pi-mega-compact 0.20.4 → 0.20.6

package/dist/config/vector-cortex.js

@@ -172,6 +172,30 @@ export const VC4C_ENABLED = () => sprintFlag("MEGACOMPACT_VC4C");
  * mirroring VC4A/VC4B/VC4C.
  */
 export const VC5A_ENABLED = () => sprintFlag("MEGACOMPACT_VC5A");
+/**
+ * VC5B — validated prompt renderer + provider profiles. Default ON.
+ * `MEGACOMPACT_VC5B=0` disables and is byte-identical to the predecessor
+ * (VC5A): no render manifest is produced, no canonical request is hashed, the
+ * `vector_cortex_render_validated` / `vector_cortex_provider_bypassed` events are
+ * never emitted, and the prompt continues to be built by the predecessor VC5A
+ * DAG/plan path (its goldens are unchanged). The render/validate functions are
+ * PURE — flag OFF gates the reporter + dashboard seam, never the arithmetic.
+ * This flag MUST also be a dashboard SETTINGS toggle (visible in config UI, never
+ * in EXCLUDED_SETTINGS), mirroring VC4A/VC4B/VC4C/VC5A.
+ */
+export const VC5B_ENABLED = () => sprintFlag("MEGACOMPACT_VC5B");
+/**
+ * VC5C — live graduated rollout. Default ON. `MEGACOMPACT_VC5C=0` disables and
+ * is byte-identical to the predecessor (VC5B): no session is assigned a stable
+ * 10k bucket, no gate-advance decision runs, the `vector_cortex_rollout_assigned`
+ * / `vector_cortex_rollout_promotion_blocked` events are never emitted, and the
+ * prompt continues to be built by the predecessor VC5B renderer path (its goldens
+ * are unchanged). The assign/gate/emit functions are PURE — flag OFF gates the
+ * reporter + dashboard seam, never the arithmetic. This flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS),
+ * mirroring VC4A/VC4B/VC4C/VC5A/VC5B.
+ */
+export const VC5C_ENABLED = () => sprintFlag("MEGACOMPACT_VC5C");
 // ---------------------------------------------------------------------------
 // Breaker state machine constants (TRIAD_RESILIENCE.md §breaker).
 // Rolled numbers for one 60s window; VC0C consumes these at its breaker seam.

package/dist/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/extensions/dashboard-server/routes-rag-settings-helpers.js

@@ -150,6 +150,8 @@ export const SETTINGS = [
             boolDirect("MEGACOMPACT_VC4B", "VC4B Residual Basis Parity", "Residual codec: orthonormal DCT-II basis + int16 block quantization + block-scoped exact correction stream + (9,6) Reed-Solomon parity shards with SHA-256 corruption detection; admission gates on encodedSize <= 95% of exact-compressed size. OFF = mode C, no residual artifact produced, byte-identical predecessor.", true),
             boolDirect("MEGACOMPACT_VC4C", "VC4C Reconstruction Fidelity", "Conservative closure + source-order assembly + reconstruction validator: recursively closes dependencies and whole tool pairs to a fixed point, resolves contradictions by retaining the later exact source resolution, assembles spans solely by source range, and rejects missing anchors / split pairs / digest mismatch / unresolved contradiction. Mandatory token estimate is content-only and handed unchanged to VC5A. OFF = mode C, no closure/validator, byte-identical predecessor (VC4B).", true),
             boolDirect("MEGACOMPACT_VC5A", "VC5A PromptDagV1 + Budgeted Planner", "Single-session DAG (PromptDagV1) + budgeted 0/1 portfolio planner: builds a stable Kahn-ordered DAG, computes the mandatory dependency/tool/anchor closure before optional selection, returns MANDATORY_CLOSURE_OVER_BUDGET with evidence preserved on overflow, and runs a utility-per-token portfolio that never exceeds the remaining budget. Framing is owned here, not in VC4C. OFF = byte-identical predecessor (VC4C).", true),
+            boolDirect("MEGACOMPACT_VC5B", "VC5B Validated Renderer + Provider Profiles", "Validated prompt renderer: replays VC5A's stable Kahn order verbatim, preserves exact tool bytes (PREVENT-PI-002), places compacted context via the host before_agent_start prepend seam — never role:system (PREVENT-PI-003) — and SHA-256 hashes the entire canonical outbound request before provider invocation. Unknown provider/model cleanly bypasses to the predecessor prompt path. OFF = byte-identical predecessor (VC5A).", true),
+            boolDirect("MEGACOMPACT_VC5C", "VC5C Live Graduated Rollout", "Live graduated rollout: deterministically hashes each session into a stable 10,000-bucket cohort and advances the exposure gate (1/5/25/50/100%) only after a 72h monotonic residency, a powered sample, >=10,000 events, and >=200 sessions — advancing ONE gate at a time. A hard causal/tool/anchor/exact failure freezes promotion and selects the pre-VC path. OFF = byte-identical predecessor (VC5B).", true),
         ],
     },
     {

package/dist/extensions/dashboard-server/routes-vector-cortex-render.js

@@ -0,0 +1,40 @@
+/**
+ * dashboard-server/routes-vector-cortex-render.ts — VC5B render + provider-profile
+ * dashboard route.
+ *
+ * Reader-only GET /api/vector-cortex/render returning the registered render
+ * (REN-001..020) and provider-profile (PRO-001..015) identifier counts plus the
+ * known base provider-profile keys. NEVER exposes rendered node bytes, prompt
+ * text, or the canonical outbound request (reader-only, SECURITY_PRIVACY).
+ * Flag-gated on MEGACOMPACT_VC5B: `enabled:false` when off (byte-identical to
+ * the pre-VC5B predecessor).
+ *
+ * Guardrails: PREVENT-PI-004 (local in-process state only), PREVENT-011 (no
+ * `any`), reader-only aggregate (counts + profile keys only).
+ */
+import { VC5B_ENABLED } from "../../src/config.js";
+import { REN_IDS } from "../../src/vector-cortex/render/types.js";
+import { PRO_IDS } from "../../src/vector-cortex/provider/types.js";
+import { KNOWN_PROVIDER_KEYS } from "../../src/vector-cortex/provider/registry.js";
+import { sendJson } from "./routes-vector-cortex-shared.js";
+/** Reader-only GET /api/vector-cortex/render (VC5B). */
+export function handleVectorCortexRender(req, res, _ctx) {
+    const url = req.url ?? "";
+    const path = url.split("?")[0] ?? url;
+    if (path !== "/api/vector-cortex/render")
+        return false;
+    if (req.method !== "GET") {
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    const enabled = VC5B_ENABLED();
+    const body = {
+        enabled,
+        renderCount: enabled ? REN_IDS.length : 0,
+        providerCount: enabled ? PRO_IDS.length : 0,
+        knownProfiles: enabled ? KNOWN_PROVIDER_KEYS : [],
+        updatedAt: new Date().toISOString(),
+    };
+    sendJson(res, 200, body);
+    return true;
+}

package/dist/extensions/dashboard-server/routes-vector-cortex-rollout.js

@@ -0,0 +1,43 @@
+/**
+ * dashboard-server/routes-vector-cortex-rollout.ts — VC5C live graduated-rollout
+ * dashboard route.
+ *
+ * Reader-only GET /api/vector-cortex/rollout returning the rollout aggregate:
+ * current gate, bucket count, sessions/events counts, and promotion-blocked
+ * state. NEVER exposes session payloads, prompt text, or bucket→session mappings
+ * (reader-only, SECURITY_PRIVACY). Flag-gated on MEGACOMPACT_VC5C: `enabled:false`
+ * when off (byte-identical to the pre-VC5C predecessor).
+ *
+ * Guardrails: PREVENT-PI-004 (local in-process state only), PREVENT-011 (no
+ * `any`), reader-only aggregate (counts + gate state only).
+ */
+import { VC5C_ENABLED } from "../../src/config.js";
+import { ROLLOUT_GATES, ROLLOUT_BUCKETS } from "../../src/vector-cortex/rollout/types.js";
+import { sendJson } from "./routes-vector-cortex-shared.js";
+/** Reader-only GET /api/vector-cortex/rollout (VC5C). */
+export function handleVectorCortexRollout(req, res, _ctx) {
+    const url = req.url ?? "";
+    const path = url.split("?")[0] ?? url;
+    if (path !== "/api/vector-cortex/rollout")
+        return false;
+    if (req.method !== "GET") {
+        sendJson(res, 405, { error: "method_not_allowed" });
+        return true;
+    }
+    const enabled = VC5C_ENABLED();
+    const gateIndex = 0; // Ephemeral rollout state: no durable gate in this sprint.
+    const gatePct = ROLLOUT_GATES[gateIndex];
+    const body = {
+        enabled,
+        gateIndex: enabled ? gateIndex : 0,
+        gatePct: enabled ? gatePct : 0,
+        buckets: ROLLOUT_BUCKETS,
+        bucketCount: enabled ? gatePct * 100 : 0,
+        events: 0,
+        sessions: 0,
+        promotionBlocked: false,
+        updatedAt: new Date().toISOString(),
+    };
+    sendJson(res, 200, body);
+    return true;
+}

package/dist/extensions/dashboard-server/routes-vector-cortex.js

@@ -22,3 +22,5 @@ export { handleVectorCortexShards } from "./routes-vector-cortex-shards.js";
 export { handleVectorCortexResidual } from "./routes-vector-cortex-residual.js";
 export { handleVectorCortexReconstruct } from "./routes-vector-cortex-reconstruct.js";
 export { handleVectorCortexPlans } from "./routes-vector-cortex-plans.js";
+export { handleVectorCortexRender } from "./routes-vector-cortex-render.js";
+export { handleVectorCortexRollout } from "./routes-vector-cortex-rollout.js";

package/dist/extensions/dashboard-server/routes.js

@@ -23,4 +23,4 @@ export { handleRagSettings } from "./routes-rag-settings.js";
 export { handleRagMetrics } from "./routes-rag-metrics.js";
 export { handleModelThresholds } from "./routes-model-thresholds.js";
 export { handleWiki } from "./routes-wiki.js";
-export { handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, } from "./routes-vector-cortex.js";
+export { handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, handleVectorCortexRender, handleVectorCortexRollout, } from "./routes-vector-cortex.js";

package/dist/extensions/dashboard-server/server.js

@@ -14,7 +14,7 @@ import { createRequire } from "node:module";
 import { NEW_UI } from "../../src/config.js";
 import { log, setLogPath, setDashboardServerVersion } from "./state.js";
 import { detectTailscaleIP } from "./tailscale.js";
-import { buildRouteContext, handleIndex, handleRepoIndex, handleEvents, handleGameState, handleGameScores, handlePerf, handlePerfSamples, handleAchievements, handleSessions, handleTopics, handleTurns, handleMaintenance, handleProviderCache, handleCacheStripes, handleMemoryStatus, handleSetupStatus, handleSetupDetect, handleSetupConfigure, handleMemoryMap, handleRaptorTree, handleRaptorBuildHistory, handleContextHealth, handleCachePoison, handleHealthSettings, handleEmbedderHealth, handleRagSettings, handleRagMetrics, handleModelThresholds, handleWiki, handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, handleStatic, } from "./routes.js";
+import { buildRouteContext, handleIndex, handleRepoIndex, handleEvents, handleGameState, handleGameScores, handlePerf, handlePerfSamples, handleAchievements, handleSessions, handleTopics, handleTurns, handleMaintenance, handleProviderCache, handleCacheStripes, handleMemoryStatus, handleSetupStatus, handleSetupDetect, handleSetupConfigure, handleMemoryMap, handleRaptorTree, handleRaptorBuildHistory, handleContextHealth, handleCachePoison, handleHealthSettings, handleEmbedderHealth, handleRagSettings, handleRagMetrics, handleModelThresholds, handleWiki, handleVectorCortexEvaluation, handleVectorCortexHealth, handleVectorCortexBreakersReset, handleVectorCortexLedger, handleVectorCortexTopology, handleVectorCortexQuery, handleVectorCortexShards, handleVectorCortexResidual, handleVectorCortexReconstruct, handleVectorCortexPlans, handleVectorCortexRender, handleVectorCortexRollout, handleStatic, } from "./routes.js";
 export async function launchDashboardServer(stateDir) {
     // Our own package version — exposed at /api/version so the launcher can
     // detect a stale server (started by an older build) and replace it on
@@ -277,6 +277,10 @@ export async function launchDashboardServer(stateDir) {
             return;
         if (handleVectorCortexPlans(req, res, ctx))
             return;
+        if (handleVectorCortexRender(req, res, ctx))
+            return;
+        if (handleVectorCortexRollout(req, res, ctx))
+            return;
         handleStatic(req, res, ctx);
     });
     // Bind base + range are env-configurable so tests can use a private,

package/dist/extensions/mega-context/vector-cortex.js

@@ -0,0 +1,128 @@
+/**
+ * mega-context/vector-cortex.ts — VC5B delegation seam (the sprint's production
+ * ownership: `extensions/mega-context/vector-cortex.ts`).
+ *
+ * This is the ONLY extension-side surface VC5B owns. It delegates to the pi-
+ * agnostic `src/vector-cortex/render` + `src/vector-cortex/provider` logic and
+ * wires the two structured events the sprint emits:
+ *   - `vector_cortex_render_validated`  — a render passed validation and will be
+ *     prepended via the host `before_agent_start` systemPrompt seam.
+ *   - `vector_cortex_provider_bypassed` — an unknown provider/profile forced a
+ *     clean bypass (triad C, the predecessor prompt path).
+ *
+ * GUARDRAIL PREVENT-PI-003 (critical): the rendered compacted context is placed
+ * via the host `before_agent_start` systemPrompt PREPEND seam — it is NEVER
+ * emitted as a `role:"system"` conversation message. The renderer returns a
+ * `RenderManifestV1`, not a raw system-role payload; this seam composes the
+ * manifest's prepend into `event.systemPrompt`.
+ *
+ * The context handler (extensions/mega-events/context-handler.ts) is 228 lines
+ * (already a delegate shell) and under the extension hard limit, so NO split was
+ * required — VC5B delegates from here rather than modifying that handler.
+ *
+ * Pi runtime adapter: imports only pi runtime types + the VC5B logic. Flag-gated
+ * on `VC5B_ENABLED()`; flag OFF is byte-identical to the predecessor (VC5A state
+ * — the DAG/plan path), so this seam returns the host's unmodified systemPrompt.
+ */
+import { VC5B_ENABLED } from "../../src/config/vector-cortex.js";
+import { resolveProviderProfile } from "../../src/vector-cortex/provider/registry.js";
+import { renderPrompt } from "../../src/vector-cortex/render/renderer.js";
+import { validateRender } from "../../src/vector-cortex/render/validator.js";
+/**
+ * Run the full VC5B render+validate pipeline. Returns a structured outcome the
+ * `before_agent_start` handler composes into the host systemPrompt. On a clean
+ * bypass (unknown profile) it emits `vector_cortex_provider_bypassed` and the
+ * host uses the predecessor prompt path (triad C). On a validated render it
+ * emits `vector_cortex_render_validated` (triad A).
+ *
+ * All emits are best-effort and non-fatal; the flag gates zero observability
+ * writes when OFF (byte-identical to predecessor).
+ */
+export function runVectorCortexRender(input, emit) {
+    const fire = (event, fields) => {
+        try {
+            if (VC5B_ENABLED())
+                emit?.(event, fields);
+        }
+        catch {
+            /* non-fatal observability — never break the agent loop */
+        }
+    };
+    const rendered = renderPrompt(input);
+    if (!rendered.ok) {
+        // Clean bypass (unknown profile) or a hard order mismatch. Bypass emits the
+        // provider-bypassed event and defers to the predecessor prompt path.
+        fire("vector_cortex_provider_bypassed", {
+            code: rendered.code,
+            triad: rendered.triad,
+        });
+        return {
+            validated: false,
+            bypassed: true,
+            manifest: null,
+            systemPromptPrepend: "",
+            triad: rendered.triad,
+        };
+    }
+    // Validate the canonical request BEFORE invocation. The profile at validation
+    // time must match the manifest profile (the UNIQUE injection swaps it → C).
+    const sourceToolBytes = new Map();
+    for (const t of rendered.request.tools)
+        sourceToolBytes.set(t.id, t.bytes);
+    const pinnedToolLengths = new Map();
+    for (const t of rendered.request.tools) {
+        pinnedToolLengths.set(t.id, Buffer.byteLength(t.bytes, "utf8"));
+    }
+    const check = validateRender(rendered.manifest, rendered.request, input.profile, sourceToolBytes, pinnedToolLengths);
+    if (!check.ok) {
+        fire("vector_cortex_provider_bypassed", {
+            code: check.code,
+            triad: check.triad,
+        });
+        return {
+            validated: false,
+            bypassed: true,
+            manifest: rendered.manifest,
+            systemPromptPrepend: "",
+            triad: check.triad,
+        };
+    }
+    fire("vector_cortex_render_validated", {
+        profileId: rendered.manifest.profileId,
+        requestDigest: rendered.manifest.requestDigest,
+        nodeCount: rendered.manifest.nodeOrder.length,
+        triad: "A",
+    });
+    return {
+        validated: true,
+        bypassed: false,
+        manifest: rendered.manifest,
+        systemPromptPrepend: rendered.request.systemPromptPrepend,
+        triad: "A",
+    };
+}
+/**
+ * Register the VC5B `before_agent_start` prepend seam on the host. Flag OFF →
+ * byte-identical to the predecessor (returns the host's unmodified systemPrompt).
+ * The composed prepend is placed on the HOST systemPrompt, never as role:system.
+ */
+export function registerVectorCortexRender(pi, _ctx, emit) {
+    pi.on("before_agent_start", (event, ctx) => {
+        if (!VC5B_ENABLED())
+            return; // byte-identical predecessor behavior
+        // The host supplies the active (provider, model) so the seam can resolve the
+        // profile. Until the host passes a render input, the seam stays inert.
+        const pending = ctx.megaCompactVectorCortexRender;
+        if (pending === undefined)
+            return;
+        const outcome = runVectorCortexRender(pending, emit);
+        if (!outcome.validated)
+            return; // bypass / mismatch → predecessor path
+        return { systemPrompt: `${event.systemPrompt}\n\n${outcome.systemPromptPrepend}` };
+    });
+}
+/** Resolve a provider profile by (provider, model) for the host to pass in. */
+export function resolveProfile(provider, model) {
+    const res = resolveProviderProfile(provider, model);
+    return res.ok ? res.bundle : null;
+}

package/dist/extensions/mega-runtime/vector-cortex-live.js

@@ -0,0 +1,105 @@
+/**
+ * vector-cortex-live.ts — VC5C live graduated-rollout integration seam.
+ *
+ * This adapter composes the rollout assign + gate + emit seams into the host
+ * provider-invocation path. It runs BEFORE provider invocation and decides, for
+ * the current session, which live path is active:
+ *
+ *   - on a hard causal/tool/anchor/exact failure → select mode C (pre-VC prompt
+ *     path) and FREEZE promotion (promotionBlocked=true) for the remainder of the
+ *     cooldown/spool/restart/clock period satisfying TRIAD_RESILIENCE;
+ *   - otherwise → the active gate decides whether the VC path is exposed to this
+ *     session's bucket.
+ *
+ * PREVENT-PI-003: the rollout NEVER emits a `role:"system"` message. The VC
+ * prompt context is composed into the host `before_agent_start` systemPrompt
+ * prepend seam only. PREVENT-PI-004: zero network calls (local in-process state
+ * + injected clock only). PREVENT-011: no `any`. Non-fatal: any rollout noise
+ * degrades to mode C (pre-VC continuity), never breaking the agent loop.
+ *
+ * LIVENESS HONESTY (mirrors VC0C-Q01/Q06): the rollout decision state here is
+ * PER-PROCESS / IN-MEMORY and EPHEMERAL — there is NO persistent rollout runtime
+ * and NO live producer wiring. The gate decision is recomputed from injected
+ * evidence each epoch. The assigned/blocked events are emitted for observability
+ * only.
+ */
+import { assignSession, bucketInGate, gatePctForIndex } from "../../src/vector-cortex/rollout/assign.js";
+import { decideGate, selectsPreVcPath, } from "../../src/vector-cortex/rollout/gate.js";
+import { createRolloutReporter } from "../../src/vector-cortex/rollout/emit.js";
+import { VC5C_ENABLED } from "../../src/config/vector-cortex.js";
+const NO_PREPEND = "";
+/**
+ * Decide the live path for a session epoch. Pure over injected context; no
+ * I/O, no network. Flag OFF (or absent evidence/clock) degrades to mode C with
+ * the VC path inactive (pre-VC predecessor parity).
+ */
+export function decideLivePath(sessionId, ctx) {
+    const reporter = createRolloutReporter(ctx.emit);
+    const assignment = assignSession(sessionId);
+    if (!VC5C_ENABLED()) {
+        // Pre-VC predecessor: no rollout, no VC path. Never emit role:system.
+        return {
+            vcActive: false,
+            forcedPreVc: false,
+            mode: "C",
+            bucket: assignment.bucket,
+            gateIndex: 0,
+            promotionBlocked: false,
+            systemPromptPrepend: NO_PREPEND,
+        };
+    }
+    reporter.assigned({
+        sessionId,
+        bucket: assignment.bucket,
+        gateIndex: assignment.gateIndex,
+        gatePct: gatePctForIndex(assignment.gateIndex),
+    });
+    const hardFaults = ctx.hardFaults ?? [];
+    const hardFault = hardFaults.length > 0 ? hardFaults[0] : undefined;
+    const forcedPreVc = selectsPreVcPath(hardFault);
+    if (forcedPreVc && hardFault) {
+        reporter.promotionBlocked({
+            gateIndex: ctx.currentGate ?? assignment.gateIndex,
+            kind: hardFault.kind,
+            detail: hardFault.detail,
+        });
+        // Hard failure → select C (pre-VC path) and freeze promotion.
+        return {
+            vcActive: false,
+            forcedPreVc: true,
+            mode: "C",
+            bucket: assignment.bucket,
+            gateIndex: ctx.currentGate ?? assignment.gateIndex,
+            promotionBlocked: true,
+            systemPromptPrepend: NO_PREPEND,
+        };
+    }
+    const clock = ctx.clock;
+    const evidence = ctx.evidence;
+    if (clock === undefined || evidence === undefined) {
+        // No live evidence/clock → pre-VC parity (no promotion, no VC exposure).
+        return {
+            vcActive: false,
+            forcedPreVc: false,
+            mode: "C",
+            bucket: assignment.bucket,
+            gateIndex: assignment.gateIndex,
+            promotionBlocked: false,
+            systemPromptPrepend: NO_PREPEND,
+        };
+    }
+    const outcome = decideGate(ctx.currentGate ?? assignment.gateIndex, evidence, clock);
+    const vcActive = bucketInGate(assignment.bucket, outcome.gatePct);
+    // PREVENT-PI-003: VC prompt context is composed into the host prepend seam,
+    // never as a role:system message. Empty prepend here (the actual prompt text
+    // is owned by the renderer seam); this seam only signals eligibility.
+    return {
+        vcActive,
+        forcedPreVc: false,
+        mode: vcActive ? "A" : "C",
+        bucket: assignment.bucket,
+        gateIndex: outcome.gateIndex,
+        promotionBlocked: outcome.promotionBlocked,
+        systemPromptPrepend: NO_PREPEND,
+    };
+}

package/dist/src/config/vector-cortex.js

@@ -172,6 +172,30 @@ export const VC4C_ENABLED = () => sprintFlag("MEGACOMPACT_VC4C");
  * mirroring VC4A/VC4B/VC4C.
  */
 export const VC5A_ENABLED = () => sprintFlag("MEGACOMPACT_VC5A");
+/**
+ * VC5B — validated prompt renderer + provider profiles. Default ON.
+ * `MEGACOMPACT_VC5B=0` disables and is byte-identical to the predecessor
+ * (VC5A): no render manifest is produced, no canonical request is hashed, the
+ * `vector_cortex_render_validated` / `vector_cortex_provider_bypassed` events are
+ * never emitted, and the prompt continues to be built by the predecessor VC5A
+ * DAG/plan path (its goldens are unchanged). The render/validate functions are
+ * PURE — flag OFF gates the reporter + dashboard seam, never the arithmetic.
+ * This flag MUST also be a dashboard SETTINGS toggle (visible in config UI, never
+ * in EXCLUDED_SETTINGS), mirroring VC4A/VC4B/VC4C/VC5A.
+ */
+export const VC5B_ENABLED = () => sprintFlag("MEGACOMPACT_VC5B");
+/**
+ * VC5C — live graduated rollout. Default ON. `MEGACOMPACT_VC5C=0` disables and
+ * is byte-identical to the predecessor (VC5B): no session is assigned a stable
+ * 10k bucket, no gate-advance decision runs, the `vector_cortex_rollout_assigned`
+ * / `vector_cortex_rollout_promotion_blocked` events are never emitted, and the
+ * prompt continues to be built by the predecessor VC5B renderer path (its goldens
+ * are unchanged). The assign/gate/emit functions are PURE — flag OFF gates the
+ * reporter + dashboard seam, never the arithmetic. This flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS),
+ * mirroring VC4A/VC4B/VC4C/VC5A/VC5B.
+ */
+export const VC5C_ENABLED = () => sprintFlag("MEGACOMPACT_VC5C");
 // ---------------------------------------------------------------------------
 // Breaker state machine constants (TRIAD_RESILIENCE.md §breaker).
 // Rolled numbers for one 60s window; VC0C consumes these at its breaker seam.

package/dist/src/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/src/store/sqlite/global-sessions.js

@@ -39,9 +39,15 @@ function sessionColor(sessionId) {
  * change. PRIMARY KEY (pid, session_id) means concurrent pi processes each get
  * their own row. Non-fatal on conflict (INSERT ... ON CONFLICT DO UPDATE).
  */
-export function recordSessionHeartbeat(pid, sessionId, repoRoot, stateDir, ctxWindow, indexDir = getIndexDir()) {
+export function recordSessionHeartbeat(pid, sessionId, repoRoot, stateDir, ctxWindow, indexDir = getIndexDir(), 
+// Optional clock override for deterministic tests only. Production callers
+// omit it → Date.now(), byte-identical behavior. The S39 prune test pins
+// heartbeats to a known-old timestamp so pruneStaleSessions' Date.now()
+// cutoff unambiguously exceeds them (no same-millisecond last_seen ==
+// cutoff race that made pruned !== 2).
+nowMs = Date.now()) {
     const db = openIndexStore(indexDir);
-    const now = Date.now();
+    const now = nowMs;
     db.prepare(`INSERT INTO session_heartbeats (pid, session_id, repo_root, state_dir, ctx_window, last_seen)
      VALUES (@pid, @session_id, @repo_root, @state_dir, @ctx_window, @last_seen)
      ON CONFLICT(pid, session_id) DO UPDATE SET
@@ -71,9 +77,15 @@ export function recordSessionHeartbeat(pid, sessionId, repoRoot, stateDir, ctxWi
  * (for SSE real-time push via /api/events). The eventsLogPath is optional —
  * callers without an events.log (e.g. tests) can omit it.
  */
-export function appendTokenSample(sessionId, repoRoot, tokens, percent, ctxWindow, eventsLogPath, indexDir = getIndexDir()) {
+export function appendTokenSample(sessionId, repoRoot, tokens, percent, ctxWindow, eventsLogPath, indexDir = getIndexDir(), 
+// Optional clock override for deterministic tests only. Production callers
+// omit it → falls back to Date.now(), byte-identical behavior. The S39
+// timeseries test injects distinct timestamps so the per-ts totals map is
+// not collapsed by same-millisecond sample coincidence (the pre-existing
+// flake where 3 samples in one ms made totals.length == 1).
+nowMs = Date.now()) {
     const db = openIndexStore(indexDir);
-    const now = Date.now();
+    const now = nowMs;
     db.prepare(`INSERT INTO token_samples (session_id, repo_root, tokens, percent, ctx_window, ts)
      VALUES (@session_id, @repo_root, @tokens, @percent, @ctx_window, @ts)`).run({
         session_id: sessionId,

package/dist/src/vector-cortex/provider/registry.js

@@ -0,0 +1,112 @@
+/**
+ * vector-cortex/provider/registry.ts — fixture-backed base provider profile
+ * registry (VC5B, task 2).
+ *
+ * The registry resolves a `(provider, model)` pair to a `ProviderProfileBundle`
+ * (CONTRACTS §ProviderProfileV1 + role/tool/cache rules). Unknown provider/model
+ * returns `PRO_PROFILE_UNKNOWN` and the renderer CLEANLY bypasses vector-cortex
+ * rendering (NOT an error — the host uses the predecessor prompt path).
+ *
+ * Profiles are fixture-backed: each base profile is declared here as a constant
+ * and is also pinned as a conformance fixture under `conformance/vector-cortex/v2/
+ * provider/` (registered by `scripts/gen-fixtures/provider.mjs`). The registry is
+ * the REAL resolver the acceptance suite drives; the fixtures are the committed
+ * canonical corpus that proves each profile's cache-identity behavior.
+ *
+ * Pi-agnostic, dependency-free, zero network (PREVENT-PI-004 / PREVENT-011).
+ */
+import { PRO_PROFILE_UNKNOWN, } from "./types.js";
+/** A registry key is `provider` + `model`. Lookup is exact-match. */
+function key(provider, model) {
+    return `${provider}//${model}`;
+}
+/**
+ * The base role rule every VC5B profile shares: the renderer MUST use the host
+ * `before_agent_start` prepend seam and MUST NOT inject `role:"system"`
+ * (PREVENT-PI-003, critical).
+ */
+const BASE_ROLE = {
+    useHostPrependSeam: true,
+    forbidSystemRoleInjection: true,
+};
+/**
+ * The base tool rule every VC5B profile shares: exact tool bytes preserved
+ * (PREVENT-PI-002) and the renderer never reorders away from the validator order.
+ */
+const BASE_TOOL = {
+    preserveExactToolBytes: true,
+    forbidToolReorder: true,
+};
+/** Build a base cache rule (entire-canonical-request hashing by default). */
+function baseCache(stableFields) {
+    return {
+        hashMode: "entire-canonical-request",
+        stableFields,
+    };
+}
+/** Build a contract-profile shape pinned as a conformance fixture too. */
+function profile(id, version, excludedJsonPointers) {
+    return {
+        schema: "provider-profile-v1",
+        id,
+        version,
+        hashMode: "entire-canonical-request",
+        excludedJsonPointers,
+    };
+}
+/**
+ * The fixture-backed base profiles. Each entry is the REAL bundle the renderer
+ * resolves; the parallel conformance fixtures prove the cache-identity behavior.
+ */
+const BASE_PROFILES = [
+    {
+        profile: profile("anthropic-claude-opus", "v1", []),
+        role: BASE_ROLE,
+        tool: BASE_TOOL,
+        cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),
+    },
+    {
+        profile: profile("anthropic-claude-sonnet", "v1", []),
+        role: BASE_ROLE,
+        tool: BASE_TOOL,
+        cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),
+    },
+    {
+        profile: profile("openai-gpt", "v1", []),
+        role: BASE_ROLE,
+        tool: BASE_TOOL,
+        cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),
+    },
+    {
+        // A profile that proves a fixture-excluded pointer: a provider whose
+        // request-id header cannot affect cache identity. Excluded + versioned.
+        profile: profile("google-gemini", "v1", [
+            {
+                pointer: "/requestId",
+                fixtureId: "PRO-EXCLUDE-010",
+                proofDigest: "sha256:excluded-request-id-proof",
+            },
+        ]),
+        role: BASE_ROLE,
+        tool: BASE_TOOL,
+        cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),
+    },
+];
+const REGISTRY = new Map(BASE_PROFILES.map((b) => [key(b.profile.id, b.profile.version), b]));
+/**
+ * Resolve a `(provider, model)` pair to a `ProviderProfileBundle`. Unknown
+ * provider / model / version → a CLEAN bypass (`PRO_PROFILE_UNKNOWN`), never an
+ * error. The renderer consults this and, on `ok:false`, selects triad C (the
+ * predecessor prompt path).
+ */
+export function resolveProviderProfile(provider, model) {
+    const bundle = REGISTRY.get(key(provider, model));
+    if (bundle === undefined) {
+        return { ok: false, code: PRO_PROFILE_UNKNOWN };
+    }
+    return { ok: true, bundle };
+}
+/** The fixture-backed base profiles (exposed for tests / dashboard introspection). */
+export const BASE_PROVIDER_PROFILES = BASE_PROFILES;
+/** The set of known `(provider, model)` keys, for conformance registration. */
+export const KNOWN_PROVIDER_KEYS = Array.from(REGISTRY.keys());

package/dist/src/vector-cortex/provider/types.js

@@ -0,0 +1,30 @@
+/**
+ * vector-cortex/provider/types.ts — provider profile contract (VC5B, task 1).
+ *
+ * A `ProviderProfileV1` describes how a given provider/model caches and what the
+ * renderer may or may not fold into the outbound prompt without breaking the
+ * provider's KV-cache identity (CONTRACTS §ProviderProfileV1 + crystals).
+ *
+ * The renderer hashes the ENTIRE canonical outbound request by default
+ * (`hashMode: "entire-canonical-request"`). A profile may EXCLUDE a field only
+ * when a fixture proves that field cannot affect provider cache identity; every
+ * exclusion is versioned and listed in the manifest. Unknown provider / profile /
+ * version → the renderer bypasses vector-cortex rendering (a clean bypass, NOT an
+ * error) and the host falls back to the predecessor prompt path.
+ *
+ * Pure types + registered conformance IDs: no storage, no console, no network
+ * (PREVENT-PI-004 / PREVENT-011).
+ */
+/**
+ * The sentinel returned for an unknown provider/model. The renderer sees this as
+ * a CLEAN bypass decision, not an error, and emits `vector_cortex_provider_bypassed`.
+ */
+export const PRO_PROFILE_UNKNOWN = "PRO_PROFILE_UNKNOWN";
+/**
+ * Registered PRO conformance ID range (PRO-001..015). The acceptance aggregator
+ * reads these rows from the v2 manifest and asserts each returns its manifest
+ * `ok`/`code` / pinned `requestDigest`.
+ */
+export const PRO_IDS = Array.from({ length: 15 }, (_v, i) => `PRO-${String(i + 1).padStart(3, "0")}`);
+/** Named VC5B provider conformance assertions (the sprint's headline rows). */
+export const PRO_NAMED_IDS = ["PRO-UNKNOWN-003"];