Distillation

Date: September 16, 2026

• 🔴 (13:26) User asserted that resolveNativeOrtBindingPath returns null and never throws when native ONNX Runtime packages are absent.
• 🔴 (13:26) User asserted that native ONNX Runtime resolution never resolves an undeclared ancestor workspace package.
• 🔴 (13:26) User asserted that native thread-cap defaults never throw and return either a valid cap or no override; nativeIntraOpThreads(Number.NaN, 8) returns 1.
• 🔴 (13:27) User asserted that isTransformersInferenceDumpLine() must never match tensor data or any other later console.error argument; only the leading string may match.
• 🔴 (13:27) User stated vendored model files are read-only or shipped inside the binary and must never be deleted or redownloaded.
• 🔴 (13:27) User documented .craft.yml release publication targets: 1. the 4 workspace packages @loreai/core, @loreai/opencode, @loreai/pi, and @loreai/gateway via a public OIDC npm target with workspaces: true; 2. legacy opencode-lore via includeNames: /^opencode-lore-\d.*\.tgz$/; 3. generated native packages through target ID onnxruntime-native with includeNames: /^loreai-onnxruntime-.*\.tgz$/; 4. GitHub release assets selected by /(\.(gz|patch)|^lore-checksums\.txt|^install-protocol-v1)$/.
• 🔴 (13:27) User documented that .craft.yml uses minVersion: '2.21.1', automatic changelog/versioning, and preReleaseCommand: bash scripts/bump-version.sh because Craft’s built-in npm version bumping fails on workspace:* dependencies.
• 🔴 (13:27) User documented that release CI packs packages/core, packages/opencode, packages/pi, and packages/gateway using pnpm pack --pack-destination ../../dist-tarballs; pnpm pack is required because it rewrites workspace:* to the packed version, whereas npm pack leaves the literal specifier and breaks installation.
• 🔴 (13:27) User documented that release CI creates opencode-lore-<version>.tgz by extracting loreai-opencode-<version>.tgz, replacing .name with "opencode-lore" in package/package.json, and repacking otherwise identical content.
• 🔴 (13:27) User documented that release CI runs pnpm tsx packages/gateway/script/pack-ort-npm.ts --version "$version" --tarballs "$GITHUB_WORKSPACE/dist-tarballs" after workspace tarballs are packed, producing native ONNX Runtime tarballs and modifying the packed gateway tarball in place.
• 🔴 (13:27) User documented a stale-count discrepancy in .github/workflows/ci.yml: its comment says to “pack all 6” native ONNX Runtime platform packages, while the current ORT_NPM_PLATFORMS definition contains exactly 5 targets.
• 🔴 (13:27) User documented packages/gateway/script/pack-ort-npm.ts release packaging sequence: 1. buildOrtPlatformPackages(staging, version) generates every platform package in a temporary ort-npm-pack- directory; 2. each package is packed with npm pack <dir> --pack-destination <tarballsDir>; 3. generated tarballs are named loreai-onnxruntime-<target>-<version>.tgz; 4. temporary staging is removed recursively in a finally block.
• 🔴 (13:27) User documented that injectGatewayOptionalDeps() in packages/gateway/script/pack-ort-npm.ts builds one exact-version entry per ORT_NPM_PLATFORMS item using ortPackageName(p.target), extracts loreai-gateway-${version}.tgz, merges those entries into package/package.json’s existing optionalDependencies, writes formatted JSON with a trailing newline, and repacks over the original tarball.
• 🔴 (13:27) User stated native package dependencies are injected only into the already-packed gateway tarball—not the workspace package.json—so the repository and lockfile remain unchanged and release-branch pnpm install --frozen-lockfile continues to work.
• 🔴 (13:27) User documented pack-ort-npm.ts CLI requirements: options are --version <x.y.z> and --tarballs <dir>; version may instead come from CRAFT_NEW_VERSION; missing version or tarball directory prints Usage: pack-ort-npm.ts --version <x.y.z> --tarballs <dir> (version also read from CRAFT_NEW_VERSION) and exits with status 1.
• 🔴 (13:27) User documented that pack-ort-npm.ts lists all generated files beginning with loreai-onnxruntime- after packaging and catches top-level failures by logging the error and exiting with status 1.
• 🔴 (13:27) User documented release binary configuration in .github/workflows/ci.yml: pnpm --filter @loreai/gateway run build:binary:sea --platforms "darwin-arm64,linux-arm64,linux-x64,windows-x64" --release, with SENTRY_AUTH_TOKEN and FOSSILIZE_CACHE_DIR=${{ github.workspace }}/.node-cache.
• 🔴 (13:27) User documented macOS cross-signing setup in CI: rcodesign version 0.29.0, archive apple-codesign-0.29.0-x86_64-unknown-linux-musl.tar.gz, SHA-256 dbe85cedd8ee4217b64e9a0e4c2aef92ab8bcaaa41f20bde99781ff02e600002; without ad-hoc signing, cross-compiled Darwin binaries cannot execute on Apple Silicon.
• 🔴 (13:27) User documented that deterministic release checksums are generated with node scripts/generate-release-checksums.mjs packages/gateway/dist-bin packages/gateway/dist-bin packages/gateway/dist-bin/lore-checksums.txt.