pi-mega-compact 0.20.69 → 0.20.71

package/src/vector-cortex/livewire/livewire-registry.ts

@@ -0,0 +1,91 @@
+/**
+ * vector-cortex/livewire/livewire-registry.ts — per-stateDir LIWIRE registry.
+ *
+ * The single seam the runtime and the reader-only dashboard routes BOTH access.
+ * It owns a `Map<stateDir, LivewireLiveState>` (one live subsystem cluster per
+ * repo) and lazily opens a state on first access, rehydrating its cumulative
+ * counters from the persisted aggregate snapshot (`livewire-snapshot.ts`) so a
+ * freshly-spawned process — e.g. the dashboard server — reports the same counts
+ * the runtime has already accumulated.
+ *
+ * The runtime WRITES through this registry (see `livewire-runtime.ts`): each
+ * mutation persists a reduced, count-only snapshot. The routes READ through
+ * `livewireOf(stateDir)` and call the pure `snapshotOf`. There is no other path.
+ *
+ * BEST-EFFORT + NON-FATAL. `openLivewire` never throws: persistence failures are
+ * swallowed by the snapshot layer and state is always returned. PREVENT-PI-004
+ * (local in-process Map + filesystem only), PREVENT-011 (no `any`).
+ */
+
+import type { LivewireSnapshot } from "./livewire-types.js";
+import {
+  createLiveState,
+  rehydrateLive,
+  snapshotOf,
+  type LivewireLiveState,
+} from "./livewire-live.js";
+import {
+  loadLivewireSnapshot,
+  saveLivewireSnapshot,
+} from "./livewire-snapshot.js";
+
+/** The per-stateDir registry (process-local; a fresh process starts empty). */
+const REGISTRY = new Map<string, LivewireLiveState>();
+
+/** Optional structured logger for best-effort failure events. */
+export type LivewireLogger = (line: unknown) => void;
+
+let activeLogger: LivewireLogger | undefined;
+
+/**
+ * Bind the structured logger the snapshot layer uses for its non-fatal write
+ * failures. The runtime calls this once at startup with its JSON logger.
+ */
+export function setLivewireLogger(logger: LivewireLogger | undefined): void {
+  activeLogger = logger;
+}
+
+/**
+ * Open (or return the cached) live state for a stateDir. Lazy: on first access
+ * it rehydrates from the persisted aggregate so a separate dashboard process
+ * reflects prior runtime work. Never throws.
+ */
+export function livewireOf(stateDir: string): LivewireLiveState {
+  const cached = REGISTRY.get(stateDir);
+  if (cached !== undefined) return cached;
+  const state = createLiveState();
+  const snap = loadLivewireSnapshot(stateDir);
+  if (snap !== null) rehydrateLive(state, snap);
+  REGISTRY.set(stateDir, state);
+  return state;
+}
+
+/**
+ * Persist a state's reduced aggregate (counts + codes only). Best-effort and
+ * non-fatal. Called by the runtime after every mutation so the snapshot stays
+ * fresh for any reader process.
+ */
+export function persistLivewire(state: LivewireLiveState, stateDir: string): void {
+  saveLivewireSnapshot(stateDir, snapshotOf(state), activeLogger);
+}
+
+/** Persist the live state for a stateDir (convenience over open + persist). */
+export function flushLivewire(stateDir: string): void {
+  const state = REGISTRY.get(stateDir);
+  if (state === undefined) return;
+  persistLivewire(state, stateDir);
+}
+
+/**
+ * Build the reader aggregate for one stateDir WITHOUT persisting — the reader
+ * seam the dashboard routes call. Reads the live state (rehydrated from disk on
+ * first access) and projects it to the count-only snapshot.
+ */
+export function readLivewireSnapshot(stateDir: string): LivewireSnapshot {
+  return snapshotOf(livewireOf(stateDir));
+}
+
+/** For tests: drop the registry so a fresh stateDir is fully rehydrated. */
+export function _resetLivewireRegistryForTests(): void {
+  REGISTRY.clear();
+}

package/src/vector-cortex/livewire/livewire-runtime.ts

@@ -0,0 +1,117 @@
+/**
+ * vector-cortex/livewire/livewire-runtime.ts — LIVEWIRE runtime accumulation seam.
+ *
+ * The WRITE side of LIVEWIRE: the runtime calls these methods wherever the
+ * corresponding subsystem path actually runs, and each call accumulates into the
+ * per-stateDir live state and persists a reduced count-only snapshot (best-effort,
+ * non-fatal). This is the seam that turns the pure VC7A/VC7B/VC7C/VC8B arithmetic
+ * into LIVE dashboard state.
+ *
+ * FLAG SEMANTICS (mirrors every other VC writer): these methods run REGARDLESS of
+ * the corresponding `MEGACOMPACT_VC*` flag — the arithmetic is never skipped, and
+ * a miss is still classified / a write still stored exactly as before. Only the
+ * dashboard REPORT seam (`routes-vector-cortex-*.ts`) is flag-gated: with the
+ * flag off a route returns the legacy `deferredReason` (byte-identical to the
+ * predecessor). The reporter emit seams in `cache/*-emit.ts` / `controller/
+ * policy-emit.ts` remain the event-announcement gate.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any`. Every write is best-effort.
+ */
+
+import type { MissClass, MissObservation } from "../cache/diagnostics-types.js";
+import { classifyMiss } from "../cache/diagnostics.js";
+import { shouldBlockServe } from "../cache/breaker.js";
+import type { CrystalV1, CrystalWriteResult } from "../cache/types.js";
+import type { ShadowResult } from "../controller/types.js";
+import { livewireOf, persistLivewire } from "./livewire-registry.js";
+
+/**
+ * Record a VC7A crystal WRITE attempt (write-once + collision arithmetic). The
+ * caller passes the fully-formed `CrystalV1`; the store returns the write result
+ * (first-write / idempotent / collision). The dashboard's `stats()` reflects it.
+ *
+ * @returns the store's write verdict, forwarded so the runtime can act on a
+ *          collision without re-deriving it.
+ */
+export function recordCrystalWrite(stateDir: string, crystal: CrystalV1): CrystalWriteResult {
+  const state = livewireOf(stateDir);
+  const result = state.crystalStore.write(crystal);
+  persistLivewire(state, stateDir);
+  return result;
+}
+
+/**
+ * Record a VC7A crystal READ attempt. Returns the stored crystal (or undefined
+ * on a miss / mode C), mirroring `CrystalStore.read` so the cache-serve path can
+ * use this seam entirely.
+ */
+export function readCrystal(stateDir: string, keyDigest: string): CrystalV1 | undefined {
+  const state = livewireOf(stateDir);
+  const found = state.crystalStore.read(keyDigest);
+  persistLivewire(state, stateDir);
+  return found;
+}
+
+/**
+ * Record a VC7C miss observation: classify it into its exclusive class and tally
+ * it. When the class demands the cache serve be demoted BEFORE answering, the
+ * `serveBlocked` counter is also incremented. The live breaker state itself is
+ * driven by the real cache-serve path (through `breaker.execute`), not here; this
+ * seam only observes and tallies.
+ *
+ * @returns the exclusive class the observation was tallied under.
+ */
+export function observeCacheMiss(stateDir: string, observation: MissObservation): MissClass {
+  const state = livewireOf(stateDir);
+  const missClass = classifyMiss(observation).missClass;
+  state.diagnostics.tallies[missClass] += 1;
+  if (shouldBlockServe(missClass)) state.diagnostics.serveBlocked += 1;
+  persistLivewire(state, stateDir);
+  return missClass;
+}
+
+/**
+ * Record a VC7C cache serve that the breaker demoted BEFORE answering. Talls the
+ * `serveBlocked` counter the diagnostics card surfaces.
+ */
+export function recordServeBlocked(stateDir: string): void {
+  const state = livewireOf(stateDir);
+  state.diagnostics.serveBlocked += 1;
+  persistLivewire(state, stateDir);
+}
+
+/**
+ * Record a VC8B shadow evaluation run: accumulate its decision metrics so the
+ * policy card reports how many shadow decisions were evaluated / clamped /
+ * rejected and how many live mutations the shadow proved (structurally 0).
+ */
+export function recordShadowRun(stateDir: string, result: ShadowResult): void {
+  const state = livewireOf(stateDir);
+  state.shadow.shadowDecisions += result.metrics.evaluated;
+  state.shadow.clampedDecisions += result.metrics.clamped;
+  state.shadow.rejectedInputs += result.metrics.rejected;
+  state.shadow.liveMutations += result.metrics.liveMutations;
+  persistLivewire(state, stateDir);
+}
+
+/**
+ * Set the active M7 pressure version (1 = legacy, 2 = migrated). The runtime
+ * calls this after a successful `migratePressureV2` so the policy card reflects
+ * the live migration state rather than a hardcoded 1.
+ */
+export function setPressureVersion(stateDir: string, version: 1 | 2): void {
+  const state = livewireOf(stateDir);
+  state.shadow.pressureVersion = version;
+  persistLivewire(state, stateDir);
+}
+
+/**
+ * Mark that VC7B cache economics have actually been computed at runtime (the
+ * `computed` bit drives the economics card's `hasData`). The runtime calls this
+ * after the first real `computeEconomics` over observed usage.
+ */
+export function markEconomicsComputed(stateDir: string): void {
+  const state = livewireOf(stateDir);
+  state.economics.computed = true;
+  persistLivewire(state, stateDir);
+}

package/src/vector-cortex/livewire/livewire-snapshot.ts

@@ -0,0 +1,108 @@
+/**
+ * vector-cortex/livewire/livewire-snapshot.ts — LIVEWIRE aggregate persistence.
+ *
+ * The four LV subsytems are in-process live objects, but the dashboard server may
+ * run in a SEPARATE process from the runtime that accumulates the counts. To keep
+ * the reader-only routes honest when they run in their own process, this module
+ * persists a COUNT-ONLY aggregate snapshot (`vector-cortex-livewire.json`) to the
+ * per-repo `stateDir`, and `openLivewire` rehydrates a fresh process from it on
+ * first access. This is the same DR-snapshot philosophy as the legacy JSON
+ * checkpoints, but reduced to counts + codes (SECURITY_PRIVACY — see these types).
+ *
+ * BEST-EFFORT + NON-FATAL. A failed write is logged as a structured event and
+ * never breaks the agent loop; a missing/unreadable snapshot reads as null and
+ * the process starts from zero (matches the non-fatal-stores invariant). Every
+ * write is atomic-ish: the JSON is fully serialized to a temp name then renamed
+ * so a reader never observes a partial snapshot.
+ *
+ * PREVENT-PI-004: local filesystem read/write only, no network. PREVENT-011: no
+ * `any`.
+ */
+
+import { readFileSync, writeFileSync, renameSync, existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import type { LivewireSnapshot } from "./livewire-types.js";
+
+/** The snapshot filename in the per-repo stateDir (counts + codes only). */
+export const LIVEWIRE_SNAPSHOT_FILE = "vector-cortex-livewire.json";
+
+/** Resolve the snapshot path for a stateDir. */
+export function livewireSnapshotPath(stateDir: string): string {
+  return join(stateDir, LIVEWIRE_SNAPSHOT_FILE);
+}
+
+/**
+ * Best-effort type guard over a parsed snapshot. Rejects anything that is not
+ * the exact aggregate shape so a corrupted or stale file cannot poison the
+ * rehydrated counters.
+ */
+function isSnapshot(value: unknown): value is LivewireSnapshot {
+  if (typeof value !== "object" || value === null) return false;
+  const s = value as Record<string, unknown>;
+  return (
+    s.schema === "vector-cortex-livewire-v1" &&
+    typeof s.crystals === "object" &&
+    s.crystals !== null &&
+    typeof s.diagnostics === "object" &&
+    s.diagnostics !== null &&
+    typeof s.economics === "object" &&
+    s.economics !== null &&
+    typeof s.policy === "object" &&
+    s.policy !== null
+  );
+}
+
+/**
+ * Read the persisted aggregate for a stateDir, or null when absent/unreadable/
+ * malformed. Best-effort and non-fatal by construction.
+ */
+export function loadLivewireSnapshot(stateDir: string): LivewireSnapshot | null {
+  const path = livewireSnapshotPath(stateDir);
+  let raw: string;
+  try {
+    raw = readFileSync(path, "utf-8");
+  } catch {
+    return null;
+  }
+  try {
+    const parsed: unknown = JSON.parse(raw);
+    return isSnapshot(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Best-effort write of the aggregate snapshot (atomic rename). Never throws to
+ * the caller: a persistence failure logs a structured event and is swallowed.
+ *
+ * @param logger  optional structured logger `(line: unknown) => void`; when
+ *                omitted no event is emitted (tests pass `undefined`).
+ */
+export function saveLivewireSnapshot(
+  stateDir: string,
+  snapshot: LivewireSnapshot,
+  logger?: (line: unknown) => void,
+): void {
+  const dir = stateDir;
+  try {
+    if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+    const path = livewireSnapshotPath(dir);
+    const tmp = `${path}.tmp`;
+    writeFileSync(tmp, JSON.stringify(snapshot), "utf-8");
+    renameSync(tmp, path);
+  } catch (err) {
+    if (logger !== undefined) {
+      try {
+        logger({
+          ts: new Date().toISOString(),
+          event: "vector_cortex_livewire_snapshot_write_failed",
+          stateDir,
+          reason: err instanceof Error ? err.message : String(err),
+        });
+      } catch {
+        // A failing logger must not recurse into another failure.
+      }
+    }
+  }
+}

package/src/vector-cortex/livewire/livewire-types.ts

@@ -0,0 +1,84 @@
+/**
+ * vector-cortex/livewire/livewire-types.ts — LIVEWIRE aggregate snapshot types.
+ *
+ * LIVEWIRE wires the four complete-but-unwired Vector Cortex subsystems into the
+ * runtime so their dashboard routes report LIVE state instead of hardcoded
+ * "deferred" zeros. This module is the SINGLE SOURCE OF TRUTH for the persisted
+ * aggregate snapshot shape (counts + codes ONLY) and for the per-stateDir
+ * live-state records the routes read.
+ *
+ * SECURITY_PRIVACY: every field here is a count, a code, or a finite triad mode.
+ * There is deliberately NO string slot for a session id, a request/crystal
+ * digest, a covered range, frozen bytes, a profile id, or ledger content — a
+ * crystal IS a frozen rendered prompt, so the card that reports on it must never
+ * be able to carry one. The snapshot is the SAME reduced shape, so nothing secret
+ * reaches disk either.
+ *
+ * PREVENT-PI-004: type definitions only, no network code. PREVENT-011: no `any`.
+ */
+
+/** Triad mode shared by the crystals / diagnostics / economics cards. */
+export type LivewireMode = "A" | "B" | "C";
+
+/** VC7A crystal aggregate — mirrors `CrystalStoreStats` one-for-one. */
+export interface LivewireCrystalAggregate {
+  readonly mode: LivewireMode;
+  readonly crystalCount: number;
+  readonly totalBytes: number;
+  readonly hits: number;
+  readonly misses: number;
+  readonly hitBytes: number;
+  readonly writes: number;
+  readonly duplicateWrites: number;
+  readonly collisions: number;
+}
+
+/** VC7C per-miss-class tallies + breaker observable state. */
+export interface LivewireDiagnosticsAggregate {
+  readonly profileMisses: number;
+  readonly rangeMisses: number;
+  readonly dependencyMisses: number;
+  readonly requestMisses: number;
+  readonly generationMisses: number;
+  readonly unknownMisses: number;
+  readonly serveBlocked: number;
+  /** Breaker observable state name (CLOSED_A / OPEN_B / ... / MANUAL_HALT). */
+  readonly breakerState: string;
+  /** Last CACHE/M5 code, or null. */
+  readonly lastFailure: string | null;
+}
+
+/** VC7B economics aggregate — static profile tallies + computed bit. */
+export interface LivewireEconomicsAggregate {
+  /** Provider profiles that declare cache economics. */
+  readonly profileCount: number;
+  /** Exclusions that carry a proving fixture id. */
+  readonly provenExclusions: number;
+  /** Exclusions rejected for lacking a fixture id. */
+  readonly unprovenExclusions: number;
+  /** True once the runtime has actually run `computeEconomics` at least once. */
+  readonly computed: boolean;
+  /** Last ECON_* code, or null. */
+  readonly lastFailure: string | null;
+}
+
+/** VC8B shadow-policy aggregate — maps 1:1 to the policy card fields. */
+export interface LivewirePolicyAggregate {
+  readonly shadowDecisions: number;
+  readonly clampedDecisions: number;
+  readonly rejectedInputs: number;
+  readonly liveMutations: number;
+  /** Active pressure version (1 legacy / 2 migrated). */
+  readonly pressureVersion: 1 | 2;
+  /** Last POL_ or M7_ code, or null. */
+  readonly lastFailure: string | null;
+}
+
+/** The persisted, restart-surviving aggregate for one stateDir. */
+export interface LivewireSnapshot {
+  readonly schema: "vector-cortex-livewire-v1";
+  readonly crystals: LivewireCrystalAggregate;
+  readonly diagnostics: LivewireDiagnosticsAggregate;
+  readonly economics: LivewireEconomicsAggregate;
+  readonly policy: LivewirePolicyAggregate;
+}

package/src/vector-cortex/provider/economics.ts

@@ -47,38 +47,16 @@
  * gates only the reporter/dashboard seam in `../cache/economics-emit.ts`.
  */
 
-import type { ProviderProfileExclusion, ProviderProfileV1 } from "./types.js";
+import type {
+  ProviderEconomicsV1,
+  ProviderProfileExclusion,
+  ProviderProfileV1,
+} from "./types.js";
 
-/**
- * Cache economics attached to a provider profile.
- *
- * Prices are integer MICRO-UNITS PER TOKEN (1e-6 currency units), so a provider
- * charging $3.00 per million input tokens has `basePrice: 3`. Integers keep the
- * money path exact; see the file header for why floats are refused.
- */
-export interface ProviderEconomicsV1 {
-  readonly schema: "provider-economics-v1";
-  /** The `ProviderProfileV1.id` these economics belong to. */
-  readonly profileId: string;
-  /** Profile version — economics are versioned WITH the profile they price. */
-  readonly profileVersion: string;
-  /** Uncached price per token, integer micro-units. The savings baseline. */
-  readonly basePrice: number;
-  /** Cache-READ price per token, integer micro-units. Normally < basePrice. */
-  readonly readPrice: number;
-  /** Cache-WRITE price per token, integer micro-units. Normally > basePrice. */
-  readonly writePrice: number;
-  /** Cache entry lifetime in ms. A prefix older than this cannot be read back. */
-  readonly ttlMs: number;
-  /** Minimum cacheable prefix in tokens; a shorter prefix is never cached. */
-  readonly minPrefix: number;
-  /**
-   * Conformance fixture ID proving this profile's exclusion set is safe, or
-   * `null` when the profile declares NO exclusions (nothing to prove). A profile
-   * WITH exclusions and a null/blank id is rejected — see `validateEconomics`.
-   */
-  readonly exclusionFixtureId: string | null;
-}
+// `ProviderEconomicsV1` is defined in `./types.js` so it can ride on
+// `ProviderProfileV1` without a type-only module cycle. Re-exported forward here
+// so every existing consumer import path (`from "./economics.js"`) is unchanged.
+export type { ProviderEconomicsV1 } from "./types.js";
 
 /** Observed (or shadow) cache traffic for one economics computation. */
 export interface CacheUsageV1 {

package/src/vector-cortex/provider/registry.ts

@@ -18,6 +18,7 @@
 
 import {
   PRO_PROFILE_UNKNOWN,
+  type ProviderEconomicsV1,
   type ProviderProfileBundle,
   type ProviderProfileResult,
   type ProviderProfileV1,
@@ -60,6 +61,7 @@ function profile(
   id: string,
   version: string,
   excludedJsonPointers: ProviderProfileV1["excludedJsonPointers"],
+  economics: ProviderProfileV1["economics"],
 ): ProviderProfileV1 {
   return {
     schema: "provider-profile-v1",
@@ -67,42 +69,111 @@ function profile(
     version,
     hashMode: "entire-canonical-request",
     excludedJsonPointers,
+    economics,
   };
 }
 
+/**
+ * Build integer micro-unit economics for a base profile (VC7B). A cache WRITE
+ * costs more than an uncached token, a cache READ costs less — the standard
+ * provider-prompt-cache shape. `exclusionFixtureId` mirrors the profile's own
+ * exclusion fixture (or null when the profile has none to prove).
+ */
+function econ(
+  id: string,
+  version: string,
+  exclusionFixtureId: string | null,
+  values: {
+    basePrice: number;
+    readPrice: number;
+    writePrice: number;
+    ttlMs: number;
+    minPrefix: number;
+  },
+): ProviderEconomicsV1 {
+  return {
+    schema: "provider-economics-v1",
+    profileId: id,
+    profileVersion: version,
+    basePrice: values.basePrice,
+    readPrice: values.readPrice,
+    writePrice: values.writePrice,
+    ttlMs: values.ttlMs,
+    minPrefix: values.minPrefix,
+    exclusionFixtureId,
+  };
+}
+
+/** Representative integer micro-unit economics for the Anthropic opus base tier. */
+const OPUS_ECON: ProviderEconomicsV1 = econ(
+  "anthropic-claude-opus",
+  "v1",
+  null,
+  { basePrice: 15, readPrice: 2, writePrice: 19, ttlMs: 300_000, minPrefix: 1024 },
+);
+
+/** Representative integer micro-unit economics for the Anthropic sonnet base tier. */
+const SONNET_ECON: ProviderEconomicsV1 = econ(
+  "anthropic-claude-sonnet",
+  "v1",
+  null,
+  { basePrice: 3, readPrice: 0, writePrice: 4, ttlMs: 300_000, minPrefix: 1024 },
+);
+
+/** Representative integer micro-unit economics for the OpenAI gpt base tier. */
+const GPT_ECON: ProviderEconomicsV1 = econ(
+  "openai-gpt",
+  "v1",
+  null,
+  { basePrice: 5, readPrice: 1, writePrice: 6, ttlMs: 300_000, minPrefix: 1024 },
+);
+
+/** The gemini profile's versioned, fixture-proven exclusion. */
+const GEMINI_EXCLUSIONS: ProviderProfileV1["excludedJsonPointers"] = [
+  {
+    pointer: "/requestId",
+    fixtureId: "PRO-EXCLUDE-010",
+    proofDigest: "sha256:excluded-request-id-proof",
+  },
+];
+
+/** Representative integer micro-unit economics for the gemini base tier. */
+const GEMINI_ECON: ProviderEconomicsV1 = econ(
+  "google-gemini",
+  "v1",
+  "PRO-EXCLUDE-010",
+  { basePrice: 3, readPrice: 1, writePrice: 4, ttlMs: 300_000, minPrefix: 1024 },
+);
+
 /**
  * The fixture-backed base profiles. Each entry is the REAL bundle the renderer
  * resolves; the parallel conformance fixtures prove the cache-identity behavior.
  */
 const BASE_PROFILES: readonly ProviderProfileBundle[] = [
   {
-    profile: profile("anthropic-claude-opus", "v1", []),
+    profile: profile("anthropic-claude-opus", "v1", [], OPUS_ECON),
     role: BASE_ROLE,
     tool: BASE_TOOL,
     cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),
   },
   {
-    profile: profile("anthropic-claude-sonnet", "v1", []),
+    profile: profile("anthropic-claude-sonnet", "v1", [], SONNET_ECON),
     role: BASE_ROLE,
     tool: BASE_TOOL,
     cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),
   },
   {
-    profile: profile("openai-gpt", "v1", []),
+    profile: profile("openai-gpt", "v1", [], GPT_ECON),
     role: BASE_ROLE,
     tool: BASE_TOOL,
     cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),
   },
   {
     // A profile that proves a fixture-excluded pointer: a provider whose
-    // request-id header cannot affect cache identity. Excluded + versioned.
-    profile: profile("google-gemini", "v1", [
-      {
-        pointer: "/requestId",
-        fixtureId: "PRO-EXCLUDE-010",
-        proofDigest: "sha256:excluded-request-id-proof",
-      },
-    ]),
+    // request-id header cannot affect cache identity. Excluded + versioned, and
+    // the exclusion fixture id is carried into economics so the proof is
+    // honored (an unproven exclusion would fail economics validation).
+    profile: profile("google-gemini", "v1", GEMINI_EXCLUSIONS, GEMINI_ECON),
     role: BASE_ROLE,
     tool: BASE_TOOL,
     cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),

package/src/vector-cortex/provider/types.ts

@@ -35,6 +35,37 @@ export interface ProviderProfileExclusion {
   readonly proofDigest: string;
 }
 
+/**
+ * Cache economics attached to a provider profile (VC7B).
+ *
+ * Prices are integer MICRO-UNITS PER TOKEN (1e-6 currency units), so a provider
+ * charging $3.00 per million input tokens has `basePrice: 3`. Integers keep the
+ * money path exact (see `economics.ts` for why floats are refused).
+ */
+export interface ProviderEconomicsV1 {
+  readonly schema: "provider-economics-v1";
+  /** The `ProviderProfileV1.id` these economics belong to. */
+  readonly profileId: string;
+  /** Profile version — economics are versioned WITH the profile they price. */
+  readonly profileVersion: string;
+  /** Uncached price per token, integer micro-units. The savings baseline. */
+  readonly basePrice: number;
+  /** Cache-READ price per token, integer micro-units. Normally < basePrice. */
+  readonly readPrice: number;
+  /** Cache-WRITE price per token, integer micro-units. Normally > basePrice. */
+  readonly writePrice: number;
+  /** Cache entry lifetime in ms. A prefix older than this cannot be read back. */
+  readonly ttlMs: number;
+  /** Minimum cacheable prefix in tokens; a shorter prefix is never cached. */
+  readonly minPrefix: number;
+  /**
+   * Conformance fixture ID proving this profile's exclusion set is safe, or
+   * `null` when the profile declares NO exclusions (nothing to prove). A profile
+   * WITH exclusions and a null/blank id is rejected — see `validateEconomics`.
+   */
+  readonly exclusionFixtureId: string | null;
+}
+
 /**
  * The provider-profile contract. A renderer consumes a profile to decide how the
  * rendered prompt is serialized into the canonical outbound request without
@@ -47,6 +78,12 @@ export interface ProviderProfileV1 {
   readonly hashMode: ProviderHashMode;
   /** Versioned, fixture-proven exclusions (empty = hash the whole request). */
   readonly excludedJsonPointers: readonly ProviderProfileExclusion[];
+  /**
+   * VC7B cache economics pricing this profile's frozen-render reuse. Every base
+   * profile carries economics so the cache-economics aggregate is computable
+   * without a side table; a profile WITHOUT economics is simply never cached.
+   */
+  readonly economics: ProviderEconomicsV1 | null;
 }
 
 /**

package/src/vector-cortex/setup-cortex-blockers-compute.ts

@@ -198,7 +198,11 @@ export function computeSetupCortexBlockers(input: {
 // ─── VC9B action gating ─────────────────────────────────────────────────────
 
 /** The VC9B action kinds the drivers know how to run. */
-export type SetupCortexActionKind = "fetch-model" | "bench" | "verify-asset";
+export type SetupCortexActionKind =
+  | "fetch-model"
+  | "bench"
+  | "verify-asset"
+  | "install-native-ort";
 
 /**
  * The static PER-ACTION CANDIDATE gate ids — this is POLICY, NOT the derived
@@ -216,6 +220,9 @@ const ACTION_GATE_CANDIDATES: Readonly<Record<SetupCortexActionKind, readonly st
   // behavior change. HG-7 is training work (no action in this set).
   bench: ["HG-1", "HG-3", "HG-6"],
   "verify-asset": [],
+  // ENC-2c: installing the lazy-download native binding is gated by HG-3 (the
+  // open install-budget hard gate) — a closed HG-3 no longer blocks the install.
+  "install-native-ort": ["HG-3"],
 };
 
 /**

package/extensions/dashboard-client/dist/assets/MetricsTab-sks9wzZr.js

@@ -1,2 +0,0 @@
-import{j as r}from"./index-DgKI8jwx.js";import{M as t}from"./MetricsCards-CNBlWLoU.js";import"./card-CwWLYigw.js";import"./generateCategoricalChart-BX9n_-am.js";import"./BarChart-MvUf2UYv.js";import"./AreaChart-CumzbAON.js";function e(){return r.jsx(t,{})}export{e as default};
-//# sourceMappingURL=MetricsTab-sks9wzZr.js.map