@konneal/engine 0.2.73 → 0.2.75

package/dist/{ask-MFFOHVQ2.js → ask-AJJCWGW6.js}

@@ -1,12 +1,12 @@
 import {
   handleAsk
-} from "./chunk-V7PEVNNO.js";
-import "./chunk-LL3LWBZH.js";
+} from "./chunk-XJPJO376.js";
+import "./chunk-7HWJOFTQ.js";
 import "./chunk-SPKPH54J.js";
 import "./chunk-A3QHHUN5.js";
 import "./chunk-LVZTWUVJ.js";
 import "./chunk-2PCUAJJO.js";
-import "./chunk-3IRX4B7Q.js";
+import "./chunk-VGVTIPFW.js";
 import "./chunk-3FYJM7LH.js";
 export {
   handleAsk

package/dist/{certificates-EMHFAUWC.js → certificates-DNRUOYRF.js}

@@ -6,7 +6,7 @@ import {
   registerNote,
   registerTokens,
   searchRegister
-} from "./chunk-3IRX4B7Q.js";
+} from "./chunk-VGVTIPFW.js";
 import "./chunk-3FYJM7LH.js";
 export {
   buildRegisterQuery,

package/dist/{chunk-LL3LWBZH.js → chunk-7HWJOFTQ.js}

@@ -45,13 +45,16 @@ async function rerank(ai, model, query, texts) {
 async function generateOnce(env, model, messages, effort) {
   for (let attempt2 = 0; attempt2 < 2; attempt2++) {
     try {
-      const res = await env.AI.run(model, {
-        messages,
-        max_tokens: effortBudget(effort ?? answerEffort(env)),
-        reasoning_effort: effort ?? answerEffort(env),
-        temperature: 0.6,
-        top_p: 0.95
-      });
+      const res = await Promise.race([
+        env.AI.run(model, {
+          messages,
+          max_tokens: effortBudget(effort ?? answerEffort(env)),
+          reasoning_effort: effort ?? answerEffort(env),
+          temperature: 0.6,
+          top_p: 0.95
+        }),
+        new Promise((r) => setTimeout(() => r(null), 12e4))
+      ]);
       if (typeof res?.response === "string" && res.response.trim()) return res.response;
       if (typeof res?.choices?.[0]?.message?.content === "string" && res.choices[0].message.content.trim()) return res.choices[0].message.content;
       if (attempt2 === 0) console.error("generate returned empty:", model);

package/dist/{chunk-OXTRNMTZ.js → chunk-KO6DRI7C.js}

@@ -7,7 +7,7 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "./chunk-LL3LWBZH.js";
+} from "./chunk-7HWJOFTQ.js";
 import {
   corsHeaders,
   err,

package/dist/{chunk-3IRX4B7Q.js → chunk-VGVTIPFW.js}

@@ -121,7 +121,7 @@ function registerNote(rows) {
   ].join("\n");
 }
 function certificateLinks(rows) {
-  const links = rows.filter((r) => r.pdf_key).map((r) => `- ${r.num}: https://www.ommisa.org/cert-pdf/${r.pdf_key}`);
+  const links = rows.filter((r) => r.pdf_key).map((r) => `- ${r.num}: https://www.oimlsmart.org/cert-pdf/${r.pdf_key}`);
   return links.length ? `The certificates' documents:
 ${links.join("\n")}` : "";
 }

package/dist/{chunk-V7PEVNNO.js → chunk-XJPJO376.js}

@@ -39,7 +39,7 @@ import {
   tokenBudget,
   understandQuery,
   usageTotal
-} from "./chunk-LL3LWBZH.js";
+} from "./chunk-7HWJOFTQ.js";
 import {
   corsHeaders,
   err,
@@ -72,7 +72,7 @@ import {
   certificateLinks,
   registerNote,
   searchRegister
-} from "./chunk-3IRX4B7Q.js";
+} from "./chunk-VGVTIPFW.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";
@@ -1896,7 +1896,7 @@ async function runTool(db, call) {
   if (call.name !== "register_search") return null;
   const query = String(call.args?.query ?? "").trim().slice(0, 160);
   if (!query) return null;
-  const { searchRegister: searchRegister2, registerNote: registerNote2 } = await import("./certificates-EMHFAUWC.js");
+  const { searchRegister: searchRegister2, registerNote: registerNote2 } = await import("./certificates-DNRUOYRF.js");
   const reg = await searchRegister2(db, query, true);
   const output = reg?.rows?.length ? registerNote2(reg.rows) : `No certificate was found for "${query}" in the certificates database (the register snapshot). State this as the search's result, with the searched string visible.`;
   return { name: call.name, query, output };
@@ -1992,11 +1992,18 @@ function catalogNote(anchors) {
   return `The COMPLETE name index of the platform's operations:
 ${anchors.map((a) => `- ${a}`).join("\n")}`;
 }
-async function operationsCatalogNote(db, query) {
-  if (!isOperationIntent(query)) return void 0;
+async function operationsLane(db, query) {
+  if (!isOperationIntent(query)) return { matched: [] };
+  for (let attempt = 0; attempt < 2; attempt++) {
+    const lane = await operationsLaneOnce(db, query, attempt > 0);
+    if (lane !== void 0) return lane;
+  }
+  return { matched: [] };
+}
+async function operationsLaneOnce(db, query, retried) {
   try {
-    const rows = (await db.prepare("SELECT clause_anchor AS anchor, substr(text, 1, 300) AS text FROM chunks WHERE corpus = 'smart-ops' AND clause_anchor IS NOT NULL ORDER BY clause_anchor").all()).results ?? [];
-    const opRows = rows.map((r) => ({ anchor: String(r.anchor ?? ""), text: String(r.text ?? "") })).filter((r) => r.anchor);
+    const rows = (await db.prepare("SELECT clause_anchor AS anchor, substr(text, 1, 300) AS text, docidentifier FROM chunks WHERE corpus = 'smart-ops' AND clause_anchor IS NOT NULL ORDER BY clause_anchor").all()).results ?? [];
+    const opRows = rows.map((r) => ({ anchor: String(r.anchor ?? ""), text: String(r.text ?? ""), docidentifier: String(r.docidentifier ?? "Platform API") })).filter((r) => r.anchor);
     const matched = matchOperations(query, opRows);
     const parts = [];
     if (matched.length) {
@@ -2004,8 +2011,10 @@ async function operationsCatalogNote(db, query) {
 ${matched.map((m) => `- ${m.text}`).join("\n")}`);
     }
     parts.push(catalogNote(opRows.map((r) => r.anchor)));
-    return parts.filter(Boolean).join("\n\n") || void 0;
-  } catch {
+    const note = parts.filter(Boolean).join("\n\n") || void 0;
+    return { note, matched };
+  } catch (e) {
+    console.error(`operations-catalog: D1 read failed${retried ? " twice" : ""} \u2014 the note is dropped`, String(e).slice(0, 120));
     return void 0;
   }
 }
@@ -2191,7 +2200,10 @@ async function* sseTokens(stream, stats) {
   const decoder = new TextDecoder();
   let buf = "";
   while (true) {
-    const { done, value } = await reader.read();
+    const { done, value } = await Promise.race([
+      reader.read(),
+      new Promise((r) => setTimeout(() => r({ done: true }), 12e4))
+    ]);
     if (done) break;
     buf += decoder.decode(value, { stream: true });
     const lines = buf.split("\n");
@@ -2450,7 +2462,7 @@ async function handleAsk(env, ctx, req, tier, key) {
   }
   console.log("register-search:", JSON.stringify({ shaped: !!register, tokens: register?.tokens ?? null, rows: register?.rows?.length ?? null, first: register?.rows?.[0]?.num ?? null }));
   const regNote = register ? [registerNote(register.rows), certificateLinks(register.rows)].filter(Boolean).join("\n") : void 0;
-  const opsCatalog = await operationsCatalogNote(env.DB, q.query);
+  const ops = await operationsLane(env.DB, q.query);
   if (understanding?.intent === "conversational") {
     const queryHash2 = await sha256Hex(q.query);
     const messages2 = [
@@ -2796,13 +2808,31 @@ Answer account questions from these records ONLY: name the record when you use i
     return matched.length ? matched : g;
   })();
   const vocabNote = glossaryForNote.length ? "Vocabulary binding \u2014 defined terms in the indexed corpus that may name this question's subject:\n" + glossaryForNote.map((g) => `- ${g.term} (${g.docidentifier}): ${g.definition}`).join("\n") + "\nIf the question describes a symptom or behavior in everyday words, OPEN the answer by naming the matching defined term, quote its definition, and cite its defining publication; keep using that term throughout. Match TIME SCALE carefully: change under a constant load over minutes/hours is creep; change over months/years of use is span stability or durability \u2014 do not call long-term drift creep." : void 0;
+  const opsHits = ops.matched.map((m) => ({
+    id: `ops:${m.anchor}`,
+    score: 0.999,
+    metadata: {
+      doc_id: "smart-ops:catalog",
+      docidentifier: m.docidentifier ?? "Platform API",
+      doctype: "api-operation",
+      doc_number: "",
+      edition: "",
+      language: "en",
+      clause_anchor: m.anchor,
+      clause_title: `Platform operation ${m.anchor}`,
+      tier: "curated",
+      corpus: "smart-ops",
+      text_ref: ""
+    },
+    text: `${m.anchor} \u2014 ${m.text}`
+  }));
   const { messages, usedHits } = buildMessages(
     q.query,
-    hits,
+    [...opsHits, ...hits],
     q.lang,
     keptHistory,
     // stage-extracted graph facts (GraphRAG) ride the same note channel
-    [opsCatalog, processNote, eNote, regNote, contextNote(declaredCtx, docScope), accountNote, modelNote, vocabNote, memNote, machineNote, conditionNote, aggregationNote, boundaryNote, licenseNote, ...retrieved.notes ?? []].filter(Boolean).join("\n") || void 0,
+    [ops.note, processNote, eNote, regNote, contextNote(declaredCtx, docScope), accountNote, modelNote, vocabNote, memNote, machineNote, conditionNote, aggregationNote, boundaryNote, licenseNote, ...retrieved.notes ?? []].filter(Boolean).join("\n") || void 0,
     summary,
     budget
   );

package/dist/operations.d.ts

@@ -6,9 +6,26 @@ export declare function anchorWords(anchor: string): string[];
 export declare function matchOperations(query: string, rows: {
     anchor: string;
     text: string;
+    docidentifier?: string;
 }[]): {
     anchor: string;
     text: string;
+    docidentifier?: string;
 }[];
 export declare function catalogNote(anchors: string[]): string;
-export declare function operationsCatalogNote(db: any, query: string): Promise<string | undefined>;
+/** The lane's whole result: the authoritative note (matched lines +
+ *  name index) AND the matched rows themselves — the ask path rides the
+ *  matched operations as CITABLE PASSAGES, because the refusal logic
+ *  keys on passages and a side-note cannot outrank the passages'
+ *  silence (observed live 2026-09-29: the note was present and the
+ *  model still refused "the only API operation in the current context
+ *  is the blob download"). */
+export interface OperationsLane {
+    note?: string;
+    matched: {
+        anchor: string;
+        text: string;
+        docidentifier?: string;
+    }[];
+}
+export declare function operationsLane(db: any, query: string): Promise<OperationsLane>;

package/dist/{search-LN5Q7OSZ.js → search-LVUQLA3C.js}

@@ -1,7 +1,7 @@
 import {
   handleSearch
-} from "./chunk-OXTRNMTZ.js";
-import "./chunk-LL3LWBZH.js";
+} from "./chunk-KO6DRI7C.js";
+import "./chunk-7HWJOFTQ.js";
 import "./chunk-SPKPH54J.js";
 import "./chunk-A3QHHUN5.js";
 import "./chunk-LVZTWUVJ.js";

package/dist/worker_public/src/index.js

@@ -6,10 +6,10 @@ import {
   modelGroundingBlock,
   scoreFaithfulness,
   scoreJudge
-} from "../../chunk-V7PEVNNO.js";
+} from "../../chunk-XJPJO376.js";
 import {
   handleSearch
-} from "../../chunk-OXTRNMTZ.js";
+} from "../../chunk-KO6DRI7C.js";
 import {
   buildMessages,
   cfBlobs,
@@ -35,7 +35,7 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "../../chunk-LL3LWBZH.js";
+} from "../../chunk-7HWJOFTQ.js";
 import {
   authenticate,
   corsHeaders,
@@ -63,7 +63,7 @@ import {
   sha256Hex,
   today
 } from "../../chunk-2PCUAJJO.js";
-import "../../chunk-3IRX4B7Q.js";
+import "../../chunk-VGVTIPFW.js";
 import {
   P,
   setProfile
@@ -959,7 +959,7 @@ async function handleMcp(env, ctx, req, tier, key) {
       // stream:false forces the JSON lane (anon defaults to SSE)
       body: JSON.stringify({ ...args, stream: false })
     });
-    const res = name === "ask" ? await (await import("../../ask-MFFOHVQ2.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-LN5Q7OSZ.js")).handleSearch(env, ctx, inner, tier, key);
+    const res = name === "ask" ? await (await import("../../ask-AJJCWGW6.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-LVUQLA3C.js")).handleSearch(env, ctx, inner, tier, key);
     return res.json().catch(() => ({ error: { message: "tool transport failed", status: res.status } }));
   });
   if (out.ok && "accepted" in out) return new Response(null, { status: 202 });

package/package.json

@@ -27,7 +27,7 @@
     "playwright": "^1.62.1",
     "yaml": "^2.9.1"
   },
-  "version": "0.2.73",
+  "version": "0.2.75",
   "description": "The Konneal engine: the publisher-agnostic build pipeline and API plane for standards intelligence (retrieval, answer contract, verdicts, evaluation).",
   "license": "BSD-3-Clause",
   "type": "module",

package/workers/worker_public/src/ai.ts

@@ -54,13 +54,19 @@ export async function generateOnce(env: any, model: string, messages: any[], eff
   // silently blindfolds figure answers)
   for (let attempt = 0; attempt < 2; attempt++) {
     try {
-      const res: any = await env.AI.run(model, {
-        messages,
-        max_tokens: effortBudget(effort ?? answerEffort(env)),
-        reasoning_effort: effort ?? answerEffort(env),
-        temperature: 0.6,
-        top_p: 0.95,
-      });
+      // bounded: a STALLED call (no error, no response — observed live
+      // 2026-09-29, asks hanging at zero bytes for minutes) must fall
+      // through to the retry/fallback, never hang the ask forever
+      const res: any = await Promise.race([
+        env.AI.run(model, {
+          messages,
+          max_tokens: effortBudget(effort ?? answerEffort(env)),
+          reasoning_effort: effort ?? answerEffort(env),
+          temperature: 0.6,
+          top_p: 0.95,
+        }),
+        new Promise<null>((r) => setTimeout(() => r(null), 120_000)),
+      ]);
       // an EMPTY string is a failed generation, not an answer: the
       // platform intermittently returns empty bodies with a 200 (observed
       // live 2026-09-20 — answers went blank platform-wide while retrieval

package/workers/worker_public/src/ask.ts

@@ -41,7 +41,7 @@ import { chargeTokens, checkQuota, clientIp, estimateTokens, telemetry, tokenBud
 import { graphExpand, editionNote } from "./graph";
 import { registerNote, searchRegister, certificateLinks } from "./certificates";
 import { TOOL_DECLARATION, parseToolCall, runTool, toolNote } from "./tools";
-import { operationsCatalogNote } from "./operations.ts";
+import { operationsLane } from "./operations.ts";
 import { extractNameplate, nameplateRegisterQuery } from "./nameplate.ts";
 import { P } from "./profile.ts";
 
@@ -232,7 +232,12 @@ async function* sseTokens(stream: ReadableStream<Uint8Array>, stats?: { usage?:
   const decoder = new TextDecoder();
   let buf = "";
   while (true) {
-    const { done, value } = await reader.read();
+    // bounded read: a stalled stream (no error, no chunk) delivers what
+    // it has instead of hanging the ask at zero tokens
+    const { done, value } = await Promise.race([
+      reader.read(),
+      new Promise<{ done: true; value?: undefined }>((r) => setTimeout(() => r({ done: true }), 120_000)),
+    ]);
     if (done) break;
     buf += decoder.decode(value, { stream: true });
     const lines = buf.split("\n");
@@ -672,7 +677,7 @@ let convEntities: Array<{ entity: string; kind: string }> = [];
   }
   console.log("register-search:", JSON.stringify({ shaped: !!register, tokens: register?.tokens ?? null, rows: register?.rows?.length ?? null, first: register?.rows?.[0]?.num ?? null }));
   const regNote = register ? [registerNote(register.rows), certificateLinks(register.rows)].filter(Boolean).join("\n") : undefined;
-  const opsCatalog = await operationsCatalogNote(env.DB, q.query);
+  const ops = await operationsLane(env.DB, q.query);
 
   // Conversational route, decided by query UNDERSTANDING (any language, any
   // phrasing) — not string matching. No retrieval: nothing in the corpus
@@ -1177,13 +1182,34 @@ let convEntities: Array<{ entity: string; kind: string }> = [];
       glossaryForNote.map((g) => `- ${g.term} (${g.docidentifier}): ${g.definition}`).join("\n") +
       "\nIf the question describes a symptom or behavior in everyday words, OPEN the answer by naming the matching defined term, quote its definition, and cite its defining publication; keep using that term throughout. Match TIME SCALE carefully: change under a constant load over minutes/hours is creep; change over months/years of use is span stability or durability — do not call long-term drift creep."
     : undefined;
+  // the matched operations ride as CITABLE PASSAGES ahead of the
+  // retrieved hits — the refusal logic and the citation machinery key on
+  // passages, and a side-note cannot outrank the passages' silence
+  const opsHits: Hit[] = ops.matched.map((m) => ({
+    id: `ops:${m.anchor}`,
+    score: 0.999,
+    metadata: {
+      doc_id: "smart-ops:catalog",
+      docidentifier: m.docidentifier ?? "Platform API",
+      doctype: "api-operation",
+      doc_number: "",
+      edition: "",
+      language: "en",
+      clause_anchor: m.anchor,
+      clause_title: `Platform operation ${m.anchor}`,
+      tier: "curated",
+      corpus: "smart-ops",
+      text_ref: "",
+    },
+    text: `${m.anchor} — ${m.text}`,
+  }));
   const { messages, usedHits } = buildMessages(
     q.query,
-    hits,
+    [...opsHits, ...hits],
     q.lang,
     keptHistory,
     // stage-extracted graph facts (GraphRAG) ride the same note channel
-    [opsCatalog, processNote, eNote, regNote, contextNote(declaredCtx, docScope), accountNote, modelNote, vocabNote, memNote, machineNote, conditionNote, aggregationNote, boundaryNote, licenseNote, ...(retrieved.notes ?? [])].filter(Boolean).join("\n") || undefined,
+    [ops.note, processNote, eNote, regNote, contextNote(declaredCtx, docScope), accountNote, modelNote, vocabNote, memNote, machineNote, conditionNote, aggregationNote, boundaryNote, licenseNote, ...(retrieved.notes ?? [])].filter(Boolean).join("\n") || undefined,
     summary,
     budget,
   );

package/workers/worker_public/src/certificates.ts

@@ -134,7 +134,7 @@ export function registerNote(rows: RegisterRow[]): string {
  *  is in the R2 plane (TODO 7) — the user gets the document, not just
  *  the fact. */
 export function certificateLinks(rows: RegisterRow[]): string {
-  const links = rows.filter((r) => r.pdf_key).map((r) => `- ${r.num}: https://www.ommisa.org/cert-pdf/${r.pdf_key}`);
+  const links = rows.filter((r) => r.pdf_key).map((r) => `- ${r.num}: https://www.oimlsmart.org/cert-pdf/${r.pdf_key}`);
   return links.length ? `The certificates' documents:\n${links.join("\n")}` : "";
 }
 

package/workers/worker_public/src/operations.ts

@@ -38,7 +38,7 @@ export function anchorWords(anchor: string): string[] {
 
 const singular = (w: string) => (w.length > 3 && w.endsWith("s") ? w.slice(0, -1) : w);
 
-export function matchOperations(query: string, rows: { anchor: string; text: string }[]): { anchor: string; text: string }[] {
+export function matchOperations(query: string, rows: { anchor: string; text: string; docidentifier?: string }[]): { anchor: string; text: string; docidentifier?: string }[] {
   const q = query.toLowerCase();
   const stems = ACTION_STEMS.filter((s) => q.includes(s));
   const objects = query
@@ -68,19 +68,45 @@ export function catalogNote(anchors: string[]): string {
   return `The COMPLETE name index of the platform's operations:\n${anchors.map((a) => `- ${a}`).join("\n")}`;
 }
 
-export async function operationsCatalogNote(db: any, query: string): Promise<string | undefined> {
-  if (!isOperationIntent(query)) return undefined;
-  try {
-    const rows = (await db.prepare("SELECT clause_anchor AS anchor, substr(text, 1, 300) AS text FROM chunks WHERE corpus = 'smart-ops' AND clause_anchor IS NOT NULL ORDER BY clause_anchor").all()).results ?? [];
-    const opRows = (rows as any[]).map((r) => ({ anchor: String(r.anchor ?? ""), text: String(r.text ?? "") })).filter((r) => r.anchor);
+/** The lane's whole result: the authoritative note (matched lines +
+ *  name index) AND the matched rows themselves — the ask path rides the
+ *  matched operations as CITABLE PASSAGES, because the refusal logic
+ *  keys on passages and a side-note cannot outrank the passages'
+ *  silence (observed live 2026-09-29: the note was present and the
+ *  model still refused "the only API operation in the current context
+ *  is the blob download"). */
+export interface OperationsLane {
+  note?: string;
+  matched: { anchor: string; text: string; docidentifier?: string }[];
+}
+
+export async function operationsLane(db: any, query: string): Promise<OperationsLane> {
+  if (!isOperationIntent(query)) return { matched: [] };
+  // one retry, and the failure is LOUD: a silently dropped note answers
+  // an operation question with the OIML refusal (observed live 2026-09-29
+  // — a transient D1 read failed into the catch and the lane vanished)
+  for (let attempt = 0; attempt < 2; attempt++) {
+    const lane = await operationsLaneOnce(db, query, attempt > 0);
+    if (lane !== undefined) return lane;
+  }
+  return { matched: [] };
+}
+
+async function operationsLaneOnce(db: any, query: string, retried: boolean): Promise<OperationsLane | undefined> {
+    try {
+    const rows = (await db.prepare("SELECT clause_anchor AS anchor, substr(text, 1, 300) AS text, docidentifier FROM chunks WHERE corpus = 'smart-ops' AND clause_anchor IS NOT NULL ORDER BY clause_anchor").all()).results ?? [];
+    const opRows = (rows as any[]).map((r) => ({ anchor: String(r.anchor ?? ""), text: String(r.text ?? ""), docidentifier: String(r.docidentifier ?? "Platform API") })).filter((r) => r.anchor);
     const matched = matchOperations(query, opRows);
     const parts: string[] = [];
     if (matched.length) {
       parts.push(`Operations whose name or description matches the question (AUTHORITATIVE — if one matches, the answer MUST name it and cite its line; never answer that the information is missing):\n${matched.map((m) => `- ${m.text}`).join("\n")}`);
     }
     parts.push(catalogNote(opRows.map((r) => r.anchor)));
-    return parts.filter(Boolean).join("\n\n") || undefined;
-  } catch {
-    return undefined; // the lane is optional
+    const note = parts.filter(Boolean).join("\n\n") || undefined;
+    return { note, matched };
+  } catch (e) {
+    // the lane is optional — but never silent (the blind-failure lesson)
+    console.error(`operations-catalog: D1 read failed${retried ? " twice" : ""} — the note is dropped`, String(e).slice(0, 120));
+    return undefined;
   }
 }