diff --git a/package.json b/package.json
index c3ca89d..d3ef95e 100644
--- a/package.json
+++ b/package.json
@@ -111,6 +111,7 @@
     "@radix-ui/react-tabs": "^1.1.12",
     "axios": "^1.6.0",
     "better-sqlite3": "11.10.0",
+    "bindings": "^1.5.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "docx": "^9.6.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2955521..41caeb6 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -35,6 +35,9 @@ importers:
       better-sqlite3:
         specifier: 11.10.0
         version: 11.10.0
+      bindings:
+        specifier: ^1.5.0
+        version: 1.5.0
       class-variance-authority:
         specifier: ^0.7.1
         version: 0.7.1
diff --git a/tests/unit/phase0-security.test.js b/tests/unit/phase0-security.test.js
index 858b372..9671df1 100644
--- a/tests/unit/phase0-security.test.js
+++ b/tests/unit/phase0-security.test.js
@@ -115,7 +115,6 @@ describe("Phase 0: LogManager uses sync I/O for crash safety", () => {
 describe("Phase 0: Ghost dependencies removed from package.json", () => {
   const ghostDeps = [
     "asynckit",
-    "bindings",
     "combined-stream",
     "delayed-stream",
     "es-errors",
@@ -132,3 +131,12 @@ describe("Phase 0: Ghost dependencies removed from package.json", () => {
     expect(pkg.dependencies).not.toHaveProperty(dep);
   });
 });
+
+// [20260612_Fix_BindingsPackaging] Ensure native sqlite runtime helper is packaged.
+describe("Phase 0: Native sqlite runtime dependencies", () => {
+  it("should keep bindings as a direct production dependency", () => {
+    const pkg = require("../../package.json");
+    expect(pkg.dependencies).toHaveProperty("bindings");
+  });
+});
+// [20260612_Fix_BindingsPackaging] END