pi-mega-compact 0.20.63 → 0.20.65

package/README.md

@@ -90,7 +90,7 @@ Set env vars before starting pi. Defaults are in `src/config/dedup.ts`.
 | `MEGACOMPACT_WIKI_INCREMENTAL` | `true` | Incremental wiki updates (no full rebuild) |
 | `MEGACOMPACT_AUTO_WIKI` | `true` | Auto-generate wiki from turns |
 | `MEGACOMPACT_NEW_UI` | `true` | Use the new Tailwind/shadcn dashboard shell |
-| `MEGACOMPACT_COST_API_ENABLED` | `false` | Opt-in: fetch model pricing from an external API (PREVENT-PI-004 network exception). Enriches dashboard cost data for models not in the local pricing table |
+| `MEGACOMPACT_COST_API_ENABLED` | `false` | Opt-in: fetch model pricing from an external API (PREVENT-PI-004 applies to defaults; opt-in features are exempt). Enriches dashboard cost data for models not in the local pricing table |
 | `MEGACOMPACT_COST_API_URL` | _(unset)_ | OpenRouter-compatible model pricing endpoint (e.g. `https://openrouter.ai/api/v1/models`). Only contacted when `MEGACOMPACT_COST_API_ENABLED=true` |
 
 Full config reference: [`docs/CONFIGURATION.md`](docs/CONFIGURATION.md)

package/dist/config/vector-cortex-enc2a.js

@@ -0,0 +1,35 @@
+/**
+ * config/vector-cortex-enc2a.ts — ENC-2a native onnxruntime install-guide flag
+ * (operator run-script assist).
+ *
+ * Sibling of vector-cortex-enc1a.ts / vector-cortex-enc1b.ts /
+ * vector-cortex-enc2budget.ts so vector-cortex.ts stays under the 300-line soft
+ * limit (soft-as-hard gate). vector-cortex.ts re-exports the flag below and
+ * root src/config.ts re-exports it, so no consumer import path changes.
+ *
+ * ENC-2a, when the operator opted into the native backend
+ * (`MEGACOMPACT_ENCODER_NATIVE=1`) but `encoderBackend` is still `"wasm"`
+ * (onnxruntime-node absent / not yet installed), surfaces an "Encoder Runtime
+ * Install" card on the Cortex sub-tab with copy-paste operator commands: the
+ * install + restart + verify steps built ONLY from the artifacts-module
+ * constants (`src/vector-cortex/encoder/native-install-artifacts.ts`) — never
+ * an inline registry URL or hash in the route (PREVENT-PI-004). The guide
+ * renders only on an installable host platform; the ENC-0e darwin-x64 demotion
+ * sentinel keeps it absent on an Intel Mac (no native binding upstream).
+ *
+ * `MEGACOMPACT_ENC_2A=0` disables: no guide fields, no install card, no absent
+ * read — byte-identical to the ENC-1b predecessor. The flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS
+ * — see `feedback_dashboard-flags-toggleable` memory).
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * ENC-2a — operator run-script assist (dashboard install guide for the
+ * onnxruntime-node native binding). Default ON. `MEGACOMPACT_ENC_2A=0` disables
+ * and is byte-identical to the ENC-1b predecessor: no guide/absent fields, no
+ * install card. This flag MUST also be a dashboard SETTINGS toggle (visible in
+ * config UI, never in EXCLUDED_SETTINGS).
+ */
+export const ENC_2A_ENABLED = () => sprintFlag("MEGACOMPACT_ENC_2A");

package/dist/config/vector-cortex-enc2b.js

@@ -0,0 +1,36 @@
+/**
+ * config/vector-cortex-enc2b.ts — ENC-2b native onnxruntime qualification
+ * retest flag.
+ *
+ * Sibling of vector-cortex-enc2a.ts / vector-cortex-enc2budget.ts so
+ * vector-cortex.ts stays under the 300-line soft limit (soft-as-hard gate).
+ * vector-cortex.ts re-exports the flag below and root src/config.ts re-exports
+ * it, so no consumer import path changes.
+ *
+ * ENC-2b re-probes and re-qualifies the installed native onnxruntime binding
+ * (`onnxruntime-node` in `~/.pi/mega-compact/native-ort/`, operator-installed
+ * via the ENC-2a guide). When the operator installs the binding the read path
+ * does not automatically re-evaluate the qualification verdict; this sprint
+ * delivers a reader-only retest that loads the LOCAL on-disk binding, runs a
+ * bounded warmup + p95 probe against it, measures RSS, computes a fresh
+ * qualification verdict against the ENC-0f p95 budget + the operator
+ * install-budget, and surfaces it on the Setup Cortex sub-tab and the GET
+ * `/api/setup-status` response.
+ *
+ * `MEGACOMPACT_ENC_2B=0` disables: the GET omits both new retest fields, the
+ * POST ignores the retest-request key, the Cortex sub-tab renders no retest
+ * card — byte-identical to the ENC-2a predecessor. The flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS
+ * — see `feedback_dashboard-flags-toggleable` memory).
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * ENC-2b — native onnxruntime qualification retest (detect installed binding,
+ * re-probe p95/RSS, re-qualify). Default ON. `MEGACOMPACT_ENC_2B=0` disables and
+ * is byte-identical to the ENC-2a predecessor: no retest GET fields, no retest
+ * POST branch, no retest card. This flag MUST also be a dashboard SETTINGS
+ * toggle (visible in config UI, never in EXCLUDED_SETTINGS).
+ */
+export const ENC_2B_ENABLED = () => sprintFlag("MEGACOMPACT_ENC_2B");

package/dist/config/vector-cortex.js

@@ -50,5 +50,9 @@ export { DASH_0D_ENABLED } from "./vector-cortex-dash-0d.js";
 export { ENC_1A_ENABLED } from "./vector-cortex-enc1a.js";
 export { ENC_1B_ENABLED, ENC_1B_MAX_EMBEDDING_DIM, ENC_1B_EMBEDDING_DIM_ENV, ENC_1B_EMBEDDING_HEADERS_ENV, ENC_1B_ALLOW_REMOTE_EMBEDDER_ENV, ENC_1B_ENCODER_NATIVE_ENV, } from "./vector-cortex-enc1b.js";
 export { ENC_2BUDGET_ENABLED, ENC_2BUDGET_NATIVE_ORT_BUDGET_ENV, ENC_2BUDGET_MAX_MIB, ENC_2BUDGET_DEFAULT_MIB, } from "./vector-cortex-enc2budget.js";
+// ENC-2a native onnxruntime install-guide flag extracted to vector-cortex-enc2a.ts.
+export { ENC_2A_ENABLED } from "./vector-cortex-enc2a.js";
+// ENC-2b native onnxruntime qualification-retest flag extracted to vector-cortex-enc2b.ts.
+export { ENC_2B_ENABLED } from "./vector-cortex-enc2b.js";
 // Breaker constants (TRIAD_RESILIENCE.md §breaker) extracted to vector-cortex-breakers.ts.
 export { BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./vector-cortex-breakers.js";

package/dist/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, ML5E_ENABLED, DEDUP_ATTR_ENABLED, ENC_0A_ENABLED, ENC_0B_ENABLED, ENC_0C_ENABLED, ENC_0D_ENABLED, ENC_0E_ENABLED, ENC_0F_ENABLED, ENC_0G_ENABLED, ENC_1A_ENABLED, ENC_1B_ENABLED, ENC_2BUDGET_ENABLED, ENC_2BUDGET_NATIVE_ORT_BUDGET_ENV, ENC_2BUDGET_MAX_MIB, ENC_2BUDGET_DEFAULT_MIB, COSINE_FP_BENCH_ENABLED, COSINE_FP_REAL_ENABLED, REPO_CORPUS_ENABLED, DASH_0A_ENABLED, DASH_0B_ENABLED, DASH_0C_ENABLED, DASH_0D_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, ML5E_ENABLED, DEDUP_ATTR_ENABLED, ENC_0A_ENABLED, ENC_0B_ENABLED, ENC_0C_ENABLED, ENC_0D_ENABLED, ENC_0E_ENABLED, ENC_0F_ENABLED, ENC_0G_ENABLED, ENC_1A_ENABLED, ENC_1B_ENABLED, ENC_2BUDGET_ENABLED, ENC_2BUDGET_NATIVE_ORT_BUDGET_ENV, ENC_2BUDGET_MAX_MIB, ENC_2BUDGET_DEFAULT_MIB, ENC_2A_ENABLED, ENC_2B_ENABLED, COSINE_FP_BENCH_ENABLED, COSINE_FP_REAL_ENABLED, REPO_CORPUS_ENABLED, DASH_0A_ENABLED, DASH_0B_ENABLED, DASH_0C_ENABLED, DASH_0D_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/extensions/dashboard-server/routes-rag-settings-vector-cortex.js

@@ -70,6 +70,8 @@ export const VECTOR_CORTEX_SETTINGS = {
         boolDirect("MEGACOMPACT_ENC_1A", "ENC-1a external embedder API key + endpoint Settings fields", "ENC-1a adds a Settings-visible field pair for the external embedder endpoint URL + optional Bearer API key, persisted by the setup-configure writer branch to the per-repo .mega-compact.env (MEGACOMPACT_EMBEDDING_URL / MEGACOMPACT_EMBEDDING_KEY). The GET status route echoes the endpoint URL and reports embeddingApiKeySet as a boolean ONLY — the raw key is never returned. OFF = no new GET fields, no writer branch, no new Settings text rows (byte-identical ENC-0g predecessor).", true),
         boolDirect("MEGACOMPACT_ENC_1B", "ENC-1b ONNX runtime backend + embedder API settings", "ENC-1b completes the embedder API Settings surface (dim / headers / allow-remote persisted to the per-repo .mega-compact.env) and surfaces the ONNX runtime selection knob (MEGACOMPACT_ENCODER_NATIVE) as a toggle plus the current effective backend + demotion reason. OFF = no new GET fields, no writer branch, no new Settings rows or toggle (byte-identical ENC-1a predecessor).", true),
         boolDirect("MEGACOMPACT_ENC_2BUDGET", "ENC-2a operator-configurable native install-budget knob", "ENC-2a exposes the runtime operator knob MEGACOMPACT_NATIVE_ORT_BUDGET_MIB (default 300 MiB, clamp 8192) as a dashboard Settings field. The knob gates budgetOk in the encoder runtime decision (decision.ts installBudgetMib + runtime-select.ts selectRuntimeBackend). Persisted to the per-repo .mega-compact.env via the setup-configure writer branch; the GET status route surfaces the persisted value AND the effective integer installBudgetMib() resolves to (so the dashboard shows the runtime's actual operand). OFF = no new GET fields, no writer branch, no new Settings rows (byte-identical ENC-1b predecessor).", true),
+        boolDirect("MEGACOMPACT_ENC_2A", "ENC-2a native onnxruntime install GUIDE (detect + copy-paste)", "ENC-2a surfaces the platform-matched native onnxruntime install-guide (three copy-paste steps + script path) on the Setup Cortex sub-tab when the operator opted into the native backend but the effective runtime is still wasm (onnxruntime-node absent). Pure guidance — the extension NEVER executes or fetches (PREVENT-PI-004 unchanged); the committed operator script scripts/encoder/install-native-ort.mjs runs in the USER's shell. OFF = no guide GET fields, no guide-request POST branch, no install card (byte-identical ENC-1b predecessor).", true),
+        boolDirect("MEGACOMPACT_ENC_2B", "ENC-2b native ONNX runtime qualification retest (detect + re-qualify)", "ENC-2b re-probes and re-qualifies the installed native onnxruntime binding (onnxruntime-node in ~/.pi/mega-compact/native-ort/, operator-installed via the ENC-2a guide): loads the LOCAL on-disk binding, runs a bounded warmup + p95 probe, measures RSS, and computes a fresh qualification verdict against the ENC-0f p95 budget + the operator install-budget. Never downloads or trains (PREVENT-PI-004 / HG-1 unchanged); surfaces nativeOrtRetestResult + nativeOrtBackendEffective on the GET /api/setup-status. OFF = no retest GET fields, no retest POST branch, no retest card (byte-identical ENC-2a predecessor).", true),
         boolDirect("MEGACOMPACT_COSINE_FP_BENCH", "COS-FP-A Synthetic FP Bench", "Synthetic FP harness + L2 cosine threshold calibration (COS-FP-A): drives the deterministic synthetic-corpus grid sweep (scripts/cosine-fp/bench.mjs) that measures L2 cosine false-positive rates and emits a recommended default, and serves the reader-only GET /api/cosine-fp-report. Synthetic-corpus-only — never reads real session/ledger bytes. OFF = bench inert, endpoint 404s, no report write, L2_COSINE plain MEGACOMPACT_L2_THRESHOLD (byte-identical predecessor).", true),
         boolDirect("MEGACOMPACT_COSINE_FP_REAL", "COS-FP-R Real-Corpus Validation", "Real-corpus L2 cosine FP validation (COS-FP-R): runs the real-corpus grid sweep (scripts/cosine-fp/real-bench.mjs) against donated, consent-approved sessions only (SECURITY_PRIVACY Lifecycle/Consent), scoring FP/FN with Wilson intervals + session-grouped bootstrap, and appends CI-backed per-content-type recommendations to the cosine-threshold report. Runs only when a valid consented corpus exists; absent corpus = no_corpus (normative pre-donation state, nothing written). OFF = script inert, nothing executes, no writes (byte-identical predecessor).", true),
         boolDirect("MEGACOMPACT_REPO_CORPUS", "Cross-Repo Corpus (REPO-A)", "Cross-repo corpus preparation (REPO-A): the governed, consent-gated reader-only path that builds a pseudonymous corpus manifest from per-repo events.log slices and serves GET /api/repo-corpus answering which pseudonymous repos/sessions are in the corpus, what cross-repo overlap exists, and whether consent is active for each — counts + IDs + status only, never payload content. Consent is append-only (consent.mjs, CLI/ops-only); revocation freezes the builder + route. OFF = builder refuses to run, reader route 404s, single-repo recall untouched (byte-identical predecessor).", true),

package/dist/extensions/dashboard-server/routes-setup-enc2a.js

@@ -0,0 +1,119 @@
+/**
+ * dashboard-server/routes-setup-enc2a.ts — ENC-2a native onnxruntime install
+ * GUIDE (reader-only) + installed-version probe.
+ *
+ * Extracted out of routes-setup.ts (which hovers at the 300-line source soft
+ * cap, mirroring the ENC-1a/ENC-1b/ENC-2budget sibling extracts) so the
+ * ENC-2a additive GET fields — the platform-matched native install guide and
+ * the installed-version probe — live in a sibling impl file and routes-setup.ts
+ * stays a thin host.
+ *
+ * The guide's job is OPERATOR run-script assist: when the operator opted into
+ * the native backend (`MEGACOMPACT_ENCODER_NATIVE=1`) but the effective runtime
+ * is still `"wasm"` (onnxruntime-node not yet installed) AND the host platform
+ * is installable, the GET status response carries a `nativeOrtInstallGuide`
+ * object with the [install, restart, verify] copy-paste commands + the committed
+ * operator script path. The commands/URL/hash are built ONLY from the artifacts
+ * module constants (`src/vector-cortex/encoder/native-install-artifacts.ts`) —
+ * never an inline registry URL or literal hash (PREVENT-PI-004). The installed-
+ * version probe reads the local `~/.pi/mega-compact/native-ort/` package.json
+ * when present (reader-only filesystem read, zero network).
+ *
+ * The flag is off (or opt-in off / unsupported platform / non-wasm backend) ->
+ * guide `null` and installedVersion `null` -> the host omits both fields,
+ * byte-identical to the ENC-1b-era shape.
+ *
+ * Guardrails: PREVENT-PI-004 (local filesystem reads + in-memory backend
+ * selection only, zero network), PREVENT-001 (null-safe JSON), PREVENT-011
+ * (no `any`).
+ */
+import { readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { ENC_2A_ENABLED } from "../../src/config/vector-cortex.js";
+import { readEnc1bEnv } from "./routes-setup-enc1b.js";
+import { selectRuntimeBackend } from "../../src/vector-cortex/encoder/runtime-select.js";
+import { detectPlatform } from "../../src/vector-cortex/encoder/asset.js";
+import { NATIVE_ORT_VERSION, NATIVE_ORT_PACKAGE, NATIVE_ORT_INSTALLABLE_PLATFORMS, } from "../../src/vector-cortex/encoder/native-install-artifacts.js";
+/** The committed operator script that performs the install (repo-relative). */
+const ENC_2A_SCRIPT_PATH = "scripts/encoder/install-native-ort.mjs";
+/** Where the operator script installs the native binding (absolute install
+ *  prefix used verbatim in the guide commands + the version probe). */
+function nativeOrtDir() {
+    return join(process.env.HOME ?? "", ".pi", "mega-compact", "native-ort");
+}
+/**
+ * True when the payload carries the ENC-2a guide-request key `false`/`true`
+ * (flag-gated, additive). `false` -> 400 (operator-driven no-op); `true` -> 200
+ * + the guide echoed (still no server execution — the execute path is ENC-2c).
+ * Flag-off -> null so the key falls through unrecognized (byte-identical
+ * ENC-1b-era predecessor).
+ */
+export function enc2aGuideRequest(body) {
+    if (!ENC_2A_ENABLED())
+        return null;
+    if (body.nativeOrtInstallGuide === true)
+        return { status: 200 };
+    if (body.nativeOrtInstallGuide === false)
+        return { status: 400 };
+    return null;
+}
+/**
+ * Read the ENC-2a native install GUIDE + installed-version, additive GET fields.
+ *
+ * The guide renders only when EVERY gate passes: flag on, operator opted into
+ * native, effective backend is still `"wasm"` (onnxruntime-node absent), and the
+ * host platform is installable (darwin-x64 is excluded — no native binding
+ * upstream, the ENC-0e demotion sentinel). The effective backend + demotion
+ * reason go through the EXISTING `selectRuntimeBackend` (reader-only — never a
+ * reimplemented literal). `installedVersion` probes
+ * `~/.pi/mega-compact/native-ort/node_modules/onnxruntime-node/package.json`
+ * when present; null otherwise. Returns `{ guide: null, installedVersion: null }`
+ * when the flag is off (byte-identical predecessor).
+ */
+export function readEnc2aGuide(stateDir) {
+    if (!ENC_2A_ENABLED())
+        return { guide: null, installedVersion: null };
+    const env = readEnc1bEnv(stateDir);
+    const platform = detectPlatform();
+    const chosen = selectRuntimeBackend({
+        platform: platform ?? "unsupported",
+        benchRecord: null,
+        nativeOptIn: env.nativeOptIn,
+    });
+    const backend = chosen.backend === "native" ? "native" : "wasm";
+    let guide = null;
+    if (env.nativeOptIn &&
+        backend === "wasm" &&
+        platform !== null &&
+        NATIVE_ORT_INSTALLABLE_PLATFORMS.includes(platform)) {
+        guide = {
+            platform,
+            commands: [
+                `npm install --prefix ${nativeOrtDir()} ${NATIVE_ORT_PACKAGE}@${NATIVE_ORT_VERSION}`,
+                "pi update --extensions && pi session-start",
+                "expect encoderBackend: native on next status poll",
+            ],
+            scriptPath: ENC_2A_SCRIPT_PATH,
+        };
+    }
+    return { guide, installedVersion: probeInstalledVersion() };
+}
+/** Probe the local native-ort package.json for the installed onnxruntime-node
+ *  version. Null when the package is absent/unreadable (reader-only, local). */
+function probeInstalledVersion() {
+    try {
+        const pkgPath = join(nativeOrtDir(), "node_modules", NATIVE_ORT_PACKAGE, "package.json");
+        if (!existsSync(pkgPath))
+            return null;
+        const raw = JSON.parse(readFileSync(pkgPath, "utf8"));
+        if (typeof raw === "object" &&
+            raw !== null &&
+            typeof raw.version === "string") {
+            return raw.version;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}

package/dist/extensions/dashboard-server/routes-setup-enc2b.js

@@ -0,0 +1,77 @@
+/**
+ * dashboard-server/routes-setup-enc2b.ts — ENC-2b native onnxruntime
+ * qualification retest (reader-only probe) + POST retest action.
+ *
+ * Extracted out of routes-setup.ts (which hovers at the 300-line source soft
+ * cap, mirroring the ENC-1b/ENC-2a sibling extracts) so the ENC-2b additive
+ * GET field — the native qualification retest result + effective backend —
+ * lives in a sibling impl file and routes-setup.ts stays a thin host.
+ *
+ * The retest's job is RE-QUALIFICATION: when the operator installed
+ * onnxruntime-node via the ENC-2a guide, the encoder read path does not
+ * automatically re-evaluate the qualification verdict. This sibling surface
+ * runs `runNativeRetest` (a bounded, reader-only, local probe) and:
+ *
+ *   - surfaces `nativeOrtRetestResult` + `nativeOrtBackendEffective` on the GET
+ *     when the flag is on AND a binding is installed — absent otherwise
+ *     (byte-identical to the ENC-2a-era shape on flag-off/none);
+ *   - handles the POST `nativeOrtRetest` key (`false` → 400
+ *     `retest_rejected_false_nothing_to_do`; `true` → run + echo the fresh
+ *     result; flag-off → the key is unrecognized, byte-identical predecessor).
+ *
+ * `nativeOrtBackendEffective` is `"native"` only when the retest verdict is
+ * `qualified`; any `degraded`/`failed` verdict keeps the backend `"wasm"` — the
+ * runtime never silently switches to a backend whose retest failed.
+ *
+ * Guardrails: PREVENT-PI-004 (local filesystem + in-process binding load only,
+ * zero network — the retest NEVER fetches), PREVENT-011 (no `any`).
+ */
+import { ENC_2B_ENABLED } from "../../src/config/vector-cortex.js";
+import { runNativeRetest, } from "../../src/vector-cortex/encoder/native-qualify-retest.js";
+/**
+ * Resolve the ENC-2b additive GET fields. Returns BOTH fields when the flag is
+ * on AND a native binding is installed (the retest ran); returns `{}` on
+ * flag-off AND when no binding is installed — both fields are OMITTED (absent,
+ * not null), so the GET stays byte-identical to the ENC-2a-era shape and the
+ * client hides the retest card. Flag-off omits, never nulls: the ENC-2a-era
+ * host spreads `...{}` so no new key appears. Mirror of the ENC-2a/ENC-1b
+ * sibling idiom; async because the retest loads the binding in-process.
+ */
+export async function readEnc2bRetest(stateDir) {
+    if (!ENC_2B_ENABLED())
+        return {};
+    const result = await runNativeRetest(stateDir);
+    if (result === null)
+        return {};
+    return {
+        nativeOrtRetestResult: result,
+        nativeOrtBackendEffective: result.verdict === "qualified" ? "native" : "wasm",
+    };
+}
+/**
+ * ENC-2b POST retest-action key handling (flag-gated, additive).
+ *
+ * `true`  → { action: "run" } (the host runs the retest and returns the result)
+ * `false` → { action: "reject" } (400 `retest_rejected_false_nothing_to_do`)
+ * other   → null (key absent or flag off — falls through unrecognized,
+ *            byte-identical ENC-2a-era predecessor).
+ */
+export function enc2bRetestRequest(body) {
+    if (!ENC_2B_ENABLED())
+        return null;
+    if (body.nativeOrtRetest === true)
+        return "run";
+    if (body.nativeOrtRetest === false)
+        return "reject";
+    return null;
+}
+/**
+ * Run the ENC-2b retest now (bounded, synchronous on the request) and return
+ * the fresh result. Flag-off or no binding → null. Used by the POST "run"
+ * branch; the result is returned on the response body, never persisted.
+ */
+export async function runEnc2bRetest(stateDir) {
+    if (!ENC_2B_ENABLED())
+        return null;
+    return runNativeRetest(stateDir);
+}

package/dist/extensions/dashboard-server/routes-setup.js

@@ -14,6 +14,8 @@ import { VC9D_ENABLED } from "../../src/config.js";
 import { enc1aStatusFields, writeEnc1aEnv, tryEnc1aConfigure, wantsEnc1a } from "./routes-setup-enc1a.js";
 import { enc1bStatusFields, tryEnc1bConfigure, tryEnc1bInto, enc1bValidateCombined } from "./routes-setup-enc1b.js";
 import { enc2BudgetStatusFields, tryEnc2BudgetInto, enc2BudgetValidateCombined, } from "./routes-setup-enc2budget.js";
+import { readEnc2aGuide, enc2aGuideRequest } from "./routes-setup-enc2a.js";
+import { readEnc2bRetest, enc2bRetestRequest, runEnc2bRetest } from "./routes-setup-enc2b.js";
 import { writeEmbedderEnv } from "./routes-setup-env-upsert.js";
 import { detectOllama, detectLlamaCpp, detectOnnx, memoizedDetectOllama, memoizedDetectLlamaCpp, memoizedDetectOnnx, } from "./routes-setup-detect-cache.js";
 // ---------------------------------------------------------------------------
@@ -60,10 +62,15 @@ export function handleSetupStatus(req, res, ctx) {
     }
     const configured = detectConfiguredEmbedder(ctx.stateDir);
     const active = detectCurrentEmbedder();
+    // ENC-2a (flag-gated, additive): the native install-guide + installed-version
+    // fields. Optional fields are added only when present/installable; when the
+    // flag is off readEnc2aGuide returns nulls so the body stays byte-identical
+    // to the ENC-1b-era shape.
+    const enc2a = readEnc2aGuide(ctx.stateDir);
     // ENC-1a (flag-gated, additive): echo the persisted endpoint URL and an
     // embeddingApiKeySet boolean ONLY — the raw API key is never returned. When
     // the flag is off (or neither is set) both fields are simply omitted.
-    const body = {
+    const base = {
         currentEmbedder: active,
         configuredEmbedder: configured.embedder,
         configuredUrl: configured.url,
@@ -73,10 +80,23 @@ export function handleSetupStatus(req, res, ctx) {
         minilm: ["1", "true", "yes"].includes((process.env["MEGACOMPACT_MINILM"] ?? "").trim().toLowerCase()),
         ...enc1aStatusFields(ctx.stateDir), ...enc1bStatusFields(ctx.stateDir),
         ...enc2BudgetStatusFields(ctx.stateDir),
+        ...(enc2a.guide !== null ? { nativeOrtInstallGuide: enc2a.guide } : {}),
+        ...(enc2a.installedVersion !== null ? { nativeOrtInstalledVersion: enc2a.installedVersion } : {}),
     };
+    // ENC-2b (flag-gated, additive): the native qualification retest fields. The
+    // retest loads the on-disk binding in-process (bounded, never a fetch), so
+    // readEnc2bRetest is async; the handler returns true synchronously for the
+    // dispatch and writes the response after the await. Flag-off/none mutates
+    // the body additively and stays byte-identical to the ENC-2a-era shape.
     // guardrails-allow PREVENT-PI-004: loopback dashboard response (local)
-    res.writeHead(200, { "Content-Type": "application/json" });
-    res.end(JSON.stringify(body));
+    readEnc2bRetest(ctx.stateDir).then((enc2b) => {
+        const body = { ...base, ...enc2b };
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify(body));
+    }).catch(() => {
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify(base));
+    });
     return true;
 }
 // ---------------------------------------------------------------------------
@@ -174,10 +194,52 @@ export function handleSetupConfigure(req, res, ctx) {
             return;
         }
         const body = parsed.value;
+        // ENC-2a guide-request key (flag-gated, additive): `false` → 400 (an
+        // operator-driven no-op — this sprint conveys the GUIDE only, no server
+        // execution), `true` → 200 + the guide echoed (still no execution; the
+        // execute path is ENC-2c). Flag-off: enc2aGuideRequest returns null so the
+        // key falls through unrecognized (byte-identical ENC-1b-era predecessor).
+        const guideReq = enc2aGuideRequest(body);
+        // guardrails-allow PREVENT-PI-004: loopback dashboard response (local)
+        if (guideReq !== null && guideReq.status === 400) {
+            res.writeHead(400, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "guide_rejected_false_nothing_to_do" }));
+            return;
+        }
         // ENC-1a (flag-gated, additive): a pure external-embedder configure
         // (new keys, no embedder selection) is handled by the sibling writer.
         // Flag-off = the keys are simply not recognized, falling through to the
         // pre-ENC-1a embedder path below (byte-identical predecessor).
+        if (guideReq !== null && guideReq.status === 200) {
+            // guardrails-allow PREVENT-PI-004: loopback dashboard response (local)
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ nativeOrtInstallGuide: readEnc2aGuide(ctx.stateDir).guide }));
+            return;
+        }
+        // ENC-2b retest-action key (flag-gated, additive): `false` → 400 (an
+        // operator-driven no-op — nothing to retest), `true` → run the bounded
+        // retest synchronously and return the fresh result. Flag-off: the key
+        // falls through unrecognized (byte-identical ENC-2a-era predecessor).
+        // The retest never fetches — the binding is on disk from the ENC-2a
+        // install (PREVENT-PI-004 clean).
+        const retestReq = enc2bRetestRequest(body);
+        // guardrails-allow PREVENT-PI-004: loopback dashboard response (local)
+        if (retestReq === "reject") {
+            res.writeHead(400, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "retest_rejected_false_nothing_to_do" }));
+            return;
+        }
+        if (retestReq === "run") {
+            // guardrails-allow PREVENT-PI-004: loopback dashboard response (local)
+            runEnc2bRetest(ctx.stateDir).then((fresh) => {
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ nativeOrtRetestResult: fresh }));
+            }).catch(() => {
+                res.writeHead(500, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: "retest_failed" }));
+            });
+            return;
+        }
         if (tryEnc1aConfigure(body, res, ctx))
             return;
         if (tryEnc1bConfigure(body, res, ctx))

package/dist/src/config/vector-cortex-enc2a.js

@@ -0,0 +1,35 @@
+/**
+ * config/vector-cortex-enc2a.ts — ENC-2a native onnxruntime install-guide flag
+ * (operator run-script assist).
+ *
+ * Sibling of vector-cortex-enc1a.ts / vector-cortex-enc1b.ts /
+ * vector-cortex-enc2budget.ts so vector-cortex.ts stays under the 300-line soft
+ * limit (soft-as-hard gate). vector-cortex.ts re-exports the flag below and
+ * root src/config.ts re-exports it, so no consumer import path changes.
+ *
+ * ENC-2a, when the operator opted into the native backend
+ * (`MEGACOMPACT_ENCODER_NATIVE=1`) but `encoderBackend` is still `"wasm"`
+ * (onnxruntime-node absent / not yet installed), surfaces an "Encoder Runtime
+ * Install" card on the Cortex sub-tab with copy-paste operator commands: the
+ * install + restart + verify steps built ONLY from the artifacts-module
+ * constants (`src/vector-cortex/encoder/native-install-artifacts.ts`) — never
+ * an inline registry URL or hash in the route (PREVENT-PI-004). The guide
+ * renders only on an installable host platform; the ENC-0e darwin-x64 demotion
+ * sentinel keeps it absent on an Intel Mac (no native binding upstream).
+ *
+ * `MEGACOMPACT_ENC_2A=0` disables: no guide fields, no install card, no absent
+ * read — byte-identical to the ENC-1b predecessor. The flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS
+ * — see `feedback_dashboard-flags-toggleable` memory).
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * ENC-2a — operator run-script assist (dashboard install guide for the
+ * onnxruntime-node native binding). Default ON. `MEGACOMPACT_ENC_2A=0` disables
+ * and is byte-identical to the ENC-1b predecessor: no guide/absent fields, no
+ * install card. This flag MUST also be a dashboard SETTINGS toggle (visible in
+ * config UI, never in EXCLUDED_SETTINGS).
+ */
+export const ENC_2A_ENABLED = () => sprintFlag("MEGACOMPACT_ENC_2A");

package/dist/src/config/vector-cortex-enc2b.js

@@ -0,0 +1,36 @@
+/**
+ * config/vector-cortex-enc2b.ts — ENC-2b native onnxruntime qualification
+ * retest flag.
+ *
+ * Sibling of vector-cortex-enc2a.ts / vector-cortex-enc2budget.ts so
+ * vector-cortex.ts stays under the 300-line soft limit (soft-as-hard gate).
+ * vector-cortex.ts re-exports the flag below and root src/config.ts re-exports
+ * it, so no consumer import path changes.
+ *
+ * ENC-2b re-probes and re-qualifies the installed native onnxruntime binding
+ * (`onnxruntime-node` in `~/.pi/mega-compact/native-ort/`, operator-installed
+ * via the ENC-2a guide). When the operator installs the binding the read path
+ * does not automatically re-evaluate the qualification verdict; this sprint
+ * delivers a reader-only retest that loads the LOCAL on-disk binding, runs a
+ * bounded warmup + p95 probe against it, measures RSS, computes a fresh
+ * qualification verdict against the ENC-0f p95 budget + the operator
+ * install-budget, and surfaces it on the Setup Cortex sub-tab and the GET
+ * `/api/setup-status` response.
+ *
+ * `MEGACOMPACT_ENC_2B=0` disables: the GET omits both new retest fields, the
+ * POST ignores the retest-request key, the Cortex sub-tab renders no retest
+ * card — byte-identical to the ENC-2a predecessor. The flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS
+ * — see `feedback_dashboard-flags-toggleable` memory).
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * ENC-2b — native onnxruntime qualification retest (detect installed binding,
+ * re-probe p95/RSS, re-qualify). Default ON. `MEGACOMPACT_ENC_2B=0` disables and
+ * is byte-identical to the ENC-2a predecessor: no retest GET fields, no retest
+ * POST branch, no retest card. This flag MUST also be a dashboard SETTINGS
+ * toggle (visible in config UI, never in EXCLUDED_SETTINGS).
+ */
+export const ENC_2B_ENABLED = () => sprintFlag("MEGACOMPACT_ENC_2B");

package/dist/src/config/vector-cortex.js

@@ -50,5 +50,9 @@ export { DASH_0D_ENABLED } from "./vector-cortex-dash-0d.js";
 export { ENC_1A_ENABLED } from "./vector-cortex-enc1a.js";
 export { ENC_1B_ENABLED, ENC_1B_MAX_EMBEDDING_DIM, ENC_1B_EMBEDDING_DIM_ENV, ENC_1B_EMBEDDING_HEADERS_ENV, ENC_1B_ALLOW_REMOTE_EMBEDDER_ENV, ENC_1B_ENCODER_NATIVE_ENV, } from "./vector-cortex-enc1b.js";
 export { ENC_2BUDGET_ENABLED, ENC_2BUDGET_NATIVE_ORT_BUDGET_ENV, ENC_2BUDGET_MAX_MIB, ENC_2BUDGET_DEFAULT_MIB, } from "./vector-cortex-enc2budget.js";
+// ENC-2a native onnxruntime install-guide flag extracted to vector-cortex-enc2a.ts.
+export { ENC_2A_ENABLED } from "./vector-cortex-enc2a.js";
+// ENC-2b native onnxruntime qualification-retest flag extracted to vector-cortex-enc2b.ts.
+export { ENC_2B_ENABLED } from "./vector-cortex-enc2b.js";
 // Breaker constants (TRIAD_RESILIENCE.md §breaker) extracted to vector-cortex-breakers.ts.
 export { BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./vector-cortex-breakers.js";

package/dist/src/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, ML5E_ENABLED, DEDUP_ATTR_ENABLED, ENC_0A_ENABLED, ENC_0B_ENABLED, ENC_0C_ENABLED, ENC_0D_ENABLED, ENC_0E_ENABLED, ENC_0F_ENABLED, ENC_0G_ENABLED, ENC_1A_ENABLED, ENC_1B_ENABLED, ENC_2BUDGET_ENABLED, ENC_2BUDGET_NATIVE_ORT_BUDGET_ENV, ENC_2BUDGET_MAX_MIB, ENC_2BUDGET_DEFAULT_MIB, COSINE_FP_BENCH_ENABLED, COSINE_FP_REAL_ENABLED, REPO_CORPUS_ENABLED, DASH_0A_ENABLED, DASH_0B_ENABLED, DASH_0C_ENABLED, DASH_0D_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, ML5E_ENABLED, DEDUP_ATTR_ENABLED, ENC_0A_ENABLED, ENC_0B_ENABLED, ENC_0C_ENABLED, ENC_0D_ENABLED, ENC_0E_ENABLED, ENC_0F_ENABLED, ENC_0G_ENABLED, ENC_1A_ENABLED, ENC_1B_ENABLED, ENC_2BUDGET_ENABLED, ENC_2BUDGET_NATIVE_ORT_BUDGET_ENV, ENC_2BUDGET_MAX_MIB, ENC_2BUDGET_DEFAULT_MIB, ENC_2A_ENABLED, ENC_2B_ENABLED, COSINE_FP_BENCH_ENABLED, COSINE_FP_REAL_ENABLED, REPO_CORPUS_ENABLED, DASH_0A_ENABLED, DASH_0B_ENABLED, DASH_0C_ENABLED, DASH_0D_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/src/vector-cortex/encoder/native-install-artifacts.js

@@ -0,0 +1,43 @@
+/**
+ * vector-cortex/encoder/native-install-artifacts.ts — ENC-2a native
+ * onnxruntime install-guide constants (PURE data module).
+ *
+ * Single source of truth for the operator's native-backend install guide
+ * (`onnxruntime-node`, the sole onnxruntime Node.js binding this extension's
+ * native path uses). The guide rendered by
+ * `extensions/dashboard-server/routes-setup-enc2a.ts` and the operator script
+ * `scripts/encoder/install-native-ort.mjs` build their commands/URLs ONLY from
+ * these scalars — never an inline registry URL or literal hash in the route or
+ * extension runtime (PREVENT-PI-004: the registry tarball URL is derived by
+ * callers from `NATIVE_ORT_PACKAGE` + "@" + `NATIVE_ORT_VERSION`, so no network
+ * path and no literal registry URL or scheme appears in src/).
+ *
+ * Package facts (verified, not invented):
+ *  - onnxruntime-node publishes ONE monolithic ~100MB npm tarball — not
+ *    per-platform `optionalDependencies` — so a single
+ *    `NATIVE_ORT_TARBALL_SHA256` pins the whole artifact for every host.
+ *  - darwin-x64 has NO native binding (arm64-only upstream since 1.17), so the
+ *    guide stays absent on an Intel Mac (the ENC-0e demotion sentinel).
+ *  - `NATIVE_ORT_TARBALL_SHA256` was computed from TWO independent downloads of
+ *    the 1.27.0 tarball (real, cross-checked, not guessed).
+ *
+ * Pi-agnostic, dependency-free, pure data — zero I/O, zero network
+ * (PREVENT-PI-004 / PREVENT-011).
+ */
+/** onnxruntime-node version the guide installs (real published version). */
+export const NATIVE_ORT_VERSION = "1.27.0";
+/** onnxruntime-node npm package name (the native onnxruntime binding). */
+export const NATIVE_ORT_PACKAGE = "onnxruntime-node";
+/** SHA-256 of the onnxruntime-node@1.27.0 npm tarball (one sha for all hosts).
+ *  Computed from TWO independent tarball downloads; lowercase hex, 64 chars. */
+export const NATIVE_ORT_TARBALL_SHA256 = "c3779c01c59832f8c03e2c392ac3af10bf08579f1822e8b1c63cc451edb302a2";
+/**
+ * Platforms for which an operator install-guide can be rendered (native
+ * binding exists upstream). darwin-x64 is excluded — it has NO native binding.
+ */
+export const NATIVE_ORT_INSTALLABLE_PLATFORMS = [
+    "linux-x64",
+    "linux-arm64",
+    "darwin-arm64",
+    "win32-x64",
+];