pi-mega-compact 0.20.27 → 0.20.28

package/dist/config/vector-cortex-vc9b.js

@@ -0,0 +1,29 @@
+/**
+ * config/vector-cortex-vc9b.ts — VC9B setup-cortex action-drivers sprint flag.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-vc9a.ts was. This is the
+ * SETUP-DASHBOARD action flag (the dashboard Setup tab fetch/bench/verify action
+ * drivers). vector-cortex.ts re-exports it below and root src/config.ts
+ * re-exports it, so no consumer import path changes.
+ *
+ * The split is purely mechanical: VC9B_ENABLED is byte-identical in name,
+ * semantics, and default to the definition it replaces, and vector-cortex.ts
+ * re-exports it so every existing `from "./config/vector-cortex.js"` import
+ * keeps resolving unchanged.
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * VC9B — Setup Cortex action drivers (POST /api/setup-cortex-action +
+ * GET /api/setup-cortex-action-log). Default ON. `MEGACOMPACT_VC9B=0` disables
+ * and is byte-identical to the predecessor (VC9A-era): the action POST returns
+ * the disabled shape (404/disabled) and flag-off bytes are unchanged. The
+ * actions only spawn the existing committed local scripts
+ * (scripts/vc2-model-prep/fetch-model.sh / bench-onnx.mjs) or re-read the
+ * committed encoder assets — never payload bytes, no network (PREVENT-PI-004).
+ * This flag MUST also be a dashboard SETTINGS toggle (visible in config UI,
+ * never in EXCLUDED_SETTINGS), mirroring VC9A.
+ */
+export const VC9B_ENABLED = () => sprintFlag("MEGACOMPACT_VC9B");

package/dist/config/vector-cortex-vc9c.js

@@ -0,0 +1,34 @@
+/**
+ * config/vector-cortex-vc9c.ts — VC9C SetupTab Cortex sub-tab sprint flag.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-vc9a.ts and
+ * vector-cortex-vc9b.ts were. This is the SETUP-DASHBOARD UI flag (the Cortex
+ * sub-tab inside SetupTab). vector-cortex.ts re-exports it below and root
+ * src/config.ts re-exports it, so no consumer import path changes.
+ *
+ * The split is purely mechanical: VC9C_ENABLED is byte-identical in name,
+ * semantics, and default to the definition it replaces, and vector-cortex.ts
+ * re-exports it so every existing `from "./config/vector-cortex.js"` import
+ * keeps resolving unchanged.
+ *
+ * The client gates the Cortex sub-tab's visible state on the flag via the
+ * VC0E honest-status pattern: when the VC9A status payload reports the
+ * off/disabled shape (or VC9C is off), the sub-tab is filtered from
+ * SUB_TABS. Flag-off is byte-identical to the predecessor (VC9B-era).
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * VC9C — SetupTab Cortex sub-tab (client UI). Default ON. `MEGACOMPACT_VC9C=0`
+ * disables and is byte-identical to the predecessor (VC9B-era): the Cortex
+ * sub-tab is filtered from SUB_TABS and the Setup tab renders exactly as it
+ * did before this sprint. The sub-tab is a pure consumer of the VC9A status
+ * endpoint (GET /api/setup-cortex-status) + VC9B action endpoints (POST
+ * /api/setup-cortex-action, GET /api/setup-cortex-action-log); it adds NO
+ * server logic and never surfaces payload bytes/prompts/ledger. This flag MUST
+ * also be a dashboard SETTINGS toggle (visible in config UI, never in
+ * EXCLUDED_SETTINGS), mirroring VC9A/VC9B.
+ */
+export const VC9C_ENABLED = () => sprintFlag("MEGACOMPACT_VC9C");

package/dist/config/vector-cortex.js

@@ -244,10 +244,10 @@ export const VC8B_ENABLED = () => sprintFlag("MEGACOMPACT_VC8B");
 // Re-exported here so every existing `from "./config/vector-cortex.js"`
 // import keeps resolving unchanged.
 export { VC8C_ENABLED } from "./vector-cortex-vc8c.js";
-// VC9A (setup-cortex status read path) extracted to vector-cortex-vc9a.ts to
-// keep this file under the 300-line soft limit. Re-exported here so every
-// existing `from "./config/vector-cortex.js"` import keeps resolving unchanged.
+// VC9A/VC9B/VC9C split to vector-cortex-vc9{a,b,c}.ts to stay under the 300-line soft limit.
 export { VC9A_ENABLED } from "./vector-cortex-vc9a.js";
+export { VC9B_ENABLED } from "./vector-cortex-vc9b.js";
+export { VC9C_ENABLED } from "./vector-cortex-vc9c.js";
 // Breaker state machine constants (TRIAD_RESILIENCE.md §breaker) extracted to
 // vector-cortex-breakers.ts to keep this file under the 300-line soft limit.
 export { BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./vector-cortex-breakers.js";

package/dist/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/extensions/dashboard-server/api-contracts/endpoints/registry-ext.js

@@ -34,4 +34,17 @@ export const EXTRA_ENDPOINTS = {
         path: "/api/setup-cortex-status",
         description: "Reader-only vector-cortex encoder gate: mode A/B/C, qualification verdict, blockers, encoder health — for the dashboard Setup tab. Never closes the ML gate.",
     },
+    // ─── VC9B Setup Cortex actions (dashboard Setup tab action drivers) ─────
+    /** POST /api/setup-cortex-action — confirmation-gated fetch/bench/verify. */
+    setupCortexAction: {
+        method: "POST",
+        path: "/api/setup-cortex-action",
+        description: "Confirmation-gated driver: fetch-model / bench / verify-asset. Executes only the committed local scripts (scripts/vc2-model-prep/*) or re-reads the committed encoder assets; an OPEN hard-gate item returns action_blocked_by_open_item and does NOT spawn. Never payload bytes; confirm:true required.",
+    },
+    /** GET /api/setup-cortex-action-log — bounded, redacted action log tail. */
+    setupCortexActionLog: {
+        method: "GET",
+        path: "/api/setup-cortex-action-log",
+        description: "Bounded (8 KiB) redacted tail of a VC9B action log under <stateDir>/logs/vc9b/; the name must be a validated basename (path traversal rejected).",
+    },
 };

package/dist/extensions/dashboard-server/api-contracts/setup-cortex.js

@@ -1,10 +1,11 @@
 /**
- * api-contracts/setup-cortex.ts — Setup Cortex status API types (VC9A).
+ * api-contracts/setup-cortex.ts — Setup Cortex status + action API types (VC9A/VC9B).
  *
- * Types for GET /api/setup-cortex-status, the reader-only aggregate that
- * surfaces the vector-cortex encoder gate (mode A/B/C, qualification verdict,
- * blockers, encoder health) in the dashboard Setup tab WITHOUT closing the ML
- * gate. Reader-only: never payloads/prompts/ledger (EVAL-REDACT-002).
+ * Types for GET /api/setup-cortex-status (reader-only aggregate that surfaces
+ * the vector-cortex encoder gate WITHOUT closing the ML gate) and the VC9B
+ * action drivers POST /api/setup-cortex-action + GET /api/setup-cortex-action-log
+ * (confirmation-gated, hard-gate-aware fetches/bench/verify). Reader/actor-only:
+ * never payload bytes/prompts/ledger (EVAL-REDACT-002).
  *
  * PREVENT-PI-004: type definitions only, no network code.
  * PREVENT-011: no `any` type — all types are explicit.

package/dist/extensions/dashboard-server/route-dispatch.js

@@ -8,7 +8,7 @@
  * PREVENT-PI-004: local filesystem read only, no network.
  * PREVENT-011: no `any` type.
  */
-import { handleIndex, handleRepoIndex, handleEvents, handleGameState, handleGameScores, handlePerfSamples, handlePerf, handleAchievements, handleSessions, handleTopics, handleTurns, handleMaintenance, handleProviderCache, handleMemoryStatus, handleCacheStripes, handleSetupStatus, handleSetupDetect, handleSetupConfigure, handleMemoryMap, handleRaptorTree, handleRaptorBuildHistory, handleContextHealth, handleCachePoison, handleHealthSettings, handleEmbedderHealth, handleRagSettings, handleRagMetrics, handleModelThresholds, handleWiki, handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, handleVectorCortexRender, handleVectorCortexRollout, handleVectorCortexClosureProof, handleVectorCortexRestore, handleSetupCortexStatus, } from "./routes.js";
+import { handleIndex, handleRepoIndex, handleEvents, handleGameState, handleGameScores, handlePerfSamples, handlePerf, handleAchievements, handleSessions, handleTopics, handleTurns, handleMaintenance, handleProviderCache, handleMemoryStatus, handleCacheStripes, handleSetupStatus, handleSetupDetect, handleSetupConfigure, handleMemoryMap, handleRaptorTree, handleRaptorBuildHistory, handleContextHealth, handleCachePoison, handleHealthSettings, handleEmbedderHealth, handleRagSettings, handleRagMetrics, handleModelThresholds, handleWiki, handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, handleVectorCortexRender, handleVectorCortexRollout, handleVectorCortexClosureProof, handleVectorCortexRestore, handleSetupCortexStatus, handleSetupCortexAction, handleSetupCortexActionLog, } from "./routes.js";
 // VC6C repair lives in its own module (routes-vector-cortex-repair.ts) so the
 // heal route file stays well under the 400-line extension soft limit.
 import { handleVectorCortexRepair } from "./routes-vector-cortex-repair.js";
@@ -143,5 +143,9 @@ export function dispatchRoutes(req, res, ctx) {
         return true;
     if (handleSetupCortexStatus(req, res, ctx))
         return true;
+    if (handleSetupCortexAction(req, res, ctx))
+        return true;
+    if (handleSetupCortexActionLog(req, res, ctx))
+        return true;
     return false;
 }

package/dist/extensions/dashboard-server/routes-rag-settings-vector-cortex.js

@@ -49,5 +49,7 @@ export const VECTOR_CORTEX_SETTINGS = {
         boolDirect("MEGACOMPACT_VC8B", "VC8B Shadow Adaptive Policy", "Bounded shadow adaptive policy + M7 pressure-v2 migration. Policy actions are from a finite set (admit/dampen/defer/escalate/reject) chosen deterministically by the canonical pressure level; token budgets are clamped into a configured window after the pressure factor. Unknown pressure labels are rejected as POL_PRESSURE_UNKNOWN, never coerced to a neighbour. The shadow engine is structurally incapable of affecting the live path: inputs are deep-copied, the canonical prompt digest is pinned before and after to prove non-mutation, and liveMutations is always zero. M7 migrates legacy pressure labels to the v2 canonical five by copy/validate/switch; an unknown label blocks the switch and keeps the legacy pointer (M7_PRESSURE_UNKNOWN). A shadow decision is mode A, static calibrated policy is mode B (forced by invalid A), and fixed legacy thresholds is mode C (forced by M7 or B failure). OFF = byte-identical predecessor (VC8A); the policy/shadow/migration arithmetic still runs, only the reporter + dashboard seam is suppressed.", true),
         boolDirect("MEGACOMPACT_VC8C", "VC8C Canary Platform + Rust Parity", "Canary selection and external Rust parity. The selector admits a qualified external Rust artifact only when ABI version, URL metadata, commit, Cargo.lock digest, and platform all match evidence; a Cargo.lock digest mismatch rejects the artifact (RUST_CARGO_DIGEST_MISMATCH). The cross-conformance runner exchanges length-framed neutral records over a local stdin/stdout channel — a subprocess, never a URL (PREVENT-PI-004). A parity mismatch selects TS mode B. A qualified external artifact is mode A, TS reference is mode B, legacy path is mode C. OFF = byte-identical predecessor (VC8B); the selector and cross-conformance arithmetic still run, only the reporter + dashboard seam is suppressed.", true),
         boolDirect("MEGACOMPACT_VC9A", "VC9A Setup Cortex Status", "Reader-only Setup Cortex status read path (GET /api/setup-cortex-status): surfaces the vector-cortex encoder gate — mode A/B/C, qualification verdict, open blockers, encoder health — to the dashboard Setup tab without closing the ML gate. OFF = byte-identical predecessor (VC8C-era): returns enabled:false / mode:C / status:off.", true),
+        boolDirect("MEGACOMPACT_VC9B", "VC9B Setup Cortex Actions", "Setup Cortex action drivers (POST /api/setup-cortex-action + GET /api/setup-cortex-action-log): confirmation-gated wrappers that fetch-model / bench / verify-asset by spawning only the committed local scripts (scripts/vc2-model-prep/fetch-model.sh, bench-onnx.mjs) or re-reading the committed encoder assets — never payload bytes, no network. Actions gated by an OPEN hard-gate item (HG-1/HG-3) return action_blocked_by_open_item and do NOT spawn. OFF = byte-identical predecessor (VC9A-era): the action POST returns a disabled/404 shape and flag-off bytes are unchanged.", true),
+        boolDirect("MEGACOMPACT_VC9C", "VC9C SetupTab Cortex Sub-tab", "SetupTab Cortex sub-tab (client UI): a Cortex sub-tab inside SetupTab that consumes the VC9A status endpoint (GET /api/setup-cortex-status) + the VC9B action endpoints. It surfaces the encoder mode A/B/C, asset digest prefix, qualification verdict + threshold failures, the open hard-gate blockers, and the confirmation-gated fetch/bench/verify actions. OFF = byte-identical predecessor (VC9B-era): the Cortex sub-tab is filtered from SUB_TABS and the Setup tab renders exactly as before.", true),
     ],
 };

package/dist/extensions/dashboard-server/routes-setup-cortex-actions.js

@@ -0,0 +1,116 @@
+/**
+ * dashboard-server/routes-setup-cortex-actions.ts — VC9B Setup Cortex action routes.
+ *
+ *   POST /api/setup-cortex-action            — confirmation-gated driver
+ *   GET  /api/setup-cortex-action-log        — bounded, redacted log tail
+ *
+ * Reader/actor-only: NEVER exposes payload bytes, prompts, or ledger. Actions
+ * only spawn the committed local vc2-model-prep scripts or re-read the committed
+ * encoder assets (verify-asset) — no network (PREVENT-PI-004). A hard gate
+ * (HG-1/HG-3) blocking the requested action yields 423 action_blocked_by_open_item
+ * with the blocker ids and NO subprocess is spawned. Missing confirm:true yields
+ * 400 confirmation_required. Flag-off (MEGACOMPACT_VC9B=0) is byte-identical to
+ * the VC9A-era predecessor: the routes are absent, so they return the 404
+ * disabled shape and no action runs.
+ *
+ * Guardrails: PREVENT-011 (no `any`), PREVENT-001 (guarded JSON.parse via
+ * readJsonBody), no string literals for scripts/blockers (delegated to
+ * setup-cortex-actions.ts + setup-cortex-blockers.ts).
+ */
+import { sendJson, readJsonBody } from "./routes-vector-cortex-shared.js";
+import { VC9B_ENABLED } from "../../src/config.js";
+import { setupCortexActionBlockers } from "./setup-cortex-blockers.js";
+import { runSetupCortexAction, readActionLogTail, } from "./setup-cortex-actions.js";
+const ACTION_KINDS = new Set([
+    "fetch-model",
+    "bench",
+    "verify-asset",
+]);
+function isActionKind(v) {
+    return typeof v === "string" && ACTION_KINDS.has(v);
+}
+/** Flag-off response, byte-identical regardless of request (VC9B absent). */
+function sendDisabled(res) {
+    sendJson(res, 404, { error: "disabled" });
+}
+/**
+ * POST /api/setup-cortex-action (VC9B). Returns true when it claims the request.
+ */
+export function handleSetupCortexAction(req, res, ctx) {
+    const url = req.url ?? "";
+    if (url !== "/api/setup-cortex-action")
+        return false;
+    if (req.method !== "POST") {
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    if (!VC9B_ENABLED()) {
+        sendDisabled(res);
+        return true;
+    }
+    readJsonBody(req, (parsed) => {
+        if (!parsed.ok) {
+            sendJson(res, 400, { error: "invalid_body" });
+            return;
+        }
+        const value = parsed.value;
+        const action = value.action;
+        if (!isActionKind(action)) {
+            sendJson(res, 400, { error: "invalid_action" });
+            return;
+        }
+        if (value.confirm !== true) {
+            sendJson(res, 400, { error: "confirmation_required" });
+            return;
+        }
+        // Hard-gate check: when an OPEN hard-gate item gates this action, do NOT
+        // spawn — surface the blocker ids so the client highlights the matching rows.
+        const blockers = setupCortexActionBlockers(action);
+        if (blockers.length > 0) {
+            sendJson(res, 423, {
+                error: "action_blocked_by_open_item",
+                blockers: [...blockers],
+            });
+            return;
+        }
+        const result = runSetupCortexAction(action, ctx.stateDir);
+        sendJson(res, result.ok ? 200 : 500, result);
+    });
+    return true;
+}
+/**
+ * GET /api/setup-cortex-action-log?name=<basename> (VC9B). Returns true when it
+ * claims the request. Bounded tail (8 KiB max) + redacted (digest prefixes +
+ * codes); the name must validate to a basename inside the vc9b log dir.
+ */
+export function handleSetupCortexActionLog(req, res, ctx) {
+    const url = req.url ?? "";
+    if (url.split("?")[0] !== "/api/setup-cortex-action-log")
+        return false;
+    if (req.method !== "GET") {
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    if (!VC9B_ENABLED()) {
+        sendDisabled(res);
+        return true;
+    }
+    let name = null;
+    try {
+        name = new URL(url, "http://localhost").searchParams.get("name");
+    }
+    catch {
+        name = null;
+    }
+    if (!name) {
+        sendJson(res, 400, { error: "invalid_log_name" });
+        return true;
+    }
+    const tail = readActionLogTail(ctx.stateDir, name);
+    if (tail === null) {
+        sendJson(res, 404, { error: "log_not_found" });
+        return true;
+    }
+    sendJson(res, 200, tail);
+    return true;
+}

package/dist/extensions/dashboard-server/routes.js

@@ -25,3 +25,4 @@ export { handleModelThresholds } from "./routes-model-thresholds.js";
 export { handleWiki } from "./routes-wiki.js";
 export { handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, handleVectorCortexRender, handleVectorCortexRollout, handleVectorCortexClosureProof, handleVectorCortexRestore, } from "./routes-vector-cortex.js";
 export { handleSetupCortexStatus } from "./routes-setup-cortex.js";
+export { handleSetupCortexAction, handleSetupCortexActionLog, } from "./routes-setup-cortex-actions.js";

package/dist/extensions/dashboard-server/setup-cortex-actions.js

@@ -0,0 +1,213 @@
+/**
+ * dashboard-server/setup-cortex-actions.ts — VC9B action driver (actor surface).
+ *
+ * Implements the actual mechanics behind POST /api/setup-cortex-action and
+ * GET /api/setup-cortex-action-log: locating + spawning ONLY the committed local
+ * vc2-model-prep scripts (fetch-model.sh, bench-onnx.mjs), capturing their
+ * output to <stateDir>/logs/vc9b/<action>-<ts>.log, re-running the committed
+ * encoder asset verification seam for verify-asset (NO subprocess), and serving
+ * a bounded + redacted log tail.
+ *
+ * This module is the ONLY place that touches the filesystem for VC9B actions.
+ * The route file (routes-setup-cortex-actions.ts) carries NO path/script/blocker
+ * string literals — it delegates here. Guardrails: the spawned scripts are the
+ * existing committed local developer-tooling scripts (never fetched, no network,
+ * PREVENT-PI-004); the log tail is bounded at 8 KiB and redacted (digest
+ * prefixes + codes only, never payload bytes — EVAL-REDACT-002); PREVENT-011
+ * (no `any`).
+ */
+import { spawnSync } from "node:child_process"; // guardrails-allow PREVENT-PI-004: local subprocess spawn of committed repo script (loopback)
+import { mkdirSync, readFileSync, writeFileSync, existsSync, readdirSync, } from "node:fs";
+import { join, dirname, basename } from "node:path";
+import { fileURLToPath } from "node:url";
+import { readEncoderManifest, verifyEncoderAsset, detectPlatform, } from "../../src/vector-cortex/encoder/asset.js";
+/** Cap applied to every log tail served by the action-log route. */
+export const ACTION_LOG_TAIL_BYTES = 8192;
+/** Locate the commit's vc2-model-prep directory by walking up to the repo root. */
+function vc2ScriptDir() {
+    let dir = dirname(fileURLToPath(import.meta.url));
+    const rel = join("scripts", "vc2-model-prep");
+    for (let i = 0; i < 8; i++) {
+        const candidate = join(dir, rel);
+        if (existsSync(join(candidate, "fetch-model.sh")))
+            return candidate;
+        const next = dirname(dir);
+        if (next === dir)
+            break;
+        dir = next;
+    }
+    return null;
+}
+/** Absolute dir holding this repo's <stateDir>/logs/vc9b/ action logs. */
+export function vc9bLogDir(stateDir) {
+    return join(stateDir, "logs", "vc9b");
+}
+/** Ensure the vc9b log dir exists and return its absolute path. */
+function ensureLogDir(stateDir) {
+    const dir = vc9bLogDir(stateDir);
+    // guardrails-allow PREVENT-PI-004: local state-dir filesystem write (loopback)
+    mkdirSync(dir, { recursive: true });
+    return dir;
+}
+/** Safe log basename: non-empty, no separators, not a dot/double-dot segment. */
+export function isSafeLogName(name) {
+    if (!name || name.length === 0)
+        return false;
+    if (name.includes("/") || name.includes("\\"))
+        return false;
+    if (name === "." || name === "..")
+        return false;
+    // Must match our own file naming: <action>-<ts>.log where ts is digits.
+    return /^[a-z-]+-\d+\.log$/.test(name);
+}
+/**
+ * Redact a fragment of action-log output: bound long digests to their prefix and
+ * collapse long base64-looking tokens, so the served tail carries digest prefixes
+ * + codes only — never arbitrary payload bytes. Returns the redacted text.
+ */
+export function redactLog(text) {
+    let out = text;
+    // SHA-256 (64 hex) or any long hex digest -> keep the first 12 chars.
+    out = out.replace(/\b[0-9a-fA-F]{32,}\b/g, (m) => `sha256:${m.slice(0, 12)}`);
+    // Long base64-ish tokens (26+ chars from the base64 alphabet) -> collapse.
+    out = out.replace(/[A-Za-z0-9+/=]{26,}/g, (m) => `<redacted:${m.length}>`);
+    return out;
+}
+/** Read + bound + redact the tail of one vc9b log file. */
+export function readActionLogTail(stateDir, name) {
+    if (!isSafeLogName(name))
+        return null;
+    const dir = vc9bLogDir(stateDir);
+    const full = join(dir, name);
+    if (basename(full) !== name)
+        return null; // belt-and-suspenders: no traversal
+    if (!existsSync(full))
+        return null;
+    let raw;
+    try {
+        // guardrails-allow PREVENT-PI-004: local state-dir filesystem read (loopback)
+        raw = readFileSync(full, "utf8");
+    }
+    catch {
+        return null;
+    }
+    const bounded = raw.length > ACTION_LOG_TAIL_BYTES
+        ? raw.slice(-ACTION_LOG_TAIL_BYTES)
+        : raw;
+    return {
+        name,
+        tail: redactLog(bounded),
+        complete: raw.length <= ACTION_LOG_TAIL_BYTES,
+    };
+}
+/** Run a vc2-model-prep subprocess and capture its output to a vc9b log file. */
+function runSpawnedAction(action, stateDir) {
+    const dir = vc2ScriptDir();
+    const { name, logPath } = writeLogName(action, stateDir);
+    if (dir === null) {
+        writeLog(logPath, "vc2-model-prep scripts not found in this checkout\n");
+        return { action, ok: false, exitCode: null, logPath, logName: name, spawned: true };
+    }
+    let result;
+    if (action === "fetch-model") {
+        // guardrails-allow PREVENT-PI-004: local subprocess spawn of committed repo script (loopback)
+        result = spawnSync("bash", [join(dir, "fetch-model.sh"), join(stateDir, "vc2-model-prep")], {
+            encoding: "utf8",
+            timeout: 60_000,
+        });
+    }
+    else {
+        // guardrails-allow PREVENT-PI-004: local subprocess spawn of committed repo script (loopback)
+        result = spawnSync(process.execPath, [join(dir, "bench-onnx.mjs")], {
+            encoding: "utf8",
+            timeout: 60_000,
+        });
+    }
+    const out = `${result.stdout ?? ""}${result.stderr ?? ""}`;
+    writeLog(logPath, out || "(no output)\n");
+    return {
+        action,
+        ok: result.status === 0,
+        exitCode: result.status === null ? null : result.status,
+        logPath,
+        logName: name,
+        spawned: true,
+    };
+}
+/**
+ * Re-run the committed encoder asset verification seam (readEncoderManifest +
+ * verifyEncoderAsset + detectPlatform) WITHOUT any subprocess, and log a
+ * redacted summary (mode + digest prefix + verdict/code only). Uses the same
+ * repo-root walk the VC9A status route uses to find assets/vector-cortex.
+ */
+function runVerifyAsset(stateDir) {
+    const { name, logPath } = writeLogName("verify-asset", stateDir);
+    const body = buildVerifySummary();
+    writeLog(logPath, body);
+    return {
+        action: "verify-asset",
+        ok: body.includes("verdict=qualified"),
+        exitCode: null,
+        logPath,
+        logName: name,
+        spawned: false,
+    };
+}
+/** Compute the redacted verify-asset summary lines (digests + codes only). */
+function buildVerifySummary() {
+    const dir = encoderAssetDir();
+    if (dir === null) {
+        return "mode=C verdict=unavailable reason=asset_missing\n";
+    }
+    const manifest = readEncoderManifest(dir);
+    if (manifest === null) {
+        return "mode=B verdict=demoted reason=ENC_MANIFEST_INVALID\n";
+    }
+    const platform = detectPlatform();
+    const verify = verifyEncoderAsset(dir, manifest, platform);
+    if (verify.ok) {
+        const prefix = verify.onnxDigest.slice(0, 12);
+        return `mode=A verdict=qualified onnx_digest_prefix=${prefix} embedded_bytes=${verify.embeddedBytes}\n`;
+    }
+    return `mode=B verdict=demoted reason=${verify.code}\n`;
+}
+/** Walk up to the committed encoder-v1 asset dir (mirrors routes-setup-cortex.ts). */
+function encoderAssetDir() {
+    let dir = dirname(fileURLToPath(import.meta.url));
+    const rel = join("assets", "vector-cortex", "encoder-v1");
+    for (let i = 0; i < 8; i++) {
+        const candidate = join(dir, rel);
+        // guardrails-allow PREVENT-PI-004: local asset filesystem read (loopback)
+        if (existsSync(join(candidate, "manifest.json")))
+            return candidate;
+        const next = dirname(dir);
+        if (next === dir)
+            break;
+        dir = next;
+    }
+    return null;
+}
+/** Unique <action>-<ts>.log name + absolute path under the vc9b log dir. */
+function writeLogName(action, stateDir) {
+    let ts = Date.now();
+    const existing = new Set(readdirSync(ensureLogDir(stateDir)));
+    while (existing.has(`${action}-${ts}.log`))
+        ts++;
+    const name = `${action}-${ts}.log`;
+    return { name, logPath: join(vc9bLogDir(stateDir), name) };
+}
+function writeLog(logPath, body) {
+    // guardrails-allow PREVENT-PI-004: local state-dir filesystem write (loopback)
+    writeFileSync(logPath, body, "utf8");
+}
+/**
+ * Run one Setup Cortex action against the given stateDir. Returns the action
+ * result on success; throws nothing — every failure is surfaced as a result with
+ * ok=false so the route can shape the HTTP response. Never touches the network;
+ * the subprocesses it may spawn are the committed local vc2-model-prep scripts.
+ */
+export function runSetupCortexAction(action, stateDir) {
+    if (action === "verify-asset")
+        return runVerifyAsset(stateDir);
+    return runSpawnedAction(action, stateDir);
+}

package/dist/extensions/dashboard-server/setup-cortex-blockers.js

@@ -51,3 +51,20 @@ export const SETUP_CORTEX_BLOCKERS = [
 export function setupCortexBlocker(id) {
     return SETUP_CORTEX_BLOCKERS.find((b) => b.id === id);
 }
+/**
+ * The open hard-gate ids that BLOCK a given action. fetch-model and bench are
+ * gated by HG-1 (five-head training open) and HG-3 (install budget open) per the
+ * VC9 workstream plan; verify-asset is a pure re-read of committed assets and is
+ * NOT gated. When a gated action is requested, the route returns
+ * action_blocked_by_open_item with these ids and does NOT spawn. The ids are
+ * always drawn from SETUP_CORTEX_BLOCKERS (each exists — verified by test).
+ */
+export function setupCortexActionBlockers(action) {
+    switch (action) {
+        case "fetch-model":
+        case "bench":
+            return ["HG-1", "HG-3"];
+        case "verify-asset":
+            return [];
+    }
+}

package/dist/src/config/vector-cortex-vc9b.js

@@ -0,0 +1,29 @@
+/**
+ * config/vector-cortex-vc9b.ts — VC9B setup-cortex action-drivers sprint flag.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-vc9a.ts was. This is the
+ * SETUP-DASHBOARD action flag (the dashboard Setup tab fetch/bench/verify action
+ * drivers). vector-cortex.ts re-exports it below and root src/config.ts
+ * re-exports it, so no consumer import path changes.
+ *
+ * The split is purely mechanical: VC9B_ENABLED is byte-identical in name,
+ * semantics, and default to the definition it replaces, and vector-cortex.ts
+ * re-exports it so every existing `from "./config/vector-cortex.js"` import
+ * keeps resolving unchanged.
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * VC9B — Setup Cortex action drivers (POST /api/setup-cortex-action +
+ * GET /api/setup-cortex-action-log). Default ON. `MEGACOMPACT_VC9B=0` disables
+ * and is byte-identical to the predecessor (VC9A-era): the action POST returns
+ * the disabled shape (404/disabled) and flag-off bytes are unchanged. The
+ * actions only spawn the existing committed local scripts
+ * (scripts/vc2-model-prep/fetch-model.sh / bench-onnx.mjs) or re-read the
+ * committed encoder assets — never payload bytes, no network (PREVENT-PI-004).
+ * This flag MUST also be a dashboard SETTINGS toggle (visible in config UI,
+ * never in EXCLUDED_SETTINGS), mirroring VC9A.
+ */
+export const VC9B_ENABLED = () => sprintFlag("MEGACOMPACT_VC9B");

package/dist/src/config/vector-cortex-vc9c.js

@@ -0,0 +1,34 @@
+/**
+ * config/vector-cortex-vc9c.ts — VC9C SetupTab Cortex sub-tab sprint flag.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-vc9a.ts and
+ * vector-cortex-vc9b.ts were. This is the SETUP-DASHBOARD UI flag (the Cortex
+ * sub-tab inside SetupTab). vector-cortex.ts re-exports it below and root
+ * src/config.ts re-exports it, so no consumer import path changes.
+ *
+ * The split is purely mechanical: VC9C_ENABLED is byte-identical in name,
+ * semantics, and default to the definition it replaces, and vector-cortex.ts
+ * re-exports it so every existing `from "./config/vector-cortex.js"` import
+ * keeps resolving unchanged.
+ *
+ * The client gates the Cortex sub-tab's visible state on the flag via the
+ * VC0E honest-status pattern: when the VC9A status payload reports the
+ * off/disabled shape (or VC9C is off), the sub-tab is filtered from
+ * SUB_TABS. Flag-off is byte-identical to the predecessor (VC9B-era).
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * VC9C — SetupTab Cortex sub-tab (client UI). Default ON. `MEGACOMPACT_VC9C=0`
+ * disables and is byte-identical to the predecessor (VC9B-era): the Cortex
+ * sub-tab is filtered from SUB_TABS and the Setup tab renders exactly as it
+ * did before this sprint. The sub-tab is a pure consumer of the VC9A status
+ * endpoint (GET /api/setup-cortex-status) + VC9B action endpoints (POST
+ * /api/setup-cortex-action, GET /api/setup-cortex-action-log); it adds NO
+ * server logic and never surfaces payload bytes/prompts/ledger. This flag MUST
+ * also be a dashboard SETTINGS toggle (visible in config UI, never in
+ * EXCLUDED_SETTINGS), mirroring VC9A/VC9B.
+ */
+export const VC9C_ENABLED = () => sprintFlag("MEGACOMPACT_VC9C");

package/dist/src/config/vector-cortex.js

@@ -244,10 +244,10 @@ export const VC8B_ENABLED = () => sprintFlag("MEGACOMPACT_VC8B");
 // Re-exported here so every existing `from "./config/vector-cortex.js"`
 // import keeps resolving unchanged.
 export { VC8C_ENABLED } from "./vector-cortex-vc8c.js";
-// VC9A (setup-cortex status read path) extracted to vector-cortex-vc9a.ts to
-// keep this file under the 300-line soft limit. Re-exported here so every
-// existing `from "./config/vector-cortex.js"` import keeps resolving unchanged.
+// VC9A/VC9B/VC9C split to vector-cortex-vc9{a,b,c}.ts to stay under the 300-line soft limit.
 export { VC9A_ENABLED } from "./vector-cortex-vc9a.js";
+export { VC9B_ENABLED } from "./vector-cortex-vc9b.js";
+export { VC9C_ENABLED } from "./vector-cortex-vc9c.js";
 // Breaker state machine constants (TRIAD_RESILIENCE.md §breaker) extracted to
 // vector-cortex-breakers.ts to keep this file under the 300-line soft limit.
 export { BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./vector-cortex-breakers.js";

package/dist/src/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";