pi-mega-compact 0.20.40 → 0.20.41

package/dist/config/vector-cortex-ml5e.js

@@ -0,0 +1,30 @@
+/**
+ * config/vector-cortex-ml5e.ts — ML5-E nightly retraining cron + feedback loop.
+ *
+ * Sibling extract mirroring vector-cortex-ml5a.ts / ml5b.ts / ml5c.ts / ml5d.ts,
+ * so vector-cortex.ts stays under its 300-line soft limit (soft-as-hard gate).
+ * vector-cortex.ts re-exports the ENUM below and root src/config.ts re-exports
+ * it, so no consumer import path changes.
+ *
+ * ML5-E turns one-shot training (ML5-D's Improve button) into a living loop:
+ * the user's own post-redaction conversation turns become fresh training signal,
+ * the five heads are re-fit nightly, calibration is re-validated, and mode-A
+ * promotion is re-checked without human intervention. The cron is system-
+ * configured (`crontab -e` on the operator device); the extension never installs
+ * or writes a crontab. The flag gates **invocation** only — the scripts
+ * (retrain-nightly.mjs, promotion-gate.mjs, promotion.ts) exist on disk
+ * regardless; `=0` means the runtime never invokes them and the dashboard's
+ * Improve Cortex flow is byte-identical to the ML5-D survivor.
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * ML5-E — nightly retraining cron + feedback loop. Default ON.
+ * `MEGACOMPACT_ML5_E=0` disables and is byte-identical to the ML5-D survivor:
+ * the nightly retraining scripts are never invoked by the runtime, the
+ * promotion gate is inert, and the dashboard's Improve Cortex flow is
+ * byte-identical to the ML5-D tab. The flag gates invocation only — the scripts
+ * exist on disk regardless.
+ */
+export const ML5E_ENABLED = () => sprintFlag("MEGACOMPACT_ML5_E");

package/dist/config/vector-cortex.js

@@ -9,9 +9,8 @@
  * them without re-declaring the ownership boundary. Pi-agnostic, dependency-free.
  */
 import { sprintFlag } from "./vector-cortex-flag.js";
-// VC0/VC1/VC2 foundation-phase flags extracted to vector-cortex-early.ts to keep
-// this file under the 300-line soft limit. Re-exported here so every existing
-// `from "./config/vector-cortex.js"` import keeps resolving unchanged.
+// VC0/VC1/VC2 foundation-phase flags in vector-cortex-early.ts; re-exported
+// so every existing `from "./config/vector-cortex.js"` import resolves unchanged.
 export { VC0A_ENABLED, VC0B_ENABLED, VC0C_ENABLED, VC1A_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, } from "./vector-cortex-early.js";
 /**
  * VC3A — capability-gated cortex store (CortexReader/Writer/Admin, CortexRecordV1).
@@ -239,9 +238,9 @@ export const VC8A_ENABLED = () => sprintFlag("MEGACOMPACT_VC8A");
  * mirroring VC4A..VC8A.
  */
 export const VC8B_ENABLED = () => sprintFlag("MEGACOMPACT_VC8B");
-// VC8C (canary selection + Rust parity) extracted to vector-cortex-vc8c.ts; re-exported so existing imports keep resolving.
+// VC8C extracted to vector-cortex-vc8c.ts; re-exported so existing imports keep resolving.
 export { VC8C_ENABLED } from "./vector-cortex-vc8c.js";
-// Sibling extracts to stay under the 300-line soft limit.
+// Sibling extracts: stay under the 300-line soft limit.
 export { VC9A_ENABLED } from "./vector-cortex-vc9a.js";
 export { VC9B_ENABLED } from "./vector-cortex-vc9b.js";
 export { VC9C_ENABLED } from "./vector-cortex-vc9c.js";
@@ -251,5 +250,6 @@ export { ML5A_ENABLED } from "./vector-cortex-ml5a.js";
 export { ML5B_ENABLED } from "./vector-cortex-ml5b.js";
 export { ML5C_ENABLED } from "./vector-cortex-ml5c.js";
 export { ML5D_ENABLED } from "./vector-cortex-ml5d.js";
+export { ML5E_ENABLED } from "./vector-cortex-ml5e.js";
 // Breaker constants (TRIAD_RESILIENCE.md §breaker) extracted to vector-cortex-breakers.ts.
 export { BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./vector-cortex-breakers.js";

package/dist/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, ML5E_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/extensions/dashboard-server/routes-rag-settings-vector-cortex.js

@@ -56,5 +56,6 @@ export const VECTOR_CORTEX_SETTINGS = {
         boolDirect("MEGACOMPACT_ML5_A", "ML5-A Five-Head Training Load", "ML5-A real trained-head loading: loadHeadProjections (trained-heads-v1) feeds selectQualifiedEncoder (trainedHeadsPath atomic demotion) + loadCalibrationV1. ON (default) = a pinned trained-heads path must load for mode A. OFF = loaders return null and selection ignores trainedHeadsPath — byte-identical to the placeholder-weighted VC2C path.", true),
         boolDirect("MEGACOMPACT_ML5_C", "ML5-C Runtime Decision + Packaging", "ML5-C runtime backend selection (WASM vs native): selects the ONNX runtime backend based on the ML5-B bench record and platform support. ON (default) = the runtime-selection dispatch runs and emits vector_cortex_runtime_selected. OFF = no selection runs — encoder serves mode B trigram, byte-identical to ML5-B.", true),
         boolDirect("MEGACOMPACT_ML5_D", "ML5-D Dashboard Improve Cortex", "ML5-D dashboard 'Improve Cortex' surface: the ModelImprovementCard + POST /api/cortex/improve + GET /api/cortex/improve/status/:jobId. ON (default) = the card renders and Improve launches a local ML5-A training job. OFF = both improve endpoints return 404 and VectorCortexTab omits the card, byte-identical to ML5-C.", true),
+        boolDirect("MEGACOMPACT_ML5_E", "ML5-E Nightly Retraining Cron", "ML5-E nightly retraining + feedback loop: the user's own post-redaction conversation turns become fresh training signal, the five heads are re-fit nightly via system cron, calibration is re-validated, and mode-A promotion is re-checked without human intervention. The cron is system-configured (crontab -e); the extension never installs or writes a crontab. Candidates are written to ~/.pi/mega-compact-encoder/candidates/ and promoted via the ML5-D Improve Cortex flow. ON (default) = the scripts may be invoked by the system cron. OFF = scripts are never invoked; byte-identical to ML5-D.", true),
     ],
 };

package/dist/src/config/vector-cortex-ml5e.js

@@ -0,0 +1,30 @@
+/**
+ * config/vector-cortex-ml5e.ts — ML5-E nightly retraining cron + feedback loop.
+ *
+ * Sibling extract mirroring vector-cortex-ml5a.ts / ml5b.ts / ml5c.ts / ml5d.ts,
+ * so vector-cortex.ts stays under its 300-line soft limit (soft-as-hard gate).
+ * vector-cortex.ts re-exports the ENUM below and root src/config.ts re-exports
+ * it, so no consumer import path changes.
+ *
+ * ML5-E turns one-shot training (ML5-D's Improve button) into a living loop:
+ * the user's own post-redaction conversation turns become fresh training signal,
+ * the five heads are re-fit nightly, calibration is re-validated, and mode-A
+ * promotion is re-checked without human intervention. The cron is system-
+ * configured (`crontab -e` on the operator device); the extension never installs
+ * or writes a crontab. The flag gates **invocation** only — the scripts
+ * (retrain-nightly.mjs, promotion-gate.mjs, promotion.ts) exist on disk
+ * regardless; `=0` means the runtime never invokes them and the dashboard's
+ * Improve Cortex flow is byte-identical to the ML5-D survivor.
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * ML5-E — nightly retraining cron + feedback loop. Default ON.
+ * `MEGACOMPACT_ML5_E=0` disables and is byte-identical to the ML5-D survivor:
+ * the nightly retraining scripts are never invoked by the runtime, the
+ * promotion gate is inert, and the dashboard's Improve Cortex flow is
+ * byte-identical to the ML5-D tab. The flag gates invocation only — the scripts
+ * exist on disk regardless.
+ */
+export const ML5E_ENABLED = () => sprintFlag("MEGACOMPACT_ML5_E");

package/dist/src/config/vector-cortex.js

@@ -9,9 +9,8 @@
  * them without re-declaring the ownership boundary. Pi-agnostic, dependency-free.
  */
 import { sprintFlag } from "./vector-cortex-flag.js";
-// VC0/VC1/VC2 foundation-phase flags extracted to vector-cortex-early.ts to keep
-// this file under the 300-line soft limit. Re-exported here so every existing
-// `from "./config/vector-cortex.js"` import keeps resolving unchanged.
+// VC0/VC1/VC2 foundation-phase flags in vector-cortex-early.ts; re-exported
+// so every existing `from "./config/vector-cortex.js"` import resolves unchanged.
 export { VC0A_ENABLED, VC0B_ENABLED, VC0C_ENABLED, VC1A_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, } from "./vector-cortex-early.js";
 /**
  * VC3A — capability-gated cortex store (CortexReader/Writer/Admin, CortexRecordV1).
@@ -239,9 +238,9 @@ export const VC8A_ENABLED = () => sprintFlag("MEGACOMPACT_VC8A");
  * mirroring VC4A..VC8A.
  */
 export const VC8B_ENABLED = () => sprintFlag("MEGACOMPACT_VC8B");
-// VC8C (canary selection + Rust parity) extracted to vector-cortex-vc8c.ts; re-exported so existing imports keep resolving.
+// VC8C extracted to vector-cortex-vc8c.ts; re-exported so existing imports keep resolving.
 export { VC8C_ENABLED } from "./vector-cortex-vc8c.js";
-// Sibling extracts to stay under the 300-line soft limit.
+// Sibling extracts: stay under the 300-line soft limit.
 export { VC9A_ENABLED } from "./vector-cortex-vc9a.js";
 export { VC9B_ENABLED } from "./vector-cortex-vc9b.js";
 export { VC9C_ENABLED } from "./vector-cortex-vc9c.js";
@@ -251,5 +250,6 @@ export { ML5A_ENABLED } from "./vector-cortex-ml5a.js";
 export { ML5B_ENABLED } from "./vector-cortex-ml5b.js";
 export { ML5C_ENABLED } from "./vector-cortex-ml5c.js";
 export { ML5D_ENABLED } from "./vector-cortex-ml5d.js";
+export { ML5E_ENABLED } from "./vector-cortex-ml5e.js";
 // Breaker constants (TRIAD_RESILIENCE.md §breaker) extracted to vector-cortex-breakers.ts.
 export { BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./vector-cortex-breakers.js";

package/dist/src/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, ML5E_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/src/vector-cortex/encoder/promotion.js

@@ -0,0 +1,58 @@
+/**
+ * vector-cortex/encoder/promotion.ts — ML5-E PromotionV1 ledger row type +
+ * append-only manifest helper + atomic digest-swap rollback.
+ *
+ * Pure-function discipline: zero I/O, no clock, no storage, no network
+ * (PREVENT-PI-004 / PREVENT-011). Every function is total over its inputs.
+ * The cron orchestrator (scripts/ml5/retrain-nightly.mjs) and the promotion
+ * gate (scripts/ml5/promotion-gate.mjs) consume these helpers; the acceptance
+ * aggregator (ml5e-acceptance.test.ts) validates them synthetically without a
+ * real training run.
+ *
+ * The promotion manifest is an APPEND-ONLY ledger: every new asset is a new
+ * entry, never an overwrite. Rollback restores a prior entry by SHA-256 via
+ * an atomic digest swap (flip the committed pointer to the prior entry's
+ * digest in one step) — no partial state is possible because the swap is a
+ * single value assignment.
+ */
+// ---------------------------------------------------------------------------
+// PromotionV1 — the ledger row recording one nightly training + promotion run.
+// ---------------------------------------------------------------------------
+/** Schema tag for the promotion ledger row. */
+export const PROMOTION_SCHEMA = "promotion-v1";
+/** Append a new asset entry to the manifest. Never mutates `entries`;
+ *  returns a new manifest with the entry appended and `committed` updated. */
+export function appendAsset(manifest, entry) {
+    return {
+        entries: [...manifest.entries, entry],
+        committed: entry.assetDigest,
+    };
+}
+/** Restore a prior asset by SHA-256: atomically swap the committed pointer
+ *  to the prior entry. The prior entry MUST exist in the manifest (append-only
+ *  guarantees it was never overwritten). Returns null when the digest is not
+ *  found (defensive: append-only means it should always be findable). */
+export function rollbackTo(manifest, digest) {
+    const found = manifest.entries.find((e) => e.assetDigest === digest);
+    if (!found)
+        return null;
+    return {
+        entries: manifest.entries,
+        committed: found.assetDigest,
+    };
+}
+// ---------------------------------------------------------------------------
+// Pure decision rules.
+// ---------------------------------------------------------------------------
+/** Evaluate the promotion gate: promote only when all five heads pass AND the
+ *  new asset beats the committed asset on the held-out dev set. Otherwise
+ *  demote. No training data is ever the held-out set. */
+export function promoteDecision(fiveHeadsOk, heldOutBeat) {
+    return fiveHeadsOk && heldOutBeat ? "promoted" : "demoted";
+}
+/** Whether a rollback is needed: the current asset at position N regressed
+ *  relative to the asset at position N-1. True only when regression is
+ *  confirmed and a prior asset digest exists to restore. */
+export function rollbackNeeded(regressionConfirmed, priorAssetDigest) {
+    return regressionConfirmed && priorAssetDigest !== null;
+}

package/dist/vector-cortex/encoder/promotion.js

@@ -0,0 +1,58 @@
+/**
+ * vector-cortex/encoder/promotion.ts — ML5-E PromotionV1 ledger row type +
+ * append-only manifest helper + atomic digest-swap rollback.
+ *
+ * Pure-function discipline: zero I/O, no clock, no storage, no network
+ * (PREVENT-PI-004 / PREVENT-011). Every function is total over its inputs.
+ * The cron orchestrator (scripts/ml5/retrain-nightly.mjs) and the promotion
+ * gate (scripts/ml5/promotion-gate.mjs) consume these helpers; the acceptance
+ * aggregator (ml5e-acceptance.test.ts) validates them synthetically without a
+ * real training run.
+ *
+ * The promotion manifest is an APPEND-ONLY ledger: every new asset is a new
+ * entry, never an overwrite. Rollback restores a prior entry by SHA-256 via
+ * an atomic digest swap (flip the committed pointer to the prior entry's
+ * digest in one step) — no partial state is possible because the swap is a
+ * single value assignment.
+ */
+// ---------------------------------------------------------------------------
+// PromotionV1 — the ledger row recording one nightly training + promotion run.
+// ---------------------------------------------------------------------------
+/** Schema tag for the promotion ledger row. */
+export const PROMOTION_SCHEMA = "promotion-v1";
+/** Append a new asset entry to the manifest. Never mutates `entries`;
+ *  returns a new manifest with the entry appended and `committed` updated. */
+export function appendAsset(manifest, entry) {
+    return {
+        entries: [...manifest.entries, entry],
+        committed: entry.assetDigest,
+    };
+}
+/** Restore a prior asset by SHA-256: atomically swap the committed pointer
+ *  to the prior entry. The prior entry MUST exist in the manifest (append-only
+ *  guarantees it was never overwritten). Returns null when the digest is not
+ *  found (defensive: append-only means it should always be findable). */
+export function rollbackTo(manifest, digest) {
+    const found = manifest.entries.find((e) => e.assetDigest === digest);
+    if (!found)
+        return null;
+    return {
+        entries: manifest.entries,
+        committed: found.assetDigest,
+    };
+}
+// ---------------------------------------------------------------------------
+// Pure decision rules.
+// ---------------------------------------------------------------------------
+/** Evaluate the promotion gate: promote only when all five heads pass AND the
+ *  new asset beats the committed asset on the held-out dev set. Otherwise
+ *  demote. No training data is ever the held-out set. */
+export function promoteDecision(fiveHeadsOk, heldOutBeat) {
+    return fiveHeadsOk && heldOutBeat ? "promoted" : "demoted";
+}
+/** Whether a rollback is needed: the current asset at position N regressed
+ *  relative to the asset at position N-1. True only when regression is
+ *  confirmed and a prior asset digest exists to restore. */
+export function rollbackNeeded(regressionConfirmed, priorAssetDigest) {
+    return regressionConfirmed && priorAssetDigest !== null;
+}

package/extensions/dashboard-server/routes-rag-settings-vector-cortex.ts

@@ -240,5 +240,11 @@ export const VECTOR_CORTEX_SETTINGS: SettingGroup = {
 			"ML5-D dashboard 'Improve Cortex' surface: the ModelImprovementCard + POST /api/cortex/improve + GET /api/cortex/improve/status/:jobId. ON (default) = the card renders and Improve launches a local ML5-A training job. OFF = both improve endpoints return 404 and VectorCortexTab omits the card, byte-identical to ML5-C.",
 			true,
 		),
+		boolDirect(
+			"MEGACOMPACT_ML5_E",
+			"ML5-E Nightly Retraining Cron",
+			"ML5-E nightly retraining + feedback loop: the user's own post-redaction conversation turns become fresh training signal, the five heads are re-fit nightly via system cron, calibration is re-validated, and mode-A promotion is re-checked without human intervention. The cron is system-configured (crontab -e); the extension never installs or writes a crontab. Candidates are written to ~/.pi/mega-compact-encoder/candidates/ and promoted via the ML5-D Improve Cortex flow. ON (default) = the scripts may be invoked by the system cron. OFF = scripts are never invoked; byte-identical to ML5-D.",
+			true,
+		),
 	],
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-mega-compact",
-  "version": "0.20.40",
+  "version": "0.20.41",
   "description": "Layered, local, vector-backed context compressor for pi — supersede/collapse/cluster compaction with deduped inline recall.",
   "type": "module",
   "license": "BSD-3-Clause",

package/src/config/vector-cortex-ml5e.ts

@@ -0,0 +1,32 @@
+/**
+ * config/vector-cortex-ml5e.ts — ML5-E nightly retraining cron + feedback loop.
+ *
+ * Sibling extract mirroring vector-cortex-ml5a.ts / ml5b.ts / ml5c.ts / ml5d.ts,
+ * so vector-cortex.ts stays under its 300-line soft limit (soft-as-hard gate).
+ * vector-cortex.ts re-exports the ENUM below and root src/config.ts re-exports
+ * it, so no consumer import path changes.
+ *
+ * ML5-E turns one-shot training (ML5-D's Improve button) into a living loop:
+ * the user's own post-redaction conversation turns become fresh training signal,
+ * the five heads are re-fit nightly, calibration is re-validated, and mode-A
+ * promotion is re-checked without human intervention. The cron is system-
+ * configured (`crontab -e` on the operator device); the extension never installs
+ * or writes a crontab. The flag gates **invocation** only — the scripts
+ * (retrain-nightly.mjs, promotion-gate.mjs, promotion.ts) exist on disk
+ * regardless; `=0` means the runtime never invokes them and the dashboard's
+ * Improve Cortex flow is byte-identical to the ML5-D survivor.
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+
+import { sprintFlag } from "./vector-cortex-flag.js";
+
+/**
+ * ML5-E — nightly retraining cron + feedback loop. Default ON.
+ * `MEGACOMPACT_ML5_E=0` disables and is byte-identical to the ML5-D survivor:
+ * the nightly retraining scripts are never invoked by the runtime, the
+ * promotion gate is inert, and the dashboard's Improve Cortex flow is
+ * byte-identical to the ML5-D tab. The flag gates invocation only — the scripts
+ * exist on disk regardless.
+ */
+export const ML5E_ENABLED = (): boolean => sprintFlag("MEGACOMPACT_ML5_E");

package/src/config/vector-cortex.ts

@@ -11,9 +11,8 @@
 
 import { sprintFlag } from "./vector-cortex-flag.js";
 
-// VC0/VC1/VC2 foundation-phase flags extracted to vector-cortex-early.ts to keep
-// this file under the 300-line soft limit. Re-exported here so every existing
-// `from "./config/vector-cortex.js"` import keeps resolving unchanged.
+// VC0/VC1/VC2 foundation-phase flags in vector-cortex-early.ts; re-exported
+// so every existing `from "./config/vector-cortex.js"` import resolves unchanged.
 export {
   VC0A_ENABLED,
   VC0B_ENABLED,
@@ -269,9 +268,9 @@ export const VC8A_ENABLED = (): boolean => sprintFlag("MEGACOMPACT_VC8A");
  */
 export const VC8B_ENABLED = (): boolean => sprintFlag("MEGACOMPACT_VC8B");
 
-// VC8C (canary selection + Rust parity) extracted to vector-cortex-vc8c.ts; re-exported so existing imports keep resolving.
+// VC8C extracted to vector-cortex-vc8c.ts; re-exported so existing imports keep resolving.
 export { VC8C_ENABLED } from "./vector-cortex-vc8c.js";
-// Sibling extracts to stay under the 300-line soft limit.
+// Sibling extracts: stay under the 300-line soft limit.
 export { VC9A_ENABLED } from "./vector-cortex-vc9a.js";
 export { VC9B_ENABLED } from "./vector-cortex-vc9b.js";
 export { VC9C_ENABLED } from "./vector-cortex-vc9c.js";
@@ -281,6 +280,7 @@ export { ML5A_ENABLED } from "./vector-cortex-ml5a.js";
 export { ML5B_ENABLED } from "./vector-cortex-ml5b.js";
 export { ML5C_ENABLED } from "./vector-cortex-ml5c.js";
 export { ML5D_ENABLED } from "./vector-cortex-ml5d.js";
+export { ML5E_ENABLED } from "./vector-cortex-ml5e.js";
 
 // Breaker constants (TRIAD_RESILIENCE.md §breaker) extracted to vector-cortex-breakers.ts.
 export {

package/src/config.ts

@@ -187,6 +187,7 @@ export {
   ML5B_ENABLED,
   ML5C_ENABLED,
   ML5D_ENABLED,
+  ML5E_ENABLED,
   BREAKER_WINDOW_MS,
   BREAKER_MIN_ATTEMPTS,
   BREAKER_PERF_FAILURES,

package/src/vector-cortex/encoder/promotion.ts

@@ -0,0 +1,129 @@
+/**
+ * vector-cortex/encoder/promotion.ts — ML5-E PromotionV1 ledger row type +
+ * append-only manifest helper + atomic digest-swap rollback.
+ *
+ * Pure-function discipline: zero I/O, no clock, no storage, no network
+ * (PREVENT-PI-004 / PREVENT-011). Every function is total over its inputs.
+ * The cron orchestrator (scripts/ml5/retrain-nightly.mjs) and the promotion
+ * gate (scripts/ml5/promotion-gate.mjs) consume these helpers; the acceptance
+ * aggregator (ml5e-acceptance.test.ts) validates them synthetically without a
+ * real training run.
+ *
+ * The promotion manifest is an APPEND-ONLY ledger: every new asset is a new
+ * entry, never an overwrite. Rollback restores a prior entry by SHA-256 via
+ * an atomic digest swap (flip the committed pointer to the prior entry's
+ * digest in one step) — no partial state is possible because the swap is a
+ * single value assignment.
+ */
+
+// ---------------------------------------------------------------------------
+// PromotionV1 — the ledger row recording one nightly training + promotion run.
+// ---------------------------------------------------------------------------
+
+/** Schema tag for the promotion ledger row. */
+export const PROMOTION_SCHEMA = "promotion-v1" as const;
+
+/** Per-head calibration verdict: pass or fail. */
+export interface HeadVerdict {
+  readonly head: string;
+  readonly pass: boolean;
+}
+
+/** PromotionV1 — a single ledger row recording one training + gate run.
+ *  Digest-only: carries SHA-256 identifiers, never payload content. */
+export interface PromotionV1 {
+  readonly schema: typeof PROMOTION_SCHEMA;
+  /** ISO-8601 timestamp of the run. */
+  readonly ts: string;
+  /** SHA-256 of the corpus digest used for this training run. */
+  readonly corpusDigest: string;
+  /** SHA-256 of the newly trained asset manifest (null when no-op). */
+  readonly assetDigest: string | null;
+  /** SHA-256 of the previously committed asset (the incumbent). */
+  readonly priorAssetDigest: string | null;
+  /** Per-head calibration verdicts (all five heads). */
+  readonly headVerdicts: readonly HeadVerdict[];
+  /** True when all five heads pass their per-head thresholds. */
+  readonly fiveHeadsOk: boolean;
+  /** True when the new asset beats the incumbent on held-out dev set. */
+  readonly heldOutBeat: boolean;
+  /** The gate decision: promoted (eligible) or demoted (new asset rejected).
+   *  `noop` is defined by the spec but unused — the corpus-digest check in
+   *  retrain-nightly.mjs exits before any ledger append when there is nothing
+   *  to train on. */
+  readonly verdict: "promoted" | "demoted" | "noop";
+  /** Present only when verdict is "demoted": the demotion event name. */
+  readonly demotedEvent: "demoted_new_asset" | null;
+}
+
+// ---------------------------------------------------------------------------
+// Append-only manifest — every new asset is a NEW entry, never an overwrite.
+// ---------------------------------------------------------------------------
+
+/** A single entry in the append-only asset manifest. */
+export interface AssetManifestEntry {
+  readonly assetDigest: string;
+  readonly ts: string;
+  readonly source: string;
+  readonly verdict: string;
+}
+
+/** The append-only manifest: an ordered list of asset entries plus the
+ *  committed pointer (the digest of the currently active asset). */
+export interface AssetManifest {
+  readonly entries: readonly AssetManifestEntry[];
+  /** SHA-256 of the currently committed (active) asset. */
+  committed: string | null;
+}
+
+/** Append a new asset entry to the manifest. Never mutates `entries`;
+ *  returns a new manifest with the entry appended and `committed` updated. */
+export function appendAsset(
+  manifest: AssetManifest,
+  entry: AssetManifestEntry,
+): AssetManifest {
+  return {
+    entries: [...manifest.entries, entry],
+    committed: entry.assetDigest,
+  };
+}
+
+/** Restore a prior asset by SHA-256: atomically swap the committed pointer
+ *  to the prior entry. The prior entry MUST exist in the manifest (append-only
+ *  guarantees it was never overwritten). Returns null when the digest is not
+ *  found (defensive: append-only means it should always be findable). */
+export function rollbackTo(
+  manifest: AssetManifest,
+  digest: string,
+): AssetManifest | null {
+  const found = manifest.entries.find((e) => e.assetDigest === digest);
+  if (!found) return null;
+  return {
+    entries: manifest.entries,
+    committed: found.assetDigest,
+  };
+}
+
+// ---------------------------------------------------------------------------
+// Pure decision rules.
+// ---------------------------------------------------------------------------
+
+/** Evaluate the promotion gate: promote only when all five heads pass AND the
+ *  new asset beats the committed asset on the held-out dev set. Otherwise
+ *  demote. No training data is ever the held-out set. */
+export function promoteDecision(
+  fiveHeadsOk: boolean,
+  heldOutBeat: boolean,
+): "promoted" | "demoted" {
+  return fiveHeadsOk && heldOutBeat ? "promoted" : "demoted";
+}
+
+/** Whether a rollback is needed: the current asset at position N regressed
+ *  relative to the asset at position N-1. True only when regression is
+ *  confirmed and a prior asset digest exists to restore. */
+export function rollbackNeeded(
+  regressionConfirmed: boolean,
+  priorAssetDigest: string | null,
+): boolean {
+  return regressionConfirmed && priorAssetDigest !== null;
+}