From 554ee2aecbb32ad80703fbe3edb4c21d6271fe8e Mon Sep 17 00:00:00 2001
From: mrsibe <mrsibe@qq.com>
Date: Wed, 30 Sep 2026 13:40:20 +0800
Subject: [PATCH] deps(better-sqlite3): move to the N-API 13.x line and stop
 ABI rebuilds

better-sqlite3 12.11.1 -> 13.0.3.

Why this is not just a version bump: 12.x ships one ABI-specific binary per
Electron version and downloads it with prebuild-install. Its published prebuilds
stop at electron-v146 (Electron 42). Electron 44 is ABI 149, so
`electron-builder install-app-deps` could not find a prebuild and fell back to
`node-gyp rebuild --build-from-source`, which needs Python + MSVC. CI runners and
Linux have that toolchain, so every CI check passed; a plain Windows dev machine
did not, and `npm install` failed with "Could not find any Python installation to
use".

13.x is N-API and ships a prebuild per platform/arch inside the npm package
itself (prebuilds/win32-x64.node, darwin-arm64.node, ...), with no install script.
N-API binaries are stable across Node and Electron versions, so there is nothing
left to rebuild.

Changes:

- `better-sqlite3` -> `^13.0.3`.
- Removed the `postinstall` hook. `electron-builder install-app-deps` ignores
  `npmRebuild` and always rebuilds; with every native dependency now N-API that
  rebuild can only replace a correct prebuild with a locally compiled one.
- `npmRebuild: false` in electron-builder.yml, with the reasoning recorded there.
  This also means packaging no longer needs a C++ toolchain.
- release.yml asserted that `better_sqlite3.node` was unpacked. That filename no
  longer exists (13.x uses `prebuilds/<platform>-<arch>.node`), so the check
  would have failed the first macOS release. It now asserts a
  `better-sqlite3/prebuilds/*.node` file instead.
- CONTRIBUTING: the native-toolchain requirement is gone.
- docs/dependency-audit.md: better-sqlite3 is no longer "rebuilt against the
  Electron ABI and cannot load in plain Node"; SQLite is now 3.53.4, not 3.53.2.

Verified on Linux x64 (WSL2):

- `npm install` - better-sqlite3 13.0.3 with prebuilds, and no `build/`
  directory, i.e. nothing was compiled.
- `npm run typecheck` - clean; `npm test` - 472/472 pass.
- `npm run build:unpack` - "skipped dependencies rebuild reason=npmRebuild is set
  to false"; the packaged app carries every platform's prebuild.
- `npm run smoke:packaged` - 29 checks pass, better-sqlite3 opens the database
  from the N-API prebuild, FTS5 + bm25() rank, sqlite-vec v0.1.9 loads.

Not verified locally, left to CI: macOS arm64 and Windows packaging. The one
thing to watch is cross-arch. Rebuilding could never fetch sharp's or
@napi-rs/canvas's target-arch prebuilds anyway, so `npmRebuild: false` does not
make that worse; better-sqlite3 now carries every platform/arch itself, and the
release matrix builds each artifact on its own architecture.

Separately noticed while measuring: the packaged onnxruntime-node is ~416 MB, of
which ~260 MB is `libonnxruntime_providers_cuda.so`. That predates this change
(it is what `npm ci` installs) and is the "ships binaries for the wrong platform"
follow-up already recorded in the audit, only larger.
---
 .github/workflows/release.yml |  11 +-
 .github/workflows/verify.yml  |   2 +-
 CONTRIBUTING.md               |   9 +-
 build/entitlements.mac.plist  |   3 +-
 docs/dependency-audit.md      |  28 ++-
 electron-builder.yml          |  27 ++-
 package-lock.json             | 324 +++-------------------------------
 package.json                  |   6 +-
 src/main/smokeTest.ts         |   3 +-
 9 files changed, 85 insertions(+), 328 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d92a842..aa46c6d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -176,7 +176,7 @@ jobs:
 
       # Inspect the artifact we just shipped. This is the check that was missing
       # when v1.2.0 went out ad-hoc signed, hardened-runtime, and unable to load
-      # better_sqlite3.node.
+      # its native module.
       - name: Verify macOS artifact (signature, entitlements, native modules)
         if: matrix.os == 'macos-latest'
         run: |
@@ -220,7 +220,7 @@ jobs:
             echo "::warning title=Unsigned macOS build::No identity was available, so the bundle carries no entitlements. This build is not notarized and cannot be launched on Apple Silicon until the user clears the quarantine flag; README.md documents the command."
           else
             echo "::error::shipped app is missing com.apple.security.cs.disable-library-validation."
-            echo "::error::It will crash on launch when the main process loads better_sqlite3.node."
+            echo "::error::It will crash on launch when the main process loads better-sqlite3's native module."
             exit 1
           fi
 
@@ -236,8 +236,11 @@ jobs:
             echo
           done
 
-          if ! echo "$NATIVES" | grep -q 'better_sqlite3.node'; then
-            echo "::error::better_sqlite3.node was not unpacked; the database will fail to open"
+          # better-sqlite3 >= 13 is N-API and ships its binary as
+          # `prebuilds/<platform>-<arch>.node`, not the old
+          # `build/Release/better_sqlite3.node`, and nothing rebuilds it.
+          if ! echo "$NATIVES" | grep -qE 'better-sqlite3/prebuilds/.+\.node'; then
+            echo "::error::a better-sqlite3 prebuild was not unpacked; the database will fail to open"
             exit 1
           fi
 
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 70c1f6a..03f1843 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -10,7 +10,7 @@ name: Verify
 # it, so it is the step that actually catches those. It runs on all three
 # platforms because the native addons are arch-specific:
 #
-#   better_sqlite3.node, vec0.so/.dylib/.dll, skia.*.node
+#   better-sqlite3 (prebuilds/<platform>-<arch>.node), vec0.so/.dylib/.dll, skia.*.node
 #
 # `lint` is deliberately not part of this gate: it reports no errors but still
 # carries a large pre-existing `@typescript-eslint/no-explicit-any` baseline,
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index a87f6b9..367398a 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -28,10 +28,11 @@ Requirements:
   `electron-builder` is built around npm's `node_modules` layout and silently
   drops transitive dependencies under pnpm. See the `//dependencies` comment in
   `package.json` for the full story.
-- A working native build toolchain. `npm install` runs
-  `electron-builder install-app-deps` as a `postinstall` step, which compiles
-  the native addons (`better-sqlite3`, `sqlite-vec`), so the first install
-  takes a while.
+- **No native build toolchain.** Every native dependency is N-API and ships
+  prebuilt binaries, most of them inside the npm package itself
+  (`better-sqlite3` >= 13 carries `prebuilds/` for every supported
+  platform/arch), so `npm install` compiles nothing and `npmRebuild` is off.
+  See the `npmRebuild` note in `electron-builder.yml`.
 
 ```bash
 git clone https://github.com/MrSibe/KnowNote.git
diff --git a/build/entitlements.mac.plist b/build/entitlements.mac.plist
index 96f428d..3cf8e87 100644
--- a/build/entitlements.mac.plist
+++ b/build/entitlements.mac.plist
@@ -10,7 +10,8 @@
     <true/>
     <!--
       REQUIRED. The main process dlopen()s third-party prebuilt native modules
-      (better_sqlite3.node, vec0.dylib, skia.darwin-arm64.node) that are not
+      (better-sqlite3's prebuilds/darwin-arm64.node, vec0.dylib,
+      skia.darwin-arm64.node) that are not
       signed by the same team as this app. Hardened Runtime enforces that every
       loaded library shares the process Team ID, so without this entitlement the
       app aborts at launch with:
diff --git a/docs/dependency-audit.md b/docs/dependency-audit.md
index c2215d9..b8d2dc7 100644
--- a/docs/dependency-audit.md
+++ b/docs/dependency-audit.md
@@ -50,9 +50,10 @@ Consequences that matter:
    `sharp` and `@mixmark-io/domino` are transitive dependencies of `@huggingface/transformers` and
    `turndown` respectively that are **deliberately promoted so they ship**; neither is imported by
    this repository's source.
-3. `better-sqlite3` is rebuilt against the Electron ABI during packaging. It **cannot be loaded
-   from plain Node** (`require('better-sqlite3')` fails), so any question about the shipped SQLite
-   has to be answered inside Electron — see the FTS5 section.
+3. `better-sqlite3` (>= 13) is N-API and ships a prebuild per platform/arch inside its own npm
+   package, so nothing compiles it and the same binary loads in plain Node and in Electron.
+   `npmRebuild` is off in `electron-builder.yml` and there is no `postinstall` rebuild step;
+   see the `npmRebuild` note there for why that is now the correct setting.
 
 ## 1. `sqlite-vec` — KEEP
 
@@ -160,9 +161,18 @@ harness runs real retrieval against a real model, so this is exercised rather th
 | `onnxruntime-node`     | **155 MB**, of which **152.7 MB is binaries** |
 | `@napi-rs`             | 32 MB                                         |
 | `@img` (sharp/libvips) | 19 MB                                         |
-| `better-sqlite3`       | 13 MB                                         |
+| `better-sqlite3`       | 27 MB                                         |
 | `sqlite-vec`           | 156 KB                                        |
 
+`better-sqlite3` grew from 13 MB to 27 MB with 13.x: it is N-API now and ships a prebuild for
+**every** supported platform/arch inside the npm package instead of one ABI-specific binary. That is
+the trade that removes the Electron-ABI rebuild, so the size is expected, not a regression.
+
+The `onnxruntime-node` row above is stale and predates the payload this build now carries:
+`libonnxruntime_providers_cuda.so` alone is ~260 MB on linux/x64, taking the package to ~416 MB
+packed. That is the same "ships binaries for the wrong platform" problem this section already
+describes, only larger, and pruning it remains its own follow-up.
+
 Of the 152.7 MB of onnxruntime binaries, only `linux/x64/libonnxruntime.so.1` (**43.7 MB**) is
 usable by this build. The remaining **~109 MB (72%) is for other platforms and architectures**:
 
@@ -192,8 +202,10 @@ in `dependencies`.
 
 #77 wants BM25/hybrid retrieval, and SQLite's BM25 lives in the FTS5 module. Whether FTS5 exists is
 a property of the SQLite that `better-sqlite3` bundles, not of anything this repository compiles, so
-it had to be answered against the **shipped** build. It cannot be answered from plain Node at all:
-`better-sqlite3` is rebuilt for the Electron ABI and fails to load there.
+it had to be answered against the **shipped** build. It used to have to run inside Electron
+because `better-sqlite3` was compiled against the Electron ABI and refused to load in plain Node;
+since `better-sqlite3` 13 (N-API) the same prebuild loads in both. The check still runs in the
+packaged app, because that is the build users actually run.
 
 The check now lives in the packaged smoke test (`src/main/smokeTest.ts`) and inserts, matches and
 ranks rather than only reading a compile flag, because a flag is not proof that `MATCH` and `bm25()`
@@ -203,13 +215,13 @@ Result from `npm run build:unpack && npm run smoke:packaged`:
 
 ```text
 [SmokeTest] ok   sqlite-vec reports version v0.1.9
-[SmokeTest] ok   FTS5 is available and ranks: sqlite 3.53.2, ENABLE_FTS5 flag present,
+[SmokeTest] ok   FTS5 is available and ranks: sqlite 3.53.4, ENABLE_FTS5 flag present,
                  bm25() = -9.447852760736198e-7
 [SmokeTest] PASS - 29 checks passed
 ```
 
 **FTS5 is available: `ENABLE_FTS5` is compiled in, `MATCH` returned the expected row, and `bm25()`
-produced a usable rank on SQLite 3.53.2.** #77 therefore has no blocker from the SQLite side, and
+produced a usable rank on SQLite 3.53.4.** #77 therefore has no blocker from the SQLite side, and
 BM25/hybrid is a design choice rather than a build constraint.
 
 ## How to reproduce
diff --git a/electron-builder.yml b/electron-builder.yml
index 5f9cacc..d767690 100644
--- a/electron-builder.yml
+++ b/electron-builder.yml
@@ -91,12 +91,27 @@ appImage:
 # electron-builder >= 26.16.0. Missing *optional* dependencies (e.g. fsevents on
 # Linux/Windows) are still allowed and never fail the build.
 allowMissingDependencies: false
-# `npmRebuild` is intentionally left at its default (true) so electron-builder
-# rebuilds better-sqlite3 against the target Electron ABI and target
-# architecture while packaging. Turning it off, as this project previously did,
-# makes the shipped binary depend on whatever ABI `postinstall` happened to
-# produce on the build host, which breaks cross-arch builds such as
-# `build:mac --arm64`. The postinstall hook is kept for `dev`/`preview`.
+# Every native dependency here is N-API, so electron-builder has nothing to
+# rebuild: `better-sqlite3` (>= 13) ships a prebuild per platform/arch inside its
+# own npm package, `onnxruntime-node` ships `bin/napi-v6/<platform>/<arch>`, and
+# `sharp` / `@napi-rs/canvas` ship platform packages. N-API binaries are stable
+# across Node and Electron versions, so rebuilding cannot improve them and can
+# only replace a correct prebuild with a locally compiled one.
+#
+# Leaving this at the default (true) is what broke `npm install` on a plain
+# Windows machine once the runtime moved to Electron 44 (ABI 149): published
+# better-sqlite3 12.x prebuilds stop at ABI 146, so @electron/rebuild fell back
+# to `node-gyp rebuild --build-from-source` and demanded Python + MSVC.
+#
+# Cross-arch still works because the prebuilds are shipped for every supported
+# target: `better-sqlite3` carries darwin/linux/win32 prebuilds for x64 and
+# arm64, and `onnxruntime-node` carries every platform in one package. The
+# release matrix builds each artifact on its own architecture.
+#
+# `postinstall` no longer runs `electron-builder install-app-deps`: that command
+# ignores this flag and always rebuilds, which would reintroduce the toolchain
+# requirement for `npm install` even though nothing needs compiling.
+npmRebuild: false
 # Published as a DRAFT: electron-builder uploads the artifacts, but the release
 # only becomes public after every platform built and the macOS artifact passed
 # the verification step in .github/workflows/release.yml.
diff --git a/package-lock.json b/package-lock.json
index c3fd15c..367f7f5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7,14 +7,13 @@
     "": {
       "name": "knownote",
       "version": "1.5.1",
-      "hasInstallScript": true,
       "license": "GPL-3.0",
       "dependencies": {
         "@huggingface/transformers": "^4.3.0",
         "@mixmark-io/domino": "^2.2.0",
         "@modelcontextprotocol/server": "^2.1.0",
         "anki-apkg-export": "^4.0.0",
-        "better-sqlite3": "^12.6.2",
+        "better-sqlite3": "^13.0.3",
         "jsdom": "^27.4.0",
         "onnxruntime-node": "^1.30.0",
         "pdfjs-dist": "^6.3.289",
@@ -7428,6 +7427,7 @@
       "version": "1.5.1",
       "resolved": "https://registry.npmmirror.com/base64-js/-/base64-js-1.5.1.tgz",
       "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
+      "dev": true,
       "funding": [
         {
           "type": "github",
@@ -7458,17 +7458,15 @@
       }
     },
     "node_modules/better-sqlite3": {
-      "version": "12.11.1",
-      "resolved": "https://registry.npmmirror.com/better-sqlite3/-/better-sqlite3-12.11.1.tgz",
-      "integrity": "sha512-dq9AtApgg5PGFtBzPFSBl3HZQjHok5gaQCM6zh2Yk0aSmDCs1CbnVI8/HgASQkNKsWFpseIO9beg5xxpYhbIfA==",
-      "hasInstallScript": true,
+      "version": "13.0.3",
+      "resolved": "https://registry.npmmirror.com/better-sqlite3/-/better-sqlite3-13.0.3.tgz",
+      "integrity": "sha512-RbOBxmLBG8uvFUc15X9+9SFemKcQ0WBuISBVkpuiaUB2qblC8UWlHEjdWVoZ8AdhSwmoEgsiXKfopX0CQxaACQ==",
       "license": "MIT",
       "dependencies": {
-        "bindings": "^1.5.0",
-        "prebuild-install": "^7.1.1"
+        "node-addon-api": "^8.0.0"
       },
       "engines": {
-        "node": "20.x || 22.x || 23.x || 24.x || 25.x || 26.x"
+        "node": ">=22"
       }
     },
     "node_modules/bidi-js": {
@@ -7480,40 +7478,6 @@
         "require-from-string": "^2.0.2"
       }
     },
-    "node_modules/bindings": {
-      "version": "1.5.0",
-      "resolved": "https://registry.npmmirror.com/bindings/-/bindings-1.5.0.tgz",
-      "integrity": "sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==",
-      "license": "MIT",
-      "dependencies": {
-        "file-uri-to-path": "1.0.0"
-      }
-    },
-    "node_modules/bl": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmmirror.com/bl/-/bl-4.1.0.tgz",
-      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
-      "license": "MIT",
-      "dependencies": {
-        "buffer": "^5.5.0",
-        "inherits": "^2.0.4",
-        "readable-stream": "^3.4.0"
-      }
-    },
-    "node_modules/bl/node_modules/readable-stream": {
-      "version": "3.6.2",
-      "resolved": "https://registry.npmmirror.com/readable-stream/-/readable-stream-3.6.2.tgz",
-      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
-      "license": "MIT",
-      "dependencies": {
-        "inherits": "^2.0.3",
-        "string_decoder": "^1.1.1",
-        "util-deprecate": "^1.0.1"
-      },
-      "engines": {
-        "node": ">= 6"
-      }
-    },
     "node_modules/bluebird": {
       "version": "3.4.7",
       "resolved": "https://registry.npmmirror.com/bluebird/-/bluebird-3.4.7.tgz",
@@ -7584,30 +7548,6 @@
         "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
       }
     },
-    "node_modules/buffer": {
-      "version": "5.7.1",
-      "resolved": "https://registry.npmmirror.com/buffer/-/buffer-5.7.1.tgz",
-      "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "base64-js": "^1.3.1",
-        "ieee754": "^1.1.13"
-      }
-    },
     "node_modules/buffer-from": {
       "version": "1.1.2",
       "resolved": "https://registry.npmmirror.com/buffer-from/-/buffer-from-1.1.2.tgz",
@@ -8605,6 +8545,7 @@
       "version": "6.0.0",
       "resolved": "https://registry.npmmirror.com/decompress-response/-/decompress-response-6.0.0.tgz",
       "integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "mimic-response": "^3.1.0"
@@ -8620,6 +8561,7 @@
       "version": "3.1.0",
       "resolved": "https://registry.npmmirror.com/mimic-response/-/mimic-response-3.1.0.tgz",
       "integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=10"
@@ -8628,15 +8570,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/deep-extend": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmmirror.com/deep-extend/-/deep-extend-0.6.0.tgz",
-      "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=4.0.0"
-      }
-    },
     "node_modules/deep-is": {
       "version": "0.1.4",
       "resolved": "https://registry.npmmirror.com/deep-is/-/deep-is-0.1.4.tgz",
@@ -9524,6 +9457,7 @@
       "version": "1.4.5",
       "resolved": "https://registry.npmmirror.com/end-of-stream/-/end-of-stream-1.4.5.tgz",
       "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "once": "^1.4.0"
@@ -10259,15 +10193,6 @@
         "node": ">=18.0.0"
       }
     },
-    "node_modules/expand-template": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmmirror.com/expand-template/-/expand-template-2.0.3.tgz",
-      "integrity": "sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==",
-      "license": "(MIT OR WTFPL)",
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/exponential-backoff": {
       "version": "3.1.3",
       "resolved": "https://registry.npmmirror.com/exponential-backoff/-/exponential-backoff-3.1.3.tgz",
@@ -10386,12 +10311,6 @@
         "url": "https://github.com/sindresorhus/file-type?sponsor=1"
       }
     },
-    "node_modules/file-uri-to-path": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmmirror.com/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz",
-      "integrity": "sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==",
-      "license": "MIT"
-    },
     "node_modules/filelist": {
       "version": "1.0.6",
       "resolved": "https://registry.npmmirror.com/filelist/-/filelist-1.0.6.tgz",
@@ -10523,12 +10442,6 @@
         "url": "https://github.com/sponsors/rawify"
       }
     },
-    "node_modules/fs-constants": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmmirror.com/fs-constants/-/fs-constants-1.0.0.tgz",
-      "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==",
-      "license": "MIT"
-    },
     "node_modules/fs.realpath": {
       "version": "1.0.0",
       "resolved": "https://registry.npmmirror.com/fs.realpath/-/fs.realpath-1.0.0.tgz",
@@ -10721,12 +10634,6 @@
         "url": "https://github.com/privatenumber/get-tsconfig?sponsor=1"
       }
     },
-    "node_modules/github-from-package": {
-      "version": "0.0.0",
-      "resolved": "https://registry.npmmirror.com/github-from-package/-/github-from-package-0.0.0.tgz",
-      "integrity": "sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==",
-      "license": "MIT"
-    },
     "node_modules/glob": {
       "version": "7.2.3",
       "resolved": "https://registry.npmmirror.com/glob/-/glob-7.2.3.tgz",
@@ -11416,6 +11323,7 @@
       "version": "1.2.1",
       "resolved": "https://registry.npmmirror.com/ieee754/-/ieee754-1.2.1.tgz",
       "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==",
+      "dev": true,
       "funding": [
         {
           "type": "github",
@@ -11493,12 +11401,6 @@
       "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
       "license": "ISC"
     },
-    "node_modules/ini": {
-      "version": "1.3.8",
-      "resolved": "https://registry.npmmirror.com/ini/-/ini-1.3.8.tgz",
-      "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==",
-      "license": "ISC"
-    },
     "node_modules/inline-style-parser": {
       "version": "0.2.7",
       "resolved": "https://registry.npmmirror.com/inline-style-parser/-/inline-style-parser-0.2.7.tgz",
@@ -13934,6 +13836,7 @@
       "version": "1.2.8",
       "resolved": "https://registry.npmmirror.com/minimist/-/minimist-1.2.8.tgz",
       "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==",
+      "dev": true,
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/ljharb"
@@ -13976,12 +13879,6 @@
         "mkdirp": "bin/cmd.js"
       }
     },
-    "node_modules/mkdirp-classic": {
-      "version": "0.5.3",
-      "resolved": "https://registry.npmmirror.com/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz",
-      "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==",
-      "license": "MIT"
-    },
     "node_modules/ms": {
       "version": "2.1.3",
       "resolved": "https://registry.npmmirror.com/ms/-/ms-2.1.3.tgz",
@@ -14007,12 +13904,6 @@
         "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
       }
     },
-    "node_modules/napi-build-utils": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmmirror.com/napi-build-utils/-/napi-build-utils-1.0.2.tgz",
-      "integrity": "sha512-ONmRUqK7zj7DWX0D9ADe03wbwOBZxNAfF20PlGfCWQcD3+/MakShIHrMqx9YwPTfxDdF1zLeL+RGZiR9kGMLdg==",
-      "license": "MIT"
-    },
     "node_modules/natural-compare": {
       "version": "1.4.0",
       "resolved": "https://registry.npmmirror.com/natural-compare/-/natural-compare-1.4.0.tgz",
@@ -14057,6 +13948,15 @@
         "node": ">=10"
       }
     },
+    "node_modules/node-addon-api": {
+      "version": "8.9.2",
+      "resolved": "https://registry.npmmirror.com/node-addon-api/-/node-addon-api-8.9.2.tgz",
+      "integrity": "sha512-VijLXbi3UACN69I0JVXJsX4tjACjNoQDgv2gTF6sx2wWEi8tkSg2eX8p5gSIFi8z2+DL3oHmY6OyKce38SDolg==",
+      "license": "MIT",
+      "engines": {
+        "node": "^18 || ^20 || >= 21"
+      }
+    },
     "node_modules/node-api-version": {
       "version": "0.2.1",
       "resolved": "https://registry.npmmirror.com/node-api-version/-/node-api-version-0.2.1.tgz",
@@ -14661,6 +14561,7 @@
       "version": "1.4.0",
       "resolved": "https://registry.npmmirror.com/once/-/once-1.4.0.tgz",
       "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+      "dev": true,
       "license": "ISC",
       "dependencies": {
         "wrappy": "1"
@@ -15213,56 +15114,6 @@
         "node": "^12.20.0 || >=14"
       }
     },
-    "node_modules/prebuild-install": {
-      "version": "7.1.2",
-      "resolved": "https://registry.npmmirror.com/prebuild-install/-/prebuild-install-7.1.2.tgz",
-      "integrity": "sha512-UnNke3IQb6sgarcZIDU3gbMeTp/9SSU1DAIkil7PrqG1vZlBtY5msYccSKSHDqa3hNg436IXK+SNImReuA1wEQ==",
-      "license": "MIT",
-      "dependencies": {
-        "detect-libc": "^2.0.0",
-        "expand-template": "^2.0.3",
-        "github-from-package": "0.0.0",
-        "minimist": "^1.2.3",
-        "mkdirp-classic": "^0.5.3",
-        "napi-build-utils": "^1.0.1",
-        "node-abi": "^3.3.0",
-        "pump": "^3.0.0",
-        "rc": "^1.2.7",
-        "simple-get": "^4.0.0",
-        "tar-fs": "^2.0.0",
-        "tunnel-agent": "^0.6.0"
-      },
-      "bin": {
-        "prebuild-install": "bin.js"
-      },
-      "engines": {
-        "node": ">=10"
-      }
-    },
-    "node_modules/prebuild-install/node_modules/node-abi": {
-      "version": "3.96.0",
-      "resolved": "https://registry.npmmirror.com/node-abi/-/node-abi-3.96.0.tgz",
-      "integrity": "sha512-rebQ/lz7i0EkoLzUVSrKRzA69zMkwLp95kKMWoMDkkM00Suxz0D7zEQPwRml5fQum24mj7bPvmlgLAmu2JCiYg==",
-      "license": "MIT",
-      "dependencies": {
-        "semver": "^7.3.5"
-      },
-      "engines": {
-        "node": ">=10"
-      }
-    },
-    "node_modules/prebuild-install/node_modules/semver": {
-      "version": "7.8.5",
-      "resolved": "https://registry.npmmirror.com/semver/-/semver-7.8.5.tgz",
-      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
-      "license": "ISC",
-      "bin": {
-        "semver": "bin/semver.js"
-      },
-      "engines": {
-        "node": ">=10"
-      }
-    },
     "node_modules/prelude-ls": {
       "version": "1.2.1",
       "resolved": "https://registry.npmmirror.com/prelude-ls/-/prelude-ls-1.2.1.tgz",
@@ -15603,6 +15454,7 @@
       "version": "3.0.4",
       "resolved": "https://registry.npmmirror.com/pump/-/pump-3.0.4.tgz",
       "integrity": "sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "end-of-stream": "^1.1.0",
@@ -15661,30 +15513,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/rc": {
-      "version": "1.2.8",
-      "resolved": "https://registry.npmmirror.com/rc/-/rc-1.2.8.tgz",
-      "integrity": "sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==",
-      "license": "(BSD-2-Clause OR MIT OR Apache-2.0)",
-      "dependencies": {
-        "deep-extend": "^0.6.0",
-        "ini": "~1.3.0",
-        "minimist": "^1.2.0",
-        "strip-json-comments": "~2.0.1"
-      },
-      "bin": {
-        "rc": "cli.js"
-      }
-    },
-    "node_modules/rc/node_modules/strip-json-comments": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmmirror.com/strip-json-comments/-/strip-json-comments-2.0.1.tgz",
-      "integrity": "sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/react": {
       "version": "19.3.0",
       "resolved": "https://registry.npmmirror.com/react/-/react-19.3.0.tgz",
@@ -16807,51 +16635,6 @@
       "dev": true,
       "license": "ISC"
     },
-    "node_modules/simple-concat": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmmirror.com/simple-concat/-/simple-concat-1.0.1.tgz",
-      "integrity": "sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "MIT"
-    },
-    "node_modules/simple-get": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmmirror.com/simple-get/-/simple-get-4.0.1.tgz",
-      "integrity": "sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "decompress-response": "^6.0.0",
-        "once": "^1.3.1",
-        "simple-concat": "^1.0.0"
-      }
-    },
     "node_modules/simple-update-notifier": {
       "version": "2.0.0",
       "resolved": "https://registry.npmmirror.com/simple-update-notifier/-/simple-update-notifier-2.0.0.tgz",
@@ -17388,54 +17171,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/tar-fs": {
-      "version": "2.1.5",
-      "resolved": "https://registry.npmmirror.com/tar-fs/-/tar-fs-2.1.5.tgz",
-      "integrity": "sha512-OboTd8mmMhZDNPV+UjQcK9yKAatXu2aJ+r1w4im1Otd4M4fl2hwvdoXUxIYHFTHWK/3y3FarBP70v3vwmGlOxw==",
-      "license": "MIT",
-      "dependencies": {
-        "chownr": "^1.1.1",
-        "mkdirp-classic": "^0.5.2",
-        "pump": "^3.0.0",
-        "tar-stream": "^2.1.4"
-      }
-    },
-    "node_modules/tar-fs/node_modules/chownr": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmmirror.com/chownr/-/chownr-1.1.4.tgz",
-      "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==",
-      "license": "ISC"
-    },
-    "node_modules/tar-stream": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmmirror.com/tar-stream/-/tar-stream-2.2.0.tgz",
-      "integrity": "sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==",
-      "license": "MIT",
-      "dependencies": {
-        "bl": "^4.0.3",
-        "end-of-stream": "^1.4.1",
-        "fs-constants": "^1.0.0",
-        "inherits": "^2.0.3",
-        "readable-stream": "^3.1.1"
-      },
-      "engines": {
-        "node": ">=6"
-      }
-    },
-    "node_modules/tar-stream/node_modules/readable-stream": {
-      "version": "3.6.2",
-      "resolved": "https://registry.npmmirror.com/readable-stream/-/readable-stream-3.6.2.tgz",
-      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
-      "license": "MIT",
-      "dependencies": {
-        "inherits": "^2.0.3",
-        "string_decoder": "^1.1.1",
-        "util-deprecate": "^1.0.1"
-      },
-      "engines": {
-        "node": ">= 6"
-      }
-    },
     "node_modules/tar/node_modules/yallist": {
       "version": "5.0.0",
       "resolved": "https://registry.npmmirror.com/yallist/-/yallist-5.0.0.tgz",
@@ -18208,18 +17943,6 @@
         "@esbuild/win32-x64": "0.28.2"
       }
     },
-    "node_modules/tunnel-agent": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmmirror.com/tunnel-agent/-/tunnel-agent-0.6.0.tgz",
-      "integrity": "sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "safe-buffer": "^5.0.1"
-      },
-      "engines": {
-        "node": "*"
-      }
-    },
     "node_modules/turndown": {
       "version": "7.2.4",
       "resolved": "https://registry.npmmirror.com/turndown/-/turndown-7.2.4.tgz",
@@ -19602,6 +19325,7 @@
       "version": "1.0.2",
       "resolved": "https://registry.npmmirror.com/wrappy/-/wrappy-1.0.2.tgz",
       "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
+      "dev": true,
       "license": "ISC"
     },
     "node_modules/ws": {
diff --git a/package.json b/package.json
index 964f3b5..b796563 100644
--- a/package.json
+++ b/package.json
@@ -29,7 +29,6 @@
     "start": "electron-vite preview",
     "dev": "electron-vite dev",
     "build": "npm run typecheck && electron-vite build",
-    "postinstall": "electron-builder install-app-deps",
     "build:unpack": "npm run build && electron-builder --dir",
     "smoke:packaged": "node scripts/smoke-packaged.mjs",
     "eval:prepare": "npm run build && node scripts/eval.mjs --prepare",
@@ -69,6 +68,9 @@
     "",
     "1. better-sqlite3, sqlite-vec - native addons; rollup cannot inline .node or",
     "   .dylib. Also listed in asarUnpack so they stay loadable from disk.",
+    "   better-sqlite3 >= 13 is N-API and ships its own prebuilds inside the npm",
+    "   package, so it is never compiled and needs no Electron ABI rebuild; see the",
+    "   npmRebuild note in electron-builder.yml.",
     "2. jsdom - rollup's commonjs plugin cannot parse a generated file inside its",
     "   cssstyle dependency (the source is valid JS, `node --check` accepts it), so",
     "   jsdom cannot be bundled and its whole subtree has to be collected intact.",
@@ -105,7 +107,7 @@
     "@mixmark-io/domino": "^2.2.0",
     "@modelcontextprotocol/server": "^2.1.0",
     "anki-apkg-export": "^4.0.0",
-    "better-sqlite3": "^12.6.2",
+    "better-sqlite3": "^13.0.3",
     "jsdom": "^27.4.0",
     "onnxruntime-node": "^1.30.0",
     "pdfjs-dist": "^6.3.289",
diff --git a/src/main/smokeTest.ts b/src/main/smokeTest.ts
index 70555c4..e30090a 100644
--- a/src/main/smokeTest.ts
+++ b/src/main/smokeTest.ts
@@ -353,8 +353,7 @@ async function runChecks(): Promise<string[]> {
   // #77 wants BM25 / hybrid retrieval, and SQLite's BM25 lives in the FTS5 module:
   // whether it exists is a property of the SQLite that better-sqlite3 bundles, not
   // of anything this app compiles or enables. Asking the *shipped* build is the
-  // only answer that means anything - better-sqlite3 is rebuilt against the Electron
-  // ABI, so it cannot even be loaded from plain Node to answer this off to the side.
+  // only answer that means anything.
   //
   // The check inserts and ranks rather than only reporting a compile flag: a flag is
   // not proof that MATCH and bm25() work in the build users actually run.