pi-mega-compact 0.20.48 → 0.20.49

package/extensions/dashboard-server/setup-cortex-actions.ts

@@ -36,6 +36,11 @@ import {
   verifyEncoderAsset,
   detectPlatform,
 } from "../../src/vector-cortex/encoder/asset.js";
+import { ENC_0G_ENABLED, ENC_0F_ENABLED } from "../../src/config.js";
+import {
+  readQualificationRecord,
+  encoderStateDir,
+} from "./qualification-record.js";
 
 /** Cap applied to every log tail served by the action-log route. */
 export const ACTION_LOG_TAIL_BYTES = 8192;
@@ -174,23 +179,37 @@ function runVerifyAsset(stateDir: string): SetupCortexActionResult {
   };
 }
 
+/**
+ * The ENC-0g honesty suffix for the verify-asset summary line: when both gates
+ * are ON, surface the QualificationV1 record verdict so the action log is honest
+ * alongside the (possibly demoted) status card. Returns "" byte-identical when
+ * ENC_0G is off. Bounded + redacted (verdict + reasons only).
+ */
+function qualificationRecordSuffix(): string {
+  if (!ENC_0G_ENABLED() || !ENC_0F_ENABLED()) return "";
+  const record = readQualificationRecord(encoderStateDir());
+  if (record === null) return " record_verdict=unavailable";
+  return ` record_verdict=${record.verdict} record_reasons=${record.reasons.join(",")}`;
+}
+
 /** Compute the redacted verify-asset summary lines (digests + codes only). */
 function buildVerifySummary(): string {
+  const suffix = qualificationRecordSuffix();
   const dir = encoderAssetDir();
   if (dir === null) {
-    return "mode=C verdict=unavailable reason=asset_missing\n";
+    return `mode=C verdict=unavailable reason=asset_missing${suffix}\n`;
   }
   const manifest = readEncoderManifest(dir);
   if (manifest === null) {
-    return "mode=B verdict=demoted reason=ENC_MANIFEST_INVALID\n";
+    return `mode=B verdict=demoted reason=ENC_MANIFEST_INVALID${suffix}\n`;
   }
   const platform = detectPlatform();
   const verify = verifyEncoderAsset(dir, manifest, platform);
   if (verify.ok) {
     const prefix = verify.onnxDigest.slice(0, 12);
-    return `mode=A verdict=qualified onnx_digest_prefix=${prefix} embedded_bytes=${verify.embeddedBytes}\n`;
+    return `mode=A verdict=qualified onnx_digest_prefix=${prefix} embedded_bytes=${verify.embeddedBytes}${suffix}\n`;
   }
-  return `mode=B verdict=demoted reason=${verify.code}\n`;
+  return `mode=B verdict=demoted reason=${verify.code}${suffix}\n`;
 }
 
 /** Walk up to the committed encoder-v1 asset dir (mirrors routes-setup-cortex.ts). */

package/extensions/dashboard-server/setup-cortex-blockers.ts

@@ -1,99 +1,5 @@
 /**
- * dashboard-server/setup-cortex-blockers.ts — canonical blocker manifest for the
- * dashboard Setup Cortex status read path (VC9A).
- *
- * The hard-gate items enumerated in docs/vector-cortex/vc2-model-prep.md §6
- * (per the 2026-08-05 research update: the opset-14→17 re-export blocker is
- * REMOVED because onnx-community exports are now opset 21). This module is the
- * SINGLE canonical source of those blockers — the route file
- * (routes-setup-cortex.ts) carries NO string literals for them; it reads this
- * static manifest so the UI rows and the spec stay in one place.
- *
- * Reader-only, static: zero network, no writes (PREVENT-PI-004), no `any`
- * (PREVENT-011).
+ * dashboard-server/setup-cortex-blockers.ts — thin shell re-exporting the
+ * canonical Setup Cortex blocker compute from src (single source of truth).
  */
-
-/** The open hard-gate items VC9A surfaces (nothing is closed in-workstream). */
-export interface SetupCortexBlockerV1 {
-  /** Stable machine id (e.g. HG-1) the client can key rows on. */
-  readonly id: string;
-  /** Human title shown on the blockers card. */
-  readonly title: string;
-  /** Severity: blocker | high | medium. */
-  readonly severity: "blocker" | "high" | "medium";
-  /** Lifecycle state — all OPEN (hard gates are never silently closed). */
-  readonly status: "open";
-  /** Optional candidate resolution surfaced for the controller / user. */
-  readonly resolution?: string;
-}
-
-/**
- * The four blockers VC9A reports. Enumerates the vc2-model-prep §6 items that
- * remain per the 2026-08-05 research. The opset re-export blocker (formerly
- * §6 #2) is NOT listed: onnx-community exports are opset 21, so it is removed.
- */
-export const SETUP_CORTEX_BLOCKERS: readonly SetupCortexBlockerV1[] = [
-  {
-    id: "HG-1",
-    title: "Five projection heads do not exist",
-    severity: "blocker",
-    status: "open",
-    resolution:
-      "Supervision transfer onto a frozen bge-small-en-v1.5 trunk (contradiction distilled from cross-encoder/nli-deberta-v3-small; dependency NLI-assisted; cache-stability deterministic; payload-routing small MLP) — VC2B training + export.",
-  },
-  {
-    id: "HG-3",
-    title: "onnxruntime-node install exceeds the 80 MiB asset budget",
-    severity: "blocker",
-    status: "open",
-    resolution:
-      "onnxruntime-node bundles ~258 MiB across all platforms. Candidate: transformers.js v4.2.0 (9.5 MiB shell, pure-Node via onnxruntime-web WASM) measured against budget + p95 gate before committing.",
-  },
-  {
-    id: "HG-4",
-    title: "No darwin-x64 binary in onnxruntime-node",
-    severity: "high",
-    status: "open",
-    resolution:
-      "Intel-Mac mode-A users demote to the WASM path (if HG-3 resolves that way) or mode B. " +
-      "darwin-x64: no native binary upstream (arm64-only); mode-B WASM per HG-4.",
-  },
-  {
-    id: "HG-5",
-    title: "RSS margin at 512 tokens is ~0.5%",
-    severity: "medium",
-    status: "open",
-    resolution:
-      "149.2 MiB vs 150 MiB cap with run-to-run variance 119-149 MiB; considers capping mode A at 384 tokens or using the marginal-footprint accounting runtime.ts already implements.",
-  },
-];
-
-/** Look up one blocker by id; undefined when unknown (defensive). */
-export function setupCortexBlocker(id: string): SetupCortexBlockerV1 | undefined {
-  return SETUP_CORTEX_BLOCKERS.find((b) => b.id === id);
-}
-
-// ─── VC9B action gating ─────────────────────────────────────────────────────
-
-/** The VC9B action kinds the drivers know how to run. */
-export type SetupCortexActionKind = "fetch-model" | "bench" | "verify-asset";
-
-/**
- * The open hard-gate ids that BLOCK a given action. fetch-model and bench are
- * gated by HG-1 (five-head training open) and HG-3 (install budget open) per the
- * VC9 workstream plan; verify-asset is a pure re-read of committed assets and is
- * NOT gated. When a gated action is requested, the route returns
- * action_blocked_by_open_item with these ids and does NOT spawn. The ids are
- * always drawn from SETUP_CORTEX_BLOCKERS (each exists — verified by test).
- */
-export function setupCortexActionBlockers(
-  action: SetupCortexActionKind,
-): readonly string[] {
-  switch (action) {
-    case "fetch-model":
-    case "bench":
-      return ["HG-1", "HG-3"];
-    case "verify-asset":
-      return [];
-  }
-}
+export * from "../../src/vector-cortex/setup-cortex-blockers-compute.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-mega-compact",
-  "version": "0.20.48",
+  "version": "0.20.49",
   "description": "Layered, local, vector-backed context compressor for pi — supersede/collapse/cluster compaction with deduped inline recall.",
   "type": "module",
   "license": "BSD-3-Clause",

package/src/config/vector-cortex-enc0g.ts

@@ -0,0 +1,39 @@
+/**
+ * config/vector-cortex-enc0g.ts — ENC-0g Setup Cortex status route honest state.
+ *
+ * Extracted from vector-cortex.ts so that file stays under the 300-line soft
+ * limit (soft-as-hard gate), exactly as vector-cortex-enc0a.ts .. enc0f.ts and
+ * the VC8C/VC9A-D/ML5A-E/DEDUP_ATTR siblings were. vector-cortex.ts re-exports
+ * the flag below and root src/config.ts re-exports it, so no consumer import
+ * path changes.
+ *
+ * ENC-0g makes the Setup Cortex status route honest: the status route reads the
+ * latest ENC-0f `QualificationV1` record (when ENC_0F is ON and a record
+ * exists) and lets its verdict override the structural verifyEncoderAsset
+ * result for the `qualification` field; the blocker list becomes a pure
+ * computed function over (platform, qualification record, manifest head-count)
+ * with corrected HG statuses/wording; and VC9B action gating is re-derived from
+ * the live computed blockers instead of the stale static manifest.
+ *
+ * `MEGACOMPACT_ENC_0G=0` disables: the status route derives its `qualification`
+ * verdict from `verifyEncoderAsset(...).ok` alone, the blocker list is the
+ * static `SETUP_CORTEX_BLOCKERS` array exactly as ENC-0f-era, and action gating
+ * reads the static table as today — byte-identical to the predecessor. The flag
+ * MUST also be a dashboard SETTINGS toggle (visible in config UI, never in
+ * EXCLUDED_SETTINGS).
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ */
+
+import { sprintFlag } from "./vector-cortex-flag.js";
+
+/**
+ * ENC-0g — Setup Cortex status route honest state (verdict override + live
+ * blockers + re-derived gating). Default ON. `MEGACOMPACT_ENC_0G=0` disables
+ * and is byte-identical to the predecessor (ENC-0f): verdict from
+ * `verifyEncoderAsset` alone, static `SETUP_CORTEX_BLOCKERS`, static
+ * `setupCortexActionBlockers`. This flag MUST also be a dashboard SETTINGS
+ * toggle (visible in config UI, never in EXCLUDED_SETTINGS), mirroring
+ * ENC_0A/ENC_0B/ENC_0C/ENC_0D/ENC_0E/ENC_0F.
+ */
+export const ENC_0G_ENABLED = (): boolean => sprintFlag("MEGACOMPACT_ENC_0G");

package/src/config/vector-cortex.ts

@@ -61,6 +61,7 @@ export { ENC_0C_ENABLED } from "./vector-cortex-enc0c.js";
 export { ENC_0D_ENABLED } from "./vector-cortex-enc0d.js";
 export { ENC_0E_ENABLED } from "./vector-cortex-enc0e.js";
 export { ENC_0F_ENABLED } from "./vector-cortex-enc0f.js";
+export { ENC_0G_ENABLED } from "./vector-cortex-enc0g.js";
 // Breaker constants (TRIAD_RESILIENCE.md §breaker) extracted to vector-cortex-breakers.ts.
 export {
   BREAKER_WINDOW_MS,

package/src/config.ts

@@ -195,6 +195,7 @@ export {
   ENC_0D_ENABLED,
   ENC_0E_ENABLED,
   ENC_0F_ENABLED,
+  ENC_0G_ENABLED,
   BREAKER_WINDOW_MS,
   BREAKER_MIN_ATTEMPTS,
   BREAKER_PERF_FAILURES,

package/src/vector-cortex/setup-cortex-blockers-compute.ts

@@ -0,0 +1,216 @@
+/**
+ * src/vector-cortex/setup-cortex-blockers-compute.ts — canonical blocker
+ * manifest + pure computed blocker derivation for the Setup Cortex status
+ * read path (VC9A/ENC-0g).
+ *
+ * The hard-gate items enumerated in docs/vector-cortex/vc2-model-prep.md §6
+ * (per the 2026-08-05 research update: the opset-14→17 re-export blocker is
+ * REMOVED because onnx-community exports are now opset 21). This module is the
+ * SINGLE canonical source of those blockers — the route file
+ * (routes-setup-cortex.ts) carries NO string literals for them; it reads this
+ * manifest so the UI rows and the spec stay in one place.
+ *
+ * ENC-0g: `SETUP_CORTEX_BLOCKERS` remains the canonical BASE data (authored
+ * all-open, byte-identical to ENC-0f-era for flag-off). `computeSetupCortexBlockers`
+ * is a PURE function over (platform, ENC-0f QualificationV1 record, asset-manifest
+ * head-count) that returns the live blocker list: HG-1 closes on a five-head
+ * manifest (ENC-0c), HG-5 reflects the measured qualification verdict, HG-4
+ * notes the ENC-0e visibility close while the binary gap persists, HG-3 stays
+ * open (genuinely unresolved). `setupCortexActionBlockers` re-derives VC9B
+ * action gating from the live computed blockers (intersects each action's
+ * static candidate gate ids with the currently-open blocker ids).
+ *
+ * Reader-only, pure computation: zero network, no writes (PREVENT-PI-004), no
+ * `any` (PREVENT-011). Thresholds come from src/vector-cortex/encoder/types.js
+ * (ENCODER_HEAD_ORDER / ENCODER_LATENCY_P95_MS / ENCODER_RSS_BUDGET_BYTES) —
+ * never magic numbers in the computed path.
+ */
+
+import type { QualificationV1 } from "./encoder/qualify.js";
+import {
+  ENCODER_HEAD_ORDER,
+  ENCODER_LATENCY_P95_MS,
+  ENCODER_RSS_BUDGET_BYTES,
+} from "./encoder/types.js";
+
+const MIB = 1024 * 1024;
+
+/**
+ * Marker threshold-failure emitted by the status route when NO QualificationV1
+ * record exists on the device (or it is missing / unreadable / corrupt) — the
+ * route falls back to the verify-only verdict and includes this marker, never a
+ * fabricated pass and never a bare silent fallback. SINGLE source: the status
+ * route references this const, never a re-literal (no-scattered-literal scan).
+ */
+export const QUALIFICATION_RECORD_UNAVAILABLE = "qualification_record_unavailable";
+
+/** Lifecycle of a hard-gate item surfaced on the blockers card. */
+export type SetupCortexBlockerStatusV1 = "open" | "closed" | "superseded";
+
+/**
+ * A hard-gate item VC9A surfaces. `status` is `"open"` by default (a hard gate
+ * is never silently closed); a computed blocker may mark it `"closed"` (a
+ * measured/gated close) or `"superseded"` (an open question, but no live
+ * measurement exists on this device). The client renders `status` as a row
+ * label (no exhaustive switch), so widening is renderer-safe.
+ */
+export interface SetupCortexBlockerV1 {
+  /** Stable machine id (e.g. HG-1) the client can key rows on. */
+  readonly id: string;
+  /** Human title shown on the blockers card. */
+  readonly title: string;
+  /** Severity: blocker | high | medium. */
+  readonly severity: "blocker" | "high" | "medium";
+  /** Lifecycle state — authored OPEN (ENC-0f-era base), computed from live state. */
+  readonly status: SetupCortexBlockerStatusV1;
+  /** Optional candidate resolution surfaced for the controller / user. */
+  readonly resolution?: string;
+}
+
+/**
+ * The four blockers VC9A reports. Enumerates the vc2-model-prep §6 items that
+ * remain per the 2026-08-05 research. The opset re-export blocker (formerly
+ * §6 #2) is NOT listed: onnx-community exports are opset 21, so it is removed.
+ * This is the canonical BASE (all `status:"open"`); `computeSetupCortexBlockers`
+ * derives the live list from it. Flag-off consumes this array verbatim.
+ */
+export const SETUP_CORTEX_BLOCKERS: readonly SetupCortexBlockerV1[] = [
+  {
+    id: "HG-1",
+    title: "Five projection heads do not exist",
+    severity: "blocker",
+    status: "open",
+    resolution:
+      "Supervision transfer onto a frozen bge-small-en-v1.5 trunk (contradiction distilled from cross-encoder/nli-deberta-v3-small; dependency NLI-assisted; cache-stability deterministic; payload-routing small MLP) — VC2B training + export.",
+  },
+  {
+    id: "HG-3",
+    title: "onnxruntime-node install exceeds the 80 MiB asset budget",
+    severity: "blocker",
+    status: "open",
+    resolution:
+      "onnxruntime-node bundles ~258 MiB across all platforms. Candidate: transformers.js v4.2.0 (9.5 MiB shell, pure-Node via onnxruntime-web WASM) measured against budget + p95 gate before committing.",
+  },
+  {
+    id: "HG-4",
+    title: "No darwin-x64 binary in onnxruntime-node",
+    severity: "high",
+    status: "open",
+    resolution:
+      "Intel-Mac mode-A users demote to the WASM path (if HG-3 resolves that way) or mode B. " +
+      "darwin-x64: no native binary upstream (arm64-only); mode-B WASM per HG-4.",
+  },
+  {
+    id: "HG-5",
+    title: "RSS margin at 512 tokens is ~0.5%",
+    severity: "medium",
+    status: "open",
+    resolution:
+      "149.2 MiB vs 150 MiB cap with run-to-run variance 119-149 MiB; considers capping mode A at 384 tokens or using the marginal-footprint accounting runtime.ts already implements.",
+  },
+];
+
+/** Look up one blocker by id; undefined when unknown (defensive). */
+export function setupCortexBlocker(id: string): SetupCortexBlockerV1 | undefined {
+  return SETUP_CORTEX_BLOCKERS.find((b) => b.id === id);
+}
+
+/**
+ * The live blockers computed from (platform, ENC-0f QualificationV1 record,
+ * asset-manifest head-count). Pure + deterministic — no IO, no clock, no flag
+ * dependence. Rules:
+ *  - HG-1 → `"closed"` when the asset manifest declares all five projection
+ *    heads (`headCount === ENCODER_HEAD_ORDER.length`); otherwise stays open.
+ *  - HG-3 → unchanged (genuinely open — onnxruntime-node budget unresolved).
+ *  - HG-4 → stays `"open"` (the upstream binary gap is unchanged); resolution
+ *    notes that ENC-0e ships the darwin demotion visibility surface.
+ *  - HG-5 → derived from the qualification record: an empty record is
+ *    `"superseded"` (no measurement on this device); a `failed` verdict closes
+ *    it with the measured p95/RSS wording; a `qualified` verdict closes it with
+ *    "measured" wording. Severity stays `"medium"` from the base row.
+ * `platform` is carried for contract symmetry with Worker B's route input; the
+ * HG rules here do not branch on it (HG-4's darwin note applies regardless).
+ */
+export function computeSetupCortexBlockers(input: {
+  platform: string | null;
+  qualification: QualificationV1 | null;
+  headCount: number | null;
+}): readonly SetupCortexBlockerV1[] {
+  const { qualification, headCount } = input;
+  return SETUP_CORTEX_BLOCKERS.map((base): SetupCortexBlockerV1 => {
+    switch (base.id) {
+      case "HG-1":
+        return headCount === ENCODER_HEAD_ORDER.length
+          ? { ...base, status: "closed" }
+          : base;
+      case "HG-4":
+        return {
+          ...base,
+          resolution: `${base.resolution} ENC-0e shipped the darwin demotion visibility surface.`,
+        };
+      case "HG-5":
+        if (qualification === null) {
+          return {
+            ...base,
+            status: "superseded",
+            resolution:
+              "No QualificationV1 record on this device — run the gate (scripts/encoder/gate-qualify.mjs) to measure.",
+          };
+        }
+        if (qualification.verdict === "failed") {
+          return {
+            ...base,
+            title: "Real-asset qualification: failed (latency + marginal-RSS over budget)",
+            status: "closed",
+            resolution:
+              `p95 ${qualification.p95Ms} ms vs ${ENCODER_LATENCY_P95_MS} ms gate, marginal RSS ${qualification.rssMib} MiB vs ${ENCODER_RSS_BUDGET_BYTES / MIB} MiB cap — mode A requires the native onnxruntime-node selection`,
+          };
+        }
+        return {
+          ...base,
+          title: "Real-asset qualification: measured",
+          status: "closed",
+        };
+      default:
+        return base;
+    }
+  });
+}
+
+// ─── VC9B action gating ─────────────────────────────────────────────────────
+
+/** The VC9B action kinds the drivers know how to run. */
+export type SetupCortexActionKind = "fetch-model" | "bench" | "verify-asset";
+
+/**
+ * The static PER-ACTION CANDIDATE gate ids — this is POLICY, NOT the derived
+ * gating. fetch-model and bench ARE candidates for HG-1 (five-head training)
+ * and HG-3 (install budget); verify-asset is a pure re-read of committed assets
+ * and is NEVER gated (empty candidate list). The derived gating (below)
+ * intersects these candidates with the currently-OPEN blockers from the live
+ * computed list, so a candidate only blocks when its blocker is actually open.
+ */
+const ACTION_GATE_CANDIDATES: Readonly<Record<SetupCortexActionKind, readonly string[]>> = {
+  "fetch-model": ["HG-1", "HG-3"],
+  bench: ["HG-1", "HG-3"],
+  "verify-asset": [],
+};
+
+/**
+ * Re-derived VC9B action gating from the LIVE computed blockers. An action is
+ * gated by exactly the candidate ids that are `status:"open"` AND
+ * `severity:"blocker"` in the supplied blockers. `blockers` defaults to the
+ * base `SETUP_CORTEX_BLOCKERS` (authored all-open) for backward compatibility
+ * with single-arg callers — with HG-1 closed by a computed list, fetch-model
+ * and bench surface `["HG-3"]`; verify-asset always `[]`.
+ */
+export function setupCortexActionBlockers(
+  action: SetupCortexActionKind,
+  blockers?: readonly SetupCortexBlockerV1[],
+): readonly string[] {
+  const live = blockers ?? SETUP_CORTEX_BLOCKERS;
+  const openBlockerIds = new Set(
+    live.filter((b) => b.status === "open" && b.severity === "blocker").map((b) => b.id),
+  );
+  return ACTION_GATE_CANDIDATES[action].filter((id) => openBlockerIds.has(id));
+}