pi-mega-compact 0.20.69 → 0.20.70

package/extensions/dashboard-client/src/types/setup-cortex.ts

@@ -73,7 +73,11 @@ export interface SetupCortexStatusResponse {
 }
 
 /** The set of developer actions the Setup Cortex action drivers can run. */
-export type SetupCortexActionKind = "fetch-model" | "bench" | "verify-asset";
+export type SetupCortexActionKind =
+  | "fetch-model"
+  | "bench"
+  | "verify-asset"
+  | "install-native-ort";
 
 /** Request body for POST /api/setup-cortex-action. confirm:true required. */
 export interface SetupCortexActionRequest {
@@ -81,6 +85,17 @@ export interface SetupCortexActionRequest {
   readonly confirm: boolean;
 }
 
+/** ENC-2b/ENC-2c: the native onnxruntime qualification retest result (server
+ *  shape mirror from api-contracts/setup-cortex-native-ort.ts). */
+export interface NativeOrtRetestResult {
+  readonly platform: string;
+  readonly version: string;
+  readonly verdict: "qualified" | "degraded" | "failed";
+  readonly p95Ms: number;
+  readonly rssMiB: number;
+  readonly testedAt: string;
+}
+
 /** Outcome of running one Setup Cortex action. */
 export interface SetupCortexActionResult {
   readonly action: SetupCortexActionKind;
@@ -89,6 +104,12 @@ export interface SetupCortexActionResult {
   readonly logPath: string;
   readonly logName: string;
   readonly spawned: boolean;
+  /** ENC-2c: fresh retest result for install-native-ort (null when retest
+   *  could not run / no binding). Present ONLY for install-native-ort. */
+  readonly nativeOrtRetestResult?: NativeOrtRetestResult | null;
+  /** ENC-2c: effective backend after install retest — "native" when verdict is
+   *  "qualified", else "wasm". Present ONLY for install-native-ort. */
+  readonly nativeOrtBackendEffective?: "native" | "wasm";
 }
 
 /** Error body used when a hard gate blocks the requested action. */

package/extensions/dashboard-server/api-contracts/setup-cortex-native-ort.ts

@@ -0,0 +1,52 @@
+/**
+ * api-contracts/setup-cortex-native-ort.ts — ENC-2c native onnxruntime
+ * lazy-download INSTALL action contract types.
+ *
+ * Sibling additive types for the VC9B action driver: POST /api/setup-cortex-action
+ * gains the `install-native-ort` action that, when confirmed, runs the committed
+ * scripts/encoder/install-native-ort.mjs subprocess locally (npm-delegated,
+ * sha256-verified) and then re-qualifies the binding via the ENC-2b retest path.
+ *
+ * The retest result shape mirrors `RetestResult` from
+ * extensions/dashboard-server/api-contracts/setup.ts (and
+ * src/vector-cortex/encoder/native-qualify-retest.ts): { platform, version,
+ * verdict, p95Ms, rssMiB, testedAt }. It is declared here rather than imported
+ * from src/ so the contract lives wholly in the extensions layer (PREVENT-PI —
+ * extensions never import impl internals) and stays self-contained.
+ *
+ * PREVENT-PI-004: type definitions only, no network code. The install action is
+ * a confirm-gated, npm-delegated local subprocess with NO URL literals (registry
+ * URL + sha256 live only in native-install-artifacts.ts).
+ * PREVENT-011: no `any` type — all types explicit.
+ */
+
+import type { SetupCortexActionResult } from "./setup-cortex.js";
+
+/** ENC-2b/ENC-2c: the native onnxruntime qualification retest result (shape
+ *  mirror of api-contracts/setup.ts `RetestResult`). Surfaces only platform,
+ *  version, verdict, p95/RSS, testedAt — never binding binary contents or model
+ *  weights (SECURITY_PRIVACY). */
+export interface NativeOrtRetestResult {
+  readonly platform: string;
+  readonly version: string;
+  readonly verdict: "qualified" | "degraded" | "failed";
+  readonly p95Ms: number;
+  readonly rssMiB: number;
+  readonly testedAt: string;
+}
+
+/** The action kind union, which now includes the ENC-2c lazy-download install
+ *  action (widen source: setup-cortex.ts). */
+export type SetupCortexActionKindWithInstall = SetupCortexActionResult["action"];
+
+/** ENC-2c additive fields appended to the setup-cortex action result once the
+ *  install subprocess completes (retest ran regardless of install exit code). */
+export interface SetupCortexActionResultWithNativeOrt
+  extends SetupCortexActionResult {
+  /** Fresh ENC-2b qualification retest result after install (null when the
+   *  retest could not run / no binding). Present ONLY for install-native-ort. */
+  readonly nativeOrtRetestResult?: NativeOrtRetestResult | null;
+  /** Effective backend after the retest: "native" when verdict is `qualified`,
+   *  otherwise "wasm". Present ONLY for install-native-ort. */
+  readonly nativeOrtBackendEffective?: "native" | "wasm";
+}

package/extensions/dashboard-server/api-contracts/setup-cortex.ts

@@ -82,8 +82,14 @@ export interface SetupCortexStatusResponse {
 
 // ─── VC9B action drivers ────────────────────────────────────────────────────
 
-/** The set of developer actions the Setup Cortex action drivers can run. */
-export type SetupCortexActionKind = "fetch-model" | "bench" | "verify-asset";
+/** The set of developer actions the Setup Cortex action drivers can run.
+ *  ENC-2c adds `install-native-ort` (confirm-gated lazy-download native install
+ *  + re-qualification), surfaced additively via setup-cortex-native-ort.ts. */
+export type SetupCortexActionKind =
+  | "fetch-model"
+  | "bench"
+  | "verify-asset"
+  | "install-native-ort";
 
 /**
  * Request body for POST /api/setup-cortex-action. `confirm:true` is the

package/extensions/dashboard-server/routes-rag-settings-vector-cortex.ts

@@ -326,6 +326,12 @@ export const VECTOR_CORTEX_SETTINGS: SettingGroup = {
 			"ENC-2b re-probes and re-qualifies the installed native onnxruntime binding (onnxruntime-node in ~/.pi/mega-compact/native-ort/, operator-installed via the ENC-2a guide): loads the LOCAL on-disk binding, runs a bounded warmup + p95 probe, measures RSS, and computes a fresh qualification verdict against the ENC-0f p95 budget + the operator install-budget. Never downloads or trains (PREVENT-PI-004 / HG-1 unchanged); surfaces nativeOrtRetestResult + nativeOrtBackendEffective on the GET /api/setup-status. OFF = no retest GET fields, no retest POST branch, no retest card (byte-identical ENC-2a predecessor).",
 			true,
 		),
+		boolDirect(
+			"MEGACOMPACT_ENC_2C",
+			"ENC-2c native ONNX runtime lazy-download INSTALL action (dashboard-triggered)",
+			"ENC-2c turns ENC-2a's operator run-script assist into a confirm-gated dashboard action: the Setup Cortex sub-tab gains an Install Native ORT button that, when the operator confirms, runs the committed scripts/encoder/install-native-ort.mjs subprocess locally (npm-delegated, sha256-verified) and then re-qualifies the binding via the ENC-2b retest path, exposing nativeOrtRetestResult / nativeOrtBackendEffective on the completion. PREVENT-PI-004 opt-in exemption: confirm-gated, npm-delegated, no URL literals (registry URL + sha256 live only in native-install-artifacts.ts). OFF = no install action POST branch, no UI button, no install result fields (byte-identical ENC-2b predecessor).",
+			true,
+		),
 		boolDirect(
 			"MEGACOMPACT_COSINE_FP_BENCH",
 			"COS-FP-A Synthetic FP Bench",

package/extensions/dashboard-server/routes-setup-cortex-actions.ts

@@ -5,13 +5,14 @@
  *   GET  /api/setup-cortex-action-log        — bounded, redacted log tail
  *
  * Reader/actor-only: NEVER exposes payload bytes, prompts, or ledger. Actions
- * only spawn the committed local vc2-model-prep scripts or re-read the committed
- * encoder assets (verify-asset) — no network (PREVENT-PI-004). A hard gate
- * (HG-1/HG-3) blocking the requested action yields 423 action_blocked_by_open_item
- * with the blocker ids and NO subprocess is spawned. Missing confirm:true yields
- * 400 confirmation_required. Flag-off (MEGACOMPACT_VC9B=0) is byte-identical to
- * the VC9A-era predecessor: the routes are absent, so they return the 404
- * disabled shape and no action runs.
+ * only spawn the committed local vc2-model-prep scripts, re-read the committed
+ * encoder assets (verify-asset), or — ENC-2c — run the confirm-gated npm-delegated
+ * native onnxruntime install (install-native-ort) + re-qualify — no network in
+ * this layer (PREVENT-PI-004). A hard gate (HG-1/HG-3) blocking the requested
+ * action yields 423 action_blocked_by_open_item with the blocker ids and NO
+ * subprocess is spawned. Missing confirm:true yields 400 confirmation_required.
+ * Flag-off (MEGACOMPACT_VC9B=0) is byte-identical to the VC9A-era predecessor:
+ * the routes are absent, so they return the 404 disabled shape and no action runs.
  *
  * Guardrails: PREVENT-011 (no `any`), PREVENT-001 (guarded JSON.parse via
  * readJsonBody), no string literals for scripts/blockers (delegated to
@@ -24,7 +25,12 @@ import { join, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 import type { RouteContext } from "./routes-core.js";
 import { sendJson, readJsonBody } from "./routes-vector-cortex-shared.js";
-import { VC9B_ENABLED, ENC_0G_ENABLED, ENC_0F_ENABLED } from "../../src/config.js";
+import {
+  VC9B_ENABLED,
+  ENC_0G_ENABLED,
+  ENC_0F_ENABLED,
+  ENC_2C_ENABLED,
+} from "../../src/config.js";
 import { setupCortexActionBlockers, computeSetupCortexBlockers } from "./setup-cortex-blockers.js";
 import { readEncoderManifest, detectPlatform } from "../../src/vector-cortex/encoder/asset.js";
 import {
@@ -41,6 +47,7 @@ const ACTION_KINDS = new Set<SetupCortexActionKind>([
   "fetch-model",
   "bench",
   "verify-asset",
+  "install-native-ort",
 ]);
 
 function isActionKind(v: unknown): v is SetupCortexActionKind {
@@ -113,7 +120,9 @@ export function handleSetupCortexAction(
     }
     const value = parsed.value;
     const action = value.action;
-    if (!isActionKind(action)) {
+    // ENC-2c: install-native-ort is recognized ONLY while ENC_2C is on —
+    // flag-off is byte-identical to the ENC-2b predecessor (invalid_action).
+    if (!isActionKind(action) || (action === "install-native-ort" && !ENC_2C_ENABLED())) {
       sendJson(res, 400, { error: "invalid_action" });
       return;
     }
@@ -134,8 +143,10 @@ export function handleSetupCortexAction(
       });
       return;
     }
-    const result = runSetupCortexAction(action, ctx.stateDir);
-    sendJson(res, result.ok ? 200 : 500, result);
+    void (async () => {
+      const result = await runSetupCortexAction(action, ctx.stateDir);
+      sendJson(res, result.ok ? 200 : 500, result);
+    })();
   });
   return true;
 }

package/extensions/dashboard-server/setup-cortex-actions-native-ort.ts

@@ -0,0 +1,121 @@
+/**
+ * dashboard-server/setup-cortex-actions-native-ort.ts — ENC-2c native onnxruntime
+ * lazy-download INSTALL action driver (actor surface for install-native-ort).
+ *
+ * Sibling of setup-cortex-actions.ts (which stays under the 300-line source soft
+ * cap). Implements the mechanics behind the VC9B `install-native-ort` action:
+ *
+ *   1. locate the committed scripts/encoder/install-native-ort.mjs by walking up
+ *      to the repo root (mirroring setup-cortex-actions.ts vc2ScriptDir);
+ *   2. spawn `node <script>` locally with a 60s timeout (npm-delegated,
+ *      sha256-verified install — the registry URL + sha256 live ONLY in
+ *      src/vector-cortex/encoder/native-install-artifacts.ts, never here);
+ *   3. capture output to <stateDir>/logs/vc9b/install-native-ort-<ts>.log;
+ *   4. REGARDLESS of the install exit code, re-qualify the binding via the ENC-2b
+ *      retest path (`runNativeRetest`) and surface the fresh result +
+ *      effective backend.
+ *
+ * PREVENT-PI-004 banner: this is an OPT-IN, confirm-gated, npm-delegated local
+ * subprocess of a committed repo script. It performs no network I/O in this
+ * module and carries NO URL literals (the codebase-wide no-URL-literal scan
+ * covers src/ + extensions/).
+ *
+ * Guardrails: PREVENT-011 (no `any`); the subprocess is a committed local script,
+ * never fetched (PREVENT-PI-004, guardrails-allow below).
+ */
+
+import { spawnSync } from "node:child_process"; // guardrails-allow PREVENT-PI-004: opt-in, confirm-gated, npm-delegated install subprocess (local spawn of committed repo script; no URL literals)
+import { mkdirSync, writeFileSync, existsSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { runNativeRetest } from "../../src/vector-cortex/encoder/native-qualify-retest.js";
+import type {
+  SetupCortexActionResultWithNativeOrt,
+  NativeOrtRetestResult,
+} from "./api-contracts/setup-cortex-native-ort.js";
+
+/** Locate scripts/encoder/install-native-ort.mjs by walking up to the repo root. */
+export function installScriptPath(): string | null {
+  let dir = dirname(fileURLToPath(import.meta.url));
+  const rel = join("scripts", "encoder", "install-native-ort.mjs");
+  for (let i = 0; i < 8; i++) {
+    const candidate = join(dir, rel);
+    // guardrails-allow PREVENT-PI-004: local repo filesystem read (loopback)
+    if (existsSync(candidate)) return candidate;
+    const next = dirname(dir);
+    if (next === dir) break;
+    dir = next;
+  }
+  return null;
+}
+
+/** Ensure the vc9b log dir exists (mirrors setup-cortex-actions.ts). */
+function ensureLogDir(stateDir: string): string {
+  const dir = join(stateDir, "logs", "vc9b");
+  // guardrails-allow PREVENT-PI-004: local state-dir filesystem write (loopback)
+  mkdirSync(dir, { recursive: true });
+  return dir;
+}
+
+function writeLog(logPath: string, body: string): void {
+  // guardrails-allow PREVENT-PI-004: local state-dir filesystem write (loopback)
+  writeFileSync(logPath, body, "utf8");
+}
+
+/**
+ * Run the ENC-2c lazy-download native onnxruntime INSTALL action. Locates and
+ * spawns the committed install script (npm-delegated, sha256-verified), logs the
+ * captured output, then ALWAYS runs the ENC-2b retest to re-qualify the binding
+ * (regardless of install exit code) and surfaces the fresh result.
+ *
+ * Never throws: a missing script or non-zero exit is surfaced as ok=false on the
+ * result; the retest runs even on install failure so the operator sees the
+ * post-install qualification state. Returns a combined SetupCortexActionResult
+ * with the ENC-2c additive fields (present only for pendant actions).
+ */
+// guardrails-allow PREVENT-PI-004: opt-in, confirm-gated, npm-delegated install action (subprocess of committed repo script; no URL literals)
+export async function runInstallNativeOrt(
+  stateDir: string,
+): Promise<SetupCortexActionResultWithNativeOrt> {
+  const ts = Date.now();
+  const logName = `install-native-ort-${ts}.log`;
+  const logPath = join(ensureLogDir(stateDir), logName);
+
+  const scriptPath = installScriptPath();
+  if (scriptPath === null) {
+    writeLog(logPath, "install-native-ort.mjs not found in this checkout\n");
+    return {
+      action: "install-native-ort",
+      ok: false,
+      exitCode: null,
+      logPath,
+      logName,
+      spawned: true,
+    };
+  }
+
+  // guardrails-allow PREVENT-PI-004: opt-in, confirm-gated, npm-delegated
+  // install subprocess (local spawn of committed repo script; no URL literals)
+  const result = spawnSync(process.execPath, [scriptPath], {
+    encoding: "utf8",
+    timeout: 60_000,
+  });
+
+  const out = `${result.stdout ?? ""}${result.stderr ?? ""}`;
+  writeLog(logPath, out || "(no output)\n");
+
+  // Re-qualify AFTER install regardless of exit code (the retest is the source of
+  // truth for whether the binding is actually usable).
+  const retest: NativeOrtRetestResult | null = await runNativeRetest(stateDir);
+
+  return {
+    action: "install-native-ort",
+    ok: result.status === 0,
+    exitCode: result.status === null ? null : result.status,
+    logPath,
+    logName,
+    spawned: true,
+    nativeOrtRetestResult: retest,
+    nativeOrtBackendEffective: retest !== null && retest.verdict === "qualified" ? "native" : "wasm",
+  };
+}

package/extensions/dashboard-server/setup-cortex-actions.ts

@@ -6,7 +6,9 @@
  * vc2-model-prep scripts (fetch-model.sh, bench-onnx.mjs), capturing their
  * output to <stateDir>/logs/vc9b/<action>-<ts>.log, re-running the committed
  * encoder asset verification seam for verify-asset (NO subprocess), and serving
- * a bounded + redacted log tail.
+ * a bounded + redacted log tail. ENC-2c adds the `install-native-ort` action,
+ * delegated to the sibling setup-cortex-actions-native-ort.ts (the confirm-gated,
+ * npm-delegated local install + ENC-2b re-qualification).
  *
  * This module is the ONLY place that touches the filesystem for VC9B actions.
  * The route file (routes-setup-cortex-actions.ts) carries NO path/script/blocker
@@ -41,6 +43,7 @@ import {
   readQualificationRecord,
   encoderStateDir,
 } from "./qualification-record.js";
+import { runInstallNativeOrt } from "./setup-cortex-actions-native-ort.js";
 
 /** Cap applied to every log tail served by the action-log route. */
 export const ACTION_LOG_TAIL_BYTES = 8192;
@@ -251,11 +254,14 @@ function writeLog(logPath: string, body: string): void {
  * result on success; throws nothing — every failure is surfaced as a result with
  * ok=false so the route can shape the HTTP response. Never touches the network;
  * the subprocesses it may spawn are the committed local vc2-model-prep scripts.
+ * Async (ENC-2c): install-native-ort runs the npm-delegated local install then
+ * re-qualifies via the ENC-2b retest path.
  */
-export function runSetupCortexAction(
+export async function runSetupCortexAction(
   action: SetupCortexActionKind,
   stateDir: string,
-): SetupCortexActionResult {
+): Promise<SetupCortexActionResult> {
   if (action === "verify-asset") return runVerifyAsset(stateDir);
+  if (action === "install-native-ort") return runInstallNativeOrt(stateDir);
   return runSpawnedAction(action, stateDir);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-mega-compact",
-  "version": "0.20.69",
+  "version": "0.20.70",
   "description": "Layered, local, vector-backed context compressor for pi — supersede/collapse/cluster compaction with deduped inline recall.",
   "type": "module",
   "license": "BSD-3-Clause",

package/src/config/vector-cortex-enc2c.ts

@@ -0,0 +1,40 @@
+/**
+ * config/vector-cortex-enc2c.ts — ENC-2c native onnxruntime lazy-download
+ * install-action flag (dashboard-triggered install).
+ *
+ * Sibling of vector-cortex-enc2a.ts / vector-cortex-enc2b.ts so vector-cortex.ts
+ * stays under the 300-line soft limit (soft-as-hard gate). vector-cortex.ts
+ * re-exports the flag below and root src/config.ts re-exports it, so no consumer
+ * import path changes.
+ *
+ * ENC-2c turns ENC-2a's operator run-script assist into a dashboard action: the
+ * Setup Cortex sub-tab gains an "Install Native ORT" button that, when confirmed
+ * by the operator, runs the committed `scripts/encoder/install-native-ort.mjs`
+ * subprocess locally (npm-delegated, sha256-verified) and then re-qualifies the
+ * binding via the ENC-2b retest path. This is a PREVENT-PI-004 opt-in exemption:
+ * it is confirm-gated (never automatic), delegated to a local subprocess of a
+ * committed repo script, and carries NO URL literals in src/ or extensions/
+ * (the registry URL + sha256 live only in the artifacts-module constants).
+ *
+ * `MEGACOMPACT_ENC_2C=0` disables: no install action branch, no UI button, no
+ * install-related result fields — byte-identical to the ENC-2b predecessor. The
+ * flag MUST also be a dashboard SETTINGS toggle (visible in config UI, never in
+ * EXCLUDED_SETTINGS — see `feedback_dashboard-flags-toggleable` memory).
+ *
+ * Pi-agnostic, dependency-free (PREVENT-PI-004 / PREVENT-011).
+ *
+ * guardrails-allow PREVENT-PI-004: opt-in confirm-gated install action;
+ * delegates to local npm install subprocess, no URL literals (registry URL +
+ * sha256 live only in native-install-artifacts.ts)
+ */
+
+import { sprintFlag } from "./vector-cortex-flag.js";
+
+/**
+ * ENC-2c — lazy-download native onnxruntime install action (dashboard-triggered,
+ * npm-delegated, confirm-gated). Default ON. `MEGACOMPACT_ENC_2C=0` disables and
+ * is byte-identical to the ENC-2b predecessor: no install action POST branch, no
+ * UI button, no install result fields. This flag MUST also be a dashboard SETTINGS
+ * toggle (visible in config UI, never in EXCLUDED_SETTINGS).
+ */
+export const ENC_2C_ENABLED = (): boolean => sprintFlag("MEGACOMPACT_ENC_2C");

package/src/config/vector-cortex.ts

@@ -96,6 +96,8 @@ export {
 export { ENC_2A_ENABLED } from "./vector-cortex-enc2a.js";
 // ENC-2b native onnxruntime qualification-retest flag extracted to vector-cortex-enc2b.ts.
 export { ENC_2B_ENABLED } from "./vector-cortex-enc2b.js";
+// ENC-2c native onnxruntime lazy-download install-action flag extracted to vector-cortex-enc2c.ts.
+export { ENC_2C_ENABLED } from "./vector-cortex-enc2c.js";
 // Breaker constants (TRIAD_RESILIENCE.md §breaker) extracted to vector-cortex-breakers.ts.
 export {
   BREAKER_WINDOW_MS,

package/src/config.ts

@@ -204,6 +204,7 @@ export {
   ENC_2BUDGET_DEFAULT_MIB,
   ENC_2A_ENABLED,
   ENC_2B_ENABLED,
+  ENC_2C_ENABLED,
   COSINE_FP_BENCH_ENABLED,
   COSINE_FP_REAL_ENABLED,
   REPO_CORPUS_ENABLED,

package/src/vector-cortex/setup-cortex-blockers-compute.ts

@@ -198,7 +198,11 @@ export function computeSetupCortexBlockers(input: {
 // ─── VC9B action gating ─────────────────────────────────────────────────────
 
 /** The VC9B action kinds the drivers know how to run. */
-export type SetupCortexActionKind = "fetch-model" | "bench" | "verify-asset";
+export type SetupCortexActionKind =
+  | "fetch-model"
+  | "bench"
+  | "verify-asset"
+  | "install-native-ort";
 
 /**
  * The static PER-ACTION CANDIDATE gate ids — this is POLICY, NOT the derived
@@ -216,6 +220,9 @@ const ACTION_GATE_CANDIDATES: Readonly<Record<SetupCortexActionKind, readonly st
   // behavior change. HG-7 is training work (no action in this set).
   bench: ["HG-1", "HG-3", "HG-6"],
   "verify-asset": [],
+  // ENC-2c: installing the lazy-download native binding is gated by HG-3 (the
+  // open install-budget hard gate) — a closed HG-3 no longer blocks the install.
+  "install-native-ort": ["HG-3"],
 };
 
 /**

package/extensions/dashboard-client/dist/assets/MetricsTab-sks9wzZr.js

@@ -1,2 +0,0 @@
-import{j as r}from"./index-DgKI8jwx.js";import{M as t}from"./MetricsCards-CNBlWLoU.js";import"./card-CwWLYigw.js";import"./generateCategoricalChart-BX9n_-am.js";import"./BarChart-MvUf2UYv.js";import"./AreaChart-CumzbAON.js";function e(){return r.jsx(t,{})}export{e as default};
-//# sourceMappingURL=MetricsTab-sks9wzZr.js.map