Distillation

Date: Sep 16, 2026

• 🔴 (23:51) User requires the native-to-WASM fallback signal to never log untrusted fields.
• 🔴 (23:51) User requires free-form worker diagnostics to never be forwarded to logs or sinks.
• 🔴 (23:51) User requires resolveNativeOrtBindingPath to return null and never throw when the native package is absent.
• 🔴 (23:51) User requires native package resolution to return null and never throw when native packages are absent.
• 🔴 (23:51) User requires native ONNX Runtime resolution to never resolve an undeclared ancestor workspace package.
• 🟡 (23:51) packages/core/test/embedding-wasm-fallback.test.ts now imports registerSink from ../src/log, defines NOOP_LOG_SINK with info(), warn(), error(), and captureException(), and restores that sink in afterEach().
• 🟡 (23:51) The native-to-WASM fallback test message now sends only { type: "init-needs-wasm" }; the former free-form error: "Failed to load model because protobuf parsing failed" field was removed.
• 🟡 (23:51) Added regression tests titled never logs untrusted fields from the native-to-WASM fallback signal and never forwards free-form worker diagnostics to logs or sinks.
• 🟡 (23:51) Added a parity test titled worker inline isNativeOrtLoadError body matches the canonical function, guarding consistency between the worker’s inlined implementation and the canonical isNativeOrtLoadError.
• 🟡 (23:51) Native resolver fixtures use GATEWAY_VERSION = "9.9.9" and exercise N-API layouts including bin/napi-v6/linux/x64.
• 🟡 (23:51) Added native-resolution regression tests titled returns null and never throws when native packages are absent, rejects ambiguous or missing workspace N-API layouts, and never resolves an undeclared ancestor workspace package.
• 🟡 (23:51) packages/core/src/ort-native.ts documents two allowed resolution routes: matching published @loreai/onnxruntime-<target> packages and the gateway’s direct onnxruntime-node dependency; both routes are intended to be npm-12-safe and prevent selection of an ancestor’s potentially ABI-incompatible runtime.
• 🟡 (23:51) Native binding validation in packages/core/src/ort-native.ts opens the canonical binding and inspects executable magic bytes; package manifests, runtime compatibility, expected ONNX Runtime version, package containment, and N-API binary layout are validated before returning a binding path, with failures caught and converted to null.