pi-mega-compact 0.18.1 → 0.19.1

package/assets/vector-cortex/encoder-v1/manifest.json

@@ -0,0 +1 @@
+{"batch":1,"heads":{"cacheStability":64,"contradiction":128,"dependency":128,"payloadRouting":32,"semantic":384},"hiddenWidth":384,"maxTokens":512,"modelVersion":"encoder-v1-placeholder","onnx":{"bytes":42,"path":"model.onnx","sha256":"01cbed8b0b301609542ff8c392c3e7d927b0d848ac53a768dfffd33bfe6005ff"},"opset":17,"platform":"linux-x64","schema":"model-manifest-v1","semanticWidth":384,"tokenizer":{"bytes":8518,"path":"tokenizer.json","sha256":"ada18e5c4dfcb5c369c05f4ffc10bc40298ce707e78f16135c6d33019f6db8cd"},"totalBytes":8560,"trainingManifestDigest":"e9b2550dbb79141af84440dda65ca21d3509904b2c09a89316145137a5b5e3de"}

package/assets/vector-cortex/encoder-v1/model-card.json

@@ -0,0 +1 @@
+{"accepted":"local offline deterministic projection over verified asset (V1); trained weights + evaluation land in VC2B/VC2C","comparison":[{"candidate":"MiniLM-class transformer","latencyMs":8,"license":"permissive","offlineNode":"no (native addon)","quality":"high","sizeMB":120},{"candidate":"small BERT","latencyMs":10,"license":"permissive","offlineNode":"partial","quality":"high","sizeMB":110},{"candidate":"bag/subword baseline","latencyMs":1,"license":"permissive","offlineNode":"yes","quality":"medium","sizeMB":4}],"note":"placeholder asset — replaced by the VC2C export pipeline","reprintPermission":true,"schema":"model-card-v1"}

package/assets/vector-cortex/encoder-v1/tokenizer.json

@@ -0,0 +1 @@
+{"maxTokens":512,"schema":"wordpiece-tokenizer-v1","specialTokens":{"cls":2,"mask":4,"pad":0,"sep":3,"unk":1},"truncation":{"keepFirst":128,"keepLast":384},"vocab":[["[PAD]",0],["[UNK]",1],["[CLS]",2],["[SEP]",3],["[MASK]",4],["##tok0",5],["##tok1",6],["##tok2",7],["##tok3",8],["##tok4",9],["##tok5",10],["##tok6",11],["##tok7",12],["##tok8",13],["##tok9",14],["##tok10",15],["##tok11",16],["##tok12",17],["##tok13",18],["##tok14",19],["##tok15",20],["##tok16",21],["##tok17",22],["##tok18",23],["##tok19",24],["##tok20",25],["##tok21",26],["##tok22",27],["##tok23",28],["##tok24",29],["##tok25",30],["##tok26",31],["##tok27",32],["##tok28",33],["##tok29",34],["##tok30",35],["##tok31",36],["##tok32",37],["##tok33",38],["##tok34",39],["##tok35",40],["##tok36",41],["##tok37",42],["##tok38",43],["##tok39",44],["##tok40",45],["##tok41",46],["##tok42",47],["##tok43",48],["##tok44",49],["##tok45",50],["##tok46",51],["##tok47",52],["##tok48",53],["##tok49",54],["##tok50",55],["##tok51",56],["##tok52",57],["##tok53",58],["##tok54",59],["##tok55",60],["##tok56",61],["##tok57",62],["##tok58",63],["##tok59",64],["##tok60",65],["##tok61",66],["##tok62",67],["##tok63",68],["##tok64",69],["##tok65",70],["##tok66",71],["##tok67",72],["##tok68",73],["##tok69",74],["##tok70",75],["##tok71",76],["##tok72",77],["##tok73",78],["##tok74",79],["##tok75",80],["##tok76",81],["##tok77",82],["##tok78",83],["##tok79",84],["##tok80",85],["##tok81",86],["##tok82",87],["##tok83",88],["##tok84",89],["##tok85",90],["##tok86",91],["##tok87",92],["##tok88",93],["##tok89",94],["##tok90",95],["##tok91",96],["##tok92",97],["##tok93",98],["##tok94",99],["##tok95",100],["##tok96",101],["##tok97",102],["##tok98",103],["##tok99",104],["##tok100",105],["##tok101",106],["##tok102",107],["##tok103",108],["##tok104",109],["##tok105",110],["##tok106",111],["##tok107",112],["##tok108",113],["##tok109",114],["##tok110",115],["##tok111",116],["##tok112",117],["##tok113",118],["##tok114",119],["##tok115",120],["##tok116",121],["##tok117",122],["##tok118",123],["##tok119",124],["##tok120",125],["##tok121",126],["##tok122",127],["##tok123",128],["##tok124",129],["##tok125",130],["##tok126",131],["##tok127",132],["##tok128",133],["##tok129",134],["##tok130",135],["##tok131",136],["##tok132",137],["##tok133",138],["##tok134",139],["##tok135",140],["##tok136",141],["##tok137",142],["##tok138",143],["##tok139",144],["##tok140",145],["##tok141",146],["##tok142",147],["##tok143",148],["##tok144",149],["##tok145",150],["##tok146",151],["##tok147",152],["##tok148",153],["##tok149",154],["##tok150",155],["##tok151",156],["##tok152",157],["##tok153",158],["##tok154",159],["##tok155",160],["##tok156",161],["##tok157",162],["##tok158",163],["##tok159",164],["##tok160",165],["##tok161",166],["##tok162",167],["##tok163",168],["##tok164",169],["##tok165",170],["##tok166",171],["##tok167",172],["##tok168",173],["##tok169",174],["##tok170",175],["##tok171",176],["##tok172",177],["##tok173",178],["##tok174",179],["##tok175",180],["##tok176",181],["##tok177",182],["##tok178",183],["##tok179",184],["##tok180",185],["##tok181",186],["##tok182",187],["##tok183",188],["##tok184",189],["##tok185",190],["##tok186",191],["##tok187",192],["##tok188",193],["##tok189",194],["##tok190",195],["##tok191",196],["##tok192",197],["##tok193",198],["##tok194",199],["##tok195",200],["##tok196",201],["##tok197",202],["##tok198",203],["##tok199",204],["##tok200",205],["##tok201",206],["##tok202",207],["##tok203",208],["##tok204",209],["##tok205",210],["##tok206",211],["##tok207",212],["##tok208",213],["##tok209",214],["##tok210",215],["##tok211",216],["##tok212",217],["##tok213",218],["##tok214",219],["##tok215",220],["##tok216",221],["##tok217",222],["##tok218",223],["##tok219",224],["##tok220",225],["##tok221",226],["##tok222",227],["##tok223",228],["##tok224",229],["##tok225",230],["##tok226",231],["##tok227",232],["##tok228",233],["##tok229",234],["##tok230",235],["##tok231",236],["##tok232",237],["##tok233",238],["##tok234",239],["##tok235",240],["##tok236",241],["##tok237",242],["##tok238",243],["##tok239",244],["##tok240",245],["##tok241",246],["##tok242",247],["##tok243",248],["##tok244",249],["##tok245",250],["##tok246",251],["##tok247",252],["##tok248",253],["##tok249",254],["##tok250",255],["##tok251",256],["##tok252",257],["##tok253",258],["##tok254",259],["##tok255",260],["##tok256",261],["##tok257",262],["##tok258",263],["##tok259",264],["##tok260",265],["##tok261",266],["##tok262",267],["##tok263",268],["##tok264",269],["##tok265",270],["##tok266",271],["##tok267",272],["##tok268",273],["##tok269",274],["##tok270",275],["##tok271",276],["##tok272",277],["##tok273",278],["##tok274",279],["##tok275",280],["##tok276",281],["##tok277",282],["##tok278",283],["##tok279",284],["##tok280",285],["##tok281",286],["##tok282",287],["##tok283",288],["##tok284",289],["##tok285",290],["##tok286",291],["##tok287",292],["##tok288",293],["##tok289",294],["##tok290",295],["##tok291",296],["##tok292",297],["##tok293",298],["##tok294",299],["##tok295",300],["##tok296",301],["##tok297",302],["##tok298",303],["##tok299",304],["##tok300",305],["##tok301",306],["##tok302",307],["##tok303",308],["##tok304",309],["##tok305",310],["##tok306",311],["##tok307",312],["##tok308",313],["##tok309",314],["##tok310",315],["##tok311",316],["##tok312",317],["##tok313",318],["##tok314",319],["##tok315",320],["##tok316",321],["##tok317",322],["##tok318",323],["##tok319",324],["##tok320",325],["##tok321",326],["##tok322",327],["##tok323",328],["##tok324",329],["##tok325",330],["##tok326",331],["##tok327",332],["##tok328",333],["##tok329",334],["##tok330",335],["##tok331",336],["##tok332",337],["##tok333",338],["##tok334",339],["##tok335",340],["##tok336",341],["##tok337",342],["##tok338",343],["##tok339",344],["##tok340",345],["##tok341",346],["##tok342",347],["##tok343",348],["##tok344",349],["##tok345",350],["##tok346",351],["##tok347",352],["##tok348",353],["##tok349",354],["##tok350",355],["##tok351",356],["##tok352",357],["##tok353",358],["##tok354",359],["##tok355",360],["##tok356",361],["##tok357",362],["##tok358",363],["##tok359",364],["##tok360",365],["##tok361",366],["##tok362",367],["##tok363",368],["##tok364",369],["##tok365",370],["##tok366",371],["##tok367",372],["##tok368",373],["##tok369",374],["##tok370",375],["##tok371",376],["##tok372",377],["##tok373",378],["##tok374",379],["##tok375",380],["##tok376",381],["##tok377",382],["##tok378",383],["##tok379",384],["##tok380",385],["##tok381",386],["##tok382",387],["##tok383",388],["##tok384",389],["##tok385",390],["##tok386",391],["##tok387",392],["##tok388",393],["##tok389",394],["##tok390",395],["##tok391",396],["##tok392",397],["##tok393",398],["##tok394",399],["##tok395",400],["##tok396",401],["##tok397",402],["##tok398",403],["##tok399",404],["##tok400",405],["##tok401",406],["##tok402",407],["##tok403",408],["##tok404",409],["##tok405",410],["##tok406",411],["##tok407",412],["##tok408",413],["##tok409",414],["##tok410",415],["##tok411",416],["##tok412",417],["##tok413",418],["##tok414",419],["##tok415",420],["##tok416",421],["##tok417",422],["##tok418",423],["##tok419",424],["##tok420",425],["##tok421",426],["##tok422",427],["##tok423",428],["##tok424",429],["##tok425",430],["##tok426",431],["##tok427",432],["##tok428",433],["##tok429",434],["##tok430",435],["##tok431",436],["##tok432",437],["##tok433",438],["##tok434",439],["##tok435",440],["##tok436",441],["##tok437",442],["##tok438",443],["##tok439",444],["##tok440",445],["##tok441",446],["##tok442",447],["##tok443",448],["##tok444",449],["##tok445",450],["##tok446",451],["##tok447",452],["##tok448",453],["##tok449",454],["##tok450",455],["##tok451",456],["##tok452",457],["##tok453",458],["##tok454",459],["##tok455",460],["##tok456",461],["##tok457",462],["##tok458",463],["##tok459",464],["##tok460",465],["##tok461",466],["##tok462",467],["##tok463",468],["##tok464",469],["##tok465",470],["##tok466",471],["##tok467",472],["##tok468",473],["##tok469",474],["##tok470",475],["##tok471",476],["##tok472",477],["##tok473",478],["##tok474",479],["##tok475",480],["##tok476",481],["##tok477",482],["##tok478",483],["##tok479",484],["##tok480",485],["##tok481",486],["##tok482",487],["##tok483",488],["##tok484",489],["##tok485",490],["##tok486",491],["##tok487",492],["##tok488",493],["##tok489",494],["##tok490",495],["##tok491",496],["##tok492",497],["##tok493",498],["##tok494",499],["##tok495",500],["##tok496",501],["##tok497",502],["##tok498",503],["##tok499",504]]}

package/dist/config/vector-cortex.js

@@ -82,6 +82,25 @@ export const VC2A_ENABLED = () => sprintFlag("MEGACOMPACT_VC2A");
  * emit seam and the multi-head encoder producers (heads/trigram/lexical).
  */
 export const VC2B_ENABLED = () => sprintFlag("MEGACOMPACT_VC2B");
+/**
+ * VC2C — encoder qualification + calibration (QualifiedEncoderV1 / CalibrationV1).
+ * Default ON. `MEGACOMPACT_VC2C=0` disables and is byte-identical to the
+ * predecessor (mode C: no qualification manifest is read or selected, the
+ * calibrate/select/fallback seams are idle, zero `vector_cortex_encoder_qualification_*`
+ * emissions; the trigram/lexical paths are unchanged). The real consumers are
+ * the encoder-qualification emit seam and the calibrate/select seams.
+ */
+export const VC2C_ENABLED = () => sprintFlag("MEGACOMPACT_VC2C");
+/**
+ * VC3A — capability-gated cortex store (CortexReader/Writer/Admin, CortexRecordV1).
+ * Default ON. `MEGACOMPACT_VC3A=0` disables and is byte-identical to the
+ * predecessor (mode C: the derived cortex store is absent, mode B in-memory is
+ * not consulted, zero `vector_cortex_record_append_failed` /
+ * `vector_cortex_generation_rebuilt` emissions; the predecessor derived pointer
+ * and goldens are unchanged). The real consumers are the cortex append seam, the
+ * cortex rebuild/admin seam and the reader-only topology summary seam.
+ */
+export const VC3A_ENABLED = () => sprintFlag("MEGACOMPACT_VC3A");
 // ---------------------------------------------------------------------------
 // Breaker state machine constants (TRIAD_RESILIENCE.md §breaker).
 // Rolled numbers for one 60s window; VC0C consumes these at its breaker seam.

package/dist/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/extensions/dashboard-server/routes-rag-settings-helpers.js

@@ -142,6 +142,8 @@ export const SETTINGS = [
             boolDirect("MEGACOMPACT_VC1C", "VC1C Cross-Language Conformance v2", "FixtureManifestV2 canonical manifest validator + DowngradeReport deterministic downgrade export + MinHashV2 exact big-integer signatures and the M4 copy/validate/switch minhash-v2 migration (seed table frozen, cross-language byte-exact). OFF = mode C, v1 sync dedup scan unchanged, byte-identical.", true),
             boolDirect("MEGACOMPACT_VC2A", "VC2A Offline Model Runtime", "ModelManifestV1 digest-before-load ONNX runtime (opset17/batch1/max512) + asset-free trigram demotion. Asset path assets/vector-cortex/encoder-v1 is immutable/digest-pinned. OFF = mode C, byte-identical to predecessor.", true),
             boolDirect("MEGACOMPACT_VC2B", "VC2B Multi-Head Encoder", "VectorSetV1 five L2-normalized heads (384/128/128/64/32) with head-calibration draft + asset-free trigram B (512d) and lexical C fallbacks, plus the per-head emit seam. OFF = mode C, no per-head vectors emitted, byte-identical predecessor.", true),
+            boolDirect("MEGACOMPACT_VC2C", "VC2C Encoder Qualification + Calibration", "QualifiedEncoderV1/CalibrationV1: calibration fit on the calibration split only (held-out labels prohibited) + atomic selection across MODEL_ASSET and per-head EVALUATION thresholds (any field failure demotes all of A). OFF = mode C, no qualification/calibration selection, byte-identical predecessor.", true),
+            boolDirect("MEGACOMPACT_VC3A", "VC3A Cortex Store", "Capability-gated derived cortex store (CortexReader/Writer/Admin + CortexRecordV1): additive, keyed (sourceHighWater, algorithmVersion, id), immutable records, deterministic generation rebuild + one root digest. OFF = mode C, no cortex records written, byte-identical predecessor.", true),
         ],
     },
     {

package/dist/extensions/dashboard-server/routes-vector-cortex-eval.js

@@ -0,0 +1,49 @@
+/**
+ * dashboard-server/routes-vector-cortex-eval.ts — VC0A vector-cortex evaluation
+ * dashboard route.
+ *
+ * A single reader-only GET /api/vector-cortex/evaluation that aggregates redacted
+ * evaluation rows (persisted JSONL under the state dir) via the reader. No
+ * writable capability — no reset/mutation here.
+ *
+ * Guardrails: PREVENT-PI-004 (local filesystem read only), PREVENT-011 (no
+ * `any`), reader-only aggregate (never payloads/prompts/ledger — EVAL-REDACT-002).
+ */
+import { VC0A_ENABLED } from "../../src/config.js";
+import { readEvalRows } from "../../src/vector-cortex/eval/persist.js";
+import { summarizeEvalRows } from "../../src/vector-cortex/eval/reader.js";
+import { sendJson } from "./routes-vector-cortex-shared.js";
+/** Reader-only aggregate GET /api/vector-cortex/evaluation. */
+export function handleVectorCortexEvaluation(req, res, ctx) {
+    const url = req.url ?? "";
+    if (url !== "/api/vector-cortex/evaluation")
+        return false;
+    if (req.method !== "GET") {
+        // Reader-only: no mutation endpoints exist on this path.
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    const enabled = VC0A_ENABLED();
+    const rows = enabled ? readEvalRows(ctx.stateDir) : [];
+    const summary = summarizeEvalRows(rows);
+    const body = {
+        enabled,
+        mode: enabled ? "A" : "C",
+        samples: summary.samples,
+        byMode: {
+            A: summary.byMode.A,
+            B: summary.byMode.B,
+            C: summary.byMode.C,
+        },
+        histogram: {
+            edges: [...summary.histogram.edges],
+            cells: [...summary.histogram.cells],
+            overflow: summary.histogram.overflow,
+            total: summary.histogram.total,
+        },
+        rejects: [], // VC0C wires live breaker/reject telemetry here
+        updatedAt: new Date().toISOString(),
+    };
+    sendJson(res, 200, body);
+    return true;
+}

package/dist/extensions/dashboard-server/routes-vector-cortex-health.js

@@ -0,0 +1,233 @@
+/**
+ * dashboard-server/routes-vector-cortex-health.ts — VC0C vector-cortex breaker
+ * health + reset routes (plus the VC2C encoder-health facts they surface).
+ *
+ *   GET  /api/vector-cortex/health          — reader-only aggregate health card
+ *   POST /api/vector-cortex/breakers/reset  — explicit admin capability
+ *
+ * Guardrails: PREVENT-PI-004 (local filesystem read only), PREVENT-011 (no
+ * `any`), reader-only aggregate (never payloads/prompts/ledger — EVAL-REDACT-002).
+ */
+import { createHash } from "node:crypto";
+import { readFileSync, statSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { VC0C_ENABLED, VC2C_ENABLED } from "../../src/config.js";
+import { createVectorCortexSafety } from "../mega-runtime/vector-cortex-safety.js";
+import { readEncoderManifest, verifyEncoderAsset, detectPlatform } from "../../src/vector-cortex/encoder/asset.js";
+import { sendJson, readJsonBody } from "./routes-vector-cortex-shared.js";
+/** Resolve the committed encoder-v1 asset dir by walking up to the repo root. */
+function encoderAssetDir() {
+    let dir = dirname(fileURLToPath(import.meta.url));
+    const rel = join("assets", "vector-cortex", "encoder-v1");
+    for (let i = 0; i < 8; i++) {
+        const candidate = join(dir, rel);
+        try {
+            // guardrails-allow PREVENT-PI-004: local asset filesystem read (loopback)
+            readFileSync(join(candidate, "manifest.json"));
+            return candidate;
+        }
+        catch {
+            /* keep walking */
+        }
+        const next = dirname(dir);
+        if (next === dir)
+            break;
+        dir = next;
+    }
+    return null;
+}
+let healthCache = null;
+/** Stable cache key: manifest bytes + (size,mtime) of the asset files + platform. */
+function healthFactCacheKey(dir, manifestPath) {
+    const platform = detectPlatform();
+    if (!platform)
+        return null;
+    const parts = [platform];
+    try {
+        for (const p of [manifestPath, join(dir, "model.onnx"), join(dir, "tokenizer.json")]) {
+            const s = statSync(p);
+            parts.push(`${s.size}:${s.mtimeMs}`);
+        }
+        // guardrails-allow PREVENT-PI-004: local manifest filesystem read (loopback)
+        parts.push(createHash("sha256").update(readFileSync(manifestPath)).digest("hex"));
+    }
+    catch {
+        return null;
+    }
+    return parts.join("|");
+}
+function computeEncoderHealthFacts(dir) {
+    const manifest = readEncoderManifest(dir);
+    if (manifest === null)
+        return { assetDigest: null, mode: "C" };
+    const manifestPath = join(dir, "manifest.json");
+    const key = healthFactCacheKey(dir, manifestPath);
+    if (key === null)
+        return null;
+    if (healthCache !== null && healthCache.key === key)
+        return healthCache.facts;
+    let digest;
+    try {
+        // guardrails-allow PREVENT-PI-004: local manifest filesystem read (loopback)
+        digest = createHash("sha256").update(readFileSync(manifestPath)).digest("hex");
+    }
+    catch {
+        return { assetDigest: null, mode: "B" };
+    }
+    const verify = verifyEncoderAsset(dir, manifest, detectPlatform());
+    const facts = { assetDigest: digest, mode: verify.ok ? "A" : "B" };
+    healthCache = { key, facts };
+    return facts;
+}
+function encoderHealthFacts() {
+    if (!VC2C_ENABLED()) {
+        // Rollback: MEGACOMPACT_VC2C=0 selects C — report the inactive (flag-gated)
+        // mode with no asset digest rather than an on-disk-computed A/B.
+        return { assetDigest: null, mode: "C" };
+    }
+    const dir = encoderAssetDir();
+    if (dir === null)
+        return { assetDigest: null, mode: "C" };
+    const facts = computeEncoderHealthFacts(dir);
+    if (facts === null)
+        return { assetDigest: null, mode: "C" };
+    return facts;
+}
+/**
+ * Reader-only GET /api/vector-cortex/health (VC0C).
+ *
+ * Aggregate health card: breaker state (window/probe/backoff), durable spool
+ * frontier/authority/lag, and a worst-state aggregate. Constructs the safety
+ * adapter over the state dir — durable spool state (frontier-frozen, lag) is
+ * read from disk, so it reflects restart. Purely read: no mutation, never
+ * payloads/prompts/ledger.
+ */
+export function handleVectorCortexHealth(req, res, ctx) {
+    const url = req.url ?? "";
+    if (url !== "/api/vector-cortex/health")
+        return false;
+    if (req.method !== "GET") {
+        // Reader-only path: no mutation endpoint lives at /health.
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    const enabled = VC0C_ENABLED();
+    const safety = enabled ? createVectorCortexSafety({ stateDir: ctx.stateDir }) : null;
+    const card = safety ? safety.health() : null;
+    const enc = encoderHealthFacts();
+    const fallback = {
+        enabled: false,
+        mode: "C",
+        state: "CLOSED_A",
+        subsystem: "provider",
+        sinceMs: 0,
+        windowMs: 0,
+        probeCount: 0,
+        backoffDelayMs: 0,
+        frontierFrozen: false,
+        authorityOutage: false,
+        spoolLag: 0,
+        attempts: 0,
+        failures: 0,
+        p95Ms: 0,
+        failureRate: 0,
+        updatedAt: new Date().toISOString(),
+        aggregate: "CLOSED_A",
+        stateSource: "ephemeral",
+        encoderAssetDigest: enc.assetDigest,
+        encoderMode: enc.mode,
+    };
+    if (!card) {
+        sendJson(res, 200, fallback);
+        return true;
+    }
+    const mode = card.state === "CLOSED_A" ? "A" : card.state === "MANUAL_HALT" ? "C" : "B";
+    const aggregate = card.state === "MANUAL_HALT"
+        ? "MANUAL_HALT"
+        : card.state === "OPEN_C"
+            ? "OPEN_C"
+            : card.state === "OPEN_B"
+                ? "OPEN_B"
+                : card.state === "PROBE_B" || card.state === "PROBE_A"
+                    ? "PROBE"
+                    : "CLOSED_A";
+    const body = {
+        enabled,
+        mode,
+        state: card.state,
+        subsystem: card.subsystem,
+        sinceMs: card.sinceMs,
+        reason: card.reason,
+        windowMs: card.windowMs,
+        probeCount: card.probeCount,
+        backoffDelayMs: card.backoffDelayMs,
+        frontierFrozen: card.frontierFrozen,
+        authorityOutage: card.authorityOutage,
+        spoolLag: card.spoolLag,
+        attempts: card.attempts,
+        failures: card.failures,
+        p95Ms: card.p95Ms,
+        failureRate: card.failureRate,
+        updatedAt: new Date().toISOString(),
+        aggregate,
+        stateSource: card.stateSource,
+        encoderAssetDigest: enc.assetDigest,
+        encoderMode: enc.mode,
+    };
+    sendJson(res, 200, body);
+    return true;
+}
+/**
+ * Admin POST /api/vector-cortex/breakers/reset (VC0C).
+ *
+ * Explicit admin capability (separate from the reader GET). Clears a breaker's
+ * cooldown — or unwires a MANUAL_HALT — but NEVER evidence (attempts/failures
+ * are retained, per TRIAD_RESILIENCE). The subsystem is actor-supplied via the
+ * JSON body `{ subsystem }`. Every reset is documented in the returned record
+ * (state, retained evidence, updatedAt) — an auditable mutation surface; the
+ * GET path can never mutate.
+ */
+export function handleVectorCortexBreakersReset(req, res, ctx) {
+    const url = req.url ?? "";
+    if (url !== "/api/vector-cortex/breakers/reset")
+        return false;
+    if (req.method !== "POST") {
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    if (!VC0C_ENABLED()) {
+        sendJson(res, 409, { error: "vco_c_disabled" });
+        return true;
+    }
+    readJsonBody(req, (parsed) => {
+        if (!parsed.ok) {
+            sendJson(res, 400, { error: parsed.error });
+            return;
+        }
+        const subsystem = parsed.value.subsystem;
+        if (typeof subsystem !== "string" || subsystem.length === 0) {
+            sendJson(res, 400, { error: "subsystem_required" });
+            return;
+        }
+        try {
+            const safety = createVectorCortexSafety({ stateDir: ctx.stateDir });
+            const rec = safety.reset(subsystem);
+            const body = {
+                subsystem: rec.subsystem,
+                state: rec.state,
+                cooldownCleared: true,
+                attempts: rec.attempts,
+                failures: rec.failures,
+                probeCount: rec.probeCount,
+                manualReason: rec.manualReason,
+                updatedAt: rec.updatedAt,
+            };
+            sendJson(res, 200, body);
+        }
+        catch {
+            sendJson(res, 500, { error: "reset_failed" });
+        }
+    });
+    return true;
+}

package/dist/extensions/dashboard-server/routes-vector-cortex-ledger.js

@@ -0,0 +1,82 @@
+/**
+ * dashboard-server/routes-vector-cortex-ledger.ts — VC1B vector-cortex ledger
+ * dashboard route.
+ *
+ * Reader-only GET /api/vector-cortex/ledger built on the LedgerReader capability:
+ * opens the occurrence-v2 ledger for this repo's state dir and returns the
+ * session's occurrence IDENTITY rows (seq/eventId/kind/digest/toolCallId) plus
+ * high-water/count. NEVER ships sourceBytes or prompt text (reader-only
+ * no-ledger-text rule). Optional `?session=<id>` query selects the session.
+ *
+ * Guardrails: PREVENT-PI-004 (local filesystem read only), PREVENT-011 (no
+ * `any`), reader-only aggregate/identity only.
+ */
+import { VC1B_ENABLED } from "../../src/config.js";
+import { createLedgerStore } from "../../src/vector-cortex/ledger/store.js";
+import { sendJson } from "./routes-vector-cortex-shared.js";
+/**
+ * Reader-only GET /api/vector-cortex/ledger (VC1B).
+ */
+export function handleVectorCortexLedger(req, res, ctx) {
+    const url = req.url ?? "";
+    const path = url.split("?")[0] ?? url;
+    if (path !== "/api/vector-cortex/ledger")
+        return false;
+    if (req.method !== "GET") {
+        // Reader-only path: no mutation endpoint lives at /ledger.
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    // Parse the optional session query parameter.
+    let session = "default";
+    const qs = url.split("?")[1];
+    if (qs !== undefined) {
+        for (const pair of qs.split("&")) {
+            const [k, v] = pair.split("=");
+            if (k === "session" && v !== undefined && v.length > 0) {
+                session = decodeURIComponent(v);
+            }
+        }
+    }
+    const enabled = VC1B_ENABLED();
+    let active = enabled;
+    let highWater = "0";
+    let count = 0;
+    let occurrences = [];
+    if (enabled) {
+        try {
+            const store = createLedgerStore({ stateDir: ctx.stateDir });
+            try {
+                const reader = store.reader();
+                highWater = reader.highWater(session).toString();
+                const rows = reader.readSession(session);
+                count = rows.length;
+                // Identity only: never sourceBytes or prompt text (reader-only rule).
+                occurrences = rows.slice(-500).map((occ) => ({
+                    seq: occ.seq.toString(),
+                    eventId: occ.eventId,
+                    kind: occ.kind,
+                    digest: occ.digest,
+                    ...(occ.toolCallId !== undefined ? { toolCallId: occ.toolCallId } : {}),
+                }));
+            }
+            finally {
+                store.close();
+            }
+        }
+        catch {
+            // Non-fatal: a missing/corrupt ledger DB degrades to `enabled:false`.
+            active = false;
+        }
+    }
+    const body = {
+        enabled: active,
+        session,
+        highWater,
+        count,
+        occurrences,
+        updatedAt: new Date().toISOString(),
+    };
+    sendJson(res, 200, body);
+    return true;
+}

package/dist/extensions/dashboard-server/routes-vector-cortex-shared.js

@@ -0,0 +1,46 @@
+/**
+ * dashboard-server/routes-vector-cortex-shared.ts — shared HTTP helpers for the
+ * per-feature vector-cortex route modules.
+ *
+ * Homes the small request/response helpers used across the VC0A/VC0C/VC1B/VC3A
+ * handler modules (`sendJson`, `readJsonBody`) so the feature modules stay small
+ * and within extension line limits.
+ *
+ * Guardrails: PREVENT-PI-004 (loopback dashboard response only), PREVENT-011 (no
+ * `any`), PREVENT-001 (JSON.parse guarded by an object/shape check).
+ */
+export function sendJson(res, status, body) {
+    // guardrails-allow PREVENT-PI-004: loopback dashboard response (local)
+    res.writeHead(status, { "Content-Type": "application/json" });
+    res.end(JSON.stringify(body));
+}
+/**
+ * Parse a JSON request body with a size cap. `cb` receives either a validated
+ * plain object or an error reason. PREVENT-001: JSON.parse is guarded by a
+ * shape check (rejects null / arrays / non-objects).
+ */
+export function readJsonBody(req, cb) {
+    let body = "";
+    let tooBig = false;
+    req.on("data", (chunk) => {
+        if (body.length > 65536) {
+            tooBig = true;
+            return;
+        }
+        body += chunk.toString();
+    });
+    req.on("end", () => {
+        if (tooBig)
+            return cb({ ok: false, error: "body_too_large" });
+        try {
+            const v = body ? JSON.parse(body) : {};
+            if (typeof v !== "object" || v === null || Array.isArray(v)) {
+                return cb({ ok: false, error: "invalid_object" });
+            }
+            cb({ ok: true, value: v });
+        }
+        catch {
+            cb({ ok: false, error: "invalid_json" });
+        }
+    });
+}

package/dist/extensions/dashboard-server/routes-vector-cortex-topology.js

@@ -0,0 +1,68 @@
+/**
+ * dashboard-server/routes-vector-cortex-topology.ts — VC3A vector-cortex topology
+ * dashboard route.
+ *
+ * Reader-only GET /api/vector-cortex/topology built ENTIRELY on the CortexReader
+ * capability: opens the isolated cortex DB for this repo's state dir and returns
+ * the topology summary (enabled, active generation identity, one root digest,
+ * derived frontier, record count, ordinal). It is query-only — never
+ * append/rebuild/switch. No writer or admin capability is reachable on this path
+ * (no writer/admin leakage). Non-fatal: a missing or corrupt cortex DB degrades
+ * to `enabled:false`.
+ *
+ * Guardrails: PREVENT-PI-004 (local filesystem read only), PREVENT-011 (no
+ * `any`), reader-only aggregate.
+ */
+import { VC3A_ENABLED } from "../../src/config.js";
+import { createCortexStore } from "../../src/vector-cortex/cortex/store.js";
+import { sendJson } from "./routes-vector-cortex-shared.js";
+/**
+ * Reader-only GET /api/vector-cortex/topology (VC3A).
+ */
+export function handleVectorCortexTopology(req, res, ctx) {
+    const url = req.url ?? "";
+    const path = url.split("?")[0] ?? url;
+    if (path !== "/api/vector-cortex/topology")
+        return false;
+    if (req.method !== "GET") {
+        // Reader-only path: no mutation endpoint lives at /topology.
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    const enabled = VC3A_ENABLED();
+    let active = enabled;
+    let summary = { generationId: null, rootDigest: null, sourceHighWater: "0", recordCount: 0, ordinal: null };
+    if (enabled) {
+        try {
+            const store = createCortexStore({ stateDir: ctx.stateDir });
+            try {
+                const s = store.reader().topologySummary();
+                summary = {
+                    generationId: s.generationId,
+                    rootDigest: s.rootDigest,
+                    sourceHighWater: s.sourceHighWater,
+                    recordCount: s.recordCount,
+                    ordinal: s.ordinal,
+                };
+            }
+            finally {
+                store.close();
+            }
+        }
+        catch {
+            // Non-fatal: a missing/corrupt cortex DB degrades to `enabled:false`.
+            active = false;
+        }
+    }
+    const body = {
+        enabled: active,
+        generationId: summary.generationId,
+        rootDigest: summary.rootDigest,
+        sourceHighWater: summary.sourceHighWater,
+        recordCount: summary.recordCount,
+        ordinal: summary.ordinal,
+        updatedAt: new Date().toISOString(),
+    };
+    sendJson(res, 200, body);
+    return true;
+}