@konneal/engine 0.1.0 → 0.1.2

package/README.md

@@ -6,8 +6,109 @@ typed tables/formulas/figures, conformance checking by execution, and
 the measurement gates that keep it honest. Konneal builds the databases
 and serves the API; publishers own their content, profile and frontend.
 
-Architecture and plan: docs/konneal-extraction-plan.md (and
-docs/multi-sdo-architecture.md). The reference deployment is OIML SMART
-AI (oimlsmart/ai — the reference profile). This repository was born
-from it with history preserved (git filter-repo over the engine
-subtrees); the README seed commit was replaced by the extraction.
+```
+npm install @konneal/engine
+```
+
+BSD-3-Clause. The reference deployment is
+[OIML SMART AI](https://ai.oimlsmart.org).
+
+## What a deployment looks like
+
+A publisher's worker is ten lines:
+
+```ts
+// workers/worker_public/src/index.ts — the deployment entry
+import worker, { setProfile } from "@konneal/engine";
+import { PROFILE } from "./profile.gen.ts";
+
+setProfile(PROFILE);
+
+export default worker;
+```
+
+Everything the publisher owns lives in `profile/*.yaml` — identity,
+datasets, corpora, prompts, thresholds, eval cases. The codegen
+(`gen_profile.mjs`, included) turns the YAML into a committed
+TypeScript module; a drift test keeps both sides honest. The engine
+reads the profile at request time; no publisher fact is hardcoded.
+
+The engine also ships the ingest CLI (Python): parse → embed → upsert,
+reading the same profile for its corpora declarations.
+
+## The three packages
+
+| Package | What it is |
+|---|---|
+| `@konneal/engine` | The serving Worker + the ingest CLI (this package) |
+| `@konneal/client` | The publisher-site contract: wire types, SSE client, citation chips, typed blocks |
+| `@konneal/create-publisher` | `npm create @konneal/publisher` — scaffolds the whole deployment |
+
+Start with the scaffolder: `npm create @konneal/publisher my-sdo
+-- --with-site` writes the profile, the worker entry, the Cloudflare
+wiring, the profile codegen, and (with `--with-site`) a minimal
+Astro+Vue frontend consuming `@konneal/client`.
+
+## The profile (the publisher's single edit surface)
+
+| File | Declares |
+|---|---|
+| `publisher.yaml` | id, name, domains, identity issuer, codec, session cookie, features |
+| `datasets.yaml` | what users can scope to (public vs session-gated), per-corpus prompt notes |
+| `corpora.yaml` | the corpus registry — which corpora exist, which indexes serve them |
+| `sources.yaml` | upstream repos the tooling reads (clean corpus, bibliography, terminology, models) |
+| `ui.yaml` | suggestions, model disclosure, smoke probes |
+| `retrieval.yaml` | steering vocabulary, process-intent notes |
+| `prompts.yaml` | the publisher's prompt voice (identity, refusal, examples) |
+| `evals/` | golden cases, annealment probes, ladder — the promotion-gate data |
+
+## Serving architecture
+
+- **Retrieval** is a stage registry; the ask path owns composition only
+- **HTTP** is a route table dispatched by both workers
+- Every steering number lives in `THRESHOLDS`; the chunk wire type is
+  shared with the Python producer by a contract test
+- **Ports** (`ports/`): ModelRunner, VectorIndex, Kv, Blobs, Runtime —
+  the Cloudflare adapters are the only provider-typed module; a purity
+  lint enforces it in CI
+- **Publisher purity**: a CI lint fails any publisher string in
+  `workers/` outside the codec registry (the identifier grammars)
+- **Feature gates**: `drafts` and `model_plane` are profile-declared,
+  off by default
+
+## The ingest CLI
+
+```bash
+pip install git+https://github.com/konneal/engine.git
+python -m ingest.cli parse     # corpora → chunks.jsonl + manifest
+python -m ingest.cli embed     # embed via the binding's model
+python -m ingest.cli upsert    # push vectors + metadata to Vectorize
+```
+
+## MCP server
+
+The package exports `./mcp` — a ten-line entry per deployment serves
+the publisher's public corpus to MCP clients (agent ecosystems).
+Auth is required: the MCP client presents one of the deployment's API
+keys; the same token rides outbound so spend and quota charge that
+key.
+
+## Promotion gates
+
+The engine ships the gate harness: a deployment's golden cases and
+annealment probes live in `profile/evals/`; the gate runs them against
+production before any promotion. Answers are witness-checked (the
+answer must contain the expected span, not just score well).
+
+## Repository
+
+- `workers/worker_public/` — the public-facing Worker
+- `workers/worker_mcp/` — the MCP server Worker
+- `workers/shared/` — the router, chunk wire type, session
+- `ports/` — the provider seam (interfaces + Cloudflare adapters)
+- `profile/` — the engine's fixture profile (a real deployment carries
+  its own; this one exists so tests run against declared data)
+- `profile2/` — the reference matrix's second fixture (a different
+  publisher shape; CI proves the engine serves declared profiles)
+- `ingest/` — the Python ingest CLI
+- `tests/` — unit suites (plain node, no network)

package/dist/admin.d.ts

@@ -24,3 +24,6 @@ export declare function handleVectors(env: Env, req: Request): Promise<Response>
 export declare function handleJudge(env: Env, req: Request): Promise<Response>;
 export declare function handleCreateKey(env: Env, req: Request): Promise<Response>;
 export declare function handleListKeys(env: Env, req: Request): Promise<Response>;
+/** Revoke an API key (soft: revoked = 1 — the hash row stays for
+ *  audit; authenticate() already excludes revoked keys). */
+export declare function handleRevokeKey(env: Env, req: Request, id: string): Promise<Response>;

package/dist/{chunk-MB74PTRM.js → chunk-35ODH64W.js}

@@ -7,12 +7,21 @@ var PROFILE = {
     "product_name": "Fixture Answers",
     "description": "A minimal publisher profile exercising every declared surface: an open dataset, a permission-gated dataset, production and lane corpora, prompt vars and retrieval vocabulary.",
     "domains": {
-      "public": "fixture.example.org"
+      "public": "fixture.example.org",
+      "origin_suffix": "fixture.example.org"
     },
     "identity": {
       "issuer": "https://id.fixture.example.org"
     },
-    "codec": "plain-slug"
+    "codec": "plain-slug",
+    "session_cookie": "fixture-session",
+    "references": {
+      "label_prefix": ""
+    },
+    "features": {
+      "drafts": false,
+      "model_plane": false
+    }
   },
   "datasets": [
     {
@@ -89,12 +98,22 @@ var PROFILE = {
     ]
   },
   "retrieval": {
-    "process_expansion": " fixture certification system framework application evaluation"
+    "process_expansion": " fixture certification system framework application evaluation",
+    "process_note": "Retrieval note: these passages come from the fixture certification system documents because they govern application procedures for fixture publications."
   },
   "prompts": {
     "vars": {
       "assistant_identity": "the fixture assistant \u2014 a public service answering questions about the fixture publisher's documents",
-      "refusal_sentence": "I don't have information on this in the indexed fixture documents."
+      "refusal_sentence": "I don't have information on this in the indexed fixture documents.",
+      "account_note_source": "the user's own fixture account",
+      "corpus_kind": "a fixture corpus publication",
+      "corpus_kind_plural": "fixture corpus publications",
+      "cite_example": "FIXTURE 1:2024 \xA72.1",
+      "cite_quote_example": 'FIXTURE 1:2024 \xA72.1: "the limit shall not exceed one interval"',
+      "parts_example": "FIXTURE 1-1, FIXTURE 1-A",
+      "docid_example": "FIXTURE 1-2",
+      "spelling_examples": '"f1", "FIXTURE 1"',
+      "process_vocab": "the fixture certification system framework"
     }
   }
 };

package/dist/chunk-CAEHIVG5.js

@@ -0,0 +1,54 @@
+import {
+  P
+} from "./chunk-35ODH64W.js";
+
+// workers/worker_public/src/refusal.ts
+function refusalAnswer() {
+  return P().prompts.vars.refusal_sentence;
+}
+function refusalPatterns(publisher) {
+  return {
+    variant: new RegExp(`^\\s*I don[\u2019']?t have information on .{1,120}? in the indexed ${publisher}(?: \\w+){0,2} (?:publications|passages|documents|corpus)\\.?`, "i"),
+    drift: [
+      new RegExp(`\\b(can'?t|cannot|couldn'?t|unable)\\b[^.]{0,120}?\\b(indexed )?${publisher}(?: \\w+){0,2} (?:publications|passages|documents|corpus)\\b`, "i"),
+      new RegExp(`\\bno real answer to give\\b[^.]{0,120}?\\b${publisher}\\b`, "i"),
+      /\b(?:falls|well) outside\b[^.]{0,120}?\b(?:what I can answer|my scope|the scope of)\b/i,
+      /\boutside (?:of )?what (?:I|this service) can answer\b/i,
+      // "I can't answer that — weather forecasting is outside my scope":
+      // requires the refusal verb, so a scope DISCUSSION inside a real answer
+      // ("this exemption is outside the scope of R 60") never matches
+      /\bI can[’']?t answer\b[^.]{0,100}?\bscope\b/i,
+      new RegExp(`^\\s*I don[\u2019']?t have any indexed ${publisher} \\w+(?:s)? (?:covering|about|on)\b`, "im")
+    ]
+  };
+}
+function sentenceStart(answer, i) {
+  let s = 0;
+  for (const sep of [". ", "! ", "? ", "\n"]) {
+    const j = answer.lastIndexOf(sep, i);
+    if (j >= 0) s = Math.max(s, j + sep.length);
+  }
+  return s;
+}
+function sentenceEnd(answer, i) {
+  const m = /[.!?\n]/.exec(answer.slice(i));
+  return m ? i + m.index + 1 : answer.length;
+}
+function canonicalRefusal(answer) {
+  const CANON = refusalAnswer();
+  if (answer.includes(CANON)) return answer;
+  const { variant: REFUSAL_VARIANT, drift: REFUSAL_DRIFT } = refusalPatterns(P().publisher.name);
+  const variant = answer.match(REFUSAL_VARIANT);
+  if (variant) return answer.replace(variant[0], CANON);
+  for (const drift of REFUSAL_DRIFT) {
+    const m = drift.exec(answer);
+    if (!m) continue;
+    return answer.slice(0, sentenceStart(answer, m.index)) + CANON + answer.slice(sentenceEnd(answer, m.index));
+  }
+  return answer;
+}
+
+export {
+  refusalAnswer,
+  canonicalRefusal
+};

package/dist/{chunk-WWNCWKKC.js → chunk-EHJEELVB.js}

@@ -1,7 +1,7 @@
 import {
   DATASETS,
   datasetAllowed
-} from "./chunk-WOGQM7DJ.js";
+} from "./chunk-OCNLV7Q7.js";
 
 // workers/worker_public/src/requestScope.ts
 function resolveRequestScope(body, member) {

package/dist/{chunk-WOGQM7DJ.js → chunk-OCNLV7Q7.js}

@@ -1,6 +1,6 @@
 import {
   P
-} from "./chunk-MB74PTRM.js";
+} from "./chunk-35ODH64W.js";
 
 // workers/worker_public/src/config.ts
 var MODELS = {
@@ -159,7 +159,7 @@ function datasetsFor(session) {
     label: d.label,
     description: d.description,
     enabled: datasetAllowed(d, session),
-    ...d.session ? { requires: `the ${d.permission ?? "ai-preview"} permission (id.oimlsmart.org)`, authenticated: !!session } : {}
+    ...d.session ? { requires: `the ${d.permission ?? "ai-preview"} permission (${P().publisher.identity.issuer.replace(/^https?:\/\//, "")})`, authenticated: !!session } : {}
   }));
 }
 function SUGGESTIONS() {

package/dist/chunk-ROF3Q7UC.js

@@ -0,0 +1,156 @@
+import {
+  LIMITS,
+  sha256Hex
+} from "./chunk-OCNLV7Q7.js";
+import {
+  P
+} from "./chunk-35ODH64W.js";
+
+// workers/worker_public/src/bubble.ts
+function isAllowedBubbleOrigin(origin) {
+  const d = P().publisher.domains;
+  const suffix = d.origin_suffix ?? (d.public ? d.public.replace(/^[^.]+\./, "") : null);
+  if (suffix) {
+    const host = origin.startsWith("https://") ? origin.slice("https://".length) : "";
+    const labels = host.split(".");
+    if (host === suffix) return true;
+    if (labels.length >= 3 && labels.slice(1).join(".") === suffix) return true;
+  }
+  if (/^http:\/\/localhost(:\d{1,5})?$/.test(origin)) return true;
+  if (/^http:\/\/127\.0\.0\.1(:\d{1,5})?$/.test(origin)) return true;
+  return false;
+}
+function escapeHtml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function bubbleConfirmPage(opts) {
+  const who = escapeHtml(opts.name);
+  const host = escapeHtml(new URL(opts.origin).host);
+  const jsSafe = (v) => JSON.stringify(v).replace(/</g, "\\u003c");
+  const payload = jsSafe({
+    type: P().publisher.session_cookie ?? `${P().publisher.id}-session`,
+    token: opts.token,
+    name: opts.name,
+    expiresAt: opts.expiresAt
+  });
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<meta name="robots" content="noindex" />
+<title>${P().publisher.product_name} \u2014 sign in</title>
+<style>
+  :root { color-scheme: light dark; }
+  body { font-family: ui-sans-serif, system-ui, sans-serif; margin: 0; padding: 2rem 1.25rem;
+         background: #faf6ee; color: #0a1628; line-height: 1.5; }
+  main { max-width: 26rem; margin: 0 auto; }
+  h1 { font-size: 1.15rem; margin: 0 0 0.75rem; }
+  p { margin: 0 0 1rem; font-size: 0.925rem; }
+  .who { font-weight: 600; }
+  .row { display: flex; gap: 0.75rem; margin-top: 1.25rem; }
+  button { flex: 1; min-height: 44px; font: inherit; font-weight: 600; border-radius: 6px; cursor: pointer; }
+  .go { background: #004996; color: #fff; border: 1px solid #004996; }
+  .no { background: transparent; color: inherit; border: 1px solid #ddd2bd; }
+  @media (prefers-color-scheme: dark) {
+    body { background: #0a1628; color: #f5efe4; }
+    .go { background: #89b4ef; color: #001230; border-color: #89b4ef; }
+    .no { border-color: #1f3357; }
+  }
+</style>
+</head>
+<body>
+<main>
+  <h1>Continue to the ${P().publisher.product_name} assistant?</h1>
+  <p>Signed in as <span class="who">${who}</span>. The page at <span class="who">${host}</span>
+     asked to connect the assistant to your account, so your conversations sync there.</p>
+  <p>The assistant can read the public corpus and your own assistant conversations \u2014 nothing else.</p>
+  <div class="row">
+    <button type="button" class="no" id="cancel">Cancel</button>
+    <button type="button" class="go" id="go">Continue</button>
+  </div>
+  <p id="done" hidden>You can close this window.</p>
+</main>
+<script>
+  var TARGET = ${jsSafe(opts.origin)};
+  var PAYLOAD = ${payload};
+  var done = document.getElementById("done");
+  document.getElementById("cancel").addEventListener("click", function () { window.close(); done.hidden = false; });
+  document.getElementById("go").addEventListener("click", function () {
+    if (window.opener) {
+      window.opener.postMessage(PAYLOAD, TARGET);
+      window.close();
+    }
+    done.hidden = false;
+  });
+  if (!window.opener) {
+    document.querySelector(".row").hidden = true;
+    document.querySelector("h1").textContent = "Signed in.";
+    done.hidden = false;
+  }
+</script>
+</body>
+</html>`;
+}
+
+// workers/worker_public/src/lib/http.ts
+var json = (body, status = 200, extra = {}) => new Response(JSON.stringify(body), {
+  status,
+  headers: { "content-type": "application/json", ...extra }
+});
+var err = (status, code, message) => json({ error: { code, message } }, status);
+function corsHeaders(req) {
+  const origin = req.headers.get("origin") ?? "";
+  const allowed = isAllowedBubbleOrigin(origin);
+  return allowed ? {
+    "access-control-allow-origin": origin,
+    // PATCH + DELETE: the conversations API speaks them (rename,
+    // delete) — the embedded panel preflights cross-origin.
+    "access-control-allow-methods": "GET, POST, PATCH, DELETE, OPTIONS",
+    "access-control-allow-headers": "authorization, content-type",
+    "access-control-max-age": "86400"
+  } : {};
+}
+function withCors(res, cors) {
+  if (!cors["access-control-allow-origin"]) return res;
+  const headers = new Headers(res.headers);
+  for (const [k, v] of Object.entries(cors)) headers.set(k, v);
+  return new Response(res.body, { status: res.status, statusText: res.statusText, headers });
+}
+async function authenticate(env, req) {
+  const auth = req.headers.get("authorization") ?? "";
+  const m = auth.match(/^Bearer\s+(.+)$/i);
+  if (!m) return null;
+  const keyHash = await sha256Hex(m[1].trim());
+  const row = await env.DB.prepare(
+    "SELECT id, name, day_limit FROM api_keys WHERE key_hash = ?1 AND revoked = 0"
+  ).bind(keyHash).first();
+  return row ?? null;
+}
+async function readJson(req) {
+  try {
+    const body = await req.json();
+    if (!body || typeof body !== "object") return null;
+    return body;
+  } catch {
+    return null;
+  }
+}
+function validateQuery(body) {
+  const query = typeof body?.query === "string" ? body.query.trim() : "";
+  if (!query || query.length > LIMITS.maxInputChars) return null;
+  const lang = typeof body?.lang === "string" && /^[a-z]{2}$/.test(body.lang) ? body.lang : void 0;
+  return { query, lang };
+}
+
+export {
+  isAllowedBubbleOrigin,
+  bubbleConfirmPage,
+  json,
+  err,
+  corsHeaders,
+  withCors,
+  authenticate,
+  readJson,
+  validateQuery
+};

package/dist/codecs.d.ts

@@ -0,0 +1,22 @@
+export interface DocScope {
+    doc_number: string;
+    edition?: string;
+    label: string;
+}
+export interface RefCodec {
+    /** The explicit form: "R 60-1:2021", "urn:…" — null when unparseable. */
+    parse(doc: string, edition?: string): DocScope | null;
+    /** The gap-tolerant scan over question text — null when nothing names a document. */
+    scanQuestion(query: string): DocScope | null;
+    /** The graph's node id → document number — null for other shapes. */
+    graphDocNumber(nodeId: string): string | null;
+    /** A docidentifier's family key ("R-60") for edition steering — null when not of the grammar. */
+    familyOf(docidentifier: string): string | null;
+}
+/** OIML's grammar: type letter (R/D/B/G/E) + 1–3 digits, optional part,
+ *  optional edition year; the URN provenance form; part numbers are
+ *  significant (R 60-1), the edition is never part of the number. */
+export declare const oimlPubid: RefCodec;
+/** The generic floor: the identifier is whatever string it is. */
+export declare const plainSlug: RefCodec;
+export declare function refCodec(): RefCodec;

package/dist/context.d.ts

@@ -50,15 +50,8 @@ export declare const NO_CONTEXT: AppliedContext;
  *  malformed degrades to null (no context), never to a 400 — a context
  *  the service can't parse is a context it must not apply. */
 export declare function parseContext(body: any): DeclaredContext | null;
-export interface DocScope {
-    /** the Vectorize doc_number filter value (the publication FAMILY —
-     *  an entity's clause provenance spans parts: R 60-1 requirements,
-     *  R 60-2 tests) */
-    doc_number: string;
-    edition?: string;
-    /** the canonical label form for the echo + the prompt note */
-    label: string;
-}
+import { type DocScope } from "./codecs.ts";
+export type { DocScope };
 /** Parse the two reference forms the estate speaks: the URN the SMART
  *  models carry as clause provenance (urn:oiml:pub:r:60-1:2021) and the
  *  plain docidentifier (OIML R 60-1:2021 / R 60). Part designations

package/dist/modelplane.d.ts

@@ -58,4 +58,4 @@ export declare function modelEcho(node: BoundModelNode): {
 };
 /** The per-corpus guidance note (config.ts's DATASETS pattern — every
  *  retrieved model-plane chunk carries it, chip or no chip). */
-export declare const MODEL_CORPUS_NOTE = "Some passages are the OIML SMART model plane (labeled OIML SMART model) \u2014 the platform's machine-readable Recommendation models derived from the Primmel packages. Treat their machine limits, applicability rules and acceptance criteria as the model's own statement of them (quote machine limits verbatim); where a model passage and a prose passage disagree, say so explicitly and cite both.";
+export declare function modelCorpusNote(): string;

package/dist/pipeline.d.ts

@@ -1,4 +1,11 @@
 export { refusalAnswer } from "./refusal";
+/** The interpolation source for every prompt: the profile's declared
+ *  vars plus the derived publisher tokens. Call sites never build
+ *  their own var map. */
+export declare function promptVars(extra?: Record<string, string>): Record<string, string>;
+/** Fill {{TOKEN}} placeholders in a prompt data file. Unknown/empty tokens
+ *  resolve to "" so optional lines vanish cleanly. */
+export declare function fill(template: string, vars: Record<string, string>): string;
 import { QueryFilters } from "./selfquery";
 import type { RetrieveOptions, GlossaryEntry } from "./stages/types";
 export type { ChunkMeta, Hit } from "../../shared/chunk";
@@ -50,7 +57,7 @@ export declare function citations(hits: Hit[]): {
     clause_title: string;
     status: string;
     superseded_by: string | undefined;
-    corpus: string;
+    corpus: any;
     url: string | undefined;
     snippet: string;
     score: number;

package/dist/profile.gen.d.ts

@@ -7,11 +7,20 @@ export declare const PROFILE: {
         readonly description: "A minimal publisher profile exercising every declared surface: an open dataset, a permission-gated dataset, production and lane corpora, prompt vars and retrieval vocabulary.";
         readonly domains: {
             readonly public: "fixture.example.org";
+            readonly origin_suffix: "fixture.example.org";
         };
         readonly identity: {
             readonly issuer: "https://id.fixture.example.org";
         };
         readonly codec: "plain-slug";
+        readonly session_cookie: "fixture-session";
+        readonly references: {
+            readonly label_prefix: "";
+        };
+        readonly features: {
+            readonly drafts: false;
+            readonly model_plane: false;
+        };
     };
     readonly datasets: readonly [{
         readonly id: "pub";
@@ -60,11 +69,21 @@ export declare const PROFILE: {
     };
     readonly retrieval: {
         readonly process_expansion: " fixture certification system framework application evaluation";
+        readonly process_note: "Retrieval note: these passages come from the fixture certification system documents because they govern application procedures for fixture publications.";
     };
     readonly prompts: {
         readonly vars: {
             readonly assistant_identity: "the fixture assistant — a public service answering questions about the fixture publisher's documents";
             readonly refusal_sentence: "I don't have information on this in the indexed fixture documents.";
+            readonly account_note_source: "the user's own fixture account";
+            readonly corpus_kind: "a fixture corpus publication";
+            readonly corpus_kind_plural: "fixture corpus publications";
+            readonly cite_example: "FIXTURE 1:2024 §2.1";
+            readonly cite_quote_example: "FIXTURE 1:2024 §2.1: \"the limit shall not exceed one interval\"";
+            readonly parts_example: "FIXTURE 1-1, FIXTURE 1-A";
+            readonly docid_example: "FIXTURE 1-2";
+            readonly spelling_examples: "\"f1\", \"FIXTURE 1\"";
+            readonly process_vocab: "the fixture certification system framework";
         };
     };
 };

package/dist/profile2.gen.d.ts

@@ -0,0 +1,89 @@
+export declare const PROFILE: {
+    readonly publisher: {
+        readonly id: "atlas";
+        readonly name: "Atlas";
+        readonly full_name: "The Atlas Standards Institute";
+        readonly product_name: "Atlas Answers";
+        readonly description: "The second fixture publisher of the reference matrix: a technical-standards institute issuing specifications and errata, with a working-group corpus behind a session permission.";
+        readonly domains: {
+            readonly public: "answers.atlas.example";
+            readonly origin_suffix: "atlas.example";
+        };
+        readonly identity: {
+            readonly issuer: "https://identity.atlas.example";
+        };
+        readonly codec: "plain-slug";
+        readonly session_cookie: "atlas-session";
+        readonly references: {
+            readonly label_prefix: "ATLAS";
+        };
+        readonly production: readonly ["spec", "errata", "model"];
+        readonly lanes: {
+            readonly review: readonly ["review"];
+            readonly glossary: readonly ["glossary"];
+        };
+        readonly features: {
+            readonly drafts: false;
+            readonly model_plane: false;
+        };
+    };
+    readonly datasets: readonly [{
+        readonly id: "spec";
+        readonly label: "Atlas Specifications";
+        readonly description: "The institute's published specifications and errata";
+        readonly corpora: readonly ["spec", "errata"];
+        readonly note: "Some passages come from the Atlas errata corpus — cite them the same way as every other passage.";
+    }, {
+        readonly id: "wg";
+        readonly label: "Working-group corpus";
+        readonly description: "An access-restricted corpus proving the permission gate";
+        readonly session: true;
+        readonly permission: "committee";
+        readonly corpora: readonly ["wg"];
+    }];
+    readonly corpora: {
+        readonly production: readonly ["spec", "errata", "model"];
+        readonly lanes: {
+            readonly review: readonly ["review"];
+            readonly glossary: readonly ["glossary"];
+        };
+        readonly corpora: {
+            readonly spec: {
+                readonly repo: "fixtures/matrix2";
+                readonly note: "the second fixture corpus";
+            };
+        };
+        readonly bibliography: {};
+        readonly terminology: {};
+        readonly models: {};
+    };
+    readonly sources: {
+        readonly corpora: {};
+        readonly bibliography: {};
+        readonly terminology: {};
+        readonly models: {};
+    };
+    readonly ui: {
+        readonly suggestions: readonly ["What does ATLAS 12 specify?", "Which errata are open?"];
+        readonly models_disclosure: readonly [{
+            readonly role: "Answers";
+            readonly model: "atlas-answer-model";
+        }];
+        readonly smoke: readonly [{
+            readonly label: "sanity";
+            readonly query: "What does ATLAS 12 specify?";
+            readonly expect: "ATLAS";
+        }];
+    };
+    readonly retrieval: {
+        readonly process_expansion: " atlas review procedure errata committee specification";
+        readonly process_note: "Retrieval note: these passages come from the Atlas review-procedure documents because they govern the institute's publication process.";
+    };
+    readonly prompts: {
+        readonly vars: {
+            readonly assistant_identity: "the Atlas Answers assistant — a public service answering questions about the Atlas Standards Institute's specifications";
+            readonly refusal_sentence: "I don't have information on this in the indexed Atlas specifications.";
+            readonly account_note_source: "the user's own Atlas Answers account";
+        };
+    };
+};

package/dist/prompts/conversational.md

@@ -1,4 +1,4 @@
-You are the OIML SMART AI assistant at ai.oimlsmart.org, a public service answering questions about OIML legal-metrology publications.
+You are {{ASSISTANT_IDENTITY}}.
 This turn is conversational — about you, this service, a greeting or small talk — NOT a knowledge question, so there are no context passages.
 Answer naturally in first person, briefly and warmly, in the language of the user's message. Do not cite sources for this turn and never refuse it.
 Facts about this service you may speak from:

package/dist/prompts/enrichment.md

@@ -1,3 +1,3 @@
-You write a retrieval context for a passage from an OIML legal-metrology publication. The context is prepended to the passage before embedding so a semantic search can locate the passage even when the query uses different vocabulary than the passage itself.
+You write a retrieval context for a passage from {{CORPUS_KIND}}. The context is prepended to the passage before embedding so a semantic search can locate the passage even when the query uses different vocabulary than the passage itself.
 
-Write ONE concise sentence (at most 40 words) that situates the passage: name the publication by its exact OIML identifier (including part or annex when applicable) and what the passage covers — paraphrasing the topic in words DIFFERENT from the passage's own. Do not copy the passage verbatim, do not add facts that are not derivable from the passage or its header, do not answer or explain the content. Reply with the context sentence only — no quotes, no preamble.
+Write ONE concise sentence (at most 40 words) that situates the passage: name the publication by its exact {{PUBLISHER_NAME}} identifier (including part or annex when applicable) and what the passage covers — paraphrasing the topic in words DIFFERENT from the passage's own. Do not copy the passage verbatim, do not add facts that are not derivable from the passage or its header, do not answer or explain the content. Reply with the context sentence only — no quotes, no preamble.

package/dist/prompts/precision.md

@@ -1 +1 @@
-You judge CONTEXT PRECISION for a retrieval system over OIML publications. Given the question and the ranked passages (in the order they were presented), score the fraction of passages that contain material USEFUL for answering the question: 1.0 = all useful; 0.5 = half; 0.0 = none. Judge each passage on its own content, not its rank. Reply with ONLY: {"score": 0.0-1.0}
+You judge CONTEXT PRECISION for a retrieval system over {{PUBLISHER_NAME}} publications. Given the question and the ranked passages (in the order they were presented), score the fraction of passages that contain material USEFUL for answering the question: 1.0 = all useful; 0.5 = half; 0.0 = none. Judge each passage on its own content, not its rank. Reply with ONLY: {"score": 0.0-1.0}

package/dist/prompts/research.md

@@ -1,4 +1,4 @@
-You are a sufficiency judge for a research loop over OIML publications. Given the research question and the passages collected so far (across iterations), decide whether the collected evidence is SUFFICIENT to write a complete, well-grounded answer.
+You are a sufficiency judge for a research loop over {{PUBLISHER_NAME}} publications. Given the research question and the passages collected so far (across iterations), decide whether the collected evidence is SUFFICIENT to write a complete, well-grounded answer.
 
 Reply with ONLY a JSON object:
 {"sufficient": true|false, "missing": "short description of what is still missing (empty string when sufficient)"}