pi-mega-compact 0.17.1 → 0.18.1

package/dist/src/vector-cortex/encoder/emit-vc2b.js

@@ -0,0 +1,63 @@
+/**
+ * vector-cortex/encoder/emit-vc2b.ts — VC2B observability seam.
+ *
+ * Owns the two VC2B events (task 5), gated on `MEGACOMPACT_VC2B` so the
+ * flag-OFF path emits zero events (mode C parity, byte-identical predecessor):
+ *
+ *   vector_cortex_encoder_heads_emitted      — a multi-head VectorSetV1 produced
+ *   vector_cortex_encoder_fallback_selected  — a mode B/C fallback selected
+ *
+ * No dashboard or API change is necessary for this internal sprint (task 5).
+ * Every event is a JSON line with `ts` + `event` (ENGINEERING_PRACTICES §8); the
+ * emitters are non-fatal (never break the agent loop). Pi-agnostic, zero network
+ * (PREVENT-PI-004), no `any` (PREVENT-011).
+ */
+import { VC2B_ENABLED } from "../../config/vector-cortex.js";
+import { Logger } from "../../log.js";
+/** A flag-gated no-op reporter (zero emissions, structural no-op). */
+export const NOOP_VC2B_REPORTER = {
+    headsEmitted: () => { },
+    fallbackSelected: () => { },
+};
+/**
+ * The default emitter: routes both VC2B events into the append-only structured
+ * logger (`src/log.ts`) as JSON lines with `ts` + `event`. Supplying `emit:` to
+ * `createEncoderHeadsReporter` replaces this with a caller-provided sink (used
+ * by tests and downstream consumers). Making the default a REAL producer means a
+ * caller that just invokes the producer seam (`encodeOrFallback`, `encodeVectorSet`,
+ * `selectTrigramBFallback`, `selectLexicalC`) without injecting an emitter still
+ * yields structured telemetry instead of silently dropping every event (task 5,
+ * code-review Q01). Best-effort: the logger swallows all I/O errors.
+ */
+function defaultEmitFor(logPath) {
+    const logger = new Logger(logPath === undefined ? {} : { path: logPath });
+    return (event, fields) => {
+        logger.info(event, fields);
+    };
+}
+/**
+ * Flag-gated emit, defaulting to a real logger-backed sink. The returned
+ * reporter is itself flag-gated (`VC2B_ENABLED`), so wiring it into a producer
+ * seam yields zero emissions when `MEGACOMPACT_VC2B=0` (byte-identical to the
+ * predecessor). Pass an explicit `emit` to route elsewhere (tests, downstream
+ * consumers); omit it to emit real structured log lines (Q01: the default is a
+ * live producer, not a silent no-op). `opts.logPath` only redirects the default
+ * sink and is ignored when `emit` is supplied.
+ */
+export function createEncoderHeadsReporter(emit, opts = {}) {
+    const sink = emit ?? defaultEmitFor(opts.logPath);
+    const fire = (event, fields) => {
+        if (!VC2B_ENABLED())
+            return;
+        try {
+            sink(event, { ...fields, ts: new Date().toISOString() });
+        }
+        catch {
+            /* non-fatal observability */
+        }
+    };
+    return {
+        headsEmitted: (fields) => fire("vector_cortex_encoder_heads_emitted", fields),
+        fallbackSelected: (fields) => fire("vector_cortex_encoder_fallback_selected", fields),
+    };
+}

package/dist/src/vector-cortex/encoder/emit.js

@@ -0,0 +1,42 @@
+/**
+ * vector-cortex/encoder/emit.ts — VC2A observability seam.
+ *
+ * Emits the two VC2A structured events, gated on `MEGACOMPACT_VC2A` (mode C
+ * parity: flag OFF => zero emissions). Every event is a JSON line with `ts` +
+ * `event` (ENGINEERING_PRACTICES §8); the emitters are never fatal on consumer
+ * failure (non-fatal observability, never breaks the agent loop).
+ *
+ *   vector_cortex_encoder_asset_verified   — a qualified manifest+digest load
+ *   vector_cortex_encoder_runtime_demoted  — a demotion to mode B or C
+ *
+ * No network, no side effects beyond the supplied emit callback
+ * (PREVENT-PI-004 / PREVENT-011).
+ */
+import { VC2A_ENABLED } from "../../config/vector-cortex.js";
+/** A flag-gated no-op reporter (zero emissions, default when none injected). */
+export const NOOP_ENCODER_REPORTER = {
+    assetVerified: () => { },
+    runtimeDemoted: () => { },
+};
+/**
+ * Flag-gated emit: no-op when VC2A is off or no emitter is supplied. The
+ * returned reporter is itself flag-gated (`VC2A_ENABLED`), so wiring it into a
+ * runtime seam yields zero emissions when `MEGACOMPACT_VC2A=0` (byte-identical
+ * to the predecessor).
+ */
+export function createEncoderReporter(emit) {
+    const fire = (event, fields) => {
+        if (!VC2A_ENABLED())
+            return;
+        try {
+            emit?.(event, { ...fields, ts: new Date().toISOString() });
+        }
+        catch {
+            /* non-fatal observability */
+        }
+    };
+    return {
+        assetVerified: (fields) => fire("vector_cortex_encoder_asset_verified", fields),
+        runtimeDemoted: (fields) => fire("vector_cortex_encoder_runtime_demoted", fields),
+    };
+}

package/dist/src/vector-cortex/encoder/heads.js

@@ -0,0 +1,113 @@
+/**
+ * vector-cortex/encoder/heads.ts — VC2B multi-head encoder (tasks 1–2).
+ *
+ * Produces a `VectorSetV1`: five independent L2-normalized projection heads in
+ * STABLE order — semantic 384, dependency 128, contradiction 128, cacheStability
+ * 64, payloadRouting 32 (MODEL_ASSET §decision record). Each head L2-normalizes
+ * its raw projection; a zero-norm projection maps to an all-zero vector (task 2).
+ *
+ * The raw per-head projection is a deterministic seeded compression of the input
+ * token sequence (seeded by `ENCODER_SEED` and the head's stable index), which
+ * mirrors the VC2A `projectSemantic` placeholder pattern: the contract, shape
+ * gating, normalization, zero-norm mapping, ordering and loss/seed constants are
+ * all normative here; real trained weights are substituted in VC2C. This keeps
+ * the mode-A multi-head path fully testable end-to-end today with zero network.
+ *
+ * The VC2B emit seam (task 5) is wired: producing a VectorSetV1 emits
+ * `vector_cortex_encoder_heads_emitted`; selecting a mode B/C fallback emits
+ * `vector_cortex_encoder_fallback_selected` — both gated on MEGACOMPACT_VC2B.
+ *
+ * Pi-agnostic, zero network (PREVENT-PI-004), no `any` (PREVENT-011).
+ */
+import { ENCODER_HEAD_DIMS, ENCODER_HEAD_ORDER, ENCODER_HEAD_LOSS_WEIGHTS, ENCODER_HEAD_LOSS_SUM, ENCODER_SEED, } from "./types.js";
+import { createEncoderHeadsReporter, NOOP_VC2B_REPORTER, } from "./emit-vc2b.js";
+/** The stable head index of a head name (its position in ENCODER_HEAD_ORDER). */
+const HEAD_INDEX = {
+    semantic: 0,
+    dependency: 1,
+    contradiction: 2,
+    cacheStability: 3,
+    payloadRouting: 4,
+};
+/** Deterministic 32-bit LCG step (matches runtime.ts projectSemantic). */
+function nextState(state) {
+    return (state * 1664525 + 1013904223) >>> 0;
+}
+/**
+ * L2-normalize a float vector in place semantics (returns a new Float32Array).
+ * A zero-norm (or empty) input maps to an all-zero vector of the same length
+ * (task 2: "mapping zero norm to an all-zero vector"). All finite.
+ */
+export function l2Normalize(values) {
+    const out = new Float32Array(values.length);
+    let sum = 0;
+    for (const v of values)
+        sum += v * v;
+    const norm = Math.sqrt(sum);
+    if (!(norm > 0))
+        return out; // zero norm -> all-zero
+    for (let i = 0; i < values.length; i++)
+        out[i] = values[i] / norm;
+    return out;
+}
+/** L2 norm of a Float32Array (0 for empty/all-zero). */
+export function l2Norm(values) {
+    let sum = 0;
+    for (const v of values)
+        sum += v * v;
+    return Math.sqrt(sum);
+}
+/** A deterministic per-head projection over the token sequence, pre-normalization. */
+function projectRaw(head, tokens, seed) {
+    const dim = ENCODER_HEAD_DIMS[head];
+    const out = new Float32Array(dim);
+    // An EMPTY token sequence has no signal: the raw projection is the zero vector,
+    // so after L2 normalization it maps to the all-zero vector (task 2: "mapping
+    // zero norm to an all-zero vector"; ENC-ZERO-002). This keeps empty input
+    // finite and zero-norm instead of seeding spurious unit-norm noise.
+    if (tokens.length === 0)
+        return out;
+    // Mix the stable head index + ENCODER_SEED + seed into a per-head state so
+    // each head is a distinct independent projection (failure-triad independence).
+    let state = (((ENCODER_SEED ^ HEAD_INDEX[head]) >>> 0) ^ (seed >>> 0)) ^ 0x9e3779b9;
+    for (const t of tokens)
+        state = nextState(state ^ ((t >>> 0) * 2654435761));
+    for (let i = 0; i < dim; i++) {
+        state = nextState(state ^ seed);
+        out[i] = (state / 4294967296) * 2 - 1;
+    }
+    return out;
+}
+/**
+ * Compute one head's L2-normalized vector (all-zero on zero norm) for a token
+ * sequence. Deterministic for a given seed (repeat drift == 0).
+ */
+export function projectHead(head, tokens, seed = ENCODER_SEED) {
+    const raw = projectRaw(head, tokens, seed);
+    return { head, dim: ENCODER_HEAD_DIMS[head], values: l2Normalize(raw) };
+}
+/**
+ * Encode a token sequence into a `VectorSetV1`: the five heads in stable order,
+ * each L2-normalized (all-zero on zero norm). Emits `heads_emitted` via the
+ * reporter (non-fatal, flag-gated). Deterministic for a given seed.
+ */
+export function encodeVectorSet(tokens, options = {}) {
+    const seed = options.seed ?? ENCODER_SEED;
+    const reporter = options.reporter ?? createEncoderHeadsReporter();
+    const heads = ENCODER_HEAD_ORDER.map((h) => projectHead(h, tokens, seed));
+    reporter.headsEmitted({
+        heads: heads.length,
+        dims: heads.map((h) => h.dim).join("/"),
+        normalized: true,
+        tokens: tokens.length,
+    });
+    return { schema: "vector-set-v1", inputTokens: [...tokens], heads, normalized: true };
+}
+/**
+ * The per-head loss weights (must sum to ENCODER_HEAD_LOSS_SUM exactly).
+ * Exposed for training/tests to assert the normative .35/.20/.20/.15/.10 split.
+ */
+export function headLossWeights() {
+    return { ...ENCODER_HEAD_LOSS_WEIGHTS };
+}
+export { ENCODER_HEAD_ORDER, ENCODER_HEAD_DIMS, ENCODER_HEAD_LOSS_SUM, ENCODER_SEED, NOOP_VC2B_REPORTER };

package/dist/src/vector-cortex/encoder/lexical.js

@@ -0,0 +1,104 @@
+/**
+ * vector-cortex/encoder/lexical.ts — VC2B mode C: token/phrase lexical encoder.
+ *
+ * Lexical C is a token/phrase lexical feature generator used when both mode A
+ * (learned asset) and mode B (trigram) are unavailable or fail. It is continuity,
+ * NOT semantic completeness: C operates on exact current tokens/phrases only and
+ * MUST state that it has lost old semantic context (task 4 + TRIAD_RESILIENCE.
+ * "C is continuity, not semantic completeness: it may omit old context and must
+ * report that limitation").
+ *
+ * C never imports the learned asset or learned calibration (task 4): it is a
+ * pure token/phrase lexical projection (token counts + phrase hashes) computed
+ * from the exact input. It is independently implemented from B (which hashes
+ * byte-level trigrams) — C works at the token/phrase level, B at the byte-ngram
+ * level, so the two share no algorithm.
+ *
+ * Authority outage freezes derived high-water: C never advances any derived
+ * frontier; it is purely a local reconstruction from the exact present tokens.
+ *
+ * Pi-agnostic, zero network (PREVENT-PI-004), no `any` (PREVENT-011).
+ */
+import { createHash } from "node:crypto";
+import { l2Normalize } from "./heads.js";
+import { createEncoderHeadsReporter, } from "./emit-vc2b.js";
+/** Fixed output width of lexical C. */
+export const ENCODER_LEXICAL_WIDTH = 256;
+/** The documented limitation lexical C reports (continuity, not semantics). */
+export const ENCODER_LEXICAL_LIMITATION = "lexical C: token/phrase-level continuity only; old semantic context is omitted";
+export function tokenizeLexical(text) {
+    // Split into lowercase token/phrase units on non-alphanumeric boundaries.
+    return text.toLowerCase().split(/[^a-z0-9_]+/).filter((t) => t.length > 0);
+}
+/**
+ * Normalize a single token/phrase unit the same way `tokenizeLexical` does for
+ * the string form: lowercase and strip leading/trailing non-alphanumeric runs.
+ * Applied to array-form tokens so both accepted input forms of `embedLexical`
+ * hash identical conceptual content to identical buckets, regardless of how the
+ * caller chose to pass it (code-review Q03).
+ */
+function normalizeToken(tok) {
+    return tok.toLowerCase().split(/[^a-z0-9_]+/).join("");
+}
+/**
+ * Resolve either accepted input form to a normalized token sequence: the string
+ * form routes through `tokenizeLexical` (split on non-alphanumeric boundaries,
+ * fragmented tokens discarded); the array form applies the same per-token
+ * lowercase/strip normalization and drops tokens that normalize to empty. Both
+ * paths therefore agree on hash buckets for the same conceptual content.
+ */
+function resolveTokens(tokensOrText) {
+    if (typeof tokensOrText === "string")
+        return tokenizeLexical(tokensOrText);
+    const out = [];
+    for (const raw of tokensOrText) {
+        const norm = normalizeToken(raw);
+        if (norm.length > 0)
+            out.push(norm);
+    }
+    return out;
+}
+/**
+ * Encode a token/phrase sequence into a 256-dim L2-normalized lexical vector
+ * (all-zero on empty input). Features: exact token count + token id-hash sums +
+ * phrase-adjacency hashes. Deterministic (repeat drift == 0). Pure local compute.
+ */
+export function embedLexical(tokensOrText) {
+    const width = ENCODER_LEXICAL_WIDTH;
+    const out = new Float32Array(width);
+    const tokens = resolveTokens(tokensOrText);
+    for (let i = 0; i < tokens.length; i++) {
+        const tok = tokens[i];
+        const h = createHash("sha256").update(`t:${tok}`).digest();
+        const bucket = h.readUInt32BE(0) % width;
+        const weight = (h.readUInt32BE(4) / 4294967295) * 2 - 1;
+        out[bucket] += weight;
+        // Phrase adjacency: bigram hash blended in so semantic-free ordering matters.
+        if (i > 0) {
+            const pair = createHash("sha256").update(`p:${tokens[i - 1]}:${tok}`).digest();
+            const pb = pair.readUInt32BE(0) % width;
+            const pw = (pair.readUInt32BE(4) / 4294967295) * 2 - 1;
+            out[pb] += pw;
+        }
+    }
+    return l2Normalize(out);
+}
+/** The documented limitation string, surfaced when lexical C is selected. */
+export function selectLexicalC(options = {}) {
+    const reporter = options.reporter ?? createEncoderHeadsReporter();
+    const selection = {
+        ok: true,
+        mode: "C",
+        dim: ENCODER_LEXICAL_WIDTH,
+        width: ENCODER_LEXICAL_WIDTH,
+        limitation: ENCODER_LEXICAL_LIMITATION,
+    };
+    reporter.fallbackSelected({
+        mode: selection.mode,
+        dim: selection.dim,
+        width: selection.width,
+        limitation: selection.limitation,
+    });
+    return selection;
+}
+export { l2Normalize };

package/dist/src/vector-cortex/encoder/router.js

@@ -0,0 +1,115 @@
+/**
+ * vector-cortex/encoder/router.ts — VC2B encode-or-fallback router (S2).
+ *
+ * The single production seam that catches a real VC2A `load()` failure and
+ * hands off to the independently initialized VC2B fallbacks:
+ *
+ *   - mode A: the learned multi-head projection — an EncoderRuntime that
+ *     verifies+loads a local qualified ONNX (VC2A) plus `encodeVectorSet`
+ *     producing VectorSetV1, emitting `vector_cortex_encoder_heads_emitted`;
+ *   - when that `load()` fails for ANY reason (removed model ->
+ *     ENC_ASSET_UNREADABLE, digest mismatch -> ENC_DIGEST_MISMATCH, missing
+ *     manifest -> ENC_MANIFEST_INVALID, unsupported platform, RSS over budget,
+ *     ...) the router catches the real failure and selects the independently
+ *     initialized asset-free trigram B (`selectTrigramBFallback`) — or lexical C
+ *     when the runtime reports B-unavailable / the caller forces mode C. The
+ *     `vector_cortex_encoder_fallback_selected` event fires from the REAL
+ *     producer seam, not test wiring (task 5 + code-review S1).
+ *
+ * Best-effort and non-fatal: every branch returns an explicit verdict and never
+ * throws across the boundary into the agent loop. Flag-OFF parity: with
+ * `MEGACOMPACT_VC2B=0` the VC2B reporter is a no-op (zero emissions), and the
+ * mode-A path is governed by the VC2A runtime itself — the router only adds the
+ * fallback handoff and changes no producer bytes.
+ *
+ * Pi-agnostic, zero network (PREVENT-PI-004), no `any` (PREVENT-011).
+ */
+import { createEncoderRuntime } from "./runtime.js";
+import { encodeVectorSet } from "./heads.js";
+import { embedTrigram512, selectTrigramBFallback } from "./trigram.js";
+import { embedLexical, selectLexicalC } from "./lexical.js";
+import { createEncoderHeadsReporter } from "./emit-vc2b.js";
+import { ENC_FAIL, } from "./types.js";
+/** Deterministic text derived from an int token sequence so the asset-free
+ *  fallback producers operate on the same authority the learned path encoded. */
+function textFromTokens(tokens) {
+    return tokens.join("-");
+}
+/**
+ * Try to produce an encoding for an input token sequence. Mode A: verify+load
+ * the local learned asset via the EncoderRuntime; on a real `load()` failure
+ * (removed model, digest mismatch, missing manifest, ...) the router catches it
+ * and selects the independently initialized trigram B or lexical C, emitting
+ * `vector_cortex_encoder_fallback_selected` (and `heads_emitted` when A wins).
+ */
+export function encodeOrFallback(input, assetDir, options = {}) {
+    const reporter = options.reporter ?? createEncoderHeadsReporter();
+    const tokens = Array.isArray(input?.tokens) ? input.tokens : [];
+    const runtime = options.runtime ?? createEncoderRuntime();
+    // A caller that explicitly forces a fallback mode wins even over the empty-
+    // input degenerate case: the forced-mode contract must hold for ANY input, so
+    // handle forceFallback before the empty-input selection below (Q02). A forced
+    // B/C is NOT a rollback and NOT a demotion — it is an intentional selection
+    // for capacity/testing — so the verdict carries `code: null`, never
+    // ENC_FAIL.ROLLBACK, so a consumer that reads `verdict.code` as "what
+    // triggered the fallback" won't misread a deliberately forced mode as a
+    // rollback and take rollback-specific action (code-review Q04).
+    if (options.forceFallback !== undefined) {
+        if (options.forceFallback === "C") {
+            const sel = selectLexicalC({ reporter });
+            const vector = embedLexical(textFromTokens(tokens));
+            return { ok: true, mode: "C", vector, width: sel.width, limitation: sel.limitation, code: null };
+        }
+        const sel = selectTrigramBFallback({ reporter });
+        const vector = embedTrigram512(textFromTokens(tokens));
+        return { ok: true, mode: "B", vector, width: sel.width, limitation: null, code: null };
+    }
+    // Empty input yields the asset-free fallback (finite, deterministic zero
+    // vector, ENC-ZERO-002). This is legitimate degenerate behavior, NOT a shape
+    // failure, so the verdict carries no failure code (code === null) — a consumer
+    // that interprets `code` as "what went wrong" must not misread a valid all-zero
+    // B vector as a shape rejection (Q05). Only reached when no mode is forced, so
+    // a forced B/C is never subverted by empty tokens.
+    if (tokens.length === 0) {
+        const sel = selectTrigramBFallback({ reporter });
+        const vector = embedTrigram512("");
+        return { ok: true, mode: "B", vector, width: sel.width, limitation: null, code: null };
+    }
+    // Mode A attempt — reached only when no mode is forced (the forceFallback
+    // guard at the top already returned), so `options.forceFallback` is undefined here.
+    const loaded = runtime.load(assetDir);
+    if (!loaded.ok) {
+        return fallbackFromLoad(loaded, reporter, tokens);
+    }
+    // Q01/Q03: a qualified mode-A load is not enough — the verified per-manifest
+    // token capacity (maxTokens, <= global 512) must also be enforced before we
+    // produce a VectorSetV1. run inference over the input; an over-cap sequence
+    // (e.g. 100 tokens against a verified maxTokens=64 manifest) or an
+    // over-budget inference is rejected here and routed to the B/C fallback with
+    // the real failure code, rather than silently emitting an ok:true mode-A
+    // set whose inputTokens breach the model's declared capacity.
+    const inferred = runtime.infer({ tokens });
+    if (!inferred.ok) {
+        return fallbackFromLoad({ ok: false, mode: "B", code: inferred.code }, reporter, tokens);
+    }
+    const vectorSet = encodeVectorSet(tokens, { reporter, seed: options.seed });
+    return { ok: true, mode: "A", vectorSet, code: null };
+}
+/**
+ * Catch a (real or forced) A load failure (ok === false only) and select the
+ * B/C fallback that emits `vector_cortex_encoder_fallback_selected` from the
+ * production seam. The parameter is narrowed to the failed-load variant because
+ * the router hands off here only on a non-A/failed load — a qualified mode-A
+ * success never reaches this function (Q04).
+ */
+function fallbackFromLoad(loaded, reporter, tokens) {
+    if (loaded.mode === "C") {
+        const sel = selectLexicalC({ reporter });
+        const vector = embedLexical(textFromTokens(tokens));
+        return { ok: true, mode: "C", vector, width: sel.width, limitation: sel.limitation, code: loaded.code };
+    }
+    const sel = selectTrigramBFallback({ reporter });
+    const vector = embedTrigram512(textFromTokens(tokens));
+    return { ok: true, mode: "B", vector, width: sel.width, limitation: null, code: loaded.code };
+}
+export { ENC_FAIL };

package/dist/src/vector-cortex/encoder/runtime.js

@@ -0,0 +1,228 @@
+/**
+ * vector-cortex/encoder/runtime.ts — VC2A EncoderRuntime (task 3).
+ *
+ * Allocates (prepares an inference session) ONLY after manifest verification;
+ * rejects any non (batch 1, tokens <= maxTokens, <=512) input with
+ * ENC_SHAPE_INVALID; caps the encoder's MARGINAL footprint at 150 MiB
+ * (ENC_RSS_BUDGET_EXCEEDED -> mode B); and yields a deterministic mode-A
+ * inference over the verified asset (the trained weights are substituted in
+ * VC2C — the contract, shape gating and budgets all land here).
+ *
+ * MEMORY BUDGET (Q01/Q02): the 150 MiB cap measures the encoder's INCREMENTAL
+ * footprint — an in-process allocation counter (`selfAllocated`) plus any
+ * externally staged asset working set (`host.allocatedBytes()`) — NOT the
+ * whole-process RSS. In a live pi extension the process baseline (node:sqlite
+ * DatabaseSync + dashboard + loaded context) routinely exceeds 150 MiB, so an
+ * absolute-RSS cap would permanently demote a qualified asset to mode B and
+ * make mode A unreachable in production. Bounding the marginal footprint keeps
+ * mode A reachable while still enforcing the budget. `selfAllocated` models a
+ * single REUSABLE 384-float projection buffer (first inference allocates it,
+ * every later inference reuses it), so it is capped at `SEMANTIC_BUFFER_BYTES`
+ * — the marginal footprint can never grow without bound (Q01), and a long-lived
+ * runtime cannot drift over budget from healthy operation. The check runs
+ * BEFORE the allocation on both the load and the inference path
+ * (cap-before-allocation, task 3), and an over-budget inference demotes the
+ * runtime to mode B just as an over-budget load does (consistent demotion per
+ * ENC_FAIL.RSS_BUDGET_EXCEEDED).
+ *
+ * TOKEN CAPACITY (Q03): the per-manifest `maxTokens` (<= 512) is stored at load
+ * and enforced at inference — an input longer than the verified manifest's
+ * declared capacity is rejected with ENC_SHAPE_INVALID, honoring the model
+ * contract rather than a global 512 ceiling.
+ *
+ * FLAG GATING (Q04): the default factory consults `MEGACOMPACT_VC2A`; when the
+ * flag is OFF the runtime is fixed at mode C (rollback, byte-identical to the
+ * predecessor — no asset is read or verified). `forcedMode: "C"` is the
+ * explicit override for the same rollback path.
+ *
+ * Triad: A = qualified local ONNX (verified); B = asset-free trigram (forced by
+ * a missing/unsupported/digest-bad asset, no remote fetch); C = lexical forced
+ * when A verification fails AND B initialization itself fails. Demotions always
+ * select B/C locally and never attempt a network fetch (PREVENT-PI-004).
+ *
+ * Pi-agnostic. No `any` (PREVENT-011). Emits the two VC2A events via the
+ * reporter (non-fatal).
+ */
+import { detectPlatform, readEncoderManifest, verifyEncoderAsset, } from "./asset.js";
+import { createEncoderReporter } from "./emit.js";
+import { VC2A_ENABLED } from "../../config/vector-cortex.js";
+import { ENC_FAIL, ENCODER_MAX_TOKENS, ENCODER_RSS_BUDGET_BYTES, ENCODER_SEMANTIC_WIDTH, } from "./types.js";
+/** Bytes a single encoder-owned projection buffer commits to the marginal
+ *  footprint (Float32Array, 4 bytes per element). */
+const SEMANTIC_BUFFER_BYTES = ENCODER_SEMANTIC_WIDTH * 4;
+const DEFAULT_HOST = {
+    allocatedBytes: () => 0,
+    allocatorFails: () => false,
+    nowMs: () => Date.now(),
+};
+function mergeHost(partial) {
+    return { ...DEFAULT_HOST, ...partial };
+}
+/** A deterministic seeded projection so the mode-A inference path is testable
+ *  end-to-end without onnxruntime (real weights + execution are VC2C). */
+function projectSemantic(seed, n) {
+    const out = new Float32Array(n);
+    let state = (seed >>> 0) ^ 0x9e3779b9;
+    let sum = 0;
+    for (let i = 0; i < n; i++) {
+        state = (state * 1664525 + 1013904223) >>> 0;
+        out[i] = (state / 4294967296) * 2 - 1;
+        sum += out[i] * out[i];
+    }
+    const norm = Math.sqrt(sum) || 1;
+    for (let i = 0; i < n; i++)
+        out[i] = out[i] / norm;
+    return out;
+}
+/** Deterministic token seed derived from the verified asset bytes count. */
+function seedFromBytes(embeddedBytes) {
+    return (embeddedBytes * 2654435761) >>> 0;
+}
+function modeLabel(mode) {
+    return mode === "A" ? "qualified-onnx" : mode === "B" ? "trigram" : "lexical";
+}
+export function createEncoderRuntime(options = {}) {
+    const reporter = options.reporter ?? createEncoderReporter();
+    const host = mergeHost(options.host);
+    const forced = options.forcedMode;
+    const plat = options.platform ?? detectPlatform;
+    // Q04: rollback contract — MEGACOMPACT_VC2A=0 selects mode C (byte-identical
+    // to the predecessor: no asset read/verify, no learned infer). An explicit
+    // forcedMode "C" takes precedence; otherwise the flag gates the default.
+    const rolledBack = forced === "C" || !VC2A_ENABLED();
+    let mode = rolledBack ? "C" : "C";
+    let embeddedBytes = 0;
+    let verified = false;
+    /** Per-manifest token capacity (<= 512) from the verified asset; enforced at
+     *  inference (Q03). Defaults to the global ceiling before a load. */
+    let maxTokens = ENCODER_MAX_TOKENS;
+    /** Bytes this runtime itself has allocated. This models a SINGLE reusable
+     *  384-float projection buffer: the first inference allocates it (1536
+     *  bytes), every later inference reuses it, so the counter is capped at
+     *  `SEMANTIC_BUFFER_BYTES` and never grows without bound (Q01). Combined
+     *  with `host.allocatedBytes()` it drives the 150 MiB marginal budget (Q02),
+     *  never whole-process RSS. */
+    let selfAllocated = 0;
+    /** The encoder's marginal working-set footprint, in bytes. */
+    const footprint = () => selfAllocated + host.allocatedBytes();
+    const demoteTo = (rmode, code) => {
+        mode = rmode;
+        verified = false;
+        reporter.runtimeDemoted({ reason: code, mode: rmode, platform: plat()?.toString() ?? "unsupported" });
+    };
+    const runtime = {
+        schema: "encoder-runtime-v1",
+        // Live getter so `mode` always reflects the latest load/demote outcome
+        // (a plain property would freeze at its construction-time value forever).
+        get mode() {
+            return mode;
+        },
+        load(assetDir) {
+            if (rolledBack) {
+                // Rollback path (forcedMode "C" or MEGACOMPACT_VC2A=0): mode C restores
+                // the prior derived pointer; no asset is read or verified; no emission.
+                // Q04: report the rollback with its own code, not MANIFEST_INVALID, so a
+                // correctly-shaped, digest-correct asset is not mis-read as corrupted.
+                mode = "C";
+                verified = false;
+                return { ok: false, mode: "C", code: ENC_FAIL.ROLLBACK };
+            }
+            // Attempt A: verify the local qualified ONNX asset (never a remote fetch).
+            const manifest = readEncoderManifest(assetDir);
+            let verify;
+            if (manifest === null) {
+                verify = { ok: false, code: ENC_FAIL.MANIFEST_INVALID };
+            }
+            else {
+                verify = verifyEncoderAsset(assetDir, manifest, plat());
+            }
+            if (!verify.ok) {
+                // A failed -> B, unless B init itself fails (allocator) -> C.
+                if (host.allocatorFails()) {
+                    demoteTo("C", ENC_FAIL.ASSET_UNREADABLE);
+                    return { ok: false, mode: "C", code: ENC_FAIL.ASSET_UNREADABLE };
+                }
+                demoteTo("B", verify.code);
+                return { ok: false, mode: "B", code: verify.code };
+            }
+            // Allocate only after verification (task 3). Simulate allocator failure.
+            if (host.allocatorFails()) {
+                demoteTo("B", ENC_FAIL.ASSET_UNREADABLE);
+                return { ok: false, mode: "B", code: ENC_FAIL.ASSET_UNREADABLE };
+            }
+            // Cap the encoder's MARGINAL footprint at 150 MiB (task 3, Q01). This
+            // bounds the encoder's incremental allocation, so a healthy process with
+            // a large baseline RSS still reaches mode A.
+            if (footprint() > ENCODER_RSS_BUDGET_BYTES) {
+                demoteTo("B", ENC_FAIL.RSS_BUDGET_EXCEEDED);
+                return { ok: false, mode: "B", code: ENC_FAIL.RSS_BUDGET_EXCEEDED };
+            }
+            embeddedBytes = verify.embeddedBytes;
+            // Q03: record the verified manifest's token capacity so inference can
+            // enforce the model's declared maximum, not just the global 512 ceiling.
+            maxTokens = verify.maxTokens;
+            verified = true;
+            mode = "A";
+            reporter.assetVerified({
+                mode: "A",
+                embeddedBytes: verify.embeddedBytes,
+                onnxDigest: verify.onnxDigest.slice(0, 12),
+            });
+            return {
+                ok: true,
+                mode: "A",
+                embeddedBytes: verify.embeddedBytes,
+                rssBytes: footprint(),
+                sessionId: `enc-${seedFromBytes(verify.embeddedBytes).toString(16)}`,
+            };
+        },
+        infer(input) {
+            if (!verified || mode !== "A") {
+                // Only batch1/max512 verified assets reach inference (mode B/C do not).
+                return {
+                    ok: false,
+                    code: ENC_FAIL.SHAPE_INVALID,
+                    shapeError: "no verified learned asset; mode is " + modeLabel(mode),
+                };
+            }
+            if (!input || !Array.isArray(input.tokens)) {
+                return { ok: false, code: ENC_FAIL.SHAPE_INVALID, shapeError: "missing tokens array" };
+            }
+            const n = input.tokens.length;
+            // Q03: enforce the per-manifest maxTokens (<= global 512 ceiling), so an
+            // over-cap request against a low-cap verified asset is rejected rather
+            // than silently exceeding the model's declared capacity.
+            if (n < 1 || n > maxTokens) {
+                return {
+                    ok: false,
+                    code: ENC_FAIL.SHAPE_INVALID,
+                    shapeError: `token count ${n} outside 1..${maxTokens} (manifest cap)`,
+                };
+            }
+            // Q03: cap-before-allocation on the inference path too. Check the
+            // marginal footprint BEFORE allocating the projection buffer; an
+            // over-budget inference demotes to mode B consistently with load() (the
+            // ENC_FAIL.RSS_BUDGET_EXCEEDED model: "measured RSS over 150 MiB -> B"),
+            // so a subsequent infer no longer attempts allocation in a stale mode A.
+            if (footprint() > ENCODER_RSS_BUDGET_BYTES) {
+                demoteTo("B", ENC_FAIL.RSS_BUDGET_EXCEEDED);
+                return {
+                    ok: false,
+                    code: ENC_FAIL.RSS_BUDGET_EXCEEDED,
+                    shapeError: "encoder footprint over budget during inference",
+                };
+            }
+            const start = host.nowMs();
+            // Batch is always 1 (single request); shape is (1, n) for n in 1..maxTokens.
+            const semantic = projectSemantic(seedFromBytes(embeddedBytes) ^ n, ENCODER_SEMANTIC_WIDTH);
+            // Q01: the projection buffer is a single reusable 384-float array; the
+            // marginal footprint is a fixed SEMANTIC_BUFFER_BYTES once it exists, so
+            // selfAllocated is SET (never accumulated) — bounded regardless of how
+            // many inferences run on a long-lived runtime.
+            selfAllocated = SEMANTIC_BUFFER_BYTES;
+            const latencyMs = host.nowMs() - start;
+            return { ok: true, semantic, rssBytes: footprint(), latencyMs, shapeError: null };
+        },
+    };
+    return runtime;
+}