@konneal/engine 0.2.18 → 0.2.20

package/dist/ask-36JS3555.js

@@ -0,0 +1,12 @@
+import {
+  handleAsk
+} from "./chunk-EE6V6X6D.js";
+import "./chunk-DGFJUA2C.js";
+import "./chunk-BV7IKH3N.js";
+import "./chunk-FNJ457SE.js";
+import "./chunk-COKARI7O.js";
+import "./chunk-RESCBSX6.js";
+import "./chunk-YTWPZE5O.js";
+export {
+  handleAsk
+};

package/dist/boundary.d.ts

@@ -0,0 +1,17 @@
+export interface LicensedEntry {
+    key: string;
+    package?: string;
+    doc_number?: string;
+    title?: string;
+}
+export interface LicensedMatch {
+    entry: LicensedEntry;
+    matched: string[];
+}
+export declare function distinctiveTokens(title: string): string[];
+/** The licensed entry whose distinctive title tokens best match the
+ *  question. Needs TWO token hits (or one hyphenated-compound hit) —
+ *  a single shared word is not a topic match. */
+export declare function matchLicensedTopic(query: string, licensed: LicensedEntry[]): LicensedMatch | null;
+/** The note text: the posture instruction for an unentitled match. */
+export declare function boundaryNoteText(match: LicensedMatch, citing: string[]): string;

package/dist/{chunk-EFQALN2Z.js → chunk-BV7IKH3N.js}

@@ -1,10 +1,10 @@
 import {
   LIMITS,
   sha256Hex
-} from "./chunk-ADXV2DPK.js";
+} from "./chunk-RESCBSX6.js";
 import {
   P
-} from "./chunk-TJRTVJW5.js";
+} from "./chunk-YTWPZE5O.js";
 
 // workers/worker_public/src/bubble.ts
 function isAllowedBubbleOrigin(origin) {

package/dist/{chunk-5MBWE7WD.js → chunk-COKARI7O.js}

@@ -1,10 +1,10 @@
 import {
   DATASETS,
   datasetAllowed
-} from "./chunk-ADXV2DPK.js";
+} from "./chunk-RESCBSX6.js";
 import {
   P
-} from "./chunk-TJRTVJW5.js";
+} from "./chunk-YTWPZE5O.js";
 
 // workers/worker_public/src/requestScope.ts
 function licenseDeclared() {

package/dist/{chunk-7UT76RQO.js → chunk-DGFJUA2C.js}

@@ -1,7 +1,7 @@
 import {
   bubbleConfirmPage,
   isAllowedBubbleOrigin
-} from "./chunk-EFQALN2Z.js";
+} from "./chunk-BV7IKH3N.js";
 import {
   DATASETS,
   LIMITS,
@@ -12,12 +12,12 @@ import {
   processExpansion,
   sha256Hex,
   today
-} from "./chunk-ADXV2DPK.js";
+} from "./chunk-RESCBSX6.js";
 import {
   P,
   __commonJS,
   __toESM
-} from "./chunk-TJRTVJW5.js";
+} from "./chunk-YTWPZE5O.js";
 
 // node_modules/@oimlsmart/oiml-pubid/dist/index.js
 var require_dist = __commonJS({
@@ -1939,7 +1939,8 @@ ${context}` }
   };
 }
 function publicationUrl(meta) {
-  if (meta.corpus && !["oiml", "dirty", "clean"].includes(meta.corpus)) return void 0;
+  const ownCorpora = P().publisher.catalog_corpora;
+  if (meta.corpus && ownCorpora && !ownCorpora.includes(meta.corpus)) return void 0;
   const tpl = P().publisher.catalog_url_template;
   if (!tpl || !meta.doctype || !meta.doc_number) return void 0;
   return tpl.replace("{type}", meta.doctype.toLowerCase()) + meta.doc_number;
@@ -2032,9 +2033,9 @@ async function sha256Hex2(s) {
 function liveDataConfig(env) {
   const platformApi = (env.SMART_PLATFORM_API ?? "").trim().replace(/\/$/, "");
   const platformClientId = (env.SMART_PLATFORM_CLIENT_ID ?? "").trim();
-  const issuer = (env.OIDC_ISSUER ?? "https://id.oimlsmart.org").trim().replace(/\/$/, "");
+  const issuer = (env.OIDC_ISSUER ?? "").trim().replace(/\/$/, "");
   const clientId = (env.OIDC_CLIENT_ID ?? "").trim();
-  if (!platformApi || !platformClientId || !clientId) return null;
+  if (!platformApi || !platformClientId || !clientId || !issuer) return null;
   return { platformApi, platformClientId, issuer, clientId, clientSecret: env.OIDC_CLIENT_SECRET };
 }
 var SUBJECT_KEY = (sessionHash) => `opat:${sessionHash}`;
@@ -2444,7 +2445,7 @@ function authErrorText(reason) {
   return PLAIN_LANGUAGE[reason] ?? "Sign-in failed. Please try again.";
 }
 function authConfig(env) {
-  const issuer = env.OIDC_ISSUER ?? "https://id.oimlsmart.org";
+  const issuer = (env.OIDC_ISSUER ?? "").trim().replace(/\/$/, "");
   const clientId = env.OIDC_CLIENT_ID;
   const redirectUri = env.OIDC_REDIRECT_URI ?? "https://ai.oimlsmart.org/auth/callback";
   const sessionSecret = env.SESSION_SECRET;

package/dist/{chunk-PBXE2LFD.js → chunk-EE6V6X6D.js}

@@ -27,23 +27,23 @@ import {
   syntheticUnderstanding,
   telemetry,
   understandQuery
-} from "./chunk-7UT76RQO.js";
+} from "./chunk-DGFJUA2C.js";
 import {
   corsHeaders,
   err,
   json,
   readJson,
   validateQuery
-} from "./chunk-EFQALN2Z.js";
+} from "./chunk-BV7IKH3N.js";
 import {
   canonicalRefusal,
   refusalAnswer
-} from "./chunk-DBBGOOMZ.js";
+} from "./chunk-FNJ457SE.js";
 import {
   entitlementScope,
   requestSalt,
   resolveRequestScope
-} from "./chunk-5MBWE7WD.js";
+} from "./chunk-COKARI7O.js";
 import {
   LIMITS,
   MODELS,
@@ -53,10 +53,10 @@ import {
   requestEffort,
   roleModel,
   sha256Hex
-} from "./chunk-ADXV2DPK.js";
+} from "./chunk-RESCBSX6.js";
 import {
   P
-} from "./chunk-TJRTVJW5.js";
+} from "./chunk-YTWPZE5O.js";
 
 // workers/worker_public/src/internal_gateway.ts
 async function retrieveInternal(service, auth, query) {
@@ -883,9 +883,10 @@ function classToken(query) {
   return m ? m[1].toLowerCase() : null;
 }
 function classAsColumn(cols, token) {
-  const exact = cols.find((c) => /^class_[a-z0-9.]+$/.test(c.name) && c.name.slice(6) === token);
+  const classCols = cols.filter((c) => /^class_[a-z0-9.]+$/.test(c.name));
+  const exact = classCols.find((c) => c.name.slice(6) === token);
   if (exact) return exact;
-  return cols.find((c) => /^class_[a-z0-9.]+$/.test(c.name) && c.name.slice(6) === "cd" && (token === "c" || token === "d"));
+  return classCols.find((c) => c.name.slice(6).startsWith(token));
 }
 function numericColumns(cols) {
   return cols.filter((c) => c.type === "number" || c.type === "integer" || /^class_[a-z0-9.]+$/.test(c.name));
@@ -1074,9 +1075,57 @@ function evaluateAggregation(nodes, query) {
   return null;
 }
 
+// workers/worker_public/src/boundary.ts
+var TITLE_STOPWORDS = /* @__PURE__ */ new Set([
+  "environmental",
+  "testing",
+  "test",
+  "tests",
+  "guidance",
+  "generic",
+  "standards",
+  "standard",
+  "electromagnetic",
+  "compatibility",
+  "environment",
+  "description",
+  "measurement",
+  "techniques",
+  "immunity",
+  "residential",
+  "commercial",
+  "industrial",
+  "environments",
+  "and",
+  "for",
+  "the",
+  "iec",
+  "iso"
+]);
+function distinctiveTokens(title) {
+  return title.toLowerCase().split(/[^a-z0-9.]+/).filter((w) => w.length >= 3 && !TITLE_STOPWORDS.has(w) && !/^[0-9:-]+$/.test(w));
+}
+function matchLicensedTopic(query, licensed) {
+  const words = new Set(query.toLowerCase().split(/[^a-z0-9.]+/).filter(Boolean));
+  let best = null;
+  for (const entry of licensed) {
+    if (!entry.title) continue;
+    const matched = distinctiveTokens(entry.title).filter((w) => words.has(w));
+    if (matched.length < 2) continue;
+    if (!best || matched.length > best.matched.length) best = { entry, matched };
+  }
+  return best;
+}
+function boundaryNoteText(match, citing) {
+  const doc = match.entry.doc_number ?? match.entry.key;
+  const title = match.entry.title ?? doc;
+  const refs = citing.length ? `The public corpus references it from ${citing.join(", ")}.` : "";
+  return `LICENSED BOUNDARY \u2014 ${title} (IEC ${doc}) is licensed content in this deployment; its procedure is NOT part of the public corpus you are grounded in. ${refs} When answering: name the licensed document as the authoritative source of the procedure and say it is available to entitled callers. Do NOT state its conditioning or severity parameters in ANY form \u2014 no temperatures, humidity levels, durations or cycle counts, not even as a single bound or as a value another publication repeats or cites; keep the description structural (expose, condition, recover) and let the licensed document own the numbers. If the grounding passages state parameter values, say only that the publications describe their own requirements and that the procedure's parameters are in the licensed document.`;
+}
+
 // workers/worker_public/src/drafts.ts
 var ACT_VERB = "(?:draft|prepare|pre-?fill|fill\\s+(?:in|out)|start|submit|file|lodge)";
-var ACT_TARGET = "(?:new\\s+)?(?:certification\\s+|type[ -]evaluation\\s+|OIML[- ]CS\\s+)?application";
+var ACT_TARGET = "(?:new\\s+)?(?:certification\\s+|type[ -]evaluation\\s+)?application";
 var INTENT_RES = [
   new RegExp(`\\b${ACT_VERB}\\b[\\s\\S]{0,60}?\\b${ACT_TARGET}\\b`, "i"),
   new RegExp(`\\b${ACT_TARGET}\\b[\\s\\S]{0,30}?\\b(?:draft|prepare|pre-?fill|for me)\\b`, "i")
@@ -1101,18 +1150,18 @@ function roleLabel(role) {
   if (["cs_admin", "admin"].includes(role)) return "a scheme administrator";
   return `the "${role}" role`;
 }
-var EXTRACTION_SYSTEM = `You extract the fields of a new OIML certification application from the user's own messages.
+var EXTRACTION_SYSTEM = `You extract the fields of a new certification application from the user's own messages.
 
 Rules:
 - Output ONLY a JSON object \u2014 no prose, no code fence.
 - Copy every value from the user's own words, and for each field give "source": the exact contiguous span of the user's message you copied it from.
 - NEVER infer, complete, normalize away, or guess a value. If the user did not state it, omit the field entirely.
-- "standard": the Recommendation the user named (e.g. "R 60" or "OIML R 60:2021") \u2014 a plain string, or omit when none was named.
+- "standard": the publication the user named (e.g. "AB 99" or "ACME AB 99:2019") \u2014 a plain string, or omit when none was named.
 - "scheme": only when the user named scheme A or scheme B explicitly.
 
 Schema (every field optional):
 {
-  "standard": "R 60",
+  "standard": "AB 99",
   "family_designation": { "value": "\u2026", "source": "\u2026" },
   "group_label": { "value": "\u2026", "source": "\u2026" },
   "model_designation": { "value": "\u2026", "source": "\u2026" },
@@ -1275,14 +1324,14 @@ async function prepareDraft(env, opts) {
     const untraced = dropped.find((d) => d.field === "standard");
     return refusal(
       "standard_unresolved",
-      untraced ? `I can't anchor the draft: you haven't named the Recommendation in your own words (the ${untraced.value} reading isn't yours). Name it plainly \u2014 for example OIML R 60 \u2014 and I'll prepare the draft.` : "I can't anchor the draft: you haven't named the Recommendation. Name it plainly \u2014 for example OIML R 60 \u2014 and I'll prepare it."
+      untraced ? `I can't anchor the draft: you haven't named the Recommendation in your own words (the ${untraced.value} reading isn't yours). Name it plainly \u2014 for example ACME AB 99 \u2014 and I'll prepare the draft.` : "I can't anchor the draft: you haven't named the publication. Name it plainly \u2014 for example ACME AB 99 \u2014 and I'll prepare it."
     );
   }
   const standard = await resolveStandard(env, kept.standard);
   if (!standard) {
     return refusal(
       "standard_unresolved",
-      `I couldn't resolve ${kept.standard} as a publication in the corpus, so I can't anchor the draft. Name the Recommendation plainly \u2014 for example OIML R 60 \u2014 and I'll prepare it.`
+      `I couldn't resolve ${kept.standard} as a publication in the corpus, so I can't anchor the draft. Name the publication plainly \u2014 for example ACME AB 99 \u2014 and I'll prepare it.`
     );
   }
   const fields = {
@@ -1904,7 +1953,7 @@ ${summary}` }] : [],
   const verdictBlock = machineVerdict ? {
     unit_id: boundModel.node_id,
     type: "verdict",
-    docidentifier: `${P().publisher.name} SMART model (${boundModel.standard})`,
+    docidentifier: `${P().publisher.name} model (${boundModel.standard})`,
     payload: {
       verdict: machineVerdict.verdict,
       on_violation: machineVerdict.on_violation,
@@ -1917,7 +1966,7 @@ ${summary}` }] : [],
   const conditionBlock = conditionVerdict ? {
     unit_id: conditionVerdict.matched[0] ?? conditionVerdict.nearest.node_id,
     type: "verdict",
-    docidentifier: `IEC SMART model (${conditionStandard})`,
+    docidentifier: `${P().publisher.name} model (${conditionStandard})`,
     payload: {
       verdict: conditionVerdict.verdict,
       missing: [],
@@ -1952,7 +2001,7 @@ ${summary}` }] : [],
   const aggregationBlock = aggregationVerdict ? {
     unit_id: aggregationVerdict.table,
     type: "verdict",
-    docidentifier: `SMART model table${aggregationStandard ? ` (${aggregationStandard})` : ""}`,
+    docidentifier: `${P().publisher.name} model table${aggregationStandard ? ` (${aggregationStandard})` : ""}`,
     payload: {
       check: `${aggregationVerdict.operation}: ${aggregationVerdict.column ?? aggregationVerdict.table_title ?? aggregationVerdict.table} = ${aggregationVerdict.value}${aggregationVerdict.unit ? ` ${aggregationVerdict.unit}` : ""}`,
       meaning: aggregationVerdict.table_title,
@@ -1963,6 +2012,21 @@ ${summary}` }] : [],
     }
   } : null;
   if (aggregationVerdict) console.log("aggregation engine:", aggregationVerdict.operation, aggregationVerdict.table, "\u2192", aggregationVerdict.value);
+  let boundaryNote = null;
+  if (P().sources?.licensed?.length) {
+    const match = matchLicensedTopic(q.query, P().sources.licensed);
+    if (match && !(standardKeys?.has(match.entry.key) ?? false)) {
+      const docNum = match.entry.doc_number ?? "";
+      let citing = [];
+      if (docNum) {
+        const rows = await env.DB.prepare(
+          "SELECT n.label AS label FROM graph_edges e JOIN graph_nodes n ON e.src = n.id WHERE e.kind = 'cites' AND e.dst LIKE ?1 LIMIT 4"
+        ).bind(`%${docNum}%`).all().catch(() => ({ results: [] }));
+        citing = (rows.results ?? []).map((r) => String(r.label ?? "").replace(/^doc:/, ""));
+      }
+      boundaryNote = boundaryNoteText(match, citing);
+    }
+  }
   try {
     const tR = Date.now();
     if (declaredCtx?.kind === "account") {
@@ -2056,7 +2120,7 @@ Answer account questions from these records ONLY: name the record when you use i
     q.lang,
     keptHistory,
     // stage-extracted graph facts (GraphRAG) ride the same note channel
-    [processNote, eNote, contextNote(declaredCtx, docScope), accountNote, modelNote, vocabNote, memNote, machineNote, conditionNote, aggregationNote, licenseNote, ...retrieved.notes ?? []].filter(Boolean).join("\n") || void 0,
+    [processNote, eNote, contextNote(declaredCtx, docScope), accountNote, modelNote, vocabNote, memNote, machineNote, conditionNote, aggregationNote, boundaryNote, licenseNote, ...retrieved.notes ?? []].filter(Boolean).join("\n") || void 0,
     summary,
     budget
   );

package/dist/{chunk-DBBGOOMZ.js → chunk-FNJ457SE.js}

@@ -1,6 +1,6 @@
 import {
   P
-} from "./chunk-TJRTVJW5.js";
+} from "./chunk-YTWPZE5O.js";
 
 // workers/worker_public/src/refusal.ts
 function refusalAnswer() {

package/dist/{chunk-ADXV2DPK.js → chunk-RESCBSX6.js}

@@ -1,6 +1,6 @@
 import {
   P
-} from "./chunk-TJRTVJW5.js";
+} from "./chunk-YTWPZE5O.js";
 
 // workers/worker_public/src/config.ts
 var MODELS = {

package/dist/{chunk-YFDWKXEB.js → chunk-SLZ4TZNO.js}

@@ -7,24 +7,24 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "./chunk-7UT76RQO.js";
+} from "./chunk-DGFJUA2C.js";
 import {
   corsHeaders,
   err,
   json,
   readJson,
   validateQuery
-} from "./chunk-EFQALN2Z.js";
+} from "./chunk-BV7IKH3N.js";
 import {
   entitlementScope,
   standardKeysFrom
-} from "./chunk-5MBWE7WD.js";
+} from "./chunk-COKARI7O.js";
 import {
   LIMITS,
   MODELS,
   num,
   sha256Hex
-} from "./chunk-ADXV2DPK.js";
+} from "./chunk-RESCBSX6.js";
 
 // workers/worker_public/src/search.ts
 async function handleSearch(env, ctx, req, tier, key) {

package/dist/{chunk-TJRTVJW5.js → chunk-YTWPZE5O.js}

@@ -48,6 +48,12 @@ var PROFILE = {
     "references": {
       "label_prefix": ""
     },
+    "catalog_url_template": "https://catalog.fixture.example.org/{type}",
+    "catalog_corpora": [
+      "pub",
+      "dirty",
+      "clean"
+    ],
     "features": {
       "drafts": false,
       "model_plane": false
@@ -109,11 +115,11 @@ var PROFILE = {
     "models": {},
     "licensed": [
       {
-        "key": "std:fixture-60068-2-30",
-        "package": "fixture-60068-2-30",
-        "doc_number": "60068-2-30",
-        "title": "FIXTURE environmental testing \u2014 damp heat, cyclic",
-        "edition": "2005"
+        "key": "std:fixture-ab-99",
+        "package": "fixture-ab-99",
+        "doc_number": "ab-99",
+        "title": "FIXTURE climatic conditioning, cyclic humidity",
+        "edition": "2019"
       }
     ]
   },

package/dist/drafts.d.ts

@@ -5,7 +5,7 @@ export interface DraftSample {
 export interface ApplicationPrefillFields {
     /** the Recommendation, as the estate URN (urn:oiml:pub:r:60:2021) */
     standard_doc: string;
-    /** display label ("OIML R 60:2021") */
+    /** display label ("ACME AB 99:2019") */
     standard_label?: string;
     family_designation?: string;
     group_label?: string;

package/dist/profile.gen.d.ts

@@ -17,6 +17,8 @@ export declare const PROFILE: {
         readonly references: {
             readonly label_prefix: "";
         };
+        readonly catalog_url_template: "https://catalog.fixture.example.org/{type}";
+        readonly catalog_corpora: readonly ["pub", "dirty", "clean"];
         readonly features: {
             readonly drafts: false;
             readonly model_plane: false;
@@ -55,11 +57,11 @@ export declare const PROFILE: {
         readonly terminology: {};
         readonly models: {};
         readonly licensed: readonly [{
-            readonly key: "std:fixture-60068-2-30";
-            readonly package: "fixture-60068-2-30";
-            readonly doc_number: "60068-2-30";
-            readonly title: "FIXTURE environmental testing — damp heat, cyclic";
-            readonly edition: "2005";
+            readonly key: "std:fixture-ab-99";
+            readonly package: "fixture-ab-99";
+            readonly doc_number: "ab-99";
+            readonly title: "FIXTURE climatic conditioning, cyclic humidity";
+            readonly edition: "2019";
         }];
     };
     readonly ui: {

package/dist/profile2.gen.d.ts

@@ -22,6 +22,8 @@ export declare const PROFILE: {
             readonly review: readonly ["review"];
             readonly glossary: readonly ["glossary"];
         };
+        readonly catalog_url_template: "https://catalog.atlas.example/{type}";
+        readonly catalog_corpora: readonly ["spec"];
         readonly features: {
             readonly drafts: false;
             readonly model_plane: false;

package/dist/search-YA6TD6QJ.js

@@ -0,0 +1,12 @@
+import {
+  handleSearch
+} from "./chunk-SLZ4TZNO.js";
+import "./chunk-DGFJUA2C.js";
+import "./chunk-BV7IKH3N.js";
+import "./chunk-FNJ457SE.js";
+import "./chunk-COKARI7O.js";
+import "./chunk-RESCBSX6.js";
+import "./chunk-YTWPZE5O.js";
+export {
+  handleSearch
+};

package/dist/worker_mcp/src/index.js

@@ -1,11 +1,11 @@
 import {
   authenticate
-} from "../../chunk-EFQALN2Z.js";
-import "../../chunk-ADXV2DPK.js";
+} from "../../chunk-BV7IKH3N.js";
+import "../../chunk-RESCBSX6.js";
 import {
   P,
   setProfile
-} from "../../chunk-TJRTVJW5.js";
+} from "../../chunk-YTWPZE5O.js";
 
 // workers/worker_mcp/src/index.ts
 var PROTOCOL_VERSION = "2025-06-18";

package/dist/worker_public/src/config.js

@@ -16,8 +16,8 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-ADXV2DPK.js";
-import "../../chunk-TJRTVJW5.js";
+} from "../../chunk-RESCBSX6.js";
+import "../../chunk-YTWPZE5O.js";
 export {
   DATASETS,
   LIMITS,

package/dist/worker_public/src/index.js

@@ -1,13 +1,13 @@
 import {
   handleSearch
-} from "../../chunk-YFDWKXEB.js";
+} from "../../chunk-SLZ4TZNO.js";
 import {
   checkQuoteAnchors,
   handleAsk,
   handleMemories,
   scoreJudge,
   standardForDocNumber
-} from "../../chunk-PBXE2LFD.js";
+} from "../../chunk-EE6V6X6D.js";
 import {
   buildMessages,
   citations,
@@ -29,7 +29,7 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "../../chunk-7UT76RQO.js";
+} from "../../chunk-DGFJUA2C.js";
 import {
   authenticate,
   corsHeaders,
@@ -38,14 +38,14 @@ import {
   readJson,
   validateQuery,
   withCors
-} from "../../chunk-EFQALN2Z.js";
+} from "../../chunk-BV7IKH3N.js";
 import {
   canonicalRefusal
-} from "../../chunk-DBBGOOMZ.js";
+} from "../../chunk-FNJ457SE.js";
 import {
   entitlementScope,
   standardKeysFrom
-} from "../../chunk-5MBWE7WD.js";
+} from "../../chunk-COKARI7O.js";
 import {
   LIMITS,
   MODELS,
@@ -56,11 +56,11 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-ADXV2DPK.js";
+} from "../../chunk-RESCBSX6.js";
 import {
   P,
   setProfile
-} from "../../chunk-TJRTVJW5.js";
+} from "../../chunk-YTWPZE5O.js";
 
 // workers/worker_public/src/conversations.ts
 var ID_RE = /^[a-zA-Z0-9_-]{8,64}$/;
@@ -979,7 +979,7 @@ async function handleMcp(env, ctx, req, tier, key) {
       // stream:false forces the JSON lane (anon defaults to SSE)
       body: JSON.stringify({ ...args, stream: false })
     });
-    const res = name === "ask" ? await (await import("../../ask-4O753Y4T.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-RFKT7ZZY.js")).handleSearch(env, ctx, inner, tier, key);
+    const res = name === "ask" ? await (await import("../../ask-36JS3555.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-YA6TD6QJ.js")).handleSearch(env, ctx, inner, tier, key);
     return res.json().catch(() => ({ error: { message: "tool transport failed", status: res.status } }));
   });
   if (out.ok && "accepted" in out) return new Response(null, { status: 202 });
@@ -1404,7 +1404,7 @@ async function absenceRoute(c) {
   const namedStd = namedDocumentIn(String(body?.standard ?? ""));
   const standard = standardForDocNumber(namedStd?.doc_number ?? String(body?.standard ?? "").trim());
   const topic = String(body?.topic ?? "").trim().toLowerCase();
-  if (!standard || !topic) return err(400, "invalid_input", 'standard (e.g. "R 60") and topic are required');
+  if (!standard || !topic) return err(400, "invalid_input", "standard and topic are required");
   try {
     const nodes = (await env.DB.prepare("SELECT node_id, kind, name, content FROM model_nodes WHERE standard = ?1").bind(standard).all()).results ?? [];
     const tokens = topic.split(/\s+/).filter((t2) => t2.length > 2);

package/dist/worker_public/src/profile.js

@@ -1,7 +1,7 @@
 import {
   P,
   setProfile
-} from "../../chunk-TJRTVJW5.js";
+} from "../../chunk-YTWPZE5O.js";
 export {
   P,
   setProfile

package/dist/worker_public/src/refusal.js

@@ -1,8 +1,8 @@
 import {
   canonicalRefusal,
   refusalAnswer
-} from "../../chunk-DBBGOOMZ.js";
-import "../../chunk-TJRTVJW5.js";
+} from "../../chunk-FNJ457SE.js";
+import "../../chunk-YTWPZE5O.js";
 export {
   canonicalRefusal,
   refusalAnswer

package/dist/worker_public/src/requestScope.js

@@ -4,9 +4,9 @@ import {
   requestSalt,
   resolveRequestScope,
   standardKeysFrom
-} from "../../chunk-5MBWE7WD.js";
-import "../../chunk-ADXV2DPK.js";
-import "../../chunk-TJRTVJW5.js";
+} from "../../chunk-COKARI7O.js";
+import "../../chunk-RESCBSX6.js";
+import "../../chunk-YTWPZE5O.js";
 export {
   entitlementScope,
   licenseDeclared,

package/package.json

@@ -34,7 +34,7 @@
     "@oimlsmart/oiml-pubid": "^1.2.1"
   },
   "dependencies": {},
-  "version": "0.2.18",
+  "version": "0.2.20",
   "description": "The Konneal engine: the publisher-agnostic build pipeline and API plane for standards intelligence (retrieval, answer contract, verdicts, evaluation).",
   "license": "BSD-3-Clause",
   "type": "module",

package/profile/publisher.yaml

@@ -19,6 +19,10 @@ codec: plain-slug
 session_cookie: fixture-session
 references:
   label_prefix: ""
+# the publisher's catalog page ({type} = lowercase doctype) and the
+# corpora the catalog covers (foreign-corpus chunks get no catalog link)
+catalog_url_template: "https://catalog.fixture.example.org/{type}"
+catalog_corpora: [pub, dirty, clean]
 # engine features this deployment switches on (default: off — the
 # engine serves every publisher without them)
 features:

package/profile/sources.yaml

@@ -11,4 +11,4 @@ models: {}
 # Absent or empty = the deployment serves public content only. The
 # fixture declares one so the license scope rides every engine test.
 licensed:
-  - { key: "std:fixture-60068-2-30", package: "fixture-60068-2-30", doc_number: "60068-2-30", title: "FIXTURE environmental testing — damp heat, cyclic", edition: "2005" }
+  - { key: "std:fixture-ab-99", package: "fixture-ab-99", doc_number: "ab-99", title: "FIXTURE climatic conditioning, cyclic humidity", edition: "2019" }

package/workers/worker_public/src/aggregation.ts

@@ -73,13 +73,14 @@ function classToken(query: string): string | null {
   return m ? m[1]!.toLowerCase() : null;
 }
 
-/** The class columns shaped `class_a` / `class_cd` — classes as COLUMNS
- *  (R 60's stabilisation table) rather than as row values. */
+/** The class columns shaped `class_<id>` — classes as COLUMNS rather
+ *  than as row values. Exact id first; a column whose suffix STARTS WITH
+ *  the token serves compound class ids sharing one column (c → cd). */
 function classAsColumn(cols: Column[], token: string): Column | undefined {
-  const exact = cols.find((c) => /^class_[a-z0-9.]+$/.test(c.name) && c.name.slice(6) === token);
+  const classCols = cols.filter((c) => /^class_[a-z0-9.]+$/.test(c.name));
+  const exact = classCols.find((c) => c.name.slice(6) === token);
   if (exact) return exact;
-  // classes C and D share one column (class_cd) in R 60-2 Table 1
-  return cols.find((c) => /^class_[a-z0-9.]+$/.test(c.name) && c.name.slice(6) === "cd" && (token === "c" || token === "d"));
+  return classCols.find((c) => c.name.slice(6).startsWith(token));
 }
 
 function numericColumns(cols: Column[]): Column[] {

package/workers/worker_public/src/ask.ts

@@ -23,6 +23,7 @@ import { bindModelNode, licenseBoundaryNote, licenseBoundaryRefusal, licensedEnt
 import { evaluate as machineEvaluate, verdictNote } from "./verdict";
 import { evaluateConditionSets, quantitiesIn, type ConditionVerdict } from "./conditions";
 import { evaluateAggregation, type AggregationVerdict } from "./aggregation";
+import { matchLicensedTopic, boundaryNoteText } from "./boundary";
 import { detectDraftIntent, prepareDraft } from "./drafts";
 import { memoryNote } from "./memories";
 import { entitlementScope, resolveRequestScope, requestSalt } from "./requestScope";
@@ -773,7 +774,7 @@ async function handleAsk(
     ? {
         unit_id: boundModel!.node_id,
         type: "verdict",
-        docidentifier: `${P().publisher.name} SMART model (${boundModel!.standard})`,
+        docidentifier: `${P().publisher.name} model (${boundModel!.standard})`,
         payload: {
           verdict: machineVerdict.verdict,
           on_violation: machineVerdict.on_violation,
@@ -788,7 +789,7 @@ async function handleAsk(
     ? {
         unit_id: conditionVerdict.matched[0] ?? conditionVerdict.nearest!.node_id,
         type: "verdict",
-        docidentifier: `IEC SMART model (${conditionStandard})`,
+        docidentifier: `${P().publisher.name} model (${conditionStandard})`,
         payload: {
           verdict: conditionVerdict.verdict,
           missing: [],
@@ -834,7 +835,7 @@ async function handleAsk(
     ? {
         unit_id: aggregationVerdict.table,
         type: "verdict",
-        docidentifier: `SMART model table${aggregationStandard ? ` (${aggregationStandard})` : ""}`,
+        docidentifier: `${P().publisher.name} model table${aggregationStandard ? ` (${aggregationStandard})` : ""}`,
         payload: {
           check: `${aggregationVerdict.operation}: ${aggregationVerdict.column ?? aggregationVerdict.table_title ?? aggregationVerdict.table} = ${aggregationVerdict.value}${aggregationVerdict.unit ? ` ${aggregationVerdict.unit}` : ""}`,
           meaning: aggregationVerdict.table_title,
@@ -846,6 +847,26 @@ async function handleAsk(
       }
     : null;
   if (aggregationVerdict) console.log("aggregation engine:", aggregationVerdict.operation, aggregationVerdict.table, "→", aggregationVerdict.value);
+  // ── the licensed boundary note (TODO.rag/12): an unentitled question
+  // that is topically ABOUT a licensed standard gets the boundary
+  // posture — the citation graph names the public publications that
+  // reference the licensed document, and the note instructs the model
+  // to attribute, never to recite the licensed parameters.
+  let boundaryNote: string | null = null;
+  if (P().sources?.licensed?.length) {
+    const match = matchLicensedTopic(q.query, P().sources.licensed);
+    if (match && !(standardKeys?.has(match.entry.key) ?? false)) {
+      const docNum = match.entry.doc_number ?? "";
+      let citing: string[] = [];
+      if (docNum) {
+        const rows = await env.DB.prepare(
+          "SELECT n.label AS label FROM graph_edges e JOIN graph_nodes n ON e.src = n.id WHERE e.kind = 'cites' AND e.dst LIKE ?1 LIMIT 4",
+        ).bind(`%${docNum}%`).all().catch(() => ({ results: [] }));
+        citing = (rows.results ?? []).map((r: any) => String(r.label ?? "").replace(/^doc:/, ""));
+      }
+      boundaryNote = boundaryNoteText(match, citing);
+    }
+  }
   try {
     const tR = Date.now();
     // ── The "my account" live read (TODO.ai-platform/03) — resolved
@@ -995,7 +1016,7 @@ async function handleAsk(
     q.lang,
     keptHistory,
     // stage-extracted graph facts (GraphRAG) ride the same note channel
-    [processNote, eNote, contextNote(declaredCtx, docScope), accountNote, modelNote, vocabNote, memNote, machineNote, conditionNote, aggregationNote, licenseNote, ...(retrieved.notes ?? [])].filter(Boolean).join("\n") || undefined,
+    [processNote, eNote, contextNote(declaredCtx, docScope), accountNote, modelNote, vocabNote, memNote, machineNote, conditionNote, aggregationNote, boundaryNote, licenseNote, ...(retrieved.notes ?? [])].filter(Boolean).join("\n") || undefined,
     summary,
     budget,
   );

package/workers/worker_public/src/auth.ts

@@ -48,7 +48,7 @@ export interface AuthConfig {
 }
 
 function authConfig(env: any): AuthConfig | null {
-  const issuer = env.OIDC_ISSUER ?? "https://id.oimlsmart.org";
+  const issuer = (env.OIDC_ISSUER ?? "").trim().replace(/\/$/, "");
   const clientId = env.OIDC_CLIENT_ID;
   const redirectUri = env.OIDC_REDIRECT_URI ?? "https://ai.oimlsmart.org/auth/callback";
   const sessionSecret = env.SESSION_SECRET;

package/workers/worker_public/src/boundary.ts

@@ -0,0 +1,73 @@
+// The licensed boundary note (TODO.rag/12): when a question is about a
+// topic that matches a LICENSED standard the caller is not entitled to,
+// the note gives the answer model the boundary posture — name the
+// licensed document as the authoritative procedure, name the public
+// publications that reference it, and never recite the licensed
+// parameters as if from the source. Pure matching/text lives here; the
+// inverse-cites D1 read lives at the call site.
+
+export interface LicensedEntry {
+  key: string;
+  package?: string;
+  doc_number?: string;
+  title?: string;
+}
+
+export interface LicensedMatch {
+  entry: LicensedEntry;
+  matched: string[];
+}
+
+// title words that carry no topical identity — a question about "tests"
+// or "immunity" must not alone light the boundary
+const TITLE_STOPWORDS = new Set([
+  "environmental", "testing", "test", "tests", "guidance", "generic",
+  "standards", "standard", "electromagnetic", "compatibility",
+  "environment", "description", "measurement", "techniques", "immunity",
+  "residential", "commercial", "industrial", "environments", "and", "for", "the",
+  "iec", "iso",
+]);
+
+export function distinctiveTokens(title: string): string[] {
+  return title
+    .toLowerCase()
+    .split(/[^a-z0-9.]+/)
+    .filter((w) => w.length >= 3 && !TITLE_STOPWORDS.has(w) && !/^[0-9:-]+$/.test(w));
+}
+
+/** The licensed entry whose distinctive title tokens best match the
+ *  question. Needs TWO token hits (or one hyphenated-compound hit) —
+ *  a single shared word is not a topic match. */
+export function matchLicensedTopic(query: string, licensed: LicensedEntry[]): LicensedMatch | null {
+  const words = new Set(query.toLowerCase().split(/[^a-z0-9.]+/).filter(Boolean));
+  let best: { entry: LicensedEntry; matched: string[] } | null = null;
+  for (const entry of licensed) {
+    if (!entry.title) continue;
+    const matched = distinctiveTokens(entry.title).filter((w) => words.has(w));
+    if (matched.length < 2) continue;
+    if (!best || matched.length > best.matched.length) best = { entry, matched };
+  }
+  return best;
+}
+
+/** The note text: the posture instruction for an unentitled match. */
+export function boundaryNoteText(match: LicensedMatch, citing: string[]): string {
+  const doc = match.entry.doc_number ?? match.entry.key;
+  const title = match.entry.title ?? doc;
+  const refs = citing.length
+    ? `The public corpus references it from ${citing.join(", ")}.`
+    : "";
+  return (
+    `LICENSED BOUNDARY — ${title} (IEC ${doc}) is licensed content in this ` +
+    `deployment; its procedure is NOT part of the public corpus you are grounded in. ` +
+    `${refs} When answering: name the licensed document as the authoritative source of ` +
+    `the procedure and say it is available to entitled callers. Do NOT state its ` +
+    `conditioning or severity parameters in ANY form — no temperatures, humidity ` +
+    `levels, durations or cycle counts, not even as a single bound or as a value ` +
+    `another publication repeats or cites; keep the description structural (expose, ` +
+    `condition, recover) and let the licensed document own the numbers. If the ` +
+    `grounding passages state parameter values, say only that the publications ` +
+    `describe their own requirements and that the procedure's parameters are in the ` +
+    `licensed document.`
+  );
+}

package/workers/worker_public/src/drafts.ts

@@ -48,7 +48,7 @@ export interface DraftSample {
 export interface ApplicationPrefillFields {
   /** the Recommendation, as the estate URN (urn:oiml:pub:r:60:2021) */
   standard_doc: string;
-  /** display label ("OIML R 60:2021") */
+  /** display label ("ACME AB 99:2019") */
   standard_label?: string;
   family_designation?: string;
   group_label?: string;
@@ -124,7 +124,7 @@ export interface PrepareOpts {
 // performs).
 
 const ACT_VERB = "(?:draft|prepare|pre-?fill|fill\\s+(?:in|out)|start|submit|file|lodge)";
-const ACT_TARGET = "(?:new\\s+)?(?:certification\\s+|type[ -]evaluation\\s+|OIML[- ]CS\\s+)?application";
+const ACT_TARGET = "(?:new\\s+)?(?:certification\\s+|type[ -]evaluation\\s+)?application";
 const INTENT_RES = [
   new RegExp(`\\b${ACT_VERB}\\b[\\s\\S]{0,60}?\\b${ACT_TARGET}\\b`, "i"),
   new RegExp(`\\b${ACT_TARGET}\\b[\\s\\S]{0,30}?\\b(?:draft|prepare|pre-?fill|for me)\\b`, "i"),
@@ -165,18 +165,18 @@ function roleLabel(role: string): string {
 
 // ── the extraction (the LLM proposes) ────────────────────────────────
 
-const EXTRACTION_SYSTEM = `You extract the fields of a new OIML certification application from the user's own messages.
+const EXTRACTION_SYSTEM = `You extract the fields of a new certification application from the user's own messages.
 
 Rules:
 - Output ONLY a JSON object — no prose, no code fence.
 - Copy every value from the user's own words, and for each field give "source": the exact contiguous span of the user's message you copied it from.
 - NEVER infer, complete, normalize away, or guess a value. If the user did not state it, omit the field entirely.
-- "standard": the Recommendation the user named (e.g. "R 60" or "OIML R 60:2021") — a plain string, or omit when none was named.
+- "standard": the publication the user named (e.g. "AB 99" or "ACME AB 99:2019") — a plain string, or omit when none was named.
 - "scheme": only when the user named scheme A or scheme B explicitly.
 
 Schema (every field optional):
 {
-  "standard": "R 60",
+  "standard": "AB 99",
   "family_designation": { "value": "…", "source": "…" },
   "group_label": { "value": "…", "source": "…" },
   "model_designation": { "value": "…", "source": "…" },
@@ -428,8 +428,8 @@ export async function prepareDraft(env: any, opts: PrepareOpts): Promise<DraftVe
       "standard_unresolved",
       untraced
         ? `I can't anchor the draft: you haven't named the Recommendation in your own words (the ${untraced.value} reading isn't yours). ` +
-          "Name it plainly — for example OIML R 60 — and I'll prepare the draft."
-        : "I can't anchor the draft: you haven't named the Recommendation. Name it plainly — for example OIML R 60 — and I'll prepare it.",
+          "Name it plainly — for example ACME AB 99 — and I'll prepare the draft."
+        : "I can't anchor the draft: you haven't named the publication. Name it plainly — for example ACME AB 99 — and I'll prepare it.",
     );
   }
   const standard = await resolveStandard(env, kept.standard);
@@ -437,7 +437,7 @@ export async function prepareDraft(env: any, opts: PrepareOpts): Promise<DraftVe
     return refusal(
       "standard_unresolved",
       `I couldn't resolve ${kept.standard} as a publication in the corpus, so I can't anchor the draft. ` +
-        "Name the Recommendation plainly — for example OIML R 60 — and I'll prepare it.",
+        "Name the publication plainly — for example ACME AB 99 — and I'll prepare it.",
     );
   }
 

package/workers/worker_public/src/index.ts

@@ -192,7 +192,7 @@ async function absenceRoute(c: RouteContext): Promise<Response> {
   const namedStd = namedDocumentIn(String(body?.standard ?? ""));
   const standard = standardForDocNumber(namedStd?.doc_number ?? String(body?.standard ?? "").trim());
   const topic = String(body?.topic ?? "").trim().toLowerCase();
-  if (!standard || !topic) return err(400, "invalid_input", "standard (e.g. \"R 60\") and topic are required");
+  if (!standard || !topic) return err(400, "invalid_input", "standard and topic are required");
   try {
     const nodes = (await env.DB.prepare("SELECT node_id, kind, name, content FROM model_nodes WHERE standard = ?1").bind(standard).all()).results ?? [];
     const tokens = topic.split(/\s+/).filter((t: string) => t.length > 2);

package/workers/worker_public/src/livedata.ts

@@ -50,9 +50,9 @@ export interface LiveDataConfig {
 export function liveDataConfig(env: any): LiveDataConfig | null {
   const platformApi = (env.SMART_PLATFORM_API ?? "").trim().replace(/\/$/, "");
   const platformClientId = (env.SMART_PLATFORM_CLIENT_ID ?? "").trim();
-  const issuer = (env.OIDC_ISSUER ?? "https://id.oimlsmart.org").trim().replace(/\/$/, "");
+  const issuer = (env.OIDC_ISSUER ?? "").trim().replace(/\/$/, "");
   const clientId = (env.OIDC_CLIENT_ID ?? "").trim();
-  if (!platformApi || !platformClientId || !clientId) return null;
+  if (!platformApi || !platformClientId || !clientId || !issuer) return null;
   return { platformApi, platformClientId, issuer, clientId, clientSecret: env.OIDC_CLIENT_SECRET };
 }
 

package/workers/worker_public/src/pipeline.ts

@@ -384,7 +384,8 @@ function publicationUrl(meta: ChunkMeta): string | undefined {
   // foreign-corpus chunk has no entry in it, and a fabricated url is
   // worse than none (the door for internal renderings is the internal
   // origin, wired by the site's doc-base configuration)
-  if (meta.corpus && !["oiml", "dirty", "clean"].includes(meta.corpus)) return undefined;
+  const ownCorpora = P().publisher.catalog_corpora;
+  if (meta.corpus && ownCorpora && !ownCorpora.includes(meta.corpus)) return undefined;
   const tpl = P().publisher.catalog_url_template;
   if (!tpl || !meta.doctype || !meta.doc_number) return undefined;
   return tpl.replace("{type}", meta.doctype.toLowerCase()) + meta.doc_number;

package/workers/worker_public/src/profile.gen.ts

@@ -19,6 +19,12 @@ export const PROFILE = {
     "references": {
       "label_prefix": ""
     },
+    "catalog_url_template": "https://catalog.fixture.example.org/{type}",
+    "catalog_corpora": [
+      "pub",
+      "dirty",
+      "clean"
+    ],
     "features": {
       "drafts": false,
       "model_plane": false
@@ -80,11 +86,11 @@ export const PROFILE = {
     "models": {},
     "licensed": [
       {
-        "key": "std:fixture-60068-2-30",
-        "package": "fixture-60068-2-30",
-        "doc_number": "60068-2-30",
-        "title": "FIXTURE environmental testing — damp heat, cyclic",
-        "edition": "2005"
+        "key": "std:fixture-ab-99",
+        "package": "fixture-ab-99",
+        "doc_number": "ab-99",
+        "title": "FIXTURE climatic conditioning, cyclic humidity",
+        "edition": "2019"
       }
     ]
   },

package/workers/worker_public/src/profile2.gen.ts

@@ -32,6 +32,10 @@ export const PROFILE = {
         "glossary"
       ]
     },
+    "catalog_url_template": "https://catalog.atlas.example/{type}",
+    "catalog_corpora": [
+      "spec"
+    ],
     "features": {
       "drafts": false,
       "model_plane": false

package/dist/ask-4O753Y4T.js

@@ -1,12 +0,0 @@
-import {
-  handleAsk
-} from "./chunk-PBXE2LFD.js";
-import "./chunk-7UT76RQO.js";
-import "./chunk-EFQALN2Z.js";
-import "./chunk-DBBGOOMZ.js";
-import "./chunk-5MBWE7WD.js";
-import "./chunk-ADXV2DPK.js";
-import "./chunk-TJRTVJW5.js";
-export {
-  handleAsk
-};

package/dist/search-RFKT7ZZY.js

@@ -1,12 +0,0 @@
-import {
-  handleSearch
-} from "./chunk-YFDWKXEB.js";
-import "./chunk-7UT76RQO.js";
-import "./chunk-EFQALN2Z.js";
-import "./chunk-DBBGOOMZ.js";
-import "./chunk-5MBWE7WD.js";
-import "./chunk-ADXV2DPK.js";
-import "./chunk-TJRTVJW5.js";
-export {
-  handleSearch
-};