pi-mega-compact 0.20.44 → 0.20.45

package/dist/config/vector-cortex-enc0c.js

@@ -0,0 +1,35 @@
+/**
+ * config/vector-cortex-enc0c.ts — ENC-0c five-head supervision transfer flag.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-enc0a.ts / enc0b.ts and
+ * the VC8C/VC9A-D/ML5A-E/DEDUP_ATTR siblings were. vector-cortex.ts re-exports
+ * the flag below and root src/config.ts re-exports it, so no consumer import
+ * path changes.
+ *
+ * ENC-0c trains the five real heads onto the frozen ENC-0b bge-small trunk via
+ * supervision transfer, and stages a qualified candidate under
+ * ~/.pi/mega-compact-encoder/candidates/ (only when the developer trains it —
+ * the extension never stages one by itself). When the flag is ON and a
+ * qualified candidate exists, `loadHeadCandidate` (encoder/heads.ts seam) serves
+ * the trained head weights; when the flag is OFF (MEGACOMPACT_ENC_0C=0) or no
+ * candidate is staged, the heads keep serving the ENC-0b survivor exactly —
+ * byte-identical, no weight change. The flag gates ONLY the candidate-load seam;
+ * the survivor path is untouched.
+ *
+ * The split is purely mechanical: ENC_0C_ENABLED follows ENC_0B_ENABLED in name,
+ * semantics, and default, and vector-cortex.ts re-exports it so every existing
+ * `from "./config/vector-cortex.js"` import keeps resolving unchanged.
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * ENC-0c — five-head supervision transfer on the frozen bge-small trunk.
+ * Default ON. `MEGACOMPACT_ENC_0C=0` disables and is byte-identical to the
+ * predecessor (ENC-0b): no head candidate is loaded and the heads keep serving
+ * the ENC-0b survivor defaults exactly as before. This flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS),
+ * mirroring ENC_0A and ENC_0B.
+ */
+export const ENC_0C_ENABLED = () => sprintFlag("MEGACOMPACT_ENC_0C");

package/dist/config/vector-cortex.js

@@ -251,5 +251,6 @@ export { ML5E_ENABLED } from "./vector-cortex-ml5e.js";
 export { DEDUP_ATTR_ENABLED } from "./vector-cortex-dedup-attr.js";
 export { ENC_0A_ENABLED } from "./vector-cortex-enc0a.js";
 export { ENC_0B_ENABLED } from "./vector-cortex-enc0b.js";
+export { ENC_0C_ENABLED } from "./vector-cortex-enc0c.js";
 // Breaker constants (TRIAD_RESILIENCE.md §breaker) extracted to vector-cortex-breakers.ts.
 export { BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./vector-cortex-breakers.js";

package/dist/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, ML5E_ENABLED, DEDUP_ATTR_ENABLED, ENC_0A_ENABLED, ENC_0B_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, ML5E_ENABLED, DEDUP_ATTR_ENABLED, ENC_0A_ENABLED, ENC_0B_ENABLED, ENC_0C_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/extensions/dashboard-server/routes-rag-settings-vector-cortex.js

@@ -60,5 +60,6 @@ export const VECTOR_CORTEX_SETTINGS = {
         boolDirect("MEGACOMPACT_DEDUP_ATTR", "Dedup Tier Attribution Rollup", "Dedup tier-attribution rollup: per-tier dedup catch shares (L0/L1/L2/new percent of dedup decisions) read from the local events.log dedup_audit stream (GET /api/dedup-tier-attribution). OFF = 404 + no cache file, byte-identical predecessor.", true),
         boolDirect("MEGACOMPACT_ENC_0A", "ENC-0a Encoder Backend Decision", "ENC-0a learned-encoder backend-decision lock: records the transformers.js/WASM vs onnxruntime-node choice, per-platform install matrix, opset-21 baseline and pinned digests in docs/vector-cortex/encoder-backend-decision.md. OFF = no decision record written / no resolver runs, mode B trigram byte-identical predecessor.", true),
         boolDirect("MEGACOMPACT_ENC_0B", "ENC-0b Real Trunk Fetch & Gated Path", "ENC-0b real ONNX trunk fetch + gated inference: replaces the LCG placeholder with the real bge-small int8 model through an ONNX InferenceSession (onnxruntime-web WASM). OFF = LCG placeholder serves byte-identical predecessor output, no ONNX session built.", true),
+        boolDirect("MEGACOMPACT_ENC_0C", "ENC-0c Five-Head Supervision Transfer", "ENC-0c five-head supervision transfer on the frozen bge-small trunk: when a developer-trained head candidate is staged under ~/.pi/mega-compact-encoder/candidates/, the five heads serve the trained weights. OFF = no candidate is loaded, the heads serve byte-identical ENC-0b survivor defaults.", true),
     ],
 };

package/dist/src/config/vector-cortex-enc0c.js

@@ -0,0 +1,35 @@
+/**
+ * config/vector-cortex-enc0c.ts — ENC-0c five-head supervision transfer flag.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-enc0a.ts / enc0b.ts and
+ * the VC8C/VC9A-D/ML5A-E/DEDUP_ATTR siblings were. vector-cortex.ts re-exports
+ * the flag below and root src/config.ts re-exports it, so no consumer import
+ * path changes.
+ *
+ * ENC-0c trains the five real heads onto the frozen ENC-0b bge-small trunk via
+ * supervision transfer, and stages a qualified candidate under
+ * ~/.pi/mega-compact-encoder/candidates/ (only when the developer trains it —
+ * the extension never stages one by itself). When the flag is ON and a
+ * qualified candidate exists, `loadHeadCandidate` (encoder/heads.ts seam) serves
+ * the trained head weights; when the flag is OFF (MEGACOMPACT_ENC_0C=0) or no
+ * candidate is staged, the heads keep serving the ENC-0b survivor exactly —
+ * byte-identical, no weight change. The flag gates ONLY the candidate-load seam;
+ * the survivor path is untouched.
+ *
+ * The split is purely mechanical: ENC_0C_ENABLED follows ENC_0B_ENABLED in name,
+ * semantics, and default, and vector-cortex.ts re-exports it so every existing
+ * `from "./config/vector-cortex.js"` import keeps resolving unchanged.
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+import { sprintFlag } from "./vector-cortex-flag.js";
+/**
+ * ENC-0c — five-head supervision transfer on the frozen bge-small trunk.
+ * Default ON. `MEGACOMPACT_ENC_0C=0` disables and is byte-identical to the
+ * predecessor (ENC-0b): no head candidate is loaded and the heads keep serving
+ * the ENC-0b survivor defaults exactly as before. This flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS),
+ * mirroring ENC_0A and ENC_0B.
+ */
+export const ENC_0C_ENABLED = () => sprintFlag("MEGACOMPACT_ENC_0C");

package/dist/src/config/vector-cortex.js

@@ -251,5 +251,6 @@ export { ML5E_ENABLED } from "./vector-cortex-ml5e.js";
 export { DEDUP_ATTR_ENABLED } from "./vector-cortex-dedup-attr.js";
 export { ENC_0A_ENABLED } from "./vector-cortex-enc0a.js";
 export { ENC_0B_ENABLED } from "./vector-cortex-enc0b.js";
+export { ENC_0C_ENABLED } from "./vector-cortex-enc0c.js";
 // Breaker constants (TRIAD_RESILIENCE.md §breaker) extracted to vector-cortex-breakers.ts.
 export { BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./vector-cortex-breakers.js";

package/dist/src/config.js

@@ -114,4 +114,4 @@ export const NEW_UI = () => ragEnabled("MEGACOMPACT_NEW_UI");
 // default ON, `=0`/`_DISABLED` off. Re-exported from src/config/vector-cortex.ts
 // so root consumers share one source of truth.
 // ---------------------------------------------------------------------------
-export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, ML5E_ENABLED, DEDUP_ATTR_ENABLED, ENC_0A_ENABLED, ENC_0B_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";
+export { VC0A_ENABLED, VC0B_ENABLED, VC1A_ENABLED, VC0C_ENABLED, VC1B_ENABLED, VC1C_ENABLED, VC2A_ENABLED, VC2B_ENABLED, VC2C_ENABLED, VC3A_ENABLED, VC3B_ENABLED, VC3C_ENABLED, VC4A_ENABLED, VC4B_ENABLED, VC4C_ENABLED, VC5A_ENABLED, VC5B_ENABLED, VC5C_ENABLED, VC6A_ENABLED, VC6B_ENABLED, VC6C_ENABLED, VC7A_ENABLED, VC7B_ENABLED, VC7C_ENABLED, VC8A_ENABLED, VC8B_ENABLED, VC8C_ENABLED, VC9A_ENABLED, VC9B_ENABLED, VC9C_ENABLED, VC9D_ENABLED, PCC_ENABLED, ML5A_ENABLED, ML5B_ENABLED, ML5C_ENABLED, ML5D_ENABLED, ML5E_ENABLED, DEDUP_ATTR_ENABLED, ENC_0A_ENABLED, ENC_0B_ENABLED, ENC_0C_ENABLED, BREAKER_WINDOW_MS, BREAKER_MIN_ATTEMPTS, BREAKER_PERF_FAILURES, BREAKER_PERF_FAILURE_RATE, BREAKER_CORRECTNESS_FAILURES, BREAKER_COOLDOWN_MS, BREAKER_PROBE_COUNT, BREAKER_RETRY_BASE_MS, BREAKER_RETRY_CAP_MS, BREAKER_RETRY_JITTER, BREAKER_HYSTERESIS_FAILURE_RATE, BREAKER_HYSTERESIS_BUDGET_P95_MS, BREAKER_MIN_HEALTHY_RESIDENCE_MS, } from "./config/vector-cortex.js";

package/dist/src/vector-cortex/encoder/heads-candidate.js

@@ -0,0 +1,127 @@
+/**
+ * encoder/heads-candidate.ts — ENC-0c head-candidate load seam (delegate impl).
+ *
+ * Loads/validates a `head-candidate-v1` five-head candidate staged under
+ * `~/.pi/mega-compact-encoder/candidates/<version>/` after training on the
+ * frozen ENC-0b bge-small trunk. Flag-off / absent / malformed / wrong dims /
+ * non-finite / digest / trunk mismatch each return null or {ok:false} — a bad
+ * candidate is NEVER force-loaded; the runtime keeps the ENC-0b survivor
+ * byte-identical. No `any` (PREVENT-011), local-only, structured logging.
+ */
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { ENC_0C_ENABLED } from "../../config/vector-cortex.js";
+import { ENCODER_HEAD_DIMS, ENCODER_HEAD_ORDER } from "./types.js";
+export const HEAD_CANDIDATE_SCHEMA = "head-candidate-v1";
+const MANIFEST_FILE = "manifest.json";
+export const HEAD_CANDIDATE_FAIL = {
+    INVALID: "ENC0C_CANDIDATE_INVALID",
+    TRUNK_MISMATCH: "ENC0C_TRUNK_MISMATCH",
+    DIM_MISMATCH: "ENC0C_DIM_MISMATCH",
+    NON_FINITE: "ENC0C_NON_FINITE",
+    DIGEST_MISMATCH: "ENC0C_DIGEST_MISMATCH",
+};
+function sha256(buf) { return createHash("sha256").update(buf).digest("hex"); }
+function finiteDim(values, dim) {
+    if (values.length !== dim)
+        return false;
+    for (const v of values)
+        if (!Number.isFinite(v))
+            return false;
+    return true;
+}
+function parseManifest(m) {
+    if (!m || m["schema"] !== HEAD_CANDIDATE_SCHEMA)
+        return null;
+    const version = typeof m["version"] === "string" ? m["version"] : "";
+    const trunkDigest = typeof m["trunkDigest"] === "string" ? m["trunkDigest"] : "";
+    if (!version || !trunkDigest || !Array.isArray(m["heads"]))
+        return null;
+    const heads = [];
+    for (const item of m["heads"]) {
+        const rec = item;
+        if (!rec || typeof rec !== "object")
+            return null;
+        const name = rec["name"];
+        if (typeof name !== "string" || !ENCODER_HEAD_ORDER.includes(name))
+            return null;
+        heads.push({
+            name: name,
+            dim: Number(rec["dim"] ?? 0),
+            sha256: typeof rec["sha256"] === "string" ? rec["sha256"] : "",
+            bytes: Number(rec["bytes"] ?? 0),
+        });
+    }
+    return { version, trunkDigest, heads };
+}
+/** All 5 dims match, weights finite, digests hold. */
+export function validateHeadCandidate(candidate) {
+    for (const h of ENCODER_HEAD_ORDER) {
+        const dim = candidate.dims[h];
+        if (dim !== ENCODER_HEAD_DIMS[h])
+            return { ok: false, code: HEAD_CANDIDATE_FAIL.DIM_MISMATCH };
+        const w = candidate.weights[h];
+        if (!w || !finiteDim(w, dim))
+            return { ok: false, code: HEAD_CANDIDATE_FAIL.NON_FINITE };
+        const buf = new Uint8Array(w.buffer, w.byteOffset, w.byteLength);
+        if (sha256(buf) !== candidate.digests[h])
+            return { ok: false, code: HEAD_CANDIDATE_FAIL.DIGEST_MISMATCH };
+    }
+    return { ok: true };
+}
+/** Load a candidate against the frozen trunk; null on any violation, never throws. */
+export function loadHeadCandidate(candidateDir, manifest) {
+    if (!ENC_0C_ENABLED())
+        return null;
+    let raw;
+    try {
+        raw = readFileSync(join(candidateDir, MANIFEST_FILE), "utf8");
+    }
+    catch {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    const m = parseManifest(parsed);
+    if (!m || m.trunkDigest !== manifest.onnx.sha256)
+        return null;
+    const weights = {};
+    const digests = {};
+    const dims = {};
+    for (const rec of m.heads) {
+        const want = rec.dim * 4;
+        if (!Number.isInteger(want) || want <= 0 || rec.dim !== ENCODER_HEAD_DIMS[rec.name])
+            return null;
+        let bytes;
+        try {
+            bytes = readFileSync(join(candidateDir, `${rec.name}.bin`));
+        }
+        catch {
+            return null;
+        }
+        const f = new Float32Array(bytes.buffer, bytes.byteOffset, rec.dim);
+        const d = sha256(bytes);
+        if (bytes.length !== want || d !== rec.sha256)
+            return null;
+        weights[rec.name] = f.slice();
+        digests[rec.name] = d;
+        dims[rec.name] = rec.dim;
+    }
+    for (const h of ENCODER_HEAD_ORDER) {
+        if (weights[h] === undefined || digests[h] === undefined || dims[h] === undefined)
+            return null;
+    }
+    const candidate = {
+        schema: HEAD_CANDIDATE_SCHEMA, version: m.version, trunkDigest: m.trunkDigest,
+        dims: dims,
+        weights: weights,
+        digests: digests,
+    };
+    return validateHeadCandidate(candidate).ok ? candidate : null;
+}

package/dist/src/vector-cortex/encoder/heads.js

@@ -198,3 +198,7 @@ export function projectHeadFromTrunk(head, trunk, table) {
     return { head, dim, values: l2Normalize(out) };
 }
 export { ENCODER_HEAD_ORDER, ENCODER_HEAD_DIMS, ENCODER_HEAD_LOSS_SUM, ENCODER_SEED, NOOP_VC2B_REPORTER };
+// ENC-0c five-head candidate seam (delegate-shell): the load/validate impl
+// lives in heads-candidate.ts; these re-exports keep the public import path
+// stable at heads.ts without growing this survivor file over the soft limit.
+export { HEAD_CANDIDATE_SCHEMA, HEAD_CANDIDATE_FAIL, loadHeadCandidate, validateHeadCandidate, } from "./heads-candidate.js";

package/dist/vector-cortex/encoder/heads-candidate.js

@@ -0,0 +1,127 @@
+/**
+ * encoder/heads-candidate.ts — ENC-0c head-candidate load seam (delegate impl).
+ *
+ * Loads/validates a `head-candidate-v1` five-head candidate staged under
+ * `~/.pi/mega-compact-encoder/candidates/<version>/` after training on the
+ * frozen ENC-0b bge-small trunk. Flag-off / absent / malformed / wrong dims /
+ * non-finite / digest / trunk mismatch each return null or {ok:false} — a bad
+ * candidate is NEVER force-loaded; the runtime keeps the ENC-0b survivor
+ * byte-identical. No `any` (PREVENT-011), local-only, structured logging.
+ */
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { ENC_0C_ENABLED } from "../../config/vector-cortex.js";
+import { ENCODER_HEAD_DIMS, ENCODER_HEAD_ORDER } from "./types.js";
+export const HEAD_CANDIDATE_SCHEMA = "head-candidate-v1";
+const MANIFEST_FILE = "manifest.json";
+export const HEAD_CANDIDATE_FAIL = {
+    INVALID: "ENC0C_CANDIDATE_INVALID",
+    TRUNK_MISMATCH: "ENC0C_TRUNK_MISMATCH",
+    DIM_MISMATCH: "ENC0C_DIM_MISMATCH",
+    NON_FINITE: "ENC0C_NON_FINITE",
+    DIGEST_MISMATCH: "ENC0C_DIGEST_MISMATCH",
+};
+function sha256(buf) { return createHash("sha256").update(buf).digest("hex"); }
+function finiteDim(values, dim) {
+    if (values.length !== dim)
+        return false;
+    for (const v of values)
+        if (!Number.isFinite(v))
+            return false;
+    return true;
+}
+function parseManifest(m) {
+    if (!m || m["schema"] !== HEAD_CANDIDATE_SCHEMA)
+        return null;
+    const version = typeof m["version"] === "string" ? m["version"] : "";
+    const trunkDigest = typeof m["trunkDigest"] === "string" ? m["trunkDigest"] : "";
+    if (!version || !trunkDigest || !Array.isArray(m["heads"]))
+        return null;
+    const heads = [];
+    for (const item of m["heads"]) {
+        const rec = item;
+        if (!rec || typeof rec !== "object")
+            return null;
+        const name = rec["name"];
+        if (typeof name !== "string" || !ENCODER_HEAD_ORDER.includes(name))
+            return null;
+        heads.push({
+            name: name,
+            dim: Number(rec["dim"] ?? 0),
+            sha256: typeof rec["sha256"] === "string" ? rec["sha256"] : "",
+            bytes: Number(rec["bytes"] ?? 0),
+        });
+    }
+    return { version, trunkDigest, heads };
+}
+/** All 5 dims match, weights finite, digests hold. */
+export function validateHeadCandidate(candidate) {
+    for (const h of ENCODER_HEAD_ORDER) {
+        const dim = candidate.dims[h];
+        if (dim !== ENCODER_HEAD_DIMS[h])
+            return { ok: false, code: HEAD_CANDIDATE_FAIL.DIM_MISMATCH };
+        const w = candidate.weights[h];
+        if (!w || !finiteDim(w, dim))
+            return { ok: false, code: HEAD_CANDIDATE_FAIL.NON_FINITE };
+        const buf = new Uint8Array(w.buffer, w.byteOffset, w.byteLength);
+        if (sha256(buf) !== candidate.digests[h])
+            return { ok: false, code: HEAD_CANDIDATE_FAIL.DIGEST_MISMATCH };
+    }
+    return { ok: true };
+}
+/** Load a candidate against the frozen trunk; null on any violation, never throws. */
+export function loadHeadCandidate(candidateDir, manifest) {
+    if (!ENC_0C_ENABLED())
+        return null;
+    let raw;
+    try {
+        raw = readFileSync(join(candidateDir, MANIFEST_FILE), "utf8");
+    }
+    catch {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    const m = parseManifest(parsed);
+    if (!m || m.trunkDigest !== manifest.onnx.sha256)
+        return null;
+    const weights = {};
+    const digests = {};
+    const dims = {};
+    for (const rec of m.heads) {
+        const want = rec.dim * 4;
+        if (!Number.isInteger(want) || want <= 0 || rec.dim !== ENCODER_HEAD_DIMS[rec.name])
+            return null;
+        let bytes;
+        try {
+            bytes = readFileSync(join(candidateDir, `${rec.name}.bin`));
+        }
+        catch {
+            return null;
+        }
+        const f = new Float32Array(bytes.buffer, bytes.byteOffset, rec.dim);
+        const d = sha256(bytes);
+        if (bytes.length !== want || d !== rec.sha256)
+            return null;
+        weights[rec.name] = f.slice();
+        digests[rec.name] = d;
+        dims[rec.name] = rec.dim;
+    }
+    for (const h of ENCODER_HEAD_ORDER) {
+        if (weights[h] === undefined || digests[h] === undefined || dims[h] === undefined)
+            return null;
+    }
+    const candidate = {
+        schema: HEAD_CANDIDATE_SCHEMA, version: m.version, trunkDigest: m.trunkDigest,
+        dims: dims,
+        weights: weights,
+        digests: digests,
+    };
+    return validateHeadCandidate(candidate).ok ? candidate : null;
+}

package/dist/vector-cortex/encoder/heads.js

@@ -198,3 +198,7 @@ export function projectHeadFromTrunk(head, trunk, table) {
     return { head, dim, values: l2Normalize(out) };
 }
 export { ENCODER_HEAD_ORDER, ENCODER_HEAD_DIMS, ENCODER_HEAD_LOSS_SUM, ENCODER_SEED, NOOP_VC2B_REPORTER };
+// ENC-0c five-head candidate seam (delegate-shell): the load/validate impl
+// lives in heads-candidate.ts; these re-exports keep the public import path
+// stable at heads.ts without growing this survivor file over the soft limit.
+export { HEAD_CANDIDATE_SCHEMA, HEAD_CANDIDATE_FAIL, loadHeadCandidate, validateHeadCandidate, } from "./heads-candidate.js";

package/extensions/dashboard-server/routes-rag-settings-vector-cortex.ts

@@ -264,5 +264,11 @@ export const VECTOR_CORTEX_SETTINGS: SettingGroup = {
 			"ENC-0b real ONNX trunk fetch + gated inference: replaces the LCG placeholder with the real bge-small int8 model through an ONNX InferenceSession (onnxruntime-web WASM). OFF = LCG placeholder serves byte-identical predecessor output, no ONNX session built.",
 			true,
 		),
+		boolDirect(
+			"MEGACOMPACT_ENC_0C",
+			"ENC-0c Five-Head Supervision Transfer",
+			"ENC-0c five-head supervision transfer on the frozen bge-small trunk: when a developer-trained head candidate is staged under ~/.pi/mega-compact-encoder/candidates/, the five heads serve the trained weights. OFF = no candidate is loaded, the heads serve byte-identical ENC-0b survivor defaults.",
+			true,
+		),
 	],
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-mega-compact",
-  "version": "0.20.44",
+  "version": "0.20.45",
   "description": "Layered, local, vector-backed context compressor for pi — supersede/collapse/cluster compaction with deduped inline recall.",
   "type": "module",
   "license": "BSD-3-Clause",

package/src/config/vector-cortex-enc0c.ts

@@ -0,0 +1,37 @@
+/**
+ * config/vector-cortex-enc0c.ts — ENC-0c five-head supervision transfer flag.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-enc0a.ts / enc0b.ts and
+ * the VC8C/VC9A-D/ML5A-E/DEDUP_ATTR siblings were. vector-cortex.ts re-exports
+ * the flag below and root src/config.ts re-exports it, so no consumer import
+ * path changes.
+ *
+ * ENC-0c trains the five real heads onto the frozen ENC-0b bge-small trunk via
+ * supervision transfer, and stages a qualified candidate under
+ * ~/.pi/mega-compact-encoder/candidates/ (only when the developer trains it —
+ * the extension never stages one by itself). When the flag is ON and a
+ * qualified candidate exists, `loadHeadCandidate` (encoder/heads.ts seam) serves
+ * the trained head weights; when the flag is OFF (MEGACOMPACT_ENC_0C=0) or no
+ * candidate is staged, the heads keep serving the ENC-0b survivor exactly —
+ * byte-identical, no weight change. The flag gates ONLY the candidate-load seam;
+ * the survivor path is untouched.
+ *
+ * The split is purely mechanical: ENC_0C_ENABLED follows ENC_0B_ENABLED in name,
+ * semantics, and default, and vector-cortex.ts re-exports it so every existing
+ * `from "./config/vector-cortex.js"` import keeps resolving unchanged.
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+
+import { sprintFlag } from "./vector-cortex-flag.js";
+
+/**
+ * ENC-0c — five-head supervision transfer on the frozen bge-small trunk.
+ * Default ON. `MEGACOMPACT_ENC_0C=0` disables and is byte-identical to the
+ * predecessor (ENC-0b): no head candidate is loaded and the heads keep serving
+ * the ENC-0b survivor defaults exactly as before. This flag MUST also be a
+ * dashboard SETTINGS toggle (visible in config UI, never in EXCLUDED_SETTINGS),
+ * mirroring ENC_0A and ENC_0B.
+ */
+export const ENC_0C_ENABLED = (): boolean => sprintFlag("MEGACOMPACT_ENC_0C");

package/src/config/vector-cortex.ts

@@ -281,7 +281,7 @@ export { ML5E_ENABLED } from "./vector-cortex-ml5e.js";
 export { DEDUP_ATTR_ENABLED } from "./vector-cortex-dedup-attr.js";
 export { ENC_0A_ENABLED } from "./vector-cortex-enc0a.js";
 export { ENC_0B_ENABLED } from "./vector-cortex-enc0b.js";
-
+export { ENC_0C_ENABLED } from "./vector-cortex-enc0c.js";
 // Breaker constants (TRIAD_RESILIENCE.md §breaker) extracted to vector-cortex-breakers.ts.
 export {
   BREAKER_WINDOW_MS,

package/src/config.ts

@@ -191,6 +191,7 @@ export {
   DEDUP_ATTR_ENABLED,
   ENC_0A_ENABLED,
   ENC_0B_ENABLED,
+  ENC_0C_ENABLED,
   BREAKER_WINDOW_MS,
   BREAKER_MIN_ATTEMPTS,
   BREAKER_PERF_FAILURES,

package/src/vector-cortex/encoder/heads-candidate.ts

@@ -0,0 +1,148 @@
+/**
+ * encoder/heads-candidate.ts — ENC-0c head-candidate load seam (delegate impl).
+ *
+ * Loads/validates a `head-candidate-v1` five-head candidate staged under
+ * `~/.pi/mega-compact-encoder/candidates/<version>/` after training on the
+ * frozen ENC-0b bge-small trunk. Flag-off / absent / malformed / wrong dims /
+ * non-finite / digest / trunk mismatch each return null or {ok:false} — a bad
+ * candidate is NEVER force-loaded; the runtime keeps the ENC-0b survivor
+ * byte-identical. No `any` (PREVENT-011), local-only, structured logging.
+ */
+
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
+import { ENC_0C_ENABLED } from "../../config/vector-cortex.js";
+import { ENCODER_HEAD_DIMS, ENCODER_HEAD_ORDER } from "./types.js";
+import type { EncoderHeadName, ModelManifestV1 } from "./types.js";
+
+export const HEAD_CANDIDATE_SCHEMA = "head-candidate-v1" as const;
+const MANIFEST_FILE = "manifest.json";
+
+export interface HeadCandidateHeadDigest {
+  readonly name: EncoderHeadName;
+  readonly dim: number;
+  readonly sha256: string;
+  readonly bytes: number;
+}
+
+/** On-disk candidate contract; `trunkDigest` pins the frozen trunk. */
+export interface HeadCandidateManifest {
+  readonly schema: typeof HEAD_CANDIDATE_SCHEMA;
+  readonly version: string;
+  readonly trunkDigest: string;
+  readonly heads: readonly HeadCandidateHeadDigest[];
+  readonly totalBytes: number;
+}
+
+/** Loaded candidate: parsed Float32Array weights per head. */
+export interface HeadCandidate {
+  readonly schema: typeof HEAD_CANDIDATE_SCHEMA;
+  readonly version: string;
+  readonly trunkDigest: string;
+  readonly dims: Readonly<Record<EncoderHeadName, number>>;
+  readonly weights: Readonly<Record<EncoderHeadName, Float32Array>>;
+  readonly digests: Readonly<Record<EncoderHeadName, string>>;
+}
+
+export type HeadCandidateValidation = { readonly ok: true } | { readonly ok: false; readonly code: string };
+
+export const HEAD_CANDIDATE_FAIL = {
+  INVALID: "ENC0C_CANDIDATE_INVALID",
+  TRUNK_MISMATCH: "ENC0C_TRUNK_MISMATCH",
+  DIM_MISMATCH: "ENC0C_DIM_MISMATCH",
+  NON_FINITE: "ENC0C_NON_FINITE",
+  DIGEST_MISMATCH: "ENC0C_DIGEST_MISMATCH",
+} as const;
+
+function sha256(buf: Uint8Array): string { return createHash("sha256").update(buf).digest("hex"); }
+function finiteDim(values: Float32Array, dim: number): boolean {
+  if (values.length !== dim) return false;
+  for (const v of values) if (!Number.isFinite(v)) return false;
+  return true;
+}
+
+/** Parse the candidate manifest object, or null if invalid. */
+type ParsedManifest = { version: string; trunkDigest: string; heads: HeadCandidateHeadDigest[] };
+function parseManifest(m: Record<string, unknown> | null): ParsedManifest | null {
+  if (!m || m["schema"] !== HEAD_CANDIDATE_SCHEMA) return null;
+  const version = typeof m["version"] === "string" ? m["version"] : "";
+  const trunkDigest = typeof m["trunkDigest"] === "string" ? m["trunkDigest"] : "";
+  if (!version || !trunkDigest || !Array.isArray(m["heads"])) return null;
+  const heads: HeadCandidateHeadDigest[] = [];
+  for (const item of m["heads"] as unknown[]) {
+    const rec = item as Record<string, unknown> | null;
+    if (!rec || typeof rec !== "object") return null;
+    const name = rec["name"];
+    if (typeof name !== "string" || !ENCODER_HEAD_ORDER.includes(name as EncoderHeadName)) return null;
+    heads.push({
+      name: name as EncoderHeadName,
+      dim: Number(rec["dim"] ?? 0),
+      sha256: typeof rec["sha256"] === "string" ? rec["sha256"] : "",
+      bytes: Number(rec["bytes"] ?? 0),
+    });
+  }
+  return { version, trunkDigest, heads };
+}
+
+/** All 5 dims match, weights finite, digests hold. */
+export function validateHeadCandidate(candidate: HeadCandidate): HeadCandidateValidation {
+  for (const h of ENCODER_HEAD_ORDER) {
+    const dim = candidate.dims[h];
+    if (dim !== ENCODER_HEAD_DIMS[h]) return { ok: false, code: HEAD_CANDIDATE_FAIL.DIM_MISMATCH };
+    const w = candidate.weights[h];
+    if (!w || !finiteDim(w, dim)) return { ok: false, code: HEAD_CANDIDATE_FAIL.NON_FINITE };
+    const buf = new Uint8Array(w.buffer, w.byteOffset, w.byteLength);
+    if (sha256(buf) !== candidate.digests[h]) return { ok: false, code: HEAD_CANDIDATE_FAIL.DIGEST_MISMATCH };
+  }
+  return { ok: true };
+}
+
+/** Load a candidate against the frozen trunk; null on any violation, never throws. */
+export function loadHeadCandidate(candidateDir: string, manifest: ModelManifestV1): HeadCandidate | null {
+  if (!ENC_0C_ENABLED()) return null;
+  let raw: string;
+  try {
+    raw = readFileSync(join(candidateDir, MANIFEST_FILE), "utf8");
+  } catch {
+    return null;
+  }
+  let parsed: unknown;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  const m = parseManifest(parsed as Record<string, unknown> | null);
+  if (!m || m.trunkDigest !== manifest.onnx.sha256) return null;
+  const weights: Partial<Record<EncoderHeadName, Float32Array>> = {};
+  const digests: Partial<Record<EncoderHeadName, string>> = {};
+  const dims: Partial<Record<EncoderHeadName, number>> = {};
+  for (const rec of m.heads) {
+    const want = rec.dim * 4;
+    if (!Number.isInteger(want) || want <= 0 || rec.dim !== ENCODER_HEAD_DIMS[rec.name]) return null;
+    let bytes: Buffer;
+    try {
+      bytes = readFileSync(join(candidateDir, `${rec.name}.bin`));
+    } catch {
+      return null;
+    }
+    const f = new Float32Array(bytes.buffer, bytes.byteOffset, rec.dim);
+    const d = sha256(bytes);
+    if (bytes.length !== want || d !== rec.sha256) return null;
+    weights[rec.name] = f.slice();
+    digests[rec.name] = d;
+    dims[rec.name] = rec.dim;
+  }
+  for (const h of ENCODER_HEAD_ORDER) {
+    if (weights[h] === undefined || digests[h] === undefined || dims[h] === undefined) return null;
+  }
+  const candidate: HeadCandidate = {
+    schema: HEAD_CANDIDATE_SCHEMA, version: m.version, trunkDigest: m.trunkDigest,
+    dims: dims as Record<EncoderHeadName, number>,
+    weights: weights as Record<EncoderHeadName, Float32Array>,
+    digests: digests as Record<EncoderHeadName, string>,
+  };
+  return validateHeadCandidate(candidate).ok ? candidate : null;
+}

package/src/vector-cortex/encoder/heads.ts

@@ -246,3 +246,17 @@ export function projectHeadFromTrunk(
 }
 
 export { ENCODER_HEAD_ORDER, ENCODER_HEAD_DIMS, ENCODER_HEAD_LOSS_SUM, ENCODER_SEED, NOOP_VC2B_REPORTER };
+
+// ENC-0c five-head candidate seam (delegate-shell): the load/validate impl
+// lives in heads-candidate.ts; these re-exports keep the public import path
+// stable at heads.ts without growing this survivor file over the soft limit.
+export {
+  HEAD_CANDIDATE_SCHEMA,
+  HEAD_CANDIDATE_FAIL,
+  loadHeadCandidate,
+  validateHeadCandidate,
+  type HeadCandidate,
+  type HeadCandidateManifest,
+  type HeadCandidateHeadDigest,
+  type HeadCandidateValidation,
+} from "./heads-candidate.js";