pi-mega-compact 0.20.26 → 0.20.28

package/dist/config/vector-cortex-vc9a.js

@@ -0,0 +1,29 @@
+/**
+ * config/vector-cortex-vc9a.ts — VC9A setup-cortex status-read-path sprint flag.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-vc8c.ts,
+ * vector-cortex-breakers.ts and vector-cortex-early.ts were. This is the
+ * SETUP-DASHBOARD reader flag (the dashboard Setup tab cortex status endpoint).
+ * vector-cortex.ts re-exports it below and root src/config.ts re-exports it, so
+ * no consumer import path changes.
+ *
+ * The split is purely mechanical: VC9A_ENABLED is byte-identical in name,
+ * semantics, and default to the definition it replaces, and vector-cortex.ts
+ * re-exports it so every existing `from "./config/vector-cortex.js"` import
+ * keeps resolving unchanged.
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * VC9A — Setup Cortex status read path (GET /api/setup-cortex-status).
+ * Default ON. `MEGACOMPACT_VC9A=0` disables and is byte-identical to the
+ * predecessor (VC8C-era shape): the endpoint returns `{enabled:false,
+ * mode:"C", status:"off"}` and surfaces no qualification/blocker/health detail —
+ * a pure reader-only projection, never a mutation. This flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS),
+ * mirroring VC4A..VC8C. The dashboard reader itself performs only local
+ * filesystem reads (no network, PREVENT-PI-004).
+ */
+export const VC9A_ENABLED = () => sprintFlag("MEGACOMPACT_VC9A");

package/dist/config/vector-cortex-vc9b.js

@@ -0,0 +1,29 @@
+/**
+ * config/vector-cortex-vc9b.ts — VC9B setup-cortex action-drivers sprint flag.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-vc9a.ts was. This is the
+ * SETUP-DASHBOARD action flag (the dashboard Setup tab fetch/bench/verify action
+ * drivers). vector-cortex.ts re-exports it below and root src/config.ts
+ * re-exports it, so no consumer import path changes.
+ *
+ * The split is purely mechanical: VC9B_ENABLED is byte-identical in name,
+ * semantics, and default to the definition it replaces, and vector-cortex.ts
+ * re-exports it so every existing `from "./config/vector-cortex.js"` import
+ * keeps resolving unchanged.
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * VC9B — Setup Cortex action drivers (POST /api/setup-cortex-action +
+ * GET /api/setup-cortex-action-log). Default ON. `MEGACOMPACT_VC9B=0` disables
+ * and is byte-identical to the predecessor (VC9A-era): the action POST returns
+ * the disabled shape (404/disabled) and flag-off bytes are unchanged. The
+ * actions only spawn the existing committed local scripts
+ * (scripts/vc2-model-prep/fetch-model.sh / bench-onnx.mjs) or re-read the
+ * committed encoder assets — never payload bytes, no network (PREVENT-PI-004).
+ * This flag MUST also be a dashboard SETTINGS toggle (visible in config UI,
+ * never in EXCLUDED_SETTINGS), mirroring VC9A.
+ */
+export const VC9B_ENABLED = () => sprintFlag("MEGACOMPACT_VC9B");

package/dist/config/vector-cortex-vc9c.js

@@ -0,0 +1,34 @@
+/**
+ * config/vector-cortex-vc9c.ts — VC9C SetupTab Cortex sub-tab sprint flag.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-vc9a.ts and
+ * vector-cortex-vc9b.ts were. This is the SETUP-DASHBOARD UI flag (the Cortex
+ * sub-tab inside SetupTab). vector-cortex.ts re-exports it below and root
+ * src/config.ts re-exports it, so no consumer import path changes.
+ *
+ * The split is purely mechanical: VC9C_ENABLED is byte-identical in name,
+ * semantics, and default to the definition it replaces, and vector-cortex.ts
+ * re-exports it so every existing `from "./config/vector-cortex.js"` import
+ * keeps resolving unchanged.
+ *
+ * The client gates the Cortex sub-tab's visible state on the flag via the
+ * VC0E honest-status pattern: when the VC9A status payload reports the
+ * off/disabled shape (or VC9C is off), the sub-tab is filtered from
+ * SUB_TABS. Flag-off is byte-identical to the predecessor (VC9B-era).
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * VC9C — SetupTab Cortex sub-tab (client UI). Default ON. `MEGACOMPACT_VC9C=0`
+ * disables and is byte-identical to the predecessor (VC9B-era): the Cortex
+ * sub-tab is filtered from SUB_TABS and the Setup tab renders exactly as it
+ * did before this sprint. The sub-tab is a pure consumer of the VC9A status
+ * endpoint (GET /api/setup-cortex-status) + VC9B action endpoints (POST
+ * /api/setup-cortex-action, GET /api/setup-cortex-action-log); it adds NO
+ * server logic and never surfaces payload bytes/prompts/ledger. This flag MUST
+ * also be a dashboard SETTINGS toggle (visible in config UI, never in
+ * EXCLUDED_SETTINGS), mirroring VC9A/VC9B.
+ */
+export const VC9C_ENABLED = () => sprintFlag("MEGACOMPACT_VC9C");

package/dist/config/vector-cortex.js

@@ -244,6 +244,10 @@ export const VC8B_ENABLED = () => sprintFlag("MEGACOMPACT_VC8B");
 // Re-exported here so every existing `from "./config/vector-cortex.js"`
 // import keeps resolving unchanged.
 export { VC8C_ENABLED } from "./vector-cortex-vc8c.js";
+// VC9A/VC9B/VC9C split to vector-cortex-vc9{a,b,c}.ts to stay under the 300-line soft limit.
+export { VC9A_ENABLED } from "./vector-cortex-vc9a.js";
+export { VC9B_ENABLED } from "./vector-cortex-vc9b.js";
+export { VC9C_ENABLED } from "./vector-cortex-vc9c.js";
 // Breaker state machine constants (TRIAD_RESILIENCE.md §breaker) extracted to
 // vector-cortex-breakers.ts to keep this file under the 300-line soft limit.
 export { BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./vector-cortex-breakers.js";

package/dist/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/extensions/dashboard-server/api-contracts/endpoints/registry-ext.js

@@ -27,4 +27,24 @@ export const EXTRA_ENDPOINTS = {
         path: "/api/vector-cortex/ledger",
         description: "Reader-only occurrence-ledger identity view: seq/eventId/kind/digest + high-water (never source payloads).",
     },
+    // ─── VC9A Setup Cortex (dashboard Setup tab cortex status) ─────────
+    /** GET /api/setup-cortex-status — reader-only vector-cortex encoder gate. */
+    setupCortexStatus: {
+        method: "GET",
+        path: "/api/setup-cortex-status",
+        description: "Reader-only vector-cortex encoder gate: mode A/B/C, qualification verdict, blockers, encoder health — for the dashboard Setup tab. Never closes the ML gate.",
+    },
+    // ─── VC9B Setup Cortex actions (dashboard Setup tab action drivers) ─────
+    /** POST /api/setup-cortex-action — confirmation-gated fetch/bench/verify. */
+    setupCortexAction: {
+        method: "POST",
+        path: "/api/setup-cortex-action",
+        description: "Confirmation-gated driver: fetch-model / bench / verify-asset. Executes only the committed local scripts (scripts/vc2-model-prep/*) or re-reads the committed encoder assets; an OPEN hard-gate item returns action_blocked_by_open_item and does NOT spawn. Never payload bytes; confirm:true required.",
+    },
+    /** GET /api/setup-cortex-action-log — bounded, redacted action log tail. */
+    setupCortexActionLog: {
+        method: "GET",
+        path: "/api/setup-cortex-action-log",
+        description: "Bounded (8 KiB) redacted tail of a VC9B action log under <stateDir>/logs/vc9b/; the name must be a validated basename (path traversal rejected).",
+    },
 };

package/dist/extensions/dashboard-server/api-contracts/setup-cortex.js

@@ -0,0 +1,13 @@
+/**
+ * api-contracts/setup-cortex.ts — Setup Cortex status + action API types (VC9A/VC9B).
+ *
+ * Types for GET /api/setup-cortex-status (reader-only aggregate that surfaces
+ * the vector-cortex encoder gate WITHOUT closing the ML gate) and the VC9B
+ * action drivers POST /api/setup-cortex-action + GET /api/setup-cortex-action-log
+ * (confirmation-gated, hard-gate-aware fetches/bench/verify). Reader/actor-only:
+ * never payload bytes/prompts/ledger (EVAL-REDACT-002).
+ *
+ * PREVENT-PI-004: type definitions only, no network code.
+ * PREVENT-011: no `any` type — all types are explicit.
+ */
+export {};

package/dist/extensions/dashboard-server/route-dispatch.js

@@ -8,7 +8,7 @@
  * PREVENT-PI-004: local filesystem read only, no network.
  * PREVENT-011: no `any` type.
  */
-import { handleIndex, handleRepoIndex, handleEvents, handleGameState, handleGameScores, handlePerfSamples, handlePerf, handleAchievements, handleSessions, handleTopics, handleTurns, handleMaintenance, handleProviderCache, handleMemoryStatus, handleCacheStripes, handleSetupStatus, handleSetupDetect, handleSetupConfigure, handleMemoryMap, handleRaptorTree, handleRaptorBuildHistory, handleContextHealth, handleCachePoison, handleHealthSettings, handleEmbedderHealth, handleRagSettings, handleRagMetrics, handleModelThresholds, handleWiki, handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, handleVectorCortexRender, handleVectorCortexRollout, handleVectorCortexClosureProof, handleVectorCortexRestore, } from "./routes.js";
+import { handleIndex, handleRepoIndex, handleEvents, handleGameState, handleGameScores, handlePerfSamples, handlePerf, handleAchievements, handleSessions, handleTopics, handleTurns, handleMaintenance, handleProviderCache, handleMemoryStatus, handleCacheStripes, handleSetupStatus, handleSetupDetect, handleSetupConfigure, handleMemoryMap, handleRaptorTree, handleRaptorBuildHistory, handleContextHealth, handleCachePoison, handleHealthSettings, handleEmbedderHealth, handleRagSettings, handleRagMetrics, handleModelThresholds, handleWiki, handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, handleVectorCortexRender, handleVectorCortexRollout, handleVectorCortexClosureProof, handleVectorCortexRestore, handleSetupCortexStatus, handleSetupCortexAction, handleSetupCortexActionLog, } from "./routes.js";
 // VC6C repair lives in its own module (routes-vector-cortex-repair.ts) so the
 // heal route file stays well under the 400-line extension soft limit.
 import { handleVectorCortexRepair } from "./routes-vector-cortex-repair.js";
@@ -141,5 +141,11 @@ export function dispatchRoutes(req, res, ctx) {
         return true;
     if (handleVectorCortexPlatform(req, res, ctx))
         return true;
+    if (handleSetupCortexStatus(req, res, ctx))
+        return true;
+    if (handleSetupCortexAction(req, res, ctx))
+        return true;
+    if (handleSetupCortexActionLog(req, res, ctx))
+        return true;
     return false;
 }

package/dist/extensions/dashboard-server/routes-rag-settings-vector-cortex.js

@@ -48,5 +48,8 @@ export const VECTOR_CORTEX_SETTINGS = {
         boolDirect("MEGACOMPACT_VC8A", "VC8A Consent-Bound Outcomes", "Consent-bound outcome ledger and offline learning dataset. Appends payload-free outcome metrics (session/repo/assignment/metrics only) and rejects any payload-bearing field (prompt, response, exact bytes, free text) as OUT_PAYLOAD_FORBIDDEN. Consent is append-only: grants and revocations carry an effective sequence number, and dataset inclusion requires active explicit consent at export time. Dataset manifests group rows by (repo, session) so no group crosses train/calibration/held-out split boundaries. Revocations disappear from future manifests. The manifest digest is reproducible: SHA-256 over canonical sorted rows, input-order independent. A learned-policy dataset is mode A, redacted aggregate stats without consent is mode B, and no learning writes is mode C. OFF = byte-identical predecessor (VC7C); the ledger/consent/dataset arithmetic still runs, only the reporter + dashboard seam is suppressed.", true),
         boolDirect("MEGACOMPACT_VC8B", "VC8B Shadow Adaptive Policy", "Bounded shadow adaptive policy + M7 pressure-v2 migration. Policy actions are from a finite set (admit/dampen/defer/escalate/reject) chosen deterministically by the canonical pressure level; token budgets are clamped into a configured window after the pressure factor. Unknown pressure labels are rejected as POL_PRESSURE_UNKNOWN, never coerced to a neighbour. The shadow engine is structurally incapable of affecting the live path: inputs are deep-copied, the canonical prompt digest is pinned before and after to prove non-mutation, and liveMutations is always zero. M7 migrates legacy pressure labels to the v2 canonical five by copy/validate/switch; an unknown label blocks the switch and keeps the legacy pointer (M7_PRESSURE_UNKNOWN). A shadow decision is mode A, static calibrated policy is mode B (forced by invalid A), and fixed legacy thresholds is mode C (forced by M7 or B failure). OFF = byte-identical predecessor (VC8A); the policy/shadow/migration arithmetic still runs, only the reporter + dashboard seam is suppressed.", true),
         boolDirect("MEGACOMPACT_VC8C", "VC8C Canary Platform + Rust Parity", "Canary selection and external Rust parity. The selector admits a qualified external Rust artifact only when ABI version, URL metadata, commit, Cargo.lock digest, and platform all match evidence; a Cargo.lock digest mismatch rejects the artifact (RUST_CARGO_DIGEST_MISMATCH). The cross-conformance runner exchanges length-framed neutral records over a local stdin/stdout channel — a subprocess, never a URL (PREVENT-PI-004). A parity mismatch selects TS mode B. A qualified external artifact is mode A, TS reference is mode B, legacy path is mode C. OFF = byte-identical predecessor (VC8B); the selector and cross-conformance arithmetic still run, only the reporter + dashboard seam is suppressed.", true),
+        boolDirect("MEGACOMPACT_VC9A", "VC9A Setup Cortex Status", "Reader-only Setup Cortex status read path (GET /api/setup-cortex-status): surfaces the vector-cortex encoder gate — mode A/B/C, qualification verdict, open blockers, encoder health — to the dashboard Setup tab without closing the ML gate. OFF = byte-identical predecessor (VC8C-era): returns enabled:false / mode:C / status:off.", true),
+        boolDirect("MEGACOMPACT_VC9B", "VC9B Setup Cortex Actions", "Setup Cortex action drivers (POST /api/setup-cortex-action + GET /api/setup-cortex-action-log): confirmation-gated wrappers that fetch-model / bench / verify-asset by spawning only the committed local scripts (scripts/vc2-model-prep/fetch-model.sh, bench-onnx.mjs) or re-reading the committed encoder assets — never payload bytes, no network. Actions gated by an OPEN hard-gate item (HG-1/HG-3) return action_blocked_by_open_item and do NOT spawn. OFF = byte-identical predecessor (VC9A-era): the action POST returns a disabled/404 shape and flag-off bytes are unchanged.", true),
+        boolDirect("MEGACOMPACT_VC9C", "VC9C SetupTab Cortex Sub-tab", "SetupTab Cortex sub-tab (client UI): a Cortex sub-tab inside SetupTab that consumes the VC9A status endpoint (GET /api/setup-cortex-status) + the VC9B action endpoints. It surfaces the encoder mode A/B/C, asset digest prefix, qualification verdict + threshold failures, the open hard-gate blockers, and the confirmation-gated fetch/bench/verify actions. OFF = byte-identical predecessor (VC9B-era): the Cortex sub-tab is filtered from SUB_TABS and the Setup tab renders exactly as before.", true),
     ],
 };

package/dist/extensions/dashboard-server/routes-setup-cortex-actions.js

@@ -0,0 +1,116 @@
+/**
+ * dashboard-server/routes-setup-cortex-actions.ts — VC9B Setup Cortex action routes.
+ *
+ *   POST /api/setup-cortex-action            — confirmation-gated driver
+ *   GET  /api/setup-cortex-action-log        — bounded, redacted log tail
+ *
+ * Reader/actor-only: NEVER exposes payload bytes, prompts, or ledger. Actions
+ * only spawn the committed local vc2-model-prep scripts or re-read the committed
+ * encoder assets (verify-asset) — no network (PREVENT-PI-004). A hard gate
+ * (HG-1/HG-3) blocking the requested action yields 423 action_blocked_by_open_item
+ * with the blocker ids and NO subprocess is spawned. Missing confirm:true yields
+ * 400 confirmation_required. Flag-off (MEGACOMPACT_VC9B=0) is byte-identical to
+ * the VC9A-era predecessor: the routes are absent, so they return the 404
+ * disabled shape and no action runs.
+ *
+ * Guardrails: PREVENT-011 (no `any`), PREVENT-001 (guarded JSON.parse via
+ * readJsonBody), no string literals for scripts/blockers (delegated to
+ * setup-cortex-actions.ts + setup-cortex-blockers.ts).
+ */
+import { sendJson, readJsonBody } from "./routes-vector-cortex-shared.js";
+import { VC9B_ENABLED } from "../../src/config.js";
+import { setupCortexActionBlockers } from "./setup-cortex-blockers.js";
+import { runSetupCortexAction, readActionLogTail, } from "./setup-cortex-actions.js";
+const ACTION_KINDS = new Set([
+    "fetch-model",
+    "bench",
+    "verify-asset",
+]);
+function isActionKind(v) {
+    return typeof v === "string" && ACTION_KINDS.has(v);
+}
+/** Flag-off response, byte-identical regardless of request (VC9B absent). */
+function sendDisabled(res) {
+    sendJson(res, 404, { error: "disabled" });
+}
+/**
+ * POST /api/setup-cortex-action (VC9B). Returns true when it claims the request.
+ */
+export function handleSetupCortexAction(req, res, ctx) {
+    const url = req.url ?? "";
+    if (url !== "/api/setup-cortex-action")
+        return false;
+    if (req.method !== "POST") {
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    if (!VC9B_ENABLED()) {
+        sendDisabled(res);
+        return true;
+    }
+    readJsonBody(req, (parsed) => {
+        if (!parsed.ok) {
+            sendJson(res, 400, { error: "invalid_body" });
+            return;
+        }
+        const value = parsed.value;
+        const action = value.action;
+        if (!isActionKind(action)) {
+            sendJson(res, 400, { error: "invalid_action" });
+            return;
+        }
+        if (value.confirm !== true) {
+            sendJson(res, 400, { error: "confirmation_required" });
+            return;
+        }
+        // Hard-gate check: when an OPEN hard-gate item gates this action, do NOT
+        // spawn — surface the blocker ids so the client highlights the matching rows.
+        const blockers = setupCortexActionBlockers(action);
+        if (blockers.length > 0) {
+            sendJson(res, 423, {
+                error: "action_blocked_by_open_item",
+                blockers: [...blockers],
+            });
+            return;
+        }
+        const result = runSetupCortexAction(action, ctx.stateDir);
+        sendJson(res, result.ok ? 200 : 500, result);
+    });
+    return true;
+}
+/**
+ * GET /api/setup-cortex-action-log?name=<basename> (VC9B). Returns true when it
+ * claims the request. Bounded tail (8 KiB max) + redacted (digest prefixes +
+ * codes); the name must validate to a basename inside the vc9b log dir.
+ */
+export function handleSetupCortexActionLog(req, res, ctx) {
+    const url = req.url ?? "";
+    if (url.split("?")[0] !== "/api/setup-cortex-action-log")
+        return false;
+    if (req.method !== "GET") {
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    if (!VC9B_ENABLED()) {
+        sendDisabled(res);
+        return true;
+    }
+    let name = null;
+    try {
+        name = new URL(url, "http://localhost").searchParams.get("name");
+    }
+    catch {
+        name = null;
+    }
+    if (!name) {
+        sendJson(res, 400, { error: "invalid_log_name" });
+        return true;
+    }
+    const tail = readActionLogTail(ctx.stateDir, name);
+    if (tail === null) {
+        sendJson(res, 404, { error: "log_not_found" });
+        return true;
+    }
+    sendJson(res, 200, tail);
+    return true;
+}

package/dist/extensions/dashboard-server/routes-setup-cortex.js

@@ -0,0 +1,143 @@
+/**
+ * dashboard-server/routes-setup-cortex.ts — VC9A Setup Cortex status route.
+ *
+ *   GET /api/setup-cortex-status — reader-only aggregate surfacing the
+ *        vector-cortex encoder gate (mode A/B/C, qualification verdict,
+ *        blockers, encoder health) for the dashboard Setup tab. Does NOT close
+ *        the ML gate: the hard-gate blockers are read-only and stay open.
+ *
+ * Reuses readEncoderManifest / verifyEncoderAsset / detectPlatform
+ * (src/vector-cortex/encoder/asset.ts) and deriveVcStatus (vc-status.ts),
+ * plus the memoized encoder-facts pattern from routes-vector-cortex-health.ts
+ * (manifest bytes + file size/mtime + platform cache key) so the expensive
+ * full-asset hashing is skipped on repeat polls.
+ *
+ * The blocker rows carry NO string literals here — they come from the static
+ * manifest module setup-cortex-blockers.ts (single canonical source).
+ *
+ * Guardrails: PREVENT-PI-004 (local filesystem read only), PREVENT-011 (no
+ * `any`), reader-only aggregate (never payloads/prompts/ledger — EVAL-REDACT-002).
+ */
+import { createHash } from "node:crypto";
+import { readFileSync, statSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { VC9A_ENABLED } from "../../src/config.js";
+import { readEncoderManifest, verifyEncoderAsset, detectPlatform } from "../../src/vector-cortex/encoder/asset.js";
+import { sendJson } from "./routes-vector-cortex-shared.js";
+import { deriveVcStatus } from "./vc-status.js";
+import { SETUP_CORTEX_BLOCKERS } from "./setup-cortex-blockers.js";
+/** Resolve the committed encoder-v1 asset dir by walking up to the repo root. */
+function encoderAssetDir() {
+    let dir = dirname(fileURLToPath(import.meta.url));
+    const rel = join("assets", "vector-cortex", "encoder-v1");
+    for (let i = 0; i < 8; i++) {
+        const candidate = join(dir, rel);
+        try {
+            // guardrails-allow PREVENT-PI-004: local asset filesystem read (loopback)
+            readFileSync(join(candidate, "manifest.json"));
+            return candidate;
+        }
+        catch {
+            /* keep walking */
+        }
+        const next = dirname(dir);
+        if (next === dir)
+            break;
+        dir = next;
+    }
+    return null;
+}
+let factCache = null;
+/** Stable cache key: manifest bytes + (size,mtime) of the asset files + platform. */
+function factCacheKey(dir, manifestPath) {
+    const platform = detectPlatform();
+    if (!platform)
+        return null;
+    const parts = [platform];
+    try {
+        for (const p of [manifestPath, join(dir, "model.onnx"), join(dir, "tokenizer.json")]) {
+            const s = statSync(p);
+            parts.push(`${s.size}:${s.mtimeMs}`);
+        }
+        // guardrails-allow PREVENT-PI-004: local manifest filesystem read (loopback)
+        parts.push(createHash("sha256").update(readFileSync(manifestPath)).digest("hex"));
+    }
+    catch {
+        return null;
+    }
+    return parts.join("|");
+}
+function computeSetupCortexFacts(dir) {
+    const manifest = readEncoderManifest(dir);
+    if (manifest === null) {
+        return { mode: "C", assetDigestPrefix: null, verdict: "unavailable", thresholdFailures: [] };
+    }
+    const manifestPath = join(dir, "manifest.json");
+    const key = factCacheKey(dir, manifestPath);
+    if (key === null)
+        return null;
+    if (factCache !== null && factCache.key === key)
+        return factCache.facts;
+    let digest;
+    try {
+        // guardrails-allow PREVENT-PI-004: local manifest filesystem read (loopback)
+        digest = createHash("sha256").update(readFileSync(manifestPath)).digest("hex");
+    }
+    catch {
+        const facts = { mode: "B", assetDigestPrefix: null, verdict: "demoted", thresholdFailures: ["ENC_ASSET_UNREADABLE"] };
+        factCache = { key, facts };
+        return facts;
+    }
+    const verify = verifyEncoderAsset(dir, manifest, detectPlatform());
+    const prefix = digest.slice(0, 12);
+    const facts = verify.ok
+        ? { mode: "A", assetDigestPrefix: prefix, verdict: "qualified", thresholdFailures: [] }
+        : { mode: "B", assetDigestPrefix: prefix, verdict: "demoted", thresholdFailures: [verify.code] };
+    factCache = { key, facts };
+    return facts;
+}
+function setupCortexFacts() {
+    const dir = encoderAssetDir();
+    if (dir === null) {
+        return { mode: "C", assetDigestPrefix: null, verdict: "unavailable", thresholdFailures: [] };
+    }
+    const facts = computeSetupCortexFacts(dir);
+    return facts ?? { mode: "C", assetDigestPrefix: null, verdict: "unavailable", thresholdFailures: [] };
+}
+/**
+ * Reader-only GET /api/setup-cortex-status (VC9A).
+ *
+ * Purely read: no mutation, never payloads/prompts/ledger. Flag-off returns the
+ * byte-identical VC8C-era shape `{enabled:false, mode:"C", status:"off"}` with
+ * the encoder-health mode C and no qualification/blocker detail leaked.
+ */
+export function handleSetupCortexStatus(req, res, _ctx) {
+    const url = req.url ?? "";
+    if (url !== "/api/setup-cortex-status")
+        return false;
+    if (req.method !== "GET") {
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    const enabled = VC9A_ENABLED();
+    const facts = enabled ? setupCortexFacts() : null;
+    const blocks = enabled ? [...SETUP_CORTEX_BLOCKERS] : [];
+    const body = {
+        enabled,
+        flag: "MEGACOMPACT_VC9A",
+        mode: facts ? facts.mode : "C",
+        assetDigestPrefix: facts ? facts.assetDigestPrefix : null,
+        qualification: facts
+            ? { verdict: facts.verdict, thresholdFailures: facts.thresholdFailures }
+            : { verdict: "unavailable", thresholdFailures: [] },
+        blockers: blocks,
+        encoderHealth: facts
+            ? { assetDigestPrefix: facts.assetDigestPrefix, mode: facts.mode }
+            : { assetDigestPrefix: null, mode: "C" },
+        updatedAt: new Date().toISOString(),
+        status: deriveVcStatus({ enabled, hasData: !!facts && facts.verdict !== "unavailable", structuralOnly: true }),
+    };
+    sendJson(res, 200, body);
+    return true;
+}

package/dist/extensions/dashboard-server/routes.js

@@ -24,3 +24,5 @@ export { handleRagMetrics } from "./routes-rag-metrics.js";
 export { handleModelThresholds } from "./routes-model-thresholds.js";
 export { handleWiki } from "./routes-wiki.js";
 export { handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, handleVectorCortexRender, handleVectorCortexRollout, handleVectorCortexClosureProof, handleVectorCortexRestore, } from "./routes-vector-cortex.js";
+export { handleSetupCortexStatus } from "./routes-setup-cortex.js";
+export { handleSetupCortexAction, handleSetupCortexActionLog, } from "./routes-setup-cortex-actions.js";