Distillation

Date: Sep 16, 2026

• 🔴 (12:40) User stated Jujutsu (jj) operations never fail on merge conflict; rebase, new, and squash record conflicts in the resulting commit, after which jj st must be used to find conflicted files and they must be resolved manually rather than with interactive jj resolve.
• 🔴 (12:40) User stated repositories containing .jj/ must use jj rather than git for mutations; interactive flags must never be used, commit/description commands must include -m "msg", mutations must be verified with jj st and jj log, change IDs are preferred over commit IDs, and immutable commits such as tracked main must not be rebased or described directly.
• 🟡 (12:41) Current ordered work plan: 1. Address native resolver review findings with deterministic regressions (in_progress, high priority), 2. Finish cgroup headroom parsing and admission wiring (pending, high), 3. Run fail-first and mutation proofs for every critical guard (pending, high), 4. Run complete repository validation and freeze exact candidate (pending, high), 5. Obtain independent correctness and security reviews (pending, high), 6. Commit completed Jujutsu change and report findings (pending, medium).
• 🟡 (12:41) Assistant identified the native-resolution boundary decision: package discovery must support legitimate installation layouts without searching arbitrary ancestors, while a present-but-unloadable native addon must use the existing one-shot WASM worker-respawn path rather than terminate local embeddings; the worker protocol and bundle tests were being traced together to avoid introducing a second fallback mechanism.
• 🔴 (12:41) User stated resolveNativeOrtBindingPath() must return null and never throw when native packages are absent.
• 🔴 (12:41) User stated native resolution must never resolve an undeclared ancestor workspace package.
• 🟡 (12:41) packages/core/test/ort-native.test.ts contains resolver regressions for absent native packages, declared workspace package discovery, nested gateway layouts, rejection of undeclared ancestor workspace packages, rejection of a workspace bin symlink escaping the package, and rejection of files whose bytes are not a valid platform-native format.
• 🟡 (12:41) packages/core/test/ort-native.test.ts:431-454 verifies a workspace bin symlink to an outside directory yields null, and replacing fixture.workspaceBinding with the text not a native addon also yields null.
• 🔴 (12:41) User stated default nativeIntraOpThreads() invocation must never throw and must return either no override (undefined) or a valid integer cap of at least 1.
• 🟡 (12:41) packages/core/test/ort-native.test.ts:457-482 tests nativeIntraOpThreads() as follows: unconstrained/default-preserving cases (4,4), (8,8), (1,1), and (8,4) return undefined; constrained cases (2,8) and (1,16) return 2 and 1; fractional or invalid parallelism (2.9,8), (0,8), (NaN,8), and (-4,8) returns 2, 1, 1, and 1; zero-argument invocation must not throw and returns undefined or an integer >= 1.
• 🔴 (12:42) User stated WorkerInitData.forceWasm is only for a fresh npm-bundle worker after a native worker posts init-needs-wasm; the SEA vendored path uses native __LORE_ORT_BINDING_PATH__ and never sets forceWasm, while dev/test raw .ts execution has no sibling WASM files. Default or undefined means prefer native.
• 🟡 (12:42) packages/core/src/embedding-worker.ts:222-347 behavior: ensurePipeline() lazily initializes once; on a non-vendored selected-native loader error it posts { type: "init-needs-wasm", error: msg }, sets wasmRespawnRequested, and returns without posting init-error; after the promise settles without a pipeline, it throws embedding worker awaiting WASM respawn so the triggering request settles.
• 🟡 (12:42) packages/core/src/embedding-worker.ts:243-325 corrupt-model decision flow: a structurally intact model with native in use requests WASM respawn; an intact model already on WASM logs at debug severity and retries loadPipeline() once without purging; a non-intact model calls purgeCachedModel() and, if successful, retries download/load once; unrecoverable or final errors flow to the terminal catch.
• 🟡 (12:42) packages/core/src/embedding-worker.ts:327-345 terminal initialization failure sets initFailed=true, saves initError, resets initPromise=null, posts { type: "init-error", error: initError }, and rethrows; this terminal path is deliberately distinct from the recoverable init-needs-wasm path.
• 🟡 (12:42) packages/core/src/embedding-worker-types.ts:217-224 defines isMissingLocalStackError(msg): it first requires ERR_MODULE_NOT_FOUND, Cannot find module/package, or Could not locate the bindings file, then requires the message to identify @huggingface/transformers, onnxruntime, or sharp, preventing unrelated missing model files from being misclassified.
• 🟡 (12:42) packages/core/src/embedding-worker-types.ts:238-267 defines pure predicate shouldRequestWasmRespawn(usedNative, isVendored, errorMessage, fileLooksIntact), returning true only when native was used, the model is not vendored, the file looks intact, and isCorruptModelError(errorMessage) is true; the canonical case is Bun with native onnxruntime-node failing InferenceSession.create() with protobuf parsing failed on an intact approximately 137 MB model.
• 🟡 (12:42) Native-addon fallback coverage locations: packages/gateway/test/bundle-exports.test.ts includes parameterized tests at line 197 for requesting WASM when the selected native addon fails to load and at line 287 for rejecting a malformed native addon before loading WASM fallback, with not a native addon used at line 345; packages/core/test/embedding-worker-types.test.ts tests isNativeOrtLoadError at lines 82-99 and checks at lines 247-254 that the worker-inline implementation body matches the canonical function.