pi-mega-compact 0.20.2 → 0.20.4

package/dist/config/vector-cortex.js

@@ -159,6 +159,19 @@ export const VC4B_ENABLED = () => sprintFlag("MEGACOMPACT_VC4B");
  * never in EXCLUDED_SETTINGS), mirroring VC4A/VC4B.
  */
 export const VC4C_ENABLED = () => sprintFlag("MEGACOMPACT_VC4C");
+/**
+ * VC5A — PromptDagV1 + budgeted portfolio planner. Default ON.
+ * `MEGACOMPACT_VC5A=0` disables and is byte-identical to the predecessor
+ * (VC4C): no prompt DAG is built or validated, no budgeted plan is selected,
+ * the `vector_cortex_plan_selected` / `vector_cortex_plan_mandatory_overflow`
+ * events are never emitted, and the prompt continues to be built by the
+ * predecessor VC4C closure/reconstruction path (its goldens are unchanged).
+ * The builder/validator/portfolio functions are PURE — flag OFF gates the
+ * reporter + dashboard seam, never the arithmetic. This flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS),
+ * mirroring VC4A/VC4B/VC4C.
+ */
+export const VC5A_ENABLED = () => sprintFlag("MEGACOMPACT_VC5A");
 // ---------------------------------------------------------------------------
 // Breaker state machine constants (TRIAD_RESILIENCE.md §breaker).
 // Rolled numbers for one 60s window; VC0C consumes these at its breaker seam.

package/dist/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/extensions/dashboard-server/routes-rag-settings-helpers.js

@@ -149,6 +149,7 @@ export const SETTINGS = [
             boolDirect("MEGACOMPACT_VC4A", "VC4A Dual-Tier Shards", "SemanticShardV1/ExactShardV1/ShardManifestV1: partition a session ONLY at complete EventV2 boundaries; exact shards preserve every tool call/result pair, anchor and invalid UTF-8 event as original bytes (pairs never split across exact shards); manifest enforces disjoint sorted ranges + complete protected-span coverage. OFF = mode C, exact anchors/current transcript only, byte-identical predecessor.", true),
             boolDirect("MEGACOMPACT_VC4B", "VC4B Residual Basis Parity", "Residual codec: orthonormal DCT-II basis + int16 block quantization + block-scoped exact correction stream + (9,6) Reed-Solomon parity shards with SHA-256 corruption detection; admission gates on encodedSize <= 95% of exact-compressed size. OFF = mode C, no residual artifact produced, byte-identical predecessor.", true),
             boolDirect("MEGACOMPACT_VC4C", "VC4C Reconstruction Fidelity", "Conservative closure + source-order assembly + reconstruction validator: recursively closes dependencies and whole tool pairs to a fixed point, resolves contradictions by retaining the later exact source resolution, assembles spans solely by source range, and rejects missing anchors / split pairs / digest mismatch / unresolved contradiction. Mandatory token estimate is content-only and handed unchanged to VC5A. OFF = mode C, no closure/validator, byte-identical predecessor (VC4B).", true),
+            boolDirect("MEGACOMPACT_VC5A", "VC5A PromptDagV1 + Budgeted Planner", "Single-session DAG (PromptDagV1) + budgeted 0/1 portfolio planner: builds a stable Kahn-ordered DAG, computes the mandatory dependency/tool/anchor closure before optional selection, returns MANDATORY_CLOSURE_OVER_BUDGET with evidence preserved on overflow, and runs a utility-per-token portfolio that never exceeds the remaining budget. Framing is owned here, not in VC4C. OFF = byte-identical predecessor (VC4C).", true),
         ],
     },
     {

package/dist/extensions/dashboard-server/routes-vector-cortex-plans.js

@@ -0,0 +1,49 @@
+/**
+ * dashboard-server/routes-vector-cortex-plans.ts — VC5A PromptDagV1 + budgeted
+ * planner dashboard route.
+ *
+ * Reader-only GET /api/vector-cortex/plans returning ONLY plan manifests — the
+ * registered PromptDagV1 (DAG-001..030) and budgeted-planner (PLN-001..020)
+ * identifier counts, plus a reader-only plans array. NEVER exposes session
+ * payloads, prompt text, byte spans, or source bytes (reader-only,
+ * SECURITY_PRIVACY). Flag-gated on MEGACOMPACT_VC5A: `enabled:false` when off
+ * (byte-identical to the pre-VC5A predecessor).
+ *
+ * The VC5A planner is PURE IN-MEMORY logic in this sprint (it has no durable plan
+ * store yet), so the per-run plan outputs are not persisted. The route reports
+ * the registered manifest layout truthfully: `enabled` reflects the flag, the
+ * dag/planner counts come from the registered conformance ID range, and `plans`
+ * is empty until a future sprint persists selected plans. Non-fatal: an internal
+ * error degrades to `enabled:false` with empty arrays.
+ *
+ * Guardrails: PREVENT-PI-004 (local filesystem / in-process state only),
+ * PREVENT-011 (no `any`), reader-only aggregate (counts + manifests only).
+ */
+import { VC5A_ENABLED } from "../../src/config.js";
+import { DAG_IDS } from "../../src/vector-cortex/prompt-dag/types.js";
+import { PLN_IDS } from "../../src/vector-cortex/planner/types.js";
+import { sendJson } from "./routes-vector-cortex-shared.js";
+/**
+ * Reader-only GET /api/vector-cortex/plans (VC5A).
+ */
+export function handleVectorCortexPlans(req, res, _ctx) {
+    const url = req.url ?? "";
+    const path = url.split("?")[0] ?? url;
+    if (path !== "/api/vector-cortex/plans")
+        return false;
+    if (req.method !== "GET") {
+        // Reader-only path: cannot be "off" without a GET; it is genuinely read-only.
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    const enabled = VC5A_ENABLED();
+    const body = {
+        enabled,
+        dagCount: enabled ? DAG_IDS.length : 0,
+        plannerCount: enabled ? PLN_IDS.length : 0,
+        plans: [],
+        updatedAt: new Date().toISOString(),
+    };
+    sendJson(res, 200, body);
+    return true;
+}

package/dist/extensions/dashboard-server/routes-vector-cortex.js

@@ -21,3 +21,4 @@ export { handleVectorCortexQuery } from "./routes-vector-cortex-query.js";
 export { handleVectorCortexShards } from "./routes-vector-cortex-shards.js";
 export { handleVectorCortexResidual } from "./routes-vector-cortex-residual.js";
 export { handleVectorCortexReconstruct } from "./routes-vector-cortex-reconstruct.js";
+export { handleVectorCortexPlans } from "./routes-vector-cortex-plans.js";

package/dist/extensions/dashboard-server/routes.js

@@ -23,4 +23,4 @@ export { handleRagSettings } from "./routes-rag-settings.js";
 export { handleRagMetrics } from "./routes-rag-metrics.js";
 export { handleModelThresholds } from "./routes-model-thresholds.js";
 export { handleWiki } from "./routes-wiki.js";
-export { handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, } from "./routes-vector-cortex.js";
+export { handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, } from "./routes-vector-cortex.js";

package/dist/extensions/dashboard-server/server.js

@@ -14,7 +14,7 @@ import { createRequire } from "node:module";
 import { NEW_UI } from "../../src/config.js";
 import { log, setLogPath, setDashboardServerVersion } from "./state.js";
 import { detectTailscaleIP } from "./tailscale.js";
-import { buildRouteContext, handleIndex, handleRepoIndex, handleEvents, handleGameState, handleGameScores, handlePerf, handlePerfSamples, handleAchievements, handleSessions, handleTopics, handleTurns, handleMaintenance, handleProviderCache, handleCacheStripes, handleMemoryStatus, handleSetupStatus, handleSetupDetect, handleSetupConfigure, handleMemoryMap, handleRaptorTree, handleRaptorBuildHistory, handleContextHealth, handleCachePoison, handleHealthSettings, handleEmbedderHealth, handleRagSettings, handleRagMetrics, handleModelThresholds, handleWiki, handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleStatic, } from "./routes.js";
+import { buildRouteContext, handleIndex, handleRepoIndex, handleEvents, handleGameState, handleGameScores, handlePerf, handlePerfSamples, handleAchievements, handleSessions, handleTopics, handleTurns, handleMaintenance, handleProviderCache, handleCacheStripes, handleMemoryStatus, handleSetupStatus, handleSetupDetect, handleSetupConfigure, handleMemoryMap, handleRaptorTree, handleRaptorBuildHistory, handleContextHealth, handleCachePoison, handleHealthSettings, handleEmbedderHealth, handleRagSettings, handleRagMetrics, handleModelThresholds, handleWiki, handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, handleStatic, } from "./routes.js";
 export async function launchDashboardServer(stateDir) {
     // Our own package version — exposed at /api/version so the launcher can
     // detect a stale server (started by an older build) and replace it on
@@ -167,14 +167,16 @@ export async function launchDashboardServer(stateDir) {
         serveClientAsset,
         detectCrossRepoDrift,
     });
-    // Bind host resolution: explicit MEGACOMPACT_DASHBOARD_HOST override wins;
-    // otherwise auto-bind to the Tailscale interface (tailnet access); fall back
-    // to loopback when Tailscale is absent. 0.0.0.0 means "all interfaces" and
-    // opts into permissive CORS below.
-    const host = process.env.MEGACOMPACT_DASHBOARD_HOST ??
-        detectTailscaleIP() ??
-        "127.0.0.1";
+    // Bind host resolution. Default: ALL interfaces (0.0.0.0) so the dashboard
+    // is reachable on loopback (localhost — the launcher's health check + the
+    // local browser), the tailnet (Tailscale), and any LAN interface. The
+    // network-denial gate was removed (the user opted into open access);
+    // MEGACOMPACT_DASHBOARD_HOST overrides for anyone who wants to restrict to
+    // a single interface. The tailnet IP is still detected so we can surface it
+    // as the remote access address. 0.0.0.0 opts into permissive CORS below.
+    const host = process.env.MEGACOMPACT_DASHBOARD_HOST ?? "0.0.0.0";
     const allInterfaces = host === "0.0.0.0";
+    const tailscaleIP = allInterfaces ? detectTailscaleIP() : null;
     // guardrails-allow PREVENT-PI-004: optional, user-triggered /dashboard server (tailnet-local via Tailscale mesh or loopback); no remote outbound calls.
     const server = createServer((req, res) => {
         // CORS for local access — restricted to loopback/same-origin tailnet
@@ -273,6 +275,8 @@ export async function launchDashboardServer(stateDir) {
             return;
         if (handleVectorCortexReconstruct(req, res, ctx))
             return;
+        if (handleVectorCortexPlans(req, res, ctx))
+            return;
         handleStatic(req, res, ctx);
     });
     // Bind base + range are env-configurable so tests can use a private,
@@ -295,25 +299,28 @@ export async function launchDashboardServer(stateDir) {
                 }
             });
             server.listen(port, host, () => {
-                // When bound to the loopback, keep the legacy localhost URL so the
-                // user's browser (which resolves localhost → ::1 or 127.0.0.1) works.
-                // When bound to a tailnet/tailscale IP, surface that address instead.
+                // Surface localhost for local reach (the launcher health-checks
+                // localhost + the local browser uses it), and — when bound to all
+                // interfaces with a tailnet present — also surface the tailnet
+                // address for remote devices on the mesh.
+                const localUrl = `http://localhost:${port}`; // guardrails-allow PREVENT-PI-004: dashboard URL (loopback/all-interfaces, user-opted open access)
+                const tailnetUrl = allInterfaces && tailscaleIP ? `http://${tailscaleIP}:${port}` : null; // guardrails-allow PREVENT-PI-004: dashboard URL (tailnet, user-opted open access)
                 const url = host === "127.0.0.1"
-                    ? `http://localhost:${port}`
-                    : `http://${host}:${port}`; // guardrails-allow PREVENT-PI-004: dashboard URL (tailnet-local via Tailscale mesh or loopback)
-                log("server running", { url, host });
+                    ? localUrl
+                    : tailnetUrl ?? `http://${host}:${port}`;
+                log("server running", { url, host, tailnetUrl });
                 // eslint-disable-next-line no-console
-                console.log(`[mega-compact] dashboard server running: ${url}`);
-                // v0.8.2: also bind the IPv6 loopback (::1) when bound to the IPv4
-                // loopback. On many systems `localhost` resolves to ::1 first (see
-                // /etc/hosts), so an IPv4-only bind makes the browser hit ::1:port and
-                // get connection refused. PREVENT-PI-004 (loopback-only) means BOTH
-                // 127.0.0.1 and ::1. When bound to a tailscale/0.0.0.0 host, we do NOT
-                // bind ::1 — the tailnet address is what the user reaches. Non-fatal:
+                console.log(`[mega-compact] dashboard server running: ${url}` +
+                    (tailnetUrl ? ` (also ${localUrl})` : ""));
+                // v0.8.2: also bind the IPv6 loopback (::1) when localhost must work.
+                // On many systems `localhost` resolves to ::1 first (see /etc/hosts),
+                // so an IPv4-only bind makes the browser hit ::1:port and get refused.
+                // Bind ::1 for the explicit loopback bind AND the all-interfaces bind
+                // (a browser resolving localhost → ::1 must still connect). Non-fatal:
                 // IPv4-only hosts or a ::1 already in use just skip the mirror.
                 let v6;
                 const v4Handler = server.listeners("request")[0];
-                if (host === "127.0.0.1" && v4Handler) {
+                if ((host === "127.0.0.1" || allInterfaces) && v4Handler) {
                     v6 = createServer((r, s) => v4Handler.call(server, r, s));
                     v6.on("error", (e) => log("ipv6 loopback bind skipped", {
                         port,

package/dist/src/config/vector-cortex.js

@@ -159,6 +159,19 @@ export const VC4B_ENABLED = () => sprintFlag("MEGACOMPACT_VC4B");
  * never in EXCLUDED_SETTINGS), mirroring VC4A/VC4B.
  */
 export const VC4C_ENABLED = () => sprintFlag("MEGACOMPACT_VC4C");
+/**
+ * VC5A — PromptDagV1 + budgeted portfolio planner. Default ON.
+ * `MEGACOMPACT_VC5A=0` disables and is byte-identical to the predecessor
+ * (VC4C): no prompt DAG is built or validated, no budgeted plan is selected,
+ * the `vector_cortex_plan_selected` / `vector_cortex_plan_mandatory_overflow`
+ * events are never emitted, and the prompt continues to be built by the
+ * predecessor VC4C closure/reconstruction path (its goldens are unchanged).
+ * The builder/validator/portfolio functions are PURE — flag OFF gates the
+ * reporter + dashboard seam, never the arithmetic. This flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS),
+ * mirroring VC4A/VC4B/VC4C.
+ */
+export const VC5A_ENABLED = () => sprintFlag("MEGACOMPACT_VC5A");
 // ---------------------------------------------------------------------------
 // Breaker state machine constants (TRIAD_RESILIENCE.md §breaker).
 // Rolled numbers for one 60s window; VC0C consumes these at its breaker seam.

package/dist/src/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/src/vector-cortex/planner/manifest.js

@@ -0,0 +1,66 @@
+/**
+ * vector-cortex/planner/manifest.ts — plan manifest identity + pre-provider
+ * revalidation (VC5A).
+ *
+ * Split from `portfolio.ts` (which owns SELECTION) so each file keeps one
+ * concern and stays under the 300-line soft limit: this module owns the plan's
+ * IDENTITY and the last gate before a provider call.
+ *
+ * The manifest digest deliberately covers PER-NODE TOKEN COUNTS, which the DAG
+ * digest does not: token counts are a planner input rather than DAG structure.
+ * That is exactly what makes the sprint's unique failure injection detectable —
+ * mutating a node's token count after planning but before validation changes the
+ * recomputed manifest digest, so `validatePlanManifest` returns
+ * `PLN_MANIFEST_DIGEST_MISMATCH` and the plan never reaches the provider.
+ *
+ * Pure/deterministic: no storage, no console, no network (PREVENT-PI-004).
+ */
+import { createHash } from "node:crypto";
+/**
+ * Deterministic digest over a plan AND the token counts/utilities it was
+ * selected with. Hashing walks `selectedNodeIds` in its stored (sorted) order,
+ * so the digest is a pure function of the plan and the candidate facts.
+ *
+ * A node missing from `candidates` hashes as `-1`, so dropping a candidate is
+ * itself a detectable mutation rather than a silently-skipped field.
+ */
+export function planManifestDigest(plan, candidates) {
+    const h = createHash("sha256");
+    h.update(plan.schema);
+    h.update(" ");
+    h.update(plan.dagDigest);
+    h.update(" ");
+    h.update(String(plan.tokenBudget));
+    h.update(" ");
+    h.update(String(plan.tokenTotal));
+    h.update(" ");
+    h.update(String(plan.dependencyHighWater));
+    const byId = new Map(candidates.map((c) => [c.nodeId, c]));
+    for (const id of plan.selectedNodeIds) {
+        const c = byId.get(id);
+        h.update("");
+        h.update(id);
+        h.update(" ");
+        // Token count is part of the identity — a post-plan mutation breaks it.
+        h.update(String(c?.tokenEstimate ?? -1));
+        h.update(" ");
+        h.update(String(c?.utility ?? -1));
+    }
+    return h.digest("hex");
+}
+/**
+ * Re-validate a plan against the candidates AS THEY STAND NOW, immediately
+ * before a provider call. Returns `PLN_MANIFEST_DIGEST_MISMATCH` when the
+ * recomputed manifest digest disagrees with the digest pinned at planning time.
+ *
+ * This is the sprint's unique failure injection: a node token count mutated
+ * after planning but before validation is caught here, BEFORE the provider is
+ * invoked, rather than producing a prompt whose real cost differs from the
+ * admitted budget.
+ */
+export function validatePlanManifest(plan, candidates, pinnedDigest) {
+    if (planManifestDigest(plan, candidates) !== pinnedDigest) {
+        return { ok: false, code: "PLN_MANIFEST_DIGEST_MISMATCH" };
+    }
+    return { ok: true };
+}

package/dist/src/vector-cortex/planner/types.js

@@ -0,0 +1,41 @@
+/**
+ * vector-cortex/planner/types.ts — `PlanV1` + the budget admission contract
+ * (VC5A, task 1).
+ *
+ * VC5A EXCLUSIVELY OWNS FRAMING + BUDGET ADMISSION (CONTRACTS §plan and
+ * closure). VC4C hands over `ClosureResult.mandatoryTokenEstimate`, a
+ * CONTENT-ONLY count with no prompt framing, no role tags and no separators, and
+ * VC4C never truncates a mandatory node nor reasons about a budget. This module
+ * adds the framing cost on top of that content estimate and decides admission:
+ *
+ *   framed(node)   = tokenEstimate + framingPerNode
+ *   mandatoryCost  = mandatoryTokenEstimate + framingPerNode * |mandatory|
+ *                    + framingOverhead
+ *
+ * If `mandatoryCost > tokenBudget` the planner returns
+ * `MANDATORY_CLOSURE_OVER_BUDGET` and the adapter demotes to C. Crucially it
+ * does so WITHOUT DROPPING EVIDENCE: the mandatory set is returned intact on the
+ * failure so the caller can report exactly what did not fit (the sprint bar:
+ * "over-budget mandatory closure never drops evidence and always demotes").
+ *
+ * The framing constants are CONFIGURABLE, never invented magic numbers: a caller
+ * supplies the profile it is actually rendering with, and the defaults below are
+ * documented as a conservative baseline rather than a measured provider fact.
+ *
+ * Pure types + registered conformance IDs: no storage, no console, no network
+ * (PREVENT-PI-004 / PREVENT-011).
+ */
+/**
+ * Conservative default framing baseline. Documented as a BASELINE, not a
+ * measured provider constant: a real provider profile (VC5B) overrides it. Kept
+ * small and explicit so a default-driven plan is never silently over-optimistic.
+ */
+export const DEFAULT_FRAMING = { perNode: 4, overhead: 8 };
+/**
+ * Registered PLN conformance ID range (PLN-001..020). The acceptance aggregator
+ * reads these rows from the v2 manifest and asserts each returns its manifest
+ * `ok`/`code`.
+ */
+export const PLN_IDS = Array.from({ length: 20 }, (_v, i) => `PLN-${String(i + 1).padStart(3, "0")}`);
+/** Named VC5A planner conformance assertions (the sprint's headline rows). */
+export const PLAN_NAMED_IDS = ["PLN-MANDATORY-002", "PLN-TIE-003"];