fix(packaging): verify bundled resources from manifest (#3587)

* fix(packaging): verify bundled resources from contract

Consume AionCore managed-resources/manifest.json in packaging and Windows install verification. Reject missing, invalid, duplicate, or old-version-only managed Node and ACP resources, and update the legacy ACP artifact script to current package pins.

* test(build): strengthen managed resource verifier gates

Reject non-numeric managed resources schemaVersion values in the Windows installer verifier and add focused prepare-aioncore gate coverage for Actions artifacts, GitHub release downloads, and local binary fallback inputs.

* test(packaging): skip POSIX fake aioncore gates on Windows

* chore(packaging): bump bundled AionCore to v0.1.47

---------

Co-authored-by: zynx <>

Author: piorpua

package.json

@@ -257,7 +257,7 @@
   "engines": {
     "node": ">=22 <25"
   },
-  "aioncoreVersion": "v0.1.46",
+  "aioncoreVersion": "v0.1.47",
   "electronRebuild": {
     "electronVersion": "^37.3.1"
   },

packages/shared-scripts/src/prepare-aioncore.js

@@ -19,6 +19,7 @@ const { execSync, execFileSync } = require('child_process');
 const fs = require('fs');
 const os = require('os');
 const path = require('path');
+const { verifyBundledAioncoreResources } = require('./verify-bundled-aioncore-resources');
 
 const GITHUB_OWNER = 'iOfficeAI';
 const GITHUB_REPO = 'AionCore';
@@ -135,6 +136,19 @@ function prepareManagedResources(binaryPath, targetDir) {
   return bundleOut;
 }
 
+function verifyPreparedAioncoreBundle(projectRoot, platform, arch) {
+  const result = verifyBundledAioncoreResources({
+    resourcesDir: path.join(projectRoot, 'resources'),
+    electronPlatformName: platform,
+    targetArch: arch,
+  });
+  if (result.missing.length > 0 || result.failures.length > 0) {
+    const summary = result.missing.length > 0 ? result.missing.join(', ') : JSON.stringify(result.failures);
+    throw new Error(`Prepared aioncore bundle is missing required bundled resource(s): ${summary}`);
+  }
+  return result;
+}
+
 // ---------------------------------------------------------------------------
 // Source resolvers
 // ---------------------------------------------------------------------------
@@ -480,6 +494,7 @@ function prepareAioncore(options) {
         files: [binaryName, 'managed-resources/'],
       };
       writeJson(path.join(targetDir, 'manifest.json'), manifest);
+      verifyPreparedAioncoreBundle(projectRoot, platform, arch);
       console.log(`  Using local aioncore bundle: ${resolvedLocalBundleDir}`);
       return { prepared: true, dir: targetDir, sourceType: 'local-bundle' };
     }
@@ -555,6 +570,7 @@ function prepareAioncore(options) {
     };
 
     writeJson(path.join(targetDir, 'manifest.json'), manifest);
+    verifyPreparedAioncoreBundle(projectRoot, platform, arch);
     console.log(
       `  Bundled aioncore prepared: resources/bundled-aioncore/${runtimeKey}/${binaryName} [source=${sourceType}]`
     );
@@ -571,4 +587,5 @@ module.exports = {
   getActionsArtifactMissingMessage,
   getActionsArtifactName,
   prepareAioncore,
+  verifyPreparedAioncoreBundle,
 };