@konneal/engine 0.2.47 → 0.2.49

package/dist/ask-OH5KPHZA.js

@@ -0,0 +1,12 @@
+import {
+  handleAsk
+} from "./chunk-4KA34NMU.js";
+import "./chunk-VVLNUHW2.js";
+import "./chunk-JWTIPQ4L.js";
+import "./chunk-A3QHHUN5.js";
+import "./chunk-O6VZIDPW.js";
+import "./chunk-Z24IAKB6.js";
+import "./chunk-3FYJM7LH.js";
+export {
+  handleAsk
+};

package/dist/attachments.d.ts

@@ -0,0 +1,31 @@
+import type { Blobs } from "./ports/blobs.ts";
+import type { StoreQuery } from "./ports/store.ts";
+export interface AttachmentDeps {
+    blobs: Blobs;
+    store: StoreQuery;
+}
+export interface AttachmentRow {
+    id: string;
+    sub: string;
+    mime: string;
+    bytes: number;
+    created_at: string;
+}
+/** Sniff the image type from the magic bytes — the declared type is
+ *  never trusted. Returns null for anything that is not one of the four
+ *  allowed images or that exceeds the cap. */
+export declare function sniffImage(head: Uint8Array, totalBytes: number): string | null;
+/** A data URL (the composer's current shape) → { mime, bytes } or null. */
+export declare function parseDataUrl(dataUrl: string): {
+    mime: string;
+    bytes: Uint8Array;
+} | null;
+export declare function uploadAttachment(deps: AttachmentDeps, sub: string, dataUrl: string): Promise<{
+    id: string;
+} | Response>;
+/** The ownership check every access runs first: the row must exist and
+ *  belong to the caller. A foreign id is indistinguishable from a
+ *  missing one (404 — never a confirmation of someone else's file). */
+export declare function ownedAttachment(deps: AttachmentDeps, sub: string, id: string): Promise<AttachmentRow | null>;
+export declare function readAttachment(deps: AttachmentDeps, sub: string, id: string): Promise<Response | null>;
+export declare function deleteAttachment(deps: AttachmentDeps, sub: string, id: string): Promise<boolean>;

package/dist/{chunk-SE67PTJ6.js → chunk-4KA34NMU.js}

@@ -35,14 +35,14 @@ import {
   syntheticUnderstanding,
   telemetry,
   understandQuery
-} from "./chunk-N2UOENDY.js";
+} from "./chunk-VVLNUHW2.js";
 import {
   corsHeaders,
   err,
   json,
   readJson,
   validateQuery
-} from "./chunk-R2V3X6SQ.js";
+} from "./chunk-JWTIPQ4L.js";
 import {
   canonicalRefusal,
   refusalAnswer
@@ -52,17 +52,18 @@ import {
   requestSalt,
   resolveRequestScope,
   standardKeysFrom
-} from "./chunk-4GJGBGJK.js";
+} from "./chunk-O6VZIDPW.js";
 import {
   LIMITS,
   MODELS,
+  THRESHOLDS,
   answerEffort,
   effortBudget,
   num,
   requestEffort,
   roleModel,
   sha256Hex
-} from "./chunk-V46XM2GU.js";
+} from "./chunk-Z24IAKB6.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";
@@ -216,6 +217,125 @@ ${ctx}`
   }
 }
 
+// workers/worker_public/prompts/faithfulness.md
+var faithfulness_default = `You are a factuality judge. Given an answer and the retrieved passages it was based on, identify any claims in the answer that are NOT directly supported by the passages. Reply with ONLY a JSON object: {"score": 0.0-1.0, "ungrounded_claims": ["claim text", ...]} \u2014 score is the fraction of claims that ARE grounded in the passages; if every claim is supported, score is 1.0 and ungrounded_claims is [].
+
+Passages prefixed [M] are this service's own machine-computed model data (typed blocks the answer was given) \u2014 a claim restating [M] content is grounded.
+`;
+
+// workers/worker_public/src/verdict-parse.ts
+function coerceVerdict(obj) {
+  if (obj === null || typeof obj !== "object" || Array.isArray(obj)) return null;
+  const raw = obj.score;
+  const score = typeof raw === "number" ? raw : typeof raw === "string" && raw.trim() !== "" ? Number(raw) : NaN;
+  if (!Number.isFinite(score)) return null;
+  const claims = obj.ungrounded_claims;
+  return {
+    score: Math.max(0, Math.min(1, score)),
+    ungrounded_claims: Array.isArray(claims) ? claims.map(String).slice(0, 5) : []
+  };
+}
+function parseVerdict(text) {
+  const stripped = text.replace(/```[a-zA-Z]*\n?/g, "").replace(/```/g, "").trim();
+  try {
+    const whole = coerceVerdict(JSON.parse(stripped));
+    if (whole) return whole;
+  } catch {
+  }
+  let verdict = null;
+  let depth = 0;
+  let start = -1;
+  let inString = false;
+  let escaped = false;
+  for (let i = 0; i < stripped.length; i++) {
+    const ch = stripped[i];
+    if (escaped) {
+      escaped = false;
+      continue;
+    }
+    if (inString && ch === "\\") {
+      escaped = true;
+      continue;
+    }
+    if (ch === '"') {
+      inString = !inString;
+      continue;
+    }
+    if (inString) continue;
+    if (ch === "{") {
+      if (depth === 0) start = i;
+      depth++;
+    } else if (ch === "}" && depth > 0) {
+      depth--;
+      if (depth === 0 && start >= 0) {
+        try {
+          const v = coerceVerdict(JSON.parse(stripped.slice(start, i + 1)));
+          if (v) verdict = v;
+        } catch {
+        }
+      }
+    }
+  }
+  return verdict;
+}
+
+// workers/worker_public/src/faithfulness-context.ts
+function buildJudgeContext(passages, machine = []) {
+  const context = passages.slice(0, 8).map((p, i) => {
+    const text = typeof p === "string" ? p : p.text;
+    const limit = typeof p !== "string" && p.table ? 2400 : 1400;
+    return `[${i + 1}] ${text.replace(/\s+/g, " ").slice(0, limit)}`;
+  }).join("\n");
+  const machineContext = machine.length ? "\n" + machine.slice(0, 6).map((m) => `[M] ${m.replace(/\s+/g, " ").slice(0, 400)}`).join("\n") : "";
+  return context + machineContext;
+}
+
+// workers/worker_public/src/faithfulness.ts
+async function scoreFaithfulness(ai, model, answer, passages, machine = []) {
+  if (!answer || !passages.length) return null;
+  const context = buildJudgeContext(passages, machine);
+  const t0 = Date.now();
+  const timeout = new Promise((r) => setTimeout(() => {
+    console.log(`faithfulness: timeout (${Date.now() - t0}ms)`);
+    r(null);
+  }, 24e4));
+  const call = (async () => {
+    const res = await ai.run(model, {
+      messages: [
+        {
+          role: "system",
+          content: faithfulness_default.trimEnd()
+        },
+        { role: "user", content: `Answer:
+${answer.slice(0, 2e3)}
+
+Passages:
+${context}${machine.length ? buildJudgeContext([], machine) : ""}` }
+      ],
+      max_tokens: 6144,
+      reasoning_effort: "low",
+      // DeepSeek-V4 card: temp 1.0 / top_p 1.0
+      temperature: 1,
+      top_p: 1
+    });
+    const text = typeof res?.response === "string" ? res.response : res?.choices?.[0]?.message?.content;
+    const verdict = parseVerdict(text ?? "");
+    if (!verdict) {
+      console.log(`faithfulness: no parse (${Date.now() - t0}ms, text ${(text ?? "").length} chars) raw=${JSON.stringify((text ?? "").replace(/\s+/g, " ").slice(0, 500))}`);
+      return null;
+    }
+    return verdict;
+  })();
+  return await Promise.race([call, timeout]);
+}
+
+// workers/worker_public/src/entailment.ts
+function entailmentVerdict(score, supportedFloor, partialFloor) {
+  if (score >= supportedFloor) return { support: "supported", note: "" };
+  if (score >= partialFloor) return { support: "partial", note: "Partially grounded \u2014 some claims lack support in the cited passages; verify against the cited clauses." };
+  return { support: "unsupported", note: "WARNING: This answer's claims are largely unsupported by the retrieved passages. Verify against official publications." };
+}
+
 // workers/worker_public/src/anchors.ts
 var normalize = (s) => s.replace(/[‘’‛′]/g, "'").replace(/[“”‟″]/g, '"').replace(/[–—−]/g, "-").replace(/­/g, "").replace(/[     ]/g, " ").replace(/\s+/g, " ").toLowerCase();
 var ANCHOR = /\[[^\[\]\n]*\]/g;
@@ -2688,7 +2808,21 @@ Answer account questions from these records ONLY: name the record when you use i
   }
   completionBlocks.push(...await completeFigures(env.DB, answer, [...c2ns.blocks, ...completionBlocks], used));
   const jsonQuality = answerQuality(finalCites.map((c) => c.quality));
-  const out = { answer, citations: finalCites, ...jsonQuality ? { source_quality: jsonQuality, confidence_note: qualityNote(jsonQuality), ...jsonQuality === "ocr" ? { experimental_sources: experimentalSourceLabels(finalCites) } : {} } : {}, model: MODELS.member, query_hash: queryHash, follow_ups: understanding?.follow_ups ?? [], blocks: [...c2ns.blocks, ...verdictBlock ? [verdictBlock] : [], ...conditionBlock ? [conditionBlock] : [], ...aggregationBlock ? [aggregationBlock] : [], ...completionBlocks], context_applied: ctxApplied, ...liveRecords ? { records: liveRecords } : {} };
+  let entailment = null;
+  let entailmentNote = "";
+  if (THRESHOLDS.entailmentGate && jsonQuality && used.length && !answer.includes(refusalAnswer())) {
+    const raced = await Promise.race([
+      scoreFaithfulness(env.AI, roleModel(env, "grader"), answer, used.map((h) => h.text)),
+      new Promise((r) => setTimeout(() => r(null), THRESHOLDS.entailmentBudgetMs))
+    ]);
+    if (raced) {
+      const v = entailmentVerdict(raced.score, THRESHOLDS.entailmentSupportedFloor, THRESHOLDS.entailmentPartialFloor);
+      entailment = { support: v.support, score: Math.round(raced.score * 100) / 100, ...raced.ungrounded_claims?.length ? { ungrounded: raced.ungrounded_claims.slice(0, 3) } : {} };
+      entailmentNote = v.note;
+      if (v.support !== "supported") console.log("entailment:", v.support, raced.score, raced.ungrounded_claims?.slice(0, 2));
+    }
+  }
+  const out = { answer, citations: finalCites, ...jsonQuality ? { source_quality: jsonQuality, confidence_note: entailmentNote || qualityNote(jsonQuality), ...entailment ? { entailment } : {}, ...jsonQuality === "ocr" ? { experimental_sources: experimentalSourceLabels(finalCites) } : {} } : {}, model: MODELS.member, query_hash: queryHash, follow_ups: understanding?.follow_ups ?? [], blocks: [...c2ns.blocks, ...verdictBlock ? [verdictBlock] : [], ...conditionBlock ? [conditionBlock] : [], ...aggregationBlock ? [aggregationBlock] : [], ...completionBlocks], context_applied: ctxApplied, ...liveRecords ? { records: liveRecords } : {} };
   const cacheable = !contextual && !declaredCtx && !answer.includes(refusalAnswer()) && finalAnchors.violations.length === 0;
   if (cacheable) {
     const ck = exactCacheKey(env.INDEX_VERSION, gen, ns, await sha256Hex(cacheKeyMaterial(q.query, q.lang, salt)));
@@ -2720,6 +2854,7 @@ function sseResponse(events, cors) {
 
 export {
   handleMemories,
+  scoreFaithfulness,
   checkQuoteAnchors,
   standardForDocNumber,
   bindModelNode,

package/dist/{chunk-AKAFLMIB.js → chunk-DMIOBGQU.js}

@@ -7,24 +7,24 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "./chunk-N2UOENDY.js";
+} from "./chunk-VVLNUHW2.js";
 import {
   corsHeaders,
   err,
   json,
   readJson,
   validateQuery
-} from "./chunk-R2V3X6SQ.js";
+} from "./chunk-JWTIPQ4L.js";
 import {
   entitlementScope,
   standardKeysFrom
-} from "./chunk-4GJGBGJK.js";
+} from "./chunk-O6VZIDPW.js";
 import {
   LIMITS,
   MODELS,
   num,
   sha256Hex
-} from "./chunk-V46XM2GU.js";
+} from "./chunk-Z24IAKB6.js";
 
 // workers/worker_public/src/search.ts
 async function handleSearch(env, ctx, req, tier, key) {

package/dist/{chunk-R2V3X6SQ.js → chunk-JWTIPQ4L.js}

@@ -1,7 +1,7 @@
 import {
   LIMITS,
   sha256Hex
-} from "./chunk-V46XM2GU.js";
+} from "./chunk-Z24IAKB6.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/{chunk-4GJGBGJK.js → chunk-O6VZIDPW.js}

@@ -1,7 +1,7 @@
 import {
   DATASETS,
   datasetAllowed
-} from "./chunk-V46XM2GU.js";
+} from "./chunk-Z24IAKB6.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/{chunk-N2UOENDY.js → chunk-VVLNUHW2.js}

@@ -1,7 +1,7 @@
 import {
   bubbleConfirmPage,
   isAllowedBubbleOrigin
-} from "./chunk-R2V3X6SQ.js";
+} from "./chunk-JWTIPQ4L.js";
 import {
   DATASETS,
   LIMITS,
@@ -12,7 +12,7 @@ import {
   processExpansion,
   sha256Hex,
   today
-} from "./chunk-V46XM2GU.js";
+} from "./chunk-Z24IAKB6.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";
@@ -22214,6 +22214,22 @@ function cfVectorIndex(index) {
     }
   };
 }
+function cfBlobs(bucket) {
+  const r2 = bucket;
+  return {
+    async get(key) {
+      const obj = await r2.get(key);
+      if (!obj) return null;
+      return { body: obj.body, contentType: obj.httpMetadata?.contentType };
+    },
+    async put(key, value2, contentType) {
+      await r2.put(key, value2, contentType ? { httpMetadata: { contentType } } : void 0);
+    },
+    async delete(key) {
+      await r2.delete(key);
+    }
+  };
+}
 function cfStore(db) {
   return db;
 }
@@ -24618,6 +24634,7 @@ export {
   parseAppliedContext,
   contextNote,
   syntheticUnderstanding,
+  cfBlobs,
   portModelRunner,
   portStore,
   promptVars,

package/dist/{chunk-V46XM2GU.js → chunk-Z24IAKB6.js}

@@ -60,6 +60,15 @@ var THRESHOLDS = {
    *  pool below the primary dense lane; they must earn their window
    *  slot under the cross-encoder, not by graph membership alone. */
   graphLaneDiscount: 0.75,
+  /** The entailment gate (TODO.new-era/10): the faithfulness scorer
+   *  promoted from eval-only onto the serving path. The confidence line
+   *  then states a measurement — claim support in the cited passages —
+   *  not only the source rung. Fails open (a slow or unparseable check
+   *  leaves the source-rung note unchanged). */
+  entailmentGate: true,
+  entailmentBudgetMs: 6e3,
+  entailmentSupportedFloor: 0.9,
+  entailmentPartialFloor: 0.5,
   /** Concept-graph candidate discount — same rationale as the graph
    *  lane: definitional content enters discounted. */
   conceptGraphDiscount: 0.75,

package/dist/config.d.ts

@@ -32,6 +32,15 @@ export declare const THRESHOLDS: {
      *  pool below the primary dense lane; they must earn their window
      *  slot under the cross-encoder, not by graph membership alone. */
     readonly graphLaneDiscount: 0.75;
+    /** The entailment gate (TODO.new-era/10): the faithfulness scorer
+     *  promoted from eval-only onto the serving path. The confidence line
+     *  then states a measurement — claim support in the cited passages —
+     *  not only the source rung. Fails open (a slow or unparseable check
+     *  leaves the source-rung note unchanged). */
+    readonly entailmentGate: true;
+    readonly entailmentBudgetMs: 6000;
+    readonly entailmentSupportedFloor: 0.9;
+    readonly entailmentPartialFloor: 0.5;
     /** Concept-graph candidate discount — same rationale as the graph
      *  lane: definitional content enters discounted. */
     readonly conceptGraphDiscount: 0.75;

package/dist/entailment.d.ts

@@ -0,0 +1,5 @@
+export interface EntailmentVerdict {
+    support: "supported" | "partial" | "unsupported";
+    note: string;
+}
+export declare function entailmentVerdict(score: number, supportedFloor: number, partialFloor: number): EntailmentVerdict;

package/dist/env.d.ts

@@ -20,6 +20,7 @@ export interface Env {
     ASSETS: Fetcher;
     INDEX_VERSION: string;
     UNIT_ASSETS: R2Bucket;
+    CHAT_UPLOADS: R2Bucket;
     ANON_DAY_ASK: string;
     ANON_DAY_SEARCH: string;
     KEY_DAY_ASK_DEFAULT: string;

package/dist/openapi-surface.gen.d.ts

@@ -3,7 +3,7 @@ export interface OpenApiRoute {
     pattern: string;
     operationId: string;
 }
-export type OpenApiOperationId = "askAnonymous" | "askKeyed" | "search" | "searchKeyed" | "absence" | "absenceKeyed" | "verify" | "verifyKeyed" | "research" | "researchKeyed" | "mcp" | "datasets" | "keyUsage" | "health" | "listConversations" | "createConversation" | "getConversation" | "renameConversation" | "deleteConversation" | "appendMessage" | "shareConversation" | "getShared" | "listMemories" | "createMemory" | "deleteMemory" | "listProjects" | "createProject" | "deleteProject" | "listProjectFiles" | "attachProjectFile" | "detachProjectFile" | "laneQuery" | "laneKeyed" | "feedback" | "adminEnrich" | "adminEnrichAlias" | "adminSection" | "adminSectionAlias" | "adminVectors" | "adminCaption" | "adminJudge" | "adminJudgeAlias" | "adminRevokeKey" | "authMe" | "authLogin" | "authCallback" | "authLogout" | "authLogoutLink" | "adminStats" | "adminListKeys" | "adminCreateKey";
+export type OpenApiOperationId = "askAnonymous" | "askKeyed" | "search" | "searchKeyed" | "absence" | "absenceKeyed" | "verify" | "verifyKeyed" | "research" | "researchKeyed" | "mcp" | "datasets" | "keyUsage" | "health" | "listConversations" | "createConversation" | "getConversation" | "renameConversation" | "deleteConversation" | "appendMessage" | "shareConversation" | "getShared" | "uploadAttachment" | "listAttachments" | "getAttachment" | "deleteAttachment" | "listMemories" | "createMemory" | "deleteMemory" | "listProjects" | "createProject" | "deleteProject" | "listProjectFiles" | "attachProjectFile" | "detachProjectFile" | "laneQuery" | "laneKeyed" | "feedback" | "adminEnrich" | "adminEnrichAlias" | "adminSection" | "adminSectionAlias" | "adminVectors" | "adminCaption" | "adminJudge" | "adminJudgeAlias" | "adminRevokeKey" | "authMe" | "authLogin" | "authCallback" | "authLogout" | "authLogoutLink" | "adminStats" | "adminListKeys" | "adminCreateKey";
 export declare const OPENAPI_SURFACE: readonly (Omit<OpenApiRoute, "operationId"> & {
     operationId: OpenApiOperationId;
 })[];

package/dist/openapi-types.d.ts

@@ -368,6 +368,51 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/attachments": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List the member's attachments */
+        get: operations["listAttachments"];
+        put?: never;
+        /**
+         * Upload an image attachment
+         * @description Stores a member-uploaded image (PNG, JPEG, WebP or GIF, at most 4 MB) and returns its identifier. The attachment persists until the member deletes it. The content is verified from its bytes, never from a declared type. The body carries the image as a data URL — the same shape the composer produces.
+         */
+        post: operations["uploadAttachment"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/attachments/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Read one attachment's image
+         * @description Streams the stored image. The response is 404 for a foreign identifier — ownership is checked on every fetch, and a file belonging to another account is indistinguishable from a missing one.
+         */
+        get: operations["getAttachment"];
+        put?: never;
+        post?: never;
+        /**
+         * Delete an attachment
+         * @description Removes the stored object and its record. Stored until deleted — and this deletes it.
+         */
+        delete: operations["deleteAttachment"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/memories": {
         parameters: {
             query?: never;
@@ -1479,6 +1524,110 @@ export interface operations {
             };
         };
     };
+    listAttachments: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The attachment identifiers, newest first. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    uploadAttachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description The image as a data URL. */
+                    data_url: string;
+                };
+            };
+        };
+        responses: {
+            /** @description The attachment's identifier. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The content is not an allowed image, or exceeds the size cap. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    getAttachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The image bytes. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description No such attachment owned by the caller. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    deleteAttachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Deleted. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description No such attachment owned by the caller. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     listMemories: {
         parameters: {
             query?: never;

package/dist/search-KNB2S2PS.js

@@ -0,0 +1,12 @@
+import {
+  handleSearch
+} from "./chunk-DMIOBGQU.js";
+import "./chunk-VVLNUHW2.js";
+import "./chunk-JWTIPQ4L.js";
+import "./chunk-A3QHHUN5.js";
+import "./chunk-O6VZIDPW.js";
+import "./chunk-Z24IAKB6.js";
+import "./chunk-3FYJM7LH.js";
+export {
+  handleSearch
+};

package/dist/worker_mcp/src/index.js

@@ -1,7 +1,7 @@
 import {
   authenticate
-} from "../../chunk-R2V3X6SQ.js";
-import "../../chunk-V46XM2GU.js";
+} from "../../chunk-JWTIPQ4L.js";
+import "../../chunk-Z24IAKB6.js";
 import {
   P,
   setProfile

package/dist/worker_public/src/config.js

@@ -16,7 +16,7 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-V46XM2GU.js";
+} from "../../chunk-Z24IAKB6.js";
 import "../../chunk-3FYJM7LH.js";
 export {
   DATASETS,