@konneal/engine 0.2.33 → 0.2.35

package/dist/worker_public/src/config.js

@@ -16,7 +16,7 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-OMXAE27N.js";
+} from "../../chunk-V46XM2GU.js";
 import "../../chunk-3FYJM7LH.js";
 export {
   DATASETS,

package/dist/worker_public/src/index.js

@@ -1,6 +1,6 @@
 import {
   handleSearch
-} from "../../chunk-5LSEBH3J.js";
+} from "../../chunk-Z7AQEW6G.js";
 import {
   bindModelNode,
   checkQuoteAnchors,
@@ -9,7 +9,7 @@ import {
   modelGroundingBlock,
   scoreJudge,
   standardForDocNumber
-} from "../../chunk-WSLADX7O.js";
+} from "../../chunk-YSWKFXXG.js";
 import {
   buildMessages,
   citations,
@@ -32,7 +32,7 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "../../chunk-NHHQAGBW.js";
+} from "../../chunk-GHDRKT4K.js";
 import {
   authenticate,
   corsHeaders,
@@ -41,14 +41,14 @@ import {
   readJson,
   validateQuery,
   withCors
-} from "../../chunk-2RKYO3OC.js";
+} from "../../chunk-R2V3X6SQ.js";
 import {
   canonicalRefusal
 } from "../../chunk-A3QHHUN5.js";
 import {
   entitlementScope,
   standardKeysFrom
-} from "../../chunk-JGKSUSF5.js";
+} from "../../chunk-4GJGBGJK.js";
 import {
   LIMITS,
   MODELS,
@@ -59,7 +59,7 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-OMXAE27N.js";
+} from "../../chunk-V46XM2GU.js";
 import {
   P,
   setProfile
@@ -996,7 +996,7 @@ async function handleMcp(env, ctx, req, tier, key) {
       // stream:false forces the JSON lane (anon defaults to SSE)
       body: JSON.stringify({ ...args, stream: false })
     });
-    const res = name === "ask" ? await (await import("../../ask-GU554Y45.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-LGDQR43R.js")).handleSearch(env, ctx, inner, tier, key);
+    const res = name === "ask" ? await (await import("../../ask-P6KLPBKL.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-IBZ2BK2E.js")).handleSearch(env, ctx, inner, tier, key);
     return res.json().catch(() => ({ error: { message: "tool transport failed", status: res.status } }));
   });
   if (out.ok && "accepted" in out) return new Response(null, { status: 202 });
@@ -1359,7 +1359,7 @@ async function tierFor(c) {
     if (!key) return err(401, "unauthorized", `Provide a valid API key: Authorization: Bearer ${P().publisher.id}_...`);
   }
   let tier = isApi ? "key" : "anon";
-  if (!isApi && c.env.SESSION_SECRET && await sessionFrom(c.req, c.env)) tier = "member";
+  if (!isApi && await sessionFrom(c.req, c.env)) tier = "member";
   return { tier, key };
 }
 async function mcpRoute(c) {

package/dist/worker_public/src/requestScope.js

@@ -4,8 +4,8 @@ import {
   requestSalt,
   resolveRequestScope,
   standardKeysFrom
-} from "../../chunk-JGKSUSF5.js";
-import "../../chunk-OMXAE27N.js";
+} from "../../chunk-4GJGBGJK.js";
+import "../../chunk-V46XM2GU.js";
 import "../../chunk-3FYJM7LH.js";
 export {
   entitlementScope,

package/docs/API.md

@@ -117,6 +117,43 @@ a corpus document. The service applies it honestly:
   declaration, not just the query) and is never written into them.
 - Conversational turns (greetings, identity) never ground in a declared
   context — the echo reports `none`.
+- The entity declaration may carry the affordance channel's `machine`
+  facet (TODO.ai-platform/08): the lifecycle machine's current `state`
+  (the fact) and the `acts` it offers there for the declaring user's
+  role (already role-filtered by the platform). The facet parses bounded
+  (state ≤ 60 chars, ≤ 24 acts, each `action`/`to`/`guard` ≤ 60), rides
+  the entity kind only, and BOUNDS the proposal grammar: a draft act the
+  set does not offer is never proposed, and an empty `acts` array is the
+  honest "the user can read but not act" — the answer says so and no
+  draft rides. The facet is advisory; the platform re-validates every
+  draft act authoritatively on the way back.
+
+```jsonc
+"context": {
+  "kind": "entity",
+  "label": "this application R60-2026-0042",
+  "route": "/app/ia/applications/R60-2026-0042",
+  "machine": {                            // the affordance channel — entity kind only
+    "state": "UNDER_REVIEW",              // the machine's current state (the fact)
+    "acts": [                             // offered FOR THE DECLARING USER'S ROLE — may be []
+      { "action": "ia_accepts", "to": "ACCEPTED" },
+      { "action": "ia_logs_samples", "to": "SAMPLES_RECEIVED", "guard": "receipt_complete" }
+    ]
+  }
+}
+```
+
+The echo carries the facet's fact + count, so the panel's honest context
+line reads the service's applied truth, never its own copy:
+
+```jsonc
+"context_applied": {
+  "kind": "entity",
+  "label": "this application R60-2026-0042",
+  "scoped_to": "OIML R 60:2021",
+  "machine": { "state": "UNDER_REVIEW", "offered": 2 }
+}
+```
 
 Every ask response — the SSE `citations`/`done` events and the JSON body —
 echoes what was APPLIED, so the panel's context line never invents a
@@ -245,6 +282,52 @@ The honest rules, all eval-gated (the golden suite's `draft-*` legs):
 
 **SSE**: the `draft` rides the first (`citations`) frame beside
 `context_applied`; `token` frames carry the answer; `done` as usual.
+
+##### The api_call act (TODO.ai-platform/09 — the operations deployment)
+
+The second draft act proposes ONE platform operation — the operations
+assistant's grammar, feature-flagged (`features.api_call_drafts`; the
+corpus-only deployment leaves it off):
+
+```jsonc
+"draft": {
+  "kind": "draft",
+  "act": "api_call",
+  "version": 1,
+  "title": "Save the R 60 filter",        // what the act DOES — never the wire shape
+  "prepared_at": "2026-09-26T09:00:00Z",
+  "requires_confirmation": true,           // ALWAYS
+  "call": {
+    "method": "PUT",                       // a real operation from the plane —
+    "path": "/api/notify/preferences",     // an invented path is a service bug
+    "body": { }                            // optional; preference bodies trace
+  }                                        // to the user's own words
+}
+```
+
+The honest rules (the module is structurally write-free — it reads the
+operation directory and calls the pick model; there is no platform IO):
+
+- **The directory is the closed world**: the call names an operation the
+  deployment's `api_ops` directory (loaded from the OpenAPI plane at
+  ingest) actually carries. The model proposes an operation id; the
+  guard resolves it against the directory AFTER the fact — an invented
+  id or path never rides.
+- **The machine facet bounds the machine acts** (§2.1.1): the entity
+  write composes only for an act the offered set carries, addressed to
+  the declared entity (the profile's route-pattern table maps the
+  page's route to the store and id). An empty offered set answers the
+  honest "you can read but not act" and proposes nothing.
+- **The never-offer list holds** (profile data, `publisher.acts
+  .never_offer`): the auth family (signout is the user's own, forever)
+  and the grant's own mint/revoke (delegation is granted by the user's
+  hand on the settings page, never by a chat message) are excluded from
+  the pick prompt AND refused at the guard.
+- **The act class is the platform's word, not the draft's**: the panel
+  pre-flights every api_call draft against the plane and the class
+  decides the arc — preference rides the standing grant's seam, record
+  confirms per act and executes as the user.
+
 The draft is ephemeral — the conversations API never persists it (a
 resumed session keeps the honest context line, not a stale draft).
 

package/package.json

@@ -27,7 +27,7 @@
     "playwright": "^1.62.1",
     "yaml": "^2.9.1"
   },
-  "version": "0.2.33",
+  "version": "0.2.35",
   "description": "The Konneal engine: the publisher-agnostic build pipeline and API plane for standards intelligence (retrieval, answer contract, verdicts, evaluation).",
   "license": "BSD-3-Clause",
   "type": "module",

package/workers/shared/session.ts

@@ -14,6 +14,16 @@ export interface SessionClaims {
   roles: string[];
   iat: number;
   exp: number;
+  /** the credential kind: absent = the service session; "delegated" =
+   *  the OP-minted RFC 8693 bearer (TODO.ai-platform/12 — the session
+   *  bridge; delegated.ts) */
+  via?: "delegated";
+  /** the delegating surface (the delegated bearer's act.sub — the
+   *  platform instance's OP client) */
+  delegator?: string;
+  /** the delegated bearer's granted scope string (the platform read
+   *  cone it carries — livedata reads through it directly) */
+  scope?: string;
 }
 
 export const SESSION_COOKIE = "rag_session";

package/workers/worker_public/prompts/system.md

@@ -1,4 +1,4 @@
-You are the OIML SMART AI assistant at ai.oimlsmart.org, a public service answering questions about OIML legal-metrology publications; be precise, professional and warm — a knowledgeable colleague, not a search box.{{HISTORY_CONTEXT}}
+You are {{ASSISTANT_IDENTITY}}; be precise, professional and warm — a knowledgeable colleague, not a search box.{{HISTORY_CONTEXT}}
 Conversational turns — greetings, thanks, small talk, or questions about you and this service (who you are, which model you are, what you can do, what you search, how you work) — answer naturally, briefly, in first person, without citations. Never refuse them.
 Questions about the publisher itself ({{PUBLISHER_NAME}} — what it is, who it is, its role) are the same class: you know your own publisher a priori — {{PUBLISHER_IDENTITY}} — so answer briefly without citations and never refuse them. When context passages about the publisher do appear, prefer grounding the answer in them and cite them like any other passage.
 When earlier turns are provided, answer the LATEST message; earlier turns are context for resolving pronouns and ellipses.
@@ -15,6 +15,7 @@ MANDATORY: when the question asks how to do something (get certified, apply, com
 If the passages cover only part of the question, answer the covered part fully, then state precisely what the indexed publications do not cover — do not pad with outside knowledge.
 Refuse ONLY when no passage relates to the question's topic. Use exactly this sentence: {{REFUSAL_SENTENCE}} Then add one short line naming what you can answer instead, so the refusal redirects rather than dead-ends.
 {{LICENSE_POSTURE}}
+{{SERVICE_POSTURE}}
 {{CORPUS_NOTES}}
 Lead with the direct answer, then supporting detail; no preamble like 'Based on the passages'. Use short paragraphs or bullets for multi-part answers. Be concise and precise. Answer in the question's language{{LANG_CLAUSE}}.
 - HARD RULE — typed units: passages whose header shows `unit u:xxxx (table)` contain a typed table. If your answer presents that table's data, you MUST write the token `[[u:xxxx]]` where the table belongs and MUST NOT render the table as markdown or reproduce more than ONE of its rows inline. Summarize the pattern in prose ("classes A–D with lower limits from 100 to 50 000"), cite the clause normally, and let `[[u:xxxx]]` stand for the full table — the interface renders it exactly from the source. The same rule applies to `unit u:xxxx (formula|figure|term)` objects.