@konneal/engine 0.2.55 → 0.2.57

package/dist/{ask-PJBGJIXF.js → ask-26DGSVFW.js}

@@ -1,11 +1,12 @@
 import {
   handleAsk
-} from "./chunk-DKQXJN6G.js";
+} from "./chunk-MNEUEHO7.js";
 import "./chunk-TPV5GPY2.js";
 import "./chunk-SPKPH54J.js";
 import "./chunk-A3QHHUN5.js";
 import "./chunk-LVZTWUVJ.js";
 import "./chunk-2PCUAJJO.js";
+import "./chunk-Z6JAGZAM.js";
 import "./chunk-3FYJM7LH.js";
 export {
   handleAsk

package/dist/certificates-DZJJLRGU.js

@@ -0,0 +1,17 @@
+import {
+  buildRegisterQuery,
+  isRegisterShaped,
+  queryFamily,
+  registerNote,
+  registerTokens,
+  searchRegister
+} from "./chunk-Z6JAGZAM.js";
+import "./chunk-3FYJM7LH.js";
+export {
+  buildRegisterQuery,
+  isRegisterShaped,
+  queryFamily,
+  registerNote,
+  registerTokens,
+  searchRegister
+};

package/dist/{chunk-DKQXJN6G.js → chunk-MNEUEHO7.js}

@@ -64,6 +64,10 @@ import {
   roleModel,
   sha256Hex
 } from "./chunk-2PCUAJJO.js";
+import {
+  registerNote,
+  searchRegister
+} from "./chunk-Z6JAGZAM.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";
@@ -1864,119 +1868,84 @@ function exactCacheKey(indexVersion, gen, ns, queryHash) {
   return `a:${indexVersion}:g${gen}:${ns}:${queryHash}`;
 }
 
-// workers/worker_public/src/certificates.ts
-function isRegisterShaped(query) {
-  return /\bcertif(ied|icates?|ication)s?\b/i.test(query) && /\b(is|are|still|currently|valid|status|suspended|revoked|was|were)\b/i.test(query);
-}
-function queryFamily(query) {
-  const m = /\b([RDMB])\s?-?(\d{2,3})\b/i.exec(query);
-  return m ? `${m[1].toUpperCase()}${m[2].padStart(2, "0")}` : null;
-}
-function registerTokens(query) {
-  const stop = /* @__PURE__ */ new Set([
-    "the",
-    "a",
-    "an",
-    "is",
-    "are",
-    "was",
-    "were",
-    "still",
-    "currently",
-    "in",
-    "on",
-    "for",
-    "of",
-    "and",
-    "or",
-    "certificate",
-    "certificates",
-    "certified",
-    "certification",
-    "register",
-    "status",
-    "valid",
-    "suspended",
-    "revoked",
-    "recommendation",
-    "per",
-    "under",
-    "by",
-    "with",
-    "what",
-    "which",
-    "who",
-    "does",
-    "do",
-    "load",
-    "cell",
-    "model",
-    "manufacturer",
-    "holder",
-    "company",
-    "r",
-    "how",
-    "to",
-    "list",
-    "show"
-  ]);
-  const tokens2 = [];
-  const publisherWord = P().publisher.name.toLowerCase();
-  for (const w of query.split(/[^A-Za-z0-9&-]+/)) {
-    if (w.length < 2) continue;
-    if (stop.has(w.toLowerCase())) continue;
-    if (w.toLowerCase() === publisherWord) continue;
-    if (/^\d+$/.test(w) && w.length < 2) continue;
-    if (!tokens2.includes(w)) tokens2.push(w);
-  }
-  return tokens2.slice(0, 6);
-}
-function buildRegisterQuery(tokens2) {
-  const params = [];
-  const clauses = tokens2.map((t) => {
-    if (/^\d+$/.test(t)) {
-      const padded = `% ${t.toLowerCase()} %`;
-      params.push(t, t, padded);
-      const n1 = params.length - 2;
-      const n2 = params.length;
-      return `(model = ?${n1} OR num = ?${n1} OR (' ' || REPLACE(REPLACE(REPLACE(LOWER(model), '-', ' '), ',', ' '), '.', ' ') || ' ') LIKE ?${n2})`;
-    }
-    params.push(`%${t}%`);
-    const n = params.length;
-    return `(holder LIKE ?${n} OR model LIKE ?${n} OR num LIKE ?${n})`;
-  });
-  return {
-    sql: `SELECT num, family, holder, model, year, status FROM certificates WHERE ${clauses.join(" OR ")} LIMIT 6`,
-    params
-  };
-}
-async function searchRegister(db, query) {
-  if (!isRegisterShaped(query)) return null;
-  const tokens2 = registerTokens(query);
-  if (!tokens2.length) return null;
-  const built = buildRegisterQuery(tokens2);
-  let { sql, params } = built;
-  const family = queryFamily(query);
-  if (family) {
-    sql = sql.replace(" WHERE ", " WHERE family = ?0 AND ");
-    params.unshift(family);
+// workers/worker_public/src/tools.ts
+function parseToolCall(text) {
+  const m = /^TOOL\s+([a-z_]+)\s*(\{[^\n}]*\})?/m.exec(String(text ?? ""));
+  if (!m) return null;
+  let args = {};
+  if (m[2]) {
+    try {
+      args = JSON.parse(m[2]);
+    } catch {
+      return null;
+    }
+  } else if (/^TOOL\s+[a-z_]+\s*\{/m.test(String(text ?? ""))) {
+    return null;
   }
+  return { name: m[1].toLowerCase(), args };
+}
+var TOOL_DECLARATION = `You may use one tool before answering, by writing a single line:
+TOOL register_search {"query": "manufacturer and model to look up"}
+The worker runs it against the certificate register (a snapshot) and returns the matching rows, or the exact no-match statement for the string you asked. Use it when the question turns on certification standing and the holder is known \u2014 including from a photograph. Then answer, phrasing the tool's result as what it returned (the searched string stays visible in your answer). If you do not need the tool, answer directly without the line.`;
+async function runTool(db, call) {
+  if (call.name !== "register_search") return null;
+  const query = String(call.args?.query ?? "").trim().slice(0, 160);
+  if (!query) return null;
+  const { searchRegister: searchRegister2, registerNote: registerNote2 } = await import("./certificates-DZJJLRGU.js");
+  const reg = await searchRegister2(db, query);
+  const output = reg?.rows?.length ? registerNote2(reg.rows) : `No certificate was found for "${query}" in the certificates database (the register snapshot). State this as the search's result, with the searched string visible.`;
+  return { name: call.name, query, output };
+}
+function toolNote(r) {
+  return `The ${r.name} tool returned, for the query "${r.query}":
+${r.output}`;
+}
+
+// workers/worker_public/prompts/nameplate.md
+var nameplate_default = `You read instrument nameplates. From the photograph, extract the
+manufacturer's name exactly as printed and the model designation exactly
+as printed. Answer with ONLY a JSON object on one line:
+
+{"manufacturer": "\u2026", "model": "\u2026"}
+
+If the photograph shows no manufacturer or no model, use null for the
+missing value. Never guess beyond what is printed.
+`;
+
+// workers/worker_public/src/nameplate-parse.ts
+function parseNameplate(text) {
+  const m = /\{[^{}]*\}/.exec(String(text ?? ""));
+  if (!m) return null;
   try {
-    const res = await db.prepare(sql).bind(...params).all();
-    return { rows: res.results ?? [], tokens: tokens2 };
+    const j = JSON.parse(m[0]);
+    const clean = (v) => typeof v === "string" && v.trim() ? v.trim().slice(0, 80) : null;
+    const out = { manufacturer: clean(j.manufacturer), model: clean(j.model) };
+    return out.manufacturer || out.model ? out : null;
   } catch {
-    return { rows: [], tokens: tokens2 };
+    return null;
   }
 }
-function registerNote(rows) {
-  if (!rows.length) {
-    return `Certificate register: NO certificate matching the asked holder or model appears in the ${P().publisher.name}-CS register snapshot. State plainly that no such certificate is in this register, and that the register is a snapshot rather than the live certification status.`;
+function nameplateRegisterQuery(np, question) {
+  const fam = /\b([RDMB])\s?-?(\d{2,3})\b/i.exec(question);
+  return [np.manufacturer, np.model, fam ? `${fam[1]} ${fam[2]}` : null].filter(Boolean).join(" ");
+}
+
+// workers/worker_public/src/nameplate.ts
+async function extractNameplate(ai, model, image) {
+  try {
+    const res = await ai.run(model, {
+      messages: [
+        { role: "system", content: nameplate_default.trimEnd() },
+        { role: "user", content: [{ type: "image_url", image_url: { url: image } }] }
+      ],
+      max_tokens: 512,
+      reasoning_effort: "low"
+    });
+    const text = typeof res?.response === "string" ? res.response : res?.choices?.[0]?.message?.content;
+    return parseNameplate(text ?? "");
+  } catch {
+    return null;
   }
-  const lines = rows.map((r) => `- ${r.num}: holder ${r.holder}, model "${r.model}"${r.year ? `, issued ${r.year}` : ""} \u2014 status ${r.status}`);
-  return [
-    "Certificate register \u2014 the following certificates matched the asked holder or model. Quote the certificate number, the holder and the status verbatim; the register is a snapshot, so qualify any statement about current certification accordingly.",
-    ...lines
-  ].join("\n");
 }
 
 // workers/worker_public/src/ask.ts
@@ -2332,7 +2301,17 @@ async function handleAsk(env, ctx, req, tier, key) {
   console.log("understand:", understanding?.intent ?? "null", understanding?.doc_number ? `doc#${understanding.doc_number}${understanding.edition ? "@" + understanding.edition : ""}` : "nodoc", "|", q.query.slice(0, 50));
   const graphDocNumbers = await graphExpand(env, understanding);
   const eNote = await editionNote(env, understanding);
-  const register = await searchRegister(env.DB, q.query);
+  let register = await searchRegister(env.DB, q.query);
+  if (withImage && !register?.rows?.length && /certificate|certified|certification/i.test(q.query)) {
+    const np = await extractNameplate(env.AI, MODELS.member, withImage);
+    if (np?.manufacturer) {
+      const bridged = await searchRegister(env.DB, nameplateRegisterQuery(np, q.query));
+      if (bridged?.rows?.length) {
+        register = bridged;
+        console.log("nameplate-bridge:", np.manufacturer, np.model ?? "", "\u2192", bridged.rows.length, "register rows");
+      }
+    }
+  }
   console.log("register-search:", JSON.stringify({ shaped: !!register, tokens: register?.tokens ?? null, rows: register?.rows?.length ?? null, first: register?.rows?.[0]?.num ?? null }));
   const regNote = register ? registerNote(register.rows) : void 0;
   if (understanding?.intent === "conversational") {
@@ -2686,6 +2665,27 @@ Answer account questions from these records ONLY: name the record when you use i
     budget
   );
   await attachFigureImages(env, messages, usedHits, q.query);
+  if (/certificate|certified|certification/i.test(q.query) && env.DB) {
+    try {
+      const probe = await env.AI.run(model, {
+        messages: [...messages.slice(0, -1), { role: "user", content: `${TOOL_DECLARATION}
+
+${q.query}` }],
+        max_tokens: 300,
+        reasoning_effort: "low"
+      });
+      const probeText = typeof probe?.response === "string" ? probe.response : probe?.choices?.[0]?.message?.content ?? "";
+      const call = parseToolCall(probeText);
+      if (call) {
+        const result = await runTool(env.DB, call);
+        if (result) {
+          messages.push({ role: "system", content: toolNote(result) });
+          console.log("agent-tool:", result.name, JSON.stringify(result.query), "->", result.output.slice(0, 80));
+        }
+      }
+    } catch {
+    }
+  }
   if (withImage) {
     const wantsMarkings = /\b(mark(ing|ings)?|nameplate|label|inscription|engrav|sticker|plate)\b|certificat/i.test(q.query);
     const last = messages[messages.length - 1];

package/dist/chunk-Z6JAGZAM.js

@@ -0,0 +1,127 @@
+import {
+  P
+} from "./chunk-3FYJM7LH.js";
+
+// workers/worker_public/src/certificates.ts
+function isRegisterShaped(query) {
+  return /\bcertif(ied|icates?|ication)s?\b/i.test(query) && /\b(is|are|still|currently|valid|status|suspended|revoked|was|were|have|has|hold|holds|possess|carry|got)\b/i.test(query);
+}
+function queryFamily(query) {
+  const m = /\b([RDMB])\s?-?(\d{2,3})\b/i.exec(query);
+  return m ? `${m[1].toUpperCase()}${m[2].padStart(2, "0")}` : null;
+}
+function registerTokens(query) {
+  const stop = /* @__PURE__ */ new Set([
+    "the",
+    "a",
+    "an",
+    "is",
+    "are",
+    "was",
+    "were",
+    "still",
+    "currently",
+    "in",
+    "on",
+    "for",
+    "of",
+    "and",
+    "or",
+    "certificate",
+    "certificates",
+    "certified",
+    "certification",
+    "register",
+    "status",
+    "valid",
+    "suspended",
+    "revoked",
+    "recommendation",
+    "per",
+    "under",
+    "by",
+    "with",
+    "what",
+    "which",
+    "who",
+    "does",
+    "do",
+    "load",
+    "cell",
+    "model",
+    "manufacturer",
+    "holder",
+    "company",
+    "r",
+    "how",
+    "to",
+    "list",
+    "show"
+  ]);
+  const tokens = [];
+  const publisherWord = P().publisher.name.toLowerCase();
+  for (const w of query.split(/[^A-Za-z0-9&-]+/)) {
+    if (w.length < 2) continue;
+    if (stop.has(w.toLowerCase())) continue;
+    if (w.toLowerCase() === publisherWord) continue;
+    if (/^\d+$/.test(w) && w.length < 2) continue;
+    if (!tokens.includes(w)) tokens.push(w);
+  }
+  return tokens.slice(0, 6);
+}
+function buildRegisterQuery(tokens) {
+  const params = [];
+  const clauses = tokens.map((t) => {
+    if (/^\d+$/.test(t)) {
+      const padded = `% ${t.toLowerCase()} %`;
+      params.push(t, t, padded);
+      const n1 = params.length - 2;
+      const n2 = params.length;
+      return `(model = ?${n1} OR num = ?${n1} OR (' ' || REPLACE(REPLACE(REPLACE(LOWER(model), '-', ' '), ',', ' '), '.', ' ') || ' ') LIKE ?${n2})`;
+    }
+    params.push(`%${t}%`);
+    const n = params.length;
+    return `(holder LIKE ?${n} OR model LIKE ?${n} OR num LIKE ?${n})`;
+  });
+  return {
+    sql: `SELECT num, family, holder, model, year, status FROM certificates WHERE ${clauses.join(" OR ")} LIMIT 6`,
+    params
+  };
+}
+async function searchRegister(db, query) {
+  if (!isRegisterShaped(query)) return null;
+  const tokens = registerTokens(query);
+  if (!tokens.length) return null;
+  const built = buildRegisterQuery(tokens);
+  let { sql, params } = built;
+  const family = queryFamily(query);
+  if (family) {
+    sql = sql.replace(" WHERE ", " WHERE family = ?0 AND ");
+    params.unshift(family);
+  }
+  try {
+    const res = await db.prepare(sql).bind(...params).all();
+    return { rows: res.results ?? [], tokens };
+  } catch {
+    return { rows: [], tokens };
+  }
+}
+function registerNote(rows) {
+  if (!rows.length) {
+    return `Certificate register: NO certificate matching the asked holder or model appears in the ${P().publisher.name}-CS register snapshot. State plainly that no such certificate is in this register, and that the register is a snapshot rather than the live certification status.`;
+  }
+  const lines = rows.map((r) => `- ${r.num}: holder ${r.holder}, model "${r.model}"${r.year ? `, issued ${r.year}` : ""} \u2014 status ${r.status}`);
+  return [
+    "Certificate register \u2014 the following certificates matched the asked holder or model. Quote the certificate number, the holder and the status verbatim; the register is a snapshot, so qualify any statement about current certification accordingly.",
+    ...lines
+  ].join("\n");
+}
+
+export {
+  isRegisterShaped,
+  queryFamily,
+  registerTokens,
+  buildRegisterQuery,
+  searchRegister,
+  registerNote
+};

package/dist/nameplate-parse.d.ts

@@ -0,0 +1,8 @@
+export interface Nameplate {
+    manufacturer: string | null;
+    model: string | null;
+}
+export declare function parseNameplate(text: string): Nameplate | null;
+/** The register query the extraction feeds: the nameplate's tokens lead,
+ *  the question's family (if named) scopes. */
+export declare function nameplateRegisterQuery(np: Nameplate, question: string): string;

package/dist/nameplate.d.ts

@@ -0,0 +1,5 @@
+import { nameplateRegisterQuery, type Nameplate } from "./nameplate-parse.ts";
+export type { Nameplate };
+export { nameplateRegisterQuery };
+export declare function extractNameplate(ai: any, model: string, image: string): Promise<Nameplate | null>;
+export declare const nameplateModel: () => "@cf/zai-org/glm-5.3-flash";

package/dist/prompts/nameplate.md

@@ -0,0 +1,8 @@
+You read instrument nameplates. From the photograph, extract the
+manufacturer's name exactly as printed and the model designation exactly
+as printed. Answer with ONLY a JSON object on one line:
+
+{"manufacturer": "…", "model": "…"}
+
+If the photograph shows no manufacturer or no model, use null for the
+missing value. Never guess beyond what is printed.

package/dist/tools.d.ts

@@ -0,0 +1,18 @@
+export interface ToolCall {
+    name: string;
+    args: Record<string, unknown>;
+}
+export interface ToolResult {
+    name: string;
+    query: string;
+    output: string;
+}
+/** The strict protocol: a line `TOOL register_search {"query": "…"}`.
+ *  Plain regex parse — no JSON mode needed, tolerant of surrounding
+ *  prose (the model may talk around the call). */
+export declare function parseToolCall(text: string): ToolCall | null;
+export declare const TOOL_DECLARATION = "You may use one tool before answering, by writing a single line:\nTOOL register_search {\"query\": \"manufacturer and model to look up\"}\nThe worker runs it against the certificate register (a snapshot) and returns the matching rows, or the exact no-match statement for the string you asked. Use it when the question turns on certification standing and the holder is known \u2014 including from a photograph. Then answer, phrasing the tool's result as what it returned (the searched string stays visible in your answer). If you do not need the tool, answer directly without the line.";
+export declare function runTool(db: any, call: ToolCall): Promise<ToolResult | null>;
+/** The attributed injection: the answer model sees what the tool
+ *  returned, for the string it asked — never a standing claim. */
+export declare function toolNote(r: ToolResult): string;

package/dist/worker_public/src/index.js

@@ -1,6 +1,3 @@
-import {
-  handleSearch
-} from "../../chunk-FLNX4O7C.js";
 import {
   bindModelNode,
   checkQuoteAnchors,
@@ -9,7 +6,10 @@ import {
   modelGroundingBlock,
   scoreFaithfulness,
   scoreJudge
-} from "../../chunk-DKQXJN6G.js";
+} from "../../chunk-MNEUEHO7.js";
+import {
+  handleSearch
+} from "../../chunk-FLNX4O7C.js";
 import {
   buildMessages,
   cfBlobs,
@@ -63,6 +63,7 @@ import {
   sha256Hex,
   today
 } from "../../chunk-2PCUAJJO.js";
+import "../../chunk-Z6JAGZAM.js";
 import {
   P,
   setProfile
@@ -958,7 +959,7 @@ async function handleMcp(env, ctx, req, tier, key) {
       // stream:false forces the JSON lane (anon defaults to SSE)
       body: JSON.stringify({ ...args, stream: false })
     });
-    const res = name === "ask" ? await (await import("../../ask-PJBGJIXF.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-PBOODCMQ.js")).handleSearch(env, ctx, inner, tier, key);
+    const res = name === "ask" ? await (await import("../../ask-26DGSVFW.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-PBOODCMQ.js")).handleSearch(env, ctx, inner, tier, key);
     return res.json().catch(() => ({ error: { message: "tool transport failed", status: res.status } }));
   });
   if (out.ok && "accepted" in out) return new Response(null, { status: 202 });

package/package.json

@@ -27,7 +27,7 @@
     "playwright": "^1.62.1",
     "yaml": "^2.9.1"
   },
-  "version": "0.2.55",
+  "version": "0.2.57",
   "description": "The Konneal engine: the publisher-agnostic build pipeline and API plane for standards intelligence (retrieval, answer contract, verdicts, evaluation).",
   "license": "BSD-3-Clause",
   "type": "module",

package/workers/worker_public/prompts/nameplate.md

@@ -0,0 +1,8 @@
+You read instrument nameplates. From the photograph, extract the
+manufacturer's name exactly as printed and the model designation exactly
+as printed. Answer with ONLY a JSON object on one line:
+
+{"manufacturer": "…", "model": "…"}
+
+If the photograph shows no manufacturer or no model, use null for the
+missing value. Never guess beyond what is printed.

package/workers/worker_public/src/ask.ts

@@ -40,6 +40,8 @@ import { json, err, corsHeaders, readJson, validateQuery, type ApiKey } from "./
 import { clientIp, checkQuota, telemetry } from "./quota";
 import { graphExpand, editionNote } from "./graph";
 import { registerNote, searchRegister } from "./certificates";
+import { TOOL_DECLARATION, parseToolCall, runTool, toolNote } from "./tools";
+import { extractNameplate, nameplateRegisterQuery } from "./nameplate.ts";
 import { P } from "./profile.ts";
 
 /** User-uploaded image for multimodal questions: a data URL
@@ -619,7 +621,21 @@ let convEntities: Array<{ entity: string; kind: string }> = [];
   // register-shaped question queries the D1 table directly and the rows
   // join the prompt as an authoritative note — exact matches, never a
   // similarity guess about certification standing
-  const register = await searchRegister(env.DB, q.query);
+  let register = await searchRegister(env.DB, q.query);
+  // the nameplate bridge (TODO.new-era/6's image lane): a certificate
+  // question WITH a photograph carries its manufacturer in the pixels —
+  // one vision call extracts it, and those tokens re-query the register
+  // so the answer cites the actual certificate rows
+  if (withImage && !register?.rows?.length && /certificate|certified|certification/i.test(q.query)) {
+    const np = await extractNameplate((env as any).AI, MODELS.member, withImage);
+    if (np?.manufacturer) {
+      const bridged = await searchRegister(env.DB, nameplateRegisterQuery(np, q.query));
+      if (bridged?.rows?.length) {
+        register = bridged;
+        console.log("nameplate-bridge:", np.manufacturer, np.model ?? "", "→", bridged.rows.length, "register rows");
+      }
+    }
+  }
   console.log("register-search:", JSON.stringify({ shaped: !!register, tokens: register?.tokens ?? null, rows: register?.rows?.length ?? null, first: register?.rows?.[0]?.num ?? null }));
   const regNote = register ? registerNote(register.rows) : undefined;
 
@@ -1132,6 +1148,31 @@ let convEntities: Array<{ entity: string; kind: string }> = [];
     budget,
   );
   await attachFigureImages(env, messages, usedHits, q.query);
+  // the agent loop (the owner's 2026-09-28 direction): ONE bounded tool
+  // round, armed only where a tool can help. The model may call
+  // register_search through the strict line protocol; the worker
+  // executes it deterministically and the ATTRIBUTED result joins the
+  // messages — what the tool returned, for the string it asked.
+  if (/certificate|certified|certification/i.test(q.query) && env.DB) {
+    try {
+      const probe = await (env as any).AI.run(model, {
+        messages: [...messages.slice(0, -1), { role: "user", content: `${TOOL_DECLARATION}\n\n${q.query}` }],
+        max_tokens: 300,
+        reasoning_effort: "low",
+      });
+      const probeText = typeof probe?.response === "string" ? probe.response : probe?.choices?.[0]?.message?.content ?? "";
+      const call = parseToolCall(probeText);
+      if (call) {
+        const result = await runTool(env.DB, call);
+        if (result) {
+          messages.push({ role: "system", content: toolNote(result) });
+          console.log("agent-tool:", result.name, JSON.stringify(result.query), "->", result.output.slice(0, 80));
+        }
+      }
+    } catch {
+      /* the loop is optional — the answer proceeds without the tool */
+    }
+  }
   if (withImage) {
     // the user's own image rides on the question message — retrieval stays
     // text-driven; the answer model reads the image as question context.

package/workers/worker_public/src/certificates.ts

@@ -22,7 +22,7 @@ export interface RegisterRow {
  *  trigger the citation-graph notes already use (query-shaped notes,
  *  never a router). */
 export function isRegisterShaped(query: string): boolean {
-  return /\bcertif(ied|icates?|ication)s?\b/i.test(query) && /\b(is|are|still|currently|valid|status|suspended|revoked|was|were)\b/i.test(query);
+  return /\bcertif(ied|icates?|ication)s?\b/i.test(query) && /\b(is|are|still|currently|valid|status|suspended|revoked|was|were|have|has|hold|holds|possess|carry|got)\b/i.test(query);
 }
 
 /** Search tokens: words that can identify a holder or a model — words of

package/workers/worker_public/src/nameplate-parse.ts

@@ -0,0 +1,29 @@
+// The nameplate bridge's pure half (TODO.new-era/6's image lane): parse
+// the vision call's answer into {manufacturer, model}. Lives apart from
+// the AI-call module so the plain-node suites can exercise it (the
+// prompt is a bundled .md, which only esbuild can load).
+
+export interface Nameplate {
+  manufacturer: string | null;
+  model: string | null;
+}
+
+export function parseNameplate(text: string): Nameplate | null {
+  const m = /\{[^{}]*\}/.exec(String(text ?? ""));
+  if (!m) return null;
+  try {
+    const j = JSON.parse(m[0]) as { manufacturer?: unknown; model?: unknown };
+    const clean = (v: unknown) => (typeof v === "string" && v.trim() ? v.trim().slice(0, 80) : null);
+    const out = { manufacturer: clean(j.manufacturer), model: clean(j.model) };
+    return out.manufacturer || out.model ? out : null;
+  } catch {
+    return null;
+  }
+}
+
+/** The register query the extraction feeds: the nameplate's tokens lead,
+ *  the question's family (if named) scopes. */
+export function nameplateRegisterQuery(np: Nameplate, question: string): string {
+  const fam = /\b([RDMB])\s?-?(\d{2,3})\b/i.exec(question);
+  return [np.manufacturer, np.model, fam ? `${fam[1]} ${fam[2]}` : null].filter(Boolean).join(" ");
+}

package/workers/worker_public/src/nameplate.ts

@@ -0,0 +1,33 @@
+// The nameplate bridge (TODO.new-era/6, the image lane): a certificate
+// question that arrives WITH a photograph carries its manufacturer only
+// in the pixels. A single low-effort vision call extracts the printed
+// manufacturer and model, and those tokens feed the certificate
+// register's D1 lane — so "does this load cell's manufacturer hold the
+// certificate" answers with the actual register rows instead of advice.
+// The shape rules are the 2026-09-09 multimodal findings: the image
+// rides its OWN short user message, never a long passage.
+import nameplatePrompt from "../prompts/nameplate.md";
+import { parseNameplate, nameplateRegisterQuery, type Nameplate } from "./nameplate-parse.ts";
+import { MODELS } from "./config.ts";
+
+export type { Nameplate };
+export { nameplateRegisterQuery };
+
+export async function extractNameplate(ai: any, model: string, image: string): Promise<Nameplate | null> {
+  try {
+    const res: any = await ai.run(model, {
+      messages: [
+        { role: "system", content: nameplatePrompt.trimEnd() },
+        { role: "user", content: [{ type: "image_url", image_url: { url: image } }] },
+      ],
+      max_tokens: 512,
+      reasoning_effort: "low",
+    });
+    const text = typeof res?.response === "string" ? res.response : res?.choices?.[0]?.message?.content;
+    return parseNameplate(text ?? "");
+  } catch {
+    return null; // the bridge is optional — the ask never depends on it
+  }
+}
+
+export const nameplateModel = () => MODELS.member;

package/workers/worker_public/src/tools.ts

@@ -0,0 +1,55 @@
+// The agent interface's tool plane (the owner's 2026-09-28 direction): a
+// bounded tool loop on the serving path. The model may invoke named
+// tools through a strict line protocol; the worker executes each
+// deterministically and the result rides back ATTRIBUTED — every tool
+// output is phrased as what the tool returned, and the searched string
+// is always visible in the answer. One round per ask, armed only where
+// a tool can help (the certificate intent, v1).
+
+export interface ToolCall {
+  name: string;
+  args: Record<string, unknown>;
+}
+
+export interface ToolResult {
+  name: string;
+  query: string;
+  output: string;
+}
+
+/** The strict protocol: a line `TOOL register_search {"query": "…"}`.
+ *  Plain regex parse — no JSON mode needed, tolerant of surrounding
+ *  prose (the model may talk around the call). */
+export function parseToolCall(text: string): ToolCall | null {
+  const m = /^TOOL\s+([a-z_]+)\s*(\{[^\n}]*\})?/m.exec(String(text ?? "")); // line-anchored, case-sensitive: prose never trips it
+  if (!m) return null;
+  let args: Record<string, unknown> = {};
+  if (m[2]) {
+    try { args = JSON.parse(m[2]); } catch { return null; }
+  } else if (/^TOOL\s+[a-z_]+\s*\{/m.test(String(text ?? ""))) {
+    return null; // a malformed call (opened, never closed) is not a call
+  }
+  return { name: m[1].toLowerCase(), args };
+}
+
+export const TOOL_DECLARATION = `You may use one tool before answering, by writing a single line:
+TOOL register_search {"query": "manufacturer and model to look up"}
+The worker runs it against the certificate register (a snapshot) and returns the matching rows, or the exact no-match statement for the string you asked. Use it when the question turns on certification standing and the holder is known — including from a photograph. Then answer, phrasing the tool's result as what it returned (the searched string stays visible in your answer). If you do not need the tool, answer directly without the line.`;
+
+export async function runTool(db: any, call: ToolCall): Promise<ToolResult | null> {
+  if (call.name !== "register_search") return null;
+  const query = String(call.args?.query ?? "").trim().slice(0, 160);
+  if (!query) return null;
+  const { searchRegister, registerNote } = await import("./certificates");
+  const reg = await searchRegister(db, query);
+  const output = reg?.rows?.length
+    ? registerNote(reg.rows)
+    : `No certificate was found for "${query}" in the certificates database (the register snapshot). State this as the search's result, with the searched string visible.`;
+  return { name: call.name, query, output };
+}
+
+/** The attributed injection: the answer model sees what the tool
+ *  returned, for the string it asked — never a standing claim. */
+export function toolNote(r: ToolResult): string {
+  return `The ${r.name} tool returned, for the query "${r.query}":\n${r.output}`;
+}