/plugin-agent-skills";
+declare module "@elizaos/plugin-anthropic";
 declare module "@elizaos/plugin-elizacloud";
+declare module "@elizaos/plugin-cron";
+declare module "@elizaos/plugin-edge-tts";
+declare module "@elizaos/plugin-edge-tts/node";
+declare module "@elizaos/plugin-experience";
+declare module "@elizaos/plugin-local-embedding";
+declare module "@elizaos/plugin-ollama";
+declare module "@elizaos/plugin-openai";
 declare module "@elizaos/plugin-pi-ai";
+declare module "@elizaos/plugin-personality";
+declare module "@elizaos/plugin-plugin-manager";
 declare module "@elizaos/plugin-commands";
 declare module "@elizaos/plugin-secrets-manager";
+declare module "@elizaos/plugin-shell";
+declare module "@elizaos/plugin-sql";
+declare module "@elizaos/plugin-trust";
 declare module "@elizaos/signal-native";
 declare module "qrcode";
 

packages/app-core/src/api/__tests__/discord-managed-oauth.test.ts

@@ -169,7 +169,10 @@ describe("managed Discord OAuth init", () => {
         new Response(
           JSON.stringify({
             success: true,
-            data: { authorizeUrl: "https://discord.com/oauth", applicationId: "app-1" },
+            data: {
+              authorizeUrl: "https://discord.com/oauth",
+              applicationId: "app-1",
+            },
           }),
           { status: 200, headers: { "Content-Type": "application/json" } },
         ),
@@ -191,7 +194,10 @@ describe("managed Discord OAuth init", () => {
       botNickname: "Chen",
     });
 
-    const [, init] = fetchMock.mock.calls[0] as [RequestInfo | URL, RequestInit];
+    const [, init] = fetchMock.mock.calls[0] as [
+      RequestInfo | URL,
+      RequestInit,
+    ];
     expect(init?.method).toBe("POST");
 
     const body = JSON.parse(init?.body as string);
@@ -207,7 +213,10 @@ describe("managed Discord OAuth init", () => {
 
     await client.createCloudCompatAgentManagedDiscordOauth("agent-1");
 
-    const [, init] = fetchMock.mock.calls[0] as [RequestInfo | URL, RequestInit];
+    const [, init] = fetchMock.mock.calls[0] as [
+      RequestInfo | URL,
+      RequestInit,
+    ];
     const body = JSON.parse(init?.body as string);
     expect(body).toEqual({});
   });

packages/app-core/src/api/apps-hyperscape-e2e.test.ts

@@ -205,26 +205,26 @@ function clonePluginInfo(plugin: RegistryPluginInfo): RegistryPluginInfo {
 function createMockPluginManager(
   plugins: RegistryPluginInfo[] = [HYPERSCAPE_LOCAL_PLUGIN],
 ): PluginManagerLike {
-  const pluginEntries = plugins.map((plugin) => [
-    plugin.name,
-    clonePluginInfo(plugin),
-  ] as const);
+  const pluginEntries = plugins.map(
+    (plugin) => [plugin.name, clonePluginInfo(plugin)] as const,
+  );
   const pluginMap = new Map(pluginEntries);
 
   return {
     refreshRegistry: vi.fn(
       async () =>
         new Map(
-          pluginEntries.map(([name, plugin]) => [name, clonePluginInfo(plugin)]),
+          pluginEntries.map(([name, plugin]) => [
+            name,
+            clonePluginInfo(plugin),
+          ]),
         ),
     ),
     listInstalledPlugins: vi.fn(async () => []),
-    getRegistryPlugin: vi.fn(
-      async (name: string) => {
-        const plugin = pluginMap.get(name);
-        return plugin ? clonePluginInfo(plugin) : null;
-      },
-    ),
+    getRegistryPlugin: vi.fn(async (name: string) => {
+      const plugin = pluginMap.get(name);
+      return plugin ? clonePluginInfo(plugin) : null;
+    }),
     searchRegistry: vi.fn(async (query: string) => {
       const lowerQuery = query.toLowerCase();
       return plugins
@@ -331,9 +331,9 @@ describeIf(hasLocalHyperscapePlugin)("Hyperscape E2E Integration", () => {
       const results = await appManager.search(pluginManager, "rpg");
 
       expect(results.length).toBeGreaterThan(0);
-      expect(results.some((r) => r.name === "@hyperscape/plugin-hyperscape")).toBe(
-        true,
-      );
+      expect(
+        results.some((r) => r.name === "@hyperscape/plugin-hyperscape"),
+      ).toBe(true);
     });
   });
 
@@ -477,7 +477,9 @@ describeIf(hasLocalHyperscapePlugin)("Hyperscape E2E Integration", () => {
     test("complete discovery to launch flow", async () => {
       // Step 1: List apps
       const apps = await appManager.listAvailable(pluginManager);
-      expect(apps.some((a) => a.name === "@hyperscape/plugin-hyperscape")).toBe(true);
+      expect(apps.some((a) => a.name === "@hyperscape/plugin-hyperscape")).toBe(
+        true,
+      );
 
       // Step 2: Get app info
       const info = await appManager.getInfo(

packages/app-core/src/api/client-agent.ts

@@ -349,7 +349,9 @@ declare module "./client-base" {
       fromSeq?: number;
     }): Promise<AgentEventsResponse>;
     getExtensionStatus(): Promise<ExtensionStatus>;
-    getRelationshipsGraph(query?: RelationshipsGraphQuery): Promise<RelationshipsGraphSnapshot>;
+    getRelationshipsGraph(
+      query?: RelationshipsGraphQuery,
+    ): Promise<RelationshipsGraphSnapshot>;
     getRelationshipsPeople(query?: RelationshipsGraphQuery): Promise<{
       people: RelationshipsPersonSummary[];
       stats: RelationshipsGraphStats;

packages/app-core/src/api/client-chat.ts

@@ -92,7 +92,11 @@ declare module "./client-base" {
       text: string,
       channelType?: ConversationChannelType,
       conversationMode?: ConversationMode,
-    ): Promise<{ text: string; agentName: string; noResponseReason?: "ignored" }>;
+    ): Promise<{
+      text: string;
+      agentName: string;
+      noResponseReason?: "ignored";
+    }>;
     sendChatStream(
       text: string,
       onToken: (token: string, accumulatedText?: string) => void,

packages/app-core/src/api/client-relationships.test.ts

@@ -106,7 +106,9 @@ describe("MiladyClient relationships API", () => {
     const client = new MiladyClient("http://127.0.0.1:31337");
     const person = await client.getRelationshipsPerson("person 1");
 
-    expect(fetchSpy).toHaveBeenCalledWith("/api/relationships/people/person%201");
+    expect(fetchSpy).toHaveBeenCalledWith(
+      "/api/relationships/people/person%201",
+    );
     expect(person.displayName).toBe("Chris");
   });
 });

packages/app-core/src/api/database.readonly-query-guard.test.ts

@@ -1,6 +1,14 @@
 import type { AgentRuntime } from "@elizaos/core";
 import { handleDatabaseRoute } from "@miladyai/agent/api/database";
-import { afterAll, afterEach, beforeAll, describe, expect, it, vi } from "vitest";
+import {
+  afterAll,
+  afterEach,
+  beforeAll,
+  describe,
+  expect,
+  it,
+  vi,
+} from "vitest";
 import { createTestRuntime } from "../../../../test/helpers/pglite-runtime";
 import {
   createMockHttpResponse,

packages/app-core/src/api/onboarding-compat-routes.ts

@@ -175,7 +175,6 @@ export async function handleOnboardingCompatRoute(
         `[milady-api] Failed to persist onboarding state: ${err instanceof Error ? err.message : String(err)}`,
       );
     }
-
   } catch {
     // JSON parse failed — let upstream handle the error
   }

packages/app-core/src/api/plugins-compat-routes.ts

@@ -629,7 +629,9 @@ export function buildPluginListResponse(runtime: AgentRuntime | null): {
   const configRecord = config as Record<string, unknown>;
   const loadedNames = resolveLoadedPluginNames(runtime);
   const manifestPath = resolvePluginManifestPath();
-  const manifestRoot = manifestPath ? path.dirname(manifestPath) : process.cwd();
+  const manifestRoot = manifestPath
+    ? path.dirname(manifestPath)
+    : process.cwd();
   const manifest = manifestPath
     ? (JSON.parse(fs.readFileSync(manifestPath, "utf8")) as PluginManifestFile)
     : null;
@@ -1044,7 +1046,8 @@ export async function handlePluginsCompatRoutes(
       }
 
       const refreshed = (
-        buildPluginListResponse(state.current).plugins as unknown as CompatPluginRecord[]
+        buildPluginListResponse(state.current)
+          .plugins as unknown as CompatPluginRecord[]
       ).find((candidate) => candidate.id === pluginId);
 
       result.payload.plugin = refreshed ?? result.payload.plugin ?? plugin;

packages/app-core/src/api/server.no-response-fallback.test.ts

@@ -341,9 +341,14 @@ describe("conversation no-response fallback", () => {
           }),
       );
 
-      const created = await req(isolatedServer.port, "POST", "/api/conversations", {
-        title: "Timed out fallback thread",
-      });
+      const created = await req(
+        isolatedServer.port,
+        "POST",
+        "/api/conversations",
+        {
+          title: "Timed out fallback thread",
+        },
+      );
       expect(created.status).toBe(200);
       const conversationId = String(
         (created.data.conversation as { id?: string } | undefined)?.id ?? "",